Edit tour
Windows
Analysis Report
Iamgold-PYMPATA Policy_Enrollment2024739441.rtf
Overview
General Information
| Sample name: | Iamgold-PYMPATA Policy_Enrollment2024739441.rtf |
| Analysis ID: | 1556628 |
| MD5: | 03cd3dab4456ae5017e9bf714a1e572a |
| SHA1: | 3d6df7276f2b01204e0ce523353bdc131e73ac3f |
| SHA256: | 0eba1169393c80b84b1a49a38e88fd9ab0ccd1c99e0f7249d77eddbd2f32a351 |
| Infos: | |
 | |
Detection
| Score: | 60 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
AI detected phishing page
Antivirus detection for URL or domain
HTML page contains suspicious javascript code
Creates files inside the system directory
Deletes files inside the Windows folder
Detected non-DNS traffic on DNS port
Document contains embedded VBA macros
Document misses a certain OLE stream usually present in this Microsoft Office document type
HTML body contains low number of good links
HTML body with high number of embedded images detected
HTML page contains hidden javascript code
HTML title does not match URL
IP address seen in connection with other malware
Internet Provider seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
Javascript checks online IP of machine
Stores files to the Windows start menu directory
Suricata IDS alerts with low severity for network traffic
Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)
Classification
- System is w10x64_ra
WINWORD.EXE (PID: 6940 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \Root\Offi ce16\WINWO RD.EXE" /n "C:\Users \user\Desk top\Iamgol d-PYMPATA Policy_Enr ollment202 4739441.rt f" /o "" MD5: 1A0C2C2E7D9C4BC18E91604E9B0C7678)
chrome.exe (PID: 6672 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// s3.eu-west -1.amazona ws.com/pat nla.chiviv emie/mandl as%23%2377 374%23etik os3438%232 4737%23mad bviewmine% 23%26%23%2 6%23portca 3737%23734 7739%23737 373%233477 3%2383838% 23.html MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 7040 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2232 --fi eld-trial- handle=203 2,i,230200 2758345039 556,855839 9744438251 338,262144 --disable -features= Optimizati onGuideMod elDownload ing,Optimi zationHint s,Optimiza tionHintsF etching,Op timization TargetPred iction /pr efetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
⊘No configs have been found
⊘No yara matches
⊘No Sigma rule has matched
| Timestamp | SID | Severity | Classtype | Source IP | Source Port | Destination IP | Destination Port | Protocol |
|---|---|---|---|---|---|---|---|---|
| 2024-11-15T18:09:05.064151+0100 | 2828656 | 2 | Possible Social Engineering Attempted | 91.211.222.250 | 443 | 192.168.2.16 | 62646 | TCP |
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | SlashNext: | ||
Phishing | |
|---|
| Source: | Joe Sandbox AI: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Memory has grown: | ||
| Source: | TCP traffic: | ||
| Source: | TCP traffic: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | ASN Name: | ||
| Source: | JA3 fingerprint: | ||
| Source: | Suricata IDS: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File deleted: | Jump to behavior | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE indicator, VBA macros: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | OLE stream indicators for Word, Excel, PowerPoint, and Visio: | ||
| Source: | Classification label: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | OLE indicator, Word Document stream: | ||
| Source: | OLE indicator, Word Document stream: | ||
| Source: | OLE indicator, Word Document stream: | ||
| Source: | OLE indicator, Word Document stream: | ||
| Source: | File read: | Jump to behavior | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | Window detected: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | Initial sample: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information queried: | Jump to behavior | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | 2 Scripting | Valid Accounts | Windows Management Instrumentation | 2 Scripting | 1 Process Injection | 11 Masquerading | OS Credential Dumping | 1 Process Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | 1 Registry Run Keys / Startup Folder | 1 Registry Run Keys / Startup Folder | 1 Process Injection | LSASS Memory | 1 File and Directory Discovery | Remote Desktop Protocol | Data from Removable Media | 3 Ingress Tool Transfer | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 1 Extra Window Memory Injection | 1 Deobfuscate/Decode Files or Information | Security Account Manager | 1 System Information Discovery | SMB/Windows Admin Shares | Data from Network Shared Drive | 4 Non-Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | 1 File Deletion | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 5 Application Layer Protocol | Traffic Duplication | Data Destruction |
| Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | Network Logon Script | 1 Extra Window Memory Injection | LSA Secrets | Internet Connection Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | SlashNext | Credential Stealing type: Phishing & Social Engineering | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| s3.eu-west-1.amazonaws.com | 52.218.122.88 | true | false | unknown | |
| code.jquery.com | 151.101.194.137 | true | false | high | |
| cdnjs.cloudflare.com | 104.17.24.14 | true | false | high | |
| gambol.smarthost.pl | 91.211.222.250 | true | true | unknown | |
| challenges.cloudflare.com | 104.18.95.41 | true | false | high | |
| www.google.com | 142.250.184.228 | true | false | high | |
| api.ipify.org | 104.26.12.205 | true | false | high | |
| o365.alnassers.net | 147.79.74.176 | true | false | high |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| true |
| unknown | |
| false | high | ||
| false |
| unknown | |
| false | high | ||
| false | high | ||
| true | unknown | ||
| false |
| unknown | |
| false | high | ||
| false | high | ||
| false |
| unknown | |
| false | high | ||
| false |
| unknown |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false | high | |||
| false | high | |||
| false | high | |||
| false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 104.18.94.41 | unknown | United States | 13335 | CLOUDFLARENETUS | false | |
| 151.101.130.137 | unknown | United States | 54113 | FASTLYUS | false | |
| 147.79.74.176 | o365.alnassers.net | United States | 208485 | EKSENBILISIMTR | false | |
| 91.211.222.250 | gambol.smarthost.pl | Poland | 39566 | TRUSTNET-PL-ASPL | true | |
| 151.101.194.137 | code.jquery.com | United States | 54113 | FASTLYUS | false | |
| 142.250.184.228 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 104.17.24.14 | cdnjs.cloudflare.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 104.26.12.205 | api.ipify.org | United States | 13335 | CLOUDFLARENETUS | false | |
| 104.18.95.41 | challenges.cloudflare.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 52.218.122.88 | s3.eu-west-1.amazonaws.com | United States | 16509 | AMAZON-02US | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 104.17.25.14 | unknown | United States | 13335 | CLOUDFLARENETUS | false | |
| 172.67.74.152 | unknown | United States | 13335 | CLOUDFLARENETUS | false |
| IP |
|---|
| 192.168.2.16 |
| Joe Sandbox version: | 41.0.0 Charoite |
| Analysis ID: | 1556628 |
| Start date and time: | 2024-11-15 18:08:07 +01:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 5m 39s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 15 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | Iamgold-PYMPATA Policy_Enrollment2024739441.rtf |
| Detection: | MAL |
| Classification: | mal60.phis.winRTF@26/287@28/14 |
| EGA Information: | Failed |
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 52.109.32.97, 52.113.194.132, 184.28.90.27, 142.250.185.163, 142.250.186.142, 74.125.133.84, 34.104.35.123, 20.189.173.23, 95.101.111.179, 95.101.111.168, 88.221.110.138, 88.221.110.227, 142.250.184.227, 142.250.185.206
- Excluded domains from analysis (whitelisted): binaries.templates.cdn.office.net.edgesuite.net, slscr.update.microsoft.com, templatesmetadata.office.net.edgekey.net, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1847.dscg2.akamai.net, ecs-office.s-0005.s-msedge.net, clients2.google.com, e16604.g.akamaiedge.net, update.googleapis.com, officeclient.microsoft.com, ukw-azsc-config.officeapps.live.com, prod.fs.microsoft.com.akadns.net, clients1.google.com, ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, accounts.google.com, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, e26769.dscb.akamaiedge.net, edgedl.me.gvt1.com, s-0005.s-msedge.net, config.officeapps.live.com, metadata.templates.cdn.office.net, ecs.office.trafficmanager.net, clients.l.google.com, onedscolprdwus16.westus.cloudapp.azure.com, europe.configsvc1.live.com.
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtCreateFile calls found.
- Report size getting too big, too many NtQueryAttributesFile calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
- Report size getting too big, too many NtReadVirtualMemory calls found.
- Report size getting too big, too many NtSetInformationFile calls found.
- Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- VT rate limit hit for: Iamgold-PYMPATA Policy_Enrollment2024739441.rtf
⊘No simulations
| Source | URL |
|---|---|
| Screenshot | https://s3.eu-west-1.amazonaws.com/patnla.chivivemie/mandlas%23%2377374%23etikos3438%2324737%23madbviewmine%23%26%23%26%23portca3737%237347739%23737373%2334773%2383838%23.html |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 147.79.74.176 | Get hash | malicious | Unknown | Browse | ||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| 104.18.94.41 | Get hash | malicious | HTMLPhisher | Browse | ||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| 151.101.130.137 | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| code.jquery.com | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| s3.eu-west-1.amazonaws.com | Get hash | malicious | Unknown | Browse |
| |
| cdnjs.cloudflare.com | Get hash | malicious | KnowBe4 | Browse |
| |
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | PureLog Stealer, zgRAT | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | KnowBe4 | Browse |
| ||
| Get hash | malicious | KnowBe4 | Browse |
| ||
| Get hash | malicious | Mamba2FA | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Phisher | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| TRUSTNET-PL-ASPL | Get hash | malicious | GuLoader, Snake Keylogger, VIP Keylogger | Browse |
| |
| Get hash | malicious | GuLoader, Snake Keylogger, VIP Keylogger | Browse |
| ||
| Get hash | malicious | AgentTesla, GuLoader | Browse |
| ||
| Get hash | malicious | AgentTesla, GuLoader | Browse |
| ||
| Get hash | malicious | LummaC, Amadey, Glupteba, LummaC Stealer, Mars Stealer, RedLine, SmokeLoader | Browse |
| ||
| Get hash | malicious | ReCaptcha Phish | Browse |
| ||
| Get hash | malicious | AgentTesla, GuLoader | Browse |
| ||
| Get hash | malicious | AgentTesla, GuLoader | Browse |
| ||
| Get hash | malicious | CryptOne, RedLine | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| FASTLYUS | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | KnowBe4 | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | KnowBe4 | Browse |
| ||
| Get hash | malicious | KnowBe4 | Browse |
| ||
| Get hash | malicious | LiteHTTP Bot | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| EKSENBILISIMTR | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Orcus | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Snake Keylogger, VIP Keylogger | Browse |
| ||
| CLOUDFLARENETUS | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | LummaC, Amadey, LummaC Stealer, Stealc, Vidar | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | LummaC | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Snake Keylogger, VIP Keylogger | Browse |
| ||
| Get hash | malicious | LummaC | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | KnowBe4 | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 28a2c9bd18a11de089ef85a160da29e4 | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | LummaC | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | KnowBe4 | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher, Mamba2FA | Browse |
|
⊘No context
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 521377 |
| Entropy (8bit): | 4.9084889265453135 |
| Encrypted: | false |
| SSDEEP: | 3072:gdTb5Sb3F2FqSrfZm+CnQsbzxZO7aYb6f5780K2:wb5q3umBnzT |
| MD5: | C37972CBD8748E2CA6DA205839B16444 |
| SHA1: | 9834B46ACF560146DD7EE9086DB6019FBAC13B4E |
| SHA-256: | D4CFBB0E8B9D3E36ECE921B9B51BD37EF1D3195A9CFA1C4586AEA200EB3434A7 |
| SHA-512: | 02B4D134F84122B6EE9A304D79745A003E71803C354FB01BAF986BD15E3BA57BA5EF167CC444ED67B9BA5964FF5922C50E2E92A8A09862059852ECD9CEF1A900 |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_40.ttf
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 773040 |
| Entropy (8bit): | 6.55939673749297 |
| Encrypted: | false |
| SSDEEP: | 12288:Zn84XULLDs51UJQSOf9VvLXHyheIQ47gEFGHtAgk3+/cLQ/zhm1kjFKy6Nyjbqq+:N8XPDs5+ivOXgo1kYvyz2 |
| MD5: | 4296A064B917926682E7EED650D4A745 |
| SHA1: | 3953A6AA9100F652A6CA533C2E05895E52343718 |
| SHA-256: | E04E41C74D6C78213BA1588BACEE64B42C0EDECE85224C474A714F39960D8083 |
| SHA-512: | A25388DDCE58D9F06716C0F0BDF2AEFA7F68EBCA7171077533AF4A9BE99A08E3DCD8DFE1A278B7AA5DE65DA9F32501B4B0B0ECAB51F9AF0F12A3A8A75363FF2C |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{0A5D7CA2-E96A-4B64-A5DA-60560C0D5B65}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{126204E5-AD55-4C9D-B479-A63067CEA817}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{22D5B5E9-D0D4-4E4B-9488-EEB1057B29ED}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{2B18BF8E-D105-44F9-8B38-32BCF09B6203}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.2491520368908127 |
| Encrypted: | false |
| SSDEEP: | 3:YlXl3lldHzlblXllZrnlPlK:I4 |
| MD5: | 9A5F3325C368A02FABF00EC854202D3F |
| SHA1: | B423BAB6D74354C6705C813CE0246BA432D1BBF9 |
| SHA-256: | 759AD91E909277C421B0062454FDC8D9845FA506B64F8BF0341C2BBC3A9D4856 |
| SHA-512: | 7402FC0BCD09CB2A2F12D4B138ECD1C3DFF255DA9F11EFDEE640BEFB834A4F49F3884A1BFF0E84CB822349EF7E129AEDD77D58070A87AAD1EC2F96AA31B9EA64 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{308C1523-6784-404D-AF50-C579A097DE89}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{4F55FB39-F35F-4739-A59C-4166A09165DB}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{521CF710-A35A-4A63-8DAC-6236740781ED}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{78FABF05-B83D-4D95-BB36-99C073C8C9D0}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{879B9FF7-2071-4D13-B14A-4F5D0076E9DE}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{AB3045F9-D2F4-4D87-9A0B-D5DAEE4635A4}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{BA1F603A-BF5D-45B5-8C8D-BACC82DC191C}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6144 |
| Entropy (8bit): | 3.0600656889270526 |
| Encrypted: | false |
| SSDEEP: | 48:exlba+s+4y2mVuouT9FOVQ02MzEciDVvYR7tn63yliJcJypKMJW5751bbyv7m:ejbx2mUHML2ZVYt6iliJcJygMJW73GvC |
| MD5: | 7536016451C8A67ACB4E928EDAB52AF9 |
| SHA1: | AD16CD38DA42D9F77EA6AB1AC1CBF05510DCC32A |
| SHA-256: | 525657B0551C4594BCCF85ACFDFC31EEFFC5FDF1E63EE4F49856305C9A2546E5 |
| SHA-512: | 97E6D26F6D28A5C2E7BDB25B2FBD8DB7BCD97E7F34E90714A5D04873C028A2B4096CA23F9B735A3E1FF70F889B44C02E981E696227D1748FFD4C15829E42E87F |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{DA189E2A-C06C-41B2-8D86-77999DCB982B}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1536 |
| Entropy (8bit): | 1.3120375248498821 |
| Encrypted: | false |
| SSDEEP: | 3:ml+lGl+l+l+l1PPPXll1l7lhlJvl5hzldlxpxl/b1l/pl/Ppl/NllXljl/tl/rld:mEMEEEul39lCgK1qVI4kNLLqJI |
| MD5: | DA64EDBD11AE63A92D193A838A403E60 |
| SHA1: | F6B846852B5AB6651FE4E225627F3277424ECFF0 |
| SHA-256: | 03D184280079A42AF08F773BFDADE443F412785356AD20A695415234EC339804 |
| SHA-512: | A02C455DA2059334121D41E46C99603136B8034FBCB7AF539B5891634699C2D1B3B23FDF95C94EA80E8C5E8C75FCD600A26D692C1FF84B2A3EAA655D29371CB6 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{E20DE1CA-7A2A-4522-9CCB-26B25B76540A}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{E2CE3318-6A6B-487F-B7C4-4497ACA4E36C}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{E938CDEF-F584-480B-84D2-03E600DF96DC}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1024 |
| Entropy (8bit): | 0.03351732319703582 |
| Encrypted: | false |
| SSDEEP: | 3:ol3lG:40 |
| MD5: | 830FBF83999E052538EAF156AB6ECB17 |
| SHA1: | 9F6C69FA4232801D3A4857C630BA7A719662135A |
| SHA-256: | D5098A2CEAE815DB29CD53C76F85240C95DC4D2E3FEDDD71D628617064C29869 |
| SHA-512: | A83E2E9D5274F0065A26C306F355E9590D6126297EAD87AF053CC78FB64CB31694C533139F72686C77FC772148181D8AAE973E65978D04E5F20F6F6C6BA0A013 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\WINWORD\App1731690517254899600_1CC2CFF3-9DD5-432B-904A-B16705B06E9A.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.01415280201380463 |
| Encrypted: | false |
| SSDEEP: | 1536:mpTQjRTyuUPjrY6Xk/C8khMz/BBdTE3x/YA:c1 |
| MD5: | 7A90683B85D4241826B18E1FEB73C138 |
| SHA1: | 3B8B3EC8E63DF785866715080F2E5A85F2E82A15 |
| SHA-256: | E1DC5F783498EF6927DC2D525ED99E15A880A9508C1037BC718E5E9BB65D2364 |
| SHA-512: | 8708746A8F43355D29EA2186E989398AAA12A68827F2E9624D005B4D1AF38732BD943CD915050F8F6E250B265FCDE251D702A9AAE4F431C3E3457FF6BB3B6DA3 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\WINWORD\App1731690517255535500_1CC2CFF3-9DD5-432B-904A-B16705B06E9A.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | 3:: |
| MD5: | 8F4E33F3DC3E414FF94E5FB6905CBA8C |
| SHA1: | 9674344C90C2F0646F0B78026E127C9B86E3AD77 |
| SHA-256: | CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC |
| SHA-512: | 7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 258 |
| Entropy (8bit): | 3.4692172273306268 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXcq9DsoE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnysmYoGHmD0+dAH/luWvv |
| MD5: | C1B36A0547FB75445957A619201143AC |
| SHA1: | CDB0A18152F57653F1A707D39F3D7FB504E244A7 |
| SHA-256: | 4DFF7D1CEF6DD85CC73E1554D705FA6586A1FBD10E4A73EEE44EAABA2D2FFED9 |
| SHA-512: | 0923FB41A6DB96C85B44186E861D34C26595E37F30A6F8E554BD3053B99F237D9AC893D47E8B1E9CF36556E86EFF5BE33C015CBBDD31269CDAA68D6947C47F3F |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 7370 |
| Entropy (8bit): | 7.9204386289679745 |
| Encrypted: | false |
| SSDEEP: | 192:fYa+ngK2xG6HvLvoUnXxO+blKO1lt2Zg0AV:fYVn8Y6Hv3XxO+8uQZCV |
| MD5: | 586CEBC1FAC6962F9E36388E5549FFE9 |
| SHA1: | D1EF3BF2443AE75A78E9FDE8DD02C5B3E46F5F2E |
| SHA-256: | 1595C0C027B12FE4C2B506B907C795D14813BBF64A2F3F6F5D71912D7E57BC40 |
| SHA-512: | 68DEAE9C59EA98BD597AE67A17F3029BC7EA2F801AC775CF7DECA292069061EA49C9DF5776CB5160B2C24576249DAF817FA463196A04189873CF16EFC4BEDC62 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 252 |
| Entropy (8bit): | 3.48087342759872 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXXt1MIae2E3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyfMIaRGHmD0+dAH/luWvv |
| MD5: | 69757AF3677EA8D80A2FBE44DEE7B9E4 |
| SHA1: | 26AF5881B48F0CB81F194D1D96E3658F8763467C |
| SHA-256: | 0F14CA656CDD95CAB385F9B722580DDE2F46F8622E17A63F4534072D86DF97C3 |
| SHA-512: | BDA862300BAFC407D662872F0BFB5A7F2F72FE1B7341C1439A22A70098FA50C81D450144E757087778396496777410ADCE4B11B655455BEDC3D128B80CFB472A |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4326 |
| Entropy (8bit): | 7.821066198539098 |
| Encrypted: | false |
| SSDEEP: | 96:+fF+Jrp7Yo5hnJiGa24TxEcpUeONo1w2NFocy2LQi33Z:2+f7YuhJdJ4TxEcmKwGkk3Z |
| MD5: | D32E93F7782B21785424AE2BEA62B387 |
| SHA1: | 1D5589155C319E28383BC01ED722D4C2A05EF593 |
| SHA-256: | 2DC7E71759D84EF8BB23F11981E2C2044626FEA659383E4B9922FE5891F5F478 |
| SHA-512: | 5B07D6764A6616A7EF25B81AB4BD4601ECEC1078727BFEAB4A780032AD31B1B26C7A2306E0DBB5B39FC6E03A3FC18AD67C170EA9790E82D8A6CEAB8E7F564447 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 262 |
| Entropy (8bit): | 3.4901887319218092 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXqhBMl0OoE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyiMl0OoGHmD0+dAH/luWvv |
| MD5: | 52BD0762F3DC77334807DDFC60D5F304 |
| SHA1: | 5962DA7C58F742046A116DDDA5DC8EA889C4CB0E |
| SHA-256: | 30C20CC835E912A6DD89FD1BF5F7D92B233B2EC24594F1C1FE0CADB03A8C3FAB |
| SHA-512: | FB68B1CF9677A00D5651C51EC604B61DAC2D250D44A71D43CD69F41F16E4F0A7BAA7AD4A6F7BB870429297465A893013BBD7CC77A8F709AD6DB97F5A0927B1DD |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5596 |
| Entropy (8bit): | 7.875182123405584 |
| Encrypted: | false |
| SSDEEP: | 96:dGa2unnLYEB2EUAPOak380NQjqbHaPKJebgrEVws8Vw+BMa0EbdLVQaZJgDZh0pJ:UJunLYEB2EUAxk3pIYaScgYwsV4bdS0X |
| MD5: | CDC1493350011DB9892100E94D5592FE |
| SHA1: | 684B444ADE2A8DBE760B54C08F2D28F2D71AD0FA |
| SHA-256: | F637A67799B492FEFFB65632FED7815226396B4102A7ED790E0D9BB4936E1548 |
| SHA-512: | 3699066A4E8A041079F12E88AB2E7F485E968619CB79175267842846A3AD64AA8E7778CBACDF1117854A7FDCFB46C8025A62F147C81074823778C6B4DC930F12 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 246 |
| Entropy (8bit): | 3.5039994158393686 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUX4f+E3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyvGHmD0+dAH/luWvv |
| MD5: | 16711B951E1130126E240A6E4CC2E382 |
| SHA1: | 8095AA79AEE029FD06428244CA2A6F28408448DB |
| SHA-256: | 855342FE16234F72DA0C2765455B69CF412948CFBE70DE5F6D75A20ACDE29AE9 |
| SHA-512: | 454EAA0FD669489583C317699BE1CE5D706C31058B08CF2731A7621FDEFB6609C2F648E02A7A4B2B3A3DFA8406A696D1A6FA5063DDA684BDA4450A2E9FEFB0EF |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3683 |
| Entropy (8bit): | 7.772039166640107 |
| Encrypted: | false |
| SSDEEP: | 96:GyfQZd6ZHNCWl9aXFkZwIq/QDsRYPf8P9QtDIs5r:G6wYtNZS1k99AmPfSOtD5r |
| MD5: | E8308DA3D46D0BC30857243E1B7D330D |
| SHA1: | C7F8E54A63EB254C194A23137F269185E07F9D10 |
| SHA-256: | 6534D4D7EF31B967DD0A20AFFF092F8B93D3C0EFCBF19D06833F223A65C6E7C4 |
| SHA-512: | 88AB7263B7A8D7DDE1225AE588842E07DF3CE7A07CBD937B7E26DA7DA7CFED23F9C12730D9EF4BC1ACF26506A2A96E07875A1A40C2AD55AD1791371EE674A09B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 280 |
| Entropy (8bit): | 3.484503080761839 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXGdQ1MecJZMlWlk2E3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxny2dQ98MlWlzGHmD0+dAH/luWvv |
| MD5: | 1309D172F10DD53911779C89A06BBF65 |
| SHA1: | 274351A1059868E9DEB53ADF01209E6BFBDFADFB |
| SHA-256: | C190F9E7D00E053596C3477455D1639C337C0BE01012C0D4F12DFCB432F5EC56 |
| SHA-512: | 31B38AD2D1FFF93E03BF707811F3A18AD08192F906E36178457306DDAB0C3D8D044C69DE575ECE6A4EE584800F827FB3C769F98EA650F1C208FEE84177070339 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 9191 |
| Entropy (8bit): | 7.93263830735235 |
| Encrypted: | false |
| SSDEEP: | 192:oeAMExvPJMg+yE+AfJLi3+Xoj7F3sPgMG61J88eDhFWT7hFNsdJtnLYJ7tSh:v2d+hnfJLi3+4ja4WqhFWT7FsdHMA |
| MD5: | 08D3A25DD65E5E0D36ADC602AE68C77D |
| SHA1: | F23B6DDB3DA0015B1D8877796F7001CABA25EA64 |
| SHA-256: | 58B45B9DBA959F40294DA2A54270F145644E810290F71260B90F0A3A9FCDEBC1 |
| SHA-512: | 77D24C272D67946A3413D0BEA700A7519B4981D3B4D8486A655305546CE6133456321EE94FD71008CBFD678433EA1C834CFC147179B31899A77D755008FCE489 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 278 |
| Entropy (8bit): | 3.5280239200222887 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXQAl8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyllNGHmD0wbnKYZAH/lMZqiv |
| MD5: | 877A8A960B2140E3A0A2752550959DB9 |
| SHA1: | FBEC17B332CBC42F2F16A1A08767623C7955DF48 |
| SHA-256: | FE07084A41CF7DB58B06D2C0D11BCACB603D6574261D1E7EBADCFF85F39AFB47 |
| SHA-512: | B8B660374EC6504B3B5FCC7DAC63AF30A0C9D24306C36B33B33B23186EC96AEFE958A3851FF3BC57FBA72A1334F633A19C0B8D253BB79AA5E5AFE4A247105889 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 268317 |
| Entropy (8bit): | 5.05419861997223 |
| Encrypted: | false |
| SSDEEP: | 6144:JwprAJLR95vtfb8p4bgWPzDCvCmvQursq7vImej/yQzSS1apSiQhHDOruvoVeMUh:N9 |
| MD5: | 51D32EE5BC7AB811041F799652D26E04 |
| SHA1: | 412193006AA3EF19E0A57E16ACF86B830993024A |
| SHA-256: | 6230814BF5B2D554397580613E20681752240AB87FD354ECECF188C1EABE0E97 |
| SHA-512: | 5FC5D889B0C8E5EF464B76F0C4C9E61BDA59B2D1205AC9417CC74D6E9F989FB73D78B4EB3044A1A1E1F2C00CE1CA1BD6D4D07EEADC4108C7B124867711C31810 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 254 |
| Entropy (8bit): | 3.4845992218379616 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXQFoElh/lE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxny8lLGHmD0+dAH/luWvv |
| MD5: | E8B30D1070779CC14FBE93C8F5CF65BE |
| SHA1: | 9C87F7BC66CF55634AB3F070064AAF8CC977CD05 |
| SHA-256: | 2E90434BE1F6DCEA9257D42C331CD9A8D06B848859FD4742A15612B2CA6EFACB |
| SHA-512: | C0D5363B43D45751192EF06C4EC3C896A161BB11DBFF1FC2E598D28C644824413C78AE3A68027F7E622AF0D709BE0FA893A3A3B4909084DF1ED9A8C1B8267FCA |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6024 |
| Entropy (8bit): | 7.886254023824049 |
| Encrypted: | false |
| SSDEEP: | 96:bGa2onnLYHTSSxpHVTSH1bywZKmpRqiUtFvS9xrPooBpni6eDa16MUELHsrKjRBA:SJonLYzSSr1TuZNwtFZKpiiyrKXuCUd |
| MD5: | 20621E61A4C5B0FFEEC98FFB2B3BCD31 |
| SHA1: | 4970C22A410DCB26D1BD83B60846EF6BEE1EF7C4 |
| SHA-256: | 223EA2602C3E95840232CACC30F63AA5B050FA360543C904F04575253034E6D7 |
| SHA-512: | BDF3A8E3D6EE87D8ADE0767918603B8D238CAE8A2DD0C0F0BF007E89E057C7D1604EB3CCAF0E1BA54419C045FC6380ECBDD070F1BB235C44865F1863A8FA7EEA |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 286 |
| Entropy (8bit): | 3.538396048757031 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXcel8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyMelNGHmD0wbnKYZAH/lMZqiv |
| MD5: | 149948E41627BE5DC454558E12AF2DA4 |
| SHA1: | DB72388C037F0B638FCD007FAB46C916249720A8 |
| SHA-256: | 1B981DC422A042CDDEBE2543C57ED3D468288C20D280FF9A9E2BB4CC8F4776ED |
| SHA-512: | 070B55B305DB48F7A8CD549A5AECF37DE9D6DCD780A5EC546B4BB2165AF4600FA2AF350DDDB48BECCAA3ED954AEE90F5C06C3183310B081F555389060FF4CB01 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 250983 |
| Entropy (8bit): | 5.057714239438731 |
| Encrypted: | false |
| SSDEEP: | 6144:JwprA6OS95vtfb8p4bgWPzkhUh9I5/oBRSifJeg/yQzvapSiQhHZeruvoXMUw3im:uP |
| MD5: | F883B260A8D67082EA895C14BF56DD56 |
| SHA1: | 7954565C1F243D46AD3B1E2F1BAF3281451FC14B |
| SHA-256: | EF4835DB41A485B56C2EF0FF7094BC2350460573A686182BC45FD6613480E353 |
| SHA-512: | D95924A499F32D9B4D9A7D298502181F9E9048C21DBE0496FA3C3279B263D6F7D594B859111A99B1A53BD248EE69B867D7B1768C42E1E40934E0B990F0CE051E |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 302 |
| Entropy (8bit): | 3.537169234443227 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXfQIUA/e/Wl8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyXZ/eulNGHmD0wbnKYZAH/lMZqiv |
| MD5: | 9C00979164E78E3B890E56BE2DF00666 |
| SHA1: | 1FA3C439D214C34168ADF0FBA5184477084A0E51 |
| SHA-256: | 21CCB63A82F1E6ACD6BAB6875ABBB37001721675455C746B17529EE793382C7B |
| SHA-512: | 54AC8732C2744B60DA744E54D74A2664658E4257A136ABE886FF21585E8322E028D8243579D131EF4E9A0ABDDA70B4540A051C8B8B60D65C3EC0888FD691B9A7 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 217137 |
| Entropy (8bit): | 5.068335381017074 |
| Encrypted: | false |
| SSDEEP: | 6144:AwprA3Z95vtf58pb1WP2DCvCmvQursq7vIme5QyQzSS1apSiQhHDlruvoVeMUwFj:4P |
| MD5: | 3BF8591E1D808BCCAD8EE2B822CC156B |
| SHA1: | 9CC1E5EFD715BD0EAE5AF983FB349BAC7A6D7BA0 |
| SHA-256: | 7194396E5C833E6C8710A2E5D114E8E24338C64EC9818D51A929D57A5E4A76C8 |
| SHA-512: | D434A4C15DA3711A5DAAF5F7D0A5E324B4D94A04B3787CA35456BFE423EAC9D11532BB742CDE6E23C16FA9FD203D3636BD198B41C7A51E7D3562D5306D74F757 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 332 |
| Entropy (8bit): | 3.547857457374301 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXSpGLMeKlPaw93Ti8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyipTIw9eNGHmD0wbnKYZAH/lMZqiv |
| MD5: | 4EC6724CBBA516CF202A6BD17226D02C |
| SHA1: | E412C574D567F0BA68B4A31EDB46A6AB3546EA95 |
| SHA-256: | 18E408155A2C2A24D91CD45E065927FFDA726356AAB115D290A3C1D0B7100402 |
| SHA-512: | DE45011A084AB94BF5B27F2EC274D310CF68DF9FB082E11726E08EB89D5D691EA086C9E0298E16AE7AE4B23753E5916F69F78AAD82F4627FC6F80A6A43D163DB |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 284415 |
| Entropy (8bit): | 5.00549404077789 |
| Encrypted: | false |
| SSDEEP: | 6144:N9G5o7Fv0ZcxrStAtXWty8zRLYBQd8itHiYYPVJHMSo27hlwNR57johqBXlwNR2b:y |
| MD5: | 33A829B4893044E1851725F4DAF20271 |
| SHA1: | DAC368749004C255FB0777E79F6E4426E12E5EC8 |
| SHA-256: | C40451CADF8944A9625DD690624EA1BA19CECB825A67081E8144AD5526116924 |
| SHA-512: | 41C1F65E818C2757E1A37F5255E98F6EDEAC4214F9D189AD09C6F7A51F036768C1A03D6CFD5845A42C455EE189D13BB795673ACE3B50F3E1D77DAFF400F4D708 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 260 |
| Entropy (8bit): | 3.494357416502254 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUX0XPE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyEXPGHmD0+dAH/luWvv |
| MD5: | 6F8FE7B05855C203F6DEC5C31885DD08 |
| SHA1: | 9CC27D17B654C6205284DECA3278DA0DD0153AFF |
| SHA-256: | B7F58DF058C938CCF39054B31472DC76E18A3764B78B414088A261E440870175 |
| SHA-512: | C518A243E51CB4A1E3C227F6A8A8D9532EE111D5A1C86EBBB23BD4328D92CD6A0587DF65B3B40A0BE2576D8755686D2A3A55E10444D5BB09FC4E0194DB70AFE6 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6193 |
| Entropy (8bit): | 7.855499268199703 |
| Encrypted: | false |
| SSDEEP: | 192:WavHMKgnU2HUGFhUnkbOKoztj1QfcnLYut3d8:YKeUlGXUnC+HQSMp |
| MD5: | 031C246FFE0E2B623BBBD231E414E0D2 |
| SHA1: | A57CA6134779D54691A4EFD344BC6948E253E0BA |
| SHA-256: | 2D76C8D1D59EDB40D1FBBC6406A06577400582D1659A544269500479B6753CF7 |
| SHA-512: | 6A784C28E12C3740300883A0E690F560072A3EA8199977CBD7F260A21E8346B82BA8A4F78394D3BB53FA2E98564B764C2D0232C40B25FB6085C36D20D70A39D1 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 333258 |
| Entropy (8bit): | 4.654450340871081 |
| Encrypted: | false |
| SSDEEP: | 6144:ybW83Zb181+MKHZR5D7H3hgtfL/8mIDbEhPv9FHSVsioWUyGYmwxAw+GIfnUNv5J:i |
| MD5: | 5632C4A81D2193986ACD29EADF1A2177 |
| SHA1: | E8FF4FDFEB0002786FCE1CF8F3D25F8E9631E346 |
| SHA-256: | 06DE709513D7976690B3DD8F5FDF1E59CF456A2DFBA952B97EACC72FE47B238B |
| SHA-512: | 676CE1957A374E0F36634AA9CFFBCFB1E1BEFE1B31EE876483B10763EA9B2D703F2F3782B642A5D7D0945C5149B572751EBD9ABB47982864834EF61E3427C796 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 328 |
| Entropy (8bit): | 3.541819892045459 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXuqRDA5McaQVTi8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxny+AASZQoNGHmD0wbnKYZAH/lMZqiv |
| MD5: | C3216C3FC73A4B3FFFE7ED67153AB7B5 |
| SHA1: | F20E4D33BABE978BE6A6925964C57D6E6EF1A92E |
| SHA-256: | 7CF1D6A4F0BE5E6184F59BFB1304509F38E480B59A3B091DBDC43B052D2137CB |
| SHA-512: | D3B78BE6E7633FF943F5E34063B5EFA4AF239CD49F437227FC7575F6CC65C497B7D6F6A979EA065065BEAF257CB368560B5462542692286052B5C7E5C01755BC |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 332 |
| Entropy (8bit): | 3.4871192480632223 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXsdDUaw93Ti8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyoRw9eNGHmD0wbnKYZAH/lMZqiv |
| MD5: | 333BA58FCE326DEA1E4A9DE67475AA95 |
| SHA1: | F51FAD5385DC08F7D3E11E1165A18F2E8A028C14 |
| SHA-256: | 66142D15C7325B98B199AB6EE6F35B7409DE64EBD5C0AB50412D18CBE6894097 |
| SHA-512: | BFEE521A05B72515A8D4F7D13D8810846DC60F1E85C363FFEBD6CACD23AE8D2E664C563FC74700A4ED4E358F378508D25C46CB5BE1CF587E2E278EBC22BB2625 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 254875 |
| Entropy (8bit): | 5.003842588822783 |
| Encrypted: | false |
| SSDEEP: | 6144:MwprAnniNgtfbzbOWPuv7kOMBLitjAUjTQLrYHwR0TnyDkHqV3iPr1zHX5T6SSXj:a |
| MD5: | 377B3E355414466F3E3861BCE1844976 |
| SHA1: | 0B639A3880ACA3FD90FA918197A669CC005E2BA4 |
| SHA-256: | 4AC5B26C5E66E122DE80243EF621CA3E1142F643DD2AD61B75FF41CFEE3DFFAF |
| SHA-512: | B050AD52A8161F96CBDC880DD1356186F381B57159F5010489B04528DB798DB955F0C530465AB3ECD5C653586508429D98336D6EB150436F1A53ABEE0697AEB9 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 16806 |
| Entropy (8bit): | 7.9519793977093505 |
| Encrypted: | false |
| SSDEEP: | 384:eSMjhqgJDGwOzHR3iCpK+QdLdfufFJ9aDn9LjDMVAwHknbz7OW:eSkhqglGwERSAHQdLhDn9AKokv7H |
| MD5: | 950F3AB11CB67CC651082FEBE523AF63 |
| SHA1: | 418DE03AD2EF93D0BD29C3D7045E94D3771DACB4 |
| SHA-256: | 9C5E4D8966A0B30A22D92DB1DA2F0DBF06AC2EA75E7BB8501777095EA0196974 |
| SHA-512: | D74BF52A58B0C0327DB9DDCAD739794020F00B3FA2DE2B44DAAEC9C1459ECAF3639A5D761BBBC6BDF735848C4FD7E124D13B23964B0055BB5AA4F6AFE76DFE00 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 254 |
| Entropy (8bit): | 3.4720677950594836 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXOu9+MlWlk2E3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnycMlWlzGHmD0+dAH/luWvv |
| MD5: | D04EC08EFE18D1611BDB9A5EC0CC00B1 |
| SHA1: | 668FF6DFE64D5306220341FC2C1353199D122932 |
| SHA-256: | FA60500F951AFAF8FFDB6D1828456D60004AE1558E8E1364ADC6ECB59F5450C9 |
| SHA-512: | 97EBCCAF64FA33238B7CFC0A6D853EFB050D877E21EE87A78E17698F0BB38382FCE7F6C4D97D550276BD6B133D3099ECAB9CFCD739F31BFE545F4930D896EEC3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 286 |
| Entropy (8bit): | 3.4670546921349774 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUX0XPYDxUloE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyEXPYDCloGHmD0+dAH/luWvv |
| MD5: | 3D52060B74D7D448DC733FFE5B92CB52 |
| SHA1: | 3FBA3FFC315DB5B70BF6F05C4FF84B52A50FCCBC |
| SHA-256: | BB980559C6FC38B703D1E9C41720D5CE8D00D2FF86D4F25136DB02B1E54B1518 |
| SHA-512: | 952EF139A72562A528C1052F1942DAE1C0509D67654BF5E7C0602C87F90147E8EE9E251D2632BCB5B511AB2FF8A3734293D0A4E3DBD3D187F5E3C042685F9A0C |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5630 |
| Entropy (8bit): | 7.87271654296772 |
| Encrypted: | false |
| SSDEEP: | 96:n5ni6jKZWsD+QJaUQ7R6qYFF5QS+BEgeJam6S7ZCHuKViGa2CnnLYLt/ht:nccqxIBdQ1QS+uDJanS7ZCHHVdJCnLY5 |
| MD5: | 2F8998AA9CF348F1D6DE16EAB2D92070 |
| SHA1: | 85B13499937B4A584BEA0BFE60475FD4C73391B6 |
| SHA-256: | 8A216D16DEC44E02B9AB9BBADF8A11F97210D8B73277B22562A502550658E580 |
| SHA-512: | F10F7772985EDDA442B9558127F1959FF0A9909C7B7470E62D74948428BFFF7E278739209E8626AE5917FF728AFB8619AE137BEE2A6A4F40662122208A41ABB2 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 256 |
| Entropy (8bit): | 3.4842773155694724 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXDAlIJAFIloE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyMlI7loGHmD0+dAH/luWvv |
| MD5: | 923D406B2170497AD4832F0AD3403168 |
| SHA1: | A77DA08C9CB909206CDE42FE1543B9FE96DF24FB |
| SHA-256: | EBF9CF474B25DDFE0F6032BA910D5250CBA2F5EDF9CF7E4B3107EDB5C13B50BF |
| SHA-512: | A4CD8C74A3F916CA6B15862FCA83F17F2B1324973CCBCC8B6D9A8AEE63B83A3CD880DC6821EEADFD882D74C7EF58FA586781DED44E00E8B2ABDD367B47CE45B7 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 11380 |
| Entropy (8bit): | 7.891971054886943 |
| Encrypted: | false |
| SSDEEP: | 192:VJcnLYnAVbOFLaCPLrGGbhaWEu6d3RmryqLkeAShObPb1AYcRMMXjkfa0nYBwggD:VcMC8lLrRbhy1ZqLyShYb1FHQ4C0nYQJ |
| MD5: | C9F9364C659E2F0C626AC0D0BB519062 |
| SHA1: | C4036C576074819309D03BB74C188BF902D1AE00 |
| SHA-256: | 6FC428CA0DCFC27D351736EF16C94D1AB08DDA50CB047A054F37EC028DD08AA2 |
| SHA-512: | 173A5E68E55163B081C5A8DA24AE46428E3FB326EBE17AE9588C7F7D7E5E5810BFCF08C23C3913D6BEC7369E06725F50387612F697AC6A444875C01A2C94D0FF |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 238 |
| Entropy (8bit): | 3.472155835869843 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXGE2E3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxny4GHmD0+dAH/luWvv |
| MD5: | 2240CF2315F2EB448CEA6E9CE21B5AC5 |
| SHA1: | 46332668E2169E86760CBD975FF6FA9DB5274F43 |
| SHA-256: | 0F7D0BD5A8CED523CFF4F99D7854C0EE007F5793FA9E1BA1CD933B0894BFBD0D |
| SHA-512: | 10BA73FF861112590BF135F4B337346F9D4ACEB10798E15DC5976671E345BC29AC8527C6052FEC86AA7058E06D1E49052E49D7BCF24A01DB259B5902DB091182 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5151 |
| Entropy (8bit): | 7.859615916913808 |
| Encrypted: | false |
| SSDEEP: | 96:WkV3UHhcZDEteEJqeSGzpG43GUR8m8b6dDLiCTfjKPnD6H5RhfuDKNtxx3+7tDLp:Wq3UBc9EJqIpGgD5dDL1DjKvDKhfnNti |
| MD5: | 6C24ED9C7C868DB0D55492BB126EAFF8 |
| SHA1: | C6D96D4D298573B70CF5C714151CF87532535888 |
| SHA-256: | 48AF17267AD75C142EFA7AB7525CA48FAB579592339FB93E92C4C4DA577D4C9F |
| SHA-512: | A3E9DC48C04DC8571289F57AE790CA4E6934FBEA4FDDC20CB780F7EA469FE1FC1D480A1DBB04D15301EF061DA5700FF0A793EB67D2811C525FEF618B997BCABD |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 242 |
| Entropy (8bit): | 3.4938093034530917 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUX44lWWoE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyvToGHmD0+dAH/luWvv |
| MD5: | A6B2731ECC78E7CED9ED5408AB4F2931 |
| SHA1: | BA15D036D522978409846EA682A1D7778381266F |
| SHA-256: | 6A2F9E46087B1F0ED0E847AF05C4D4CC9F246989794993E8F3E15B633EFDD744 |
| SHA-512: | 666926612E83A7B4F6259C3FFEC3185ED3F07BDC88D43796A24C3C9F980516EB231BDEA4DC4CC05C6D7714BA12AE2DCC764CD07605118698809DEF12A71F1FDD |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4888 |
| Entropy (8bit): | 7.8636569313247335 |
| Encrypted: | false |
| SSDEEP: | 96:StrFZ23/juILHPzms5UTuK9CuZGEoEuZ28H1HiGa2RnnLY+tUb:SPZQ7uCHPzms5UTlqauZVHdJRnLY+tUb |
| MD5: | 0A4CA91036DC4F3CD8B6DBF18094CF25 |
| SHA1: | 6C7EED2530CD0032E9EEAB589AFBC296D106FBB9 |
| SHA-256: | E5A56CCB3B3898F76ABF909209BFAB401B5DDCD88289AD43CE96B02989747E50 |
| SHA-512: | 7C69426F2250E8C84368E8056613C22977630A4B3F5B817FB5EA69081CE2A3CA6E5F93DF769264253D5411419AF73467A27F0BB61291CCDE67D931BD0689CB66 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 286 |
| Entropy (8bit): | 3.5502940710609354 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXfQICl8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyXClNGHmD0wbnKYZAH/lMZqiv |
| MD5: | 9B8D7EFE8A69E41CDC2439C38FE59FAF |
| SHA1: | 034D46BEC5E38E20E56DD905E2CA2F25AF947ED1 |
| SHA-256: | 70042F1285C3CD91DDE8D4A424A5948AE8F1551495D8AF4612D59709BEF69DF2 |
| SHA-512: | E50BB0C68A33D35F04C75F05AD4598834FEC7279140B1BB0847FF39D749591B8F2A0C94DA4897AAF6C33C50C1D583A836B0376015851910A77604F8396C7EF3C |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 270198 |
| Entropy (8bit): | 5.073814698282113 |
| Encrypted: | false |
| SSDEEP: | 6144:JwprAiaR95vtfb8pDbgWPzDCvCmvQursq7vImej/yQ4SS1apSiQhHDOruvoVeMUX:We |
| MD5: | FF0E07EFF1333CDF9FC2523D323DD654 |
| SHA1: | 77A1AE0DD8DBC3FEE65DD6266F31E2A564D088A4 |
| SHA-256: | 3F925E0CC1542F09DE1F99060899EAFB0042BB9682507C907173C392115A44B5 |
| SHA-512: | B4615F995FAB87661C2DBE46625AA982215D7BDE27CAFAE221DCA76087FE76DA4B4A381943436FCAC1577CB3D260D0050B32B7B93E3EB07912494429F126BB3D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 260 |
| Entropy (8bit): | 3.4895685222798054 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUX4cPBl4xoE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyPl4xoGHmD0+dAH/luWvv |
| MD5: | 63E8B0621B5DEFE1EF17F02EFBFC2436 |
| SHA1: | 2D02AD4FD9BF89F453683B7D2B3557BC1EEEE953 |
| SHA-256: | 9243D99795DCDAD26FA857CB2740E58E3ED581E3FAEF0CB3781CBCD25FB4EE06 |
| SHA-512: | A27CDA84DF5AD906C9A60152F166E7BD517266CAA447195E6435997280104CBF83037F7B05AE9D4617323895DCA471117D8C150E32A3855156CB156E15FA5864 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3075 |
| Entropy (8bit): | 7.716021191059687 |
| Encrypted: | false |
| SSDEEP: | 48:96yn4sOBoygpySCCxwKsZCB2oLEIK+aQpUNLRQWtmMamIZxAwCC2QnyODhVOzP4:l0vCxJsZQ2ofpKvtmMdIZxAwJyODhVOE |
| MD5: | 67766FF48AF205B771B53AA2FA82B4F4 |
| SHA1: | 0964F8B9DC737E954E16984A585BDC37CE143D84 |
| SHA-256: | 160D05B4CB42E1200B859A2DE00770A5C9EBC736B70034AFC832A475372A1667 |
| SHA-512: | AC28B0B4A9178E9B424E5893870913D80F4EE03D595F587AA1D3ACC68194153BAFC29436ADFD6EA8992F0B00D17A43CFB42C529829090AF32C3BE591BD41776D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 254 |
