Windows
Analysis Report
http://remove-restriction.github.io/input-pass
Overview
General Information
Detection
Score: | 68 |
Range: | 0 - 100 |
Confidence: | 100% |
Signatures
Classification
- System is w10x64
chrome.exe (PID: 5472 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed "about :blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) chrome.exe (PID: 6036 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2516 --fi eld-trial- handle=244 4,i,546812 7952651942 022,168108 0501398327 9297,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) msdt.exe (PID: 6428 cmdline:
-modal "2 62222" -sk ip TRUE -p ath "C:\Wi ndows\diag nostics\sy stem\netwo rking" -af "C:\Users \user\AppD ata\Local\ Temp\NDF26 84.tmp" -e p "Network Diagnostic sWeb" MD5: 3AE6BFDF0257B303EDD695DA183C8462)
chrome.exe (PID: 6560 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt p://remove -restricti on.github. io/input-p ass" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
netsh.exe (PID: 6252 cmdline:
"C:\Window s\system32 \netsh.exe " trace di agnose Sce nario=Netw orkSnapsho t Mode=Net Troublesho oter MD5: 6F1E6DD688818BC3D1391D0CC7D597EB)
- cleanup
- • AV Detection
- • Phishing
- • Compliance
- • Networking
- • System Summary
- • Data Obfuscation
- • Persistence and Installation Behavior
- • Hooking and other Techniques for Hiding and Protection
- • Malware Analysis System Evasion
- • Language, Device and Operating System Detection
- • Lowering of HIPS / PFW / Operating System Security Settings
Click to jump to signature section
AV Detection |
---|
Source: | Avira URL Cloud: |
Source: | Avira URL Cloud: | ||
Source: | Avira URL Cloud: | ||
Source: | Avira URL Cloud: | ||
Source: | Avira URL Cloud: |
Phishing |
---|
Source: | Joe Sandbox AI: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | Binary string: |
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | String found in binary or memory: |
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: |
Source: | HTTP traffic detected: |
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: | ||
Source: | String found in binary or memory: |
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: |
Source: | Static PE information: | ||
Source: | Static PE information: |
Source: | Classification label: |
Source: | File created: | Jump to behavior |
Source: | Key opened: | Jump to behavior |
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior | ||
Source: | Section loaded: | Jump to behavior |
Source: | Key value queried: | Jump to behavior |
Source: | File opened: | Jump to behavior |
Source: | Window detected: |
Source: | Binary string: |
Source: | Static PE information: |
Source: | File created: | Jump to dropped file | ||
Source: | File created: | Jump to dropped file | ||
Source: | File created: | Jump to dropped file |
Source: | File created: | Jump to dropped file | ||
Source: | File created: | Jump to dropped file | ||
Source: | File created: | Jump to dropped file |
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior | ||
Source: | Process information set: | Jump to behavior |
Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
Source: | Dropped PE file which has not been started: | Jump to dropped file |
Source: | Binary or memory string: |
Source: | Queries volume information: | Jump to behavior | ||
Source: | Queries volume information: | Jump to behavior |
Source: | Key value queried: | Jump to behavior |
Lowering of HIPS / PFW / Operating System Security Settings |
---|
Source: | Process created: |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | 1 DLL Side-Loading | 1 Process Injection | 1 Masquerading | OS Credential Dumping | 1 Security Software Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | 1 DLL Side-Loading | 1 Disable or Modify Tools | LSASS Memory | 12 System Information Discovery | Remote Desktop Protocol | Data from Removable Media | 3 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | 1 Process Injection | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 4 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | 1 Timestomp | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 3 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | Network Logon Script | 1 DLL Side-Loading | LSA Secrets | Internet Connection Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
Domain Properties | Botnet | Replication Through Removable Media | Scheduled Task | RC Scripts | RC Scripts | 1 Obfuscated Files or Information | Cached Domain Credentials | Wi-Fi Discovery | VNC | GUI Input Capture | Multiband Communication | Data Transfer Size Limits | Service Stop |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
100% | Avira URL Cloud | phishing |
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
0% | ReversingLabs | |||
0% | ReversingLabs | |||
0% | ReversingLabs |
Source | Detection | Scanner | Label | Link |
---|---|---|---|---|
100% | Avira URL Cloud | phishing | ||
100% | Avira URL Cloud | phishing | ||
100% | Avira URL Cloud | phishing | ||
0% | Avira URL Cloud | safe | ||
100% | Avira URL Cloud | phishing |
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
star-mini.c10r.facebook.com | 157.240.0.35 | true | false | high | |
google.com | 172.217.16.206 | true | false | high | |
www.google.com | 216.58.206.68 | true | false | high | |
remove-restriction.github.io | 185.199.108.153 | true | true | unknown | |
www.facebook.com | unknown | unknown | false | high | |
practiced-dockings.000webhostapp.com | unknown | unknown | true | unknown |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
true |
| unknown | |
false | high | ||
false |
| unknown | |
true | unknown | ||
true |
| unknown | |
true | unknown | ||
true |
| unknown |
Name | Source | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|
false | high | |||
false |
| unknown | ||
false | high | |||
false | high | |||
false | high | |||
false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
157.240.0.35 | star-mini.c10r.facebook.com | United States | 32934 | FACEBOOKUS | false | |
216.58.206.68 | www.google.com | United States | 15169 | GOOGLEUS | false | |
239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
185.199.108.153 | remove-restriction.github.io | Netherlands | 54113 | FASTLYUS | true | |
157.240.253.35 | unknown | United States | 32934 | FACEBOOKUS | false |
IP |
---|
192.168.2.4 |
192.168.2.5 |
Joe Sandbox version: | 42.0.0 Malachite |
Analysis ID: | 1607942 |
Start date and time: | 2025-02-06 01:41:02 +01:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 3m 53s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | browseurl.jbs |
Sample URL: | http://remove-restriction.github.io/input-pass |
Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
Number of analysed new started processes analysed: | 12 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | default |
Analysis stop reason: | Timeout |
Detection: | MAL |
Classification: | mal68.phis.evad.win@22/28@26/7 |
EGA Information: | Failed |
HCA Information: |
|
- Exclude process from analysis
(whitelisted): MpCmdRun.exe, s diagnhost.exe, WMIADAP.exe, SI HClient.exe, conhost.exe, svch ost.exe - Excluded IPs from analysis (wh
