Edit tour
Windows
Analysis Report
letter2481-fitocosmetic.pdf
Overview
General Information
| Sample name: | letter2481-fitocosmetic.pdf |
| Analysis ID: | 1654675 |
| MD5: | 2d0783705f8a7528cd7081073c84ce13 |
| SHA1: | 8ac68a853acefdedaa7bde8fe663a2c13443894d |
| SHA256: | f103987692e2abe9c58a67dff728b181fe5f30f9ad224c714ec908a4b4c82fb3 |
| Infos: |  |
 | |
Detection
HTMLPhisher
| Score: | 60 |
| Range: | 0 - 100 |
| Confidence: | 100% |
Signatures
Antivirus detection for URL or domain
Yara detected HtmlPhish10
AI detected landing page (webpage, office document or email)
Creates files inside the system directory
Deletes files inside the Windows folder
HTML body contains low number of good links
HTML body contains password input but no form action
IP address seen in connection with other malware
Invalid 'forgot password' link found
Javascript checks online IP of machine
Classification
- System is w10x64_ra
Acrobat.exe (PID: 7024 cmdline: "C:\Progra m Files\Ad obe\Acroba t DC\Acrob at\Acrobat .exe" "C:\ Users\user \Desktop\l etter2481- fitocosmet ic.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C) 
AcroCEF.exe (PID: 6240 cmdline: "C:\Progra m Files\Ad obe\Acroba t DC\Acrob at\acrocef _1\AcroCEF .exe" --ba ckgroundco lor=167772 15 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE) - AcroCEF.exe (PID: 6160 cmdline:
"C:\Progra m Files\Ad obe\Acroba t DC\Acrob at\acrocef _1\AcroCEF .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --log-seve rity=disab le --user- agent-prod uct="Reade rServices/ 23.6.20320 Chrome/10 5.0.0.0" - -lang=en-U S --log-fi le="C:\Pro gram Files \Adobe\Acr obat DC\Ac robat\acro cef_1\debu g.log" --m ojo-platfo rm-channel -handle=15 96 --field -trial-han dle=1576,i ,171292214 0142358243 1,89662131 8493472785 6,131072 - -disable-f eatures=Ba ckForwardC ache,Calcu lateNative WinOcclusi on,WinUseB rowserSpel lChecker / prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)
chrome.exe (PID: 6440 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --s tart-maxim ized --sin gle-argume nt about:b lank MD5: E81F54E6C1129887AEA47E7D092680BF) - chrome.exe (PID: 5320 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --no-pre-r ead-main-d ll --field -trial-han dle=2040,i ,460982005 7178568642 ,108419312 1573412038 2,262144 - -disable-f eatures=Op timization GuideModel Downloadin g,Optimiza tionHints, Optimizati onHintsFet ching,Opti mizationTa rgetPredic tion --var iations-se ed-version --mojo-pl atform-cha nnel-handl e=2112 /pr efetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)
- chrome.exe (PID: 7532 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --s tart-maxim ized --sin gle-argume nt https:/ /tinyurl.c om/4dtdkpf n MD5: E81F54E6C1129887AEA47E7D092680BF)
- cleanup
⊘No configs have been found
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_HtmlPhish_10 | Yara detected HtmlPhish_10 | Joe Security |
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_HtmlPhish_10 | Yara detected HtmlPhish_10 | Joe Security |
⊘No Sigma rule has matched
⊘No Suricata rule has matched
- • AV Detection
- • Phishing
- • Compliance
- • Networking
- • System Summary
- • Hooking and other Techniques for Hiding and Protection
- • Malware Analysis System Evasion
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | Avira URL Cloud: | ||
Phishing | |
|---|
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | Joe Sandbox AI: | ||
| Source: | Joe Sandbox AI: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File deleted: | Jump to behavior | ||
| Source: | Classification label: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Window detected: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Initial sample: | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information queried: | Jump to behavior | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | 1 Browser Extensions | 1 Process Injection | 11 Masquerading | OS Credential Dumping | 1 Process Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | Boot or Logon Initialization Scripts | 1 Process Injection | LSASS Memory | 1 System Information Discovery | Remote Desktop Protocol | Data from Removable Media | 3 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | 1 File Deletion | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 4 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 3 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs |
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | Avira URL Cloud | malware | ||
| 0% | Avira URL Cloud | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| n.sni.global.fastly.net | 151.101.1.91 | true | false | high | |
| bg.microsoft.map.fastly.net | 199.232.214.172 | true | false | high | |
| tinyurl.com | 104.17.112.233 | true | false | high | |
| shareddocview.com | 192.142.10.5 | true | false | high | |
| e8652.dscx.akamaiedge.net | 23.197.253.105 | true | false | high | |