| Entropy (8bit): | 3.4721586910685547 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUX9+RclTloE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyteUTloGHmD0+dAH/luWvv |
| MD5: | 4DD225E2A305B50AF39084CE568B8110 |
| SHA1: | C85173D49FC1522121AA2B0B2E98ADF4BB95B897 |
| SHA-256: | 6F00DD73F169C73D425CB9895DAC12387E21C6E4C9C7DDCFB03AC32552E577F4 |
| SHA-512: | 0493AB431004191381FF84AD7CC46BD09A1E0FEEC16B3183089AA8C20CC7E491FAE86FE0668A9AC677F435A203E494F5E6E9E4A0571962F6021D6156B288B28A |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4243 |
| Entropy (8bit): | 7.824383764848892 |
| Encrypted: | false |
| SSDEEP: | 96:22MQe4zHye8/djzF+JjvtmMkkBpF7e0LTkaf:22De4zHHCvF+nRBDXoaf |
| MD5: | 7BC0A35807CD69C37A949BBD51880FF5 |
| SHA1: | B5870846F44CAD890C6EFF2F272A037DA016F0D8 |
| SHA-256: | BD3A013F50EBF162AAC4CED11928101554C511BD40C2488CF9F5842A375B50CA |
| SHA-512: | B5B785D693216E38B5AB3F401F414CADACCDCB0DCA4318D88FE1763CD3BAB8B7670F010765296613E8D3363E47092B89357B4F1E3242F156750BE86F5F7E9B8D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 256 |
| Entropy (8bit): | 3.464918006641019 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXR+EqRGRnRE3QepmlJ0+3FbnKfZObdADxp1RDWlVwv:fxnyB+5RmRGHmD0wbnKYZAH+Vwv |
| MD5: | 93149E194021B37162FD86684ED22401 |
| SHA1: | 1B31CAEBE1BBFA529092BE834D3B4AD315A6F8F1 |
| SHA-256: | 50BE99A154A6F632D49B04FCEE6BCA4D6B3B4B7C1377A31CE9FB45C462D697B2 |
| SHA-512: | 410A7295D470EC85015720B2B4AC592A472ED70A04103D200FA6874BEA6A423AF24766E98E5ACAA3A1DBC32C44E8790E25D4611CD6C0DBFFFE8219D53F33ACA7 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 51826 |
| Entropy (8bit): | 5.541375256745271 |
| Encrypted: | false |
| SSDEEP: | 384:erH5dYPCA4t3aEFGiSUDtYfEbi5Ry/AT7/6tHODaFlDSomurYNfT4A0VIwWNS89u:Q6Cbh9tENyWdaFUSYNfZS89/3qtEu |
| MD5: | 2AB22AC99ACFA8A82742E774323C0DBD |
| SHA1: | 790F8B56DF79641E83A16E443A75A66E6AA2F244 |
| SHA-256: | BC9D45D0419A08840093B0BF4DCF96264C02DFE5BD295CD9B53722E1DA02929D |
| SHA-512: | E5715C0ECF35CE250968BD6DE5744D28A9F57D20FD6866E2AF0B2D8C8F80FEDC741D48F554397D61C5E702DA896BD33EED92D778DBAC71E2E98DCFB0912DE07B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 374 |
| Entropy (8bit): | 3.5414485333689694 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUX8FaE3f8AWqlQqr++lcWimqnKOE3QepmlJ0+3FbnKfZObdADryMluxHZypo:fxnyj9AWI+acgq9GHmD0wbnKYZAH/lMf |
| MD5: | 2F7A8FE4E5046175500AFFA228F99576 |
| SHA1: | 8A3DE74981D7917E6CE1198A3C8E35C7E2100F43 |
| SHA-256: | 1495B4EC56B371148EA195D790562E5621FDBF163CDD8A5F3C119F8CA3BD2363 |
| SHA-512: | 4B8FBB692D91D88B584E46C2F01BDE0C05DCD5D2FF073D83331586FB3D201EACD777D48DB3751E534E22115AA1C3C30392D0D642B3122F21EF10E3EE6EA3BE82 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\TCD10AD.tmp\Text Sidebar (Annual Report Red and Black design).docx
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 47296 |
| Entropy (8bit): | 6.42327948041841 |
| Encrypted: | false |
| SSDEEP: | 768:ftjI1BT8N37szq00s7dB2wMVJGHR97/RDU5naXUsT:fJIPTfq0ndB2w1bpsE |
| MD5: | 5A53F55DD7DA8F10A8C0E711F548B335 |
| SHA1: | 035E685927DA2FECB88DE9CAF0BECEC88BC118A7 |
| SHA-256: | 66501B659614227584DA04B64F44309544355E3582F59DBCA3C9463F67B7E303 |
| SHA-512: | 095BD5D1ACA2A0CA3430DE2F005E1D576AC9387E096D32D556E4348F02F4D658D0E22F2FC4AA5BF6C07437E6A6230D2ABF73BBD1A0344D73B864BC4813D60861 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 264 |
| Entropy (8bit): | 3.4866056878458096 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUX0XrZUloE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyEXWloGHmD0+dAH/luWvv |
| MD5: | 6C489D45F3B56845E68BE07EA804C698 |
| SHA1: | C4C9012C0159770CB882870D4C92C307126CEC3F |
| SHA-256: | 3FE447260CDCDEE287B8D01CF5F9F53738BFD6AAEC9FB9787F2826F8DEF1CA45 |
| SHA-512: | D1355C48A09E7317773E4F1613C4613B7EA42D21F5A6692031D288D69D47B19E8F4D5A29AFD8B751B353FC7DE865EAE7CFE3F0BEC05F33DDF79526D64A29EB18 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6448 |
| Entropy (8bit): | 7.897260397307811 |
| Encrypted: | false |
| SSDEEP: | 192:tgaoRbo1sMjb0NiJ85oPtqcS+yaXWoa8XBzdJYnLYFtWT7:LR1sk+i4o1qc1yaukzd8MK |
| MD5: | 42A840DC06727E42D42C352703EC72AA |
| SHA1: | 21AAAF517AFB76BF1AF4E06134786B1716241D29 |
| SHA-256: | 02CCE7D526F844F70093AC41731D1A1E9B040905DCBA63BA8BFFC0DBD4D3A7A7 |
| SHA-512: | 8886BFD240D070237317352DEB3D46C6B07E392EBD57730B1DED016BD8740E75B9965F7A3FCD43796864F32AAE0BE911AB1A670E9CCC70E0774F64B1BDA93488 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 274 |
| Entropy (8bit): | 3.438490642908344 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXZlaWimoa2nRE3QepmlJ0+3FbnKfZObdADxp1RDWlVwv:fxnyplagN2RGHmD0wbnKYZAH+Vwv |
| MD5: | 0F98498818DC28E82597356E2650773C |
| SHA1: | 1995660972A978D17BC483FCB5EE6D15E7058046 |
| SHA-256: | 4587CA0B2A60728FF0A5B8E87D35BF6C6FDF396747E13436EC856612AC1C6288 |
| SHA-512: | 768562F20CFE15001902CCE23D712C7439721ECA6E48DDDCF8BFF4E7F12A3BC60B99C274CBADD0128EEA1231DB19808BAA878E825497F3860C381914C21B46FF |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 34415 |
| Entropy (8bit): | 7.352974342178997 |
| Encrypted: | false |
| SSDEEP: | 768:ev13NPo9o5NGEVIi3kvH+3SMdk7zp3tE2:ev13xoOE+R3BkR7 |
| MD5: | 7CDFFC23FB85AD5737452762FA36AAA0 |
| SHA1: | CFBC97247959B3142AFD7B6858AD37B18AFB3237 |
| SHA-256: | 68A8FBFBEE4C903E17C9421082E839144C205C559AFE61338CBDB3AF79F0D270 |
| SHA-512: | A0685FD251208B772436E9745DA2AA52BC26E275537688E3AB44589372D876C9ACE14B21F16EC4053C50EB4C8E11787E9B9D922E37249D2795C5B7986497033E |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 486596 |
| Entropy (8bit): | 7.668294441507828 |
| Encrypted: | false |
| SSDEEP: | 6144:A+JBmUx0Zo24n8z/2NSYFl2qGBuv8p6+LwwYmN59wBttsdJrmXMlP1NwQoGgeL:fNgxz/g5z2BT6+Eu0ntMcczNQG5L |
| MD5: | 0E37AECABDB3FDF8AAFEDB9C6D693D2F |
| SHA1: | F29254D2476DF70979F723DE38A4BF41C341AC78 |
| SHA-256: | 7AC7629142C2508B070F09788217114A70DE14ACDB9EA30CBAB0246F45082349 |
| SHA-512: | DE6AFE015C1D41737D50ADD857300996F6E929FED49CB71BC59BB091F9DAB76574C56DEA0488B0869FE61E563B07EBB7330C8745BC1DF6305594AC9BDEA4A6BF |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 274 |
| Entropy (8bit): | 3.535303979138867 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUX3IlVARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnynG6ymD0wbnKNAH/lMz1 |
| MD5: | 35AFE8D8724F3E19EB08274906926A0B |
| SHA1: | 435B528AAF746428A01F375226C5A6A04099DF75 |
| SHA-256: | 97B8B2E246E4DAB15E494D2FB5F8BE3E6361A76C8B406C77902CE4DFF7AC1A35 |
| SHA-512: | ACF4F124207974CFC46A6F4EA028A38D11B5AF40E55809E5B0F6F5DABA7F6FC994D286026FAC19A0B4E2311D5E9B16B8154F8566ED786E5EF7CDBA8128FD62AF |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 562113 |
| Entropy (8bit): | 7.67409707491542 |
| Encrypted: | false |
| SSDEEP: | 12288:/dy5Gtyp/FZ9QqjdxDfSp424XeavSktiAVE0:/dizp1ndpqpMZnV |
| MD5: | 4A1657A3872F9A77EC257F41B8F56B3D |
| SHA1: | 4DDEA85C649A2C1408B5B08A15DEF49BAA608A0B |
| SHA-256: | C17103ADE455094E17AC182AD4B4B6A8C942FD3ACB381F9A5E34E3F8B416AE60 |
| SHA-512: | 7A2932639E06D79A5CE1D3C71091890D9E329CA60251E16AE4095E4A06C6428B4F86B7FFFA097BF3EEFA064370A4D51CA3DF8C89EAFA3B1F45384759DEC72922 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 278 |
| Entropy (8bit): | 3.535736910133401 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXeAlFkRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyRGymD0wbnKNAH/lMz1 |
| MD5: | 487E25E610F3FC2EEA27AB54324EA8F6 |
| SHA1: | 11C2BB004C5E44503704E9FFEEFA7EA7C2A9305C |
| SHA-256: | 022EC5077279A8E447B590F7260E1DBFF764DE5F9CDFD4FDEE32C94C66D4A1A2 |
| SHA-512: | B8DF351E2C0EF101CF91DC02E136A3EE9C1FDB18294BECB13A29D676FBBE791A80A58A18FBDEB953BC21EC54EB7608154D401407C461ABD10ACB94CE8AD0E092 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 523048 |
| Entropy (8bit): | 7.715248170753013 |
| Encrypted: | false |
| SSDEEP: | 6144:WfmDdN6Zfv8q5rnM6vZ02PtMZRkfW5ipbnMHxVcsOWrCMxy0sD/mcKb4rYEY:xDdQXBrMi2YtggW5ObnMH1brJpUmBU0N |
| MD5: | C276F590BB846309A5E30ADC35C502AD |
| SHA1: | CA6D9D6902475F0BE500B12B7204DD1864E7DD02 |
| SHA-256: | 782996D93DEBD2AF9B91E7F529767A8CE84ACCC36CD62F24EBB5117228B98F58 |
| SHA-512: | B85165C769DFE037502E125A04CFACDA7F7CC36184B8D0A54C1F9773666FFCC43A1B13373093F97B380871571788D532DEEA352E8D418E12FD7AAD6ADB75A150 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 276 |
| Entropy (8bit): | 3.5159096381406645 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXQIa3ARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnygIaqymD0wbnKNAH/lMz1 |
| MD5: | 71CCB69AF8DD9821F463270FB8CBB285 |
| SHA1: | 8FED3EB733A74B2A57D72961F0E4CF8BCA42C851 |
| SHA-256: | 8E63D7ABA97DABF9C20D2FAC6EB1665A5D3FDEAB5FA29E4750566424AE6E40B4 |
| SHA-512: | E62FC5BEAEC98C5FDD010FABDAA8D69237D31CA9A1C73F168B1C3ED90B6A9B95E613DEAD50EB8A5B71A7422942F13D6B5A299EB2353542811F2EF9DA7C3A15DC |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 570901 |
| Entropy (8bit): | 7.674434888248144 |
| Encrypted: | false |
| SSDEEP: | 6144:D2tTXiO/3GH5SkPQVAqWnGrkFxvay910UUTWZJarUv9TA0g8:kX32H+VWgkFxSgGTmarUv9T |
| MD5: | D676DE8877ACEB43EF0ED570A2B30F0E |
| SHA1: | 6C8922697105CEC7894966C9C5553BEB64744717 |
| SHA-256: | DF012D101DE808F6CD872DFBB619B16732C23CF4ABC64149B6C3CE49E9EFDA01 |
| SHA-512: | F40BADA680EA5CA508947290BA73901D78DE79EAA10D01EAEF975B80612D60E75662BDA542E7F71C2BBA5CA9BA46ECAFE208FD6E40C1F929BB5E407B10E89FBD |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 282 |
| Entropy (8bit): | 3.5459495297497368 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXvBAuRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnypJymD0wbnKNAH/lMz1 |
| MD5: | 76340C3F8A0BFCEDAB48B08C57D9B559 |
| SHA1: | E1A6672681AA6F6D525B1D17A15BF4F912C4A69B |
| SHA-256: | 78FE546321EDB34EBFA1C06F2B6ADE375F3B7C12552AB2A04892A26E121B3ECC |
| SHA-512: | 49099F040C099A0AED88E7F19338140A65472A0F95ED99DEB5FA87587E792A2D11081D59FD6A83B7EE68C164329806511E4F1B8D673BEC9074B4FF1C09E3435D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 608122 |
| Entropy (8bit): | 7.729143855239127 |
| Encrypted: | false |
| SSDEEP: | 6144:Ckl6KRKwg9jf2q/bN69OuGFlC/DUhq68xOcJzGYnTxlLqU8dmTW:8yKwgZ2qY9kA7Uhq68H3ybmq |
| MD5: | 8BA551EEC497947FC39D1D48EC868B54 |
| SHA1: | 02FA15FDAF0D7E2F5D44CAE5FFAE49E8F91328DF |
| SHA-256: | DB2E99B969546E431548EBD58707FC001BBD1A4BDECAD387D194CC9C6D15AC89 |
| SHA-512: | CC97F9B2C83FF7CAC32AB9A9D46E0ACDE13EECABECD653C88F74E4FC19806BB9498D2F49C4B5581E58E7B0CB95584787EA455E69D99899381B592BEA177D4D4B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 278 |
| Entropy (8bit): | 3.516359852766808 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXKwRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxny6qymD0wbnKNAH/lMz1 |
| MD5: | 960E28B1E0AB3522A8A8558C02694ECF |
| SHA1: | 8387E9FD5179A8C811CCB5878BAC305E6A166F93 |
| SHA-256: | 2707FCA8CEC54DF696F19F7BCAD5F0D824A2AC01B73815DE58F3FCF0AAB3F6A0 |
| SHA-512: | 89EA06BA7D18B0B1EA624BBC052F73366522C231BD3B51745B92CF056B445F9D655F9715CBDCD3B2D02596DB4CD189D91E2FE581F2A2AA2F6D814CD3B004950A |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 777647 |
| Entropy (8bit): | 7.689662652914981 |
| Encrypted: | false |
| SSDEEP: | 6144:B04bNOJMngI856k0wwOGXMaXTLaTDmfBaN2Tx9iSUk1PdSnc0lnDlcGMcEFYYYYt:xbY6ngI46Aw5dmyYYYYYYYYY7p8d |
| MD5: | B30D2EF0FC261AECE90B62E9C5597379 |
| SHA1: | 4893C5B9BE04ECBB19EE45FFCE33CA56C7894FE3 |
| SHA-256: | BB170D6DE4EE8466F56C93DC26E47EE8A229B9C4842EA8DD0D9CCC71BC8E2976 |
| SHA-512: | 2E728408C20C3C23C84A1C22DB28F0943AAA960B4436F8C77570448D5BEA9B8D53D95F7562883FA4F9B282DFE2FD07251EEEFDE5481E49F99B8FEDB66AAAAB68 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 290 |
| Entropy (8bit): | 3.5091498509646044 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUX1MiDuRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyFdMymD0wbnKNAH/lMz1 |
| MD5: | 23D59577F4AE6C6D1527A1B8CDB9AB19 |
| SHA1: | A345D683E54D04CC0105C4BFFCEF8C6617A0093D |
| SHA-256: | 9ADD2C3912E01C2AC7FAD6737901E4EECBCCE6EC60F8E4D78585469A440E1E2C |
| SHA-512: | B85027276B888548ECB8A2FC1DB1574C26FF3FCA7AF1F29CD5074EC3642F9EC62650E7D47462837607E11DCAE879B1F83DF4762CA94667AE70CBF78F8D455346 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 558035 |
| Entropy (8bit): | 7.696653383430889 |
| Encrypted: | false |
| SSDEEP: | 12288:DQ/oYjRRRRRRRRYcdY/5ASWYqBMp8xsGGEOzI7vQQwOyP:DQ/nRRRRRRRRxY/5JWYZ3GGbI8YA |
| MD5: | 3B5E44DDC6AE612E0346C58C2A5390E3 |
| SHA1: | 23BCF3FCB61F80C91D2CFFD8221394B1CB359C87 |
| SHA-256: | 9ED9AD4EB45E664800A4876101CBEE65C232EF478B6DE502A330D7C89C9AE8E2 |
| SHA-512: | 2E63419F272C6E411CA81945E85E08A6E3230A2F601C4D28D6312DB5C31321F94FAFA768B16BC377AE37B154C6869CA387005693A79C5AB1AC45ED73BCCC6479 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 276 |
| Entropy (8bit): | 3.5361139545278144 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXeMWMluRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnycMlMymD0wbnKNAH/lMz1 |
| MD5: | 133D126F0DE2CC4B29ECE38194983265 |
| SHA1: | D8D701298D7949BE6235493925026ED405290D43 |
| SHA-256: | 08485EBF168364D846C6FD55CD9089FE2090D1EE9D1A27C1812E1247B9005E68 |
| SHA-512: | 75D7322BE8A5EF05CAA48B754036A7A6C56399F17B1401F3F501DA5F32B60C1519F2981043A773A31458C3D9E1EF230EC60C9A60CAC6D52FFE16147E2E0A9830 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 924687 |
| Entropy (8bit): | 7.824849396154325 |
| Encrypted: | false |
| SSDEEP: | 12288:lsadD3eLxI8XSh4yDwFw8oWR+6dmw2ZpQDKpazILv7Jzny/ApcWqyOpEZULn:qLxI8XSh4yUF/oWR+mLKpYIr7l3ZQ7n |
| MD5: | 97EEC245165F2296139EF8D4D43BBB66 |
| SHA1: | 0D91B68CCB6063EB342CFCED4F21A1CE4115C209 |
| SHA-256: | 3C5CF7BDB27592791ADF4E7C5A09DDE4658E10ED8F47845064DB1153BE69487C |
| SHA-512: | 8594C49CAB6FF8385B1D6E174431DAFB0E947A8D7D3F200E622AE8260C793906E17AA3E6550D4775573858EA1243CCBF7132973CD1CF7A72C3587B9691535FF8 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 282 |
| Entropy (8bit): | 3.51145753448333 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXKsWkRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxny6svymD0wbnKNAH/lMz1 |
| MD5: | 7956D2B60E2A254A07D46BCA07D0EFF0 |
| SHA1: | AF1AC8CA6FE2F521B2EE2B7ABAB612956A65B0B5 |
| SHA-256: | C92B7FD46B4553FF2A656FF5102616479F3B503341ED7A349ECCA2E12455969E |
| SHA-512: | 668F5D0EFA2F5168172E746A6C32820E3758793CFA5DB6791DE39CB706EF7123BE641A8134134E579D3E4C77A95A0F9983F90E44C0A1CF6CDE2C4E4C7AF1ECA0 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 966946 |
| Entropy (8bit): | 7.8785200658952 |
| Encrypted: | false |
| SSDEEP: | 24576:qBcvGBGhXQir6H1ws6+iU0YuA35VuinHX2NPs:ccvGBGdQ5CsMxQVj3yPs |
| MD5: | F03AB824395A8F1F1C4F92763E5C5CAD |
| SHA1: | A6E021918C3CEFFB6490222D37ECEED1FC435D52 |
| SHA-256: | D96F7A63A912CA058FB140138C41DCB3AF16638BA40820016AF78DF5D07FAEDD |
| SHA-512: | 0241146B63C938F11045FB9DF5360F63EF05B9B3DD1272A3E3E329A1BFEC5A4A645D5472461DE9C06CFE4ADB991FE96C58F0357249806C341999C033CD88A7AF |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 282 |
| Entropy (8bit): | 3.5323495192404475 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXhduDARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyxdumymD0wbnKNAH/lMz1 |
| MD5: | BD6B5A98CA4E6C5DBA57C5AD167EDD00 |
| SHA1: | CCFF7F635B31D12707DC0AC6D1191AB5C4760107 |
| SHA-256: | F22248FE60A55B6C7C1EB31908FAB7726813090DE887316791605714E6E3CEF7 |
| SHA-512: | A178299461015970AF23BA3D10E43FCA5A6FB23262B0DD0C5DDE01D338B4959F222FD2DC2CC5E3815A69FDDCC3B6B4CB8EE6EC0883CE46093C6A59FF2B042BC1 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1649585 |
| Entropy (8bit): | 7.875240099125746 |
| Encrypted: | false |
| SSDEEP: | 24576:L368X6z95zf5BbQ6U79dYy2HiTIxRboyM/LZTl5KnCc:r68kb7UTYxGIxmnp65 |
| MD5: | 35200E94CEB3BB7A8B34B4E93E039023 |
| SHA1: | 5BB55EDAA4CDF9D805E36C36FB092E451BDDB74D |
| SHA-256: | 6CE04E8827ABAEA9B292048C5F84D824DE3CEFDB493101C2DB207BD4475AF1FD |
| SHA-512: | ED80CEE7C22D10664076BA7558A79485AA39BE80582CEC9A222621764DAE5EFA70F648F8E8C5C83B6FE31C2A9A933C814929782A964A47157505F4AE79A3E2F9 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 284 |
| Entropy (8bit): | 3.5552837910707304 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXtLARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnygymD0wbnKNAH/lMz1 |
| MD5: | 5728F26DF04D174DE9BDFF51D0668E2A |
| SHA1: | C998DF970655E4AF9C270CC85901A563CFDBCC22 |
| SHA-256: | 979DAFD61C23C185830AA3D771EDDC897BEE87587251B84F61776E720ACF9840 |
| SHA-512: | 491B36AC6D4749F7448B9A3A6E6465E8D97FB30F33EF5019AF65660E98F4570711EFF5FC31CBB8414AD9355029610E6F93509BC4B2FB6EA79C7CB09069DE7362 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 976001 |
| Entropy (8bit): | 7.791956689344336 |
| Encrypted: | false |
| SSDEEP: | 24576:zHM7eZGgFiHMRej4N9tpytNZ+tIw5ErZBImlX0m:zHM7eZGgFiHMRej++NZ+F5WvllZ |
| MD5: | 9E563D44C28B9632A7CF4BD046161994 |
| SHA1: | D3DB4E5F5B1CC6DD08BB3EBF488FF05411348A11 |
| SHA-256: | 86A70CDBE4377C32729FD6C5A0B5332B7925A91C492292B7F9C636321E6FAD86 |
| SHA-512: | 8EB14A1B10CB5C7607D3E07E63F668CFC5FC345B438D39138D62CADF335244952FBC016A311D5CB8A71D50660C49087B909528FC06C1D10AF313F904C06CBD5C |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 278 |
| Entropy (8bit): | 3.5270134268591966 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXa3Y1kRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyt1mymD0wbnKNAH/lMz1 |
| MD5: | 327DA4A5C757C0F1449976BE82653129 |
| SHA1: | CF74ECDF94B4A8FD4C227313C8606FD53B8EEA71 |
| SHA-256: | 341BABD413AA5E8F0A921AC309A8C760A4E9BA9CFF3CAD3FB2DD9DF70FD257A6 |
| SHA-512: | 9184C3FB989BB271B4B3CDBFEFC47EA8ABEB12B8904EE89797CC9823F33952BD620C061885A5C11BBC1BD3978C4B32EE806418F3F21DA74F1D2DB9817F6E167E |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1204049 |
| Entropy (8bit): | 7.92476783994848 |
| Encrypted: | false |
| SSDEEP: | 24576:+3zSQBxvOUIpHLYTCEmS1Wu09jRalJP3sdgnmAOFt0zU4L0MRx5QNn5:+bvI5UTCPu09qP3JPOFoR4N5 |
| MD5: | FD5BBC58056522847B3B75750603DF0C |
| SHA1: | 97313E85C0937739AF7C7FC084A10BF202AC9942 |
| SHA-256: | 44976408BD6D2703BDBE177259061A502552193B1CD05E09B698C0DAC3653C5F |
| SHA-512: | DBD72827044331215A7221CA9B0ECB8809C7C79825B9A2275F3450BAE016D7D320B4CA94095F7CEF4372AC63155C78CA4795E23F93166D4720032ECF9F932B8E |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 276 |
| Entropy (8bit): | 3.5364757859412563 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXARkRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnywMymD0wbnKNAH/lMz1 |
| MD5: | CD465E8DA15E26569897213CA9F6BC9C |
| SHA1: | 9EA9B5E6C9B7BF72A777A21EC17FD82BC4386D4C |
| SHA-256: | D4109317C2DBA1D7A94FC1A4B23FA51F4D0FC8E1D9433697AAFA72E335192610 |
| SHA-512: | 869A42679F96414FE01FE1D79AF7B33A0C9B598B393E57E0E4D94D68A4F2107EC58B63A532702DA96A1F2F20CE72E6E08125B38745CD960DF62FE539646EDD8D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1091485 |
| Entropy (8bit): | 7.906659368807194 |
| Encrypted: | false |
| SSDEEP: | 24576:oBpmCkw3Tg/euEB+UdoC4k7ytHkHA6B/puqW2MIkTeSBmKrZHQ:MR3c/AseydwppC7veSBmWHQ |
| MD5: | 2192871A20313BEC581B277E405C6322 |
| SHA1: | 1F9A6A5E10E1C3FFEB6B6725C5D2FA9ECDF51085 |
| SHA-256: | A06B302954A4C9A6A104A8691864A9577B0BFEA240B0915D9BEA006E98CDFFEC |
| SHA-512: | 6D8844D2807BB90AEA6FE0DDDB9C67542F587EC9B7FC762746164B2D4A1A99EF8368A70C97BAD7A986AAA80847F64408F50F4707BB039FCCC509133C231D53B9 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 280 |
| Entropy (8bit): | 3.5301133500353727 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXp2pRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyZ2vymD0wbnKNAH/lMz1 |
| MD5: | 1C5D58A5ED3B40486BC22B254D17D1DD |
| SHA1: | 69B8BB7B0112B37B9B5F9ADA83D11FBC99FEC80A |
| SHA-256: | EBE031C340F04BB0235FE62C5A675CF65C5CC8CE908F4621A4F5D7EE85F83055 |
| SHA-512: | 4736E4F26C6FAAB47718945BA54BD841FE8EF61F0DBA927E5C4488593757DBF09689ABC387A8A44F7C74AA69BA89BEE8EA55C87999898FEFEB232B1BA8CC7086 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1463634 |
| Entropy (8bit): | 7.898382456989258 |
| Encrypted: | false |
| SSDEEP: | 24576:75MGNW/UpLkupMAqDJhNHK4/TuiKbdhbZM+byLH/:7ZwUpLkulkHK46iiDZHeLH/ |
| MD5: | ACBA78931B156E4AF5C4EF9E4AB3003B |
| SHA1: | 2A1F506749A046ECFB049F23EC43B429530EC489 |
| SHA-256: | 943E4044C40ABA93BD7EA31E8B5EBEBD7976085E8B1A89E905952FA8DAC7B878 |
| SHA-512: | 2815D912088BA049F468CA9D65B92F8951A9BE82AB194DBFACCF0E91F0202820F5BC9535966654D28F69A8B92D048808E95FEA93042D8C5DEA1DCB0D58BE5175 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 280 |
| Entropy (8bit): | 3.5286004619027067 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXOzXkRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxny6WymD0wbnKNAH/lMz1 |
| MD5: | 40FF521ED2BA1B015F17F0B0E5D95068 |
| SHA1: | 0F29C084311084B8FDFE67855884D8EB60BDE1A6 |
| SHA-256: | CC3575BA195F0F271FFEBA6F6634BC9A2CF5F3BE448F58DBC002907D7C81CBBB |
| SHA-512: | 9507E6145417AC730C284E58DC6B2063719400B395615C40D7885F78F57D55B251CB9C954D573CB8B6F073E4CEA82C0525AE90DEC68251C76A6F1B03FD9943C0 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1750795 |
| Entropy (8bit): | 7.892395931401988 |
| Encrypted: | false |
| SSDEEP: | 24576:DyeAqDJpUDH3xk8ZKIBuX3TPtd36v4o5d4PISMETGBP6eUP+xSeW3v0HKPsc:uRqUjSTPtd36AFDM/BP6eUeW3v0Fc |
| MD5: | 529795E0B55926752462CBF32C14E738 |
| SHA1: | E72DFF8354DF2CB6A5698F14BBD1805D72FEEAFF |
| SHA-256: | 8D341D1C24176DC6B67104C2AF90FABD3BFF666CCC0E269381703D7659A6FA05 |
| SHA-512: | A51F440F1E19C084D905B721D0257F7EEE082B6377465CB94E677C29D4E844FD8021D0B6BA26C0907B72B84157C60A3EFEDFD96C16726F6ABEA8D896D78B08CE |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 280 |
| Entropy (8bit): | 3.528155916440219 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXcmlDuRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyMmloymD0wbnKNAH/lMz1 |
| MD5: | AA7B919B21FD42C457948DE1E2988CB3 |
| SHA1: | 19DA49CF5540E5840E95F4E722B54D44F3154E04 |
| SHA-256: | 5FFF5F1EC1686C138192317D5A67E22A6B02E5AAE89D73D4B19A492C2F5BE2F9 |
| SHA-512: | 01D27377942F69A0F2FE240DD73A1F97BB915E19D3D716EE4296C6EF8D8933C80E4E0C02F6C9FA72E531246713364190A2F67F43EDBE12826A1529BC2A629B00 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2218943 |
| Entropy (8bit): | 7.942378408801199 |
| Encrypted: | false |
| SSDEEP: | 49152:8mwK3gH/l4hM06Wqnnl1IdO9wASFntrPEWNe7:863gHt4hM9WWnMdO9w35PEWK |
| MD5: | EE33FDA08FBF10EF6450B875717F8887 |
| SHA1: | 7DFA77B8F4559115A6BF186EDE51727731D7107D |
| SHA-256: | 5CF611069F281584DE3E63DE8B99253AA665867299DC0192E8274A32A82CAA20 |
| SHA-512: | AED6E11003AAAACC3FB28AE838EDA521CB5411155063DFC391ACE2B9CBDFBD5476FAB2B5CC528485943EBBF537B95F026B7B5AB619893716F0A91AEFF076D885 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 278 |
| Entropy (8bit): | 3.544065206514744 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXCARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyy6ymD0wbnKNAH/lMz1 |
| MD5: | 06B3DDEFF905F75FA5FA5C5B70DCB938 |
| SHA1: | E441B94F0621D593DC870A27B28AC6BE3842E7DB |
| SHA-256: | 72D49BDDE44DAE251AEADF963C336F72FA870C969766A2BB343951E756B3C28A |
| SHA-512: | 058792BAA633516037E7D833C8F59584BA5742E050FA918B1BEFC6F64A226AB3821B6347A729BEC2DF68BB2DFD2F8E27947F74CD4F6BDF842606B9DEDA0B75CC |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2357051 |
| Entropy (8bit): | 7.929430745829162 |
| Encrypted: | false |
| SSDEEP: | 49152:tfVcGO3JiR6SgT7/bOCrKCsaFCX3CzwovQTSwW8nX:pVcG2iRedsaoXSzeOwWEX |
| MD5: | 5BDE450A4BD9EFC71C370C731E6CDF43 |
| SHA1: | 5B223FB902D06F9FCC70C37217277D1E95C8F39D |
| SHA-256: | 93BFC6AC1DC1CFF497DF92B30B42056C9D422B2321C21D65728B98E420D4ED50 |
| SHA-512: | 2365A9F76DA07D705A6053645FD2334D707967878F930061D451E571D9228C74A8016367525C37D09CB2AD82261B4B9E7CAEFBA0B96CE2374AC1FAC6B7AB5123 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 276 |
| Entropy (8bit): | 3.516423078177173 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUX7kARELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxny5ymD0wbnKNAH/lMz1 |
| MD5: | 5402138088A9CF0993C08A0CA81287B8 |
| SHA1: | D734BD7F2FB2E0C7D5DB8F70B897376ECA935C9A |
| SHA-256: | 5C9F5E03EEA4415043E65172AD2729F34BBBFC1A1156A630C65A71CE578EF137 |
| SHA-512: | F40A8704F16AB1D5DCD861355B07C7CB555934BB9DA85AACDCF869DC942A9314FFA12231F9149D28D438BE6A1A14FCAB332E54B6679E29AD001B546A0F48DE64 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3078052 |
| Entropy (8bit): | 7.954129852655753 |
| Encrypted: | false |
| SSDEEP: | 49152:bSEjlpY8skyFHuj2yY0ciM9U2NCVBB4YFzYFw7IaJE2VRK+Xn9DOOe9pp9N9Hu:bfp5sksA3cimUVxV05aJE2fKaDOXdN9O |
| MD5: | CDF98D6B111CF35576343B962EA5EEC6 |
| SHA1: | D481A70EC9835B82BD6E54316BF27FAD05F13A1C |
| SHA-256: | E3F108DDB3B8581A7A2290DD1E220957E357A802ECA5B3087C95ED13AD93A734 |
| SHA-512: | 95C352869D08C0FE903B15311622003CB4635DE8F3A624C402C869F1715316BE2D8D9C0AB58548A84BBB32757E5A1F244B1014120543581FDEA7D7D9D502EF9C |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 274 |
| Entropy (8bit): | 3.5303110391598502 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXzRELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnylymD0wbnKNAH/lMz1 |
| MD5: | 8D1E1991838307E4C2197ECB5BA9FA79 |
| SHA1: | 4AD8BB98DC9C5060B58899B3E9DCBA6890BC9E93 |
| SHA-256: | 4ABA3D10F65D050A19A3C2F57A024DBA342D1E05706A8A3F66B6B8E16A980DB9 |
| SHA-512: | DCDC9DB834303CC3EC8F1C94D950A104C504C588CE7631CE47E24268AABC18B1C23B6BEC3E2675E8A2A11C4D80EBF020324E0C7F985EA3A7BBC77C1101C23D01 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2924237 |
| Entropy (8bit): | 7.970803022812704 |
| Encrypted: | false |
| SSDEEP: | 49152:mc4NEo4XNd5wU5qTkdC4+K9u5b/i40RKRAO/cLf68wy9yxKrOUURBgmai2prH:mJef5yTSoKMF//DRGJwLx9DBaH |
| MD5: | 5AF1581E9E055B6E323129E4B07B1A45 |
| SHA1: | B849F85BCAF0E1C58FA841FFAE3476D20D33F2DD |
| SHA-256: | BDC9FBF81FBE91F5BF286B2CEA00EE76E70752F7E51FE801146B79F9ADCB8E98 |
| SHA-512: | 11BFEF500DAEC099503E8CDB3B4DE4EDE205201C0985DB4CA5EBBA03471502D79D6616D9E8F471809F6F388D7CBB8B0D0799262CBE89FEB13998033E601CEE09 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 286 |
| Entropy (8bit): | 3.5434534344080606 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXIc5+RELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxny4KcymD0wbnKNAH/lMz1 |
| MD5: | C9812793A4E94320C49C7CA054EE6AA4 |
| SHA1: | CC1F88C8F3868B3A9DE7E0E5F928DBD015234ABA |
| SHA-256: | A535AE7DD5EDA6D31E1B5053E64D0D7600A7805C6C8F8AF1DB65451822848FFC |
| SHA-512: | D28AADEDE0473C5889F3B770E8D34B20570282B154CD9301932BF90BF6205CBBB96B51027DEC6788961BAF2776439ADBF9B56542C82D89280C0BEB600DF4B633 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3611324 |
| Entropy (8bit): | 7.965784120725206 |
| Encrypted: | false |
| SSDEEP: | 49152:ixc1kZBIabo4dTJyr3hJ50gd9OaFxTy+1Nn/M/noivF0po3M0h0Vsm:ixcaAabT83hJLdoaFxTygxcoiX3M0iCm |
| MD5: | FB88BFB743EEA98506536FC44B053BD0 |
| SHA1: | B27A67A5EEC1B5F9E7A9C3B76223EDE4FCAF5537 |
| SHA-256: | 05057213BA7E5437AC3B8E9071A5577A8F04B1A67EFE25A08D3884249A22FBBF |
| SHA-512: | 4270A19F4D73297EEC910B81FF17441F3FC7A6A2A84EBA2EA3F7388DD3AA0BA31E9E455CFF93D0A34F4EC7CA74672D407A1C4DC838A130E678CA92A2E085851C |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 288 |
| Entropy (8bit): | 3.5359188337181853 |
| Encrypted: | false |
| SSDEEP: | 6:Q+sxnxUXe46x8RELpmlJ0+3FbnKf68dADryMluxHFpwwl:Q+sxnyO3UymD0wbnKNAH/lMz1 |
| MD5: | 0FEA64606C519B78B7A52639FEA11492 |
| SHA1: | FC9A6D5185088318032FD212F6BDCBD1CF2FFE76 |
| SHA-256: | 60059C4DD87A74A2DC36748941CF5A421ED394368E0AA19ACA90D850FA6E4A13 |
| SHA-512: | E04102E435B8297BF33086C0AD291AD36B5B4A97A59767F9CAC181D17CFB21D3CAA3235C7CD59BB301C58169C51C05DDDF2D637214384B9CC0324DAB0BB1EF8D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | modified |
| Size (bytes): | 274 |
| Entropy (8bit): | 3.4699940532942914 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXGWWYlIWimoa2nRE3QepmlJ0+3FbnKfZObdADxp1RDWlVwv:fxny2WzIgN2RGHmD0wbnKYZAH+Vwv |
| MD5: | 55BA5B2974A072B131249FD9FD42EB91 |
| SHA1: | 6509F8AC0AA23F9B8F3986217190F10206A691EA |
| SHA-256: | 13FFAAFFC987BAAEF7833CD6A8994E504873290395DC2BD9B8E1D7E7E64199E7 |
| SHA-512: | 3DFB0B21D09B63AF69698252D073D51144B4E6D56C87B092F5D97CE07CBCF9C966828259C8D95944A7732549C554AE1FF363CB936CA50C889C364AA97501B558 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3465076 |
| Entropy (8bit): | 7.898517227646252 |
| Encrypted: | false |
| SSDEEP: | 98304:n8ItVaN7vTMZ9IBbaETXbI8ItVaN7vTMZ9IBbaEiXbY:8ItwNX9BvTvItwNX9BvoM |
| MD5: | 8BC84DB5A3B2F8AE2940D3FB19B43787 |
| SHA1: | 3A5FE7B14D020FAD0E25CD1DF67864E3E23254EE |
| SHA-256: | AF1FDEEA092169BF794CDC290BCA20AEA07AC7097D0EFCAB76F783FA38FDACDD |
| SHA-512: | 558F52C2C79BF4A3FBB8BB7B1C671AFD70A2EC0B1BDE10AC0FED6F5398E53ED3B2087B38B7A4A3D209E4F1B34150506E1BA362E4E1620A47ED9A1C7924BB9995 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 252 |
| Entropy (8bit): | 3.4680595384446202 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXivlE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxnyydGHmD0+dAH/luWvv |
| MD5: | D79B5DE6D93AC06005761D88783B3EE6 |
| SHA1: | E05BDCE2673B6AA8CBB17A138751EDFA2264DB91 |
| SHA-256: | 96125D6804544B8D4E6AE8638EFD4BD1F96A1BFB9EEF57337FFF40BA9FF4CDD1 |
| SHA-512: | 34057F7B2AB273964CB086D8A7DF09A4E05D244A1A27E7589BDC7E5679AB5F587FAB52A2261DB22070DA11EF016F7386635A2B8E54D83730E77A7B142C2E3929 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5783 |
| Entropy (8bit): | 7.88616857639663 |
| Encrypted: | false |
| SSDEEP: | 96:CDG4D+8VsXzXc2zLXTJ2XFY47pk2G7HVlwFzTXNbMfmn2ivLZcreFWw5fc9ADdZm:CDG4DRGY23l2Xu47GL7YtT9V29yWvWdk |
| MD5: | 8109B3C170E6C2C114164B8947F88AA1 |
| SHA1: | FC63956575842219443F4B4C07A8127FBD804C84 |
| SHA-256: | F320B4BB4E57825AA4A40E5A61C1C0189D808B3EACE072B35C77F38745A4C416 |
| SHA-512: | F8A8D7A6469CD3E7C31F3335DDCC349AD7A686730E1866F130EE36AA9994C52A01545CE73D60B642FFE0EE49972435D183D8CD041F2BB006A6CAF31BAF4924AC |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4026 |
| Entropy (8bit): | 7.809492693601857 |
| Encrypted: | false |
| SSDEEP: | 96:VpDCBFLhxaUGm5EWA07yNdKH1FQpy8tnX8Iz3b7TrT502+fPD:VpDYFFRMNU+RtXzLf35t+3D |
| MD5: | 5D9BAD7ADB88CEE98C5203883261ACA1 |
| SHA1: | FBF1647FCF19BCEA6C3CF4365C797338CA282CD2 |
| SHA-256: | 8CE600404BB3DB92A51B471D4AB8B166B566C6977C9BB63370718736376E0E2F |
| SHA-512: | 7132923869A3DA2F2A75393959382599D7C4C05CA86B4B27271AB9EA95C7F2E80A16B45057F4FB729C9593F506208DC70AF2A635B90E4D8854AC06C787F6513D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 250 |
| Entropy (8bit): | 3.4916022431157345 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXsAl8xoE3QepmlJ0+hdADryMluyS6Bkls0Lwv:fxny8A8xoGHmD0+dAH/luWvv |
| MD5: | 1A314B08BB9194A41E3794EF54017811 |
| SHA1: | D1E70DB69CA737101524C75E634BB72F969464FF |
| SHA-256: | 9025DD691FCAD181D5FD5952C7AA3728CD8A2CAF20DEA14930876419BED9B379 |
| SHA-512: | AB29C8674A85711EABAE5F9559E9048FE91A2F51EB12D5A46152A310DE59F759DF8C617DA248798A7C20F60E26FBB1B0FC8DB47C46B098BCD26CF8CE78989ACA |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 314 |
| Entropy (8bit): | 3.5230842510951934 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXJuJaw93Ti8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyZuUw9eNGHmD0wbnKYZAH/lMZqiv |
| MD5: | F25AC64EC63FA98D9E37782E2E49D6E6 |
| SHA1: | 97DD9CFA4A22F5B87F2B53EFA37332A9EF218204 |
| SHA-256: | 834046A829D1EA836131B470884905856DBF2C3C136C98ADEEFA0F206F38F8AB |
| SHA-512: | A0387239CDE98BCDE1668B582B046619C3B3505F9440343DAD22B1B7B9E05F3B74F2AE29E591EC37B6570A0C0E5FE571442873594B0684DDCCB4F6A1B5E10B1F |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 294178 |
| Entropy (8bit): | 4.977758311135714 |
| Encrypted: | false |
| SSDEEP: | 6144:ydkJ3yU0orh0SCLVXyMFsoiOjWIm4vW2uo4hfhf7v3uH4NYYP4BpBaZTTSSamEUD:b |
| MD5: | 0C9731C90DD24ED5CA6AE283741078D0 |
| SHA1: | BDD3D7E5B0DE9240805EA53EF2EB784A4A121064 |
| SHA-256: | ABCE25D1EB3E70742EC278F35E4157EDB1D457A7F9D002AC658AAA6EA4E4DCDF |
| SHA-512: | A39E6201D6B34F37C686D9BD144DDD38AE212EDA26E3B81B06F1776891A90D84B65F2ABC5B8F546A7EFF3A62D35E432AF0254E2F5BFE4AA3E0CF9530D25949C0 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 290 |
| Entropy (8bit): | 3.5081874837369886 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXCOzi8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnydONGHmD0wbnKYZAH/lMZqiv |
| MD5: | 8D9B02CC69FA40564E6C781A9CC9E626 |
| SHA1: | 352469A1ABB8DA1DC550D7E27924E552B0D39204 |
| SHA-256: | 1D4483830710EF4A2CC173C3514A9F4B0ACA6C44DB22729B7BE074D18C625BAE |
| SHA-512: | 8B7DB2AB339DD8085104855F847C48970C2DD32ADB0B8EEA134A64C5CC7DE772615F85D057F4357703B65166C8CF0C06F4F6FD3E60FFC80DA3DD34B16D5B1281 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 255948 |
| Entropy (8bit): | 5.103631650117028 |
| Encrypted: | false |
| SSDEEP: | 6144:gwprAm795vtfb8p4bgWPWEtTmtcRCDPThNPFQwB+26RxlsIBkAgRMBHcTCwsHe5a:kW |
| MD5: | 9888A214D362470A6189DEFF775BE139 |
| SHA1: | 32B552EB3C73CD7D0D9D924C96B27A86753E0F97 |
| SHA-256: | C64ED5C2A323C00E84272AD3A701CAEBE1DCCEB67231978DE978042F09635FA7 |
| SHA-512: | 8A75FC2713003FA40B9730D29C786C76A796F30E6ACE12064468DD2BB4BF97EF26AC43FFE1158AB1DB06FF715D2E6CDE8EF3E8B7C49AA1341603CE122F311073 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 292 |
| Entropy (8bit): | 3.5026803317779778 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXC89ADni8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyf9ADiNGHmD0wbnKYZAH/lMZqiv |
| MD5: | A0D51783BFEE86F3AC46A810404B6796 |
| SHA1: | 93C5B21938DA69363DBF79CE594C302344AF9D9E |
| SHA-256: | 47B43E7DBDF8B25565D874E4E071547666B08D7DF4D736EA8521591D0DED640F |
| SHA-512: | CA3DB5A574745107E1D6CAA60E491F11D8B140637D4ED31577CC0540C12FDF132D8BC5EBABEA3222F4D7BA1CA016FF3D45FE7688D355478C27A4877E6C4D0D75 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 251032 |
| Entropy (8bit): | 5.102652100491927 |
| Encrypted: | false |
| SSDEEP: | 6144:hwprA5R95vtfb8p4bgWPwW6/m26AnV9IBgIkqm6HITUZJcjUZS1XkaNPQTlvB2zr:JA |
| MD5: | F425D8C274A8571B625EE66A8CE60287 |
| SHA1: | 29899E309C56F2517C7D9385ECDBB719B9E2A12B |
| SHA-256: | DD7B7878427276AF5DBF8355ECE0D1FE5D693DF55AF3F79347F9D20AE50DB938 |
| SHA-512: | E567F283D903FA533977B30FD753AA1043B9DDE48A251A9AC6777A3B67667443FEAD0003765A630D0F840B6C275818D2F903B6CB56136BEDCC6D9BDD20776564 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 288 |
| Entropy (8bit): | 3.523917709458511 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUXC1l8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnySvNGHmD0wbnKYZAH/lMZqiv |
| MD5: | 4A9A2E8DB82C90608C96008A5B6160EF |
| SHA1: | A49110814D9546B142C132EBB5B9D8A1EC23E2E6 |
| SHA-256: | 4FA948EEB075DFCB8DCA773A3F994560C69D275690953625731C4743CD5729F7 |
| SHA-512: | 320B9CC860FFBDB0FD2DB7DA7B7B129EEFF3FFB2E4E4820C3FBBFEA64735EB8CFE1F4BB5980302770C0F77FF575825F2D9A8BB59FC80AD4C198789B3D581963B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 296658 |
| Entropy (8bit): | 5.000002997029767 |
| Encrypted: | false |
| SSDEEP: | 6144:RwprAMk0qvtfL/vF/bkWPz9yv7EOMBPitjASjTQQr7IwR0TnyDkJb78plJwf33iV:M |
| MD5: | 9AC6DE7B629A4A802A41F93DB2C49747 |
| SHA1: | 3D6E929AA1330C869D83F2BF8EBEBACD197FB367 |
| SHA-256: | 52984BC716569120D57C8E6A360376E9934F00CF31447F5892514DDCCF546293 |
| SHA-512: | 5736F14569E0341AFB5576C94B0A7F87E42499CEC5927AAC83BB5A1F77B279C00AEA86B5F341E4215076D800F085D831F34E4425AD9CFD52C7AE4282864B1E73 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 290 |
| Entropy (8bit): | 3.5161159456784024 |
| Encrypted: | false |
| SSDEEP: | 6:fxnxUX+l8ME3QepmlJ0+3FbnKfZObdADryMluxHZypwwyv:fxnyulNGHmD0wbnKYZAH/lMZqiv |
| MD5: | C15EB3F4306EBF75D1E7C3C9382DEECC |
| SHA1: | A3F9684794FFD59151A80F97770D4A79F1D030A6 |
| SHA-256: | 23C262DF3AEACB125E88C8FFB7DBF56FD23F66E0D476AFD842A68DDE69658C7F |
| SHA-512: | ACDF7D69A815C42223FD6300179A991A379F7166EFAABEE41A3995FB2030CD41D8BCD46B566B56D1DFBAE8557AFA1D9FD55143900A506FA733DE9DA5D73389D6 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 344303 |
| Entropy (8bit): | 5.023195898304535 |
| Encrypted: | false |
| SSDEEP: | 6144:UwprANnsqvtfL/vF/bkWPRMMv7EOMBPitjASjTQQr7IwR0TnyDk1b78plJwf33iD:6 |
| MD5: | F079EC5E2CCB9CD4529673BCDFB90486 |
| SHA1: | FBA6696E6FA918F52997193168867DD3AEBE1AD6 |
| SHA-256: | 3B651258F4D0EE1BFFC7FB189250DED1B920475D1682370D6685769E3A9346DB |
| SHA-512: | 4FFFA59863F94B3778F321DA16C43B92A3053E024BDD8C5317077EA1ECC7B09F67ECE3C377DB693F3432BF1E2D947EC5BF8E88E19157ED08632537D8437C87D6 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 19893 |
| Entropy (8bit): | 7.592090622603185 |
| Encrypted: | false |
| SSDEEP: | 384:v3Zh3VlkpSIcgbA8E0GftpBjEmm3UFLrHRN7GYvlvQyUTL2mTAp:v31qp/A8Pi6mUqGGvU+mcp |
| MD5: | EF9CB8BDFBC08F03BEF519AD66BA642F |
| SHA1: | D98C275E9402462BF52A4D28FAF57DF0D232AF6B |
| SHA-256: | 93A2F873ACF5BEAD4BC0D1CC17B5E89A928D63619F70A1918B29E5230ABEAD8E |
| SHA-512: | 4DFBDF389730370FA142DCFB6F7E1AC1C0540B5320FA55F94164C0693DB06C21E6D4A1316F0ABE51E51BCBDAB3FD33AE882D9E3CFDB4385AB4C3AF4C2536B0B3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20457 |
| Entropy (8bit): | 7.612540359660869 |
| Encrypted: | false |
| SSDEEP: | 384:KyeISBuydn5rpmp77G8E0GftpBjE/kFLrHRN7ngslI66YVj:KHISBvd5rpmFG8Pi6/6nK666j |
| MD5: | 4EFA48EC307EAF2F9B346A073C67FCFB |
| SHA1: | 76A7E1234FF29A2B18C968F89082A14C9C851A43 |
| SHA-256: | 3EE9AE1F8DAB4C498BD561D8FCC66D83E58F11B7BB4B2776DF99F4CDA4B850C2 |
| SHA-512: | 2705644D501D85A821E96732776F61641FE82820FD6A39FFAF54A45AD126C886DC36C1398CDBDBB5FE282D9B09D27F9BFE7F26A646F926DA55DFF28E61FBD696 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26944 |
| Entropy (8bit): | 7.7574645319832225 |
| Encrypted: | false |
| SSDEEP: | 384:sbUX16g8/atF4NB3TJOvqeMRD/8svIZj/OwgbA8E0GftpBjEYwFLrHRN7mYll7PY:sbhg8yY4nMZK2hA8Pi6Yum4IVR |
| MD5: | F913DD84915753042D856CEC4E5DABA5 |
| SHA1: | FB1E423C8D09388C3F0B6D44364D94D786E8CF53 |
| SHA-256: | AA03AFB681A76C86C1BD8902EE2BBA31A644841CE6BCB913C8B5032713265578 |
| SHA-512: | C48850522C809B18208403B3E721ABEB1187F954045CE2F8C48522368171CC8FAF5F30FA44F6762AFDE130EC72284BB2E74097A35FE61F056656A27F9413C6B6 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 31083 |
| Entropy (8bit): | 7.814202819173796 |
| Encrypted: | false |
| SSDEEP: | 384:0XbSq3W46TVZb5fOFo1HtZwGqtRT44hS+nyBoiuFgbA8E0GftpBjEcBFLrHRN7Ku:0XpOflfOFo1DMr/iuuA8Pi6cfKjW66b |
| MD5: | 89A9818E6658D73A73B642522FF8701F |
| SHA1: | E66C95E957B74E90B444FF16D9B270ADAB12E0F4 |
| SHA-256: | F747DD8B79FC69217FA3E36FAE0AB417C1A0759C28C2C4F8B7450C70171228E6 |
| SHA-512: | 321782B0B633380DA69BD7E98AA05BE7FA5D19A131294CC7C0A598A6A1A1AEF97AB1068427E4223AA30976E3C8246FF5C3C1265D4768FE9909B37F38CBC9E60D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 21111 |
| Entropy (8bit): | 7.6297992466897675 |
| Encrypted: | false |
| SSDEEP: | 384:wWZsOvbMZGgbA8E0GftpBjEtnFLrHRN7Dfll7PK/pirk:xZRvuzA8Pi6t9DPISk |
| MD5: | D30AD26DBB6DECA4FDD294F48EDAD55D |
| SHA1: | CA767A1B6AF72CF170C9E10438F61797E0F2E8CE |
| SHA-256: | 6B1633DD765A11E7ED26F8F9A4DD45023B3E4ADB903C934DF3917D07A3856BFF |
| SHA-512: | 7B519F5D82BA0DA3B2EFFAD3029C7CAB63905D534F3CF1F7EA3446C42FA2130665CA7569A105C18289D65FA955C5624009C1D571E8960D2B7C52E0D8B42BE457 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 32833 |
| Entropy (8bit): | 7.825460303519308 |
| Encrypted: | false |
| SSDEEP: | 768:+0TU06CkaUYMoi//YX428RaFA8Pi6e9iA4I3w:vICTm/QorUpP7eAA4I3w |
| MD5: | 205AF51604EF96EF1E8E60212541F742 |
| SHA1: | D436FE689F8EF51FBA898454CF509DDB049C1545 |
| SHA-256: | DF3FFF163924D08517B41455F2D06788BA4E49C68337D15ECF329BE48CF7DA2D |
| SHA-512: | BCBA80ED0E36F7ABC1AEF19E6FF6EB654B9E91268E79CA8F421CB8ADD6C2B0268AD6C45E6CC06652F59235084ECDA3BA2851A38E6BCD1A0387EB3420C6EC94AC |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 31471 |
| Entropy (8bit): | 7.818389271364328 |
| Encrypted: | false |
| SSDEEP: | 768:eNtFWk68dbr2QxbM971RqpzAA8Pi6TlHaGRA5yr:eNtEkpGSbuHAkP7TlHaGq54 |
| MD5: | 91AADBEC4171CFA8292B618492F5EF34 |
| SHA1: | A47DEB62A21056376DD8F862E1300F1E7DC69D1D |
| SHA-256: | 7E1A90CDB2BA7F03ABCB4687F0931858BF57E13552E0E4E54EC69A27325011EA |
| SHA-512: | 1978280C699F7F739CD9F6A81F2B665643BD0BE42CE815D22528F0D57C5A646FC30AAE517D4A0A374EFB8BD3C53EB9B3D129660503A82BA065679BBBB39BD8D5 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 30957 |
