Windows
Analysis Report
http://rahimlak.github.io/instagram
Overview
Detection
Score: | 72 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
Signatures
Classification
- System is w10x64
- chrome.exe (PID: 2724 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed "about :blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 4428 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2112 --fi eld-trial- handle=205 6,i,103044 7276630430 454,448833 4761136101 846,262144 --disable -features= Optimizati onGuideMod elDownload ing,Optimi zationHint s,Optimiza tionHintsF etching,Op timization TargetPred iction /pr efetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- chrome.exe (PID: 5720 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt p://rahiml ak.github. io/instagr am" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
Source | Rule | Description | Author | Strings |
---|---|---|---|---|
JoeSecurity_HtmlPhish_64 | Yara detected HtmlPhish_64 | Joe Security |
Click to jump to signature section
AV Detection |
---|
Source: | Avira URL Cloud: |
Source: | Avira URL Cloud: | ||
Source: | Avira URL Cloud: | ||
Source: | Avira URL Cloud: |
Phishing |
---|
Source: | Joe Sandbox AI: |
Source: | File source: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: | ||
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: |
Source: | HTTP traffic detected: |
Source: | HTTP traffic detected: |
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: |
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: |
Source: | Classification label: |
Source: | File created: | Jump to behavior |
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: |
Source: | Window detected: |
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | 1 Registry Run Keys / Startup Folder | 1 Process Injection | 1 Masquerading | OS Credential Dumping | System Service Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | 1 Registry Run Keys / Startup Folder | 1 Process Injection | LSASS Memory | Application Window Discovery | Remote Desktop Protocol | Data from Removable Media | 4 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | 1 Obfuscated Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 5 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 3 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
100% | Avira URL Cloud | phishing |
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
100% | Avira URL Cloud | phishing | ||
100% | Avira URL Cloud | phishing | ||
100% | Avira URL Cloud | phishing |
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
rahimlak.github.io | 185.199.108.153 | true | true | unknown | |
www.google.com | 142.250.184.228 | true | false | high |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
true |
| unknown | |
true | unknown | ||
true | unknown | ||
false |
| unknown | |
false |
| unknown | |
true | unknown |
Name | Source | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|
false | high | |||
false | high | |||
false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
185.199.108.153 | rahimlak.github.io | Netherlands | 54113 | FASTLYUS | true | |
142.250.184.228 | www.google.com | United States | 15169 | GOOGLEUS | false |
IP |
---|
192.168.2.7 |
192.168.2.6 |
192.168.2.5 |
Joe Sandbox version: | 42.0.0 Malachite |
Analysis ID: | 1590432 |
Start date and time: | 2025-01-14 01:40:01 +01:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 2m 55s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | browseurl.jbs |
Sample URL: | http://rahimlak.github.io/instagram |
Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
Number of analysed new started processes analysed: | 7 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | default |
Analysis stop reason: | Timeout |
Detection: | MAL |
Classification: | mal72.phis.win@17/16@6/6 |
EGA Information: | Failed |
HCA Information: |
|
- Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.110.84, 142.250.185.174, 142.250.186.174, 142.250.185.206, 142.250.185.74, 142.250.185.234, 172.217.18.106, 142.250.184.234, 142.250.186.170, 142.250.184.202, 216.58.206.74, 172.217.16.202, 142.250.181.234, 216.58.212.170, 216.58.206.42, 142.250.186.106, 142.250.186.138, 142.250.185.138, 172.217.18.10, 142.250.185.106, 199.232.210.172, 23.50.108.3, 142.250.186.46, 216.58.212.174, 142.250.186.78, 142.250.184.238, 216.58.206.67, 142.250.185.238, 216.58.206.46, 142.250.185.78, 184.28.90.27, 172.202.163.200, 13.107.246.45
- Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
- Not all processes where analyzed, report is missing behavior information