| dsaict.odoo.com | 35.195.5.115 | true | false | unknown | |
| d72ilj4fw1mla.cloudfront.net | 13.226.94.10 | true | false | unknown | |
| cdn.tailwindcss.com | 172.67.41.16 | true | false | high | |
| www.google.com | 142.251.40.228 | true | false | high | |
| upload.wikimedia.org | 208.80.154.240 | true | false | high | |
| dualstack.com.imgix.map.fastly.net | 151.101.2.208 | true | false | high | |
| images.sampletemplates.com | 34.110.143.245 | true | false | high | |
| t4.ftcdn.net | unknown | unknown | false | high | |
| x1.i.lencr.org | unknown | unknown | false | high | |
| static-00.iconduck.com | unknown | unknown | false | high | |
| www.dsaict.eu | unknown | unknown | false | high | |
| images.unsplash.com | unknown | unknown | false | high |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false | high | ||
| false | high | ||
| false | high | ||
| false | high | ||
| true | unknown | ||
| false | high | ||
| false | high | ||
| false | high | ||
| true |
| unknown | |
| false | high | ||
| false |
| unknown | |
| false | high |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 34.110.143.245 | images.sampletemplates.com | United States | 15169 | GOOGLEUS | false | |
| 172.67.41.16 | cdn.tailwindcss.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 151.101.1.91 | n.sni.global.fastly.net | United States | 54113 | FASTLYUS | false | |
| 142.251.40.228 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 13.226.94.91 | unknown | United States | 16509 | AMAZON-02US | false | |
| 23.197.253.105 | e8652.dscx.akamaiedge.net | United States | 16625 | AKAMAI-ASUS | false | |
| 13.226.94.10 | d72ilj4fw1mla.cloudfront.net | United States | 16509 | AMAZON-02US | false | |
| 208.80.154.240 | upload.wikimedia.org | United States | 14907 | WIKIMEDIAUS | false | |
| 151.101.2.208 | dualstack.com.imgix.map.fastly.net | United States | 54113 | FASTLYUS | false | |
| 192.142.10.5 | shareddocview.com | South Africa | 36916 | X-DSL-NET1ZA | false | |
| 104.17.112.233 | tinyurl.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 35.195.5.115 | dsaict.odoo.com | United States | 15169 | GOOGLEUS | false |
| IP |
|---|
| 192.168.2.16 |
| Joe Sandbox version: | 42.0.0 Malachite |
| Analysis ID: | 1654675 |
| Start date and time: | 2025-04-02 14:28:05 +02:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 4m 38s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 22 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | letter2481-fitocosmetic.pdf |
| Detection: | MAL |
| Classification: | mal60.phis.winPDF@37/70@33/13 |
| Cookbook Comments: |
|
- Exclude process from analysis
(whitelisted): MpCmdRun.exe, s ppsvc.exe, SIHClient.exe, Sgrm Broker.exe, backgroundTaskHost .exe, conhost.exe, svchost.exe - Excluded IPs from analysis (wh
itelisted): 142.251.41.3, 142. 251.40.238, 142.251.32.110, 17 2.253.115.84, 142.250.80.78, 1 42.250.65.206, 23.51.56.185, 1 42.250.65.174, 3.233.129.217, 52.22.41.97, 52.6.155.20, 3.21 9.243.226, 162.159.61.3, 172.6 4.41.3, 142.250.80.106, 142.25 0.176.202, 142.251.41.10, 142. 250.80.74, 142.250.72.106, 142 .250.64.74, 142.251.40.170, 14 2.251.32.106, 142.251.40.202, 142.251.40.106, 142.250.80.42, 142.250.80.10, 142.251.40.234 , 142.251.40.138, 142.251.35.1 70, 142.250.64.106, 199.232.21 4.172, 23.44.136.159, 23.44.13 6.184, 23.44.136.152, 23.206.1 21.49, 23.206.121.36, 23.44.13 6.138, 23.44.136.185, 23.204.1 52.210, 23.204.152.213, 142.25 1.40.142, 142.251.40.227, 142. 250.65.238, 142.250.64.78, 142 .250.81.238, 4.245.163.56, 23. 56.162.204, 23.204.23.20, 20.1 90.152.21, 23.44.203.79 - Excluded domains from analysis
(whitelisted): e4578.dscg.aka maiedge.net, chrome.cloudflare -dns.com, slscr.update.microso ft.com, clientservices.googlea pis.com, acroipm2.adobe.com, c lients2.google.com, redirector .gvt1.com, login.live.com, ssl -delivery.adobe.com.edgekey.ne t, a122.dscd.akamai.net, updat e.googleapis.com, wu-b-net.tra fficmanager.net, www.bing.com, clients1.google.com, fs.micro soft.com, accounts.google.com, content-autofill.googleapis.c om, ctldl.windowsupdate.com.de livery.microsoft.com, acroipm2 .adobe.com.edgesuite.net, ctld l.windowsupdate.com, p13n.adob e.io, fe3cr.delivery.mp.micros oft.com, edgedl.me.gvt1.com, a rmmf.adobe.com, clients.l.goog le.com, geo2.adobe.com - Not all processes where analyz
ed, report is missing behavior information - Report size exceeded maximum c
apacity and may have missing b ehavior information. - Report size getting too big, t
oo many NtOpenFile calls found . - Some HTTPS proxied raw data pa
ckets have been limited to 10 per session. Please view the P CAPs for the complete data.
| Time | Type | Description |
|---|---|---|
| 08:29:16 | API Interceptor |
| Source | URL |
|---|---|
| Screenshot | https://tinyurl.com/4dtdkpfn |
| Screenshot | https://tinyurl.com/4dtdkpfn |
| Screenshot | https://tinyurl.com/4dtdkpfn |