itelisted): 142.250.185.67, 21 6.58.206.46, 108.177.15.84, 21 6.58.206.78, 142.250.186.46, 1 72.217.18.106, 142.250.184.234 , 216.58.206.42, 142.250.185.2 02, 142.250.185.106, 216.58.20 6.74, 172.217.23.106, 172.217. 16.138, 142.250.185.234, 142.2 50.185.74, 142.250.185.170, 14 2.250.186.170, 172.217.18.10, 216.58.212.138, 142.250.185.13 8, 142.250.184.202, 217.20.57. 19, 2.23.77.188, 142.250.185.7 8, 142.250.184.238, 172.217.16 .206, 172.217.18.14, 142.250.1 86.174, 142.250.181.227, 142.2 50.186.78, 184.28.90.27, 20.12 .23.50, 13.107.246.45 - Excluded domains from analysis
(whitelisted): fs.microsoft.c om, accounts.google.com, conte nt-autofill.googleapis.com, sl scr.update.microsoft.com, otel rules.azureedge.net, ctldl.win dowsupdate.com, clientservices .googleapis.com, fe3cr.deliver y.mp.microsoft.com, clients2.g oogle.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector .gvt1.com, update.googleapis.c om, clients.l.google.com - Not all processes where analyz
ed, report is missing behavior information - Report size getting too big, t
oo many NtOpenKeyEx calls foun d. - Report size getting too big, t
oo many NtProtectVirtualMemory calls found. - Some HTTPS proxied raw data pa
ckets have been limited to 10 per session. Please view the P CAPs for the complete data. - VT rate limit hit for: http:/
/remove-restriction.github.io/ input-pass
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 167016 |
Entropy (8bit): | 4.413051981071322 |
Encrypted: | false |
SSDEEP: | 384:X+BeLgtgFgQg7rgZgp3vFD2smEtttbkcL5Of8hj1fVh1f8hWqEfVhnq2fVhMfxhd:XLgtgFgQg7rgZgplP/s |
MD5: | 0606098A37089BDC9D644DEE1CC1CD78 |
SHA1: | CADAE9623A27BD22771BAB9D26B97226E8F2318B |
SHA-256: | 284A7A8525B1777BDBC194FA38D28CD9EE91C2CBC7856F5968E79667C6B62A9D |
SHA-512: | 0711E2FEF9FDE17B87F3F6AF1442BD46B4C86BB61C8519548B89C7A61DFCF734196DDF2D90E586D486A3B33F672A99379E8205C240BD4BCB23625FFB22936443 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 489984 |
Entropy (8bit): | 7.291387835559217 |
Encrypted: | false |
SSDEEP: | 6144:LZC0lEOC2Us6eEyAc0jbJYOjlCLHUZQsxjuaJ7oSEvcdfSc0jbJYOjlCLHUZQ:LZFLUe6vJ/wLIvavyfEvJ/wLI |
MD5: | EF3F72E162CFA6C082007672655CAE8A |
SHA1: | F6BE37340CDED395EF7C3DAB103DE4E061B05806 |
SHA-256: | 5A04D9F78BEF844FEE2FEC65610E12DB59CEFAA63544F3045401597AAE753B3C |
SHA-512: | B63D884525CC747D4DEB1335BF31A27248DD612BE9D8A1F6CA7C5F5A795964AC3B8868994CDE1EC5CD0F4C537E00EC56FB45D5250F3BEC1BFA13EE4AA1F9C52C |
Malicious: | false |
Antivirus: |
|
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 951 |
Entropy (8bit): | 5.0857751193503695 |
Encrypted: | false |
SSDEEP: | 24:Qb3DQ7NOepjIAflbfjbgTRmW26S1pGCXGiVd/ZF2GRaesBFw:mDzepZtjBtRRbCUae2q |
MD5: | C25ED2111C6EE9299E6D9BF51012F2F5 |
SHA1: | 2DEFBB5A2758AF744E3DD8AF3A4AA153A28E4713 |
SHA-256: | 8E326EE0475208D4C943D885035058FAD7146BBA02B66305F7C9F31F6A57E81B |
SHA-512: | AAC97463868162FE042748A279C38F6FB569E971E0CC0339D1A8969A7F5633EF7377B6F7DCFAE94BDD2BF96BBFF454B607EE8D7573E1C3C9569269FE82671D9E |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 770 |
Entropy (8bit): | 5.043368661106705 |
Encrypted: | false |
SSDEEP: | 24:Qb3DQ7NcIKGlbfjbgTRmW26S1pGK/KrGFxw:mDl4jBtPKH |
MD5: | 25B8543DBF571F040118423BC3C7A75E |
SHA1: | 49044724698E6964DC93ACF5BEE2A77B8EAD4133 |
SHA-256: | D78E6291D6F27AC6FEBDCF0A4D5A34521E7F033AF8875E026DF21BA7513AB64A |
SHA-512: | EC991FF552C1012209940CDCB081D64876B7989C56F07739B392DAAE9BCABA883B45AA90D50BEF31F276A9CD8492EE2B9DB700CD5E20E7B17BA43D98EC394DF5 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 9728 |
Entropy (8bit): | 5.0031830583187595 |
Encrypted: | false |
SSDEEP: | 192:dXcso4xinzRCxtd3wz5AstHq9Y2f0mWjeLNW:dXckCMPGz9ZYWC5W |
MD5: | 502A165A5058F93FA7F84A9FB52887CD |
SHA1: | 43C723564649244A9FB28EDFEC83F0330420CEB1 |
SHA-256: | 818DD25A449FEB9D30A108550940D3729FF1C83A8957049AA5E5EE56C89573DB |
SHA-512: | A3B2B5A5D75DBBA17348FBECE170FB94E1406789724CC35FBDE36CAC55C58310F08E580E3FE5E9D7F306DE4FD579B69704CBD5B43D048CDA0B24CEED37770163 |
Malicious: | false |
Antivirus: |
|
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 12213 |
Entropy (8bit): | 4.649249749706581 |
Encrypted: | false |
SSDEEP: | 192:eLXYPXsa+OjfI9HIufxAey+3OG78/ce+eT5WjifrM+BK:VPXaifqdfxAey+ecmAu7k |
MD5: | D213491A2D74B38A9535D616B9161217 |
SHA1: | BDE94742D1E769638E2DE84DFB099F797ADCC217 |
SHA-256: | 4662C3C94E0340A243C2A39CA8A88FD9F65C74FB197644A11D4FFCAE6B191211 |
SHA-512: | 5FD8B91B27935711495934E5D7CA14F9DD72BC40A38072595879EF334A47F99E0608087DDC62668C6F783938D9F22A3688C5CDEF3A9AD6C3575F3CFA5A3B0104 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 25783 |
Entropy (8bit): | 4.500605198321576 |
Encrypted: | false |
SSDEEP: | 384:blSoNnCiXTShob5bdVTz6rZTvxlBNexTKmh+xdxBUNQGJ:xSoTh8Jq |
MD5: | 2857343E8845EADB9B60CA0727CBDCB7 |
SHA1: | 82A5533B3739504C72F9DCE7D353845B35037DEE |
SHA-256: | 06D927AE1DB217378EA77146FDCCA66D1F1F6D90780B734B8748D1052FBD8B86 |
SHA-512: | 56B09BFBFF32B43DDD8E4636A485AF111B6DBFA2B7181299A22A3D007CF87DF0B09433100DC693C81C4F746A40F42FC51C75436511BE26270B8D84F7AC8EAD7D |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 11079 |
Entropy (8bit): | 4.751587059666952 |
Encrypted: | false |
SSDEEP: | 192:YORm9mJWriv3iriv3oyriv3vgriv3qB3b8FnHayrBJckzrSartt0qF+rSG/rSurT:YORm9mJDv33v3oHv3lv3qB3b8FnHrrBA |
MD5: | 9B222D8EC4B20860F10EBF303035B984 |
SHA1: | B30EEA35C2516AFCAB2C49EF6531AF94EFAF7E1A |
SHA-256: | A32E13DA40AC4B9E1DAC7DD28BC1D25E2F2136B61FF93BE943018B20796F15BC |
SHA-512: | 8331337CCB6E3137B01AEEC03E6921FD3B9E56C44FA1B17545AE5C7BFCDD39FCD8A90192884B3A82F56659009E24B63CE7F500E8766FD01E8D4E60A52DE0FE67 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 567 |
Entropy (8bit): | 4.837302167759307 |
Encrypted: | false |
SSDEEP: | 12:QcM3BFN+7bxAPe/LACrfgjvj5s8x8i9OoXdEgnc8x8i9OoXdQIx:Qb3DQ7FMejjbgTNhii9dXDxii9dXOe |
MD5: | A660422059D953C6D681B53A6977100E |
SHA1: | 0C95DD05514D062354C0EECC9AE8D437123305BB |
SHA-256: | D19677234127C38A52AEC23686775A8EB3F4E3A406F4A11804D97602D6C31813 |
SHA-512: | 26F8CF9AC95FF649ECC2ED349BC6C7C3A04B188594D5C3289AF8F2768AB59672BC95FFEFCC83ED3FFA44EDD0AFEB16A4C2490E633A89FCE7965843674D94B523 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 54687 |
Entropy (8bit): | 4.91902609892868 |
Encrypted: | false |
SSDEEP: | 768:AaDgc60FE2UMeV6HQEqEVBWMBaRNdKdNh5BIW6Mk7svkxtFJuAQQW:j0a4bKcW6MkcSuj |
MD5: | C912FAA190464CE7DEC867464C35A8DC |
SHA1: | D1C6482DAD37720DB6BDC594C4757914D1B1DD70 |
SHA-256: | 3891846307AA9E83BCA66B13198455AF72AF45BF721A2FBD41840D47E2A91201 |
SHA-512: | 5C34352D36459FD8FCDA5B459A2E48601A033AF31D802A90ED82C443A5A346B9480880D30C64DB7AD0E4A8C35B98C98F69ECEEDAD72F2A70D9C6CCA74DCE826A |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 3011 |
Entropy (8bit): | 5.393839415081681 |
Encrypted: | false |
SSDEEP: | 48:mDqbURueqlXC2ay3g+rAgeNTFNe5L9tkYnNn2E8/UBUyuzoth1GlB:mD+UR6XC2az4MjY5L9VnNnIUBUyuzoti |
MD5: | 0C75AE5E75C3E181D13768909C8240BA |
SHA1: | 288403FC4BEDAACEBCCF4F74D3073F082EF70EB9 |
SHA-256: | DE5C231C645D3AE1E13694284997721509F5DE64EE5C96C966CDFDA9E294DB3F |
SHA-512: | 8FC944515F41A837C61A6C4E5181CA273607A89E48FBF86CF8EB8DB837AED095AA04FC3043029C3B5CB3710D59ABFD86F086AC198200F634BFB1A5DD0823406B |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 17408 |
Entropy (8bit): | 3.463167967348922 |
Encrypted: | false |
SSDEEP: | 96:40OJmd+VoozojEIjPe/dQTVOd5hvhHyHMVqz+4MEvTLGlyQzwv7KCbVeog3+yt41:40njnexdUMR4wgK+gWlTWy |
MD5: | 42924954580FC0B97147D18CBD9064A2 |
SHA1: | E02B93D36214FB4A98AA9B4711920541C78D5B26 |
SHA-256: | B03FC44FCB28F039F94AC63B44617E04071D1DC5A5CD15E187AA806A085EF31A |