- VT rate limit hit for: http://rahimlak.github.io/instagram
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2677 |
Entropy (8bit): | 3.9733353374159894 |
Encrypted: | false |
SSDEEP: | 48:8JdITs4iVHYidAKZdA19ehwiZUklqeh0y+3:8UPi8ry |
MD5: | 851FFB2A29A7DCE00268188D10775224 |
SHA1: | B85E962269FF9692AB04037E781D9117F2F198BE |
SHA-256: | AFEA6A4ABFF6986851803E924AAFDAB9A6906CE925C93C64BC8DB38F7201BD23 |
SHA-512: | 9FD98985310645D07BC5FF4FABE753F4FD864D19AF2B4CA1EF6F67A808C3CF1E05E57820240673D3D8BA676F47A56AADAFD27E3BE66C8C4A57FBF2A5B0DEA043 |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2679 |
Entropy (8bit): | 3.987017588896173 |
Encrypted: | false |
SSDEEP: | 48:8HhdITs4iVHYidAKZdA1weh/iZUkAQkqehby+2:8HMPiO9QKy |
MD5: | BEAFF89722A06D76791BD7152E395E57 |
SHA1: | F74B4B77A3D10754C4E0502045D87DDF4985D52D |
SHA-256: | 4C13B05AC88BCC7B9DD5E1E3529CBE03E42ED3ACE483045564297343A24993AC |
SHA-512: | 590A56213D3D5E2D665D7D8472426902124A2A011A0A3D129A0B987C27379B2587DEA849BECF64015A33A77030F31A7FCE52A83C94FDBB8B48576B4A59FF610D |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2693 |
Entropy (8bit): | 4.002632447389082 |
Encrypted: | false |
SSDEEP: | 48:8xhdITs4sHYidAKZdA14tseh7sFiZUkmgqeh7sBy+BX:8xMPln/y |
MD5: | BAC3CDE4037E608AB0E134E74876A4EC |
SHA1: | DC80A27EDDBA99FD7449F76A8DDE630F62289F9F |
SHA-256: | A46CD3459E475F8AF38CF7546B970471ECCAC42E574E3A997ED1E4AF0C4E7DD1 |
SHA-512: | 3D7F708B471DBC33912ED068AA8B1B50D409A4B918B974387A27B6066C21DF9ECC47B84895C393685D3077BE54C2CB1F643156A176ED6DC440EC1B2EC6251705 |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2681 |
Entropy (8bit): | 3.9877892348640582 |
Encrypted: | false |
SSDEEP: | 48:8+dITs4iVHYidAKZdA1vehDiZUkwqehny+R:81PiVpy |
MD5: | 3F40DA20F0E26D06AB6A9E01E158FCAE |
SHA1: | 2A5D28B4AD46D5ED16260291A6B01ED2ABAD3850 |
SHA-256: | 08BB9F3DED1B148368815B1A23F91742DAF7828D7AA644AB72388FC1001997A1 |
SHA-512: | 13E0F68B528337466833564E525483FCA7F05E9280275FF458865F93CFF70B881319D34219F7BEDD5AC5867B4A56E0E6250E9739F6614042E643DA85EF3B9814 |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2681 |
Entropy (8bit): | 3.9780952986742304 |
Encrypted: | false |
SSDEEP: | 48:8EdITs4iVHYidAKZdA1hehBiZUk1W1qehVy+C:8XPiF91y |
MD5: | B9044C86A03D852DB013A2E8C373510B |
SHA1: | 0A9300070514E83EEB968D2BA4DB8005D1B63C41 |
SHA-256: | AD152D897D404D4A9AFA28B983E0961DA5FF5113F71E3B55D099739DA09D7DE9 |
SHA-512: | DFEEB4B37C675A831EE00A81D96604549662D96AEFAAFE016544A9F74BBA5DD455686C988897D8C9DD1EA504163291EFAF7642BBACBB51066A0EDC6D2D752D65 |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2683 |
Entropy (8bit): | 3.990014895857932 |
Encrypted: | false |
SSDEEP: | 48:8MdITs4iVHYidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb/y+yT+:8/PiZT/TbxWOvTb/y7T |
MD5: | 48E2B60FE1DB022A74BC55472CB2708C |
SHA1: | AB3E015E1969DD6D33C9A0DBCB074B998D213E4C |
SHA-256: | F740C2E0A4F71D25DCB306BC031B114A8472A7C6D6A8574D3557C8236B2F8877 |
SHA-512: | BCB647D646262B01D5EC796CC9FC0A8B277AD3DBA1060342A9F688D344BFA2C8E15878523CEA42C4E9BE9A72F9BF26BE9F21B3E206245330BE386F58C44DDFFC |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 131 |
Entropy (8bit): | 4.481204119376709 |
Encrypted: | false |
SSDEEP: | 3:qVvzLURODFkJEXR1Xbvx9FKEIHiHbBaWvFkJETbIlIWKBc4NGb:qFzLIeFAE3XLxWHiHkWvFAEYlIWKq4Qb |
MD5: | 9A67F98EBF567E0B2B3CDEB58BE2DA2D |
SHA1: | 36870E81E17D2A0AD49EAA5D208961F0290BA751 |
SHA-256: | DB9C83197AADFAF315C26741F15264DB83844A31372701A8465737D63508DF7F |
SHA-512: | C82ADDD9AD18C1BC8C37C7CBBCA525DB0759DB12CC489C1E23286E39ECBCEBC6032675C445BF187730A83630AFF3F2CEECF3FCA0162084A60DC43D818C6964DB |
Malicious: | false |
Reputation: | low |
URL: | https://rahimlak.github.io/instagram/login.php |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 521 |
Entropy (8bit): | 4.92862316972451 |
Encrypted: | false |
SSDEEP: | 12:hPgkzZ+QLfdj6sVt1SI3qI9RtkWNIoJDEJDVayXmW95LKNqCvXBRPGb:hPfXNXJqARSUNENsylOMuk |
MD5: | AE3F42A1E9695829DA3A95CF4BBE381E |
SHA1: | 2A614E24EE87DCE04B0642DB1DE36FF66C11CC04 |
SHA-256: | 00A57F16DFA07F454A6D1E35087B935343B6C42FED49864628ACCCF0E7F07952 |
SHA-512: | 850A01BA979CC1DBB2091DA4F0664F43FC56DCE4FF0DEE15AAA844BEB7B0F3638CCAE5C59159250E3FFEB48DB510AC40D27DEE09EAD43FFC5D88A0E0FFA96789 |
Malicious: | false |
Reputation: | low |
URL: | https://rahimlak.github.io/instagram/ |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 847 |
Entropy (8bit): | 4.834043995643426 |
Encrypted: | false |
SSDEEP: | 12:UxAm86FAyKx5U8Awl7IH1+G1/X+rrnAYcJiHkRR0WjfIGL7IO+8jtZkRR0Wu8wjP:UN1Ja8HCw2C3ybH1o/ |
MD5: | 01D7797D11F51B74D5DB58CEC4B099A5 |
