Edit tour
Windows
Analysis Report
Coordination_Committee.exe
Overview
General Information
| Sample name: | Coordination_Committee.exe |
| Analysis ID: | 1573295 |
| MD5: | 10c4162af158b4a1fe29bcefb589f464 |
| SHA1: | eeb63a5dd15d31a7a05a33f42478b18ec39ef4e0 |
| SHA256: | 80c205154636cc0e78140f4fa97fc34ce18038ec48d156268acd827080a6d3b9 |
| Tags: | Camscannerexeuser-smica83 |
| Infos: | |
 | |
Detection
| Score: | 52 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Multi AV Scanner detection for submitted file
Uses known network protocols on non-standard ports
Allocates memory with a write watch (potentially for evading sandboxes)
Binary contains a suspicious time stamp
Contains long sleeps (>= 3 min)
Detected TCP or UDP traffic on non-standard ports
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
HTTP GET or POST without a user agent
May sleep (evasive loops) to hinder dynamic analysis
Queries the volume information (name, serial number etc) of a device
Sample file is different than original file name gathered from version info
Classification
- System is w10x64
Coordination_Committee.exe (PID: 7412 cmdline: "C:\Users\ user\Deskt op\Coordin ation_Comm ittee.exe" MD5: 10C4162AF158B4A1FE29BCEFB589F464)
- cleanup
⊘No configs have been found
⊘No yara matches
⊘No Sigma rule has matched
⊘No Suricata rule has matched
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | ReversingLabs: | ||
| Source: | Static PE information: | ||
Networking | |
|---|
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | TCP traffic: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Classification label: | ||
| Source: | Mutant created: | ||
| Source: | Static PE information: | ||
| Source: | Static file information: | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | ReversingLabs: | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
Hooking and other Techniques for Hiding and Protection | |
|---|
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Memory allocated: | Jump to behavior | ||
| Source: | Memory allocated: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Window / User API: | Jump to behavior | ||
| Source: | Window / User API: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Binary or memory string: | ||
| Source: | Process token adjusted: | Jump to behavior | ||
| Source: | Memory allocated: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | 1 DLL Side-Loading | 1 DLL Side-Loading | 1 Disable or Modify Tools | OS Credential Dumping | 1 Security Software Discovery | Remote Services | Data from Local System | 11 Non-Standard Port | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | Boot or Logon Initialization Scripts | 31 Virtualization/Sandbox Evasion | LSASS Memory | 31 Virtualization/Sandbox Evasion | Remote Desktop Protocol | Data from Removable Media | 2 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | 1 Timestomp | Security Account Manager | 1 Application Window Discovery | SMB/Windows Admin Shares | Data from Network Shared Drive | 2 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | 1 DLL Side-Loading | NTDS | 12 System Information Discovery | Distributed Component Object Model | Input Capture | 1 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 67% | ReversingLabs | ByteCode-MSIL.Trojan.Zilla |
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| theprintazadkashmir.com | 162.252.175.33 | true | false | unknown |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false |
| unknown |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 162.252.175.33 | theprintazadkashmir.com | United States | 29802 | HVC-ASUS | false |
| Joe Sandbox version: | 41.0.0 Charoite |
| Analysis ID: | 1573295 |
| Start date and time: | 2024-12-11 19:22:34 +01:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 5m 1s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | default.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Run name: | Run with higher sleep bypass |
| Number of analysed new started processes analysed: | 5 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | Coordination_Committee.exe |
| Detection: | MAL |
| Classification: | mal52.troj.winEXE@1/0@1/1 |
| EGA Information: | Failed |
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
- Excluded IPs from analysis (whitelisted): 4.175.87.197, 13.107.246.63
- Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
- Execution Graph export aborted for target Coordination_Committee.exe, PID 7412 because it is empty
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtQueryValueKey calls found.
- Report size getting too big, too many NtReadVirtualMemory calls found.
