Windows
Analysis Report
http://ipfs.io/ipfs/bafkreiegcz3lxxpdvmp6t2cisfhovfdsol6votihv6vw7ixifynaplzjva
Overview
General Information
Detection
Score: | 52 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
Signatures
Classification
- System is w10x64
- chrome.exe (PID: 6184 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed "about :blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 1288 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2404 --fi eld-trial- handle=233 2,i,263642 4786149384 070,132941 9648112233 0184,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- chrome.exe (PID: 6692 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt p://ipfs.i o/ipfs/baf kreiegcz3l xxpdvmp6t2 cisfhovfds ol6votihv6 vw7ixifyna plzjva" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
Click to jump to signature section
AV Detection |
---|
Source: | Avira URL Cloud: |
Phishing |
---|
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: | ||
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: | ||
Source: | HTTP Parser: |
Source: | HTTP Parser: | ||
Source: | HTTP Parser: |
Source: | TCP traffic: |
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: |
Source: | HTTP traffic detected: |
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: |
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: |
Source: | Classification label: |
Source: | File created: | Jump to behavior |
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: | ||
Source: | LNK file: |
Source: | Window detected: |
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior | ||
Source: | File created: | Jump to behavior |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | 1 Drive-by Compromise | Windows Management Instrumentation | 1 Registry Run Keys / Startup Folder | 1 Process Injection | 1 Masquerading | OS Credential Dumping | System Service Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | 1 Registry Run Keys / Startup Folder | 1 Process Injection | LSASS Memory | Application Window Discovery | Remote Desktop Protocol | Data from Removable Media | 3 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | Obfuscated Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 4 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 3 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
100% | Avira URL Cloud | phishing |
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
0% | Avira URL Cloud | safe | ||
0% | Avira URL Cloud | safe |
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
code.jquery.com | 151.101.194.137 | true | false | high | |
www.google.com | 142.250.185.100 | true | false | high | |
fac.corp.fortinet.com | 208.91.114.103 | true | false | unknown | |
d28h3jm4r3crf8.cloudfront.net | 65.9.66.52 | true | false | unknown | |
ipfs.io | 209.94.90.1 | true | false | high | |
alphatrade-options.com | unknown | unknown | false | high | |
ik.imagekit.io | unknown | unknown | false | high |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
false | high | ||
false |
| unknown | |
false | high |
Name | Source | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|
false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
142.250.185.100 | www.google.com | United States | 15169 | GOOGLEUS | false | |
151.101.130.137 | unknown | United States | 54113 | FASTLYUS | false | |
239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
65.9.66.52 | d28h3jm4r3crf8.cloudfront.net | United States | 16509 | AMAZON-02US | false | |
208.91.114.103 | fac.corp.fortinet.com | United States | 40934 | FORTINETUS | false | |
151.101.194.137 | code.jquery.com | United States | 54113 | FASTLYUS | false | |
209.94.90.1 | ipfs.io | United States | 40680 | PROTOCOLUS | false |
IP |
---|
192.168.2.6 |
192.168.2.5 |
Joe Sandbox version: | 42.0.0 Malachite |
Analysis ID: | 1592347 |
Start date and time: | 2025-01-16 01:26:55 +01:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 3m 2s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | browseurl.jbs |
Sample URL: | http://ipfs.io/ipfs/bafkreiegcz3lxxpdvmp6t2cisfhovfdsol6votihv6vw7ixifynaplzjva |
Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
Number of analysed new started processes analysed: | 7 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | default |
Analysis stop reason: | Timeout |
Detection: | MAL |
Classification: | mal52.phis.win@18/16@19/9 |
EGA Information: | Failed |
HCA Information: |
|
- Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 142.250.186.67, 216.58.206.78, 74.125.133.84, 142.250.184.206, 142.250.185.238, 142.250.186.78, 172.217.23.106, 172.217.16.202, 142.250.185.106, 142.250.185.234, 142.250.184.202, 142.250.185.74, 142.250.185.138, 216.58.206.74, 142.250.186.138, 142.250.181.234, 142.250.186.106, 142.250.186.170, 216.58.206.42, 172.217.18.10, 142.250.184.234, 142.250.186.42, 199.232.214.172, 2.23.77.188, 142.250.185.206, 142.251.40.110, 74.125.0.102, 142.250.185.142, 142.250.184.227, 2.23.242.162, 13.107.246.45, 52.149.20.212, 172.202.163.200
- Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, r1.sn-t0aekn7e.gvt1.com, clients.l.google.com, r1---sn-t0aekn7e.gvt1.com
- Not all processes where analyzed, report is missing behavior information
- Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- VT rate limit hit for: http://ipfs.io/ipfs/bafkreiegcz3lxxpdvmp6t2cisfhovfdsol6votihv6vw7ixifynaplzjva
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2677 |
Entropy (8bit): | 3.9786516758572894 |
Encrypted: | false |
SSDEEP: | 48:8id3Tv99yH/idAKZdA19ehwiZUklqeh9y+3:8ep92ey |
MD5: | 37198739964EB71A130045F76B5CE059 |
SHA1: | 5B0E25AB195E074295F685794636287CCB86713E |
SHA-256: | 9F90D948D3A6D0F90EF7B67F2D11EC98B586B9578BB97A51B7BD57B721E3FC2D |
SHA-512: | D99D4D290DCE2E4319A05F93F3F5B5B4A14F3C1F0DC9E4D3CB1FBA6D22D4D2D553A6CEBAB1CFDB3E87D4048BDB5982243CD56B1C491D09DA95099891BB1CBA0A |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2679 |
Entropy (8bit): | 3.993916533390109 |
Encrypted: | false |
SSDEEP: | 48:88d3Tv99yH/idAKZdA1weh/iZUkAQkqehOy+2:8Mp9U9Qry |
MD5: | 4B849A9C9EDFFB3F1270CF8128F0C751 |
SHA1: | 905A677BA2F7E7E2436E2C28567277AF3759C45C |
SHA-256: | 73A425B055D861D09837C82C47751702863FC1544B1B1945CB1D5BCDA1DB0794 |
SHA-512: | B61953E18661DBDA4B95C3488573D9587804406732458D202A31782141D1D2CBC64BB1DA33BDDD96C255C71A0EDBE39FEBA2E1363DF18AA8E62ED1E9725B1235 |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2693 |
Entropy (8bit): | 4.006384381708451 |
Encrypted: | false |
SSDEEP: | 48:8xMd3Tv99sH/idAKZdA14tseh7sFiZUkmgqeh7ssy+BX:8x8p9qnKy |
MD5: | 40580C0FD4956E6EFBFBE5C24194B426 |
SHA1: | 621B461F526BED4C7D051E2E29E55275A0FD4A4C |
SHA-256: | 29F8271C21777EC908A23F82FFA6FE305EAC3AC7D66450FB855104025219CC8F |