SHA-512: | 0B2737EE5C21538B120FD975850E7899F7F1B8B7FEC49B5E9F807EBFAE62DA3EB333CDBDB65912BACA43B39D63AFBE1258C8C54CC7E8A313D108339778585B73 |
Malicious: | false |
Antivirus: |
|
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 5378 |
Entropy (8bit): | 3.527173963273437 |
Encrypted: | false |
SSDEEP: | 96:i30smw/9nwbgDwlwn0iYveuQzRYkwj0pD+EijvxFvXG5B9c1rO4L:i30sZYlGe3vGfw |
MD5: | B2780BE67C909635DAEC96B9C909EC54 |
SHA1: | F4A8562D46548CBF091EB5230D2A6A3C5859BA3E |
SHA-256: | 0E7173882297619CE2097133B9D5C69D69B29997C39A5CBC4A88247C580642C5 |
SHA-512: | 8576D3313963A814870995FDE92F739A786ED7F93578F190DE07308E1DD66A8F511D4E06733298A250AAF48B64404DE4F99B03079B97FC33CDC3C798EAD0AFD0 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\msdt.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 48956 |
Entropy (8bit): | 5.103589775370961 |
Encrypted: | false |
SSDEEP: | 768:hUeTHmb0+tk+Ci10ycNV6OW9a+KDoVxrVF+bBH0t9mYNJ7u2+d:hUcHXDY10tNV6OW9abDoVxrVF+bBH0tO |
MD5: | 310E1DA2344BA6CA96666FB639840EA9 |
SHA1: | E8694EDF9EE68782AA1DE05470B884CC1A0E1DED |
SHA-256: | 67401342192BABC27E62D4C1E0940409CC3F2BD28F77399E71D245EAE8D3F63C |
SHA-512: | 62AB361FFEA1F0B6FF1CC76C74B8E20C2499D72F3EB0C010D47DBA7E6D723F9948DBA3397EA26241A1A995CFFCE2A68CD0AAA1BB8D917DD8F4C8F3729FA6D244 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 41869 |
Entropy (8bit): | 5.376308243732131 |
Encrypted: | false |
SSDEEP: | 384:6xqd5k5qMIGhutq6oqhqyAMsbT4S85VR0:6xqdslIGYqZqhqdMsV |
MD5: | 976ABE3D08E9490F41FFCC61F9676BFB |
SHA1: | 967CA3D0C28F54D78E349FC7C90D4AEB24E1FF4D |
SHA-256: | F7984747112B0B03C1D3BEA8320949968DE2243DED2754E41F2B92A784CC8CEC |
SHA-512: | 117E136936D26DB52516A9A400923D535D0402673F5576A1819B138A1FF947BC4145B8AAB4BD5F5BAB635E72E1AFEDFB8919D70EF680DF3636B530AFF1BE0C32 |
Malicious: | false |
Reputation: | low |
URL: | https://remove-restriction.github.io/input-pass/style.css |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 9379 |
Entropy (8bit): | 6.039920236951935 |
Encrypted: | false |
SSDEEP: | 192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN |
MD5: | C1F9838A645648CB3B25359F7890A288 |
SHA1: | 0CF12D25140E329BCB4C304FEEFCE63F8F0BA7B3 |
SHA-256: | B620507312C5E97566A3C6CFAF99144FEFC18A0DA7D941401DFA0F5F58FB0368 |
SHA-512: | 385898EC5D1CE3D13E8169945128724F6717CC35CEC01D642B90046F7E03DD28A688771CA84EA53B81C8EF8CEC8C1E28012C37732B80D1278A233468514A13F3 |
Malicious: | false |
Reputation: | low |
URL: | https://remove-restriction.github.io/input-pass/favicon.ico |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 15187 |
Entropy (8bit): | 5.390997678235493 |
Encrypted: | false |
SSDEEP: | 384:TWTmSkRNRLLQTnIe5ADIqNG6zhV28Z4hRp5E8Qtty+:T0mSNIiAcqSJRp5E8Qtty+ |
MD5: | D42AC02C913F6BF213EB5586C8196A2A |
SHA1: | C867B61843F673C86CCCEF9B5F2503B5A87FBD3E |
SHA-256: | 136CB2CD6782965650B360BC0F2CCEFD0001DAB75310C902DEA084C2B69958B6 |
SHA-512: | 3BFA57427BA38B24FAE071697D08D15AFB785D51760B16B85CB953C50F2AED5C370D7E08E1B3EF7F283FCE1A013E37E422BCE7348F929C1230374DAB5B7DF23E |
Malicious: | false |
Reputation: | low |
URL: | https://remove-restriction.github.io/input-pass/ |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 10524 |
Entropy (8bit): | 4.747716786797034 |
Encrypted: | false |
SSDEEP: | 192:D3rcEs9+tEOIwWP3d5Puv+zn9N0cGjsf++P3CabkQyiHnM1HGMdKjnYvGhvlh7:XQtBW+zn9N0cGjsf++vCabkQyenM1HG9 |
MD5: | AAB5F9814DB3000574B097CA983780D8 |
SHA1: | 3603A9C4B5927D1CFACCE04307ECE30EF529D3F2 |
SHA-256: | 9912A9154C510429FA1B8087ED8B3EC90EF2C55B97A7DCA6440E2A21789DE740 |
SHA-512: | E82AB61E33A641B114F73A7FED9D2628CE147281FBCD81D9C02B1D3090F51D62329F5D56EB356694693A38C692D000D15B6BDCCF28ABA44E13C3A54258777ACD |
Malicious: | false |
Reputation: | low |
URL: | https://remove-restriction.github.io/input-pass/interview.css |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 2988 |
Entropy (8bit): | 7.726160965139478 |
Encrypted: | false |
SSDEEP: | 48:ZQufJGM8GBpOxk3puGtcG9j0N9Ydv0Tuax+ZY6W71yGXcnQ7tqXwYY/UflpwT1:yuRQApk6ugRcVx+Q71yGis/Ylp4 |
MD5: | 77F6AA27ED49CFC3A4D59F4D62261B56 |
SHA1: | B7A331833851119272BD1E19DE9EADDA43A15A0C |
SHA-256: | 0E82B1299130DC3139A829664B0EE730D25BFF0DEE5C4756728BC88B76693D84 |
SHA-512: | E4AFAF7AE6EDCD3FC1980AD402B599A6F1E75998A7C59201E7DA0AB217620D0E57001A021C4AA90E149615C77F5CF78A82527B03F64A5B5B8A46793A96CECFEC |
Malicious: | false |
Reputation: | low |
URL: | https://www.facebook.com/images/fb_icon_325x325.png |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 16 |
Entropy (8bit): | 3.577819531114783 |
Encrypted: | false |
SSDEEP: | 3:H5y0NY:Y |
MD5: | 90CB0A83A76570AD07B349BBB9F103A3 |
SHA1: | C1B6096ED2FABFA0A9DFDA501CB9AEEC14559908 |
SHA-256: | 131F0A80B88EE2C7781DB0EE7F8B0E54DF59CCB934401C289BB16F9BB40DA15D |
SHA-512: | 6F229F11DF56DB77896492B56E472AA97336530822F8FDC71A44158A71A907F2C2E62BC9BB82FF58DD69D9B2180E7F9B426F1BB20F639C8B430C8AEA7CB27148 |
Malicious: | false |
Reputation: | low |
URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnlGFofbObosRIFDcWTxCQ=?alt=proto |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 2988 |
Entropy (8bit): | 7.726160965139478 |
Encrypted: | false |
SSDEEP: | 48:ZQufJGM8GBpOxk3puGtcG9j0N9Ydv0Tuax+ZY6W71yGXcnQ7tqXwYY/UflpwT1:yuRQApk6ugRcVx+Q71yGis/Ylp4 |
MD5: | 77F6AA27ED49CFC3A4D59F4D62261B56 |
SHA1: | B7A331833851119272BD1E19DE9EADDA43A15A0C |
SHA-256: | 0E82B1299130DC3139A829664B0EE730D25BFF0DEE5C4756728BC88B76693D84 |
SHA-512: | E4AFAF7AE6EDCD3FC1980AD402B599A6F1E75998A7C59201E7DA0AB217620D0E57001A021C4AA90E149615C77F5CF78A82527B03F64A5B5B8A46793A96CECFEC |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Windows\System32\netsh.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 116 |
Entropy (8bit): | 4.625060946214589 |
Encrypted: | false |
SSDEEP: | 3:lwFL5WvFN0Ked18SARJOaKWR6WEMYV3Cwv:laWv3ed1/A7OXMICwv |
MD5: | EA30C563F5D70CB0C4232D692B93346E |
SHA1: | F0D28A8CACDFD35B2587F3F673E748100DBC28D6 |
SHA-256: | 569E17E6BB0D00D37BA50D0E63827FB0FBB31785EF75C9920C315EBFDEA4C9A0 |
SHA-512: | F641B6553A2BBAF322DC0DD4650E5E589526736ADE6E5B19A09743113EB603C78CB880DA58495C715BCF2EDA830EEBC2159D4B3F44F66ECC2A97AC416BCB0901 |
Malicious: | false |
Reputation: | low |
Preview: |
Download Network PCAP: filtered – full
- Total Packets: 160
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Feb 6, 2025 01:41:58.393562078 CET | 49675 | 443 | 192.168.2.4 | 173.222.162.32 |