- VT rate limit hit for: Coordination_Committee.exe
⊘No simulations
⊘No context
⊘No context
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| HVC-ASUS | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Phisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | DanaBot | Browse |
| ||
| Get hash | malicious | DanaBot | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
⊘No context
⊘No context
⊘No created / dropped files found
| File type: | |
| Entropy (8bit): | 5.5302415212189935 |
| TrID: |
|
| File name: | Coordination_Committee.exe |
| File size: | 21'504 bytes |
| MD5: | 10c4162af158b4a1fe29bcefb589f464 |
| SHA1: | eeb63a5dd15d31a7a05a33f42478b18ec39ef4e0 |
| SHA256: | 80c205154636cc0e78140f4fa97fc34ce18038ec48d156268acd827080a6d3b9 |
| SHA512: | bc2971c8fb354d362c8670b0038a345009b7419fc43023febd06351c1f2b4e0f13f2f78f0f8404e6ffbfeb2a4d68b9518a14cd1247adfd237992ab87f8d9953d |
| SSDEEP: | 384:XP859W38vo7Qou9xJ/M7Tmeu0Fa0FqBAfIrj+x3EmeDNxO:X4WSo7Qo4wiena0FqiIQoDzO |
| TLSH: | 35A22A4D93ACCA3BC66E1BBD6470439287B0D2556523FFAF898CF2D87A4734045446AB |
| File Content Preview: | MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L................."...0..L..........>k... ........@.. ....................................`................................ |
 | |
| Icon Hash: | 90cececece8e8eb0 |
| Entrypoint: | 0x406b3e |
| Entrypoint Section: | .text |
| Digitally signed: | false |
| Imagebase: | 0x400000 |
| Subsystem: | windows gui |
| Image File Characteristics: | EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE |
| DLL Characteristics: | HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE |
| Time Stamp: | 0x95D98694 [Tue Aug 31 22:15:48 2049 UTC] |
| TLS Callbacks: | |
| CLR (.Net) Version: | |
| OS Version Major: | 4 |
| OS Version Minor: | 0 |
| File Version Major: | 4 |
| File Version Minor: | 0 |
| Subsystem Version Major: | 4 |
| Subsystem Version Minor: | 0 |
| Import Hash: | f34d5f2d4577ed6d9ceec516c1f5a744 |
| Instruction |
|---|
| jmp dword ptr [00402000h] |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| add byte ptr [eax], al |
| Name | Virtual Address | Virtual Size | Is in Section |
|---|---|---|---|
| IMAGE_DIRECTORY_ENTRY_EXPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IMPORT | 0x6aec | 0x4f | .text |
| IMAGE_DIRECTORY_ENTRY_RESOURCE | 0x8000 | 0x2a8 | .rsrc |
| IMAGE_DIRECTORY_ENTRY_EXCEPTION | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_SECURITY | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BASERELOC | 0xa000 | 0xc | .reloc |
| IMAGE_DIRECTORY_ENTRY_DEBUG | 0x6ad0 | 0x1c | .text |
| IMAGE_DIRECTORY_ENTRY_COPYRIGHT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_GLOBALPTR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_TLS | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IAT | 0x2000 | 0x8 | .text |
| IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR | 0x2008 | 0x48 | .text |
| IMAGE_DIRECTORY_ENTRY_RESERVED | 0x0 | 0x0 |
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Xored PE | ZLIB Complexity | File Type | Entropy | Characteristics |
|---|---|---|---|---|---|---|---|---|---|
| .text | 0x2000 | 0x4b44 | 0x4c00 | 11e31f2c4c314f2807587d45ad8cbe0f | False | 0.5052939967105263 | data | 5.801149111275847 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ |
| .rsrc | 0x8000 | 0x2a8 | 0x400 | a3174b11a287100d5d2bfff4ff7b5869 | False | 0.2958984375 | data | 2.155443991028814 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| .reloc | 0xa000 | 0xc | 0x200 | c9c3e849a074ed751e38df694e33b6fb | False | 0.044921875 | data | 0.08153941234324169 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ |
| Name | RVA | Size | Type | Language | Country | ZLIB Complexity |
|---|---|---|---|---|---|---|
| RT_VERSION | 0x8058 | 0x24c | data | 0.45918367346938777 |
| DLL | Import |
|---|---|
| mscoree.dll | _CorExeMain |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Dec 11, 2024 19:23:47.683585882 CET | 49733 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:47.803736925 CET | 7545 | 49733 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:47.803855896 CET | 49733 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:47.806962013 CET | 49733 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:47.926749945 CET | 7545 | 49733 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:49.804913044 CET | 7545 | 49733 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:49.804995060 CET | 49733 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:49.826225996 CET | 49733 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:49.827600956 CET | 49735 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:49.947813034 CET | 7545 | 49733 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:49.949301004 CET | 7545 | 49735 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:49.949383020 CET | 49735 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:49.949716091 CET | 49735 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:50.071929932 CET | 7545 | 49735 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:51.979155064 CET | 7545 | 49735 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:51.979243040 CET | 49735 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:51.979587078 CET | 49735 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:52.102828979 CET | 7545 | 49735 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:53.994874954 CET | 49738 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:54.114155054 CET | 7545 | 49738 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:54.114263058 CET | 49738 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:54.114563942 CET | 49738 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:54.233931065 CET | 7545 | 49738 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:56.123390913 CET | 7545 | 49738 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:56.123466015 CET | 49738 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:56.123800039 CET | 49738 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:56.124285936 CET | 49739 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:56.246016979 CET | 7545 | 49738 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:56.246490955 CET | 7545 | 49739 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:56.246572018 CET | 49739 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:56.246853113 CET | 49739 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:56.526612043 CET | 7545 | 49739 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:58.415818930 CET | 7545 | 49739 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:23:58.415884972 CET | 49739 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:58.416089058 CET | 49739 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:23:58.535931110 CET | 7545 | 49739 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:00.417191982 CET | 49740 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:00.536639929 CET | 7545 | 49740 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:00.536830902 CET | 49740 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:00.537106991 CET | 49740 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:00.656636000 CET | 7545 | 49740 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:02.558170080 CET | 7545 | 49740 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:02.561583042 CET | 49740 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:02.561875105 CET | 49740 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:02.562381983 CET | 49741 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:02.682419062 