| Screenshot | https://tinyurl.com/4dtdkpfn |
| Screenshot | https://tinyurl.com/4dtdkpfn |
| Screenshot | https://tinyurl.com/4dtdkpfn |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 13.226.94.91 | Get hash | malicious | Unknown | Browse | ||
| 23.197.253.105 | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| 172.67.41.16 | Get hash | malicious | HTMLPhisher | Browse | ||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| 151.101.1.91 | Get hash | malicious | CAPTCHA Scam ClickFix | Browse | ||
| Get hash | malicious | HTMLPhisher, Invisible JS, Tycoon2FA | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher, Invisible JS, Tycoon2FA | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Credential Flusher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| 13.226.94.10 | Get hash | malicious | HTMLPhisher | Browse | ||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| e8652.dscx.akamaiedge.net | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| n.sni.global.fastly.net | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| tinyurl.com | Get hash | malicious | Braodo | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Braodo | Browse |
| ||
| Get hash | malicious | Braodo | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| shareddocview.com | Get hash | malicious | HTMLPhisher | Browse |
| |
| bg.microsoft.map.fastly.net | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | RHADAMANTHYS | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Remcos | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Remcos | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| FASTLYUS | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | HTMLPhisher, Invisible JS, Tycoon2FA | Browse |
| ||
| Get hash | malicious | HTMLPhisher, Invisible JS, Tycoon2FA | Browse |
| ||
| Get hash | malicious | HTMLPhisher, Invisible JS, Tycoon2FA | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher, Invisible JS, Tycoon2FA | Browse |
| ||
| Get hash | malicious | Braodo | Browse |
| ||
| CLOUDFLARENETUS | Get hash | malicious | FormBook | Browse |
| |
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher, Invisible JS, Tycoon2FA | Browse |
| ||
| Get hash | malicious | HTMLPhisher, Invisible JS, Tycoon2FA | Browse |
| ||
| Get hash | malicious | Snake Keylogger | Browse |
| ||
| Get hash | malicious | HTMLPhisher, ReCaptcha Phish | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | LummaC Stealer | Browse |
| ||
| Get hash | malicious | HTMLPhisher, Invisible JS, Tycoon2FA | Browse |
| ||
| AMAZON-02US | Get hash | malicious | FormBook | Browse |
| |
| Get hash | malicious | Prometei | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Mirai | Browse |
| ||
| Get hash | malicious | Prometei | Browse |
| ||
| Get hash | malicious | HTMLPhisher, Invisible JS, Tycoon2FA | Browse |
| ||
| Get hash | malicious | Mirai | Browse |
| ||
| Get hash | malicious | HTMLPhisher, Invisible JS, Tycoon2FA | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| AKAMAI-ASUS | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | PRYSMAX STEALER | Browse |
|
⊘No context
⊘No context
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 290 |
| Entropy (8bit): | 5.1832362854139395 |
| Encrypted: | false |
| SSDEEP: | 6:iORvdfeCq2PRN2nKuAl9OmbnIFUtDvdfeGe9Zmw9vdfeGePkwORN2nKuAl9Ombjd:7RvzvaHAahFUtDvE/9vk5JHAaSJ |
| MD5: | 507EE4709B0B3FA735709E010A815191 |
| SHA1: | BE148049A459165BBFCD924B8667B9B0FF27E713 |
| SHA-256: | B3694D71DDED6E3D23DD2B11464D6CC3342853773569EE4104B2CEB5B21B1999 |
| SHA-512: | EB91C335D1B147535C593A269AC061D890F52E139CD94520C9985127EC01061007C8B556F056883F34DB879B3FB7EFA5A548C9FEA108AD8C3659501FD588FC03 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 290 |
| Entropy (8bit): | 5.1832362854139395 |
| Encrypted: | false |
| SSDEEP: | 6:iORvdfeCq2PRN2nKuAl9OmbnIFUtDvdfeGe9Zmw9vdfeGePkwORN2nKuAl9Ombjd:7RvzvaHAahFUtDvE/9vk5JHAaSJ |
| MD5: | 507EE4709B0B3FA735709E010A815191 |
| SHA1: | BE148049A459165BBFCD924B8667B9B0FF27E713 |
| SHA-256: | B3694D71DDED6E3D23DD2B11464D6CC3342853773569EE4104B2CEB5B21B1999 |
| SHA-512: | EB91C335D1B147535C593A269AC061D890F52E139CD94520C9985127EC01061007C8B556F056883F34DB879B3FB7EFA5A548C9FEA108AD8C3659501FD588FC03 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 334 |
| Entropy (8bit): | 5.178251677840285 |
| Encrypted: | false |
| SSDEEP: | 6:iORvdfeUvLsq2PRN2nKuAl9Ombzo2jMGIFUtDvdfeUWu0jZZmw9vdfeUWu0jzkwC:7RvNwvaHAa8uFUtDvNWF9/9vNWFP5JHA |
| MD5: | 4AFCC8570B073C9C6145030F8D5BA05A |
| SHA1: | 5ADE4F6797E6093D8E6CF959AEEB5AE3ECEBE9C0 |
| SHA-256: | 3F62A2D80DA69D7AF7A85DB4451AA9D5503D2F089515DBF929F44F539FDD3EF0 |
| SHA-512: | 2C8197AB2F2800A11695F365822B497570B7CC63D69CA950D3029377CABB261AE0F1EB8E50BF1AC8E336270D791D28BE99DE48DC3E62784EBF3B74AD8B08CD88 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 334 |