Feb 6, 2025 01:42:02.995155096 CET | 49738 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:42:02.995193005 CET | 443 | 49738 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:42:02.995276928 CET | 49738 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:42:02.995465994 CET | 49738 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:42:02.995481968 CET | 443 | 49738 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:42:03.884155989 CET | 443 | 49738 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:42:03.884531975 CET | 49738 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:42:03.884562016 CET | 443 | 49738 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:42:03.885449886 CET | 443 | 49738 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:42:03.885515928 CET | 49738 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:42:03.886670113 CET | 49738 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:42:03.886728048 CET | 443 | 49738 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:42:03.939392090 CET | 49738 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:42:03.939405918 CET | 443 | 49738 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:42:03.986144066 CET | 49738 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:42:04.284317970 CET | 49740 | 80 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:04.284457922 CET | 49741 | 80 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:04.289134026 CET | 80 | 49740 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:04.289197922 CET | 80 | 49741 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:04.289208889 CET | 49740 | 80 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:04.289249897 CET | 49741 | 80 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:04.295490980 CET | 49740 | 80 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:04.300362110 CET | 80 | 49740 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:04.751427889 CET | 80 | 49740 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:04.764627934 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:04.764681101 CET | 443 | 49743 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:04.764744997 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:04.764934063 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:04.764949083 CET | 443 | 49743 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:04.804864883 CET | 49740 | 80 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.269697905 CET | 443 | 49743 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.270112038 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.270144939 CET | 443 | 49743 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.271189928 CET | 443 | 49743 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.272861958 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.278945923 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.278945923 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.278964996 CET | 443 | 49743 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.279016018 CET | 443 | 49743 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.323007107 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.323016882 CET | 443 | 49743 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.376862049 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.389888048 CET | 443 | 49743 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.389998913 CET | 443 | 49743 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.390455961 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.390472889 CET | 443 | 49743 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.390501022 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.390501022 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.390548944 CET | 49743 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.393642902 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.393687010 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.393778086 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.394622087 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.394644976 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.846354008 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.846940994 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.846971035 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.847325087 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.847964048 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.848023891 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.848294973 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.891371965 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.969609022 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.969690084 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.969727993 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.969747066 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.969769955 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.969815969 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.970314026 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.970365047 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.970410109 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.970417023 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.970849991 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.970882893 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.970899105 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.970905066 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.970944881 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.974378109 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.983705997 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.983753920 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:05.983762026 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.983776093 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:05.983835936 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.021740913 CET | 49744 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.021776915 CET | 443 | 49744 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.023785114 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.023900986 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.023973942 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.024230957 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.024247885 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.025584936 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.025619984 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.025684118 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.026154995 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.026169062 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.037108898 CET | 49747 | 443 | 192.168.2.4 | 157.240.0.35 |
Feb 6, 2025 01:42:06.037134886 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:06.037194967 CET | 49747 | 443 | 192.168.2.4 | 157.240.0.35 |
Feb 6, 2025 01:42:06.037425995 CET | 49747 | 443 | 192.168.2.4 | 157.240.0.35 |
Feb 6, 2025 01:42:06.037441969 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:06.475776911 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.476098061 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.476128101 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.476464033 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.477088928 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.477140903 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.477406025 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.477662086 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.477893114 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.477916002 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.478219986 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.478746891 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.478801966 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.478909969 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.519332886 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.519336939 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.593805075 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.593976974 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594022036 