CET | 7545 | 49740 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:02.682455063 CET | 7545 | 49741 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:02.682643890 CET | 49741 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:02.685123920 CET | 49741 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:02.805502892 CET | 7545 | 49741 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:04.680151939 CET | 7545 | 49741 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:04.680382967 CET | 49741 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:04.680382967 CET | 49741 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:04.911540985 CET | 7545 | 49741 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:06.681437969 CET | 49742 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:06.800839901 CET | 7545 | 49742 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:06.801007032 CET | 49742 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:06.801258087 CET | 49742 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:06.920675039 CET | 7545 | 49742 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:08.806713104 CET | 7545 | 49742 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:08.806916952 CET | 49742 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:08.806976080 CET | 49742 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:08.807529926 CET | 49743 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:08.927623987 CET | 7545 | 49742 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:08.928035975 CET | 7545 | 49743 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:08.928118944 CET | 49743 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:08.928411961 CET | 49743 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:09.047863007 CET | 7545 | 49743 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:10.931127071 CET | 7545 | 49743 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:10.935214043 CET | 49743 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:10.935338974 CET | 49743 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:11.054707050 CET | 7545 | 49743 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:12.936125994 CET | 49744 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:13.055718899 CET | 7545 | 49744 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:13.055816889 CET | 49744 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:13.056031942 CET | 49744 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:13.175213099 CET | 7545 | 49744 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:15.057419062 CET | 7545 | 49744 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:15.057535887 CET | 49744 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:15.057724953 CET | 49744 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:15.058125973 CET | 49745 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:15.177380085 CET | 7545 | 49744 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:15.177680016 CET | 7545 | 49745 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:15.178037882 CET | 49745 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:15.178039074 CET | 49745 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:15.297518015 CET | 7545 | 49745 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:17.344340086 CET | 7545 | 49745 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:17.344439983 CET | 49745 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:17.344662905 CET | 49745 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:17.464406967 CET | 7545 | 49745 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:19.345508099 CET | 49746 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:19.465256929 CET | 7545 | 49746 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:19.465337992 CET | 49746 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:19.465610981 CET | 49746 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:19.585040092 CET | 7545 | 49746 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:21.466466904 CET | 7545 | 49746 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:21.466696024 CET | 49746 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:21.466851950 CET | 49746 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:21.467571020 CET | 49747 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:21.587414026 CET | 7545 | 49746 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:21.588278055 CET | 7545 | 49747 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:21.588397026 CET | 49747 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:21.588690042 CET | 49747 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:21.708425999 CET | 7545 | 49747 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:23.586688995 CET | 7545 | 49747 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:23.586776972 CET | 49747 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:23.586893082 CET | 49747 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:23.707449913 CET | 7545 | 49747 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:25.587805033 CET | 49749 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:25.707386017 CET | 7545 | 49749 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:25.711308956 CET | 49749 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:25.714889050 CET | 49749 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:25.834491968 CET | 7545 | 49749 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:27.711797953 CET | 7545 | 49749 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:27.713669062 CET | 49749 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:27.714101076 CET | 49749 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:27.714467049 CET | 49756 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:27.833358049 CET | 7545 | 49749 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:27.833740950 CET | 7545 | 49756 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:27.834100008 CET | 49756 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:27.834166050 CET | 49756 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:27.954310894 CET | 7545 | 49756 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:29.842411041 CET | 7545 | 49756 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:29.842535019 CET | 49756 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:29.842652082 CET | 49756 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:29.962268114 CET | 7545 | 49756 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:31.844203949 CET | 49767 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:31.964131117 CET | 7545 | 49767 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:31.964222908 CET | 49767 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:31.964529991 CET | 49767 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:32.085421085 CET | 7545 | 49767 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:33.961020947 CET | 7545 | 49767 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:33.961076975 CET | 49767 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:33.961357117 CET | 49767 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:33.961771011 CET | 49772 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:34.081141949 CET | 7545 | 49767 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:34.081487894 CET | 7545 | 49772 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:34.081703901 CET | 49772 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:34.110619068 