Windows
Analysis Report
https://scales.mn/file/one-drv11.html
Overview
Detection
Score: | 60 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
Signatures
Classification
- System is w10x64
- chrome.exe (PID: 2332 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed "about :blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 3484 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2388 --fi eld-trial- handle=235 6,i,476040 4988359330 048,106402 9615452437 3879,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- chrome.exe (PID: 6492 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt ps://scale s.mn/file/ one-drv11. html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
Click to jump to signature section
AV Detection |
---|
Source: | Avira URL Cloud: |
Phishing |
---|
Source: | Joe Sandbox AI: |
Source: | HTTP Parser: | ||
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: |
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: |
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: |
Source: | Classification label: |
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Source: | Window detected: |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | Path Interception | 1 Process Injection | 1 Process Injection | OS Credential Dumping | System Service Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | Boot or Logon Initialization Scripts | Rootkit | LSASS Memory | Application Window Discovery | Remote Desktop Protocol | Data from Removable Media | 2 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | Obfuscated Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 3 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 1 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
100% | Avira URL Cloud | phishing |
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
0% | Avira URL Cloud | safe |
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
cdnjs.cloudflare.com | 104.17.25.14 | true | false | high | |
scales.mn | 43.231.112.47 | true | true | unknown | |
s-part-0017.t-0009.t-msedge.net | 13.107.246.45 | true | false | high | |
www.google.com | 142.250.185.196 | true | false | high |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
false | high | ||
false | high | ||
false |
| unknown | |
true | unknown |
Name | Source | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|
false | high | |||
false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
142.250.185.196 | www.google.com | United States | 15169 | GOOGLEUS | false | |
104.17.25.14 | cdnjs.cloudflare.com | United States | 13335 | CLOUDFLARENETUS | false | |
43.231.112.47 | scales.mn | Mongolia | 63962 | ITOOLS-ASiToolsJSCMN | true |
IP |
---|
192.168.2.4 |
Joe Sandbox version: | 41.0.0 Charoite |
Analysis ID: | 1584929 |
Start date and time: | 2025-01-06 19:22:09 +01:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 2m 57s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | browseurl.jbs |
Sample URL: | https://scales.mn/file/one-drv11.html |
Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
Number of analysed new started processes analysed: | 7 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | default |
Analysis stop reason: | Timeout |
Detection: | MAL |
Classification: | mal60.phis.win@16/16@6/5 |
EGA Information: | Failed |
HCA Information: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 142.250.186.67, 172.217.16.142, 142.251.173.84, 216.58.206.78, 142.250.186.46, 142.250.185.155, 172.217.23.123, 142.250.185.123, 216.58.206.59, 216.58.212.187, 142.250.185.251, 142.250.185.91, 142.250.186.91, 216.58.206.91, 142.250.184.251, 142.250.181.251, 142.250.186.187, 142.250.184.219, 142.250.185.187, 142.250.185.219, 216.58.212.155, 142.250.186.74, 172.217.16.202, 142.250.186.42, 142.250.185.234, 142.250.181.234, 172.217.16.138, 142.250.185.106, 142.250.185.170, 142.250.186.106, 216.58.206.42, 142.250.185.138, 142.250.186.138, 142.250.185.202, 142.250.184.202, 172.217.18.10, 142.250.186.170, 172.217.16.219, 172.217.18.123, 142.250.186.123, 142.250.186.59, 172.217.18.27, 142.250.74.219, 142.250.186.155, 172.217.16.155, 199.232.214.172, 192.229.221.95, 142.250.186.174, 172.217.18.14, 142.250.184.238, 142.250.184.206, 142.250.184.227, 142.250.185.142, 172.217.16.206, 23.56.254.164, 13.107.246.45, 52.149.20.212
- Excluded domains from analysis (whitelisted): logincdn.msauth.net, fs.microsoft.com, lgincdnmsftuswe2.azureedge.net, accounts.google.com, storage.googleapis.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, lgincdnmsftuswe2.afd.azureedge.net, clients.l.google.com
- Not all processes where analyzed, report is missing behavior information
- Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- VT rate limit hit for: https://scales.mn/file/one-drv11.html
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 1435 |
Entropy (8bit): | 7.8613342322590265 |
Encrypted: | false |
SSDEEP: | 24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY |
MD5: | 9F368BC4580FED907775F31C6B26D6CF |
SHA1: | E393A40B3E337F43057EEE3DE189F197AB056451 |
SHA-256: | 7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36 |
SHA-512: | 0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 78196 |
Entropy (8bit): | 7.997039463361104 |
Encrypted: | true |
SSDEEP: | 1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU |
MD5: | E8A427E15CC502BEF99CFD722B37EA98 |
SHA1: | A9922842A120A7F1EACED667480C5E185A106D69 |
SHA-256: | D0B4256ABED72481585662971262EABEE345C19F837AF00D7CE24239D3B40EEF |
SHA-512: | 113775748A4166C07E58C26CF6DB7FED473732DC6124B8EE0F0DCC0D6439EB2AB2C5D9E01C67324FDF9DE4105349CF30CC5796A0B0E0CE9A08F337B9D4E10B7B |
Malicious: | false |
Reputation: | low |
URL: | https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/fa-solid-900.woff2 |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 7482 |
Entropy (8bit): | 7.9553316229271305 |
Encrypted: | false |
SSDEEP: | 192:72/g+PSj9Zx7uR/XP/Gj3vkSN6A6gYOKvP2+UI8bdVNfVPB:JaSBr8GLrIA6gYdcpbdVNfVPB |
MD5: | E08055C051D63E82C1822F3309BB9A8D |
SHA1: | 7B6D0F53AFF14DA873050147C8E37C349BD49D00 |
SHA-256: | C0B60E63FDF4158558E4044FC8EFFCAB097FCCD1ED41543BD0C1B2F9425480D8 |