SHA-512: | D39784C2CE5522E0A7E96FEABE2B096AFB46DA265727214786AF3EC9D992E0D7B48AB84FF1A9611BB822F4D411BE63E22621E9C974B8ED1E58212F8D4BD4D355 |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2681 |
Entropy (8bit): | 3.9960231257514467 |
Encrypted: | false |
SSDEEP: | 48:8sd3Tv99yH/idAKZdA1vehDiZUkwqehiy+R:8cp9/ky |
MD5: | 52BAB87BC699A68C2270D870E437EC6E |
SHA1: | 5368EC7BB0F8EBB4FDEF7A24BAC3087C1DB16078 |
SHA-256: | C0D5D00C8AEDF2E597CA3C2D401EB81C8665D5D9C826ACB6B1BEC937B0EF5B5D |
SHA-512: | EDCEA1A5DCA3942F529D63BD31AF9CD675C7B8719FDB8A018422A6ABE1B70CA9019147CC05F7F3CF0DE9303DF19AED77140E56CB584A6CA7F4ADA5DC246EC3EA |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2681 |
Entropy (8bit): | 3.981383324798285 |
Encrypted: | false |
SSDEEP: | 48:8bd3Tv99yH/idAKZdA1hehBiZUk1W1qehYy+C:8pp9/94y |
MD5: | 5488E170E1BB4F98632789606799A252 |
SHA1: | 6648BC15A4450B98914E13D4899A05C816BE45FE |
SHA-256: | 48C789966A664210CE9FD256332B8E01535936279BC7E5511D706A27D92BDE65 |
SHA-512: | D352283DF571447E39C9C2DA224724D8B7BEF1E0698430988964F1ADEACC6A7A04054320961B46B37B799C29E9A9320DC0CFD1E52C0BADDD7CAB18DCE5BB6B12 |
Malicious: | false |
Reputation: | low |
Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Download File
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2683 |
Entropy (8bit): | 3.994164162712615 |
Encrypted: | false |
SSDEEP: | 48:8ld3Tv99yH/idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbKy+yT+:8Pp93T/TbxWOvTbKy7T |
MD5: | C4953A5C4928E0608B52A4C92CFD6FCD |
SHA1: | FD240DC2F5CE4E1B0ECF73F6FB305A2C545189E1 |
SHA-256: | C39E86AA9273DA2ECDB95F4278B428F65E6A0017B38E48C8E46E4F32E26C618E |
SHA-512: | A0DDEBD9DCE21E14F2AEDA589C4F4A900122D502AA647D02471A9D98275C9778D22DEC3918ACEF9C208D3E45CDBCABD5DFEF962CE2793729827A2E908E757503 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 55202 |
Entropy (8bit): | 7.826111557987171 |
Encrypted: | false |
SSDEEP: | 1536:WDc0CcT48aUauqkbuZr4/AxOjKWsftVDxLF:ZU4DUPiq/fupftt |
MD5: | D536D58EA2F4CFE5D5B734E7893FB09E |
SHA1: | 77C5E9FCBB33EB9B6DF808AA86F50E0542E5162F |
SHA-256: | 669C17CDE38DD0AB9673DE77A674C5B192E934399BBEE3EBED65BD70B05BFF5F |
SHA-512: | 69CE0DF240C3A0AE4ACFF39DE7B08AA9DF3BD288179FAAAC501F59496934C4245B35D888D2424ED66A2C187E65380AA1EF9FA059AC89BB9057C468F3F5CBBBB0 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 159340 |
Entropy (8bit): | 5.157103019944494 |
Encrypted: | false |
SSDEEP: | 3072:98ygto9fDFVxwupNW2kJRCsZE6JtX6diUB9TNDyI6s:rgy9fDFVxwwN7kJRCsZE6JtX6diMTNWY |
MD5: | 93FDB3B330DC828CE166D335B73D2B58 |
SHA1: | 350778D5B8075E65345F59DA07A6C2437DDD9AB2 |
SHA-256: | 861676BBDDE3AB1FE9E848914EEA947272FD574D07AFAB6FA2E82E1A07AF29A8 |
SHA-512: | 0E7D01814727CE01E9C8C73BC7E9230BF5C89658E6515EB55F0F3C6A4518284362023529954F29E5941736BDD7A688C3D34682D335F96469462899395070D415 |
Malicious: | false |
Reputation: | low |
URL: | https://ipfs.io/ipfs/bafkreiegcz3lxxpdvmp6t2cisfhovfdsol6votihv6vw7ixifynaplzjva |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 85578 |
Entropy (8bit): | 5.366055229017455 |
Encrypted: | false |
SSDEEP: | 1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2 |
MD5: | 2F6B11A7E914718E0290410E85366FE9 |
SHA1: | 69BB69E25CA7D5EF0935317584E6153F3FD9A88C |
SHA-256: | 05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E |
SHA-512: | 0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB |
Malicious: | false |
Reputation: | low |
URL: | https://code.jquery.com/jquery-2.2.4.min.js |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 16 |
Entropy (8bit): | 3.452819531114783 |
Encrypted: | false |
SSDEEP: | 3:HrRL:1L |
MD5: | 1E864FBFC865DB4414C7938AF8717484 |
SHA1: | F8BF8AC081AEC1C65D319CA5F7011A563DBA68BB |
SHA-256: | DD41A8261FB62B1852F6937368C64238FF2FEEFD0CB07567EB74A29004DA344A |
SHA-512: | 824D5EBC56C9E9DBC7B10BBC33D45BEE0640DEE1D3F16888ADD60E8F6B3BA62F961B0519ECEDFC7294A2B74B293728C24BD8B6EFD7D925509A2A6F770F26471A |
Malicious: | false |
Reputation: | low |
URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmOrPg53DWYGBIFDYbYYl4=?alt=proto |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 85578 |
Entropy (8bit): | 5.366055229017455 |
Encrypted: | false |
SSDEEP: | 1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2 |
MD5: | 2F6B11A7E914718E0290410E85366FE9 |
SHA1: | 69BB69E25CA7D5EF0935317584E6153F3FD9A88C |
SHA-256: | 05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E |
SHA-512: | 0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 55202 |
Entropy (8bit): | 7.826111557987171 |
Encrypted: | false |
SSDEEP: | 1536:WDc0CcT48aUauqkbuZr4/AxOjKWsftVDxLF:ZU4DUPiq/fupftt |
MD5: | D536D58EA2F4CFE5D5B734E7893FB09E |
SHA1: | 77C5E9FCBB33EB9B6DF808AA86F50E0542E5162F |
SHA-256: | 669C17CDE38DD0AB9673DE77A674C5B192E934399BBEE3EBED65BD70B05BFF5F |
SHA-512: | 69CE0DF240C3A0AE4ACFF39DE7B08AA9DF3BD288179FAAAC501F59496934C4245B35D888D2424ED66A2C187E65380AA1EF9FA059AC89BB9057C468F3F5CBBBB0 |
Malicious: | false |
Reputation: | low |
URL: | https://ik.imagekit.io/escrowmade/Rolling-1s-200px__1__trHCWXy9jD.gif |
Preview: |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jan 16, 2025 01:27:43.510763884 CET | 49674 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:27:43.510785103 CET | 49675 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:27:43.604450941 CET | 49673 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:27:53.112464905 CET | 49674 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:27:53.112468958 CET | 49675 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:27:53.206227064 CET | 49673 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:27:53.434914112 CET | 49711 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:27:53.435009003 CET | 443 | 49711 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:27:53.435087919 CET | 49711 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:27:53.435339928 CET | 49711 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:27:53.435363054 CET | 443 | 49711 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:27:54.071866035 CET | 443 | 49711 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:27:54.072176933 CET | 49711 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:27:54.072202921 CET | 443 | 49711 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:27:54.073870897 CET | 443 | 49711 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:27:54.073942900 CET | 49711 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:27:54.074979067 CET | 49711 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:27:54.075067997 CET | 443 | 49711 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:27:54.127912045 CET | 49711 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:27:54.127934933 CET | 443 | 49711 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:27:54.174736023 CET | 49711 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:27:54.877469063 CET | 443 | 49703 | 23.1.237.91 | 192.168.2.5 |