SHA1: | DE1DB157FF498282A09058969E04D881171E0EA5 |
SHA-256: | D88738BB746571527ED2981940321F653AE6C7A270C8DEAD170D7EAB5BFCC4F2 |
SHA-512: | B685F33A2567CC701BFF65E37D0EAA143CAD9EBBD07ABF0C69CCEDA32D77D3C939AECC15F4636484BB8D9036A45DA0C74431838D1CFB2B565CAB0DDE8796627D |
Malicious: | false |
Reputation: | low |
URL: | https://rahimlak.github.io/instagram/style.css |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 9115 |
Entropy (8bit): | 6.0587900718391925 |
Encrypted: | false |
SSDEEP: | 192:Ywnb1iC9OA9XXMa9kukrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:7B8H3DUulGmmv3D6vglETliCfN |
MD5: | 1EB970CE5A18BEC7165F016DF8238566 |
SHA1: | 9EFD1514AF80FE14DB4ED28E9BC53975B9EE089C |
SHA-256: | 70D613E3ACFBA24FD2876FCBACAF639E1E111EF4D54BAF70761C47673F37D6A3 |
SHA-512: | 21B4D800CC282CA452F7394E95D5382340AC3481A002C21DA681005A44F18EA6CF43959990CD715B4657F180E0E96D6087FE724F3200E909F9FD70EBCD5511BD |
Malicious: | false |
Reputation: | low |
URL: | https://rahimlak.github.io/favicon.ico |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 28 |
Entropy (8bit): | 4.066108939837481 |
Encrypted: | false |
SSDEEP: | 3:GMyoSt:jFSt |
MD5: | 96B191AE794C2C78387B3F4F9BB7A251 |
SHA1: | F974547DF0ADFFB7E80699552C6BCE3E709343A6 |
SHA-256: | CE76758AEEF2CAF12021AFB5257D0CA4E9E5C20015C2C85D68BB27FA6B1AFB28 |
SHA-512: | 07EE1CFDBD53C1046FA4F44FF7C83F4456CDAA099299816B451D114E3EEAAD4BE8F0CD0FC09F0E838418BCBB5E50547E806E8E080B8E3421D0DB26FF4C15D412 |
Malicious: | false |
Reputation: | low |
URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwn9jQSVDpn5HBIFDeeNQA4SBQ3OQUx6?alt=proto |
Preview: |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jan 14, 2025 01:40:46.631759882 CET | 49674 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 14, 2025 01:40:46.631772041 CET | 49675 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 14, 2025 01:40:46.741219044 CET | 49673 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 14, 2025 01:40:56.242527962 CET | 49674 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 14, 2025 01:40:56.242542028 CET | 49675 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 14, 2025 01:40:56.351859093 CET | 49673 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 14, 2025 01:40:58.042021990 CET | 443 | 49703 | 23.1.237.91 | 192.168.2.5 |
Jan 14, 2025 01:40:58.042182922 CET | 49703 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 14, 2025 01:40:58.259287119 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:40:58.259335995 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:40:58.259434938 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:40:58.259737015 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:40:58.259746075 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:40:58.900852919 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:40:58.902049065 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:40:58.902062893 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:40:58.903103113 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:40:58.903152943 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:40:58.905064106 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:40:58.905123949 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:40:58.945058107 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:40:58.945067883 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:40:58.991951942 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:40:59.151071072 CET | 49714 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:40:59.151412964 CET | 49715 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:40:59.155833006 CET | 80 | 49714 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:40:59.155905962 CET | 49714 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:40:59.156075954 CET | 49714 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:40:59.156171083 CET | 80 | 49715 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:40:59.156208038 CET | 49715 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:40:59.160828114 CET | 80 | 49714 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:40:59.630882025 CET | 80 | 49714 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:40:59.680322886 CET | 49714 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:40:59.858716965 CET | 49716 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:40:59.858778000 CET | 443 | 49716 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:40:59.858849049 CET | 49716 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:40:59.859116077 