| Entropy (8bit): | 5.178251677840285 |
| Encrypted: | false |
| SSDEEP: | 6:iORvdfeUvLsq2PRN2nKuAl9Ombzo2jMGIFUtDvdfeUWu0jZZmw9vdfeUWu0jzkwC:7RvNwvaHAa8uFUtDvNWF9/9vNWFP5JHA |
| MD5: | 4AFCC8570B073C9C6145030F8D5BA05A |
| SHA1: | 5ADE4F6797E6093D8E6CF959AEEB5AE3ECEBE9C0 |
| SHA-256: | 3F62A2D80DA69D7AF7A85DB4451AA9D5503D2F089515DBF929F44F539FDD3EF0 |
| SHA-512: | 2C8197AB2F2800A11695F365822B497570B7CC63D69CA950D3029377CABB261AE0F1EB8E50BF1AC8E336270D791D28BE99DE48DC3E62784EBF3B74AD8B08CD88 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | modified |
| Size (bytes): | 403 |
| Entropy (8bit): | 4.993312766666227 |
| Encrypted: | false |
| SSDEEP: | 12:YHO8sqlOxsBdOg2HXgcaq3QYiubrP7E4T3y:YXsJidMH73QYhbz7nby |
| MD5: | FAA0F6EBA0A3CC2FE1BDC96BEB161769 |
| SHA1: | CF9C7E490D7F5AD08A8164DD62F7353B48C39FDB |
| SHA-256: | 5ABED680ECBA6173CF7C596802C969F0FF0C996C01086D837C4E61C433575D3A |
| SHA-512: | A01E09CC9F3B537523FD7FDA44022F282CF0E8E1F71FCF6716B26EE31F339493194851330CCC8DE46E3A582D75BFC0685261809D85C33FECFFD3045384DA7D37 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 403 |
| Entropy (8bit): | 4.953858338552356 |
| Encrypted: | false |
| SSDEEP: | 12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby |
| MD5: | 4C313FE514B5F4E7E89329630909F8DC |
| SHA1: | 916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56 |
| SHA-256: | 1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873 |
| SHA-512: | 1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205 |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 403 |
| Entropy (8bit): | 4.953858338552356 |
| Encrypted: | false |
| SSDEEP: | 12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby |
| MD5: | 4C313FE514B5F4E7E89329630909F8DC |
| SHA1: | 916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56 |
| SHA-256: | 1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873 |
| SHA-512: | 1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 403 |
| Entropy (8bit): | 4.953858338552356 |
| Encrypted: | false |
| SSDEEP: | 12:YHO8sq/WLksBdOg2H9caq3QYiubrP7E4T3y:YXsRJdMHM3QYhbz7nby |
| MD5: | 4C313FE514B5F4E7E89329630909F8DC |
| SHA1: | 916EED77EC8C9DC90C64FF1E5CC9D04D4674EE56 |
| SHA-256: | 1EE7C151EF264F91FCDCCB6644F62DC33E27A4E829DAAB748DA1DE4426400873 |
| SHA-512: | 1726CAFCBA0121691DFA87A7298E6610BC4C7FD900867FD1B1710811E764918585E56788E08B7CA2CEE001F5DFD110E1BE6F6BBD7C2A7B7E2FC87D3DED210205 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4099 |
| Entropy (8bit): | 5.235341813904748 |
| Encrypted: | false |
| SSDEEP: | 96:OLSw0bSwIAnrRqLX2rSq1OUxu/0OZ0xRBTxekN8xexIYng/Zu:OLT0bTIeYa51Ogu/0OZARBT8kN88Fngk |
| MD5: | 86028905B4DD267148D0765181CD8EF2 |
| SHA1: | 3EE8DCCDCDA755D96CED764F2846C9A0FDD83AC3 |
| SHA-256: | B44CD50A3CF24FF07AD63FCD5A11AC2FEDB5B5438FAAC8672EA46EE031F7C909 |
| SHA-512: | 0DAD5A232FB454BDEF362279FA9267A6C634E3EC998639D1D4278DF3C56CE92511FB8EEBE6A14C5B8A94BA582212FDAA17673D9CA24EF3153C5FE882BB1E7369 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 322 |
| Entropy (8bit): | 5.185573700795535 |
| Encrypted: | false |
| SSDEEP: | 6:iORvdfekzMq2PRN2nKuAl9OmbzNMxIFUtDvdfe2VdxXZmw9vdfe2XRkwORN2nKuP:7Rv1zMvaHAa8jFUtDvRrX/9vd5JHAa8E |
| MD5: | 2D8E5D8F0554EF2C0F6974F5765E8523 |
| SHA1: | 18C916DAD46DAEB5F42C7E9437D94679F823819A |
| SHA-256: | 9B03AB60A732FE4F314BF137E78F31CF3E238514C839426BB98F608810A7CB81 |
| SHA-512: | AEA6AF86F86049829C7ACFF1F04D0D376E9EB94C9D216629FFA71EC87D34CF304CE9DC2308F0C0296282A172E49954F5656E42F11592E75F60188EBE9AB236C4 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 322 |
| Entropy (8bit): | 5.185573700795535 |
| Encrypted: | false |
| SSDEEP: | 6:iORvdfekzMq2PRN2nKuAl9OmbzNMxIFUtDvdfe2VdxXZmw9vdfe2XRkwORN2nKuP:7Rv1zMvaHAa8jFUtDvRrX/9vd5JHAa8E |
| MD5: | 2D8E5D8F0554EF2C0F6974F5765E8523 |
| SHA1: | 18C916DAD46DAEB5F42C7E9437D94679F823819A |
| SHA-256: | 9B03AB60A732FE4F314BF137E78F31CF3E238514C839426BB98F608810A7CB81 |
| SHA-512: | AEA6AF86F86049829C7ACFF1F04D0D376E9EB94C9D216629FFA71EC87D34CF304CE9DC2308F0C0296282A172E49954F5656E42F11592E75F60188EBE9AB236C4 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 65110 |
| Entropy (8bit): | 1.671881786434475 |
| Encrypted: | false |
| SSDEEP: | 192:ZdHcW1J11111HXslsE1oHfXE6Ych61161siXElO7J7Ixfeg6TPfYZ6/2haDwa99b:5/D9/Um9nYfI44MbE+l+r2+ |
| MD5: | EEE3777234CFD5D88DE1D6DE8A5845F5 |
| SHA1: | A3DE2BDD3F97B3882F67681CA10D217CF158C43B |
| SHA-256: | A8BB834D34BBA8A4A0CA9FB7611293476D8DA90BA964E089D1EFE5C20D968356 |
| SHA-512: | AAF57EF38EC96DEDCED67724A3A0410024255ADC2ECDADC17B734E34EA3EAF715FA18829468D8865FB1E9905914AB488DB82138334731C19B989DC300A188D40 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 57344 |
| Entropy (8bit): | 3.291927920232006 |
| Encrypted: | false |
| SSDEEP: | 192:vedRBvVui5V4R4dcQ5V4R4RtYWtEV2UUTTchqGp8F/7/z+FP:veBci5H5FY+EUUUTTcHqFzqFP |
| MD5: | A4D5FECEFE05F21D6F81ACF4D9A788CF |