Jan 16, 2025 01:27:54.877568007 CET | 49703 | 443 | 192.168.2.5 | 23.1.237.91 |
Jan 16, 2025 01:27:55.296680927 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.296727896 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.296792984 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.297028065 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.297045946 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.755414009 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.755724907 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.755738020 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.756913900 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.756973982 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.761601925 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.761672974 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.761791945 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.761799097 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.815407991 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.897772074 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.897912025 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.897975922 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.897983074 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.898051023 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.898109913 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.898113966 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.898178101 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.898216963 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.898221016 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.898298979 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.898335934 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.898339987 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.898513079 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.898725033 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.898730040 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.944243908 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.944252014 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.959693909 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:55.959727049 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:55.959960938 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:55.960896969 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:55.960907936 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:55.981374025 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:55.981419086 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:55.981529951 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:55.981712103 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:55.981720924 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:55.984107971 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.984183073 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.984237909 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.984311104 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.984313011 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.984313011 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.984319925 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.984441042 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.984539986 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.984546900 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.984617949 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.984997988 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.985138893 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.985207081 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.985239983 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.985245943 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.985327959 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.985366106 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.985372066 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.985488892 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.985953093 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.986083031 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.986150026 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.986251116 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.986308098 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.986308098 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.986314058 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.987109900 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.987157106 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.987168074 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.987236023 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.987284899 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.987294912 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.987883091 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.988440037 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:55.988445997 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.035613060 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.070816040 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.070868969 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.070929050 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.070960045 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.070987940 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.070997000 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.071000099 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.071017981 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.071074009 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.071341038 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.071391106 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.071404934 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.071413040 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.071432114 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.071441889 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.071495056 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.071500063 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.071559906 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.071707010 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.071793079 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.072105885 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.072278023 