CET | 49772 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:34.230248928 CET | 7545 | 49772 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:36.071079016 CET | 7545 | 49772 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:36.071146011 CET | 49772 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:36.071258068 CET | 49772 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:36.190808058 CET | 7545 | 49772 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:38.072545052 CET | 49781 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:38.192174911 CET | 7545 | 49781 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:38.192332983 CET | 49781 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:38.192819118 CET | 49781 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:38.314217091 CET | 7545 | 49781 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:40.265814066 CET | 7545 | 49781 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:40.265939951 CET | 49781 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:40.266309023 CET | 49781 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:40.267245054 CET | 49787 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:40.551970959 CET | 7545 | 49781 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:40.552012920 CET | 7545 | 49787 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:40.552124977 CET | 49787 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:40.552349091 CET | 49787 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:40.672233105 CET | 7545 | 49787 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:42.553483963 CET | 7545 | 49787 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:42.553579092 CET | 49787 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:42.555972099 CET | 49787 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:42.676203966 CET | 7545 | 49787 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:44.556934118 CET | 49798 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:44.842713118 CET | 7545 | 49798 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:44.842820883 CET | 49798 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:44.843025923 CET | 49798 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:44.964247942 CET | 7545 | 49798 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:46.854077101 CET | 7545 | 49798 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:46.854394913 CET | 49798 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:46.854897022 CET | 49798 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:46.855051041 CET | 49802 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:46.977036953 CET | 7545 | 49798 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:46.977088928 CET | 7545 | 49802 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:46.977278948 CET | 49802 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:46.977368116 CET | 49802 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:47.102430105 CET | 7545 | 49802 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:48.979372025 CET | 7545 | 49802 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:48.979470968 CET | 49802 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:48.979562998 CET | 49802 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:49.100661039 CET | 7545 | 49802 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:50.980375051 CET | 49813 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:51.102632046 CET | 7545 | 49813 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:51.102788925 CET | 49813 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:51.103030920 CET | 49813 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:51.222400904 CET | 7545 | 49813 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:53.105407000 CET | 7545 | 49813 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:53.105458021 CET | 49813 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:53.105648994 CET | 49813 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:53.106033087 CET | 49819 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:53.226428032 CET | 7545 | 49813 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:53.226762056 CET | 7545 | 49819 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:53.226845026 CET | 49819 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:53.227065086 CET | 49819 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:53.347074986 CET | 7545 | 49819 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:55.246309042 CET | 7545 | 49819 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:55.246506929 CET | 49819 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:55.246681929 CET | 49819 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:55.368300915 CET | 7545 | 49819 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:57.249917984 CET | 49829 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:57.370520115 CET | 7545 | 49829 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:57.370603085 CET | 49829 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:57.370884895 CET | 49829 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:57.490251064 CET | 7545 | 49829 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:59.368549109 CET | 7545 | 49829 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:59.368619919 CET | 49829 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:59.368737936 CET | 49829 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:59.369329929 CET | 49835 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:59.488183022 CET | 7545 | 49829 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:59.488890886 CET | 7545 | 49835 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:24:59.489099026 CET | 49835 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:59.489204884 CET | 49835 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:24:59.608700037 CET | 7545 | 49835 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:01.477276087 CET | 7545 | 49835 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:01.477353096 CET | 49835 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:01.477471113 CET | 49835 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:01.600644112 CET | 7545 | 49835 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:03.482609987 CET | 49845 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:03.611358881 CET | 7545 | 49845 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:03.613631964 CET | 49845 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:03.615732908 CET | 49845 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:03.742419958 CET | 7545 | 49845 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:05.603251934 CET | 7545 | 49845 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:05.607084990 CET | 49845 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:05.607254028 CET | 49845 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:05.607777119 CET | 49851 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:05.727152109 CET | 7545 | 49845 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:05.727176905 CET | 7545 | 49851 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:05.727288008 CET | 49851 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:05.727541924 CET | 49851 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:05.846906900 CET | 7545 | 49851 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:07.744333029 CET | 7545 | 49851 