| Entropy (8bit): | 7.808231503692675 |
| Encrypted: | false |
| SSDEEP: | 384:rKfgT03jNkAFbgUQWtxq9OGh1bBkd/1MVHb5iVOdMgbA8E0GftpBjEl8tFLrHRNF:r303jOrUQAkfhopWHbA8Pi6l8zuUIq |
| MD5: | D3C9036E4E1159E832B1B4D2E9D42BF0 |
| SHA1: | 966E04B7A8016D7FDAFE2C611957F6E946FAB1B9 |
| SHA-256: | 434576EB1A16C2D14D666A33EDDE76717C896D79F45DF56742AFD90ACB9F21CE |
| SHA-512: | D28D7F467F072985BCFCC6449AD16D528D531EB81912D4C3D956CF8936F96D474B18E7992B16D6834E9D2782470D193A17598CAB55A7F9EB0824BC3F069216B6 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 31562 |
| Entropy (8bit): | 7.81640835713744 |
| Encrypted: | false |
| SSDEEP: | 384:yhsBScEWkrljntbzuMmWh7ezPnGgbA8E0GftpBjohgsRFLrHRN7ybll7PK/p:MsBScwtnBmWNeTzA8PiuWsvyDI |
| MD5: | 1D6F8E73A0662A48D332090A4C8C898F |
| SHA1: | CF9AD4F157772F5EDC0FDDEEFD9B05958B67549C |
| SHA-256: | 8077C92C66D15D7E03FBFF3A48BD9576B80F698A36A44316EABA81EE8043B673 |
| SHA-512: | 5C03A99ECD747FBC7A15F082DF08C0D26383DB781E1F70771D4970E354A962294CE11BE53BECAAD6746AB127C5B194A93B7E1B139C12E6E45423B3A509D771FC |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 22340 |
| Entropy (8bit): | 7.668619892503165 |
| Encrypted: | false |
| SSDEEP: | 384:GByvLdFHny7G8E0GftpBjE8upFLrHRN778lvQyUTL2mm2y:Oy3HkG8Pi6887mvU+ma |
| MD5: | 8B29FAB506FD65C21C9CD6FE6BBBC146 |
| SHA1: | CE1B8A57BB3C682F6A0AFC32955DAFD360720FDF |
| SHA-256: | 773AC516C9B9B28058128EC9BE099F817F3F90211AC70DC68077599929683D6F |
| SHA-512: | AFA82CCBC0AEF9FAE4E728E4212E9C6EB2396D7330CCBE57F8979377D336B4DACF4F3BF835D04ABCEBCDB824B9A9147B4A7B5F12B8ADDADF42AB2C34A7450ADE |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 22594 |
| Entropy (8bit): | 7.674816892242868 |
| Encrypted: | false |
| SSDEEP: | 384:L7d2l8FbHaaIKbtv1gDISi8E0GftpBjEZRFLrHRN74bUll7PK/pd:LUlCIOt/8Pi6Zv4bMId |
| MD5: | EE0129C7CC1AC92BBC3D6CB0F653FCAE |
| SHA1: | 4ABAA858176B349BDAB826A7C5F9F00AC5499580 |
| SHA-256: | 345AA5CA2496F975B7E33C182D5E57377F8B740F23E9A55F4B2B446723947B72 |
| SHA-512: | CDDABE701C8CBA5BD5D131ABB85F9241212967CE6924E34B9D78D6F43D76A8DE017E28302FF13CE800456AD6D1B5B8FFD8891A66E5BE0C1E74CF19DF9A7AD959 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 21875 |
| Entropy (8bit): | 7.6559132103953305 |
| Encrypted: | false |
| SSDEEP: | 384:k73HRpZA6B3ulrnxtRT7G8E0GftpBjEdHqlFLrHRN7uhFlvQyUTL2m4c:k7XRgIkrG8Pi6dmuNvU+mp |
| MD5: | E532038762503FFA1371DF03FA2E222D |
| SHA1: | F343B559AE21DAEF06CBCD8B2B3695DE1B1A46F0 |
| SHA-256: | 5C70DD1551EB8B9B13EFAFEEAF70F08B307E110CAEE75AD9908A6A42BBCCB07E |
| SHA-512: | E0712B481F1991256A01C3D02ED56645F61AA46EB5DE47E5D64D5ECD20052CDA0EE7D38208B5EE982971CCA59F2717B7CAE4DFCF235B779215E7613AA5DCD976 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 21357 |
| Entropy (8bit): | 7.641082043198371 |
| Encrypted: | false |
| SSDEEP: | 384:zdx+NRrogu6fzCI7Th7G8E0GftpBjEzZq4FLrHRN7/Oll7PK/pB:/+NRrFf/G8Pi6zZb/GIB |
| MD5: | 97F5B7B7E9E1281999468A5C42CB12E7 |
| SHA1: | 99481B2FA609D1D80A9016ADAA3D37E7707A2ED1 |
| SHA-256: | 1CF5C2D0F6188FFFF117932C424CC55D1459E0852564C09D7779263ABD116118 |
| SHA-512: | ACE9718D724B51FE04B900CE1D2075C0C05C80243EA68D4731A63138F3A1287776E80BD67ECB14C323C69AA1796E9D8774A3611FE835BA3CA891270DE1E7FD1F |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 19288 |
| Entropy (8bit): | 7.570850633867256 |
| Encrypted: | false |
| SSDEEP: | 384:5ZII4Hf+7G8E0GftpBjCwBFLrHRN7bcClvQyUTL2mH:pG8PicgbcAvU+mH |
| MD5: | B9A6FF715719EE9DE16421AB983CA745 |
| SHA1: | 6B3F68B224020CD4BF142D7EDAAEC6B471870358 |
| SHA-256: | E3BE3F1E341C0FA5E9CB79E2739CF0565C6EA6C189EA3E53ACF04320459A7070 |
| SHA-512: | 062A765AC4602DB64D0504B79BE7380C14C143091A09F98A5E03E18747B2166BD862CE7EF55403D27B54CEB397D95BFAE3195C15D5516786FEBDAC6CD5FBF9CD |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 43653 |
| Entropy (8bit): | 7.899157106666598 |
| Encrypted: | false |
| SSDEEP: | 768:+bjfeR1OOZvv439PlDe5/QzhgFSo0UEDmJwkqTA8Pi63Bsgn66w:IM3CN9ZzhFbUUwaP73BsB6w |
| MD5: | DA3380458170E60CBEA72602FDD0D955 |
| SHA1: | 1D059F8CFD69F193D363DA337C87136885018F0F |
| SHA-256: | 6F8FFB225F3B8C7ADE31A17A02F941FC534E4F7B5EE678B21CD9060282034701 |
| SHA-512: | 17080110000C66DF2282FF4B8FD332467AF8CEFFA312C617E958FDFEBEE8EEA9E316201E8ABC8B30797BB6124A5CC7F649119A9C496316434B5AB23D2FBD5BB8 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 46413 |
| Entropy (8bit): | 7.9071408623961394 |
| Encrypted: | false |
| SSDEEP: | 768:WaxA0CH65GY3+fvCXCttfR8JEBrkquwDn+QV5V+vNWBatX/xG8Pi65sMuMjvU+mQ:hne65GYOfKXMSEBrBtDnzFAI4JxP75sM |
| MD5: | C455C4BC4BEC9E0DA67C4D1E53E46D5A |
| SHA1: | 7674600C387114B0F98EC925BE74E811FB25C325 |
| SHA-256: | 40E9AF9284FF07FDB75C33A11A794F5333712BAA4A6CF82FA529FBAF5AD0FED0 |
| SHA-512: | 08166F6CB3F140E4820F86918F59295CAD8B4A17240C206DCBA8B46088110BDF4E4ADBAB9F6380315AD4590CA7C8ECDC9AFAC6BD1935B17AFB411F325FE81720 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 42788 |
| Entropy (8bit): | 7.89307894056 |
| Encrypted: | false |
| SSDEEP: | 768:Hx+UzBiwDQTXgBm029ClGn4BZz6i5kIew/jG8Pi6lYJz1gH:0ZXc29eGn2n5klwjxP7l2z1gH |
| MD5: | 21A4B7B71631C2CCDA5FBBA63751F0D2 |
| SHA1: | DE65DC641D188062EF9385CC573B070AAA8BDD28 |
| SHA-256: | AE0C5A2C8377DBA613C576B1FF73F01AE8EF4A3A4A10B078B5752FB712B3776C |
| SHA-512: | 075A9E95C6EC7E358EA8942CF55EFB72AC797DEE1F1FFCD27AD60472ED38A76048D356638EF6EAC22106F94AFEE9D543B502D5E80B964471FA7419D288867D5D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 222992 |
| Entropy (8bit): | 7.994458910952451 |
| Encrypted: | true |
| SSDEEP: | 6144:k8/c2cF9GTLqsTmYstUdx+dwb2ooiVOfiI17zWbQ:jbzqGdpbZ/Mf3h68 |
| MD5: | 26BEAB9CCEAFE4FBF0B7C0362681A9D2 |
| SHA1: | F63DD970040CA9F6CFCF5793FF7D4F1F4A69C601 |
| SHA-256: | 217EC1B6E00A24583B166026DEC480D447FB564CF3BCA81984684648C272F767 |
| SHA-512: | 2BBEA62360E21E179014045EE95C7B330A086014F582439903F960375CA7E9C0CF5C0D5BB24E94279362965CA9D6A37E6AAA6A7C5969FC1970F6C50876582BE1 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 307348 |
| Entropy (8bit): | 7.996451393909308 |
| Encrypted: | true |
| SSDEEP: | 6144:7vH3uG+yiWx0eVJyORloyyDqnHefzOs81MrXLXx7:b36yiWH/LRS2CJl1 |
| MD5: | 0EBC45AA0E67CC435D0745438371F948 |
| SHA1: | 5584210C4A8B04F9C78F703734387391D6B5B347 |
| SHA-256: | 3744BFA286CFCFF46E51E6A68823A23F55416CD6619156B5929FED1F7778F1C7 |
| SHA-512: | 31761037C723C515C1A9A404E235FE0B412222CB239B86162D17763565D0CCB010397376FB9B61B38A6AEBDD5E6857FD8383045F924AF8A83F2C9B9AF6B81407 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 276650 |
| Entropy (8bit): | 7.995561338730199 |
| Encrypted: | true |
| SSDEEP: | 6144:H2a+HFkDF8gpmMt4kzwVVqhSYO6DITxPWgJl1CFExwXyo7N:mlZgFtIVVTuDExeWuv7N |
| MD5: | 84D8F3848E7424CBE3801F9570E05018 |
| SHA1: | 71D7F2621DA8B295CE6885F8C7C81016D583C6B1 |
| SHA-256: | B4BC3CD34BD328AAF68289CC0ED4D5CF8167F1EE1D7BE20232ED4747FF96A80A |
| SHA-512: | E27873BFD95E464CB58B3855F2DA404858B935530CF74C7F86FF8B3FC3086C2FAEA09FA479F0CA7B04D87595ED8C4D07D104426FF92DFB31BED405FA7A017DA8 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 271273 |
| Entropy (8bit): | 7.995547668305345 |
| Encrypted: | true |
| SSDEEP: | 6144:zfdvQnJMwXse4Vradf3mrC7woyWbjKlCVC7K:zfJwJse4VrS1AK |
| MD5: | 21437897C9B88AC2CB2BB2FEF922D191 |
| SHA1: | 0CAD3D026AF2270013F67E43CB44F0568013162D |
| SHA-256: | 372572DCBAD590F64F5D18727757CBDF9366DDE90955C79A0FCC9F536DAB0384 |
| SHA-512: | A74DA3775C19A7AF4A689FA4D920E416AB9F40A8BDA82CCF651DDB3EACBC5E932A120ABF55F855474CEBED0B0082F45D091E211AAEA6460424BFD23C2A445CC7 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 230916 |
| Entropy (8bit): | 7.994759087207758 |
| Encrypted: | true |
| SSDEEP: | 6144:OTIPtMXmJWnzPS3pqnkeuJXW+FNx1a72rLiQxEBTR:750nz63/FJRFLISnp+Bt |
| MD5: | 93FA9F779520AB2D22AC4EA864B7BB34 |
| SHA1: | D1E9F53A0E012A89978A3C9DED73FB1D380A9D8A |
| SHA-256: | 6A3801C1D4CF0C19A990282D93AC16007F6CACB645F0E0684EF2EDAC02647833 |
| SHA-512: | AA91B4565C88E5DA0CF294DC4A2C91EAEB6D81DCA96069DB032412E1946212A13C3580F5C0143DD28B33F4849D2C2DF2214CE1E20598D634E78663D20F03C4E6 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 261258 |
| Entropy (8bit): | 7.99541965268665 |
| Encrypted: | true |
| SSDEEP: | 6144:9blShNYrHNn0JU+D+kh8CIjXHWC7X0nZLC9Ge2KY/WfI:9ZSTYrtn0Sk+CIDHWC7chVKYx |
| MD5: | 65828DC7BE8BA1CE61AD7142252ACC54 |
| SHA1: | 538B186EAF960A076474A64F508B6C47B7699DD3 |
| SHA-256: | 849E2E915AA61E2F831E54F337A745A5946467D539CCBD0214B4742F4E7E94FF |
| SHA-512: | 8C129F26F77B4E73BF02DE8F9A9F432BB7E632EE4ABAD560A331C2A12DA9EF5840D737BFC1CE24FDCBB7EF39F30F98A00DD17F42C51216F37D0D237145B8DE15 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 295527 |
| Entropy (8bit): | 7.996203550147553 |
| Encrypted: | true |
| SSDEEP: | 6144:nwVaEqsf23c9shf6UyOGgDWDn/p3fd+zkPWnvGL3n9bQnkmVheyqtkl:MlPfW6sVEDn/pPdhWnvGL36zyyqal |
| MD5: | 9A07035EF802BF89F6ED254D0DB02AB0 |
| SHA1: | 9A48C1962B5CF1EE37FEEC861A5B51CE11091E78 |
| SHA-256: | 6CB03CEBAB2C28BF5318B13EEEE49FBED8DCEDAF771DE78126D1BFE9BD81C674 |
| SHA-512: | BE13D6D88C68FA16390B04130838D69CDB6169DC16AF0E198C905B22C25B345C541F8FCCD4690D88BE89383C19943B34EDC67793F5EB90A97CD6F6ECCB757F87 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 550906 |
| Entropy (8bit): | 7.998289614787931 |
| Encrypted: | true |
| SSDEEP: | 12288:N4Ar9NyDhUQM0Hk86V1YnOIxQ9e6SJbj2OjK:jAG8wa5Qw6SZ2Oj |
| MD5: | 1C12315C862A745A647DAD546EB4267E |
| SHA1: | B3FA11A511A634EEC92B051D04F8C1F0E84B3FD6 |
| SHA-256: | 4E2E93EBAC4AD3F8690B020040D1AE3F8E7905AB7286FC25671E07AA0282CAC0 |
| SHA-512: | CA8916694D42BAC0AD38B453849958E524E9EED2343EBAA10DF7A8ACD13DF5977F91A4F2773F1E57900EF044CFA7AF8A94B3E2DCE734D7A467DBB192408BC240 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 640684 |
| Entropy (8bit): | 7.99860205353102 |
| Encrypted: | true |
| SSDEEP: | 12288:eV7ivfl+kbkIrWu+2aoRjwv/cSUWauGPo2v65s4QqcT3ZCCz6CSj8aC:fdhr1+3y4MWaC2CO4V+3ZCCDsO |
| MD5: | F93364EEC6C4FFA5768DE545A2C34F07 |
| SHA1: | 166398552F6B7F4509732E148F93E207DD60420B |
| SHA-256: | 296B915148B29751E68687AE37D3FAFD9FFDDF458C48EB059A964D8F2291E899 |
| SHA-512: | 4F0965B4C5F543B857D9A44C7A125DDD3E8B74837A0FDD80C1FDC841BF22FC4CE4ADB83ACA8AA65A64F8AE6D764FA7B45B58556F44CFCE92BFAC43762A3BC5F4 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 723359 |
| Entropy (8bit): | 7.997550445816903 |
| Encrypted: | true |
| SSDEEP: | 12288:NPnBZX7wR3tMwYqNDQGnXTtfzO5U7yo6O7bLhe8yE3LLDok4a:JBMbYE7xzO5U917bLh/DL3oJa |
| MD5: | 748A53C6BDD5CE97BD54A76C7A334286 |
| SHA1: | 7DD9EEDB13AC187E375AD70F0622518662C61D9F |
| SHA-256: | 9AF92B1671772E8E781B58217DAB481F0AFBCF646DE36BC1BFFC7D411D14E351 |
| SHA-512: | EC8601D1A0DBD5D79C67AF2E90FAD44BBC0B890412842BF69065A2C7CB16C12B1C5FF594135C7B67B830779645801DA20C9BE8D629B6AD8A3BA656E0598F0540 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 698244 |
| Entropy (8bit): | 7.997838239368002 |
| Encrypted: | true |
| SSDEEP: | 12288:bUfKzAwwP7XAMWtr4FvMRt4lX0hnBdThiSb32+TdysrQgn7v4EemC6:sr7AMkJ34xu1bm4ZrQaY6 |
| MD5: | E29CE2663A56A1444EAA3732FFB82940 |
| SHA1: | 767A14B51BE74D443B5A3FEFF4D870C61CB76501 |
| SHA-256: | 3732EB6166945DB2BF792DA04199B5C4A0FB3C96621ECBFDEAF2EA1699BA88EE |
| SHA-512: | 6BC420F3A69E03D01A955570DC0656C83C9E842C99CF7B429122E612E1E54875C61063843D8A24DB7EC2035626F02DDABF6D84FC3902184C1EFF3583DBB4D3D8 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1065873 |
| Entropy (8bit): | 7.998277814657051 |
| Encrypted: | true |
| SSDEEP: | 24576:qehtHA3nsAOx7yN7THwxdGpkw8R60aTcua5U4c:hhmnsBMNAxdGpV5za5Uv |
| MD5: | E1101CCA6E3FEDB28B57AF4C41B50D37 |
| SHA1: | 990421B1D858B756E6695B004B26CDCCAE478C23 |
| SHA-256: | 69B2675E47917A9469F771D0C634BD62B2DFA0F5D4AF3FD7AFE9196BF889C19E |
| SHA-512: | B1EDEA65B6D0705A298BFF85FC894A11C1F86B43FAC3C2149D0BD4A13EDCD744AF337957CBC21A33AB7A948C11EA9F389F3A896B6B1423A504E7028C71300C44 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 953453 |
| Entropy (8bit): | 7.99899040756787 |
| Encrypted: | true |
| SSDEEP: | 24576:9B1Onw3vg7aeYPagzbJ5Vhv6LnV2Dhl7GEYqVjcyd:vww3o7BYPJbJ5Vh6UCqZfd |
| MD5: | D4EAC009E9E7B64B8B001AE82B8102FA |
| SHA1: | D8D166494D5813DB20EA1231DA4B1F8A9B312119 |
| SHA-256: | 8B0631DA4DC79E036251379A0A68C3BA977F14BCC797BA0EB9692F8BB90DDB4D |
| SHA-512: | 561653F9920661027D006E7DEF7FB27DE23B934E4860E0DF78C97D183B7CEBD9DCE0D395E2018EEF1C02FC6818A179A661E18A2C26C4180AFEE5EF4F9C9C6035 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1097591 |
| Entropy (8bit): | 7.99825462915052 |
| Encrypted: | true |
| SSDEEP: | 24576:UE9BMy98gA4cDWHkSrDans3MfEE6w8OaVuCibol0j41dwD:UE9Bdy3D4keQWt7w85VuVoaj4/Q |
| MD5: | BF95E967E7D1CEC8EFE426BC0127D3DE |
| SHA1: | BA44C5500A36D748A9A60A23DB47116D37FD61BC |
| SHA-256: | 4C3B008E0EB10A722D8FEDB325BFB97EDAA609B1E901295F224DD4CB4DF5FC26 |
| SHA-512: | 0697E394ABAC429B00C3A4F8DB9F509E5D45FF91F3C2AF2C2A330D465825F058778C06B129865B6107A0731762AD73777389BB0E319B53E6B28C363232FA2CE8 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1310275 |
| Entropy (8bit): | 7.9985829899274385 |
| Encrypted: | true |
| SSDEEP: | 24576:NN3M9UHpHZE4aubaPubP3M6d71FdtmFAjq+54/79LVzG+VnS:NN3M9UJHZE4abPyU4JtmFCq+q/7JlVS |
| MD5: | 9C9F49A47222C18025CC25575337A965 |
| SHA1: | E42EDB33471D7C1752DCC42C06DD3F9FDA8B25F0 |
| SHA-256: | ADA7EFF0676D9CCE1935D5485F3DDE35C594D343658FB1DA42CB5A48FC3FC16A |
| SHA-512: | 9FDCBAB988CBE97BFD931B727D31BA6B8ECF795D0679A714B9AFBC2C26E7DCF529E7A51289C7A1AE7EF04F4A923C2D7966D5AF7C0BC766DCD0FCA90251576794 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1881952 |
| Entropy (8bit): | 7.999066394602922 |
| Encrypted: | true |
| SSDEEP: | 49152:6Wp9u/ZAvKz7ZFCejPiSmYXKIr6kBwBUA:6W6Bn7ZFNiiKo2l |
| MD5: | 53C5F45B22E133B28D4BD3B5A350FDBD |
| SHA1: | D180CFB1438D27F76E1919DA3E84F307CB83434F |
| SHA-256: | 8AF4C7CAC47D2B9C7ADEADF276EDAE830B4CC5FFE7E765E3C3D7B3FADCB5F273 |
| SHA-512: | 46AD3DA58C63CA62FCFC4FAF9A7B5B320F4898A1E84EEF4DE16E0C0843BAFE078982FC9F78C5AC6511740B35382400B5F7AC3AE99BB52E32AD9639437DB481D1 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1766185 |
| Entropy (8bit): | 7.9991290831091115 |
| Encrypted: | true |
| SSDEEP: | 24576:O/gjMj+RP9Q07h9F75a0BXjBccHMVk2Hq2SkGa0QglyZtxmdPP2LcSUtfgfp16Yx:kJ6RP9Q07/X5V7yVF0QgktxAPutUt0zP |
| MD5: | 828F96031F40BF8EBCB5E52AAEEB7E4C |
| SHA1: | CACC32738A0A66C8FE51A81ED8E27A6F82E69EB2 |
| SHA-256: | 640AD075B555D4A2143F909EAFD91F54076F5DDE42A2B11CD897BC564B5D7FF7 |
| SHA-512: | 61F6355FF4D984931E79624394CCCA217054AE0F61B9AF1A1EDED5ACCA3D6FEF8940E338C313BE63FC766E6E7161CAFA0C8AE44AD4E0BE26C22FF17E2E6ABAF7 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2591108 |
| Entropy (8bit): | 7.999030891647433 |
| Encrypted: | true |
| SSDEEP: | 49152:ZSBBeAefkpB5iXfQJgi7JBaCCRZ3cM2VDHkvSJO6qzI1tE9Rn:EBI6gbCkMPDHKSJO6qsP6n |
| MD5: | BEB12A0464D096CA33BAEA4352CE800F |
| SHA1: | F678D650B4A41676BA05C836D462F34BDC5BF648 |
| SHA-256: | A44166F5C9F2553555A43586BA5DB1C1DE54D72D308A48268F27C6A00076B1CA |
| SHA-512: | B6E7CCD1ECBB9A49FC72E40771725825DAF41DDB2FF8EA4ECCE18B8FA1A59D3B2C474ADD055F30DA58C7E833A6E6555EBB77CCC324B61CA337187B4B41F7008B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2527736 |
| Entropy (8bit): | 7.992272975565323 |
| Encrypted: | true |
| SSDEEP: | 49152:NFXdpz4d98p/q5jA4q+9Uf5kx6wHR8WfPJZVhWzH4dRze76YP9nJ7yyAInT76nSY:NFXdKx5sM9SmxHKexZVhutJJVpCSqa0Z |
| MD5: | F256ACA509B4C6C0144D278C7036B0A8 |
| SHA1: | 93F6106D0759AFD0061F73B876AA9CAB05AA8EF6 |
| SHA-256: | AD26761D59F1FA9783C2F49184A2E8FE55FCD46CD3C49FFC099C02310649DC67 |
| SHA-512: | 08C57661F8CC9B547BBE42B4A5F8072B979E93346679ADE23CA685C0085F7BC14C26707B3D3C02F124359EBB640816E13763C7546FF095C96D2BB090320F3A95 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3256855 |
| Entropy (8bit): | 7.996842935632312 |
| Encrypted: | true |
| SSDEEP: | 98304:wh7I1aeH9YvgK+A+a7GiiQzP4YZDpQ2+Sd6Y:w21ay93aypQzzhpBL/ |
| MD5: | 8867BDF5FC754DA9DA6F5BA341334595 |
| SHA1: | 5067CCE84C6C682B75C1EF3DEA067A8D58D80FA9 |
| SHA-256: | 42323DD1D3E88C3207E16E0C95CA1048F2E4CD66183AD23B90171DA381D37B58 |
| SHA-512: | 93421D7FE305D27E7E2FD8521A8B328063CD22FE4DE67CCCF5D3B8F0258EF28027195C53062D179CD2EBA3A7E6F6A34A7A29297D4AF57650AA6DD19D1EF8413D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3417042 |
| Entropy (8bit): | 7.997652455069165 |
| Encrypted: | true |
| SSDEEP: | 98304:1YYkj2mRz6vkkB15AW4QD0ms+FdniD60bDUpS:qYkj7d6vP7NZDLn+PM8 |
| MD5: | 749C3615E54C8E6875518CFD84E5A1B2 |
| SHA1: | 64D51EB1156E850ECA706B00961C8B101F5AC2FC |
| SHA-256: | F2D2DF37366F8E49106980377D2448080879027C380D90D5A25DA3BDAD771F8C |
| SHA-512: | A5F591BA5C31513BD52BBFC5C6CAA79C036C7B50A55C4FDF96C84D311CCDCF1341F1665F1DA436D3744094280F98660481DCA4AA30BCEB3A7FCCB2A62412DC99 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 22008 |
| Entropy (8bit): | 7.662386258803613 |
| Encrypted: | false |
| SSDEEP: | 384:M7FUtfIdqSHQs7G8E0GftpBjED/C4RQrFLrHRN7TT8DlvQyUTL2mH:sWgdqR2G8Pi6D6YQZTTMvU+mH |
| MD5: | ABBF10CEE9480E41D81277E9538F98CB |
| SHA1: | F4EA53D180C95E78CC1DA88CD63F4C099BF0512C |
| SHA-256: | 557E0714D5536070131E7E7CDD18F0EF23FE6FB12381040812D022EC0FEE7957 |
| SHA-512: | 9430DAACF3CA67A18813ECD842BE80155FD2DE0D55B7CD16560F4AAEFDA781C3E4B714D850D367259CAAB28A3BF841A5CB42140B19CFE04AC3C23C358CA87FFB |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20235 |
| Entropy (8bit): | 7.61176626859621 |
| Encrypted: | false |
| SSDEEP: | 384:j3W3yGyjgbA8E0GftpBjEHvFLrHRN7pDAlI66Yv1:j3WFyAA8Pi6HVpDZ66c1 |
| MD5: | E3C64173B2F4AA7AB72E1396A9514BD8 |
| SHA1: | 774E52F7E74B90E6A520359840B0CA54B3085D88 |
| SHA-256: | 16C08547239E5B969041AB201EB55A3E30EAD400433E926257331CB945DFF094 |
| SHA-512: | 7ED618578C6517ED967FB3521FD4DBED9CDFB7F7982B2B8437804786833207D246E4FCD7B85A669C305BE3B823832D2628105F01E2CF30B494172A17FC48576D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 28911 |
| Entropy (8bit): | 7.7784119983764715 |
| Encrypted: | false |
| SSDEEP: | 384:WnJY165YD0tPYoCKa3HueqRyzVscLk1Yj2GjcgbA8E0GftpBjE2kWTpjFLrHRN7N:X4rtPzCK6uRoljXBA8Pi62ZphL0HRA5p |
| MD5: | 6D787B1E223DB6B91B69238062CCA872 |
| SHA1: | A02F3D847D1F8973E854B89D4558413EA2E349F7 |
| SHA-256: | DA2F261C3C82E229A097A9302C8580F014BB6442825DB47C008DA097CFCE0EE4 |
| SHA-512: | 9856D88D5C63CD6EBCF26E5D7521F194FA6B6E7BF55DD2E0238457A1B760EB8FB0D573A6E85E819BF8E5BE596537E99BC8C2DCE7EC6E2809A43490CACCD44169 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 31605 |
| Entropy (8bit): | 7.820497014278096 |
| Encrypted: | false |
| SSDEEP: | 384:7SpOUxgQ9gFodHZktfHa2TSmcAg76j8/xorK0JoZgbA8E0GftpBjE2PzFLrHRN7S:OngHltf7Bcp/xoB3A8Pi625D8RA54 |
| MD5: | 69EDB3BF81C99FE8A94BBA03408C5AE1 |
| SHA1: | 1AC85B369A976F35244BEEFA9C06787055C869C1 |
| SHA-256: | CEBE759BC4509700E3D23C6A5DF8D889132A60EBC92260A74947EAA1089E2789 |
| SHA-512: | BEA70229A21FBA3FD6D47A3DC5BECBA3EAA0335C08D486FAB808344BFAA2F7B24DD9A14A0F070E13A42BE45DE3FF54D32CF38B43192996D20DF4176964E81A53 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 31482 |
| Entropy (8bit): | 7.808057272318224 |
| Encrypted: | false |
| SSDEEP: | 768:LgHv7aLOcoLGQ4EykdrHwLa+A8Pi6Iv8ACIa:LwvWyx4EykdTwLaWP7I0ACIa |
| MD5: | F10DF902980F1D5BEEA96B2C668408A7 |
| SHA1: | 92D341581B9E24284B7C29E5623F8028DBBAAFE9 |
| SHA-256: | E0100320A4F63E07C77138A89EA24A1CBD69784A89FE3BF83E35576114B4CE02 |
| SHA-512: | 00A8FBCD17D791289AC8F12DC3C404B0AFD240278492DF74D2C5F37609B11D91A26D737BE95D3FE01CDBC25EEDC6DA0C2D63A2CCC4AB208D6E054014083365FB |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 33610 |
| Entropy (8bit): | 7.8340762758330476 |
| Encrypted: | false |
| SSDEEP: | 768:IlFYcxiahedKSDNAPk5WEEfA8Pi6xnOKMRA58:2JitdKsNAM5WBDP7xOKMq58 |
| MD5: | 51804E255C573176039F4D5B55C12AB2 |
| SHA1: | A4822E5072B858A7CCA7DE948CAA7D2268F1BB4B |
| SHA-256: | 3C6F66790C543D4E9D8E0E6F476B1ACADF0A5FCDD561B8484D8DDDADFDF8134B |
| SHA-512: | 2AC8B1E433C9283377B725A03AE72374663FEC81ABBA4C049B80409819BB9613E135FCD640ED433701795BDF4D5822461D76A06859C4084E7BAE216D771BB091 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 35519 |
| Entropy (8bit): | 7.846686335981972 |
| Encrypted: | false |
| SSDEEP: | 768:2LFougzHaUdBKUsM+Z56zBjA8Pi6bo+ld8IX:MFodzHaULR9P7bo+l6IX |
| MD5: | 53EE9DA49D0B84357038ECF376838D2E |
| SHA1: | AB03F46783B2227F312187DD84DC0C517510DE20 |
| SHA-256: | 9E46B8BA0BAD6E534AF33015C86396C33C5088D3AE5389217A5E90BA68252374 |
| SHA-512: | 751300C76ECE4901801B1F9F51EACA7A758D5D4E6507E227558AAAAF8E547C3D59FA56153FEA96B6B2D7EB08C7AF2E4D5568ACE7E798D1A86CEDE363EFBECF7C |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 34816 |
| Entropy (8bit): | 7.840826397575377 |
| Encrypted: | false |
| SSDEEP: | 768:i3R9VYnIYfPYmqX0CnF1SRHVnLG8Pi61YbEIFO:ih9VjYfPYlk+F1SJxP71YbEIFO |
| MD5: | 62863124CDCDA135ECC0E722782CB888 |
| SHA1: | 2543B8A9D3B2304BB73D2ADBEC60DB040B732055 |
| SHA-256: | 23CCFB7206A8F77A13080998EC6EF95B59B3C3E12B72B2D2AD4E53B0B26BB8C3 |
| SHA-512: | 2734D1119DC14B7DFB417F217867EF8CE8E73D69C332587278C0896B91247A40C289426A1A53F1796CCB42190001273D35525FCEA8BA2932A69A581972A1EF00 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 31835 |
| Entropy (8bit): | 7.81952379746457 |
| Encrypted: | false |
| SSDEEP: | 768:ltJDH8NmUekomvNufaqA8Pi6x5q3KQIGu:lvINukgzP7x5mRIGu |
| MD5: | 92A819D434A8AAEA2C65F0CC2F33BB3A |
| SHA1: | 85C3F1801EFFEA1EA10A8429B0875FC30893F2C8 |
| SHA-256: | 5D13F9907AC381D19F0A7552FD6D9FC07C9BD42C0F9CE017FFF75587E1890375 |
| SHA-512: | 01339E04130E08573DF7DBDFE25D82ED1D248B8D127BB90D536ECF4A26F5554E793E51E1A1800F61790738CC386121E443E942544246C60E47E25756F0C810A3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 31008 |
| Entropy (8bit): | 7.806058951525675 |
| Encrypted: | false |
| SSDEEP: | 768:ktH7oN/HbwiV+M+4Jc+5UrT3czi5uOHQA8Pi6DxUR/WTZIy:87sPEANXJc+eTMsuzP7DmN0ZIy |
| MD5: | E033CCBC7BA787A2F824CE0952E57D44 |
| SHA1: | EEEA573BEA217878CD9E47D7EA94E56BDAFFE22A |
| SHA-256: | D250EB1F93B43EFB7654B831B4183C9CAEC2D12D4EFEE8607FEE70B9FAB20730 |
| SHA-512: | B807B024B32E7F975AED408B77563A6B47865EECE32E8BA993502D9874B56580ECC9D9A3FEFA057FDD36FB8D519B6E184DB0593A65CC0ACF5E4ACCBEDE0F9417 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 23597 |
| Entropy (8bit): | 7.692965575678876 |
| Encrypted: | false |
| SSDEEP: | 384:y6aR//q0bJi/Uj+957G8E0GftpBj/4YOFLrHRN7LxhKll7PK/ph:y6I/Li/UjmVG8PiZ4YsLxh6Ih |
| MD5: | 7C645EC505982FE529D0E5035B378FFC |
| SHA1: | 1488ED81B350938D68A47C7F0BCE8D91FB1673E2 |
| SHA-256: | 298FD9DADF0ACEBB2AA058A09EEBFAE15E5D1C5A8982DEE6669C63FB6119A13D |
| SHA-512: | 9F410DA5DB24B0B72E7774B4CF4398EDF0D361B9A79FBE2736A1DDD770AFE280877F5B430E0D26147CCA0524A54EA8B41F88B771F3598C2744A7803237B314B2 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 22149 |
| Entropy (8bit): | 7.659898883631361 |
| Encrypted: | false |
| SSDEEP: | 384:b98FG/zdCbf7BOEawSi8E0GftpBjEPTFPxFLrHRN7S5ll7PK/pA2:N/zAbDae8Pi6PFPSRIA2 |
| MD5: | 66C5199CF4FB18BD4F9F3F2CCB074007 |
| SHA1: | BA9D8765FFC938549CC19B69B3BF5E6522FB062E |
| SHA-256: | 4A7DC4ED098E580C8D623C51B57C0BC1D601C45F40B60F39BBA5F063377C3C1F |
| SHA-512: | 94C434A131CDE47CB64BCD2FB8AF442482F8ECFA63D958C832ECA935DEB10D360034EF497E2EBB720C72B4C1D7A1130A64811D362054E1D52A441B91C46034B0 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20554 |
| Entropy (8bit): | 7.612044504501488 |
| Encrypted: | false |
| SSDEEP: | 384:zEAH676iPi8+IS5iqn7G8E0GftpBjExDxIHFLrHRN7Ke/ll7PK/pGaz6:zEhG8+ISrG8Pi6xDxCKoIGaz6 |
| MD5: | 486CBCB223B873132FFAF4B8AD0AD044 |
| SHA1: | B0EC82CD986C2AB5A51C577644DE32CFE9B12F92 |
| SHA-256: | B217393FD2F95A11E2C594E736067870212E3C5242A212D6F9539450E8684616 |
| SHA-512: | 69A48BF2B1DB64348C63FC0A50B4807FB9F0175215E306E60252FFFD792B1300128E8E847A81A0E24757B5F999875DA9E662C0F0D178071DB4F9E78239109060 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 21791 |
| Entropy (8bit): | 7.65837691872985 |
| Encrypted: | false |
| SSDEEP: | 384:PWew5RNDcvPgbA8E0GftpBjE0hsyaFLrHRN7BD9lI66YR:P3GRNDcEA8Pi60hsyABDo66g |
| MD5: | 7BF88B3CA20EB71ED453A3361908E010 |
| SHA1: | F75F86557051160507397F653D7768836E3B5655 |
| SHA-256: | E555A610A61DB4F45A29A7FB196A9726C25772594252AD534453E69F05345283 |
| SHA-512: | 2C3DFB0F8913D1D8FF95A55E1A1FD58CE1F9D034268CD7BC0D2BF2DCEFEA8EF05DD62B9AFDE1F983CACADD0529538381632ADFE7195EAC19CE4143414C44DBE3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 25314 |
| Entropy (8bit): | 7.729848360340861 |
| Encrypted: | false |
| SSDEEP: | 384:75V23GNhfG/YvmBqWDP7G8E0GftpBjEB1vrFLrHRN7mKll7PK/pRU0:LS/Yvc7TG8Pi6BLm6IS0 |
| MD5: | C47E3430AF813DF8B02E1CB4829DD94B |
| SHA1: | 35F1F1A18AA4FD2336A4EA9C6005DBE70013C7FC |
| SHA-256: | F2DB1E60533F0D108D5FB1004904C1F2E8557D4493F3B251A1B3055F8F1507A3 |
| SHA-512: | 6F8904E658EB7D04C6880F7CC3EC63FCFE31EF2C3A768F4ECF40B115314F23774DAEE66DCE9C55FAF0AD31075A3AC27C8967FD341C23C953CA28BDC120997287 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 30 |
| Entropy (8bit): | 1.172253928364927 |
| Encrypted: | false |
| SSDEEP: | 3:zpX:l |
| MD5: | B16041E3A13B68ED05ADB63BC9AB6E89 |
| SHA1: | 2B2419B9965640D3B02F9FD8A4DF10FA4B6C0CF2 |
| SHA-256: | 69456A98F8A3ACE08A521D5FF11557EA4F38AFE86C7BB94C125DFB1694CC19AD |
| SHA-512: | 1B90F0D5CB3DC525B045163F9328B7874055089EBEDE2A50510A8470EEAB0118462EAF226D110504C2D8C2D6E8C3216D75C86F20A537FB7BBE966712653055BA |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\Iamgold-PYMPATA Policy_Enrollment2024739441.LNK
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 679 |
| Entropy (8bit): | 4.781563369094586 |
| Encrypted: | false |
| SSDEEP: | 12:88zmkiuWQGiyyVCTltdjAKT5JzVX2XVCTltJeXVmV:8Mine6BAK9J5A6xeXVm |
| MD5: | 8E2BA6548B260FC6CB9A2B5B8081AFC1 |
| SHA1: | 710CEC012B7BB0FF65DE554DFFB56F9B1B8A3F8B |
| SHA-256: | A92AE5D78186482BA84F7CF1612A416EB7D21157874675E5E39F13D0CBAF9907 |
| SHA-512: | 4997B1279F65A949A26E2A527FB1DFB05DB26D725407FF773E3E6D711F9D3FD42A459F39D072371CAE8D78C44238FE5FF4D2D86482D5952D011C6D16C198AD44 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 147 |
| Entropy (8bit): | 4.935754860938678 |
| Encrypted: | false |
| SSDEEP: | 3:HIwovl/KJUAJ1XLxVXRGrlm45KJUAJ1XLxVXRGrlv:HUMJUAJzVXcrKJUAJzVXcr1 |
| MD5: | B2C6591E6F420C51E68AA2FCE6FB2A34 |
| SHA1: | DDE20A70CB92738F73726D814D7006117E0A7624 |
| SHA-256: | 029502BA38285F2576731D729FF8D83676042BEB76AFCEB0F5D993FD8EAAAF33 |
| SHA-512: | C815C995850A40DD1B6B7AF65CD45D540B5614C6428BFFE46DC0ABFA926187091866223C26FAD1C713CBE61DB03E0E8BDC3D03C49344FAA8237CF1DAA8ABB177 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090430[[fn=Banded]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 562113 |
| Entropy (8bit): | 7.67409707491542 |
| Encrypted: | false |
| SSDEEP: | 12288:/dy5Gtyp/FZ9QqjdxDfSp424XeavSktiAVE0:/dizp1ndpqpMZnV |
| MD5: | 4A1657A3872F9A77EC257F41B8F56B3D |
| SHA1: | 4DDEA85C649A2C1408B5B08A15DEF49BAA608A0B |
| SHA-256: | C17103ADE455094E17AC182AD4B4B6A8C942FD3ACB381F9A5E34E3F8B416AE60 |
| SHA-512: | 7A2932639E06D79A5CE1D3C71091890D9E329CA60251E16AE4095E4A06C6428B4F86B7FFFA097BF3EEFA064370A4D51CA3DF8C89EAFA3B1F45384759DEC72922 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03090434[[fn=Wood Type]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1649585 |
| Entropy (8bit): | 7.875240099125746 |
| Encrypted: | false |
| SSDEEP: | 24576:L368X6z95zf5BbQ6U79dYy2HiTIxRboyM/LZTl5KnCc:r68kb7UTYxGIxmnp65 |
| MD5: | 35200E94CEB3BB7A8B34B4E93E039023 |
| SHA1: | 5BB55EDAA4CDF9D805E36C36FB092E451BDDB74D |
| SHA-256: | 6CE04E8827ABAEA9B292048C5F84D824DE3CEFDB493101C2DB207BD4475AF1FD |
| SHA-512: | ED80CEE7C22D10664076BA7558A79485AA39BE80582CEC9A222621764DAE5EFA70F648F8E8C5C83B6FE31C2A9A933C814929782A964A47157505F4AE79A3E2F9 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457444[[fn=Basis]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 558035 |
| Entropy (8bit): | 7.696653383430889 |
| Encrypted: | false |
| SSDEEP: | 12288:DQ/oYjRRRRRRRRYcdY/5ASWYqBMp8xsGGEOzI7vQQwOyP:DQ/nRRRRRRRRxY/5JWYZ3GGbI8YA |
| MD5: | 3B5E44DDC6AE612E0346C58C2A5390E3 |
| SHA1: | 23BCF3FCB61F80C91D2CFFD8221394B1CB359C87 |
| SHA-256: | 9ED9AD4EB45E664800A4876101CBEE65C232EF478B6DE502A330D7C89C9AE8E2 |
| SHA-512: | 2E63419F272C6E411CA81945E85E08A6E3230A2F601C4D28D6312DB5C31321F94FAFA768B16BC377AE37B154C6869CA387005693A79C5AB1AC45ED73BCCC6479 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457464[[fn=Dividend]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 570901 |
| Entropy (8bit): | 7.674434888248144 |
| Encrypted: | false |
| SSDEEP: | 6144:D2tTXiO/3GH5SkPQVAqWnGrkFxvay910UUTWZJarUv9TA0g8:kX32H+VWgkFxSgGTmarUv9T |
| MD5: | D676DE8877ACEB43EF0ED570A2B30F0E |
| SHA1: | 6C8922697105CEC7894966C9C5553BEB64744717 |
| SHA-256: | DF012D101DE808F6CD872DFBB619B16732C23CF4ABC64149B6C3CE49E9EFDA01 |
| SHA-512: | F40BADA680EA5CA508947290BA73901D78DE79EAA10D01EAEF975B80612D60E75662BDA542E7F71C2BBA5CA9BA46ECAFE208FD6E40C1F929BB5E407B10E89FBD |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457475[[fn=Frame]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 523048 |
| Entropy (8bit): | 7.715248170753013 |
| Encrypted: | false |
| SSDEEP: | 6144:WfmDdN6Zfv8q5rnM6vZ02PtMZRkfW5ipbnMHxVcsOWrCMxy0sD/mcKb4rYEY:xDdQXBrMi2YtggW5ObnMH1brJpUmBU0N |
| MD5: | C276F590BB846309A5E30ADC35C502AD |
| SHA1: | CA6D9D6902475F0BE500B12B7204DD1864E7DD02 |
| SHA-256: | 782996D93DEBD2AF9B91E7F529767A8CE84ACCC36CD62F24EBB5117228B98F58 |
| SHA-512: | B85165C769DFE037502E125A04CFACDA7F7CC36184B8D0A54C1F9773666FFCC43A1B13373093F97B380871571788D532DEEA352E8D418E12FD7AAD6ADB75A150 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457485[[fn=Mesh]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3078052 |
| Entropy (8bit): | 7.954129852655753 |
| Encrypted: | false |
| SSDEEP: | 49152:bSEjlpY8skyFHuj2yY0ciM9U2NCVBB4YFzYFw7IaJE2VRK+Xn9DOOe9pp9N9Hu:bfp5sksA3cimUVxV05aJE2fKaDOXdN9O |
| MD5: | CDF98D6B111CF35576343B962EA5EEC6 |
| SHA1: | D481A70EC9835B82BD6E54316BF27FAD05F13A1C |
| SHA-256: | E3F108DDB3B8581A7A2290DD1E220957E357A802ECA5B3087C95ED13AD93A734 |
| SHA-512: | 95C352869D08C0FE903B15311622003CB4635DE8F3A624C402C869F1715316BE2D8D9C0AB58548A84BBB32757E5A1F244B1014120543581FDEA7D7D9D502EF9C |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457491[[fn=Metropolitan]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 777647 |
| Entropy (8bit): | 7.689662652914981 |
| Encrypted: | false |
| SSDEEP: | 6144:B04bNOJMngI856k0wwOGXMaXTLaTDmfBaN2Tx9iSUk1PdSnc0lnDlcGMcEFYYYYt:xbY6ngI46Aw5dmyYYYYYYYYY7p8d |
| MD5: | B30D2EF0FC261AECE90B62E9C5597379 |
| SHA1: | 4893C5B9BE04ECBB19EE45FFCE33CA56C7894FE3 |
| SHA-256: | BB170D6DE4EE8466F56C93DC26E47EE8A229B9C4842EA8DD0D9CCC71BC8E2976 |
| SHA-512: | 2E728408C20C3C23C84A1C22DB28F0943AAA960B4436F8C77570448D5BEA9B8D53D95F7562883FA4F9B282DFE2FD07251EEEFDE5481E49F99B8FEDB66AAAAB68 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457496[[fn=Parallax]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 924687 |
| Entropy (8bit): | 7.824849396154325 |
| Encrypted: | false |
| SSDEEP: | 12288:lsadD3eLxI8XSh4yDwFw8oWR+6dmw2ZpQDKpazILv7Jzny/ApcWqyOpEZULn:qLxI8XSh4yUF/oWR+mLKpYIr7l3ZQ7n |
| MD5: | 97EEC245165F2296139EF8D4D43BBB66 |
| SHA1: | 0D91B68CCB6063EB342CFCED4F21A1CE4115C209 |
| SHA-256: | 3C5CF7BDB27592791ADF4E7C5A09DDE4658E10ED8F47845064DB1153BE69487C |
| SHA-512: | 8594C49CAB6FF8385B1D6E174431DAFB0E947A8D7D3F200E622AE8260C793906E17AA3E6550D4775573858EA1243CCBF7132973CD1CF7A72C3587B9691535FF8 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457503[[fn=Quotable]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 966946 |
| Entropy (8bit): | 7.8785200658952 |
| Encrypted: | false |
| SSDEEP: | 24576:qBcvGBGhXQir6H1ws6+iU0YuA35VuinHX2NPs:ccvGBGdQ5CsMxQVj3yPs |
| MD5: | F03AB824395A8F1F1C4F92763E5C5CAD |
| SHA1: | A6E021918C3CEFFB6490222D37ECEED1FC435D52 |
| SHA-256: | D96F7A63A912CA058FB140138C41DCB3AF16638BA40820016AF78DF5D07FAEDD |
| SHA-512: | 0241146B63C938F11045FB9DF5360F63EF05B9B3DD1272A3E3E329A1BFEC5A4A645D5472461DE9C06CFE4ADB991FE96C58F0357249806C341999C033CD88A7AF |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457510[[fn=Savon]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1204049 |
| Entropy (8bit): | 7.92476783994848 |
| Encrypted: | false |
| SSDEEP: | 24576:+3zSQBxvOUIpHLYTCEmS1Wu09jRalJP3sdgnmAOFt0zU4L0MRx5QNn5:+bvI5UTCPu09qP3JPOFoR4N5 |
| MD5: | FD5BBC58056522847B3B75750603DF0C |
| SHA1: | 97313E85C0937739AF7C7FC084A10BF202AC9942 |
| SHA-256: | 44976408BD6D2703BDBE177259061A502552193B1CD05E09B698C0DAC3653C5F |
| SHA-512: | DBD72827044331215A7221CA9B0ECB8809C7C79825B9A2275F3450BAE016D7D320B4CA94095F7CEF4372AC63155C78CA4795E23F93166D4720032ECF9F932B8E |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM03457515[[fn=View]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 486596 |
| Entropy (8bit): | 7.668294441507828 |
| Encrypted: | false |
| SSDEEP: | 6144:A+JBmUx0Zo24n8z/2NSYFl2qGBuv8p6+LwwYmN59wBttsdJrmXMlP1NwQoGgeL:fNgxz/g5z2BT6+Eu0ntMcczNQG5L |
| MD5: | 0E37AECABDB3FDF8AAFEDB9C6D693D2F |
| SHA1: | F29254D2476DF70979F723DE38A4BF41C341AC78 |
| SHA-256: | 7AC7629142C2508B070F09788217114A70DE14ACDB9EA30CBAB0246F45082349 |
| SHA-512: | DE6AFE015C1D41737D50ADD857300996F6E929FED49CB71BC59BB091F9DAB76574C56DEA0488B0869FE61E563B07EBB7330C8745BC1DF6305594AC9BDEA4A6BF |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033917[[fn=Berlin]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 976001 |
| Entropy (8bit): | 7.791956689344336 |
| Encrypted: | false |
| SSDEEP: | 24576:zHM7eZGgFiHMRej4N9tpytNZ+tIw5ErZBImlX0m:zHM7eZGgFiHMRej++NZ+F5WvllZ |
| MD5: | 9E563D44C28B9632A7CF4BD046161994 |
| SHA1: | D3DB4E5F5B1CC6DD08BB3EBF488FF05411348A11 |
| SHA-256: | 86A70CDBE4377C32729FD6C5A0B5332B7925A91C492292B7F9C636321E6FAD86 |
| SHA-512: | 8EB14A1B10CB5C7607D3E07E63F668CFC5FC345B438D39138D62CADF335244952FBC016A311D5CB8A71D50660C49087B909528FC06C1D10AF313F904C06CBD5C |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033919[[fn=Circuit]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1463634 |
| Entropy (8bit): | 7.898382456989258 |
| Encrypted: | false |
| SSDEEP: | 24576:75MGNW/UpLkupMAqDJhNHK4/TuiKbdhbZM+byLH/:7ZwUpLkulkHK46iiDZHeLH/ |
| MD5: | ACBA78931B156E4AF5C4EF9E4AB3003B |
| SHA1: | 2A1F506749A046ECFB049F23EC43B429530EC489 |
| SHA-256: | 943E4044C40ABA93BD7EA31E8B5EBEBD7976085E8B1A89E905952FA8DAC7B878 |
| SHA-512: | 2815D912088BA049F468CA9D65B92F8951A9BE82AB194DBFACCF0E91F0202820F5BC9535966654D28F69A8B92D048808E95FEA93042D8C5DEA1DCB0D58BE5175 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033921[[fn=Damask]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2218943 |
| Entropy (8bit): | 7.942378408801199 |
| Encrypted: | false |
| SSDEEP: | 49152:8mwK3gH/l4hM06Wqnnl1IdO9wASFntrPEWNe7:863gHt4hM9WWnMdO9w35PEWK |
| MD5: | EE33FDA08FBF10EF6450B875717F8887 |
| SHA1: | 7DFA77B8F4559115A6BF186EDE51727731D7107D |
| SHA-256: | 5CF611069F281584DE3E63DE8B99253AA665867299DC0192E8274A32A82CAA20 |
| SHA-512: | AED6E11003AAAACC3FB28AE838EDA521CB5411155063DFC391ACE2B9CBDFBD5476FAB2B5CC528485943EBBF537B95F026B7B5AB619893716F0A91AEFF076D885 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033925[[fn=Droplet]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1750795 |
| Entropy (8bit): | 7.892395931401988 |
| Encrypted: | false |
| SSDEEP: | 24576:DyeAqDJpUDH3xk8ZKIBuX3TPtd36v4o5d4PISMETGBP6eUP+xSeW3v0HKPsc:uRqUjSTPtd36AFDM/BP6eUeW3v0Fc |
| MD5: | 529795E0B55926752462CBF32C14E738 |
| SHA1: | E72DFF8354DF2CB6A5698F14BBD1805D72FEEAFF |
| SHA-256: | 8D341D1C24176DC6B67104C2AF90FABD3BFF666CCC0E269381703D7659A6FA05 |
| SHA-512: | A51F440F1E19C084D905B721D0257F7EEE082B6377465CB94E677C29D4E844FD8021D0B6BA26C0907B72B84157C60A3EFEDFD96C16726F6ABEA8D896D78B08CE |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033927[[fn=Main Event]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2924237 |
| Entropy (8bit): | 7.970803022812704 |
| Encrypted: | false |
| SSDEEP: | 49152:mc4NEo4XNd5wU5qTkdC4+K9u5b/i40RKRAO/cLf68wy9yxKrOUURBgmai2prH:mJef5yTSoKMF//DRGJwLx9DBaH |
| MD5: | 5AF1581E9E055B6E323129E4B07B1A45 |
| SHA1: | B849F85BCAF0E1C58FA841FFAE3476D20D33F2DD |
| SHA-256: | BDC9FBF81FBE91F5BF286B2CEA00EE76E70752F7E51FE801146B79F9ADCB8E98 |
| SHA-512: | 11BFEF500DAEC099503E8CDB3B4DE4EDE205201C0985DB4CA5EBBA03471502D79D6616D9E8F471809F6F388D7CBB8B0D0799262CBE89FEB13998033E601CEE09 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033929[[fn=Slate]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2357051 |
| Entropy (8bit): | 7.929430745829162 |
| Encrypted: | false |
| SSDEEP: | 49152:tfVcGO3JiR6SgT7/bOCrKCsaFCX3CzwovQTSwW8nX:pVcG2iRedsaoXSzeOwWEX |
| MD5: | 5BDE450A4BD9EFC71C370C731E6CDF43 |
| SHA1: | 5B223FB902D06F9FCC70C37217277D1E95C8F39D |
| SHA-256: | 93BFC6AC1DC1CFF497DF92B30B42056C9D422B2321C21D65728B98E420D4ED50 |
| SHA-512: | 2365A9F76DA07D705A6053645FD2334D707967878F930061D451E571D9228C74A8016367525C37D09CB2AD82261B4B9E7CAEFBA0B96CE2374AC1FAC6B7AB5123 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM04033937[[fn=Vapor Trail]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3611324 |
| Entropy (8bit): | 7.965784120725206 |
| Encrypted: | false |
| SSDEEP: | 49152:ixc1kZBIabo4dTJyr3hJ50gd9OaFxTy+1Nn/M/noivF0po3M0h0Vsm:ixcaAabT83hJLdoaFxTygxcoiX3M0iCm |
| MD5: | FB88BFB743EEA98506536FC44B053BD0 |
| SHA1: | B27A67A5EEC1B5F9E7A9C3B76223EDE4FCAF5537 |
| SHA-256: | 05057213BA7E5437AC3B8E9071A5577A8F04B1A67EFE25A08D3884249A22FBBF |
| SHA-512: | 4270A19F4D73297EEC910B81FF17441F3FC7A6A2A84EBA2EA3F7388DD3AA0BA31E9E455CFF93D0A34F4EC7CA74672D407A1C4DC838A130E678CA92A2E085851C |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001114[[fn=Gallery]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1091485 |
| Entropy (8bit): | 7.906659368807194 |
| Encrypted: | false |
| SSDEEP: | 24576:oBpmCkw3Tg/euEB+UdoC4k7ytHkHA6B/puqW2MIkTeSBmKrZHQ:MR3c/AseydwppC7veSBmWHQ |
| MD5: | 2192871A20313BEC581B277E405C6322 |
| SHA1: | 1F9A6A5E10E1C3FFEB6B6725C5D2FA9ECDF51085 |
| SHA-256: | A06B302954A4C9A6A104A8691864A9577B0BFEA240B0915D9BEA006E98CDFFEC |
| SHA-512: | 6D8844D2807BB90AEA6FE0DDDB9C67542F587EC9B7FC762746164B2D4A1A99EF8368A70C97BAD7A986AAA80847F64408F50F4707BB039FCCC509133C231D53B9 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Document Themes\1033\TM10001115[[fn=Parcel]].thmx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 608122 |
| Entropy (8bit): | 7.729143855239127 |
| Encrypted: | false |
| SSDEEP: | 6144:Ckl6KRKwg9jf2q/bN69OuGFlC/DUhq68xOcJzGYnTxlLqU8dmTW:8yKwgZ2qY9kA7Uhq68H3ybmq |
| MD5: | 8BA551EEC497947FC39D1D48EC868B54 |
| SHA1: | 02FA15FDAF0D7E2F5D44CAE5FFAE49E8F91328DF |
| SHA-256: | DB2E99B969546E431548EBD58707FC001BBD1A4BDECAD387D194CC9C6D15AC89 |
| SHA-512: | CC97F9B2C83FF7CAC32AB9A9D46E0ACDE13EECABECD653C88F74E4FC19806BB9498D2F49C4B5581E58E7B0CB95584787EA455E69D99899381B592BEA177D4D4B |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328884[[fn=architecture]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5783 |
| Entropy (8bit): | 7.88616857639663 |
| Encrypted: | false |
| SSDEEP: | 96:CDG4D+8VsXzXc2zLXTJ2XFY47pk2G7HVlwFzTXNbMfmn2ivLZcreFWw5fc9ADdZm:CDG4DRGY23l2Xu47GL7YtT9V29yWvWdk |
| MD5: | 8109B3C170E6C2C114164B8947F88AA1 |
| SHA1: | FC63956575842219443F4B4C07A8127FBD804C84 |
| SHA-256: | F320B4BB4E57825AA4A40E5A61C1C0189D808B3EACE072B35C77F38745A4C416 |
| SHA-512: | F8A8D7A6469CD3E7C31F3335DDCC349AD7A686730E1866F130EE36AA9994C52A01545CE73D60B642FFE0EE49972435D183D8CD041F2BB006A6CAF31BAF4924AC |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328893[[fn=BracketList]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4026 |
| Entropy (8bit): | 7.809492693601857 |
| Encrypted: | false |
| SSDEEP: | 96:VpDCBFLhxaUGm5EWA07yNdKH1FQpy8tnX8Iz3b7TrT502+fPD:VpDYFFRMNU+RtXzLf35t+3D |
| MD5: | 5D9BAD7ADB88CEE98C5203883261ACA1 |
| SHA1: | FBF1647FCF19BCEA6C3CF4365C797338CA282CD2 |
| SHA-256: | 8CE600404BB3DB92A51B471D4AB8B166B566C6977C9BB63370718736376E0E2F |
| SHA-512: | 7132923869A3DA2F2A75393959382599D7C4C05CA86B4B27271AB9EA95C7F2E80A16B45057F4FB729C9593F506208DC70AF2A635B90E4D8854AC06C787F6513D |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328905[[fn=Chevron Accent]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4243 |