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594034910 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.594052076 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594099045 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.594342947 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594600916 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594726086 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594753981 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594774008 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.594789982 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594800949 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594837904 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.594854116 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594904900 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.594911098 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594922066 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594953060 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.594958067 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.594990015 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.595032930 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.595037937 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.595072031 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.595117092 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.595124006 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.595525980 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.595572948 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.595580101 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.596506119 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.596537113 CET | 443 | 49746 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.596595049 CET | 49746 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.602220058 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.602297068 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.602305889 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.644356966 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.681504965 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.681577921 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.681610107 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.681632042 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.681644917 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.681685925 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.681687117 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.681695938 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.681741953 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.681751013 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.681943893 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.681976080 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.681986094 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.681996107 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.682030916 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.682030916 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.682041883 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.682087898 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.682903051 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.682971001 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.683007002 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.683013916 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.683022976 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.683059931 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.683065891 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.683109999 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.683147907 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.683150053 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.683161020 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.683196068 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.683237076 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.683290958 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.683676004 CET | 49745 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:06.683698893 CET | 443 | 49745 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:06.688254118 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:06.691884041 CET | 49747 | 443 | 192.168.2.4 | 157.240.0.35 |
Feb 6, 2025 01:42:06.691922903 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:06.692902088 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:06.692979097 CET | 49747 | 443 | 192.168.2.4 | 157.240.0.35 |
Feb 6, 2025 01:42:06.694451094 CET | 49747 | 443 | 192.168.2.4 | 157.240.0.35 |
Feb 6, 2025 01:42:06.694514990 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:06.694587946 CET | 49747 | 443 | 192.168.2.4 | 157.240.0.35 |
Feb 6, 2025 01:42:06.694596052 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:06.737145901 CET | 49747 | 443 | 192.168.2.4 | 157.240.0.35 |
Feb 6, 2025 01:42:07.000585079 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.000688076 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.000760078 CET | 49747 | 443 | 192.168.2.4 | 157.240.0.35 |
Feb 6, 2025 01:42:07.000792980 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.001328945 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.001404047 CET | 49747 | 443 | 192.168.2.4 | 157.240.0.35 |
Feb 6, 2025 01:42:07.001693964 CET | 49747 | 443 | 192.168.2.4 | 157.240.0.35 |
Feb 6, 2025 01:42:07.001712084 CET | 443 | 49747 | 157.240.0.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.009898901 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.009924889 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.010000944 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.010200977 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.010212898 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.020772934 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:07.020829916 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.020900011 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:07.021073103 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:07.021087885 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.471369028 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.471929073 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.471946001 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.472973108 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.473061085 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.473376989 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.473439932 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.473495960 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.517291069 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.517303944 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.569960117 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.586621046 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.586740017 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.586771965 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.586812019 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.586839914 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.586883068 