| SHA1: | 1A9AC236C80F2A2809F7DE374072E2FCCA5A775C |
| SHA-256: | 83BE4623D80FFB402FBDEC4125671DF532845A3828A1B378D99BD243A4FD8FF2 |
| SHA-512: | FF106C6B9E1EA4B1F3E3AB01FAEA21BA24A885E63DDF0C36EB0A8C3C89A9430FE676039C076C50D7C46DC4E809F6A7E35A4BFED64D9033FEBD6121AC547AA5E9 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 16928 |
| Entropy (8bit): | 1.214494166347884 |
| Encrypted: | false |
| SSDEEP: | 24:7+txWqLi+zkrFsgIFsxX3pALXmnHpkDGjmcxBSkomXk+2m9RFTsyg+wmf9Mzm+ZA:7M0qLmFTIF3XmHjBoGGR+jMz+LhZ |
| MD5: | 466FC06E0B1BDB5AD09F94E0B5704405 |
| SHA1: | A123A200C281C6631988683626957B294B44DAC3 |
| SHA-256: | 2DAE0D2295B6E7024B86D03812BF295F9602D276D72F1B915E0BB576DB2BB79C |
| SHA-512: | 962ED4F92DB2E0D44BC0B0A44A4E3EB142DAF9D69425E5ED0D4ED089245B8AD297779042F0A3F9A5DAB41423D1B4B53199ED7A36C603A28474BAD3D6F35891FC |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1391 |
| Entropy (8bit): | 7.705940075877404 |
| Encrypted: | false |
| SSDEEP: | 24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1 |
| MD5: | 0CD2F9E0DA1773E9ED864DA5E370E74E |
| SHA1: | CABD2A79A1076A31F21D253635CB039D4329A5E8 |
| SHA-256: | 96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6 |
| SHA-512: | 3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 73305 |
| Entropy (8bit): | 7.996028107841645 |
| Encrypted: | true |
| SSDEEP: | 1536:krha8mqJ7v3CeFMz/akys7nSTK7QMuK+C/Oh5:kAOFq+Mba9Ok7C/O/ |
| MD5: | 83142242E97B8953C386F988AA694E4A |
| SHA1: | 833ED12FC15B356136DCDD27C61A50F59C5C7D50 |
| SHA-256: | D72761E1A334A754CE8250E3AF7EA4BF25301040929FD88CF9E50B4A9197D755 |
| SHA-512: | BB6DA177BD16D163F377D9B4C63F6D535804137887684C113CC2F643CEAB4F34338C06B5A29213C23D375E95D22EF417EAC928822DFB3688CE9E2DE9D5242D10 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 192 |
| Entropy (8bit): | 2.7464849065063066 |
| Encrypted: | false |
| SSDEEP: | 3:kkFklo2WvfllXlE/HT8kYNNX8RolJuRdxLlGB9lQRYwpDdt:kKx2WQT8rNMa8RdWBwRd |
| MD5: | AEC734578C945A16D4B1CDAA8A56F066 |
| SHA1: | 302A02588CEA27694A0DD4BF44A47D918593AE1D |
| SHA-256: | 2ADF9B10A236DC14A4C772566163E29FE32707DE046003C8A528F2CA9912BCDF |
| SHA-512: | 28632B43D24183402810F1569BA89380C7078D220618E58F0707E6B91664C71F823821E22A5E2DC059F1D092CDDB882A440AFA67722CBF27A2A5E0AB6FDDA644 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 330 |
| Entropy (8bit): | 3.287136292755414 |
| Encrypted: | false |
| SSDEEP: | 6:kKLpGmcQRnSN+SkQlPlEGYRMY9z+4KlDA3RUeqpGVuys1:AmfZkPlE99SNxAhUeq8S |
| MD5: | 8D9A66EBBA085A41D7910C12220455E3 |
| SHA1: | EE283988936CD822C734CA7A07DBCADEE231EF44 |
| SHA-256: | FD8E395EEED5FF1F61DD21D9E8D095B642CEB1D826DA36E893DE500EC5F9A2FC |
| SHA-512: | 25C04B88BF80AA5BA110BF95F8115356933891CE86459455661DDB0E77CA83E07704CB671E9C476F37E9C663982AB870B1794517E44E577C9D8A1B9E7F88AE10 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 295 |
| Entropy (8bit): | 5.357241395153253 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJM3g98kUwPeUkwRe9:YvXKXB+hJPkQWRuUhU5GMbLUkee9 |
| MD5: | 002D8BA9B1E86F76CD3C6152F286599C |
| SHA1: | 38F638BA45151CF06089F794701B453E03E53991 |
| SHA-256: | ACFE89509A972C8B9F97333C1509361DB3BB89C7306C3A5458D332A53DD91A61 |
| SHA-512: | 2651DC717085445EF54B1875AFF967F7581A53F93B65D2D5A290263571C06DC62CB50CF77005DF1A25DB6C193BD98E07654D5F3D2AB300576F8BC36CC5BE7323 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 294 |
| Entropy (8bit): | 5.302606897510845 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJfBoTfXpnrPeUkwRe9:YvXKXB+hJPkQWRuUhU5GWTfXcUkee9 |
| MD5: | 024F99A4E312BE0A20C4E706B9FD2D36 |
| SHA1: | 7674660AFA2EE553D585BF0EE0937F4446BCF55D |
| SHA-256: | 88D74FFD77AE1592AAA373E1DC985477B94A0BC5E12EB46750E71246DC0081BE |
| SHA-512: | EE45269C7CF4AFBE480613154EC56378C6D538BEF3F2F0788FB8BFE35475597E91A6EA3EEB8E8E7935AC3A04087A9FCBDC7DFD256594D994C9076A3A4FAE154F |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 294 |
| Entropy (8bit): | 5.280367967882671 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJfBD2G6UpnrPeUkwRe9:YvXKXB+hJPkQWRuUhU5GR22cUkee9 |
| MD5: | 986B55387811812A0543E907FB9387DF |
| SHA1: | F7ACB7D8E778EDDF6DB9AB6373EFC14AF60C146B |
| SHA-256: | 84B14123090162C4856CBFC0D8F99BD3783CF8F5CDBDE492E5BF49C5A353B03C |
| SHA-512: | D152D491055320E41D64C7F0B919B8D552D79780CC035EC15F6E8DD9726AFAC4716EE4D1895E244AC0E98D9D8F189A77CAC5E9CF72933CD926ED6D5733C5E83D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 285 |
| Entropy (8bit): | 5.345406777186742 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJfPmwrPeUkwRe9:YvXKXB+hJPkQWRuUhU5GH56Ukee9 |
| MD5: | F206C044865E259BBA208A5F5BCDC84A |
| SHA1: | 1670233F1333BDC5669D7C3CA9B1474BECEBEA3D |
| SHA-256: | 8503E1E0682CFADA77CF9D8A9E18798813F85C9C61160E00A5A20F514738AD4B |
| SHA-512: | A01E42AE1DC21FB2A14DC9730043A158EC44ADC46FEBEDEBCC4B8E7DE2F5E206B2C9B112BCDEF4788B717D660BA8B7534A2A2A06CD79868B086722C435A38B27 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2129 |