| Entropy (8bit): | 7.824383764848892 |
| Encrypted: | false |
| SSDEEP: | 96:22MQe4zHye8/djzF+JjvtmMkkBpF7e0LTkaf:22De4zHHCvF+nRBDXoaf |
| MD5: | 7BC0A35807CD69C37A949BBD51880FF5 |
| SHA1: | B5870846F44CAD890C6EFF2F272A037DA016F0D8 |
| SHA-256: | BD3A013F50EBF162AAC4CED11928101554C511BD40C2488CF9F5842A375B50CA |
| SHA-512: | B5B785D693216E38B5AB3F401F414CADACCDCB0DCA4318D88FE1763CD3BAB8B7670F010765296613E8D3363E47092B89357B4F1E3242F156750BE86F5F7E9B8D |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328908[[fn=Circle Process]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 16806 |
| Entropy (8bit): | 7.9519793977093505 |
| Encrypted: | false |
| SSDEEP: | 384:eSMjhqgJDGwOzHR3iCpK+QdLdfufFJ9aDn9LjDMVAwHknbz7OW:eSkhqglGwERSAHQdLhDn9AKokv7H |
| MD5: | 950F3AB11CB67CC651082FEBE523AF63 |
| SHA1: | 418DE03AD2EF93D0BD29C3D7045E94D3771DACB4 |
| SHA-256: | 9C5E4D8966A0B30A22D92DB1DA2F0DBF06AC2EA75E7BB8501777095EA0196974 |
| SHA-512: | D74BF52A58B0C0327DB9DDCAD739794020F00B3FA2DE2B44DAAEC9C1459ECAF3639A5D761BBBC6BDF735848C4FD7E124D13B23964B0055BB5AA4F6AFE76DFE00 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328916[[fn=Converging Text]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 11380 |
| Entropy (8bit): | 7.891971054886943 |
| Encrypted: | false |
| SSDEEP: | 192:VJcnLYnAVbOFLaCPLrGGbhaWEu6d3RmryqLkeAShObPb1AYcRMMXjkfa0nYBwggD:VcMC8lLrRbhy1ZqLyShYb1FHQ4C0nYQJ |
| MD5: | C9F9364C659E2F0C626AC0D0BB519062 |
| SHA1: | C4036C576074819309D03BB74C188BF902D1AE00 |
| SHA-256: | 6FC428CA0DCFC27D351736EF16C94D1AB08DDA50CB047A054F37EC028DD08AA2 |
| SHA-512: | 173A5E68E55163B081C5A8DA24AE46428E3FB326EBE17AE9588C7F7D7E5E5810BFCF08C23C3913D6BEC7369E06725F50387612F697AC6A444875C01A2C94D0FF |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328919[[fn=Hexagon Radial]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6024 |
| Entropy (8bit): | 7.886254023824049 |
| Encrypted: | false |
| SSDEEP: | 96:bGa2onnLYHTSSxpHVTSH1bywZKmpRqiUtFvS9xrPooBpni6eDa16MUELHsrKjRBA:SJonLYzSSr1TuZNwtFZKpiiyrKXuCUd |
| MD5: | 20621E61A4C5B0FFEEC98FFB2B3BCD31 |
| SHA1: | 4970C22A410DCB26D1BD83B60846EF6BEE1EF7C4 |
| SHA-256: | 223EA2602C3E95840232CACC30F63AA5B050FA360543C904F04575253034E6D7 |
| SHA-512: | BDF3A8E3D6EE87D8ADE0767918603B8D238CAE8A2DD0C0F0BF007E89E057C7D1604EB3CCAF0E1BA54419C045FC6380ECBDD070F1BB235C44865F1863A8FA7EEA |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328925[[fn=Interconnected Block Process]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 9191 |
| Entropy (8bit): | 7.93263830735235 |
| Encrypted: | false |
| SSDEEP: | 192:oeAMExvPJMg+yE+AfJLi3+Xoj7F3sPgMG61J88eDhFWT7hFNsdJtnLYJ7tSh:v2d+hnfJLi3+4ja4WqhFWT7FsdHMA |
| MD5: | 08D3A25DD65E5E0D36ADC602AE68C77D |
| SHA1: | F23B6DDB3DA0015B1D8877796F7001CABA25EA64 |
| SHA-256: | 58B45B9DBA959F40294DA2A54270F145644E810290F71260B90F0A3A9FCDEBC1 |
| SHA-512: | 77D24C272D67946A3413D0BEA700A7519B4981D3B4D8486A655305546CE6133456321EE94FD71008CBFD678433EA1C834CFC147179B31899A77D755008FCE489 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328932[[fn=Picture Frame]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4326 |
| Entropy (8bit): | 7.821066198539098 |
| Encrypted: | false |
| SSDEEP: | 96:+fF+Jrp7Yo5hnJiGa24TxEcpUeONo1w2NFocy2LQi33Z:2+f7YuhJdJ4TxEcmKwGkk3Z |
| MD5: | D32E93F7782B21785424AE2BEA62B387 |
| SHA1: | 1D5589155C319E28383BC01ED722D4C2A05EF593 |
| SHA-256: | 2DC7E71759D84EF8BB23F11981E2C2044626FEA659383E4B9922FE5891F5F478 |
| SHA-512: | 5B07D6764A6616A7EF25B81AB4BD4601ECEC1078727BFEAB4A780032AD31B1B26C7A2306E0DBB5B39FC6E03A3FC18AD67C170EA9790E82D8A6CEAB8E7F564447 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328935[[fn=Picture Organization Chart]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 7370 |
| Entropy (8bit): | 7.9204386289679745 |
| Encrypted: | false |
| SSDEEP: | 192:fYa+ngK2xG6HvLvoUnXxO+blKO1lt2Zg0AV:fYVn8Y6Hv3XxO+8uQZCV |
| MD5: | 586CEBC1FAC6962F9E36388E5549FFE9 |
| SHA1: | D1EF3BF2443AE75A78E9FDE8DD02C5B3E46F5F2E |
| SHA-256: | 1595C0C027B12FE4C2B506B907C795D14813BBF64A2F3F6F5D71912D7E57BC40 |
| SHA-512: | 68DEAE9C59EA98BD597AE67A17F3029BC7EA2F801AC775CF7DECA292069061EA49C9DF5776CB5160B2C24576249DAF817FA463196A04189873CF16EFC4BEDC62 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328940[[fn=Radial Picture List]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5596 |
| Entropy (8bit): | 7.875182123405584 |
| Encrypted: | false |
| SSDEEP: | 96:dGa2unnLYEB2EUAPOak380NQjqbHaPKJebgrEVws8Vw+BMa0EbdLVQaZJgDZh0pJ:UJunLYEB2EUAxk3pIYaScgYwsV4bdS0X |
| MD5: | CDC1493350011DB9892100E94D5592FE |
| SHA1: | 684B444ADE2A8DBE760B54C08F2D28F2D71AD0FA |
| SHA-256: | F637A67799B492FEFFB65632FED7815226396B4102A7ED790E0D9BB4936E1548 |
| SHA-512: | 3699066A4E8A041079F12E88AB2E7F485E968619CB79175267842846A3AD64AA8E7778CBACDF1117854A7FDCFB46C8025A62F147C81074823778C6B4DC930F12 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328951[[fn=Tabbed Arc]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3683 |
| Entropy (8bit): | 7.772039166640107 |
| Encrypted: | false |
| SSDEEP: | 96:GyfQZd6ZHNCWl9aXFkZwIq/QDsRYPf8P9QtDIs5r:G6wYtNZS1k99AmPfSOtD5r |
| MD5: | E8308DA3D46D0BC30857243E1B7D330D |
| SHA1: | C7F8E54A63EB254C194A23137F269185E07F9D10 |
| SHA-256: | 6534D4D7EF31B967DD0A20AFFF092F8B93D3C0EFCBF19D06833F223A65C6E7C4 |
| SHA-512: | 88AB7263B7A8D7DDE1225AE588842E07DF3CE7A07CBD937B7E26DA7DA7CFED23F9C12730D9EF4BC1ACF26506A2A96E07875A1A40C2AD55AD1791371EE674A09B |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328972[[fn=Tab List]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4888 |
| Entropy (8bit): | 7.8636569313247335 |
| Encrypted: | false |
| SSDEEP: | 96:StrFZ23/juILHPzms5UTuK9CuZGEoEuZ28H1HiGa2RnnLY+tUb:SPZQ7uCHPzms5UTlqauZVHdJRnLY+tUb |
| MD5: | 0A4CA91036DC4F3CD8B6DBF18094CF25 |
| SHA1: | 6C7EED2530CD0032E9EEAB589AFBC296D106FBB9 |
| SHA-256: | E5A56CCB3B3898F76ABF909209BFAB401B5DDCD88289AD43CE96B02989747E50 |
| SHA-512: | 7C69426F2250E8C84368E8056613C22977630A4B3F5B817FB5EA69081CE2A3CA6E5F93DF769264253D5411419AF73467A27F0BB61291CCDE67D931BD0689CB66 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328975[[fn=Theme Picture Accent]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6448 |
| Entropy (8bit): | 7.897260397307811 |
| Encrypted: | false |
| SSDEEP: | 192:tgaoRbo1sMjb0NiJ85oPtqcS+yaXWoa8XBzdJYnLYFtWT7:LR1sk+i4o1qc1yaukzd8MK |
| MD5: | 42A840DC06727E42D42C352703EC72AA |
| SHA1: | 21AAAF517AFB76BF1AF4E06134786B1716241D29 |
| SHA-256: | 02CCE7D526F844F70093AC41731D1A1E9B040905DCBA63BA8BFFC0DBD4D3A7A7 |
| SHA-512: | 8886BFD240D070237317352DEB3D46C6B07E392EBD57730B1DED016BD8740E75B9965F7A3FCD43796864F32AAE0BE911AB1A670E9CCC70E0774F64B1BDA93488 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328983[[fn=Theme Picture Alternating Accent]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5630 |
| Entropy (8bit): | 7.87271654296772 |
| Encrypted: | false |
| SSDEEP: | 96:n5ni6jKZWsD+QJaUQ7R6qYFF5QS+BEgeJam6S7ZCHuKViGa2CnnLYLt/ht:nccqxIBdQ1QS+uDJanS7ZCHHVdJCnLY5 |
| MD5: | 2F8998AA9CF348F1D6DE16EAB2D92070 |
| SHA1: | 85B13499937B4A584BEA0BFE60475FD4C73391B6 |
| SHA-256: | 8A216D16DEC44E02B9AB9BBADF8A11F97210D8B73277B22562A502550658E580 |
| SHA-512: | F10F7772985EDDA442B9558127F1959FF0A9909C7B7470E62D74948428BFFF7E278739209E8626AE5917FF728AFB8619AE137BEE2A6A4F40662122208A41ABB2 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328986[[fn=Theme Picture Grid]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6193 |
| Entropy (8bit): | 7.855499268199703 |
| Encrypted: | false |
| SSDEEP: | 192:WavHMKgnU2HUGFhUnkbOKoztj1QfcnLYut3d8:YKeUlGXUnC+HQSMp |
| MD5: | 031C246FFE0E2B623BBBD231E414E0D2 |
| SHA1: | A57CA6134779D54691A4EFD344BC6948E253E0BA |
| SHA-256: | 2D76C8D1D59EDB40D1FBBC6406A06577400582D1659A544269500479B6753CF7 |
| SHA-512: | 6A784C28E12C3740300883A0E690F560072A3EA8199977CBD7F260A21E8346B82BA8A4F78394D3BB53FA2E98564B764C2D0232C40B25FB6085C36D20D70A39D1 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328990[[fn=Varying Width List]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3075 |
| Entropy (8bit): | 7.716021191059687 |
| Encrypted: | false |
| SSDEEP: | 48:96yn4sOBoygpySCCxwKsZCB2oLEIK+aQpUNLRQWtmMamIZxAwCC2QnyODhVOzP4:l0vCxJsZQ2ofpKvtmMdIZxAwJyODhVOE |
| MD5: | 67766FF48AF205B771B53AA2FA82B4F4 |
| SHA1: | 0964F8B9DC737E954E16984A585BDC37CE143D84 |
| SHA-256: | 160D05B4CB42E1200B859A2DE00770A5C9EBC736B70034AFC832A475372A1667 |
| SHA-512: | AC28B0B4A9178E9B424E5893870913D80F4EE03D595F587AA1D3ACC68194153BAFC29436ADFD6EA8992F0B00D17A43CFB42C529829090AF32C3BE591BD41776D |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\SmartArt Graphics\1033\TM03328998[[fn=Rings]].glox (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5151 |
| Entropy (8bit): | 7.859615916913808 |
| Encrypted: | false |
| SSDEEP: | 96:WkV3UHhcZDEteEJqeSGzpG43GUR8m8b6dDLiCTfjKPnD6H5RhfuDKNtxx3+7tDLp:Wq3UBc9EJqIpGgD5dDL1DjKvDKhfnNti |
| MD5: | 6C24ED9C7C868DB0D55492BB126EAFF8 |
| SHA1: | C6D96D4D298573B70CF5C714151CF87532535888 |
| SHA-256: | 48AF17267AD75C142EFA7AB7525CA48FAB579592339FB93E92C4C4DA577D4C9F |
| SHA-512: | A3E9DC48C04DC8571289F57AE790CA4E6934FBEA4FDDC20CB780F7EA469FE1FC1D480A1DBB04D15301EF061DA5700FF0A793EB67D2811C525FEF618B997BCABD |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851216[[fn=apasixtheditionofficeonline]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 333258 |
| Entropy (8bit): | 4.654450340871081 |
| Encrypted: | false |
| SSDEEP: | 6144:ybW83Zb181+MKHZR5D7H3hgtfL/8mIDbEhPv9FHSVsioWUyGYmwxAw+GIfnUNv5J:i |
| MD5: | 5632C4A81D2193986ACD29EADF1A2177 |
| SHA1: | E8FF4FDFEB0002786FCE1CF8F3D25F8E9631E346 |
| SHA-256: | 06DE709513D7976690B3DD8F5FDF1E59CF456A2DFBA952B97EACC72FE47B238B |
| SHA-512: | 676CE1957A374E0F36634AA9CFFBCFB1E1BEFE1B31EE876483B10763EA9B2D703F2F3782B642A5D7D0945C5149B572751EBD9ABB47982864834EF61E3427C796 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851217[[fn=chicago]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 296658 |
| Entropy (8bit): | 5.000002997029767 |
| Encrypted: | false |
| SSDEEP: | 6144:RwprAMk0qvtfL/vF/bkWPz9yv7EOMBPitjASjTQQr7IwR0TnyDkJb78plJwf33iV:M |
| MD5: | 9AC6DE7B629A4A802A41F93DB2C49747 |
| SHA1: | 3D6E929AA1330C869D83F2BF8EBEBACD197FB367 |
| SHA-256: | 52984BC716569120D57C8E6A360376E9934F00CF31447F5892514DDCCF546293 |
| SHA-512: | 5736F14569E0341AFB5576C94B0A7F87E42499CEC5927AAC83BB5A1F77B279C00AEA86B5F341E4215076D800F085D831F34E4425AD9CFD52C7AE4282864B1E73 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851218[[fn=gb]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 268317 |
| Entropy (8bit): | 5.05419861997223 |
| Encrypted: | false |
| SSDEEP: | 6144:JwprAJLR95vtfb8p4bgWPzDCvCmvQursq7vImej/yQzSS1apSiQhHDOruvoVeMUh:N9 |
| MD5: | 51D32EE5BC7AB811041F799652D26E04 |
| SHA1: | 412193006AA3EF19E0A57E16ACF86B830993024A |
| SHA-256: | 6230814BF5B2D554397580613E20681752240AB87FD354ECECF188C1EABE0E97 |
| SHA-512: | 5FC5D889B0C8E5EF464B76F0C4C9E61BDA59B2D1205AC9417CC74D6E9F989FB73D78B4EB3044A1A1E1F2C00CE1CA1BD6D4D07EEADC4108C7B124867711C31810 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851219[[fn=gostname]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 255948 |
| Entropy (8bit): | 5.103631650117028 |
| Encrypted: | false |
| SSDEEP: | 6144:gwprAm795vtfb8p4bgWPWEtTmtcRCDPThNPFQwB+26RxlsIBkAgRMBHcTCwsHe5a:kW |
| MD5: | 9888A214D362470A6189DEFF775BE139 |
| SHA1: | 32B552EB3C73CD7D0D9D924C96B27A86753E0F97 |
| SHA-256: | C64ED5C2A323C00E84272AD3A701CAEBE1DCCEB67231978DE978042F09635FA7 |
| SHA-512: | 8A75FC2713003FA40B9730D29C786C76A796F30E6ACE12064468DD2BB4BF97EF26AC43FFE1158AB1DB06FF715D2E6CDE8EF3E8B7C49AA1341603CE122F311073 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851220[[fn=gosttitle]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 251032 |
| Entropy (8bit): | 5.102652100491927 |
| Encrypted: | false |
| SSDEEP: | 6144:hwprA5R95vtfb8p4bgWPwW6/m26AnV9IBgIkqm6HITUZJcjUZS1XkaNPQTlvB2zr:JA |
| MD5: | F425D8C274A8571B625EE66A8CE60287 |
| SHA1: | 29899E309C56F2517C7D9385ECDBB719B9E2A12B |
| SHA-256: | DD7B7878427276AF5DBF8355ECE0D1FE5D693DF55AF3F79347F9D20AE50DB938 |
| SHA-512: | E567F283D903FA533977B30FD753AA1043B9DDE48A251A9AC6777A3B67667443FEAD0003765A630D0F840B6C275818D2F903B6CB56136BEDCC6D9BDD20776564 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851221[[fn=harvardanglia2008officeonline]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 284415 |
| Entropy (8bit): | 5.00549404077789 |
| Encrypted: | false |
| SSDEEP: | 6144:N9G5o7Fv0ZcxrStAtXWty8zRLYBQd8itHiYYPVJHMSo27hlwNR57johqBXlwNR2b:y |
| MD5: | 33A829B4893044E1851725F4DAF20271 |
| SHA1: | DAC368749004C255FB0777E79F6E4426E12E5EC8 |
| SHA-256: | C40451CADF8944A9625DD690624EA1BA19CECB825A67081E8144AD5526116924 |
| SHA-512: | 41C1F65E818C2757E1A37F5255E98F6EDEAC4214F9D189AD09C6F7A51F036768C1A03D6CFD5845A42C455EE189D13BB795673ACE3B50F3E1D77DAFF400F4D708 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851222[[fn=ieee2006officeonline]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 294178 |
| Entropy (8bit): | 4.977758311135714 |
| Encrypted: | false |
| SSDEEP: | 6144:ydkJ3yU0orh0SCLVXyMFsoiOjWIm4vW2uo4hfhf7v3uH4NYYP4BpBaZTTSSamEUD:b |
| MD5: | 0C9731C90DD24ED5CA6AE283741078D0 |
| SHA1: | BDD3D7E5B0DE9240805EA53EF2EB784A4A121064 |
| SHA-256: | ABCE25D1EB3E70742EC278F35E4157EDB1D457A7F9D002AC658AAA6EA4E4DCDF |
| SHA-512: | A39E6201D6B34F37C686D9BD144DDD38AE212EDA26E3B81B06F1776891A90D84B65F2ABC5B8F546A7EFF3A62D35E432AF0254E2F5BFE4AA3E0CF9530D25949C0 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851223[[fn=iso690]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 270198 |
| Entropy (8bit): | 5.073814698282113 |
| Encrypted: | false |
| SSDEEP: | 6144:JwprAiaR95vtfb8pDbgWPzDCvCmvQursq7vImej/yQ4SS1apSiQhHDOruvoVeMUX:We |
| MD5: | FF0E07EFF1333CDF9FC2523D323DD654 |
| SHA1: | 77A1AE0DD8DBC3FEE65DD6266F31E2A564D088A4 |
| SHA-256: | 3F925E0CC1542F09DE1F99060899EAFB0042BB9682507C907173C392115A44B5 |
| SHA-512: | B4615F995FAB87661C2DBE46625AA982215D7BDE27CAFAE221DCA76087FE76DA4B4A381943436FCAC1577CB3D260D0050B32B7B93E3EB07912494429F126BB3D |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851224[[fn=iso690nmerical]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 217137 |
| Entropy (8bit): | 5.068335381017074 |
| Encrypted: | false |
| SSDEEP: | 6144:AwprA3Z95vtf58pb1WP2DCvCmvQursq7vIme5QyQzSS1apSiQhHDlruvoVeMUwFj:4P |
| MD5: | 3BF8591E1D808BCCAD8EE2B822CC156B |
| SHA1: | 9CC1E5EFD715BD0EAE5AF983FB349BAC7A6D7BA0 |
| SHA-256: | 7194396E5C833E6C8710A2E5D114E8E24338C64EC9818D51A929D57A5E4A76C8 |
| SHA-512: | D434A4C15DA3711A5DAAF5F7D0A5E324B4D94A04B3787CA35456BFE423EAC9D11532BB742CDE6E23C16FA9FD203D3636BD198B41C7A51E7D3562D5306D74F757 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851225[[fn=mlaseventheditionofficeonline]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 254875 |
| Entropy (8bit): | 5.003842588822783 |
| Encrypted: | false |
| SSDEEP: | 6144:MwprAnniNgtfbzbOWPuv7kOMBLitjAUjTQLrYHwR0TnyDkHqV3iPr1zHX5T6SSXj:a |
| MD5: | 377B3E355414466F3E3861BCE1844976 |
| SHA1: | 0B639A3880ACA3FD90FA918197A669CC005E2BA4 |
| SHA-256: | 4AC5B26C5E66E122DE80243EF621CA3E1142F643DD2AD61B75FF41CFEE3DFFAF |
| SHA-512: | B050AD52A8161F96CBDC880DD1356186F381B57159F5010489B04528DB798DB955F0C530465AB3ECD5C653586508429D98336D6EB150436F1A53ABEE0697AEB9 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851226[[fn=turabian]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 344303 |
| Entropy (8bit): | 5.023195898304535 |
| Encrypted: | false |
| SSDEEP: | 6144:UwprANnsqvtfL/vF/bkWPRMMv7EOMBPitjASjTQQr7IwR0TnyDk1b78plJwf33iD:6 |
| MD5: | F079EC5E2CCB9CD4529673BCDFB90486 |
| SHA1: | FBA6696E6FA918F52997193168867DD3AEBE1AD6 |
| SHA-256: | 3B651258F4D0EE1BFFC7FB189250DED1B920475D1682370D6685769E3A9346DB |
| SHA-512: | 4FFFA59863F94B3778F321DA16C43B92A3053E024BDD8C5317077EA1ECC7B09F67ECE3C377DB693F3432BF1E2D947EC5BF8E88E19157ED08632537D8437C87D6 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Bibliography Styles\TM02851227[[fn=sist02]].xsl (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 250983 |
| Entropy (8bit): | 5.057714239438731 |
| Encrypted: | false |
| SSDEEP: | 6144:JwprA6OS95vtfb8p4bgWPzkhUh9I5/oBRSifJeg/yQzvapSiQhHZeruvoXMUw3im:uP |
| MD5: | F883B260A8D67082EA895C14BF56DD56 |
| SHA1: | 7954565C1F243D46AD3B1E2F1BAF3281451FC14B |
| SHA-256: | EF4835DB41A485B56C2EF0FF7094BC2350460573A686182BC45FD6613480E353 |
| SHA-512: | D95924A499F32D9B4D9A7D298502181F9E9048C21DBE0496FA3C3279B263D6F7D594B859111A99B1A53BD248EE69B867D7B1768C42E1E40934E0B990F0CE051E |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM01840907[[fn=Equations]].dotx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 51826 |
| Entropy (8bit): | 5.541375256745271 |
| Encrypted: | false |
| SSDEEP: | 384:erH5dYPCA4t3aEFGiSUDtYfEbi5Ry/AT7/6tHODaFlDSomurYNfT4A0VIwWNS89u:Q6Cbh9tENyWdaFUSYNfZS89/3qtEu |
| MD5: | 2AB22AC99ACFA8A82742E774323C0DBD |
| SHA1: | 790F8B56DF79641E83A16E443A75A66E6AA2F244 |
| SHA-256: | BC9D45D0419A08840093B0BF4DCF96264C02DFE5BD295CD9B53722E1DA02929D |
| SHA-512: | E5715C0ECF35CE250968BD6DE5744D28A9F57D20FD6866E2AF0B2D8C8F80FEDC741D48F554397D61C5E702DA896BD33EED92D778DBAC71E2E98DCFB0912DE07B |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM02835233[[fn=Text Sidebar (Annual Report Red and Black design)]].docx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 47296 |
| Entropy (8bit): | 6.42327948041841 |
| Encrypted: | false |
| SSDEEP: | 768:ftjI1BT8N37szq00s7dB2wMVJGHR97/RDU5naXUsT:fJIPTfq0ndB2w1bpsE |
| MD5: | 5A53F55DD7DA8F10A8C0E711F548B335 |
| SHA1: | 035E685927DA2FECB88DE9CAF0BECEC88BC118A7 |
| SHA-256: | 66501B659614227584DA04B64F44309544355E3582F59DBCA3C9463F67B7E303 |
| SHA-512: | 095BD5D1ACA2A0CA3430DE2F005E1D576AC9387E096D32D556E4348F02F4D658D0E22F2FC4AA5BF6C07437E6A6230D2ABF73BBD1A0344D73B864BC4813D60861 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998158[[fn=Element]].dotx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 34415 |
| Entropy (8bit): | 7.352974342178997 |
| Encrypted: | false |
| SSDEEP: | 768:ev13NPo9o5NGEVIi3kvH+3SMdk7zp3tE2:ev13xoOE+R3BkR7 |
| MD5: | 7CDFFC23FB85AD5737452762FA36AAA0 |
| SHA1: | CFBC97247959B3142AFD7B6858AD37B18AFB3237 |
| SHA-256: | 68A8FBFBEE4C903E17C9421082E839144C205C559AFE61338CBDB3AF79F0D270 |
| SHA-512: | A0685FD251208B772436E9745DA2AA52BC26E275537688E3AB44589372D876C9ACE14B21F16EC4053C50EB4C8E11787E9B9D922E37249D2795C5B7986497033E |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Templates\LiveContent\16\Managed\Word Document Building Blocks\1033\TM03998159[[fn=Insight]].dotx (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3465076 |
| Entropy (8bit): | 7.898517227646252 |
| Encrypted: | false |
| SSDEEP: | 98304:n8ItVaN7vTMZ9IBbaETXbI8ItVaN7vTMZ9IBbaEiXbY:8ItwNX9BvTvItwNX9BvoM |
| MD5: | 8BC84DB5A3B2F8AE2940D3FB19B43787 |
| SHA1: | 3A5FE7B14D020FAD0E25CD1DF67864E3E23254EE |
| SHA-256: | AF1FDEEA092169BF794CDC290BCA20AEA07AC7097D0EFCAB76F783FA38FDACDD |
| SHA-512: | 558F52C2C79BF4A3FBB8BB7B1C671AFD70A2EC0B1BDE10AC0FED6F5398E53ED3B2087B38B7A4A3D209E4F1B34150506E1BA362E4E1620A47ED9A1C7924BB9995 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\O8T87YZ2TJXGBYY0621E.temp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 12 |
| Entropy (8bit): | 0.41381685030363374 |
| Encrypted: | false |
| SSDEEP: | 3:/l: |
| MD5: | E4A1661C2C886EBB688DEC494532431C |
| SHA1: | A2AE2A7DB83B33DC95396607258F553114C9183C |
| SHA-256: | B76875C50EF704DBBF7F02C982445971D1BBD61AEBE2E4B28DDC58A1D66317D5 |
| SHA-512: | EFDCB76FB40482BC94E37EAE3701E844BF22C7D74D53AEF93AC7B6AE1C1094BA2F853875D2C66A49A7075EA8C69F5A348B786D6EE0FA711669279D04ADAAC22C |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\SUA1LKONFG4F697IO394.temp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 12 |
| Entropy (8bit): | 0.41381685030363374 |
| Encrypted: | false |
| SSDEEP: | 3:/l: |
| MD5: | E4A1661C2C886EBB688DEC494532431C |
| SHA1: | A2AE2A7DB83B33DC95396607258F553114C9183C |
| SHA-256: | B76875C50EF704DBBF7F02C982445971D1BBD61AEBE2E4B28DDC58A1D66317D5 |
| SHA-512: | EFDCB76FB40482BC94E37EAE3701E844BF22C7D74D53AEF93AC7B6AE1C1094BA2F853875D2C66A49A7075EA8C69F5A348B786D6EE0FA711669279D04ADAAC22C |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 12 |
| Entropy (8bit): | 0.41381685030363374 |
| Encrypted: | false |
| SSDEEP: | 3:/l: |
| MD5: | E4A1661C2C886EBB688DEC494532431C |
| SHA1: | A2AE2A7DB83B33DC95396607258F553114C9183C |
| SHA-256: | B76875C50EF704DBBF7F02C982445971D1BBD61AEBE2E4B28DDC58A1D66317D5 |
| SHA-512: | EFDCB76FB40482BC94E37EAE3701E844BF22C7D74D53AEF93AC7B6AE1C1094BA2F853875D2C66A49A7075EA8C69F5A348B786D6EE0FA711669279D04ADAAC22C |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\fb3b0dbfee58fac8.customDestinations-ms~RF1ee14.TMP (copy)
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 12 |
| Entropy (8bit): | 0.41381685030363374 |
| Encrypted: | false |
| SSDEEP: | 3:/l: |
| MD5: | E4A1661C2C886EBB688DEC494532431C |
| SHA1: | A2AE2A7DB83B33DC95396607258F553114C9183C |
| SHA-256: | B76875C50EF704DBBF7F02C982445971D1BBD61AEBE2E4B28DDC58A1D66317D5 |
| SHA-512: | EFDCB76FB40482BC94E37EAE3701E844BF22C7D74D53AEF93AC7B6AE1C1094BA2F853875D2C66A49A7075EA8C69F5A348B786D6EE0FA711669279D04ADAAC22C |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2673 |
| Entropy (8bit): | 3.9839890572754793 |
| Encrypted: | false |
| SSDEEP: | 48:8XdhTJJ5HUidAKZdA1FehwiZUklqehQy+3:8PvI/y |
| MD5: | AA00D52DB17D4E8E66120EC990921598 |
| SHA1: | 3B6186F24FF6E07554B931B769C2F2ACD187BA6E |
| SHA-256: | 5E14671645FE27DC37DC56FC46712379B3FB509A8D43C974D43E2355433A453A |
| SHA-512: | 09260EE748903E7F613B2D122E566343616301888C26F34DA40D10BC413A29CF92725634C4F7E52F0FC63C50F5DF229728F8B0B10085745381098F72F60A8A8C |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2675 |
| Entropy (8bit): | 3.999159780887512 |
| Encrypted: | false |
| SSDEEP: | 48:81dhTJJ5HUidAKZdA1seh/iZUkAQkqehvy+2:8Jv+9QWy |
| MD5: | 2EBF8B0CE73291C9C972DC850F0398AD |
| SHA1: | 8D145D4583E7F1164994DDEDFACC141E01154CBC |
| SHA-256: | B46047A11256C8561E5D352E1449A63ECB0F31ECDFBD94DEA172FA4F6E4D4EB0 |
| SHA-512: | 99C2B978CAC861A943D429AC842ADBE17BADCA61E3F275D502AC2EBBE8F1487CCE7581EAF6E3B9FE2CEC0E0FDD27AEA5227E1BC79A303DCC98EDC29016552FAC |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2689 |
| Entropy (8bit): | 4.006080672009744 |
| Encrypted: | false |
| SSDEEP: | 48:8ydhTJJAHUidAKZdA14meh7sFiZUkmgqeh7sdy+BX:8UvBnLy |
| MD5: | 9E05DCCE5423FD841EC2292E145E4C5F |
| SHA1: | 14A4D4FEAD8D7490376AD59FE2459B318C140F71 |
| SHA-256: | 0DB708627DC2D499E6852ADD84003156DBB206B6C60FEE27A7581E50E8A2622F |
| SHA-512: | DE7C3EAEEF835512A8AF2685878DFB7DD3030931861FF1DE7A03B683BE626781ABEF55B0748F74C6728CA5749005614AA572E0E6DAC30AEE6E04A92F56CB152D |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.9971646692713887 |
| Encrypted: | false |
| SSDEEP: | 48:8gdhTJJ5HUidAKZdA1TehDiZUkwqehjy+R:82v1Vy |
| MD5: | 953198D128F8E0C57CEFE1E228A6323F |
| SHA1: | 96135B2F5B557182CB1350A06DDAB0DFB952AAD7 |
| SHA-256: | DEC0DEE3B07994CC7E47D24D667A6CBCCDA3F0489B5C79DF4D71248582554C4C |
| SHA-512: | CCE29DF810E3DB1E12B14956B572250B1946D7EE958D21868DABDB8A6EE8DCC827FFD048E8C054CD1F6B3118045B82C21AA796CEC6C865B05C6CCAD2DEA02250 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.9853791436277364 |
| Encrypted: | false |
| SSDEEP: | 48:8xdhTJJ5HUidAKZdA1dehBiZUk1W1qehJy+C:8VvF9py |
| MD5: | BDA405FB5183187AC11DD1711BE05AFA |
| SHA1: | 7B47FBFF4B4A5DCEDEFB3E2F39DFF4361BCBE7FF |
| SHA-256: | 6B598874EE8DF75F377E2B52CE740D28E308C59195A87666BB9FAFC6C7E63A30 |
| SHA-512: | C8047FFEE89A6B112BECE0AA91361709E19AD0BAF28272C64DB1089A0017A6A3912A47B403141513E83436BD99792E40E4B0580FC06A9694D2CA8BFA3662CEF8 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2679 |
| Entropy (8bit): | 3.9955935758717036 |
| Encrypted: | false |
| SSDEEP: | 48:8WedhTJJ5HUidAKZdA1duTeehOuTbbiZUk5OjqehOuTbLy+yT+:8JvtTfTbxWOvTbLy7T |
| MD5: | A87A93B5B0476EF9F88DCE6C569FE086 |
| SHA1: | 5C8CFCF60E0294728771C5E7B31F3132B62CC825 |
| SHA-256: | 9674E072C15132B4D27A48AB15BE4C20E5D85473E0BAB288FFBE523D6DDAD4F3 |
| SHA-512: | 85E50435689D49F97A993D160938236CA3EB07A7B97018156280495F9F398C51D0440DCC897813E942936C7AB123162FFC4A43CA5CF58E959A0FEE87C77D028A |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 162 |
| Entropy (8bit): | 2.607220773054883 |
| Encrypted: | false |
| SSDEEP: | 3:N/n/n/n/n/n/n/n/n/n/n/nONkn2wenAaxesY8:s22R/xzY8 |
| MD5: | 72964AC354358F48CE87B8C541D0038C |
| SHA1: | 574FA02C38682DE4ADD144CDF8AAC4BB525267E3 |
| SHA-256: | 7202DCE52C1CCFDFA34EB3C8076DA7E88C464EE30115FFD8B0C5C5745FE46F20 |
| SHA-512: | C2D6BA95F40AA3207E81C6656C9533DFDDF03A6AF316AD378C024948DDE49990E88075C284F7EE4BE66ED8F1315E453E4F39DF32AB7661EAA81CB01DDD5E9A07 |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_1052546650\_metadata\verified_contents.json
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1796 |
| Entropy (8bit): | 6.022829426746665 |
| Encrypted: | false |
| SSDEEP: | 48:p/hQRFG9I1RtpFNgS7akeFTfblt3zZ7NgAmklV:RWGSRtl7aPFfblNzZJ7mGV |
| MD5: | 5B77D17F742E17839C63648C16624020 |
| SHA1: | F086CADC1EFC9C6BCFC600B22C9DD43F3FA37B4A |
| SHA-256: | 5FB6F49AB5D7ACD8B8E2364F228F3F1B2664CAA36D0FDA5DE48BF050CF0A097D |
| SHA-512: | EB21F509ECC70504C340BA3A23A16225DA54DB6298B851CDD2AE1F4731CA2197FF0DB08E12F8592E2BF8577F69AC7C8998C69B96487FDE0B41732E767EA3D2BE |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_1052546650\cr_en-us_500000_index.bin
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 7959899 |
| Entropy (8bit): | 6.566332586225231 |
| Encrypted: | false |
| SSDEEP: | 196608:kAEt2h9aexbjMgzGkvfwyHqAwzikSMkDDYh7:kR2h9deCGiwyKrBSj3YJ |
| MD5: | 1C7A4634CEF06AAA33C5F314F59B200F |
| SHA1: | 536D968F23C42B5F892A4957303586B3965B2347 |
| SHA-256: | 826B6D494FBAAEDD9D52D45429D3B3B9F5F0EF068962F71F28C34CF94D47C146 |
| SHA-512: | 8B7698D945942167D1B562C95F77E462660AFA8018EB557C332E16BE6070CC97DCB12C7625C610921D511FE0CB9CAB40FE220EEC20FECD6D7C88599B588BCFAD |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_1052546650\manifest.fingerprint
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 66 |
| Entropy (8bit): | 3.926748386133333 |
| Encrypted: | false |
| SSDEEP: | 3:SFVnMfnEH/GXCpU4YtGGn:SFFMfGRgn |
| MD5: | 5A9C7C68D410514A75DEF6B69386836F |
| SHA1: | 3C8F19A198191257C47E79FAEC862141AF2CFC4A |
| SHA-256: | 187D465315C5E127B19A43D1A4B45B6F61A53638E140205AC366DC3791A70522 |
| SHA-512: | BC5A97BCDAF6CB6ABFF8BC4C103F87E4F5AC41493F5D74DA670E74412276CEAED708C9678A00D5A3C6F4E499389076591128A3EC4AE16267E779B4ECC8545AE0 |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_1052546650\manifest.json
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 108 |
| Entropy (8bit): | 4.832692341109591 |
| Encrypted: | false |
| SSDEEP: | 3:rR6TAulhFphifF0AAGAR3CKG/w/VpKS11L4UvIgn:F6VlMT2C7Y/VUS11LBvIgn |
| MD5: | A21BEEF1F9D84A0738ED51B24D24A76C |
| SHA1: | B3FC285290405A96CDF1CFF5BBC8372C878E0F4B |
| SHA-256: | CB391F5288EB6913825BEF047A8B287464517C8F636A3061E262B1166C8B9F04 |
| SHA-512: | 79511B5001D83BC4833C94B5CEC5C04AD3A24B4095F35E4DB5098EC30DCBA51E813C9370C83F63556F28AD062365D0405C93891E782FFB5174C25952BEF41928 |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_1729790489\Filtering Rules
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 74598 |
| Entropy (8bit): | 5.5368864380577545 |
| Encrypted: | false |
| SSDEEP: | 1536:7geXUzNNSGg1dSkNp+z55w4kgNmmO6I7kWvQFlGlHUvkS6xt/GL95vkdwz:sDRNfgr9NpK5wl+1O6IoWQFlGlHLS6xQ |
| MD5: | C6AF15DA82A8A9172FC9CAFC969DE4F9 |
| SHA1: | 81F477E181036D551EF6F09CB875C6B280BEBE00 |
| SHA-256: | 782009D9765C6104A1B4D1EAC553834E7E399D749A082EAD42BB47ABB42895B5 |
| SHA-512: | F541CB1703A0BD31FCB6E293ACBC6E20F73B365FF8D2270A6D44780E9D5731B8D7803AECACD49D73E0DA065DD1026C9FA95F9CAD2BF0776CE1E2C3C9FCA052C6 |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_1729790489\LICENSE.txt
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 24623 |
| Entropy (8bit): | 4.588307081140814 |
| Encrypted: | false |
| SSDEEP: | 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm0:mvagXreRnTqzazWgj0v6XqD |
| MD5: | D33AAA5246E1CE0A94FA15BA0C407AE2 |
| SHA1: | 11D197ACB61361657D638154A9416DC3249EC9FB |
| SHA-256: | 1D4FF95CE9C6E21FE4A4FF3B41E7A0DF88638DD449D909A7B46974D3DFAB7311 |
| SHA-512: | 98B1B12FF0991FD7A5612141F83F69B86BC5A89DD62FC472EE5971817B7BBB612A034C746C2D81AE58FDF6873129256A89AA8BB7456022246DC4515BAAE2454B |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_1729790489\_metadata\verified_contents.json
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1529 |
| Entropy (8bit): | 5.97509175092227 |
| Encrypted: | false |
| SSDEEP: | 24:pZRj/flTHY4NukYbKcFjeT3U8zkaoX+UqiF46u9ILn9oXUMzniumZ39TzIS/Xre:p/h44SbKcETEwkakBa6F9kUpumZR/Xi |
| MD5: | 951BA6192A41622EC0E04174E1EFA31C |
| SHA1: | 2C63243A5589671BF649FA049542308D3D7EB40E |
| SHA-256: | EA426C8FDAFABF1B3162C206175A17100613C85A0C30DDCDC0A3434232B69D59 |
| SHA-512: | F9C612AA2848C01C2A3294378E6707AE92638FC5EF4C6C911D400AA981418AEF0334DBFAB1D954E0666ECDD5AB8B1506354D9C6DCF6D3D1459FAC2AD06F9E23E |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_1729790489\manifest.fingerprint
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 66 |
| Entropy (8bit): | 3.8945408555413215 |
| Encrypted: | false |
| SSDEEP: | 3:SjWMQ0GiUVfkCzNMEkDRApvTD:SjWR/3tkNApvTD |
| MD5: | 87190EF44A670A5418E7E6B26DA5CF02 |
| SHA1: | 7F24A0F6E188CA285526C968359D5DEEB0CA3F1C |
| SHA-256: | B9C7B754CFFECA3981CA26BCFEC1FA9988070C8657AE9DA3CA2EA7944E16AB00 |
| SHA-512: | 2980EBB51CCEE91B7F887A49D495BA9E3F4D0274AA6D4D0A3E8E4D3E3661815FB825C6D44DAFA34285E3625F979084FFAD5D54E8AE0B9E12ABFEF5C2F71E568C |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_1729790489\manifest.json
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 114 |
| Entropy (8bit): | 4.547350270682037 |
| Encrypted: | false |
| SSDEEP: | 3:rR6TAulhFphifFHXG7LGMdv5HcDKhtUJKS1HVgn:F6VlMZWuMt5SKPS16n |
| MD5: | 3EE731D0E5BFB74CACB3D9E2DFDC7768 |
| SHA1: | EE15CB60213BB402FD90308F0F67D7B6160C9751 |
| SHA-256: | 5DBF79F09D999EA982D90DF45EB444EBF66A0C700E51D4C9856AFBE7326E9D69 |
| SHA-512: | F38E3FEDD392F9B273565CBE321A56051EDAF48DB75A0EBB539D57E8D1238D4BAC41E973F037395F9C5D4A189DF5E68726ED2C000134FC36BB7E7295C9A779C1 |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_919302714\LICENSE
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1558 |
| Entropy (8bit): | 5.11458514637545 |
| Encrypted: | false |
| SSDEEP: | 48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH |
| MD5: | EE002CB9E51BB8DFA89640A406A1090A |
| SHA1: | 49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2 |
| SHA-256: | 3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B |
| SHA-512: | D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_919302714\_metadata\verified_contents.json
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1864 |
| Entropy (8bit): | 6.018989605004616 |
| Encrypted: | false |
| SSDEEP: | 48:p/hUI1OwEU3AdIq7ak68O40E2szOxxUJ8BPFkf31U4PrHfqY3J5D:RnOwtQIq7aZ40E2sYUJAYRr/qYZ5D |
| MD5: | C4709C1D483C9233A3A66A7E157624EA |
| SHA1: | 99A000EB5FE5CC1E94E3155EE075CD6E43DC7582 |
| SHA-256: | 225243DC75352D63B0B9B2F48C8AAA09D55F3FB9E385741B12A1956A941880D9 |
| SHA-512: | B45E1FD999D1340CC5EB5A49A4CD967DC736EA3F4EC8B02227577CC3D1E903341BE3217FBB0B74765C72085AC51C63EEF6DCB169D137BBAF3CC49E21EA6468D7 |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_919302714\manifest.fingerprint
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 66 |
| Entropy (8bit): | 3.820000180714897 |
| Encrypted: | false |
| SSDEEP: | 3:SVzHL3phUmWRDNKydvgHVz:SBHLLUmWRbCp |
| MD5: | BBEC7670A2519FEB0627F17D0C0B5276 |
| SHA1: | 9C30B996F1B069F86EF7C0136DFAF7E614674DEA |
| SHA-256: | 670A6F6BBADAB2C2BE63898525FCAF72E7454739E77C04D120BC1A46B6694CAC |
| SHA-512: | 1ED4ED6AE2A2CBE86F9E8C6C7A2672EBB2F37DBE83D2BF09D875DB435ED63BF5F5CF60CA846865166F9A498095F6D61BD51B0A092E097430439E8A5A3A14CB15 |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_919302714\manifest.json
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 85 |
| Entropy (8bit): | 4.462192586591686 |
| Encrypted: | false |
| SSDEEP: | 3:rR6TAulhFphifFCmMARWHJqS1kULJVPY:F6VlM8aRWpqS1kSJVg |
| MD5: | 084E339C0C9FE898102815EAC9A7CDEA |
| SHA1: | 6ABF7EAAA407D2EAB8706361E5A2E5F776D6C644 |
| SHA-256: | 52CD62F4AC1F9E7D7C4944EE111F84A42337D16D5DE7BE296E945146D6D7DC15 |
| SHA-512: | 0B67A89F3EBFF6FEC3796F481EC2AFBAC233CF64FDC618EC6BA1C12AE125F28B27EE09E8CD0FADB8F6C8785C83929EA6F751E0DDF592DD072AB2CF439BD28534 |
| Malicious: | false |
| Preview: |
C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping6672_919302714\sets.json
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 9817 |
| Entropy (8bit): | 4.629347296880043 |
| Encrypted: | false |
| SSDEEP: | 96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJl:v5C4ql7BkIVmtRTGXvcxBsl |
| MD5: | 8C702C686B703020BC0290BAFC90D7A0 |
| SHA1: | EB08FF7885B4C1DE3EF3D61E40697C0C71903E27 |
| SHA-256: | 97D9E39021512305820F27B9662F0351E45639124F5BD29F0466E9072A9D0C62 |
| SHA-512: | 6137D0ED10E6A27924ED3AB6A0C5F9B21EB0E16A876447DADABD88338198F31BB9D89EF8F0630F4573EA34A24FB3FD3365D7EA78A97BA10028A0758E0A550739 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 48316 |
| Entropy (8bit): | 5.6346993394709 |
| Encrypted: | false |
| SSDEEP: | 768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS |
| MD5: | 2CA03AD87885AB983541092B87ADB299 |
| SHA1: | 1A17F60BF776A8C468A185C1E8E985C41A50DC27 |
| SHA-256: | 8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762 |
| SHA-512: | 13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 47672 |
| Entropy (8bit): | 5.401921124762015 |
| Encrypted: | false |
| SSDEEP: | 768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUEn+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3UEsnpj |
| MD5: | B804BCD42117B1BBE45326212AF85105 |
| SHA1: | 7B4175AAF0B7E45E03390F50CB8ED93185017014 |
| SHA-256: | B7595C3D2E94DF7416308FA2CCF5AE8832137C76D2E9A8B02E6ED2CB2D92E2F7 |
| SHA-512: | 9A4F038F9010DDCCF5E0FAF97102465EF7BA27B33F55C4B86D167C41096DB1E76C8212A5E36565F0447C4F57340A10DB07BB9AE26982DFFF92C411B5B1F1FB97 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 89501 |
| Entropy (8bit): | 5.289893677458563 |
| Encrypted: | false |
| SSDEEP: | 1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn |
| MD5: | 8FB8FEE4FCC3CC86FF6C724154C49C42 |
| SHA1: | B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4 |
| SHA-256: | FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E |
| SHA-512: | F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 61 |
| Entropy (8bit): | 4.022997040570905 |
| Encrypted: | false |
| SSDEEP: | 3:yionv//thPlHGtlpIsoyxl/k4E08up:6v/lhP8tlms17Tp |
| MD5: | 565B6CD722C5E2369514359B6FAABEF0 |
| SHA1: | 33E8CC51E0C98E1154D4C01EB8D2966118291EA3 |
| SHA-256: | 1A33D7A79FB2557DEC68C407013EBB934EDDAB88EB17C73F5B3CA367462D2A42 |
| SHA-512: | 80731451986EDB3CE539010E4A78F72EB947967D6684A38C4C235EBC171069BA91DBC705F5B130B45E83DBBE5238BA5454DE7FD4932A3490A41AB18547C098E1 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 48316 |
| Entropy (8bit): | 5.6346993394709 |
| Encrypted: | false |
| SSDEEP: | 768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS |
| MD5: | 2CA03AD87885AB983541092B87ADB299 |
| SHA1: | 1A17F60BF776A8C468A185C1E8E985C41A50DC27 |
| SHA-256: | 8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762 |
| SHA-512: | 13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C |
| Malicious: | false |
| URL: | https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 89501 |
| Entropy (8bit): | 5.289893677458563 |
| Encrypted: | false |
| SSDEEP: | 1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn |
| MD5: | 8FB8FEE4FCC3CC86FF6C724154C49C42 |
| SHA1: | B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4 |
| SHA-256: | FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E |
| SHA-512: | F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31 |
| Malicious: | false |
| URL: | https://code.jquery.com/jquery-3.6.0.min.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 61 |
| Entropy (8bit): | 3.990210155325004 |
| Encrypted: | false |
| SSDEEP: | 3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp |
| MD5: | 9246CCA8FC3C00F50035F28E9F6B7F7D |
| SHA1: | 3AA538440F70873B574F40CD793060F53EC17A5D |
| SHA-256: | C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84 |
| SHA-512: | A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B |
| Malicious: | false |
| URL: | https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 23 |
| Entropy (8bit): | 3.7950885863977324 |
| Encrypted: | false |
| SSDEEP: | 3:YMEsRzHY:YMpF4 |
| MD5: | B8B6DD452D0E005E25156E1762DC7B6B |
| SHA1: | C5854A9F7939A0A021B82B9CBA567C62AEC4F19D |
| SHA-256: | A593F36B83247E4F7A26C1DEA51741D0A823040804D7DDAFDEF3B0E54AE3F089 |
| SHA-512: | 1970BE7E0E318C2DFFC3D6B58B475A2D5438CA4D9F184841944E7A5734C666DC91BD55A2DD815612A7B7F101584F205E4920B900836F73C0F1129A46F7AD5626 |
| Malicious: | false |
| URL: | https://api.ipify.org/?format=json |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 47992 |
| Entropy (8bit): | 5.605846858683577 |
| Encrypted: | false |
| SSDEEP: | 768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe |
| MD5: | CF3402D7483B127DED4069D651EA4A22 |
| SHA1: | BDE186152457CACF9C35477B5BDDA5BCB56B1F45 |
| SHA-256: | EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC |
| SHA-512: | 9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 61 |
| Entropy (8bit): | 4.022997040570905 |
| Encrypted: | false |
| SSDEEP: | 3:yionv//thPlHGtlpIsoyxl/k4E08up:6v/lhP8tlms17Tp |
| MD5: | 565B6CD722C5E2369514359B6FAABEF0 |
| SHA1: | 33E8CC51E0C98E1154D4C01EB8D2966118291EA3 |
| SHA-256: | 1A33D7A79FB2557DEC68C407013EBB934EDDAB88EB17C73F5B3CA367462D2A42 |
| SHA-512: | 80731451986EDB3CE539010E4A78F72EB947967D6684A38C4C235EBC171069BA91DBC705F5B130B45E83DBBE5238BA5454DE7FD4932A3490A41AB18547C098E1 |
| Malicious: | false |
| URL: | https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8e30d87ec8a16c3f/1731690534483/YsSzfqJgTmO8M-E |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2038 |
| Entropy (8bit): | 4.7445889455697365 |
| Encrypted: | false |
| SSDEEP: | 48:OGc5JtjBn2NMNNMOVhKR+/g9bH0sqdp6LSJQZIeyhT:1cLRBSnOeI/gtH0s910hT |
| MD5: | 41DAD0B2FC99D22EBF4C2BE76918601C |
| SHA1: | BFAFF4D2D4FBAD866B7AC8DDEBB1517D5445C049 |
| SHA-256: | 591CD25376156922490FEDA57FF78648D79BD8E4B9595EABB17E5867C2612835 |
| SHA-512: | 42A73216D6CC9479B00F5A5916D7742E83DA95BD3E7B1D39DFCB81C2FF0D094C640295A04F457089B2F20A38F755B816AF6D4706F69348A7C3ACA697ABE8D22D |
| Malicious: | false |
| URL: | https://s3.eu-west-1.amazonaws.com/patnla.chivivemie/mandlas%23%2377374%23etikos3438%2324737%23madbviewmine%23%26%23%26%23portca3737%237347739%23737373%2334773%2383838%23.html |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 243 |
| Entropy (8bit): | 5.519627994406674 |
| Encrypted: | false |
| SSDEEP: | 6:TMVBd/ZbZjZvKtWRVzj8v+82l31tPjkC/an:TMHd9BZKtWRivj+1VkC/a |
| MD5: | 1C20ED24300AA335BAF660BEAAF09C07 |
| SHA1: | 7F71604AB013E8AA746CE3ABCE7A956CE5B70DB6 |
| SHA-256: | 96CA9835DB61ED103623B8725DD6B9024BF232244B70E15477DF20CFEA67802F |
| SHA-512: | CB0021606DCEBF4A874020FAA46956C1537F4412EA8DA2D2F23841DE3E70764441B6823D29BC2F92447B0F9238D08F0EB2A24BF441E1006EE4DF06A2FA776077 |
| Malicious: | false |
| URL: | https://s3.eu-west-1.amazonaws.com/favicon.ico |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 47992 |
| Entropy (8bit): | 5.605846858683577 |
| Encrypted: | false |
| SSDEEP: | 768:LuxoaUN4+OIhwP53+e0QfA31jQM9OT81NHv4rnwfe:LuxoaU2+LwB2+G1ZdvCwfe |
| MD5: | CF3402D7483B127DED4069D651EA4A22 |
| SHA1: | BDE186152457CACF9C35477B5BDDA5BCB56B1F45 |