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:07.745095015 CET | 49851 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:07.745208979 CET | 49851 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:07.865567923 CET | 7545 | 49851 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:09.750051022 CET | 49861 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:09.869519949 CET | 7545 | 49861 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:09.869596958 CET | 49861 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:09.869812965 CET | 49861 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:09.989211082 CET | 7545 | 49861 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:12.047075987 CET | 7545 | 49861 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:12.051186085 CET | 49861 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:12.051285028 CET | 49861 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:12.051681995 CET | 49867 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:12.170909882 CET | 7545 | 49861 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:12.171067953 CET | 7545 | 49867 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:12.171166897 CET | 49867 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:12.171346903 CET | 49867 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:12.290690899 CET | 7545 | 49867 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:14.166110992 CET | 7545 | 49867 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:14.167067051 CET | 49867 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:14.167176962 CET | 49867 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:14.287033081 CET | 7545 | 49867 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:16.168175936 CET | 49878 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:16.289666891 CET | 7545 | 49878 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:16.289776087 CET | 49878 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:16.289975882 CET | 49878 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:16.409739017 CET | 7545 | 49878 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:18.273998022 CET | 7545 | 49878 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:18.277407885 CET | 49878 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:18.277527094 CET | 49878 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:18.282027960 CET | 49884 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:18.397748947 CET | 7545 | 49878 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:18.402625084 CET | 7545 | 49884 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:18.403105974 CET | 49884 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:18.409595966 CET | 49884 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:18.531632900 CET | 7545 | 49884 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:20.399727106 CET | 7545 | 49884 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:20.399887085 CET | 49884 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:20.400041103 CET | 49884 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:20.520601034 CET | 7545 | 49884 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:22.400918961 CET | 49895 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:22.521205902 CET | 7545 | 49895 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:22.521296978 CET | 49895 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:22.521688938 CET | 49895 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:22.641133070 CET | 7545 | 49895 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:24.525445938 CET | 7545 | 49895 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:24.525496006 CET | 49895 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:24.525609016 CET | 49895 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:24.525966883 CET | 49900 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:24.645081043 CET | 7545 | 49895 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:24.645271063 CET | 7545 | 49900 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:24.645358086 CET | 49900 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:24.645625114 CET | 49900 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:24.767309904 CET | 7545 | 49900 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:26.697890043 CET | 7545 | 49900 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:26.697973967 CET | 49900 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:26.698159933 CET | 49900 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:26.947561026 CET | 7545 | 49900 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:28.698976994 CET | 49910 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:28.825165033 CET | 7545 | 49910 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:28.825267076 CET | 49910 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:28.825592041 CET | 49910 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:28.945713997 CET | 7545 | 49910 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:30.823081970 CET | 7545 | 49910 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:30.823159933 CET | 49910 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:30.823338985 CET | 49910 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:30.823892117 CET | 49916 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:30.943331957 CET | 7545 | 49910 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:30.944957018 CET | 7545 | 49916 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:30.945368052 CET | 49916 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:30.945595026 CET | 49916 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:31.065888882 CET | 7545 | 49916 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:32.932499886 CET | 7545 | 49916 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:32.935148954 CET | 49916 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:32.935182095 CET | 49916 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:33.057018042 CET | 7545 | 49916 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:34.936105967 CET | 49926 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:35.056529045 CET | 7545 | 49926 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:35.059065104 CET | 49926 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:35.059274912 CET | 49926 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:35.179028988 CET | 7545 | 49926 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:37.123464108 CET | 7545 | 49926 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:37.127033949 CET | 49926 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:37.127146959 CET | 49926 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:37.127692938 CET | 49932 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:37.247070074 CET | 7545 | 49926 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:37.247158051 CET | 7545 | 49932 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:37.247256041 CET | 49932 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:37.247445107 CET | 49932 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:37.519114017 CET | 7545 | 49932 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:39.455477953 CET | 7545 | 49932 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:39.455557108 CET | 49932 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:39.455739021 CET | 49932 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:39.577047110 CET | 7545 | 49932 