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.072294950 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.072299957 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.072341919 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.072357893 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.072427988 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.072441101 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.072446108 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.072474957 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.072856903 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.072937012 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.072943926 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.072947025 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.072992086 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.073074102 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.073168039 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.073175907 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.073179960 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.073247910 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.073292971 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.073292971 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.073297977 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.073340893 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.157785892 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.157862902 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.157897949 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.158020020 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.158036947 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.158061981 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.158087969 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.158102989 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.158144951 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.158196926 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.158196926 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.158204079 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.158612967 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.158751965 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.158785105 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.158790112 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.158838987 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.158854961 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.158921003 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.158925056 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.158968925 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.158972979 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.159002066 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.159024000 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.159106970 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.159164906 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.159169912 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.159205914 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.159238100 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.159244061 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.159292936 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.159298897 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.159362078 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.159367085 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.159409046 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.159425974 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.159603119 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.159679890 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.159769058 CET | 49713 | 443 | 192.168.2.5 | 209.94.90.1 |
Jan 16, 2025 01:27:56.159784079 CET | 443 | 49713 | 209.94.90.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.294476032 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:56.294531107 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:56.294610023 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:56.295094967 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:56.295114994 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:56.444576025 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.444951057 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.444994926 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.446024895 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.446104050 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.447307110 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.447400093 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.447515011 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.447531939 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.500947952 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.545803070 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.561963081 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.561971903 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.562009096 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.562028885 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.562036991 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.562057972 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.562133074 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.562172890 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.562201977 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.628084898 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.628413916 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.628437042 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.629662037 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.629729986 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.630858898 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.630923986 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.631139040 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.631145954 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.637192011 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.637217045 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.637274027 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.637295008 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.637310982 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.637334108 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.638602972 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.638621092 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.638694048 