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.587094069 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.595748901 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.595787048 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.595841885 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.595849991 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.595896006 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.596254110 CET | 49750 | 443 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:07.596272945 CET | 443 | 49750 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:07.734302044 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.736859083 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:07.736898899 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.737773895 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.737855911 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:07.739486933 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:07.739546061 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.739962101 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:07.739970922 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:07.782857895 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:08.008121967 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:08.008209944 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:08.008269072 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:08.008268118 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:08.008302927 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:08.008321047 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:08.008325100 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:08.008368015 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:08.042402029 CET | 49751 | 443 | 192.168.2.4 | 157.240.253.35 |
Feb 6, 2025 01:42:08.042424917 CET | 443 | 49751 | 157.240.253.35 | 192.168.2.4 |
Feb 6, 2025 01:42:13.679069996 CET | 443 | 49738 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:42:13.679136038 CET | 443 | 49738 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:42:13.679217100 CET | 49738 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:42:15.409751892 CET | 49738 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:42:15.409778118 CET | 443 | 49738 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:42:15.690129995 CET | 49723 | 80 | 192.168.2.4 | 2.22.50.110 |
Feb 6, 2025 01:42:15.695091963 CET | 80 | 49723 | 2.22.50.110 | 192.168.2.4 |
Feb 6, 2025 01:42:15.695147991 CET | 49723 | 80 | 192.168.2.4 | 2.22.50.110 |
Feb 6, 2025 01:42:49.299118996 CET | 49741 | 80 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:49.306911945 CET | 80 | 49741 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:42:49.752257109 CET | 49740 | 80 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:42:49.757230043 CET | 80 | 49740 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:43:03.050314903 CET | 49820 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:43:03.050355911 CET | 443 | 49820 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:43:03.050436974 CET | 49820 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:43:03.050664902 CET | 49820 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:43:03.050676107 CET | 443 | 49820 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:43:03.847559929 CET | 443 | 49820 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:43:03.848007917 CET | 49820 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:43:03.848025084 CET | 443 | 49820 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:43:03.848539114 CET | 443 | 49820 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:43:03.848864079 CET | 49820 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:43:03.848931074 CET | 443 | 49820 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:43:03.892823935 CET | 49820 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:43:04.689814091 CET | 49724 | 80 | 192.168.2.4 | 199.232.214.172 |
Feb 6, 2025 01:43:04.694869995 CET | 80 | 49724 | 199.232.214.172 | 192.168.2.4 |
Feb 6, 2025 01:43:04.694926023 CET | 49724 | 80 | 192.168.2.4 | 199.232.214.172 |
Feb 6, 2025 01:43:05.410197020 CET | 49741 | 80 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:43:05.415380001 CET | 80 | 49741 | 185.199.108.153 | 192.168.2.4 |
Feb 6, 2025 01:43:05.415433884 CET | 49741 | 80 | 192.168.2.4 | 185.199.108.153 |
Feb 6, 2025 01:43:13.724277973 CET | 443 | 49820 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:43:13.724335909 CET | 443 | 49820 | 216.58.206.68 | 192.168.2.4 |
Feb 6, 2025 01:43:13.724380016 CET | 49820 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:43:15.410573006 CET | 49820 | 443 | 192.168.2.4 | 216.58.206.68 |
Feb 6, 2025 01:43:15.410608053 CET | 443 | 49820 | 216.58.206.68 | 192.168.2.4 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Feb 6, 2025 01:41:59.129642963 CET | 53 | 58884 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:41:59.131921053 CET | 53 | 65157 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:00.213895082 CET | 53 | 61153 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:02.987196922 CET | 50506 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:02.987332106 CET | 60287 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:02.993804932 CET | 53 | 60287 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:02.994267941 CET | 53 | 50506 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:04.274085045 CET | 55070 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:04.274410963 CET | 62291 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:04.283360958 CET | 53 | 55070 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:04.283579111 CET | 53 | 62291 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:04.754534006 CET | 51076 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:04.754683018 CET | 53605 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:04.763478994 CET | 53 | 51076 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:04.764256001 CET | 53 | 53605 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:06.029500961 CET | 57652 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:06.029743910 CET | 50928 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:06.036345005 CET | 53 | 50928 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:06.036449909 CET | 53 | 57652 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:06.789861917 CET | 53 | 61437 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:07.013022900 CET | 59905 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:07.013226032 CET | 62280 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:07.019699097 CET | 53 | 59905 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:07.020292997 CET | 53 | 62280 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:16.274765015 CET | 138 | 138 | 192.168.2.4 | 192.168.2.255 |