SHA-512: | 8F30699B1570C3989E313AFD65BC2DEC1F667A0F13FFD3419933AEA6E7729759A1CA63193BDDD8610CAC17A069DF30200948C42708328DF7ACD9CA1BACF87C24 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 1435 |
Entropy (8bit): | 7.8613342322590265 |
Encrypted: | false |
SSDEEP: | 24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY |
MD5: | 9F368BC4580FED907775F31C6B26D6CF |
SHA1: | E393A40B3E337F43057EEE3DE189F197AB056451 |
SHA-256: | 7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36 |
SHA-512: | 0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0 |
Malicious: | false |
Reputation: | low |
URL: | https://logincdn.msauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 7482 |
Entropy (8bit): | 7.9553316229271305 |
Encrypted: | false |
SSDEEP: | 192:72/g+PSj9Zx7uR/XP/Gj3vkSN6A6gYOKvP2+UI8bdVNfVPB:JaSBr8GLrIA6gYdcpbdVNfVPB |
MD5: | E08055C051D63E82C1822F3309BB9A8D |
SHA1: | 7B6D0F53AFF14DA873050147C8E37C349BD49D00 |
SHA-256: | C0B60E63FDF4158558E4044FC8EFFCAB097FCCD1ED41543BD0C1B2F9425480D8 |
SHA-512: | 8F30699B1570C3989E313AFD65BC2DEC1F667A0F13FFD3419933AEA6E7729759A1CA63193BDDD8610CAC17A069DF30200948C42708328DF7ACD9CA1BACF87C24 |
Malicious: | false |
Reputation: | low |
URL: | https://storage.googleapis.com/a1aa/image/MKiqWrWWQ2LoMtdh3jpT9IeVdRKLH07CvHZLmGUeCw0WKnyTA.jpg |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 65207 |
Entropy (8bit): | 4.915042659692061 |
Encrypted: | false |
SSDEEP: | 1536:77ViPecf04MiqLMTVnDyjEtG6jrJt5pp9wqWj/:QPN04MiqLM5nDcEtjP5pcxj/ |
MD5: | 91C790E036D0AD258F0312C5DCF5C26F |
SHA1: | ED62261FCE74CB46623788EFB45536C86F2BC92E |
SHA-256: | DF370BCA80226F0EC5C45C8661A527265BCED871D7F45D6DE45E7A6AB293C987 |
SHA-512: | FDE7E03C5C904390CD482509F586BC90077FFDF1217269A279519FBD1871BDB3DCFF4E0F5DAA4AAEE7B193A397BFF8FD05846E9B7F61F67B5B5F71D8F6B908FE |
Malicious: | false |
Reputation: | low |
URL: | https://scales.mn/file/one-drv11.html |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 59344 |
Entropy (8bit): | 4.717040228413791 |
Encrypted: | false |
SSDEEP: | 768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B |
MD5: | 74BAB4578692993514E7F882CC15C218 |
SHA1: | B6293BCFD851F963EDBE859498570C4C0C7EAAE4 |
SHA-256: | D87DDF917B7A1449AB45E2B8E3C98354629BDD65B6659C37E6023BBEA1CE1386 |
SHA-512: | 8810579BC7D6F74FA7B8B7122A56E6ACF70B6B4393F76C4ED4122C67ECB00D6642BEAB1681C715DE0168441BF4CFEF1D2C9832007221477E5565CDA833F808D7 |
Malicious: | false |
Reputation: | low |
URL: | https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/css/all.min.css |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 28 |
Entropy (8bit): | 4.307354922057605 |
Encrypted: | false |
SSDEEP: | 3:WZoS+Nhn:WZoSyh |
MD5: | A2432DC721D79CB02E73D270CE7E1EAA |
SHA1: | 5A3C7BE77E9108ACA1B39E6BCD336EAAE6A51080 |
SHA-256: | CE43C8C02C05A92B3E20FAB138AAD31B9FD54B92848913449D09924E839BB80E |
SHA-512: | 0091B8D2F943169BDF1DD01D07A31F683F3B353D4EAADF1F7973AA79A989E349F53D6518AC612A856D89AB1539923C9FFAABB13E7CF8BEDF450E128342FF3298 |
Malicious: | false |
Reputation: | low |
URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlGL37wgyKgJxIFDZFhlU4SBQ01hlQc?alt=proto |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 663 |
Entropy (8bit): | 4.787179197064505 |
Encrypted: | false |
SSDEEP: | 12:J0+ox0UDWsRGDW8hsw4Aox1WR3oKcOgkimXtmIrgvRMKiSQe9uE7F50vIqUDWvjT:yiUDWsYDWus/q3oKcc9Xt+vEHK50vZU0 |
MD5: | E0E563CEA22921CA0FFD4191B2964456 |
SHA1: | D4CD04A31CEF4466D98827FD290CC2655191DD52 |
SHA-256: | B4EEB96847FAC918E2B59C0DA37ED38FA64F13613E38AB795B9A26B20A247DFB |
SHA-512: | A4606BDD469D56D5427C58AA7E83889752934526879A341B1D2B8323C911BFE572421C7235BC31054A48D3B1F25FCB099733E1678A9E752BADD4856583641D1D |
Malicious: | false |
Reputation: | low |
URL: | https://scales.mn/favicon.ico |
Preview: |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jan 6, 2025 19:22:52.696960926 CET | 49675 | 443 | 192.168.2.4 | 173.222.162.32 |
Jan 6, 2025 19:23:02.369292974 CET | 49675 | 443 | 192.168.2.4 | 173.222.162.32 |
Jan 6, 2025 19:23:05.438821077 CET | 49738 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:23:05.438860893 CET | 443 | 49738 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:23:05.438911915 CET | 49738 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:23:05.439129114 CET | 49738 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:23:05.439141035 CET | 443 | 49738 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:23:06.096285105 CET | 443 | 49738 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:23:06.096663952 CET | 49738 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:23:06.096683025 CET | 443 | 49738 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:23:06.097701073 CET | 443 | 49738 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:23:06.097861052 CET | 49738 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:23:06.098921061 CET | 49738 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:23:06.098987103 CET | 443 | 49738 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:23:06.149033070 CET | 49738 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:23:06.149040937 CET | 443 | 49738 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:23:06.195772886 CET | 49738 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:23:07.292478085 CET | 49740 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:07.292531967 CET | 443 | 49740 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:07.292583942 CET | 49740 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:07.292963028 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:07.292994022 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:07.293046951 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:07.293181896 CET | 49740 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:07.293195963 CET | 443 | 49740 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:07.293400049 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:07.293415070 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.233093977 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.233359098 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.233381033 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.234358072 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.234421015 