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:41.460995913 CET | 49943 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:41.582374096 CET | 7545 | 49943 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:41.582462072 CET | 49943 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:41.582662106 CET | 49943 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:41.702375889 CET | 7545 | 49943 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:43.619647026 CET | 7545 | 49943 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:43.619719028 CET | 49943 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:43.619924068 CET | 49943 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:43.620500088 CET | 49949 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:43.739362955 CET | 7545 | 49943 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:43.739924908 CET | 7545 | 49949 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:43.740025997 CET | 49949 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:43.740307093 CET | 49949 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:43.859797001 CET | 7545 | 49949 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:45.748687029 CET | 7545 | 49949 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:45.748764992 CET | 49949 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:45.748878002 CET | 49949 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:45.868885040 CET | 7545 | 49949 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:47.751058102 CET | 49960 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:47.871440887 CET | 7545 | 49960 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:47.871526957 CET | 49960 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:47.871876001 CET | 49960 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:47.991277933 CET | 7545 | 49960 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:49.869290113 CET | 7545 | 49960 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:49.869357109 CET | 49960 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:49.869625092 CET | 49960 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:49.869870901 CET | 49965 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:49.990411997 CET | 7545 | 49960 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:49.990531921 CET | 7545 | 49965 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:49.990613937 CET | 49965 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:49.990868092 CET | 49965 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:50.114157915 CET | 7545 | 49965 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:51.996490002 CET | 7545 | 49965 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:51.996627092 CET | 49965 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:51.996731043 CET | 49965 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:52.120939970 CET | 7545 | 49965 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:53.997915030 CET | 49976 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:54.124730110 CET | 7545 | 49976 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:54.124823093 CET | 49976 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:54.125097990 CET | 49976 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:54.248909950 CET | 7545 | 49976 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:56.163012981 CET | 7545 | 49976 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:56.163091898 CET | 49976 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:56.163291931 CET | 49976 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:56.163727999 CET | 49981 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:56.287020922 CET | 7545 | 49976 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:56.287039042 CET | 7545 | 49981 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:56.287112951 CET | 49981 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:56.287364960 CET | 49981 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:56.406955957 CET | 7545 | 49981 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:58.330461979 CET | 7545 | 49981 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:25:58.330537081 CET | 49981 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:58.330646992 CET | 49981 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:25:58.450892925 CET | 7545 | 49981 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:00.331640005 CET | 49991 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:00.451766014 CET | 7545 | 49991 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:00.451894999 CET | 49991 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:00.452131033 CET | 49991 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:00.571469069 CET | 7545 | 49991 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:02.654109001 CET | 7545 | 49991 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:02.654273987 CET | 49991 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:02.654396057 CET | 49991 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:02.655030966 CET | 49997 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:02.803495884 CET | 7545 | 49991 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:02.803541899 CET | 7545 | 49997 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:02.803651094 CET | 49997 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:02.803879976 CET | 49997 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:02.926767111 CET | 7545 | 49997 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:04.882760048 CET | 7545 | 49997 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:04.883045912 CET | 49997 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:04.883045912 CET | 49997 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:05.002506971 CET | 7545 | 49997 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:06.883903980 CET | 50007 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:07.005330086 CET | 7545 | 50007 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:07.005419970 CET | 50007 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:07.005863905 CET | 50007 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:07.125283957 CET | 7545 | 50007 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:09.116708040 CET | 7545 | 50007 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:09.116806030 CET | 50007 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:09.116899967 CET | 50007 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:09.117563963 CET | 50013 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:09.238621950 CET | 7545 | 50007 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:09.239378929 CET | 7545 | 50013 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:09.239449978 CET | 50013 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:09.239679098 CET | 50013 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:09.359193087 CET | 7545 | 50013 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:11.284698963 CET | 7545 | 50013 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:11.285029888 CET | 50013 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:11.285989046 CET | 50013 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:11.406111956 CET | 7545 | 50013 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:13.286870003 CET | 50024 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:13.411582947 CET | 7545 | 50024 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:13.411665916 CET | 50024 