CET | 49716 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:40:59.859126091 CET | 443 | 49716 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.156739950 CET | 49715 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.161634922 CET | 80 | 49715 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.161736965 CET | 49715 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.344197989 CET | 443 | 49716 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.344546080 CET | 49716 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.344568968 CET | 443 | 49716 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.346124887 CET | 443 | 49716 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.346185923 CET | 49716 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.351878881 CET | 49716 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.351970911 CET | 443 | 49716 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.352109909 CET | 49716 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.352121115 CET | 443 | 49716 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.402203083 CET | 49716 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.461186886 CET | 443 | 49716 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.461607933 CET | 443 | 49716 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.461879015 CET | 49716 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.462276936 CET | 49716 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.462290049 CET | 443 | 49716 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.465708971 CET | 49718 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.465734959 CET | 443 | 49718 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.465794086 CET | 49718 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.466124058 CET | 49718 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.466134071 CET | 443 | 49718 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.930056095 CET | 443 | 49718 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.931866884 CET | 49718 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.931880951 CET | 443 | 49718 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.932424068 CET | 443 | 49718 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.933234930 CET | 49718 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.933300018 CET | 443 | 49718 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:00.933583021 CET | 49718 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:00.979321957 CET | 443 | 49718 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.049135923 CET | 443 | 49718 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.050066948 CET | 443 | 49718 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.050124884 CET | 49718 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.050719976 CET | 49718 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.050734043 CET | 443 | 49718 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.096683979 CET | 49719 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.096734047 CET | 443 | 49719 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.096872091 CET | 49719 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.097280025 CET | 49719 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.097300053 CET | 443 | 49719 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.561563015 CET | 443 | 49719 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.562141895 CET | 49719 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.562175989 CET | 443 | 49719 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.562540054 CET | 443 | 49719 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.562963009 CET | 49719 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.563028097 CET | 443 | 49719 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.563246012 CET | 49719 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.603332043 CET | 443 | 49719 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.686328888 CET | 443 | 49719 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.686429024 CET | 443 | 49719 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.686496019 CET | 49719 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.688000917 CET | 49719 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.688020945 CET | 443 | 49719 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.721543074 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.721585989 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:01.721645117 