Feb 6, 2025 01:42:17.260513067 CET | 53 | 59054 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:19.418490887 CET | 63996 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:19.418864965 CET | 64459 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:20.439675093 CET | 55536 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:20.440110922 CET | 61081 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:22.472037077 CET | 58332 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:23.428364038 CET | 53 | 64459 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:23.475569963 CET | 58332 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:24.448745966 CET | 53 | 55536 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:24.449831009 CET | 53 | 61081 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:24.487710953 CET | 58332 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:25.329241037 CET | 53 | 63996 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:26.482230902 CET | 53 | 58332 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:26.482247114 CET | 53 | 58332 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:26.482254982 CET | 53 | 58332 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:26.510296106 CET | 49443 | 53 | 192.168.2.4 | 8.8.8.8 |
Feb 6, 2025 01:42:26.510448933 CET | 53212 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:26.517086983 CET | 53 | 53212 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:26.518598080 CET | 53 | 49443 | 8.8.8.8 | 192.168.2.4 |
Feb 6, 2025 01:42:36.156843901 CET | 53 | 62639 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:51.237675905 CET | 61528 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:52.252649069 CET | 61528 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:53.268012047 CET | 61528 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:42:55.246788025 CET | 53 | 61528 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:55.246802092 CET | 53 | 61528 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:55.246822119 CET | 53 | 61528 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:58.668553114 CET | 53 | 57068 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:42:59.213663101 CET | 53 | 49476 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:43:11.669789076 CET | 49966 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:43:12.674448013 CET | 49966 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:43:13.689884901 CET | 49966 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:43:15.689867020 CET | 49966 | 53 | 192.168.2.4 | 1.1.1.1 |
Feb 6, 2025 01:43:17.579603910 CET | 53 | 49966 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:43:17.579617977 CET | 53 | 49966 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:43:17.579627037 CET | 53 | 49966 | 1.1.1.1 | 192.168.2.4 |
Feb 6, 2025 01:43:17.579636097 CET | 53 | 49966 | 1.1.1.1 | 192.168.2.4 |
Timestamp | Source IP | Dest IP | Checksum | Code | Type |
---|---|---|---|---|---|
Feb 6, 2025 01:42:23.428463936 CET | 192.168.2.4 | 1.1.1.1 | c1fa | (Port unreachable) | Destination Unreachable |
Feb 6, 2025 01:42:24.448920965 CET | 192.168.2.4 | 1.1.1.1 | c1fa | (Port unreachable) | Destination Unreachable |
Feb 6, 2025 01:42:25.329303980 CET | 192.168.2.4 | 1.1.1.1 | c1fa | (Port unreachable) | Destination Unreachable |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Feb 6, 2025 01:42:02.987196922 CET | 192.168.2.4 | 1.1.1.1 | 0x4cca | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:02.987332106 CET | 192.168.2.4 | 1.1.1.1 | 0x9103 | Standard query (0) | 65 | IN (0x0001) | false | |
Feb 6, 2025 01:42:04.274085045 CET | 192.168.2.4 | 1.1.1.1 | 0xc09d | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:04.274410963 CET | 192.168.2.4 | 1.1.1.1 | 0xe8ec | Standard query (0) | 65 | IN (0x0001) | false | |
Feb 6, 2025 01:42:04.754534006 CET | 192.168.2.4 | 1.1.1.1 | 0x37a9 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:04.754683018 CET | 192.168.2.4 | 1.1.1.1 | 0xfc62 | Standard query (0) | 65 | IN (0x0001) | false | |
Feb 6, 2025 01:42:06.029500961 CET | 192.168.2.4 | 1.1.1.1 | 0xf655 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:06.029743910 CET | 192.168.2.4 | 1.1.1.1 | 0x12d5 | Standard query (0) | 65 | IN (0x0001) | false | |
Feb 6, 2025 01:42:07.013022900 CET | 192.168.2.4 | 1.1.1.1 | 0x888a | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:07.013226032 CET | 192.168.2.4 | 1.1.1.1 | 0x8f79 | Standard query (0) | 65 | IN (0x0001) | false | |
Feb 6, 2025 01:42:19.418490887 CET | 192.168.2.4 | 1.1.1.1 | 0x16aa | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:19.418864965 CET | 192.168.2.4 | 1.1.1.1 | 0x58d8 | Standard query (0) | 65 | IN (0x0001) | false | |
Feb 6, 2025 01:42:20.439675093 CET | 192.168.2.4 | 1.1.1.1 | 0x3d33 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:20.440110922 CET | 192.168.2.4 | 1.1.1.1 | 0x131f | Standard query (0) | 65 | IN (0x0001) | false | |
Feb 6, 2025 01:42:22.472037077 CET | 192.168.2.4 | 1.1.1.1 | 0xbfb1 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:23.475569963 CET | 192.168.2.4 | 1.1.1.1 | 0xbfb1 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:24.487710953 CET | 192.168.2.4 | 1.1.1.1 | 0xbfb1 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:26.510296106 CET | 192.168.2.4 | 8.8.8.8 | 0x4672 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:26.510448933 CET | 192.168.2.4 | 1.1.1.1 | 0x2989 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:51.237675905 CET | 192.168.2.4 | 1.1.1.1 | 0xcff1 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:52.252649069 CET | 192.168.2.4 | 1.1.1.1 | 0xcff1 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:53.268012047 CET | 192.168.2.4 | 1.1.1.1 | 0xcff1 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:43:11.669789076 CET | 192.168.2.4 | 1.1.1.1 | 0xa372 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:43:12.674448013 CET | 192.168.2.4 | 1.1.1.1 | 0xa372 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:43:13.689884901 CET | 192.168.2.4 | 1.1.1.1 | 0xa372 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:43:15.689867020 CET | 192.168.2.4 | 1.1.1.1 | 0xa372 | Standard query (0) | A (IP address) | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Feb 6, 2025 01:42:02.993804932 CET | 1.1.1.1 | 192.168.2.4 | 0x9103 | No error (0) | 65 | IN (0x0001) | false | |||
Feb 6, 2025 01:42:02.994267941 CET | 1.1.1.1 | 192.168.2.4 | 0x4cca | No error (0) | 216.58.206.68 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:04.283360958 CET | 1.1.1.1 | 192.168.2.4 | 0xc09d | No error (0) | 185.199.108.153 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:04.283360958 CET | 1.1.1.1 | 192.168.2.4 | 0xc09d | No error (0) | 185.199.109.153 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:04.283360958 CET | 1.1.1.1 | 192.168.2.4 | 0xc09d | No error (0) | 185.199.110.153 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:04.283360958 CET | 1.1.1.1 | 192.168.2.4 | 0xc09d | No error (0) | 185.199.111.153 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:04.763478994 CET | 1.1.1.1 | 192.168.2.4 | 0x37a9 | No error (0) | 185.199.108.153 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:04.763478994 CET | 1.1.1.1 | 192.168.2.4 | 0x37a9 | No error (0) | 185.199.109.153 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:04.763478994 CET | 1.1.1.1 | 192.168.2.4 | 0x37a9 | No error (0) | 185.199.110.153 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:04.763478994 CET | 1.1.1.1 | 192.168.2.4 | 0x37a9 | No error (0) | 185.199.111.153 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:06.036345005 CET | 1.1.1.1 | 192.168.2.4 | 0x12d5 | No error (0) | star-mini.c10r.facebook.com | CNAME (Canonical name) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:06.036345005 CET | 1.1.1.1 | 192.168.2.4 | 0x12d5 | No error (0) | 65 | IN (0x0001) | false | |||