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.238924026 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.238986969 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.239083052 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.278511047 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.278517008 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.302269936 CET | 443 | 49740 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.302514076 CET | 49740 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.302539110 CET | 443 | 49740 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.303455114 CET | 443 | 49740 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.303510904 CET | 49740 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.303854942 CET | 49740 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.303913116 CET | 443 | 49740 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.324973106 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.355262041 CET | 49740 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.355273008 CET | 443 | 49740 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.401874065 CET | 49740 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.794887066 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.794909954 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.794918060 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.794971943 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.795005083 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:08.795021057 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:08.795156956 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.037692070 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.037743092 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.037837982 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.038127899 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.038141966 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.039485931 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.039501905 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.039550066 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.039577007 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.039577007 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.039596081 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.039609909 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.039609909 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.039611101 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.039619923 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.039629936 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.039637089 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.039657116 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.076637983 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.076782942 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.076791048 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.119757891 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.264409065 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.264419079 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.264655113 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.265033007 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.265039921 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.265152931 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.265882969 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.265888929 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.265944004 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.265953064 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.265969992 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.266055107 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.268368006 CET | 49741 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:09.268377066 CET | 443 | 49741 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:09.499232054 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.499665976 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.499696970 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.500545979 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.500816107 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.501760960 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.501760960 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.501775026 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.501816988 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.545912027 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.545922995 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.592912912 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.650412083 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.650461912 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.650501966 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.650542974 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.650587082 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.650614977 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.650623083 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.650635004 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.650896072 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.650919914 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.650930882 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.651757002 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.651765108 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.652306080 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.655334949 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.655392885 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.655663013 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.655670881 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.695760965 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.737857103 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.737921000 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.737968922 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.737978935 