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.721926928 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:01.721940041 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.196903944 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.243158102 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:02.267951965 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:02.268003941 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.269206047 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.284539938 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:02.284753084 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.287925005 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:02.335333109 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.397476912 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.397608995 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.397695065 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.397747040 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:02.397770882 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.397809982 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:02.397815943 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.397901058 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.397970915 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.398026943 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:02.398035049 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.398066998 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:02.400073051 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:02.400136948 CET | 443 | 49721 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:02.400249004 CET | 49721 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:08.869656086 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:41:08.869720936 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:41:08.869904995 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:41:10.123544931 CET | 49712 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:41:10.123564005 CET | 443 | 49712 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:41:14.771320105 CET | 49759 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:14.771338940 CET | 443 | 49759 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:14.771410942 CET | 49759 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:14.771642923 CET | 49759 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:14.771656990 CET | 443 | 49759 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:14.774023056 CET | 49760 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:14.774044991 CET | 443 | 49760 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:14.774100065 CET | 49760 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:14.776210070 CET | 49760 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:14.776222944 CET | 443 | 49760 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.240667105 CET | 443 | 49760 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.240971088 CET | 49760 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:15.240984917 CET | 443 | 49760 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.242088079 CET | 443 | 49760 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.243334055 CET | 443 | 49759 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.244172096 CET | 49760 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:15.244318962 CET | 49759 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:15.244332075 CET | 443 | 49759 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.244343996 CET | 443 | 49760 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.244466066 CET | 49760 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:15.245248079 CET | 443 | 49759 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.245414972 CET | 49759 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:15.245878935 CET | 49759 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:15.245946884 CET | 443 | 49759 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.290328979 CET | 49759 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:15.290342093 CET | 443 | 49759 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.291332006 CET | 443 | 49760 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.335166931 CET | 49759 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:15.345961094 CET | 443 | 49760 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.346246958 CET | 443 | 49760 