Feb 6, 2025 01:42:06.036345005 CET | 1.1.1.1 | 192.168.2.4 | 0x12d5 | No error (0) | 65 | IN (0x0001) | false | |||
Feb 6, 2025 01:42:06.036449909 CET | 1.1.1.1 | 192.168.2.4 | 0xf655 | No error (0) | star-mini.c10r.facebook.com | CNAME (Canonical name) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:06.036449909 CET | 1.1.1.1 | 192.168.2.4 | 0xf655 | No error (0) | 157.240.0.35 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:07.019699097 CET | 1.1.1.1 | 192.168.2.4 | 0x888a | No error (0) | star-mini.c10r.facebook.com | CNAME (Canonical name) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:07.019699097 CET | 1.1.1.1 | 192.168.2.4 | 0x888a | No error (0) | 157.240.253.35 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:07.020292997 CET | 1.1.1.1 | 192.168.2.4 | 0x8f79 | No error (0) | star-mini.c10r.facebook.com | CNAME (Canonical name) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:07.020292997 CET | 1.1.1.1 | 192.168.2.4 | 0x8f79 | No error (0) | 65 | IN (0x0001) | false | |||
Feb 6, 2025 01:42:07.020292997 CET | 1.1.1.1 | 192.168.2.4 | 0x8f79 | No error (0) | 65 | IN (0x0001) | false | |||
Feb 6, 2025 01:42:23.428364038 CET | 1.1.1.1 | 192.168.2.4 | 0x58d8 | Server failure (2) | none | none | 65 | IN (0x0001) | false | |
Feb 6, 2025 01:42:24.448745966 CET | 1.1.1.1 | 192.168.2.4 | 0x3d33 | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:24.449831009 CET | 1.1.1.1 | 192.168.2.4 | 0x131f | Server failure (2) | none | none | 65 | IN (0x0001) | false | |
Feb 6, 2025 01:42:25.329241037 CET | 1.1.1.1 | 192.168.2.4 | 0x16aa | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:26.482230902 CET | 1.1.1.1 | 192.168.2.4 | 0xbfb1 | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:26.482247114 CET | 1.1.1.1 | 192.168.2.4 | 0xbfb1 | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:26.482254982 CET | 1.1.1.1 | 192.168.2.4 | 0xbfb1 | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:26.517086983 CET | 1.1.1.1 | 192.168.2.4 | 0x2989 | No error (0) | 172.217.16.206 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:26.518598080 CET | 8.8.8.8 | 192.168.2.4 | 0x4672 | No error (0) | 142.250.185.110 | A (IP address) | IN (0x0001) | false | ||
Feb 6, 2025 01:42:55.246788025 CET | 1.1.1.1 | 192.168.2.4 | 0xcff1 | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:55.246802092 CET | 1.1.1.1 | 192.168.2.4 | 0xcff1 | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:42:55.246822119 CET | 1.1.1.1 | 192.168.2.4 | 0xcff1 | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:43:17.579603910 CET | 1.1.1.1 | 192.168.2.4 | 0xa372 | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:43:17.579617977 CET | 1.1.1.1 | 192.168.2.4 | 0xa372 | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:43:17.579627037 CET | 1.1.1.1 | 192.168.2.4 | 0xa372 | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false | |
Feb 6, 2025 01:43:17.579636097 CET | 1.1.1.1 | 192.168.2.4 | 0xa372 | Server failure (2) | none | none | A (IP address) | IN (0x0001) | false |
|
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.4 | 49740 | 185.199.108.153 | 80 | 6036 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Feb 6, 2025 01:42:04.295490980 CET | 453 | OUT | |
Feb 6, 2025 01:42:04.751427889 CET | 722 | IN | |
Feb 6, 2025 01:42:49.752257109 CET | 6 | OUT |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.2.4 | 49741 | 185.199.108.153 | 80 | 6036 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
Feb 6, 2025 01:42:49.299118996 CET | 6 | OUT |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.2.4 | 49743 | 185.199.108.153 | 443 | 6036 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-02-06 00:42:05 UTC | 681 | OUT | |
2025-02-06 00:42:05 UTC | 556 | IN | |
2025-02-06 00:42:05 UTC | 162 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.2.4 | 49744 | 185.199.108.153 | 443 | 6036 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-02-06 00:42:05 UTC | 682 | OUT | |
2025-02-06 00:42:05 UTC | 734 | IN | |
2025-02-06 00:42:05 UTC | 1378 | IN | |
2025-02-06 00:42:05 UTC | 1378 | IN | |
2025-02-06 00:42:05 UTC | 1378 | IN | |
2025-02-06 00:42:05 UTC | 1378 | IN | |
2025-02-06 00:42:05 UTC | 1378 | IN | |
2025-02-06 00:42:05 UTC | 1378 | IN | |
2025-02-06 00:42:05 UTC | 1378 | IN | |
2025-02-06 00:42:05 UTC | 1378 | IN | |
2025-02-06 00:42:05 UTC | 1378 | IN | |
2025-02-06 00:42:05 UTC | 1378 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
2 | 192.168.2.4 | 49745 | 185.199.108.153 | 443 | 6036 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-02-06 00:42:06 UTC | 586 | OUT | |
2025-02-06 00:42:06 UTC | 753 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
3 | 192.168.2.4 | 49746 | 185.199.108.153 | 443 | 6036 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-02-06 00:42:06 UTC | 590 | OUT | |
2025-02-06 00:42:06 UTC | 753 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 1378 | IN | |
2025-02-06 00:42:06 UTC | 878 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
4 | 192.168.2.4 | 49747 | 157.240.0.35 | 443 | 6036 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-02-06 00:42:06 UTC | 614 | OUT | |
2025-02-06 00:42:06 UTC | 1102 | IN | |
2025-02-06 00:42:06 UTC | 1464 | IN | |
2025-02-06 00:42:06 UTC | 2988 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
5 | 192.168.2.4 | 49750 | 185.199.108.153 | 443 | 6036 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-02-06 00:42:07 UTC | 634 | OUT | |
2025-02-06 00:42:07 UTC | 753 | IN | |
2025-02-06 00:42:07 UTC | 1378 | IN | |
2025-02-06 00:42:07 UTC | 1378 | IN | |
2025-02-06 00:42:07 UTC | 1378 | IN | |
2025-02-06 00:42:07 UTC | 1378 | IN | |
2025-02-06 00:42:07 UTC | 1378 | IN | |
2025-02-06 00:42:07 UTC | 1378 | IN | |
2025-02-06 00:42:07 UTC | 1111 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
6 | 192.168.2.4 | 49751 | 157.240.253.35 | 443 | 6036 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2025-02-06 00:42:07 UTC | 366 | OUT | |
2025-02-06 00:42:08 UTC | 1196 | IN | |
2025-02-06 00:42:08 UTC | 1488 | IN | |
2025-02-06 00:42:08 UTC | 2988 | IN |
Click to jump to process
Click to jump to process
back
Click to dive into process behavior distribution
Click to jump to process
Target ID: | 0 |
Start time: | 19:41:53 |
Start date: | 05/02/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 2 |
Start time: | 19:41:57 |
Start date: | 05/02/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 3 |
Start time: | 19:42:03 |
Start date: | 05/02/2025 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff76e190000 |
File size: | 3'242'272 bytes |
MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | true |
Target ID: | 7 |
Start time: | 19:42:33 |
Start date: | 05/02/2025 |
Path: | C:\Windows\System32\msdt.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff7b8120000 |
File size: | 499'200 bytes |
MD5 hash: | 3AE6BFDF0257B303EDD695DA183C8462 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 10 |
Start time: | 19:42:37 |
Start date: | 05/02/2025 |
Path: | C:\Windows\System32\netsh.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff627a20000 |
File size: | 96'768 bytes |
MD5 hash: | 6F1E6DD688818BC3D1391D0CC7D597EB |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | true |