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:13.411880970 CET | 50024 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:13.536989927 CET | 7545 | 50024 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:15.508368015 CET | 7545 | 50024 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:15.511027098 CET | 50024 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:15.511127949 CET | 50024 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:15.511594057 CET | 50030 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:15.632133961 CET | 7545 | 50024 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:15.632713079 CET | 7545 | 50030 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:15.632915974 CET | 50030 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:15.633040905 CET | 50030 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:15.759025097 CET | 7545 | 50030 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:17.994546890 CET | 7545 | 50030 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:17.994769096 CET | 50030 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:17.994769096 CET | 50030 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:18.241028070 CET | 7545 | 50030 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:19.995569944 CET | 50040 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:20.115298033 CET | 7545 | 50040 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:20.119096041 CET | 50040 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:20.119282007 CET | 50040 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:20.238959074 CET | 7545 | 50040 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:22.114294052 CET | 7545 | 50040 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:22.114375114 CET | 50040 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:22.114667892 CET | 50040 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:22.115009069 CET | 50046 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:22.234563112 CET | 7545 | 50040 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:22.234827995 CET | 7545 | 50046 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:22.234900951 CET | 50046 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:22.235213041 CET | 50046 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:22.354473114 CET | 7545 | 50046 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:24.416018009 CET | 7545 | 50046 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:24.416089058 CET | 50046 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:24.416208982 CET | 50046 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:24.536259890 CET | 7545 | 50046 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:26.416876078 CET | 50052 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:26.536421061 CET | 7545 | 50052 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:26.536602020 CET | 50052 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:26.536811113 CET | 50052 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:26.656069994 CET | 7545 | 50052 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:28.679130077 CET | 7545 | 50052 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:28.679182053 CET | 50052 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:28.679308891 CET | 50052 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:28.679874897 CET | 50053 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:28.798613071 CET | 7545 | 50052 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:28.799388885 CET | 7545 | 50053 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:28.802910089 CET | 50053 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:28.803045034 CET | 50053 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:28.923239946 CET | 7545 | 50053 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:30.839288950 CET | 7545 | 50053 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:30.839746952 CET | 50053 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:30.839746952 CET | 50053 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:30.959392071 CET | 7545 | 50053 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:32.840792894 CET | 50054 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:32.960853100 CET | 7545 | 50054 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:32.961046934 CET | 50054 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:32.961101055 CET | 50054 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Dec 11, 2024 19:26:33.080981016 CET | 7545 | 50054 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:34.979434013 CET | 7545 | 50054 | 162.252.175.33 | 192.168.2.4 |
| Dec 11, 2024 19:26:34.979655981 CET | 50054 | 7545 | 192.168.2.4 | 162.252.175.33 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Dec 11, 2024 19:23:47.441591978 CET | 55549 | 53 | 192.168.2.4 | 1.1.1.1 |
| Dec 11, 2024 19:23:47.671744108 CET | 53 | 55549 | 1.1.1.1 | 192.168.2.4 |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Dec 11, 2024 19:23:47.441591978 CET | 192.168.2.4 | 1.1.1.1 | 0xa5a6 | Standard query (0) | A (IP address) | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Dec 11, 2024 19:23:47.671744108 CET | 1.1.1.1 | 192.168.2.4 | 0xa5a6 | No error (0) | 162.252.175.33 | A (IP address) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.4 | 49733 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:23:47.806962013 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.4 | 49735 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:23:49.949716091 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 2 | 192.168.2.4 | 49738 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:23:54.114563942 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 3 | 192.168.2.4 | 49739 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:23:56.246853113 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 4 | 192.168.2.4 | 49740 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:00.537106991 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 5 | 192.168.2.4 | 49741 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:02.685123920 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 6 | 192.168.2.4 | 49742 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:06.801258087 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 7 | 192.168.2.4 | 49743 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:08.928411961 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 8 | 192.168.2.4 | 49744 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:13.056031942 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 9 | 192.168.2.4 | 49745 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:15.178039074 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 10 | 192.168.2.4 | 49746 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:19.465610981 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 11 | 192.168.2.4 | 49747 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:21.588690042 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 12 | 192.168.2.4 | 49749 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:25.714889050 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 13 | 192.168.2.4 | 49756 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:27.834166050 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 14 | 192.168.2.4 | 49767 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:31.964529991 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 15 | 192.168.2.4 | 49772 