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:15.346303940 CET | 49760 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:15.372419119 CET | 49760 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:15.372431993 CET | 443 | 49760 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:44.633012056 CET | 49714 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:44.638566971 CET | 80 | 49714 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:45.164261103 CET | 49715 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:41:45.169182062 CET | 80 | 49715 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:41:58.305782080 CET | 49997 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:41:58.305834055 CET | 443 | 49997 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:41:58.305919886 CET | 49997 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:41:58.306233883 CET | 49997 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:41:58.306246996 CET | 443 | 49997 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:41:58.936697006 CET | 443 | 49997 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:41:58.937118053 CET | 49997 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:41:58.937144041 CET | 443 | 49997 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:41:58.937472105 CET | 443 | 49997 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:41:58.938014984 CET | 49997 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:41:58.938111067 CET | 443 | 49997 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:41:58.992182970 CET | 49997 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:42:00.304224968 CET | 49759 | 443 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:42:00.304258108 CET | 443 | 49759 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:42:02.118580103 CET | 49715 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:42:02.123811960 CET | 80 | 49715 | 185.199.108.153 | 192.168.2.5 |
Jan 14, 2025 01:42:02.123929024 CET | 49715 | 80 | 192.168.2.5 | 185.199.108.153 |
Jan 14, 2025 01:42:08.849229097 CET | 443 | 49997 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:42:08.849284887 CET | 443 | 49997 | 142.250.184.228 | 192.168.2.5 |
Jan 14, 2025 01:42:08.849385023 CET | 49997 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:42:10.118925095 CET | 49997 | 443 | 192.168.2.5 | 142.250.184.228 |
Jan 14, 2025 01:42:10.118947983 CET | 443 | 49997 | 142.250.184.228 | 192.168.2.5 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jan 14, 2025 01:40:53.947628975 CET | 53 | 63141 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:40:53.960675955 CET | 53 | 52616 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:40:55.118976116 CET | 53 | 50671 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:40:58.246654034 CET | 59021 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 14, 2025 01:40:58.247033119 CET | 65307 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 14, 2025 01:40:58.253489017 CET | 53 | 59021 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:40:58.253643990 CET | 53 | 65307 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:40:59.135536909 CET | 56698 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 14, 2025 01:40:59.138931990 CET | 60310 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 14, 2025 01:40:59.145672083 CET | 53 | 56698 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:40:59.148025036 CET | 53 | 60310 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:40:59.849548101 CET | 65028 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 14, 2025 01:40:59.849735022 CET | 56932 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 14, 2025 01:40:59.857903957 CET | 53 | 56932 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:40:59.858143091 CET | 53 | 65028 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:41:01.126164913 CET | 53 | 62683 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:41:12.208888054 CET | 53 | 59776 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:41:31.109850883 CET | 53 | 51701 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:41:53.548618078 CET | 53 | 51556 | 1.1.1.1 | 192.168.2.5 |