| Entropy (8bit): | 5.8420163237197675 |
| Encrypted: | false |
| SSDEEP: | 48:YvE+hsUehgly48Y/TWCjiOumNcXwKOpkUk:GiUKgA45/TfZumcOo |
| MD5: | 1A9B011FAD4B595236DF2BE31B811C97 |
| SHA1: | 0FB07F6A60FE2DDB461215FB4E344304A82F0DEA |
| SHA-256: | 8D78424B409C2FC6A86FACE27DBB78B38CAD6F7B087BE169316A4BFC682F2E85 |
| SHA-512: | D9DD9DD351AD843E39965D6A85E40DEA060FFF37CC90BCCB593498F5CDE9EE880CE8827E9C6004A80DF334D48996DC2ACD927FE6444B00667C41621F074C18F7 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 289 |
| Entropy (8bit): | 5.295216186446151 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJf8dPeUkwRe9:YvXKXB+hJPkQWRuUhU5GU8Ukee9 |
| MD5: | 6DE66CC97968D3F8818096C33C8779C8 |
| SHA1: | F049DE51A3DD1A615677210DF719964862E9DCEB |
| SHA-256: | 4E7A6992DE63B7DAF79247FE25745887E7BB3D221EDA2AA0239A131B17F6F9C1 |
| SHA-512: | E28BB698D8BD18FA9E49FE011EBDE5DBAB4EE5005E1499F395CC24CB4BD056904AFE20198E529884460F891568B62D8333C51F5CF5DF664F4BDCCF9FA11F1047 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 292 |
| Entropy (8bit): | 5.297608589976916 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJfQ1rPeUkwRe9:YvXKXB+hJPkQWRuUhU5GY16Ukee9 |
| MD5: | 4D2BAEC7624A99927AD850044F3A3977 |
| SHA1: | 264A15B5B6B192445AB1ED883D631B340480FC3B |
| SHA-256: | B523868F9724A5D1F39CF378522FC80C6A7F30FE84E5EAC46E48F8F51AD51B7E |
| SHA-512: | 3F1BFB1B4586E28C6679B6E6D833184363A5CE675897926EC01794735300943375D16C156746BA1DC86DC713980646ABF8FDA13F37F2E344A24C0F98186E0C8B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2080 |
| Entropy (8bit): | 5.82790752054458 |
| Encrypted: | false |
| SSDEEP: | 48:YvE+hsUNogbN48l/GiyLVzyODVHKOkQLcSmjWAk:GiUOg54Y/IVO48OkQASmc |
| MD5: | D9A76A60F0C239E0189A1979418D5710 |
| SHA1: | 334C8CFCD464242EDCE0973A00810594E87D98FB |
| SHA-256: | C0FBA3F8581637A559F69B15FDFBC3593786378F7F5FE83E73BDAA2D6371E9F2 |
| SHA-512: | 754121BD95BCF2F89C59FA2D6408B66C554155D7ECA0565A5E755DBB6D68EF2C65F744AE2589C6E3F162C636B75BB3C967F2997CB6CB958F77AB65581620C0D9 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 295 |
| Entropy (8bit): | 5.321973686826764 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJfzdPeUkwRe9:YvXKXB+hJPkQWRuUhU5Gb8Ukee9 |
| MD5: | 7857453638C4206C27C1B4E4A2629EC0 |
| SHA1: | 97879F7E0FDEEB15C206DAED512E39D3E2397957 |
| SHA-256: | 04B8BD45CEEF6EA74A9FFD5A903EFA58E3C8D4EB8D7ADF63563BF2D930EEB6E9 |
| SHA-512: | 4349091A93A67BDC22E56E9EEC165FCD150A8F8E69AACF4E2410D60799335ED5F1FC2783BB87D2880C4E34A32F019B91FC704DFD99876DA5682812FF65B625A4 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 289 |
| Entropy (8bit): | 5.302377799745777 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJfYdPeUkwRe9:YvXKXB+hJPkQWRuUhU5Gg8Ukee9 |
| MD5: | 10792B5D08F153BCEC80E2A83DDA72B4 |
| SHA1: | CC786711A0703C28F3E1404EA90FB77053E56B9F |
| SHA-256: | 0B66441884C6D66B98A10E712C1A78650D439839A1D95423CEFB6B9224D3ACC0 |
| SHA-512: | 55CF5426FCBD08A91A2BABC39014AA8D4DFA3DB3639C554371C84FBE3A790A9D29696BEB6FE838BDD732DF19BCD78C038E5731C0D73B68C4E6F5BA59EA4D6E57 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 284 |
| Entropy (8bit): | 5.288769026167872 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJf+dPeUkwRe9:YvXKXB+hJPkQWRuUhU5G28Ukee9 |
| MD5: | 813DE770AB39A900232149C3F7063701 |
| SHA1: | DF961A7157D0E4F66CB1DE9D8572E3B9F743DAD0 |
| SHA-256: | FA6CFDA95C624871C78A16ECDA6C8BAFB86DB6ABF9C7823C09389F732E6C97FB |
| SHA-512: | 2C688BC9B6D8C0A49750CC6E196DA4C166CE6D2F496FCA6006B7D64F1D10A890787976EA286663CAA79C12981D68D229266278615BD9EB52DD1087FCB067D187 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 291 |
| Entropy (8bit): | 5.2859085551533465 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJfbPtdPeUkwRe9:YvXKXB+hJPkQWRuUhU5GDV8Ukee9 |
| MD5: | DFF85E7F0B3F9667E444CDE8BE2F7AB7 |
| SHA1: | 0C6B9BB45DDF1A92FB0CAC984C10DB9CC8644519 |
| SHA-256: | A92EA2B8E22C62E715212FFEBB476E002D87C08067F51E80E94A65392FAE8896 |
| SHA-512: | A83C615BC73CC10543F3E83A2D392A565742368FFFF71045E95BB2FC198F775C6A07DDE5D3ED2EACC5F7B177E7B60AB6C9CF31CAA086B22C9490066BCC518EF2 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 287 |
| Entropy (8bit): | 5.289008407155196 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJf21rPeUkwRe9:YvXKXB+hJPkQWRuUhU5G+16Ukee9 |
| MD5: | AD5DFFEF78374FE94C12681C47975A16 |
| SHA1: | 4B7AFF9047F76823C8087254A2348461C5294BBD |
| SHA-256: | F1CC8A6CA2393A2E0F7BA55E5478442E0A5320B8830573F8CD3A73354EC7C79A |
| SHA-512: | 25DAA42E73A64B88BF48360C7488CD299D749CBC6AB1C73413D233987F100EA864F572AC83D9A50B42EC9377C228AC6B3F5453AC688B3DCD79FCAD239D24E452 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2028 |
| Entropy (8bit): | 5.8415088354890665 |
| Encrypted: | false |
| SSDEEP: | 24:Yv6XB+hBkRUCamXayLgEdycgNaLcR84bqerISIQ1iyLPZYMWD8W3V1LFnU6QHlOg:YvE+hsUcBgBG48j/SiyLVWOAlNkUk |
| MD5: | 1CDE270CBFBD97CF83F6B0E9AE9D87D8 |