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.738102913 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.738143921 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.738151073 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.738441944 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.738486052 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.738492012 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.738502979 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.738548040 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.738554001 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.739265919 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.739296913 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.739310026 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.739321947 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.739343882 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.739371061 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.739376068 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.739387035 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.739417076 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.740324020 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.740356922 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.740384102 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.740391016 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.740425110 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.740432024 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.740441084 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.740489960 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.741112947 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.741194010 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.741235018 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.741240025 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.741250992 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.741290092 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.831636906 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.831697941 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.831722975 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.831752062 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.831752062 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.831768036 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.831805944 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.832097054 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.832129002 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.832149029 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.832156897 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.832175970 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.832226038 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.832276106 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.832499027 CET | 49743 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.832515955 CET | 443 | 49743 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.913619995 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.913652897 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:09.913721085 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.913888931 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:09.913902998 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.363420010 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.363639116 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.363653898 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.364518881 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.364581108 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.364897013 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.364948988 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.365015984 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.365021944 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.404504061 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.511071920 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.511123896 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.511152983 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.511174917 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.511178017 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.511187077 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.511217117 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.511260033 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.511303902 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.511310101 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.511708021 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.511753082 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.511758089 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.515831947 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.515865088 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.515892982 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.515908003 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.515913963 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.515948057 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.557549000 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.597290039 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.597357035 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.597388029 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.597402096 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.597408056 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.597443104 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.597448111 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.597453117 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.597484112 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.597660065 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.597933054 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.597971916 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.597973108 