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.638704062 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.638874054 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.674117088 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.727456093 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.727519035 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.727569103 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.727631092 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.727663994 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.727688074 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.728537083 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.728580952 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.728634119 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.728647947 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.728674889 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.728682995 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.728703976 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.728725910 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.728734016 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.728907108 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.729101896 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.729232073 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.729265928 CET | 443 | 49715 | 151.101.194.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.729288101 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.729594946 CET | 49715 | 443 | 192.168.2.5 | 151.101.194.137 |
Jan 16, 2025 01:27:56.743402958 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:56.743441105 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.743582964 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:56.743968010 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:56.743982077 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:56.900775909 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.900844097 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.900865078 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.900904894 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.900923967 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.900948048 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.900955915 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.900971889 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.900998116 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.981252909 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.981329918 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.981369019 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.981395960 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.981426001 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.981443882 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.987107992 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.987162113 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.987196922 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.987205982 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:56.987241983 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.987262964 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:56.994872093 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:57.030513048 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:57.030596972 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:57.030684948 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:57.030685902 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:57.048548937 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:57.192172050 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.201988935 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:57.202063084 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:57.205957890 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:57.205996037 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:57.206068039 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:57.233963966 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.284162998 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.284188032 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.285396099 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.285476923 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.328177929 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.328314066 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.330037117 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:57.330149889 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.330167055 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.330383062 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:57.330425978 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:57.371377945 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:57.379549026 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:57.379573107 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:57.379618883 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.389333010 CET | 49716 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:57.389358044 CET | 443 | 49716 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:57.428872108 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:57.432830095 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.438869953 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.438878059 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.438942909 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.438966036 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.438977003 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.438985109 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.438998938 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.439014912 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.439018965 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.439050913 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.456023932 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:57.456037045 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:57.456089020 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:57.456330061 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:57.456337929 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:57.491519928 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.521174908 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.521187067 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.521281004 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.521291018 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.521300077 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.521311045 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.521320105 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.521334887 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.521419048 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.524226904 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:57.524266958 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:57.524333000 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:57.524408102 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:57.527090073 CET | 49717 | 443 | 192.168.2.5 | 208.91.114.103 |