| SHA-256: | EAB5D90A71736F267AF39FDF32CAA8C71673FD06703279B01E0F92B0D7BE0BFC |
| SHA-512: | 9CE42EBC3F672A2AEFC4376F43D38CA9ED9D81AA5B3C1EEF60032BCC98A1C399BE68D71FD1D5F9DE6E98C4CE0B800F6EF1EF5E83D417FBFFA63EEF2408DA55D8 |
| Malicious: | false |
| URL: | https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 47672 |
| Entropy (8bit): | 5.401921124762015 |
| Encrypted: | false |
| SSDEEP: | 768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUEn+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3UEsnpj |
| MD5: | B804BCD42117B1BBE45326212AF85105 |
| SHA1: | 7B4175AAF0B7E45E03390F50CB8ED93185017014 |
| SHA-256: | B7595C3D2E94DF7416308FA2CCF5AE8832137C76D2E9A8B02E6ED2CB2D92E2F7 |
| SHA-512: | 9A4F038F9010DDCCF5E0FAF97102465EF7BA27B33F55C4B86D167C41096DB1E76C8212A5E36565F0447C4F57340A10DB07BB9AE26982DFFF92C411B5B1F1FB97 |
| Malicious: | false |
| URL: | https://challenges.cloudflare.com/turnstile/v0/b/22755d9a86c9/api.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 61 |
| Entropy (8bit): | 3.990210155325004 |
| Encrypted: | false |
| SSDEEP: | 3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp |
| MD5: | 9246CCA8FC3C00F50035F28E9F6B7F7D |
| SHA1: | 3AA538440F70873B574F40CD793060F53EC17A5D |
| SHA-256: | C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84 |
| SHA-512: | A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 40 |
| Entropy (8bit): | 4.120950594454667 |
| Encrypted: | false |
| SSDEEP: | 3:YBAvZNAiDSABL4:YwZNP94 |
| MD5: | B09F000BFB98ABD880BC77E05456FFEA |
| SHA1: | FBADFA7F41B709507692B8FCEA597474EED91E2C |
| SHA-256: | 0A721532497036FF7D8B228DD8D4EF5E91777B0BD2B11F49F5B2CCDDD55EB259 |
| SHA-512: | F2E0CF9FD6D14EAF9BE953052515A598E9F96186FB82D5FA8D3E9B01F9706284DE8DDDF343AB69CF566EDEB28C659D65E0D608F99A5717A7CBFB2CC48ADA15A7 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 315 |
| Entropy (8bit): | 5.0572271090563765 |
| Encrypted: | false |
| SSDEEP: | 6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR |
| MD5: | A34AC19F4AFAE63ADC5D2F7BC970C07F |
| SHA1: | A82190FC530C265AA40A045C21770D967F4767B8 |
| SHA-256: | D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3 |
| SHA-512: | 42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765 |
| Malicious: | false |
| URL: | https://gambol.smarthost.pl/favicon.ico |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 23 |
| Entropy (8bit): | 3.7950885863977324 |
| Encrypted: | false |
| SSDEEP: | 3:YMEsRzHY:YMpF4 |
| MD5: | B8B6DD452D0E005E25156E1762DC7B6B |
| SHA1: | C5854A9F7939A0A021B82B9CBA567C62AEC4F19D |
| SHA-256: | A593F36B83247E4F7A26C1DEA51741D0A823040804D7DDAFDEF3B0E54AE3F089 |
| SHA-512: | 1970BE7E0E318C2DFFC3D6B58B475A2D5438CA4D9F184841944E7A5734C666DC91BD55A2DD815612A7B7F101584F205E4920B900836F73C0F1129A46F7AD5626 |
| Malicious: | false |
| Preview: |
| File type: | |
| Entropy (8bit): | 3.5728927921713796 |
| TrID: |
|
| File name: | Iamgold-PYMPATA Policy_Enrollment2024739441.rtf |
| File size: | 446'504 bytes |
| MD5: | 03cd3dab4456ae5017e9bf714a1e572a |
| SHA1: | 3d6df7276f2b01204e0ce523353bdc131e73ac3f |
| SHA256: | 0eba1169393c80b84b1a49a38e88fd9ab0ccd1c99e0f7249d77eddbd2f32a351 |
| SHA512: | 713bae67e98dc03efcc9dc5aab29f9c68678618ffa7769f013cef088cb47baaac0a9f4a1726ca6536b85bf7efc6295b7d0797bfe3a0d7ebe862fa44b26d17754 |
| SSDEEP: | 6144:sf0+TNapH4544Vm/5Bz3yrVOf1XES8+PyxFZizb74CHr:I0FY544mz3yZs |
| TLSH: | 04942FAEC11700F1E39781CD930B3A5F3A61FAAE8ED28D4316F9E2B9C6716D3C954506 |
| File Content Preview: | {\rtf1\ansi\ansicpg1252\uc0\stshfdbch1\stshfloch1\stshfhich1\stshfbi1\deff1\adeff0{\fonttbl{\f0\fnil\fcharset0 Arial;}{\f1\fnil\fcharset0 Times New Roman;}{\f2\fnil\fcharset0 userbri Light;}}{\colortbl;\red255\green255\blue255;\red0\green0\blue0;\red47\gr |
 | |
| Icon Hash: | 35e1cc889a8a8599 |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node| Timestamp | SID | Signature | Severity | Source IP | Source Port | Dest IP | Dest Port | Protocol |
|---|---|---|---|---|---|---|---|---|
| 2024-11-15T18:09:05.064151+0100 | 2828656 | ETPRO PHISHING Microsoft Live Account Verification Phishing Landing Nov 20 2017 | 2 | 91.211.222.250 | 443 | 192.168.2.16 | 62646 | TCP |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Nov 15, 2024 18:08:40.185980082 CET | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Nov 15, 2024 18:08:40.487747908 CET | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Nov 15, 2024 18:08:41.092622042 CET | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Nov 15, 2024 18:08:42.298630953 CET | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Nov 15, 2024 18:08:43.200359106 CET | 49689 | 80 | 192.168.2.16 | 192.229.211.108 |
| Nov 15, 2024 18:08:43.323775053 CET | 49698 | 443 | 192.168.2.16 | 40.126.32.134 |
| Nov 15, 2024 18:08:43.323946953 CET | 49698 | 443 | 192.168.2.16 | 40.126.32.134 |
| Nov 15, 2024 18:08:43.328864098 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.328950882 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.328984022 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.329031944 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.329163074 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.514286041 CET | 49707 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:43.514344931 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.514534950 CET | 49707 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:43.528378010 CET | 49707 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:43.528393984 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.732903957 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.733206034 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.733216047 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.733352900 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.733362913 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.733371019 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.733424902 CET | 49698 | 443 | 192.168.2.16 | 40.126.32.134 |
| Nov 15, 2024 18:08:43.733424902 CET | 49698 | 443 | 192.168.2.16 | 40.126.32.134 |
| Nov 15, 2024 18:08:43.733426094 CET | 49698 | 443 | 192.168.2.16 | 40.126.32.134 |
| Nov 15, 2024 18:08:43.733697891 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.733994007 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.734002113 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.734071016 CET | 49698 | 443 | 192.168.2.16 | 40.126.32.134 |
| Nov 15, 2024 18:08:43.734222889 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.734276056 CET | 49698 | 443 | 192.168.2.16 | 40.126.32.134 |
| Nov 15, 2024 18:08:43.734338999 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.785644054 CET | 49698 | 443 | 192.168.2.16 | 40.126.32.134 |
| Nov 15, 2024 18:08:44.378715992 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:44.379112005 CET | 49707 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:44.379148006 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:44.380649090 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:44.380727053 CET | 49707 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:44.380737066 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:44.381035089 CET | 49707 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:44.382765055 CET | 49707 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:44.382888079 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:44.383065939 CET | 49707 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:44.383074045 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:44.437658072 CET | 49707 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:44.665277004 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:44.665349960 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:44.665544033 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:44.665638924 CET | 49707 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:44.678165913 CET | 49707 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:44.678201914 CET | 443 | 49707 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:44.709656954 CET | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Nov 15, 2024 18:08:44.721985102 CET | 49713 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:44.722035885 CET | 443 | 49713 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:44.722112894 CET | 49713 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:44.722636938 CET | 49713 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:44.722656965 CET | 443 | 49713 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:45.558243990 CET | 443 | 49713 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:45.558525085 CET | 49713 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:45.558554888 CET | 443 | 49713 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:45.559048891 CET | 443 | 49713 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:45.559993982 CET | 49713 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:45.560090065 CET | 443 | 49713 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:45.560132027 CET | 49713 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:45.603348970 CET | 443 | 49713 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:45.611633062 CET | 49713 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:45.803961039 CET | 443 | 49713 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:45.804096937 CET | 443 | 49713 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:45.804152012 CET | 49713 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:45.804877043 CET | 49713 | 443 | 192.168.2.16 | 52.218.122.88 |
| Nov 15, 2024 18:08:45.804897070 CET | 443 | 49713 | 52.218.122.88 | 192.168.2.16 |
| Nov 15, 2024 18:08:46.260658979 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:46.260715008 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:46.260828018 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:46.262268066 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:46.262298107 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:46.738986015 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:46.739046097 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:46.739247084 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:46.739427090 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:46.739478111 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:46.739495039 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:46.739523888 CET | 443 | 49718 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:46.741964102 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:46.742136002 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:46.742177963 CET | 443 | 49718 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.193924904 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.194006920 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:47.195847034 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:47.195864916 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.196197987 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.236640930 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:47.257031918 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:47.303333998 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.557559967 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.557621956 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.557641983 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.557696104 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:47.557740927 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.557756901 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.557769060 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:47.557806969 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:47.558451891 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.558624029 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.558650017 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:47.558716059 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:47.570291996 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:47.570329905 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.570349932 CET | 49715 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:08:47.570358992 CET | 443 | 49715 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.698141098 CET | 443 | 49718 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.698379993 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.698401928 CET | 443 | 49718 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.700042963 CET | 443 | 49718 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.700114012 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.701028109 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.701031923 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.701126099 CET | 443 | 49718 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.701248884 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.701265097 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.701317072 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.701328993 CET | 443 | 49718 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.704806089 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.704871893 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.705144882 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.705224037 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.745632887 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.745641947 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.745650053 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.793623924 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.987359047 CET | 443 | 49718 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.987440109 CET | 443 | 49718 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.987509966 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.987750053 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.987776041 CET | 443 | 49718 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:47.987791061 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.987826109 CET | 49718 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:47.989433050 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:48.031344891 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:48.260592937 CET | 49720 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:08:48.260689020 CET | 443 | 49720 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:08:48.260766029 CET | 49720 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:08:48.260936022 CET | 49720 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:08:48.260956049 CET | 443 | 49720 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:08:48.353576899 CET | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Nov 15, 2024 18:08:48.655674934 CET | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Nov 15, 2024 18:08:48.975172997 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:48.975229025 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:48.975280046 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:48.975306034 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:48.975502014 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:48.975553036 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:48.977092981 CET | 49717 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:48.977108955 CET | 443 | 49717 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.005228043 CET | 49722 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.005254030 CET | 443 | 49722 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.005315065 CET | 49722 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.005557060 CET | 49722 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.005570889 CET | 443 | 49722 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.140563011 CET | 443 | 49720 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.140866995 CET | 49720 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:08:49.140928984 CET | 443 | 49720 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.142371893 CET | 443 | 49720 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.142462015 CET | 49720 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:08:49.143367052 CET | 49720 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:08:49.143450975 CET | 443 | 49720 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.198731899 CET | 49720 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:08:49.198748112 CET | 443 | 49720 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.246699095 CET | 49720 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:08:49.262643099 CET | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Nov 15, 2024 18:08:49.517672062 CET | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Nov 15, 2024 18:08:49.654118061 CET | 443 | 49722 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.654421091 CET | 49722 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.654437065 CET | 443 | 49722 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.655895948 CET | 443 | 49722 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.655965090 CET | 49722 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.657262087 CET | 49722 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.657361031 CET | 443 | 49722 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.657552958 CET | 49722 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.657557011 CET | 443 | 49722 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.709745884 CET | 49722 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.815499067 CET | 443 | 49722 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.815588951 CET | 443 | 49722 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.815666914 CET | 49722 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.817523003 CET | 49722 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.817544937 CET | 443 | 49722 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.824919939 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.824976921 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.825077057 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.825294971 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:49.825316906 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.846018076 CET | 62573 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:49.850847006 CET | 53 | 62573 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.850927114 CET | 62573 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:49.851568937 CET | 62573 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:49.856426954 CET | 53 | 62573 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.441468954 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.441889048 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.441956043 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.442475080 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.442898989 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.442992926 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.443101883 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.472664118 CET | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Nov 15, 2024 18:08:50.477225065 CET | 53 | 62573 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.477905989 CET | 62573 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:50.483115911 CET | 53 | 62573 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.483175993 CET | 62573 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:50.483365059 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.584918976 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.585041046 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.585124969 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.585206985 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.585228920 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.585256100 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.585295916 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.585707903 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.585789919 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.585855961 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.585890055 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.586246967 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.586288929 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.586306095 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.586404085 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.702946901 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.703377962 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.703458071 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.703574896 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.703644991 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.703732967 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.703751087 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.704210043 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.704303980 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.704339981 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.704355001 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.704427004 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.704719067 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.744776011 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.744837999 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.792674065 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.824026108 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.824368000 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.824464083 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.824502945 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.824537039 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.824564934 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.824564934 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.824601889 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.824615955 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.824696064 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.824734926 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.824858904 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.825356960 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.826250076 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.826317072 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.826332092 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.872688055 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.872749090 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.920682907 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.940623999 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.940891981 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.940957069 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.940979958 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.941030979 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.941071987 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.941080093 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.941118956 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.941359043 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.941374063 CET | 443 | 49723 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.941389084 CET | 49723 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.953056097 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:50.953098059 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.953253984 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:50.953443050 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:50.953457117 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.960165977 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.960241079 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.960762978 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.960916996 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:50.960932016 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.573363066 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.573688984 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.573714018 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.575210094 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.575283051 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.575781107 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.575865030 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.575989962 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.576000929 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.576594114 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.576834917 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.576905012 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.580482960 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.580573082 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.580868006 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.580981016 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.580993891 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.581053019 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.622663021 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.622685909 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.622745037 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.670763969 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.715619087 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.715751886 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.715818882 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.715843916 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.715940952 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.716124058 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.716181040 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.716190100 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.716252089 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.716295004 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.716626883 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.716690063 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.716696978 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.730597973 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.730881929 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.730946064 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.730958939 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.731040001 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.731097937 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.731105089 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.731178045 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.731231928 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.731237888 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.735101938 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.735184908 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.735193014 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.748831987 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.748919010 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.749202967 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.749357939 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.749375105 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.766686916 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.766709089 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.781673908 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.812654018 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.834747076 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.834948063 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.835010052 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.835028887 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.835274935 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.835335970 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.835342884 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.835753918 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.835810900 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.835815907 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.836282015 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.836440086 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.836446047 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.848330975 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.848521948 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.848592997 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.848615885 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.848647118 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.848829031 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.848850965 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.849282980 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.849339962 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.849348068 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.849823952 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.849884033 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.849891901 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.850291967 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.850393057 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.850452900 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.850460052 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.850500107 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.850545883 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.850560904 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.850588083 CET | 443 | 62576 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.850625992 CET | 62576 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.855287075 CET | 62578 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.855339050 CET | 443 | 62578 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.855531931 CET | 62578 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.855977058 CET | 62578 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:51.855993986 CET | 443 | 62578 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.890659094 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.890677929 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.936661959 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.953562975 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.953717947 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.953774929 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.953789949 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.954001904 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.954047918 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.954055071 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.954519033 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.954560041 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.954574108 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.954580069 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:51.954638958 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:51.955003023 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.000674963 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:52.043410063 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.043514013 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.043565035 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:52.043581963 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.073999882 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.074050903 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:52.074057102 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.074071884 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.074105024 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:52.074115038 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.074249983 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.074294090 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:52.074413061 CET | 62575 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:52.074425936 CET | 443 | 62575 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.404665947 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.404922962 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.404989004 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.405467033 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.405754089 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.405848980 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.405922890 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.451333046 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.469552040 CET | 443 | 62578 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.469830990 CET | 62578 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.469855070 CET | 443 | 62578 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.470932961 CET | 443 | 62578 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.471255064 CET | 62578 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.471437931 CET | 62578 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.471442938 CET | 443 | 62578 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.471461058 CET | 443 | 62578 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.525635958 CET | 62578 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.563075066 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.563138008 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.563177109 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.563241005 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.563286066 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.563575029 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.563611984 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.563616991 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.563633919 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.563667059 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.564358950 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.564431906 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.564446926 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.605777025 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.605840921 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.615147114 CET | 443 | 62578 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.615346909 CET | 443 | 62578 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.615434885 CET | 62578 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.615777016 CET | 62578 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.615796089 CET | 443 | 62578 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.618577003 CET | 62579 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:52.618622065 CET | 443 | 62579 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.618686914 CET | 62579 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:52.620098114 CET | 62579 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:52.620142937 CET | 443 | 62579 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.653676033 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.686108112 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.686366081 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.686435938 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.686470985 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.686775923 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.686954975 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.686991930 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.687007904 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.687066078 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.687103987 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.687544107 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.687583923 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.687607050 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.687624931 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.687962055 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.810288906 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.810497046 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.810653925 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.810719013 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.811012030 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.811053991 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.811079979 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.811099052 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.811475039 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.811511993 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.811526060 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.811633110 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.811748028 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.812310934 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.812366962 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.812380075 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.829900980 CET | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Nov 15, 2024 18:08:52.861785889 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.861845970 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.877751112 CET | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Nov 15, 2024 18:08:52.909728050 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.951674938 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.952111006 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.952291965 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.952356100 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.952493906 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.952545881 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.952550888 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.952569962 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.952639103 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.952652931 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.953059912 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:52.953123093 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:52.953130960 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.005654097 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.005661964 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.053657055 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.057281971 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.057300091 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.057358027 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.057944059 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.057956934 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.058003902 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.058118105 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.058604956 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.058659077 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.058665991 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.058929920 