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.597980976 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.598016977 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.598021030 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.598376989 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.598409891 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.598423958 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.598428965 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.598467112 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.598468065 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.598474979 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.598514080 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.598517895 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.599203110 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.599229097 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.599256992 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.599261999 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.599298954 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.599303007 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.599347115 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.599376917 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.599385977 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.599395990 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.599442959 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.686944008 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687036037 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687068939 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687087059 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.687093973 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687133074 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.687136889 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687149048 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687175035 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687192917 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.687196970 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687222958 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.687242031 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687279940 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687293053 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.687297106 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687310934 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687328100 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.687340975 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.687345982 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687371969 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.687402010 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.687444925 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.687994003 CET | 49746 | 443 | 192.168.2.4 | 104.17.25.14 |
Jan 6, 2025 19:23:10.688004971 CET | 443 | 49746 | 104.17.25.14 | 192.168.2.4 |
Jan 6, 2025 19:23:10.712054968 CET | 49740 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:10.759337902 CET | 443 | 49740 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:11.108659029 CET | 443 | 49740 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:11.108728886 CET | 443 | 49740 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:11.108808041 CET | 49740 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:11.115696907 CET | 49740 | 443 | 192.168.2.4 | 43.231.112.47 |
Jan 6, 2025 19:23:11.115720987 CET | 443 | 49740 | 43.231.112.47 | 192.168.2.4 |
Jan 6, 2025 19:23:15.995047092 CET | 443 | 49738 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:23:15.995111942 CET | 443 | 49738 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:23:15.996270895 CET | 49738 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:23:16.510653019 CET | 49738 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:23:16.510687113 CET | 443 | 49738 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:24:05.494304895 CET | 49806 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:24:05.494328976 CET | 443 | 49806 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:24:05.494425058 CET | 49806 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:24:05.494657993 CET | 49806 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:24:05.494673014 CET | 443 | 49806 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:24:06.144016027 CET | 443 | 49806 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:24:06.144423008 CET | 49806 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:24:06.144435883 CET | 443 | 49806 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:24:06.144751072 CET | 443 | 49806 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:24:06.145051003 CET | 49806 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:24:06.145113945 CET | 443 | 49806 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:24:06.195874929 CET | 49806 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:24:16.045823097 CET | 443 | 49806 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:24:16.045878887 CET | 443 | 49806 | 142.250.185.196 | 192.168.2.4 |
Jan 6, 2025 19:24:16.045948029 CET | 49806 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:24:16.512310982 CET | 49806 | 443 | 192.168.2.4 | 142.250.185.196 |
Jan 6, 2025 19:24:16.512330055 CET | 443 | 49806 | 142.250.185.196 | 192.168.2.4 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jan 6, 2025 19:23:01.826977015 CET | 53 | 62541 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:01.834265947 CET | 53 | 53402 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:02.803792953 CET | 53 | 54379 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:05.431018114 CET | 63913 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 6, 2025 19:23:05.431144953 CET | 62686 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 6, 2025 19:23:05.437778950 CET | 53 | 63913 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:05.437969923 CET | 53 | 62686 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:06.901101112 CET | 59670 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 6, 2025 19:23:06.901276112 CET | 61683 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 6, 2025 19:23:07.288314104 CET | 53 | 59670 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:07.291829109 CET | 53 | 61683 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:09.007715940 CET | 54875 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 6, 2025 19:23:09.007715940 CET | 63556 | 53 | 192.168.2.4 | 1.1.1.1 |