Jan 14, 2025 01:41:54.094558954 CET | 53 | 62386 | 1.1.1.1 | 192.168.2.5 |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Jan 14, 2025 01:40:58.246654034 CET | 192.168.2.5 | 1.1.1.1 | 0x4e74 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 14, 2025 01:40:58.247033119 CET | 192.168.2.5 | 1.1.1.1 | 0x6319 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 14, 2025 01:40:59.135536909 CET | 192.168.2.5 | 1.1.1.1 | 0x13f2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 14, 2025 01:40:59.138931990 CET | 192.168.2.5 | 1.1.1.1 | 0x4da9 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 14, 2025 01:40:59.849548101 CET | 192.168.2.5 | 1.1.1.1 | 0x66ba | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 14, 2025 01:40:59.849735022 CET | 192.168.2.5 | 1.1.1.1 | 0x3a5e | Standard query (0) | 65 | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Jan 14, 2025 01:40:58.253489017 CET | 1.1.1.1 | 192.168.2.5 | 0x4e74 | No error (0) | 142.250.184.228 | A (IP address) | IN (0x0001) | false | ||
Jan 14, 2025 01:40:58.253643990 CET | 1.1.1.1 | 192.168.2.5 | 0x6319 | No error (0) | 65 | IN (0x0001) | false | |||
Jan 14, 2025 01:40:59.145672083 CET | 1.1.1.1 | 192.168.2.5 | 0x13f2 | No error (0) | 185.199.108.153 | A (IP address) | IN (0x0001) | false | ||
Jan 14, 2025 01:40:59.145672083 CET | 1.1.1.1 | 192.168.2.5 | 0x13f2 | No error (0) | 185.199.110.153 | A (IP address) | IN (0x0001) | false | ||
Jan 14, 2025 01:40:59.145672083 CET | 1.1.1.1 | 192.168.2.5 | 0x13f2 | No error (0) | 185.199.109.153 | A (IP address) | IN (0x0001) | false | ||
Jan 14, 2025 01:40:59.145672083 CET | 1.1.1.1 | 192.168.2.5 | 0x13f2 | No error (0) | 185.199.111.153 | A (IP address) | IN (0x0001) | false | ||
Jan 14, 2025 01:40:59.858143091 CET | 1.1.1.1 | 192.168.2.5 | 0x66ba | No error (0) | 185.199.108.153 | A (IP address) | IN (0x0001) | false | ||
Jan 14, 2025 01:40:59.858143091 CET | 1.1.1.1 | 192.168.2.5 | 0x66ba | No error (0) | 185.199.109.153 | A (IP address) | IN (0x0001) | false | ||
Jan 14, 2025 01:40:59.858143091 CET | 1.1.1.1 | 192.168.2.5 | 0x66ba | No error (0) | 185.199.110.153 | A (IP address) | IN (0x0001) | false | ||
Jan 14, 2025 01:40:59.858143091 CET | 1.1.1.1 | 192.168.2.5 | 0x66ba | No error (0) | 185.199.111.153 | A (IP address) | IN (0x0001) | false |
|
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.5 | 49714 | 185.199.108.153 | 80 | 4428 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Jan 14, 2025 01:40:59.156075954 CET | 442 | OUT | |
Jan 14, 2025 01:40:59.630882025 CET | 712 | IN | |
Jan 14, 2025 01:41:44.633012056 CET | 6 | OUT |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.2.5 | 49715 | 185.199.108.153 | 80 | 4428 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Jan 14, 2025 01:41:45.164261103 CET | 6 | OUT |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.5 | 49716 | 185.199.108.153 | 443 | 4428 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-14 00:41:00 UTC | 670 | OUT | |
2025-01-14 00:41:00 UTC | 546 | IN | |
2025-01-14 00:41:00 UTC | 162 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.2.5 | 49718 | 185.199.108.153 | 443 | 4428 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-14 00:41:00 UTC | 671 | OUT | |
2025-01-14 00:41:01 UTC | 731 | IN | |
2025-01-14 00:41:01 UTC | 521 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
2 | 192.168.2.5 | 49719 | 185.199.108.153 | 443 | 4428 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-14 00:41:01 UTC | 564 | OUT | |
2025-01-14 00:41:01 UTC | 730 | IN | |
2025-01-14 00:41:01 UTC | 847 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
3 | 192.168.2.5 | 49721 | 185.199.108.153 | 443 | 4428 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-14 00:41:02 UTC | 602 | OUT | |
2025-01-14 00:41:02 UTC | 635 | IN | |
2025-01-14 00:41:02 UTC | 1378 | IN | |
2025-01-14 00:41:02 UTC | 1378 | IN | |
2025-01-14 00:41:02 UTC | 1378 | IN | |
2025-01-14 00:41:02 UTC | 1378 | IN | |
2025-01-14 00:41:02 UTC | 1378 | IN | |
2025-01-14 00:41:02 UTC | 1378 | IN | |
2025-01-14 00:41:02 UTC | 847 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
4 | 192.168.2.5 | 49760 | 185.199.108.153 | 443 | 4428 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-14 00:41:15 UTC | 867 | OUT | |
2025-01-14 00:41:15 UTC | 46 | OUT | |
2025-01-14 00:41:15 UTC | 357 | IN | |
2025-01-14 00:41:15 UTC | 131 | IN |
Click to jump to process
Click to jump to process
Click to jump to process
Target ID: | 0 |
Start time: | 19:40:48 |
Start date: | 13/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff715980000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 2 |
Start time: | 19:40:51 |
Start date: | 13/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff715980000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 3 |
Start time: | 19:40:57 |
Start date: | 13/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff715980000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | true |