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.113836050 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.113847971 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.113910913 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.133730888 CET | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Nov 15, 2024 18:08:53.180377960 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.180387974 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.180455923 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.181631088 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.181641102 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.181694031 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.182113886 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.182122946 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.182163954 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.221955061 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.222028971 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.222052097 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.222094059 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.242191076 CET | 443 | 62579 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.242439032 CET | 62579 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:53.242464066 CET | 443 | 62579 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.243249893 CET | 443 | 62579 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.243535042 CET | 62579 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:53.243609905 CET | 443 | 62579 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.243654013 CET | 62579 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:53.291332960 CET | 443 | 62579 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.293648958 CET | 62579 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:53.303811073 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.303827047 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.303884983 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.304132938 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.304145098 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.304194927 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.304703951 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.304728031 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.304759026 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.344904900 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.344970942 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.344980001 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.345149040 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.345421076 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.345443010 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.345478058 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.388675928 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.402719021 CET | 443 | 62579 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.402904034 CET | 443 | 62579 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.402957916 CET | 62579 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:53.403584003 CET | 62579 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:53.403604031 CET | 443 | 62579 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.427254915 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.427282095 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.427342892 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.427675962 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.427730083 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.427742958 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.427798033 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.468247890 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.468281984 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.468324900 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.468456030 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.468519926 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.468528986 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.468579054 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.468610048 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.468780994 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.468806982 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.468817949 CET | 443 | 62577 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.468827963 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.468856096 CET | 62577 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.471685886 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:53.471767902 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.471925020 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:53.472136974 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:53.472160101 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.491456985 CET | 62581 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:53.491508007 CET | 443 | 62581 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.491590977 CET | 62581 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:53.491846085 CET | 62581 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:53.491874933 CET | 443 | 62581 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.619131088 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.619213104 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.619319916 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.619544029 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:53.619564056 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:53.736716986 CET | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Nov 15, 2024 18:08:54.385246992 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.385539055 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.385603905 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.386166096 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.386464119 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.386558056 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.386585951 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.386662960 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.386697054 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.388845921 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.389054060 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.389070988 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.390146017 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.390414953 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.390501976 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.390590906 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.438719988 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.438774109 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.483880997 CET | 443 | 62581 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.484113932 CET | 62581 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:54.484127998 CET | 443 | 62581 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.484603882 CET | 443 | 62581 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.484886885 CET | 62581 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:54.484962940 CET | 443 | 62581 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.485006094 CET | 62581 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:54.527329922 CET | 443 | 62581 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.530735970 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.530857086 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.530956030 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.531019926 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.531042099 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.531073093 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.531126976 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.531153917 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.531209946 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.531518936 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.531688929 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.531739950 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.531752110 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.532644033 CET | 62581 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:54.580672026 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.580698967 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.608330965 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.608402014 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.608448982 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.608455896 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.608489037 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.608537912 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.608545065 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.609138012 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.609436035 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.609441996 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.609541893 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.609606028 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.609611988 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.610021114 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.610196114 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.610202074 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.628659964 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.646061897 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.646250963 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.646352053 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.646411896 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.646428108 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.646513939 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.646569014 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.646575928 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.646634102 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.646639109 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.660667896 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.687599897 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.687675953 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.687697887 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.725936890 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.726125002 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.726197004 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.726227045 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.726403952 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.726490974 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.726494074 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.726521015 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.726572990 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.726603985 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.727426052 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.727482080 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.727488995 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.740649939 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.740667105 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.761044979 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.761118889 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.761128902 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.761378050 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.761512041 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.761519909 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.761827946 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.761890888 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.761898994 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.762182951 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.762279034 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.762283087 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.762309074 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.762362003 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.764956951 CET | 443 | 62581 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.765151978 CET | 443 | 62581 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.765213013 CET | 62581 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:54.765551090 CET | 62581 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:08:54.765563011 CET | 443 | 62581 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.772670031 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.772696018 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.802740097 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.803095102 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.803169966 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.803195953 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.820668936 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.842313051 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.842500925 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.842556000 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.842575073 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.843080997 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.843120098 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.843132973 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.843142986 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.843286991 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.843786955 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.843858957 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.843893051 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.843940020 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.843946934 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.843988895 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.844357014 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.852756023 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.876743078 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.876955032 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.877036095 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.877084970 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.877108097 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.877269030 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.877290964 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.877835989 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.877892971 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.877899885 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.884668112 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.884696960 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.918664932 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.918746948 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.918768883 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.932672977 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.948649883 CET | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Nov 15, 2024 18:08:54.959518909 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.960078955 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.960148096 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.960176945 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.960311890 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.960405111 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.960462093 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.960469961 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.960706949 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.961046934 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.961273909 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.961332083 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:54.961337090 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.964653015 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.964674950 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.991770029 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.991867065 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.991883993 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.991957903 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:54.992404938 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.992424965 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:54.992471933 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.012684107 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.033804893 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.033842087 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.033905029 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.033914089 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.033941984 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.034086943 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.034151077 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.034158945 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.034249067 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.076469898 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.076494932 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.076545000 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.077008009 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.077084064 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.077099085 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.077181101 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.077267885 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.077980042 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.078033924 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.078041077 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.078098059 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.107518911 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.107549906 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.107608080 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.107929945 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.107995987 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.108007908 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.108066082 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.118088961 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.118119955 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.118165970 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.149283886 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.149317026 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.149375916 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.149512053 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.149533033 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.149574041 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.149574041 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.172666073 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.193886042 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.193905115 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.193967104 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.194525003 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.194542885 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.194586992 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.194597960 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.195091963 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.195111036 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.195144892 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.222739935 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.222835064 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.222851992 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.222862959 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.222876072 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.222908974 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.223551989 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.223608017 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.235013008 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.235071898 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.235089064 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.235136986 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.264697075 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.264830112 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.265125990 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.265192032 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.310553074 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.310575008 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.310659885 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.310879946 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.310913086 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.310939074 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.310962915 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.311619997 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.311638117 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.311680079 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.312370062 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.312431097 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.338285923 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.338391066 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.339193106 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.339261055 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.352566957 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.352649927 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.409115076 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.409202099 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.409503937 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.409569025 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.409607887 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.409766912 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.409832954 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.409843922 CET | 443 | 62580 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.409854889 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.409893990 CET | 62580 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.427768946 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.427839994 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.428339005 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.428404093 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.428864956 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.428929090 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.469264984 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.469348907 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.469535112 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.469593048 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.545294046 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.545403004 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.545623064 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.545686960 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.546612024 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.546674967 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.586232901 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.586308956 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.586720943 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.586776018 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.586783886 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.586819887 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.586879969 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.586885929 CET | 443 | 62582 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.586898088 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.586929083 CET | 62582 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.589596987 CET | 62584 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.589616060 CET | 443 | 62584 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.590502977 CET | 62584 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.590780973 CET | 62584 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:55.590790033 CET | 443 | 62584 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.786730051 CET | 62607 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.786814928 CET | 443 | 62607 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:55.786904097 CET | 62607 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.787137985 CET | 62607 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:55.787177086 CET | 443 | 62607 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.193360090 CET | 443 | 62584 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.193644047 CET | 62584 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:56.193662882 CET | 443 | 62584 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.194221973 CET | 443 | 62584 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.194519997 CET | 62584 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:56.194613934 CET | 443 | 62584 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.194647074 CET | 62584 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:56.235335112 CET | 443 | 62584 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.237684965 CET | 62584 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:56.331435919 CET | 443 | 62584 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.331623077 CET | 443 | 62584 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.331721067 CET | 62584 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:56.332020998 CET | 62584 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:56.332065105 CET | 443 | 62584 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.405361891 CET | 443 | 62607 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.405667067 CET | 62607 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:56.405744076 CET | 443 | 62607 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.406230927 CET | 443 | 62607 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.406506062 CET | 62607 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:56.406601906 CET | 443 | 62607 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.406622887 CET | 62607 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:56.451340914 CET | 443 | 62607 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.461790085 CET | 62607 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:56.553006887 CET | 443 | 62607 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.553078890 CET | 443 | 62607 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.553132057 CET | 62607 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:56.615947962 CET | 62607 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:56.615993023 CET | 443 | 62607 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.714035988 CET | 62639 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:56.714071035 CET | 443 | 62639 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.714122057 CET | 62639 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:56.714363098 CET | 62639 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:56.714370966 CET | 443 | 62639 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.977689981 CET | 62640 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:56.977754116 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:56.977833033 CET | 62640 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:56.978055000 CET | 62640 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:56.978085041 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.314712048 CET | 443 | 62639 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.315026045 CET | 62639 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:57.315054893 CET | 443 | 62639 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.315587997 CET | 443 | 62639 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.315979958 CET | 62639 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:57.316051006 CET | 443 | 62639 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.316133022 CET | 62639 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:57.353802919 CET | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Nov 15, 2024 18:08:57.359332085 CET | 443 | 62639 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.463825941 CET | 443 | 62639 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.463990927 CET | 443 | 62639 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.464045048 CET | 62639 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:57.464602947 CET | 62639 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:57.464637995 CET | 443 | 62639 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.586690903 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.586934090 CET | 62640 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:57.586992025 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.587500095 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.587794065 CET | 62640 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:57.587872028 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.587902069 CET | 62640 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:57.631371975 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.638701916 CET | 62640 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:57.686678886 CET | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Nov 15, 2024 18:08:57.733347893 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.733589888 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.733663082 CET | 62640 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:57.733724117 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.733757973 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:57.733807087 CET | 62640 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:57.734191895 CET | 62640 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:57.734225988 CET | 443 | 62640 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:58.185533047 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:58.185566902 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:58.185759068 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:58.186153889 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:58.186165094 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:58.806690931 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:58.807054996 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:58.807071924 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:58.807532072 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:58.808284044 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:58.808284044 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:58.808296919 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:58.808367014 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:58.808418036 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:58.808428049 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:58.808473110 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:58.808643103 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:58.808650017 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.129658937 CET | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Nov 15, 2024 18:08:59.131020069 CET | 443 | 49720 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.131076097 CET | 443 | 49720 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.131210089 CET | 49720 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:08:59.247860909 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.247989893 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.248080015 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.248132944 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.248141050 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.248255014 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.248318911 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.248353004 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.248353004 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.248358965 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.248482943 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.248569965 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.248575926 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.252547026 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.252981901 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.252986908 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.303724051 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.366528988 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.366715908 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.366806030 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.366862059 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.366868019 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.367328882 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.486174107 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.486387968 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.486432076 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.487102032 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.487108946 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.487214088 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.487217903 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.487360001 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.487659931 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.487659931 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.489815950 CET | 49720 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:08:59.489857912 CET | 443 | 49720 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.490108013 CET | 62642 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:59.490159988 CET | 443 | 62642 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.490422010 CET | 62642 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:59.490748882 CET | 62642 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:08:59.490780115 CET | 443 | 62642 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:08:59.797818899 CET | 62641 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:08:59.797838926 CET | 443 | 62641 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:00.105171919 CET | 443 | 62642 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:00.105515003 CET | 62642 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:00.105546951 CET | 443 | 62642 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:00.106012106 CET | 443 | 62642 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:00.106406927 CET | 62642 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:00.106492996 CET | 443 | 62642 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:00.106559992 CET | 62642 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:00.151341915 CET | 443 | 62642 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:00.253489971 CET | 443 | 62642 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:00.253571987 CET | 443 | 62642 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:00.253645897 CET | 62642 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:00.254194975 CET | 62642 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:00.254234076 CET | 443 | 62642 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:02.164685965 CET | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Nov 15, 2024 18:09:02.243290901 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:02.243382931 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:02.244021893 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:02.244021893 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:02.244103909 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:02.840333939 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:02.840682983 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:02.840692043 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:02.841136932 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:02.841447115 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:02.841535091 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:02.841558933 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:02.841590881 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:02.841635942 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:02.841701031 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:02.841733932 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.150145054 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.150270939 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.150356054 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.150378942 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:03.150399923 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.150475025 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.150499105 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:03.150548935 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:03.151084900 CET | 62643 | 443 | 192.168.2.16 | 104.18.95.41 |
| Nov 15, 2024 18:09:03.151102066 CET | 443 | 62643 | 104.18.95.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.153238058 CET | 62644 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:03.153332949 CET | 443 | 62644 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.154521942 CET | 62644 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:03.154742956 CET | 62644 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:03.154777050 CET | 443 | 62644 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.160630941 CET | 62645 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:03.160672903 CET | 443 | 62645 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.160737038 CET | 62645 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:03.160868883 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:03.160929918 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.161025047 CET | 62645 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:03.161047935 CET | 443 | 62645 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.161050081 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:03.161202908 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:03.161215067 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.764362097 CET | 443 | 62644 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.764760971 CET | 62644 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:03.764787912 CET | 443 | 62644 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.765110970 CET | 443 | 62644 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.766689062 CET | 62644 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:03.766753912 CET | 443 | 62644 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.766834974 CET | 62644 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:03.807336092 CET | 443 | 62644 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.902441978 CET | 443 | 62644 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.902508020 CET | 443 | 62644 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:03.902582884 CET | 62644 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:03.903162003 CET | 62644 | 443 | 192.168.2.16 | 104.18.94.41 |