| SHA1: | 4BCFE4446A1C543A6848D0A5671DA54EED945087 |
| SHA-256: | F6464908B99FDB50E60E20424E47C97BD7DD9D8DECD532E54327A10F7878C969 |
| SHA-512: | 36CD42808F44DA1B4965F427C0CE37902B4EA12A18073066BA45E5944CDA75EB0C74438E370389EA46B609E8D66CB865D01220AE0D88A2E2EEDA552FF96A5FEB |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 286 |
| Entropy (8bit): | 5.267258351472371 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJfshHHrPeUkwRe9:YvXKXB+hJPkQWRuUhU5GUUUkee9 |
| MD5: | A590F058EDA9E565C4243868FAB6F7BF |
| SHA1: | 2C9D9BFEC92B5399B6251EFB6987A357F77344DF |
| SHA-256: | EA628E6FDBE08AE6E13E1C9D58174044A7FB4656200D4ABCAFB2A158ABA78625 |
| SHA-512: | 58BBB6DF120D6384DE8BDE834C35665F8CFA7D36D5DBD682AF9FDCC95EFFD8E30793C21D59F3E798C3BA65F604514FD75D1139BAE81BF932C438925F1CEF159E |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 282 |
| Entropy (8bit): | 5.283319222230577 |
| Encrypted: | false |
| SSDEEP: | 6:YEQXJ2HXB+4aJPmHQ5IRR4UhUR0YPeoAvJTqgFCrPeUkwRe9:YvXKXB+hJPkQWRuUhU5GTq16Ukee9 |
| MD5: | E0B7970409ECC0B96FA638A1B1225675 |
| SHA1: | 7AE6254926335197CF7BE61A0C72072E9079902D |
| SHA-256: | 42FCE7B772401958314E275AAF67283408716B475F3292EE4FD43408F63B5B22 |
| SHA-512: | 06F0A3C4C205EEB4B1D5F3282EE5D44F9A667887124848AB36336AA60AEBB662660354B6AED4BB1A7DB1F0A6D65805057BD7D7659F3DEF2D40B446FE886CC538 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4 |
| Entropy (8bit): | 0.8112781244591328 |
| Encrypted: | false |
| SSDEEP: | 3:e:e |
| MD5: | DC84B0D741E5BEAE8070013ADDCC8C28 |
| SHA1: | 802F4A6A20CBF157AAF6C4E07E4301578D5936A2 |
| SHA-256: | 81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06 |
| SHA-512: | 65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2815 |
| Entropy (8bit): | 5.151921147632775 |
| Encrypted: | false |
| SSDEEP: | 24:Y8x1sa5yFICX3ayW8qsXEeW6Q3Iw66sjgTj0S8LfqCQ2y2LSOCQ5mreD8hxbX5qG:YSJCXEvIw6ngfuSLnYf5mr5b7u9eJ |
| MD5: | 7E7A8D6655D22A2D90D03CB498F32793 |
| SHA1: | 97047A4B30C3DD80AE75AE1F830BE1A159D221E8 |
| SHA-256: | 49521B1132B1EEEBF0554AFE30E0EBD0F4F306C21B43A00DC8A154769AF9034A |
| SHA-512: | 94F1FC4DAA77CDA5B2CBECCA092FA7617760BAE2002B0CAD1A9ADC17ADED83754179153EB3B579F72B1A01EA54D70F04F86D5D9A7758BE4A5FD0F483C5328B0C |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 12288 |
| Entropy (8bit): | 0.9893426022486209 |
| Encrypted: | false |
| SSDEEP: | 24:TLHRx/XYKQvGJF7urs67Y9QmQ6QeoaIIcLESiAiegaIF:TVl2GL7ms67YXtr3ncI8b0 |
| MD5: | 03BD0729EA08C485BAB55258B761C7F7 |
| SHA1: | AE304DC50693B7BAAECD7B64F240724CBBB96A57 |
| SHA-256: | D51582AC2D173CF39E286D09CDB3E241E4F21216B50813871D33BCF40A47D0E7 |
| SHA-512: | 98FA6D502E1F5EE86B20DA5EBCBD93DAD51A456606AFB29C46BFCD2CD8E64751D940A47A85D43B4EE0C2B3F0716058FFDDBD7E56FB5AF4704EAC40C6DFA4FC0F |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 8720 |
| Entropy (8bit): | 1.3455518934201671 |
| Encrypted: | false |
| SSDEEP: | 24:7+tTASY9QmQ6QeoaI7cLESiAi0mY9QmqLBx/XYKQvGJF7ursu:7MTlYXtr3kcI8KYzqll2GL7msu |
| MD5: | 0EDC1B0183A0F445A741CA64D12B914F |
| SHA1: | A83B4773DA4EE8F39983D4D6ADCF270A05EB00A0 |
| SHA-256: | F1879D7EA21B19AB664B45DABB238FB75A9DBC6E9899631ABE02419B45EDB9A8 |
| SHA-512: | D8EC12F5B8B9E67B9F9A38411E2A413BBEC06F270CD846F3C15D44058EC28DDEF7CD1C7E46397800C1D9575E4C377E7C54015D61D2179CDBFC1448E16E96E542 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 246 |
| Entropy (8bit): | 3.516674370985874 |
| Encrypted: | false |
| SSDEEP: | 6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8g+ClM2H:Qw946cPbiOxDlbYnuRKL7H |
| MD5: | 3757CF0A0658F342F89BC186837F2D88 |
| SHA1: | 0B39025504ECAF08942FA8386E77FE371CA4B1D7 |
| SHA-256: | 86DFA4AB3994E4C72C4D0BEADB89796555EF4685351DC93198B775F32D55503A |
| SHA-512: | 6E20B018C7B623D742A37EDA13056B460E212FAE355B78DC9293835AD951E40CE5B52E08E98286D22DCE5479AADC5E8D5796A9D37FF19E7446E2B9739C7404A4 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 16525 |
| Entropy (8bit): | 5.353642815103214 |
| Encrypted: | false |
| SSDEEP: | 384:tbxtsuP+XEWJJQbnR8L31M7HeltV+KYm3wsa2KjF4ODkr/O8r2IUHUHMWwEyZRN2:aPL |
| MD5: | 91F06491552FC977E9E8AF47786EE7C1 |
| SHA1: | 8FEB27904897FFCC2BE1A985D479D7F75F11CEFC |
| SHA-256: | 06582F9F48220653B0CB355A53A9B145DA049C536D00095C57FCB3E941BA90BB |
| SHA-512: | A63E6E0D25B88EBB6602885AB8E91167D37267B24516A11F7492F48876D3DDCAE44FFC386E146F3CF6EB4FA6AF251602143F254687B17FCFE6F00783095C5082 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 15114 |
| Entropy (8bit): | 5.361503911836895 |
| Encrypted: | false |
| SSDEEP: | 384:0xtoTTu0YPEU18NS/9Y9121kgptBLQ4jR+Dx3vB1/kza8URVdndByly3urBAnOnK:3eW |
| MD5: | 0051C5C550EA6B7F14BA65444E3AA726 |
| SHA1: | B1106C1536866252B059102D8E0023DAD435B6BC |
| SHA-256: | 74E97D85D4505509594359E337EDE60B52650A29899FA2BD949EBD60AC4EC3A1 |
| SHA-512: | 6BC2BEF7EF2005F7EC4705B47CADBA817787A22BD99A9C678825B78BAAAFCFBAEBC65F9DB669E7973F4689A12D8AFA93BA9BF765AF01A729E30968DC90A046F3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 29752 |