Jan 16, 2025 01:27:57.527101040 CET | 443 | 49717 | 208.91.114.103 | 192.168.2.5 |
Jan 16, 2025 01:27:57.605165005 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.605175972 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.605205059 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.605211973 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.605230093 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.605237007 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.605387926 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.605387926 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.606460094 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.606476068 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.606524944 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.606528997 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.606551886 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.606570959 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.608616114 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.608629942 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.608656883 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.608731031 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:57.608778000 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.608778000 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.608778000 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.609607935 CET | 49718 | 443 | 192.168.2.5 | 151.101.130.137 |
Jan 16, 2025 01:27:57.609621048 CET | 443 | 49718 | 151.101.130.137 | 192.168.2.5 |
Jan 16, 2025 01:27:58.095475912 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.095762014 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.095825911 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.097510099 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.097587109 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.098303080 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.098403931 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.098469973 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.098496914 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.143600941 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.375916958 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.375955105 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.375967026 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.375989914 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.376005888 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.376029015 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.376060009 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.376075029 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.376075029 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.376094103 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.457798004 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.457834005 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.457873106 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.457886934 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.457918882 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.464389086 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.464412928 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.464447021 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.464453936 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.464483976 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.508533955 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.508632898 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:27:58.508631945 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.508686066 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.509166002 CET | 49721 | 443 | 192.168.2.5 | 65.9.66.52 |
Jan 16, 2025 01:27:58.509193897 CET | 443 | 49721 | 65.9.66.52 | 192.168.2.5 |
Jan 16, 2025 01:28:04.003350019 CET | 443 | 49711 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:28:04.003499985 CET | 443 | 49711 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:28:04.003561020 CET | 49711 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:28:04.051526070 CET | 49711 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:28:04.051547050 CET | 443 | 49711 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:28:11.792237997 CET | 55280 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:28:11.798377037 CET | 53 | 55280 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:28:11.798443079 CET | 55280 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:28:11.798516035 CET | 55280 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:28:11.804610014 CET | 53 | 55280 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:28:12.262126923 CET | 53 | 55280 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:28:12.262934923 CET | 55280 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:28:12.267966032 CET | 53 | 55280 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:28:12.268079042 CET | 55280 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:28:53.488924026 CET | 55500 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:28:53.488974094 CET | 443 | 55500 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:28:53.489041090 CET | 55500 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:28:53.489437103 CET | 55500 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:28:53.489456892 CET | 443 | 55500 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:28:54.137986898 CET | 443 | 55500 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:28:54.138345003 CET | 55500 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:28:54.138365984 CET | 443 | 55500 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:28:54.138824940 CET | 443 | 55500 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:28:54.139106035 CET | 55500 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:28:54.139180899 CET | 443 | 55500 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:28:54.189707041 CET | 55500 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:29:04.069709063 CET | 443 | 55500 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:29:04.069794893 CET | 443 | 55500 | 142.250.185.100 | 192.168.2.5 |