Jan 6, 2025 19:23:09.014760971 CET | 53 | 54875 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:09.014775991 CET | 53 | 63556 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:09.045335054 CET | 53 | 50468 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:09.927881956 CET | 53 | 57554 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:10.110913992 CET | 53 | 58802 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:19.782068014 CET | 53 | 58516 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:23:22.139703035 CET | 138 | 138 | 192.168.2.4 | 192.168.2.255 |
Jan 6, 2025 19:23:38.548089027 CET | 53 | 50697 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:24:01.129759073 CET | 53 | 56315 | 1.1.1.1 | 192.168.2.4 |
Jan 6, 2025 19:24:01.517710924 CET | 53 | 50288 | 1.1.1.1 | 192.168.2.4 |
Timestamp | Source IP | Dest IP | Checksum | Code | Type |
---|---|---|---|---|---|
Jan 6, 2025 19:23:10.110974073 CET | 192.168.2.4 | 1.1.1.1 | c225 | (Port unreachable) | Destination Unreachable |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Jan 6, 2025 19:23:05.431018114 CET | 192.168.2.4 | 1.1.1.1 | 0x7b30 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 6, 2025 19:23:05.431144953 CET | 192.168.2.4 | 1.1.1.1 | 0xf6b3 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 6, 2025 19:23:06.901101112 CET | 192.168.2.4 | 1.1.1.1 | 0xbb48 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 6, 2025 19:23:06.901276112 CET | 192.168.2.4 | 1.1.1.1 | 0x473f | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 6, 2025 19:23:09.007715940 CET | 192.168.2.4 | 1.1.1.1 | 0xfce2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 6, 2025 19:23:09.007715940 CET | 192.168.2.4 | 1.1.1.1 | 0xbb0e | Standard query (0) | 65 | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Jan 6, 2025 19:23:05.437778950 CET | 1.1.1.1 | 192.168.2.4 | 0x7b30 | No error (0) | 142.250.185.196 | A (IP address) | IN (0x0001) | false | ||
Jan 6, 2025 19:23:05.437969923 CET | 1.1.1.1 | 192.168.2.4 | 0xf6b3 | No error (0) | 65 | IN (0x0001) | false | |||
Jan 6, 2025 19:23:07.288314104 CET | 1.1.1.1 | 192.168.2.4 | 0xbb48 | No error (0) | 43.231.112.47 | A (IP address) | IN (0x0001) | false | ||
Jan 6, 2025 19:23:09.014760971 CET | 1.1.1.1 | 192.168.2.4 | 0xfce2 | No error (0) | 104.17.25.14 | A (IP address) | IN (0x0001) | false | ||
Jan 6, 2025 19:23:09.014760971 CET | 1.1.1.1 | 192.168.2.4 | 0xfce2 | No error (0) | 104.17.24.14 | A (IP address) | IN (0x0001) | false | ||
Jan 6, 2025 19:23:09.014775991 CET | 1.1.1.1 | 192.168.2.4 | 0xbb0e | No error (0) | 65 | IN (0x0001) | false | |||
Jan 6, 2025 19:23:09.051724911 CET | 1.1.1.1 | 192.168.2.4 | 0xdf21 | No error (0) | s-part-0017.t-0009.t-msedge.net | CNAME (Canonical name) | IN (0x0001) | false | ||
Jan 6, 2025 19:23:09.051724911 CET | 1.1.1.1 | 192.168.2.4 | 0xdf21 | No error (0) | 13.107.246.45 | A (IP address) | IN (0x0001) | false | ||
Jan 6, 2025 19:23:10.121344090 CET | 1.1.1.1 | 192.168.2.4 | 0xe9a7 | No error (0) | s-part-0017.t-0009.t-msedge.net | CNAME (Canonical name) | IN (0x0001) | false | ||
Jan 6, 2025 19:23:10.121344090 CET | 1.1.1.1 | 192.168.2.4 | 0xe9a7 | No error (0) | 13.107.246.45 | A (IP address) | IN (0x0001) | false |
|
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.4 | 49741 | 43.231.112.47 | 443 | 3484 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-06 18:23:08 UTC | 671 | OUT | |
2025-01-06 18:23:08 UTC | 207 | IN | |
2025-01-06 18:23:08 UTC | 7985 | IN | |
2025-01-06 18:23:09 UTC | 8000 | IN | |
2025-01-06 18:23:09 UTC | 8000 | IN | |
2025-01-06 18:23:09 UTC | 8000 | IN | |
2025-01-06 18:23:09 UTC | 8000 | IN | |
2025-01-06 18:23:09 UTC | 8000 | IN | |
2025-01-06 18:23:09 UTC | 8000 | IN | |
2025-01-06 18:23:09 UTC | 8000 | IN | |
2025-01-06 18:23:09 UTC | 1222 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.2.4 | 49743 | 104.17.25.14 | 443 | 3484 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-06 18:23:09 UTC | 572 | OUT | |
2025-01-06 18:23:09 UTC | 951 | IN | |
2025-01-06 18:23:09 UTC | 418 | IN | |
2025-01-06 18:23:09 UTC | 1369 | IN | |
2025-01-06 18:23:09 UTC | 1369 | IN | |
2025-01-06 18:23:09 UTC | 1369 | IN | |
2025-01-06 18:23:09 UTC | 1369 | IN | |
2025-01-06 18:23:09 UTC | 1369 | IN | |
2025-01-06 18:23:09 UTC | 1369 | IN | |
2025-01-06 18:23:09 UTC | 1369 | IN | |
2025-01-06 18:23:09 UTC | 1369 | IN | |
2025-01-06 18:23:09 UTC | 1369 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
2 | 192.168.2.4 | 49746 | 104.17.25.14 | 443 | 3484 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-06 18:23:10 UTC | 648 | OUT | |
2025-01-06 18:23:10 UTC | 969 | IN | |
2025-01-06 18:23:10 UTC | 400 | IN | |
2025-01-06 18:23:10 UTC | 1369 | IN | |
2025-01-06 18:23:10 UTC | 1369 | IN | |
2025-01-06 18:23:10 UTC | 1369 | IN | |
2025-01-06 18:23:10 UTC | 1369 | IN | |
2025-01-06 18:23:10 UTC | 1369 | IN | |
2025-01-06 18:23:10 UTC | 1369 | IN | |
2025-01-06 18:23:10 UTC | 1369 | IN | |
2025-01-06 18:23:10 UTC | 1369 | IN | |
2025-01-06 18:23:10 UTC | 1369 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
3 | 192.168.2.4 | 49740 | 43.231.112.47 | 443 | 3484 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-06 18:23:10 UTC | 593 | OUT | |
2025-01-06 18:23:11 UTC | 176 | IN | |
2025-01-06 18:23:11 UTC | 663 | IN |
Click to jump to process
Click to jump to process
Click to jump to process
Target ID: | 0 |
Start time: | 13:22:55 |
Start date: | 06/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 1 |
Start time: | 13:22:59 |
Start date: | 06/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 3 |
Start time: | 13:23:05 |
Start date: | 06/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | true |