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:34.110619068 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 16 | 192.168.2.4 | 49781 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:38.192819118 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 17 | 192.168.2.4 | 49787 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:40.552349091 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 18 | 192.168.2.4 | 49798 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:44.843025923 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 19 | 192.168.2.4 | 49802 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:46.977368116 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 20 | 192.168.2.4 | 49813 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:51.103030920 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 21 | 192.168.2.4 | 49819 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:53.227065086 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 22 | 192.168.2.4 | 49829 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:57.370884895 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 23 | 192.168.2.4 | 49835 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:24:59.489204884 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 24 | 192.168.2.4 | 49845 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:03.615732908 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 25 | 192.168.2.4 | 49851 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:05.727541924 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 26 | 192.168.2.4 | 49861 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:09.869812965 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 27 | 192.168.2.4 | 49867 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:12.171346903 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 28 | 192.168.2.4 | 49878 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:16.289975882 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 29 | 192.168.2.4 | 49884 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:18.409595966 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 30 | 192.168.2.4 | 49895 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:22.521688938 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 31 | 192.168.2.4 | 49900 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:24.645625114 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 32 | 192.168.2.4 | 49910 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:28.825592041 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 33 | 192.168.2.4 | 49916 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:30.945595026 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 34 | 192.168.2.4 | 49926 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:35.059274912 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 35 | 192.168.2.4 | 49932 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:37.247445107 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 36 | 192.168.2.4 | 49943 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:41.582662106 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 37 | 192.168.2.4 | 49949 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:43.740307093 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 38 | 192.168.2.4 | 49960 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:47.871876001 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 39 | 192.168.2.4 | 49965 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:49.990868092 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 40 | 192.168.2.4 | 49976 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:54.125097990 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 41 | 192.168.2.4 | 49981 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:25:56.287364960 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 42 | 192.168.2.4 | 49991 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:26:00.452131033 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 43 | 192.168.2.4 | 49997 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:26:02.803879976 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 44 | 192.168.2.4 | 50007 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:26:07.005863905 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 45 | 192.168.2.4 | 50013 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:26:09.239679098 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 46 | 192.168.2.4 | 50024 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:26:13.411880970 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 47 | 192.168.2.4 | 50030 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:26:15.633040905 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 48 | 192.168.2.4 | 50040 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:26:20.119282007 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 49 | 192.168.2.4 | 50046 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:26:22.235213041 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 50 | 192.168.2.4 | 50052 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:26:26.536811113 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 51 | 192.168.2.4 | 50053 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:26:28.803045034 CET | 133 | OUT |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 52 | 192.168.2.4 | 50054 | 162.252.175.33 | 7545 | 7412 | C:\Users\user\Desktop\Coordination_Committee.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Dec 11, 2024 19:26:32.961101055 CET | 133 | OUT |
Click to jump to process
Click to jump to process
back
Click to dive into process behavior distribution
| Target ID: | 0 |
| Start time: | 13:23:25 |
| Start date: | 11/12/2024 |
| Path: | C:\Users\user\Desktop\Coordination_Committee.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x1ce325c0000 |
| File size: | 21'504 bytes |
| MD5 hash: | 10C4162AF158B4A1FE29BCEFB589F464 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | low |
| Has exited: | false |
| Strings |
|
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| Strings |
|
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B8809E2 Relevance: .4, Instructions: 418COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B882BAD Relevance: .2, Instructions: 204COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B880570 Relevance: .2, Instructions: 175COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B880E10 Relevance: .1, Instructions: 148COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B88221D Relevance: .1, Instructions: 140COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B880E77 Relevance: .1, Instructions: 95COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B8811E8 Relevance: .1, Instructions: 86COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B881099 Relevance: .1, Instructions: 79COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B880488 Relevance: .1, Instructions: 68COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B88148C Relevance: .0, Instructions: 44COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B881458 Relevance: .0, Instructions: 36COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B8809AD Relevance: .0, Instructions: 25COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B8808FE Relevance: .0, Instructions: 17COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B8812B3 Relevance: .0, Instructions: 17COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00007FFD9B880BD4 Relevance: .0, Instructions: 17COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|