| Nov 15, 2024 18:09:03.903191090 CET | 443 | 62644 | 104.18.94.41 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.059674978 CET | 443 | 62645 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.060108900 CET | 62645 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.060137987 CET | 443 | 62645 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.060611963 CET | 443 | 62645 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.060996056 CET | 62645 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.061089039 CET | 443 | 62645 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.061165094 CET | 62645 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.061187983 CET | 62645 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.061253071 CET | 443 | 62645 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.068761110 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.069082022 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.069147110 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.070302963 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.070697069 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.070884943 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.113712072 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.726005077 CET | 443 | 62645 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.726234913 CET | 443 | 62645 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.726383924 CET | 62645 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.727864981 CET | 62645 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.727895975 CET | 443 | 62645 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:04.727910995 CET | 62645 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.727952957 CET | 62645 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.728657007 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:04.775336981 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.027663946 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.027725935 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.027745962 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.027832031 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:05.027901888 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.043801069 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.043850899 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.043931961 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.044117928 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.044138908 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.046588898 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.046802044 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:05.046868086 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.046941996 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:05.063699007 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.063873053 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.063882113 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:05.063910961 CET | 443 | 62646 | 91.211.222.250 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.063942909 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:05.063977003 CET | 62646 | 443 | 192.168.2.16 | 91.211.222.250 |
| Nov 15, 2024 18:09:05.655956030 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.656270027 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.656310081 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.658004999 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.658094883 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.658951998 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.659053087 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.659085035 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.703346014 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.708709955 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.708723068 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.756706953 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.827167988 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.827227116 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.827264071 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.827296972 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.827297926 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.827353001 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.827389002 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.827415943 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.827469110 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.827482939 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.831816912 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.831856012 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.831882954 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.831891060 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.831932068 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.831938982 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.884721994 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.944092989 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.944194078 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.944231033 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.944253922 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.944267035 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.944310904 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.944318056 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.944443941 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.944480896 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.944493055 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.944500923 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.944541931 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:05.984798908 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.027735949 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.027753115 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.061227083 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.061278105 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.061300993 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.061323881 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.061373949 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.061378002 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.061394930 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.061444044 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.061456919 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.061712980 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.061763048 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.061779976 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.102088928 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.102128029 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.102152109 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.102164030 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.102205992 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.102211952 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.155690908 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.178225994 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.178283930 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.178340912 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.178360939 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.178431034 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.178431988 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.178482056 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.178642988 CET | 62647 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:06.178674936 CET | 443 | 62647 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.188699007 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.188730001 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.188791037 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.188972950 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.188990116 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.239634991 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:06.239681959 CET | 443 | 62649 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.239747047 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:06.239936113 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:06.239945889 CET | 443 | 62649 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.794909954 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.795171022 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.795202017 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.796628952 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.796690941 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.796964884 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.797039986 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.797096968 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.797105074 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.838722944 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.937230110 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.937308073 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.937364101 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.937391043 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.938123941 CET | 443 | 62649 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.938317060 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:06.938330889 CET | 443 | 62649 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.940412045 CET | 443 | 62649 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.940480947 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:06.941318989 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:06.941402912 CET | 443 | 62649 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.941476107 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:06.941482067 CET | 443 | 62649 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.941982985 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.942023039 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.942038059 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.942044020 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.942085981 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.946635962 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.946733952 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.946774960 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.946778059 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.946789026 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.946821928 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:06.951369047 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.981705904 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:06.997759104 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.054649115 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.054749966 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.054789066 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.054821014 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.054867983 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.054907084 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.054927111 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.055151939 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.055227041 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.055229902 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.055238962 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.055277109 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.055718899 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.107568979 CET | 443 | 62649 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.107742071 CET | 443 | 62649 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.107855082 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:07.108114004 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:07.108134985 CET | 443 | 62649 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.108170986 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:07.108186960 CET | 62649 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:07.108866930 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:07.108920097 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.108998060 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:07.109236956 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:07.109256029 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.109699011 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.109724045 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.157748938 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.171793938 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.171864033 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.171895981 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.171925068 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.171946049 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.171956062 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.171967030 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.171989918 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.172018051 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.172028065 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.172663927 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.172713041 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.172724009 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.172729969 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.172775030 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.172779083 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.221776962 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.221807003 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.269706011 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.288836002 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.288894892 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.288923979 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.289001942 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.289012909 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.289052963 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.289062023 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.289114952 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.289319992 CET | 62648 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:07.289334059 CET | 443 | 62648 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:07.300720930 CET | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Nov 15, 2024 18:09:08.661767006 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:08.662060022 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:08.662087917 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:08.663193941 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:08.663485050 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:08.663614035 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:08.663619041 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:08.663649082 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:08.718691111 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.018332958 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.018404961 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.018425941 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.018486977 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.018487930 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.018533945 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.018543005 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.018543005 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.018556118 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.018585920 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.018598080 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.018625975 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.018646955 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.142154932 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.142218113 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.142288923 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.142364979 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.142405033 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.142426968 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.266598940 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.266666889 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.266721964 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.266753912 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.266772985 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.266804934 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.405705929 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.405771017 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.405829906 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.405900002 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.405936003 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.405958891 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.529995918 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.530061960 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.530122995 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.530191898 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.530229092 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.530252934 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.655410051 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.655473948 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.655530930 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.655597925 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.655637980 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.655659914 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.778301001 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.778373957 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.778495073 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.778522015 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.778556108 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.778592110 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.902157068 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.902184010 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.902306080 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.902331114 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.902368069 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.903374910 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.903393984 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.903465986 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:09.903471947 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:09.903630018 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.027242899 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.027303934 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.027447939 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.027447939 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.027478933 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.027534008 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.151099920 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.151169062 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.151227951 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.151299000 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.151372910 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.151372910 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.277154922 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.277189016 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.277282953 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.277307987 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.277365923 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.308429003 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.308459044 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.308557034 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.308631897 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.308707952 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.409862995 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.409888983 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.410001993 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.410027981 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.410078049 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.523574114 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.523602962 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.523716927 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.523741007 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.523775101 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.523801088 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.555896044 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.555927038 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.556031942 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.556058884 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.556162119 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.658379078 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.658402920 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.658524036 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.658576965 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.658646107 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.721164942 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.721194029 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.721307993 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.721338034 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.721389055 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.773051023 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.773154974 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.773171902 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.773202896 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.787523031 CET | 62650 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.787554026 CET | 443 | 62650 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.889775991 CET | 62651 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.889823914 CET | 443 | 62651 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.889904976 CET | 62651 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.890158892 CET | 62651 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:10.890173912 CET | 443 | 62651 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.912506104 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:10.912539959 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.912642956 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:10.912893057 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:10.912908077 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.921324015 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:10.921335936 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.921391010 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:10.921657085 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:10.921669006 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.528690100 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.529028893 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.529067039 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.529524088 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.529830933 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.529910088 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.529972076 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.544179916 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.544379950 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.544423103 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.545871973 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.545937061 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.547090054 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.547177076 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.547288895 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.547302961 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.571358919 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.578854084 CET | 443 | 62651 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.579113007 CET | 62651 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:11.579143047 CET | 443 | 62651 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.580596924 CET | 443 | 62651 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.580667973 CET | 62651 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:11.581001997 CET | 62651 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:11.581079960 CET | 443 | 62651 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.581111908 CET | 62651 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:11.589745998 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.621767998 CET | 62651 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:11.621778011 CET | 443 | 62651 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.669713974 CET | 62651 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:11.672848940 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.672895908 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.672950029 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.672979116 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.673044920 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.673046112 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.673058033 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.673086882 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.673392057 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.673440933 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.673451900 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.674563885 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.717755079 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.717796087 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.717839003 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.752686977 CET | 443 | 62651 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.752784967 CET | 443 | 62651 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.752856016 CET | 62651 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:11.753546953 CET | 62651 | 443 | 192.168.2.16 | 147.79.74.176 |
| Nov 15, 2024 18:09:11.753573895 CET | 443 | 62651 | 147.79.74.176 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.765748024 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.765891075 CET | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Nov 15, 2024 18:09:11.790504932 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.790608883 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.790678978 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.790689945 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.790704012 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.790757895 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.790792942 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.791174889 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.791217089 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.791225910 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.791243076 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.791305065 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.793467999 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.793503046 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.793519974 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.793555975 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.793571949 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.793591976 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.793597937 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.793623924 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.793628931 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.793653011 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.793699980 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.833662987 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.874526024 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.874562979 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.908694983 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.908745050 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.908750057 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.908782005 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.908824921 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.909043074 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.909113884 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.909157038 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.909158945 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.909171104 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.909204960 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.909224033 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.912597895 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.912653923 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.912702084 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.912719011 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.912743092 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.912761927 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:11.951396942 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.951442003 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.951483965 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.951487064 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:11.951518059 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:11.951539040 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:12.003729105 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:12.026590109 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.026680946 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.026722908 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.026726961 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:12.026746035 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.026787996 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:12.026789904 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.026802063 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.026833057 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:12.026864052 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.026946068 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.026987076 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:12.027225971 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:12.027247906 CET | 443 | 62652 | 104.17.24.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.027259111 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:12.027290106 CET | 62652 | 443 | 192.168.2.16 | 104.17.24.14 |
| Nov 15, 2024 18:09:12.030252934 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:12.030287981 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.030355930 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:12.030675888 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:12.030689001 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.032040119 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.032069921 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.032120943 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.032150984 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.032171011 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.032196045 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.151129007 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.151194096 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.151396036 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.151396990 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.151453018 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.151513100 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.275484085 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.275511980 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.275624037 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.275670052 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.275744915 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.311470985 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.311592102 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.311613083 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.311672926 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.311739922 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.311825037 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.311863899 CET | 443 | 62653 | 151.101.194.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.311886072 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.311922073 CET | 62653 | 443 | 192.168.2.16 | 151.101.194.137 |
| Nov 15, 2024 18:09:12.323717117 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:12.323812962 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.324059963 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:12.324199915 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:12.324234009 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.341003895 CET | 62656 | 443 | 192.168.2.16 | 104.26.12.205 |
| Nov 15, 2024 18:09:12.341084957 CET | 443 | 62656 | 104.26.12.205 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.341185093 CET | 62656 | 443 | 192.168.2.16 | 104.26.12.205 |
| Nov 15, 2024 18:09:12.341406107 CET | 62656 | 443 | 192.168.2.16 | 104.26.12.205 |
| Nov 15, 2024 18:09:12.341439962 CET | 443 | 62656 | 104.26.12.205 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.653142929 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.653461933 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:12.653481007 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.653944016 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.654241085 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:12.654330969 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.654366970 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:12.695341110 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.707788944 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.084583998 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.084636927 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.084714890 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.084744930 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.084758043 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.084779024 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.084793091 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.084803104 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.084831953 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.084844112 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.084882975 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.084888935 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.088790894 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.089034081 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.089080095 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.089270115 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.089322090 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.089339018 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.089346886 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.089397907 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.089401007 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.089411020 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.089467049 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.089767933 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.089842081 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.089879990 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.089881897 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.089893103 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.089925051 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.089931965 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.090708971 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.090749979 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.090753078 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.090760946 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.090795994 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.090802908 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.090821028 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.090895891 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.091329098 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.091432095 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.091603041 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.091623068 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.091720104 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.091763973 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.091787100 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.091792107 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.091830969 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.091835022 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.091845036 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.091877937 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.092824936 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.095202923 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.095263958 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.095271111 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.100236893 CET | 443 | 62656 | 104.26.12.205 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.100485086 CET | 62656 | 443 | 192.168.2.16 | 104.26.12.205 |
| Nov 15, 2024 18:09:13.100512981 CET | 443 | 62656 | 104.26.12.205 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.102127075 CET | 443 | 62656 | 104.26.12.205 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.102195978 CET | 62656 | 443 | 192.168.2.16 | 104.26.12.205 |
| Nov 15, 2024 18:09:13.103152037 CET | 62656 | 443 | 192.168.2.16 | 104.26.12.205 |