Jan 16, 2025 01:29:04.069880962 CET | 55500 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:29:06.052860975 CET | 55500 | 443 | 192.168.2.5 | 142.250.185.100 |
Jan 16, 2025 01:29:06.052870989 CET | 443 | 55500 | 142.250.185.100 | 192.168.2.5 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Jan 16, 2025 01:27:49.676598072 CET | 53 | 58010 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:49.678150892 CET | 53 | 54455 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:50.709626913 CET | 53 | 61688 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:53.426546097 CET | 49351 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:53.426892042 CET | 61761 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:53.433931112 CET | 53 | 61761 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:53.433970928 CET | 53 | 49351 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.269925117 CET | 64556 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:55.270184994 CET | 54470 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:55.276587009 CET | 53 | 64556 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.279175043 CET | 53 | 54470 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.289047956 CET | 60698 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:55.289202929 CET | 58025 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:55.295545101 CET | 53 | 60698 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.296191931 CET | 53 | 58025 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.945867062 CET | 65488 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:55.946013927 CET | 54745 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:55.952405930 CET | 53 | 65488 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.952579021 CET | 53 | 54745 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.970021963 CET | 62808 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:55.970192909 CET | 54916 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:55.970557928 CET | 49832 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:55.970694065 CET | 51764 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:55.977179050 CET | 53 | 62808 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:55.980910063 CET | 53 | 54916 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.290350914 CET | 53 | 49832 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.291153908 CET | 53 | 51764 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.735634089 CET | 57311 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:56.735860109 CET | 57400 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:56.742419958 CET | 53 | 57311 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.742479086 CET | 53 | 57400 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:56.849560022 CET | 53 | 62519 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:57.432580948 CET | 53928 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:57.432626009 CET | 63691 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:57.444341898 CET | 53 | 53928 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:57.455641985 CET | 53 | 63691 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:57.560359955 CET | 52108 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:57.560777903 CET | 53431 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:57.569617987 CET | 53 | 53431 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:57.724252939 CET | 53 | 52108 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:27:57.725197077 CET | 64493 | 53 | 192.168.2.5 | 1.1.1.1 |
Jan 16, 2025 01:27:57.732333899 CET | 53 | 64493 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:28:07.745167017 CET | 53 | 52971 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:28:11.791757107 CET | 53 | 49383 | 1.1.1.1 | 192.168.2.5 |
Jan 16, 2025 01:28:49.404254913 CET | 53 | 58459 | 1.1.1.1 | 192.168.2.5 |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Jan 16, 2025 01:27:53.426546097 CET | 192.168.2.5 | 1.1.1.1 | 0xb04b | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:27:53.426892042 CET | 192.168.2.5 | 1.1.1.1 | 0x3d3f | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:27:55.269925117 CET | 192.168.2.5 | 1.1.1.1 | 0xbaa2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:27:55.270184994 CET | 192.168.2.5 | 1.1.1.1 | 0xabb2 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:27:55.289047956 CET | 192.168.2.5 | 1.1.1.1 | 0x1fcb | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:27:55.289202929 CET | 192.168.2.5 | 1.1.1.1 | 0xea2b | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:27:55.945867062 CET | 192.168.2.5 | 1.1.1.1 | 0x3bfd | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:27:55.946013927 CET | 192.168.2.5 | 1.1.1.1 | 0xda17 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:27:55.970021963 CET | 192.168.2.5 | 1.1.1.1 | 0x9f88 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:27:55.970192909 CET | 192.168.2.5 | 1.1.1.1 | 0x5863 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:27:55.970557928 CET | 192.168.2.5 | 1.1.1.1 | 0xf1c2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:27:55.970694065 CET | 192.168.2.5 | 1.1.1.1 | 0x455b | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:27:56.735634089 CET | 192.168.2.5 | 1.1.1.1 | 0x21ef | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:27:56.735860109 CET | 192.168.2.5 | 1.1.1.1 | 0x2c34 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:27:57.432580948 CET | 192.168.2.5 | 1.1.1.1 | 0x5625 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:27:57.432626009 CET | 192.168.2.5 | 1.1.1.1 | 0x20ab | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:27:57.560359955 CET | 192.168.2.5 | 1.1.1.1 | 0xf1dd | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:27:57.560777903 CET | 192.168.2.5 | 1.1.1.1 | 0xbc68 | Standard query (0) | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:27:57.725197077 CET | 192.168.2.5 | 1.1.1.1 | 0x330d | Standard query (0) | A (IP address) | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Jan 16, 2025 01:27:53.433931112 CET | 1.1.1.1 | 192.168.2.5 | 0x3d3f | No error (0) | 65 | IN (0x0001) | false | |||
Jan 16, 2025 01:27:53.433970928 CET | 1.1.1.1 | 192.168.2.5 | 0xb04b | No error (0) | 142.250.185.100 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.276587009 CET | 1.1.1.1 | 192.168.2.5 | 0xbaa2 | No error (0) | 209.94.90.1 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.279175043 CET | 1.1.1.1 | 192.168.2.5 | 0xabb2 | No error (0) | 65 | IN (0x0001) | false | |||
Jan 16, 2025 01:27:55.295545101 CET | 1.1.1.1 | 192.168.2.5 | 0x1fcb | No error (0) | 209.94.90.1 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.296191931 CET | 1.1.1.1 | 192.168.2.5 | 0xea2b | No error (0) | 65 | IN (0x0001) | false | |||
Jan 16, 2025 01:27:55.952405930 CET | 1.1.1.1 | 192.168.2.5 | 0x3bfd | No error (0) | 151.101.194.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.952405930 CET | 1.1.1.1 | 192.168.2.5 | 0x3bfd | No error (0) | 151.101.66.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.952405930 CET | 1.1.1.1 | 192.168.2.5 | 0x3bfd | No error (0) | 151.101.2.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.952405930 CET | 1.1.1.1 | 192.168.2.5 | 0x3bfd | No error (0) | 151.101.130.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.977179050 CET | 1.1.1.1 | 192.168.2.5 | 0x9f88 | No error (0) | d28h3jm4r3crf8.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.977179050 CET | 1.1.1.1 | 192.168.2.5 | 0x9f88 | No error (0) | 65.9.66.52 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.977179050 CET | 1.1.1.1 | 192.168.2.5 | 0x9f88 | No error (0) | 65.9.66.41 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.977179050 CET | 1.1.1.1 | 192.168.2.5 | 0x9f88 | No error (0) | 65.9.66.13 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.977179050 CET | 1.1.1.1 | 192.168.2.5 | 0x9f88 | No error (0) | 65.9.66.107 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:55.980910063 CET | 1.1.1.1 | 192.168.2.5 | 0x5863 | No error (0) | d28h3jm4r3crf8.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:56.290350914 CET | 1.1.1.1 | 192.168.2.5 | 0xf1c2 | No error (0) | 208.91.114.103 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:56.742419958 CET | 1.1.1.1 | 192.168.2.5 | 0x21ef | No error (0) | 151.101.130.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:56.742419958 CET | 1.1.1.1 | 192.168.2.5 | 0x21ef | No error (0) | 151.101.2.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:56.742419958 CET | 1.1.1.1 | 192.168.2.5 | 0x21ef | No error (0) | 151.101.194.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:56.742419958 CET | 1.1.1.1 | 192.168.2.5 | 0x21ef | No error (0) | 151.101.66.137 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:57.444341898 CET | 1.1.1.1 | 192.168.2.5 | 0x5625 | No error (0) | d28h3jm4r3crf8.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:57.444341898 CET | 1.1.1.1 | 192.168.2.5 | 0x5625 | No error (0) | 65.9.66.52 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:57.444341898 CET | 1.1.1.1 | 192.168.2.5 | 0x5625 | No error (0) | 65.9.66.41 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:57.444341898 CET | 1.1.1.1 | 192.168.2.5 | 0x5625 | No error (0) | 65.9.66.13 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:57.444341898 CET | 1.1.1.1 | 192.168.2.5 | 0x5625 | No error (0) | 65.9.66.107 | A (IP address) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:57.455641985 CET | 1.1.1.1 | 192.168.2.5 | 0x20ab | No error (0) | d28h3jm4r3crf8.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
Jan 16, 2025 01:27:57.569617987 CET | 1.1.1.1 | 192.168.2.5 | 0xbc68 | Name error (3) | none | none | 65 | IN (0x0001) | false | |
Jan 16, 2025 01:27:57.724252939 CET | 1.1.1.1 | 192.168.2.5 | 0xf1dd | Name error (3) | none | none | A (IP address) | IN (0x0001) | false | |
Jan 16, 2025 01:27:57.732333899 CET | 1.1.1.1 | 192.168.2.5 | 0x330d | Name error (3) | none | none | A (IP address) | IN (0x0001) | false |
|
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.5 | 49713 | 209.94.90.1 | 443 | 1288 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-16 00:27:55 UTC | 714 | OUT | |
2025-01-16 00:27:55 UTC | 1069 | IN | |
2025-01-16 00:27:55 UTC | 300 | IN | |
2025-01-16 00:27:55 UTC | 1369 | IN | |
2025-01-16 00:27:55 UTC | 1369 | IN | |
2025-01-16 00:27:55 UTC | 1369 | IN | |
2025-01-16 00:27:55 UTC | 1369 | IN | |
2025-01-16 00:27:55 UTC | 1369 | IN | |
2025-01-16 00:27:55 UTC | 1369 | IN | |
2025-01-16 00:27:55 UTC | 1369 | IN | |
2025-01-16 00:27:55 UTC | 1369 | IN | |
2025-01-16 00:27:55 UTC | 1369 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.2.5 | 49715 | 151.101.194.137 | 443 | 1288 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-16 00:27:56 UTC | 547 | OUT | |
2025-01-16 00:27:56 UTC | 613 | IN | |
2025-01-16 00:27:56 UTC | 16384 | IN | |
2025-01-16 00:27:56 UTC | 16384 | IN | |
2025-01-16 00:27:56 UTC | 16384 | IN | |
2025-01-16 00:27:56 UTC | 16384 | IN | |
2025-01-16 00:27:56 UTC | 16384 | IN | |
2025-01-16 00:27:56 UTC | 3658 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
2 | 192.168.2.5 | 49716 | 65.9.66.52 | 443 | 1288 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-16 00:27:56 UTC | 611 | OUT | |
2025-01-16 00:27:56 UTC | 807 | IN | |
2025-01-16 00:27:56 UTC | 15577 | IN | |
2025-01-16 00:27:56 UTC | 16384 | IN | |
2025-01-16 00:27:56 UTC | 16384 | IN | |
2025-01-16 00:27:57 UTC | 6857 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
3 | 192.168.2.5 | 49718 | 151.101.130.137 | 443 | 1288 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-16 00:27:57 UTC | 358 | OUT | |
2025-01-16 00:27:57 UTC | 613 | IN | |
2025-01-16 00:27:57 UTC | 16384 | IN | |
2025-01-16 00:27:57 UTC | 16384 | IN | |
2025-01-16 00:27:57 UTC | 16384 | IN | |
2025-01-16 00:27:57 UTC | 16384 | IN | |
2025-01-16 00:27:57 UTC | 16384 | IN | |
2025-01-16 00:27:57 UTC | 3658 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
4 | 192.168.2.5 | 49717 | 208.91.114.103 | 443 | 1288 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-16 00:27:57 UTC | 639 | OUT | |
2025-01-16 00:27:57 UTC | 548 | IN | |
2025-01-16 00:27:57 UTC | 4288 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
5 | 192.168.2.5 | 49721 | 65.9.66.52 | 443 | 1288 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-01-16 00:27:58 UTC | 384 | OUT | |
2025-01-16 00:27:58 UTC | 805 | IN | |
2025-01-16 00:27:58 UTC | 15579 | IN | |
2025-01-16 00:27:58 UTC | 16384 | IN | |
2025-01-16 00:27:58 UTC | 16384 | IN | |
2025-01-16 00:27:58 UTC | 6855 | IN |
Click to jump to process
Click to jump to process
Click to jump to process
Target ID: | 0 |
Start time: | 19:27:44 |
Start date: | 15/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff715980000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 2 |
Start time: | 19:27:47 |
Start date: | 15/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff715980000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 3 |
Start time: | 19:27:54 |
Start date: | 15/01/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff715980000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | true |