| Nov 15, 2024 18:09:13.103235960 CET | 443 | 62656 | 104.26.12.205 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.103446007 CET | 62656 | 443 | 192.168.2.16 | 104.26.12.205 |
| Nov 15, 2024 18:09:13.103454113 CET | 443 | 62656 | 104.26.12.205 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.139830112 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.139836073 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.139847994 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.155739069 CET | 62656 | 443 | 192.168.2.16 | 104.26.12.205 |
| Nov 15, 2024 18:09:13.168957949 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.168998003 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.169058084 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.169068098 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.169116020 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.169140100 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.169202089 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.169245958 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.169250965 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.169341087 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.169389963 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.169436932 CET | 62654 | 443 | 192.168.2.16 | 104.17.25.14 |
| Nov 15, 2024 18:09:13.169452906 CET | 443 | 62654 | 104.17.25.14 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.220000029 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.269490957 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.287111044 CET | 443 | 62656 | 104.26.12.205 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.287396908 CET | 443 | 62656 | 104.26.12.205 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.287492990 CET | 62656 | 443 | 192.168.2.16 | 104.26.12.205 |
| Nov 15, 2024 18:09:13.311791897 CET | 62656 | 443 | 192.168.2.16 | 104.26.12.205 |
| Nov 15, 2024 18:09:13.311836004 CET | 443 | 62656 | 104.26.12.205 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.339025021 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.339046955 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.339081049 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.339097023 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.339123011 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.339250088 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.339250088 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.339309931 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.339345932 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.339406013 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.361452103 CET | 62657 | 443 | 192.168.2.16 | 172.67.74.152 |
| Nov 15, 2024 18:09:13.361525059 CET | 443 | 62657 | 172.67.74.152 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.361629009 CET | 62657 | 443 | 192.168.2.16 | 172.67.74.152 |
| Nov 15, 2024 18:09:13.366722107 CET | 62657 | 443 | 192.168.2.16 | 172.67.74.152 |
| Nov 15, 2024 18:09:13.366738081 CET | 443 | 62657 | 172.67.74.152 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.457462072 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.457474947 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.457518101 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.457530022 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.457724094 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.457724094 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.457758904 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.457813025 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.576149940 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.576168060 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.576301098 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.576337099 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.576411009 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.696613073 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.696639061 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.696830034 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.696866035 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.696923018 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.813625097 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.813699007 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.813810110 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.813867092 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.813867092 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.813867092 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.813906908 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.813930988 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.813992023 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.814322948 CET | 62655 | 443 | 192.168.2.16 | 151.101.130.137 |
| Nov 15, 2024 18:09:13.814340115 CET | 443 | 62655 | 151.101.130.137 | 192.168.2.16 |
| Nov 15, 2024 18:09:14.041973114 CET | 443 | 62657 | 172.67.74.152 | 192.168.2.16 |
| Nov 15, 2024 18:09:14.042433977 CET | 62657 | 443 | 192.168.2.16 | 172.67.74.152 |
| Nov 15, 2024 18:09:14.042474031 CET | 443 | 62657 | 172.67.74.152 | 192.168.2.16 |
| Nov 15, 2024 18:09:14.043955088 CET | 443 | 62657 | 172.67.74.152 | 192.168.2.16 |
| Nov 15, 2024 18:09:14.044029951 CET | 62657 | 443 | 192.168.2.16 | 172.67.74.152 |
| Nov 15, 2024 18:09:14.044420004 CET | 62657 | 443 | 192.168.2.16 | 172.67.74.152 |
| Nov 15, 2024 18:09:14.044504881 CET | 443 | 62657 | 172.67.74.152 | 192.168.2.16 |
| Nov 15, 2024 18:09:14.044589043 CET | 62657 | 443 | 192.168.2.16 | 172.67.74.152 |
| Nov 15, 2024 18:09:14.044600010 CET | 443 | 62657 | 172.67.74.152 | 192.168.2.16 |
| Nov 15, 2024 18:09:14.094842911 CET | 62657 | 443 | 192.168.2.16 | 172.67.74.152 |
| Nov 15, 2024 18:09:14.244956970 CET | 443 | 62657 | 172.67.74.152 | 192.168.2.16 |
| Nov 15, 2024 18:09:14.245033979 CET | 443 | 62657 | 172.67.74.152 | 192.168.2.16 |
| Nov 15, 2024 18:09:14.245109081 CET | 62657 | 443 | 192.168.2.16 | 172.67.74.152 |
| Nov 15, 2024 18:09:14.246174097 CET | 62657 | 443 | 192.168.2.16 | 172.67.74.152 |
| Nov 15, 2024 18:09:14.246206999 CET | 443 | 62657 | 172.67.74.152 | 192.168.2.16 |
| Nov 15, 2024 18:09:23.873441935 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:23.873553991 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:23.873651028 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:23.873989105 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:23.874020100 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:24.761670113 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:24.761913061 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:24.762924910 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:24.762958050 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:24.763176918 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:24.764425993 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:24.811327934 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.060096025 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.060123920 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.060137987 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.060235023 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:25.060271025 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.060338020 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:25.177090883 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.177156925 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.177201986 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:25.177220106 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.177237988 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.177262068 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:25.177303076 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:25.177359104 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:25.177392960 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.177417040 CET | 62658 | 443 | 192.168.2.16 | 52.149.20.212 |
| Nov 15, 2024 18:09:25.177431107 CET | 443 | 62658 | 52.149.20.212 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.960911036 CET | 49697 | 80 | 192.168.2.16 | 2.16.164.67 |
| Nov 15, 2024 18:09:25.961003065 CET | 49699 | 80 | 192.168.2.16 | 2.16.164.67 |
| Nov 15, 2024 18:09:25.966342926 CET | 80 | 49697 | 2.16.164.67 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.966402054 CET | 49697 | 80 | 192.168.2.16 | 2.16.164.67 |
| Nov 15, 2024 18:09:25.966756105 CET | 80 | 49699 | 2.16.164.67 | 192.168.2.16 |
| Nov 15, 2024 18:09:25.966804981 CET | 49699 | 80 | 192.168.2.16 | 2.16.164.67 |
| Nov 15, 2024 18:09:46.732357979 CET | 53770 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:46.737257957 CET | 53 | 53770 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:46.737363100 CET | 53770 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:46.737426043 CET | 53770 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:46.742340088 CET | 53 | 53770 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:47.334310055 CET | 53 | 53770 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:47.334929943 CET | 53770 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:47.341366053 CET | 53 | 53770 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:47.341484070 CET | 53770 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:48.319489002 CET | 53772 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:09:48.319585085 CET | 443 | 53772 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:09:48.319834948 CET | 53772 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:09:48.320149899 CET | 53772 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:09:48.320219040 CET | 443 | 53772 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:09:49.161017895 CET | 443 | 53772 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:09:49.161508083 CET | 53772 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:09:49.161575079 CET | 443 | 53772 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:09:49.161901951 CET | 443 | 53772 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:09:49.162309885 CET | 53772 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:09:49.162380934 CET | 443 | 53772 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:09:49.210119009 CET | 53772 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:09:59.160828114 CET | 443 | 53772 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:09:59.160909891 CET | 443 | 53772 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:09:59.161094904 CET | 53772 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:09:59.672656059 CET | 53772 | 443 | 192.168.2.16 | 142.250.184.228 |
| Nov 15, 2024 18:09:59.672693014 CET | 443 | 53772 | 142.250.184.228 | 192.168.2.16 |
| Nov 15, 2024 18:10:14.685040951 CET | 49698 | 443 | 192.168.2.16 | 40.126.32.134 |
| Nov 15, 2024 18:10:14.685189962 CET | 49700 | 80 | 192.168.2.16 | 192.229.221.95 |
| Nov 15, 2024 18:10:14.691298962 CET | 443 | 49698 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:10:14.691380978 CET | 49698 | 443 | 192.168.2.16 | 40.126.32.134 |
| Nov 15, 2024 18:10:14.691385984 CET | 80 | 49700 | 192.229.221.95 | 192.168.2.16 |
| Nov 15, 2024 18:10:14.691442966 CET | 49700 | 80 | 192.168.2.16 | 192.229.221.95 |
| Nov 15, 2024 18:10:17.543183088 CET | 49701 | 443 | 192.168.2.16 | 40.126.32.134 |
| Nov 15, 2024 18:10:17.549272060 CET | 443 | 49701 | 40.126.32.134 | 192.168.2.16 |
| Nov 15, 2024 18:10:17.549387932 CET | 49701 | 443 | 192.168.2.16 | 40.126.32.134 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Nov 15, 2024 18:08:43.472939014 CET | 61555 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:43.473531008 CET | 56232 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:43.480696917 CET | 53 | 61555 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.481775045 CET | 53 | 56232 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.501492023 CET | 53 | 56591 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:43.539679050 CET | 53 | 49460 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:45.007158041 CET | 53 | 56001 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:46.715342999 CET | 55036 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:46.715465069 CET | 64343 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:46.733834982 CET | 53 | 55036 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:46.738548040 CET | 53 | 64343 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:48.252695084 CET | 49477 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:48.253129005 CET | 56814 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:48.259665012 CET | 53 | 49477 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:48.259727955 CET | 53 | 56814 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:48.996793985 CET | 59672 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:48.997108936 CET | 49873 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:49.004417896 CET | 53 | 59672 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.004432917 CET | 53 | 49873 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:49.843856096 CET | 53 | 51355 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.944873095 CET | 52251 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:50.944998026 CET | 56405 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:50.952052116 CET | 53 | 52251 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.952114105 CET | 53 | 56405 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.952182055 CET | 58126 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:50.952538967 CET | 56712 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:08:50.959311008 CET | 53 | 58126 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:08:50.959574938 CET | 53 | 56712 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.035945892 CET | 57672 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:05.036089897 CET | 63252 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:05.043071985 CET | 53 | 57672 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:05.043153048 CET | 53 | 63252 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.181063890 CET | 57774 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:06.181190968 CET | 65073 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:06.185396910 CET | 52870 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:06.185534000 CET | 59204 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:06.188232899 CET | 53 | 57774 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.188268900 CET | 53 | 65073 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.226870060 CET | 53 | 52870 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:06.239263058 CET | 53 | 59204 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.840249062 CET | 56635 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:10.842559099 CET | 56634 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:10.876825094 CET | 53 | 56634 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.885555029 CET | 53 | 56635 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.910870075 CET | 65252 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:10.911058903 CET | 53400 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:10.918387890 CET | 53 | 65252 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:10.918421030 CET | 53 | 53400 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.315217018 CET | 52266 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:12.315418959 CET | 53081 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:12.322087049 CET | 53 | 52266 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.323266029 CET | 53 | 53081 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.331703901 CET | 59910 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:12.331856966 CET | 64659 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:12.340234041 CET | 53 | 64659 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:12.340517044 CET | 53 | 59910 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.351324081 CET | 55675 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:13.353272915 CET | 58602 | 53 | 192.168.2.16 | 1.1.1.1 |
| Nov 15, 2024 18:09:13.358299971 CET | 53 | 55675 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:13.360740900 CET | 53 | 58602 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:43.401364088 CET | 53 | 52661 | 1.1.1.1 | 192.168.2.16 |
| Nov 15, 2024 18:09:44.535191059 CET | 138 | 138 | 192.168.2.16 | 192.168.2.255 |
| Nov 15, 2024 18:09:46.731379986 CET | 53 | 59393 | 1.1.1.1 | 192.168.2.16 |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Nov 15, 2024 18:08:43.472939014 CET | 192.168.2.16 | 1.1.1.1 | 0x3a84 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:08:43.473531008 CET | 192.168.2.16 | 1.1.1.1 | 0xcfe5 | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:08:46.715342999 CET | 192.168.2.16 | 1.1.1.1 | 0xd5a2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:08:46.715465069 CET | 192.168.2.16 | 1.1.1.1 | 0x4130 | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:08:48.252695084 CET | 192.168.2.16 | 1.1.1.1 | 0x441e | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:08:48.253129005 CET | 192.168.2.16 | 1.1.1.1 | 0x2d47 | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:08:48.996793985 CET | 192.168.2.16 | 1.1.1.1 | 0x4900 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:08:48.997108936 CET | 192.168.2.16 | 1.1.1.1 | 0x3e42 | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:08:50.944873095 CET | 192.168.2.16 | 1.1.1.1 | 0xfc74 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:08:50.944998026 CET | 192.168.2.16 | 1.1.1.1 | 0xeca | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:08:50.952182055 CET | 192.168.2.16 | 1.1.1.1 | 0x6c3d | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:08:50.952538967 CET | 192.168.2.16 | 1.1.1.1 | 0xec66 | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:09:05.035945892 CET | 192.168.2.16 | 1.1.1.1 | 0x162e | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:09:05.036089897 CET | 192.168.2.16 | 1.1.1.1 | 0x6c0 | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:09:06.181063890 CET | 192.168.2.16 | 1.1.1.1 | 0xab12 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:09:06.181190968 CET | 192.168.2.16 | 1.1.1.1 | 0xd9a6 | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:09:06.185396910 CET | 192.168.2.16 | 1.1.1.1 | 0x5077 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:09:06.185534000 CET | 192.168.2.16 | 1.1.1.1 | 0x9486 | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:09:10.840249062 CET | 192.168.2.16 | 1.1.1.1 | 0x6544 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:09:10.842559099 CET | 192.168.2.16 | 1.1.1.1 | 0xa57e | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:09:10.910870075 CET | 192.168.2.16 | 1.1.1.1 | 0x63a4 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:09:10.911058903 CET | 192.168.2.16 | 1.1.1.1 | 0x55e4 | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:09:12.315217018 CET | 192.168.2.16 | 1.1.1.1 | 0x3de2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:09:12.315418959 CET | 192.168.2.16 | 1.1.1.1 | 0x93ac | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:09:12.331703901 CET | 192.168.2.16 | 1.1.1.1 | 0x9780 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:09:12.331856966 CET | 192.168.2.16 | 1.1.1.1 | 0xde82 | Standard query (0) | 65 | IN (0x0001) | false | |
| Nov 15, 2024 18:09:13.351324081 CET | 192.168.2.16 | 1.1.1.1 | 0xe860 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Nov 15, 2024 18:09:13.353272915 CET | 192.168.2.16 | 1.1.1.1 | 0xe973 | Standard query (0) | 65 | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Nov 15, 2024 18:08:43.480696917 CET | 1.1.1.1 | 192.168.2.16 | 0x3a84 | No error (0) | 52.218.122.88 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:43.480696917 CET | 1.1.1.1 | 192.168.2.16 | 0x3a84 | No error (0) | 52.218.25.171 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:43.480696917 CET | 1.1.1.1 | 192.168.2.16 | 0x3a84 | No error (0) | 52.218.62.19 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:43.480696917 CET | 1.1.1.1 | 192.168.2.16 | 0x3a84 | No error (0) | 52.218.29.35 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:43.480696917 CET | 1.1.1.1 | 192.168.2.16 | 0x3a84 | No error (0) | 52.218.108.243 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:43.480696917 CET | 1.1.1.1 | 192.168.2.16 | 0x3a84 | No error (0) | 52.92.36.120 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:43.480696917 CET | 1.1.1.1 | 192.168.2.16 | 0x3a84 | No error (0) | 52.218.117.56 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:43.480696917 CET | 1.1.1.1 | 192.168.2.16 | 0x3a84 | No error (0) | 52.218.121.24 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:46.733834982 CET | 1.1.1.1 | 192.168.2.16 | 0xd5a2 | No error (0) | 91.211.222.250 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:48.259665012 CET | 1.1.1.1 | 192.168.2.16 | 0x441e | No error (0) | 142.250.184.228 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:48.259727955 CET | 1.1.1.1 | 192.168.2.16 | 0x2d47 | No error (0) | 65 | IN (0x0001) | false | |||
| Nov 15, 2024 18:08:49.004417896 CET | 1.1.1.1 | 192.168.2.16 | 0x4900 | No error (0) | 104.18.95.41 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:49.004417896 CET | 1.1.1.1 | 192.168.2.16 | 0x4900 | No error (0) | 104.18.94.41 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:49.004432917 CET | 1.1.1.1 | 192.168.2.16 | 0x3e42 | No error (0) | 65 | IN (0x0001) | false | |||
| Nov 15, 2024 18:08:50.952052116 CET | 1.1.1.1 | 192.168.2.16 | 0xfc74 | No error (0) | 104.18.94.41 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:50.952052116 CET | 1.1.1.1 | 192.168.2.16 | 0xfc74 | No error (0) | 104.18.95.41 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:50.952114105 CET | 1.1.1.1 | 192.168.2.16 | 0xeca | No error (0) | 65 | IN (0x0001) | false | |||
| Nov 15, 2024 18:08:50.959311008 CET | 1.1.1.1 | 192.168.2.16 | 0x6c3d | No error (0) | 104.18.95.41 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:50.959311008 CET | 1.1.1.1 | 192.168.2.16 | 0x6c3d | No error (0) | 104.18.94.41 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:08:50.959574938 CET | 1.1.1.1 | 192.168.2.16 | 0xec66 | No error (0) | 65 | IN (0x0001) | false | |||
| Nov 15, 2024 18:08:54.508192062 CET | 1.1.1.1 | 192.168.2.16 | 0x75d7 | No error (0) | templatesmetadata.office.net.edgekey.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:05.043071985 CET | 1.1.1.1 | 192.168.2.16 | 0x162e | No error (0) | 104.17.24.14 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:05.043071985 CET | 1.1.1.1 | 192.168.2.16 | 0x162e | No error (0) | 104.17.25.14 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:05.043153048 CET | 1.1.1.1 | 192.168.2.16 | 0x6c0 | No error (0) | 65 | IN (0x0001) | false | |||
| Nov 15, 2024 18:09:06.188232899 CET | 1.1.1.1 | 192.168.2.16 | 0xab12 | No error (0) | 104.17.25.14 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:06.188232899 CET | 1.1.1.1 | 192.168.2.16 | 0xab12 | No error (0) | 104.17.24.14 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:06.188268900 CET | 1.1.1.1 | 192.168.2.16 | 0xd9a6 | No error (0) | 65 | IN (0x0001) | false | |||
| Nov 15, 2024 18:09:06.226870060 CET | 1.1.1.1 | 192.168.2.16 | 0x5077 | No error (0) | 147.79.74.176 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:10.885555029 CET | 1.1.1.1 | 192.168.2.16 | 0x6544 | No error (0) | 147.79.74.176 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:10.918387890 CET | 1.1.1.1 | 192.168.2.16 | 0x63a4 | No error (0) | 151.101.194.137 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:10.918387890 CET | 1.1.1.1 | 192.168.2.16 | 0x63a4 | No error (0) | 151.101.130.137 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:10.918387890 CET | 1.1.1.1 | 192.168.2.16 | 0x63a4 | No error (0) | 151.101.66.137 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:10.918387890 CET | 1.1.1.1 | 192.168.2.16 | 0x63a4 | No error (0) | 151.101.2.137 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:12.322087049 CET | 1.1.1.1 | 192.168.2.16 | 0x3de2 | No error (0) | 151.101.130.137 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:12.322087049 CET | 1.1.1.1 | 192.168.2.16 | 0x3de2 | No error (0) | 151.101.2.137 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:12.322087049 CET | 1.1.1.1 | 192.168.2.16 | 0x3de2 | No error (0) | 151.101.66.137 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:12.322087049 CET | 1.1.1.1 | 192.168.2.16 | 0x3de2 | No error (0) | 151.101.194.137 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:12.340234041 CET | 1.1.1.1 | 192.168.2.16 | 0xde82 | No error (0) | 65 | IN (0x0001) | false | |||
| Nov 15, 2024 18:09:12.340517044 CET | 1.1.1.1 | 192.168.2.16 | 0x9780 | No error (0) | 104.26.12.205 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:12.340517044 CET | 1.1.1.1 | 192.168.2.16 | 0x9780 | No error (0) | 104.26.13.205 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:12.340517044 CET | 1.1.1.1 | 192.168.2.16 | 0x9780 | No error (0) | 172.67.74.152 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:13.358299971 CET | 1.1.1.1 | 192.168.2.16 | 0xe860 | No error (0) | 172.67.74.152 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:13.358299971 CET | 1.1.1.1 | 192.168.2.16 | 0xe860 | No error (0) | 104.26.13.205 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:13.358299971 CET | 1.1.1.1 | 192.168.2.16 | 0xe860 | No error (0) | 104.26.12.205 | A (IP address) | IN (0x0001) | false | ||
| Nov 15, 2024 18:09:13.360740900 CET | 1.1.1.1 | 192.168.2.16 | 0xe973 | No error (0) | 65 | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.16 | 49707 | 52.218.122.88 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:44 UTC | 809 | OUT | |
| 2024-11-15 17:08:44 UTC | 414 | IN | |
| 2024-11-15 17:08:44 UTC | 2038 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.16 | 49713 | 52.218.122.88 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:45 UTC | 748 | OUT | |
| 2024-11-15 17:08:45 UTC | 285 | IN | |
| 2024-11-15 17:08:45 UTC | 254 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 2 | 192.168.2.16 | 49715 | 52.149.20.212 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:47 UTC | 306 | OUT | |
| 2024-11-15 17:08:47 UTC | 560 | IN | |
| 2024-11-15 17:08:47 UTC | 15824 | IN | |
| 2024-11-15 17:08:47 UTC | 8666 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 3 | 192.168.2.16 | 49718 | 91.211.222.250 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:47 UTC | 707 | OUT | |
| 2024-11-15 17:08:47 UTC | 226 | IN | |
| 2024-11-15 17:08:47 UTC | 250 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 4 | 192.168.2.16 | 49717 | 91.211.222.250 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:47 UTC | 708 | OUT | |
| 2024-11-15 17:08:48 UTC | 568 | IN | |
| 2024-11-15 17:08:48 UTC | 2679 | IN | |
| 2024-11-15 17:08:48 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 5 | 192.168.2.16 | 49722 | 104.18.95.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:49 UTC | 547 | OUT | |
| 2024-11-15 17:08:49 UTC | 386 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 6 | 192.168.2.16 | 49723 | 104.18.95.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:50 UTC | 562 | OUT | |
| 2024-11-15 17:08:50 UTC | 471 | IN | |
| 2024-11-15 17:08:50 UTC | 898 | IN | |
| 2024-11-15 17:08:50 UTC | 1369 | IN | |
| 2024-11-15 17:08:50 UTC | 1369 | IN | |
| 2024-11-15 17:08:50 UTC | 1369 | IN | |
| 2024-11-15 17:08:50 UTC | 1369 | IN | |
| 2024-11-15 17:08:50 UTC | 1369 | IN | |
| 2024-11-15 17:08:50 UTC | 1369 | IN | |
| 2024-11-15 17:08:50 UTC | 1369 | IN | |
| 2024-11-15 17:08:50 UTC | 1369 | IN | |
| 2024-11-15 17:08:50 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 7 | 192.168.2.16 | 62575 | 104.18.94.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:51 UTC | 383 | OUT | |
| 2024-11-15 17:08:51 UTC | 471 | IN | |
| 2024-11-15 17:08:51 UTC | 898 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 8 | 192.168.2.16 | 62576 | 104.18.95.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:51 UTC | 802 | OUT | |
| 2024-11-15 17:08:51 UTC | 1362 | IN | |
| 2024-11-15 17:08:51 UTC | 82 | IN | |
| 2024-11-15 17:08:51 UTC | 1294 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN | |
| 2024-11-15 17:08:51 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 9 | 192.168.2.16 | 62577 | 104.18.95.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:52 UTC | 730 | OUT | |
| 2024-11-15 17:08:52 UTC | 331 | IN | |
| 2024-11-15 17:08:52 UTC | 1038 | IN | |
| 2024-11-15 17:08:52 UTC | 1369 | IN | |
| 2024-11-15 17:08:52 UTC | 1369 | IN | |
| 2024-11-15 17:08:52 UTC | 1369 | IN | |
| 2024-11-15 17:08:52 UTC | 1369 | IN | |
| 2024-11-15 17:08:52 UTC | 1369 | IN | |
| 2024-11-15 17:08:52 UTC | 1369 | IN | |
| 2024-11-15 17:08:52 UTC | 1369 | IN | |
| 2024-11-15 17:08:52 UTC | 1369 | IN | |
| 2024-11-15 17:08:52 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 10 | 192.168.2.16 | 62578 | 104.18.95.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:52 UTC | 742 | OUT | |
| 2024-11-15 17:08:52 UTC | 240 | IN | |
| 2024-11-15 17:08:52 UTC | 61 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 11 | 192.168.2.16 | 62579 | 104.18.94.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:53 UTC | 385 | OUT | |
| 2024-11-15 17:08:53 UTC | 240 | IN | |
| 2024-11-15 17:08:53 UTC | 61 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 12 | 192.168.2.16 | 62582 | 104.18.95.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:54 UTC | 1150 | OUT | |
| 2024-11-15 17:08:54 UTC | 3054 | OUT | |
| 2024-11-15 17:08:54 UTC | 747 | IN | |
| 2024-11-15 17:08:54 UTC | 622 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 13 | 192.168.2.16 | 62580 | 104.18.94.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:54 UTC | 433 | OUT | |
| 2024-11-15 17:08:54 UTC | 331 | IN | |
| 2024-11-15 17:08:54 UTC | 1038 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN | |
| 2024-11-15 17:08:54 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 14 | 192.168.2.16 | 62581 | 91.211.222.250 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:54 UTC | 695 | OUT | |
| 2024-11-15 17:08:54 UTC | 164 | IN | |
| 2024-11-15 17:08:54 UTC | 315 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 15 | 192.168.2.16 | 62584 | 104.18.94.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:56 UTC | 599 | OUT | |
| 2024-11-15 17:08:56 UTC | 379 | IN | |
| 2024-11-15 17:08:56 UTC | 7 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 16 | 192.168.2.16 | 62607 | 104.18.95.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:56 UTC | 785 | OUT | |
| 2024-11-15 17:08:56 UTC | 200 | IN | |
| 2024-11-15 17:08:56 UTC | 61 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 17 | 192.168.2.16 | 62639 | 104.18.94.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:57 UTC | 428 | OUT | |
| 2024-11-15 17:08:57 UTC | 200 | IN | |
| 2024-11-15 17:08:57 UTC | 61 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 18 | 192.168.2.16 | 62640 | 104.18.95.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:57 UTC | 814 | OUT | |
| 2024-11-15 17:08:57 UTC | 143 | IN | |
| 2024-11-15 17:08:57 UTC | 2015 | IN | |
| 2024-11-15 17:08:57 UTC | 1 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 19 | 192.168.2.16 | 62641 | 104.18.95.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:08:58 UTC | 1151 | OUT | |
| 2024-11-15 17:08:58 UTC | 16384 | OUT | |
| 2024-11-15 17:08:58 UTC | 15469 | OUT | |
| 2024-11-15 17:08:59 UTC | 330 | IN | |
| 2024-11-15 17:08:59 UTC | 1039 | IN | |
| 2024-11-15 17:08:59 UTC | 1369 | IN | |
| 2024-11-15 17:08:59 UTC | 1369 | IN | |
| 2024-11-15 17:08:59 UTC | 1369 | IN | |
| 2024-11-15 17:08:59 UTC | 1369 | IN | |
| 2024-11-15 17:08:59 UTC | 1369 | IN | |
| 2024-11-15 17:08:59 UTC | 1369 | IN | |
| 2024-11-15 17:08:59 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 20 | 192.168.2.16 | 62642 | 104.18.94.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:00 UTC | 599 | OUT | |
| 2024-11-15 17:09:00 UTC | 379 | IN | |
| 2024-11-15 17:09:00 UTC | 7 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 21 | 192.168.2.16 | 62643 | 104.18.95.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:02 UTC | 1151 | OUT | |
| 2024-11-15 17:09:02 UTC | 16384 | OUT | |
| 2024-11-15 17:09:02 UTC | 16384 | OUT | |
| 2024-11-15 17:09:02 UTC | 1453 | OUT | |
| 2024-11-15 17:09:03 UTC | 1361 | IN | |
| 2024-11-15 17:09:03 UTC | 32 | IN | |
| 2024-11-15 17:09:03 UTC | 1345 | IN | |
| 2024-11-15 17:09:03 UTC | 1369 | IN | |
| 2024-11-15 17:09:03 UTC | 1369 | IN | |
| 2024-11-15 17:09:03 UTC | 469 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 22 | 192.168.2.16 | 62644 | 104.18.94.41 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:03 UTC | 599 | OUT | |
| 2024-11-15 17:09:03 UTC | 379 | IN | |
| 2024-11-15 17:09:03 UTC | 7 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 23 | 192.168.2.16 | 62645 | 91.211.222.250 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:04 UTC | 957 | OUT | |
| 2024-11-15 17:09:04 UTC | 902 | OUT | |
| 2024-11-15 17:09:04 UTC | 514 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 24 | 192.168.2.16 | 62646 | 91.211.222.250 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:04 UTC | 849 | OUT | |
| 2024-11-15 17:09:05 UTC | 504 | IN | |
| 2024-11-15 17:09:05 UTC | 7688 | IN | |
| 2024-11-15 17:09:05 UTC | 526 | IN | |
| 2024-11-15 17:09:05 UTC | 2 | IN | |
| 2024-11-15 17:09:05 UTC | 2565 | IN | |
| 2024-11-15 17:09:05 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 25 | 192.168.2.16 | 62647 | 104.17.24.14 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:05 UTC | 565 | OUT | |
| 2024-11-15 17:09:05 UTC | 964 | IN | |
| 2024-11-15 17:09:05 UTC | 405 | IN | |
| 2024-11-15 17:09:05 UTC | 1369 | IN | |
| 2024-11-15 17:09:05 UTC | 1369 | IN | |
| 2024-11-15 17:09:05 UTC | 1369 | IN | |
| 2024-11-15 17:09:05 UTC | 1369 | IN | |
| 2024-11-15 17:09:05 UTC | 1369 | IN | |
| 2024-11-15 17:09:05 UTC | 1369 | IN | |
| 2024-11-15 17:09:05 UTC | 1369 | IN | |
| 2024-11-15 17:09:05 UTC | 1369 | IN | |
| 2024-11-15 17:09:05 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 26 | 192.168.2.16 | 62648 | 104.17.25.14 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:06 UTC | 386 | OUT | |
| 2024-11-15 17:09:06 UTC | 962 | IN | |
| 2024-11-15 17:09:06 UTC | 407 | IN | |
| 2024-11-15 17:09:06 UTC | 1369 | IN | |
| 2024-11-15 17:09:06 UTC | 1369 | IN | |
| 2024-11-15 17:09:06 UTC | 1369 | IN | |
| 2024-11-15 17:09:06 UTC | 1369 | IN | |
| 2024-11-15 17:09:06 UTC | 1369 | IN | |
| 2024-11-15 17:09:06 UTC | 1369 | IN | |
| 2024-11-15 17:09:06 UTC | 1369 | IN | |
| 2024-11-15 17:09:06 UTC | 1369 | IN | |
| 2024-11-15 17:09:06 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 27 | 192.168.2.16 | 62649 | 147.79.74.176 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:06 UTC | 511 | OUT | |
| 2024-11-15 17:09:07 UTC | 393 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 28 | 192.168.2.16 | 62650 | 147.79.74.176 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:08 UTC | 608 | OUT | |
| 2024-11-15 17:09:08 UTC | 218 | OUT | |
| 2024-11-15 17:09:09 UTC | 365 | IN | |
| 2024-11-15 17:09:09 UTC | 16019 | IN | |
| 2024-11-15 17:09:09 UTC | 16384 | IN | |
| 2024-11-15 17:09:09 UTC | 16384 | IN | |
| 2024-11-15 17:09:09 UTC | 16384 | IN | |
| 2024-11-15 17:09:09 UTC | 16384 | IN | |
| 2024-11-15 17:09:09 UTC | 16384 | IN | |
| 2024-11-15 17:09:09 UTC | 16384 | IN | |
| 2024-11-15 17:09:09 UTC | 16384 | IN | |
| 2024-11-15 17:09:09 UTC | 16384 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 29 | 192.168.2.16 | 62652 | 104.17.24.14 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:11 UTC | 653 | OUT | |
| 2024-11-15 17:09:11 UTC | 953 | IN | |
| 2024-11-15 17:09:11 UTC | 416 | IN | |
| 2024-11-15 17:09:11 UTC | 1369 | IN | |
| 2024-11-15 17:09:11 UTC | 1369 | IN | |
| 2024-11-15 17:09:11 UTC | 1369 | IN | |
| 2024-11-15 17:09:11 UTC | 1369 | IN | |
| 2024-11-15 17:09:11 UTC | 1369 | IN | |
| 2024-11-15 17:09:11 UTC | 1369 | IN | |
| 2024-11-15 17:09:11 UTC | 1369 | IN | |
| 2024-11-15 17:09:11 UTC | 1369 | IN | |
| 2024-11-15 17:09:11 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 30 | 192.168.2.16 | 62653 | 151.101.194.137 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:11 UTC | 625 | OUT | |
| 2024-11-15 17:09:11 UTC | 610 | IN | |
| 2024-11-15 17:09:11 UTC | 16384 | IN | |
| 2024-11-15 17:09:11 UTC | 16384 | IN | |
| 2024-11-15 17:09:12 UTC | 16384 | IN | |
| 2024-11-15 17:09:12 UTC | 16384 | IN | |
| 2024-11-15 17:09:12 UTC | 16384 | IN | |
| 2024-11-15 17:09:12 UTC | 7581 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 31 | 192.168.2.16 | 62651 | 147.79.74.176 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:11 UTC | 342 | OUT | |
| 2024-11-15 17:09:11 UTC | 345 | IN | |
| 2024-11-15 17:09:11 UTC | 40 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 32 | 192.168.2.16 | 62654 | 104.17.25.14 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:12 UTC | 386 | OUT | |
| 2024-11-15 17:09:13 UTC | 959 | IN | |
| 2024-11-15 17:09:13 UTC | 410 | IN | |
| 2024-11-15 17:09:13 UTC | 1369 | IN | |
| 2024-11-15 17:09:13 UTC | 1369 | IN | |
| 2024-11-15 17:09:13 UTC | 1369 | IN | |
| 2024-11-15 17:09:13 UTC | 1369 | IN | |
| 2024-11-15 17:09:13 UTC | 1369 | IN | |
| 2024-11-15 17:09:13 UTC | 1369 | IN | |
| 2024-11-15 17:09:13 UTC | 1369 | IN | |
| 2024-11-15 17:09:13 UTC | 1369 | IN | |
| 2024-11-15 17:09:13 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 33 | 192.168.2.16 | 62655 | 151.101.130.137 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:13 UTC | 358 | OUT | |
| 2024-11-15 17:09:13 UTC | 610 | IN | |
| 2024-11-15 17:09:13 UTC | 16384 | IN | |
| 2024-11-15 17:09:13 UTC | 16384 | IN | |
| 2024-11-15 17:09:13 UTC | 16384 | IN | |
| 2024-11-15 17:09:13 UTC | 16384 | IN | |
| 2024-11-15 17:09:13 UTC | 16384 | IN | |
| 2024-11-15 17:09:13 UTC | 7581 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 34 | 192.168.2.16 | 62656 | 104.26.12.205 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:13 UTC | 561 | OUT | |
| 2024-11-15 17:09:13 UTC | 438 | IN | |
| 2024-11-15 17:09:13 UTC | 23 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 35 | 192.168.2.16 | 62657 | 172.67.74.152 | 443 | 7040 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:14 UTC | 349 | OUT | |
| 2024-11-15 17:09:14 UTC | 405 | IN | |
| 2024-11-15 17:09:14 UTC | 23 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 36 | 192.168.2.16 | 62658 | 52.149.20.212 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-11-15 17:09:24 UTC | 306 | OUT | |
| 2024-11-15 17:09:25 UTC | 560 | IN | |
| 2024-11-15 17:09:25 UTC | 15824 | IN | |
| 2024-11-15 17:09:25 UTC | 14181 | IN |
Click to jump to process
Click to jump to process
back
Click to dive into process behavior distribution
Click to jump to process
| Target ID: | 0 |
| Start time: | 12:08:36 |
| Start date: | 15/11/2024 |
| Path: | C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x850000 |
| File size: | 1'620'872 bytes |
| MD5 hash: | 1A0C2C2E7D9C4BC18E91604E9B0C7678 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 4 |
| Start time: | 12:08:41 |
| Start date: | 15/11/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 5 |
| Start time: | 12:08:42 |
| Start date: | 15/11/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
⊘No disassembly