| Entropy (8bit): | 5.420016948127822 |
| Encrypted: | false |
| SSDEEP: | 192:0cbgIhPcbocbAIlncb2cbwI/RcbNcbQIVvcb6XcbYIPtcbR:fhWlA/TV8Pi |
| MD5: | 48662E8B9EDDAFAAADCDD4F9873C98C9 |
| SHA1: | C3E642A224F1DD9FAB341F1BC1BC9970F44E4A0A |
| SHA-256: | 435D31CF08F7A3AF64FFB490287F420CC4ABF4499B4ED911E19933F76228027A |
| SHA-512: | 3827E3AE69F1BBC7527148BEFFBEB1388DA99194A93C6B889809264D40B9368C1C4D36F38A9691A72D1EAE7EEA22C56CD20314654FB192DEA52D867B8C57A710 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 386528 |
| Entropy (8bit): | 7.9736851559892425 |
| Encrypted: | false |
| SSDEEP: | 6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m |
| MD5: | 5C48B0AD2FEF800949466AE872E1F1E2 |
| SHA1: | 337D617AE142815EDDACB48484628C1F16692A2F |
| SHA-256: | F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE |
| SHA-512: | 44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1419751 |
| Entropy (8bit): | 7.976496077007677 |
| Encrypted: | false |
| SSDEEP: | 24576:NW7ouWLaGZjZwYIGNPJodpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:RuWLaGZjZwZGk3mlind9i4ufFXpAXkru |
| MD5: | ECB0FB5F0961EC5F14C09A0D0A11C4DD |
| SHA1: | 77F573E7F6A0AF9620217040CD0F39101BB971E9 |
| SHA-256: | B3B8157C46E9176DFA481C985218CA038E94F75B3FA24948487A28B576C71D48 |
| SHA-512: | 65B4B9210A86C580CF61918B6C527027690F4D2374ABE04469254C411E17C1B56E423336EE23C377C5CFF617D638937C975C09C108ED10AA16E64A6C2542DB0B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1407294 |
| Entropy (8bit): | 7.97605879016224 |
| Encrypted: | false |
| SSDEEP: | 24576:/M7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07tOWLaGZ4ZwYIGNPS:RB3mlind9i4ufFXpAXkrfUs0kWLaGZ48 |
| MD5: | 1D64D25345DD73F100517644279994E6 |
| SHA1: | DE807F82098D469302955DCBE1A963CD6E887737 |
| SHA-256: | 0A05C4CE0C4D8527D79A3C9CEE2A8B73475F53E18544622E4656C598BC814DFC |
| SHA-512: | C0A37437F84B4895A7566E278046CFD50558AD84120CA0BD2EAD2259CA7A30BD67F0BDC4C043D73257773C607259A64B6F6AE4987C8B43BB47241F3C78EB9416 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 758601 |
| Entropy (8bit): | 7.98639316555857 |
| Encrypted: | false |
| SSDEEP: | 12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg |
| MD5: | 3A49135134665364308390AC398006F1 |
| SHA1: | 28EF4CE5690BF8A9E048AF7D30688120DAC6F126 |
| SHA-256: | D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B |
| SHA-512: | BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5475 |
| Entropy (8bit): | 7.409504987552427 |
| Encrypted: | false |
| SSDEEP: | 96:+0jN85N26MT0D5MdtbZPAVwzVHlMtOc7P9JAw5cbTe8/WkoXKUE:+0B8oYNMtKw/MQpOcbTJ/W6 |
| MD5: | 7FCA0EA1EA2B34C5DB2BA15AB8348ED7 |
| SHA1: | FA11141776B5D9539E6CFF2AF8D60643EBA83404 |
| SHA-256: | A0350E27B23A566077B1BE2AF7E2C18AEFE9ADBF2B2A1A44DA25B918575052E2 |
| SHA-512: | 130D4BBAD08356F547CE93EACAF8BB04331E95F8C9E9D20AD8D4362F6C0F1153D940A29447CBE0743D551735FCFF8A2F1B17BDF788B572F557B598D08B551D99 |
| Malicious: | false |
| URL: | https://images.unsplash.com/photo-1633409361618-c73427e4e206?auto=format&fit=crop&q=80&w=200 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 56818 |
| Entropy (8bit): | 7.836165728169892 |
| Encrypted: | false |
| SSDEEP: | 1536:Rs207d+HudYuW/DuKNwFfgsBwWXB80XZx9ZS1Qs0G2:y57d+Hud2/DuKWFfgSX6KZx96H0P |
| MD5: | 056D663D8BDC5341C8746EA98AE457F5 |
| SHA1: | 7D8AB85FA6FB6729407C088AB4E0CB8D88FDBD27 |
| SHA-256: | 7CB58082A0ECD8B738A003E18C4DCFBA24D64D333D2EBBB74B036A3EA571B39B |
| SHA-512: | 6D14DE8BEE0ABFE7A9D45F5C661F11CDC358C3804978C01EC82B9D28683A828586785ADD5FDF9A6520AFFF0982076E5AFA77B857215FAEC19B2D02EBD43718DA |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 83561 |
| Entropy (8bit): | 7.983546920758055 |
| Encrypted: | false |
| SSDEEP: | 1536:RzyfzHlyoNRPG/54f4zgQETOQwjy6MPrMejkQpa4bO2p4Z:FybHLhC54f4GSyh746a4bd4Z |
| MD5: | 851C44C50AB72E4B72344DC10E76991E |
| SHA1: | EF4823DC88BCB42C4A7949CADAC2EAB7A5AC6F57 |
| SHA-256: | 6B67E72CB7B9EEA8995A61976249284EB949DB79C28AFA921FBAFF881FC1BD6B |
| SHA-512: | CC1C91BE1005F90D849B7147AAEE3BC0987E5D0D9137F87EAC1D40E6534F1C0F424FA2A1938C911BB8AE69A2392FBAC489A0578003AA680276B4A50441B4EABE |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 15658 |
| Entropy (8bit): | 4.551358562207723 |
| Encrypted: | false |
| SSDEEP: | 192:Nhgaj3DBIrOyVweaE2UhrPZo7w8tzyDlC02lGjmkDSyc:N7jzyrVweaE2qqZzWjmX |
| MD5: | BCCE58387B4F749629E6E91F91D303C0 |
| SHA1: | E5256F05B32A290CB4A2D50459973CA259703757 |
| SHA-256: | 394C0038C19CC3C94A864D39EFFE56BA80789DC1651B4F7FA4188DB244F51ADD |
| SHA-512: | 9E689308B50D70C48FECD2E313F78F9B72E82063FA4F24EF84E777570A0797087CC94E8BCDAB745F13B2E7B45A8EA01B2EAB856C9ECFE7D01AD2E48BD6396181 |
| Malicious: | false |
| URL: | https://shareddocview.com/ |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 21030 |
| Entropy (8bit): | 7.3853301705052985 |
| Encrypted: | false |
| SSDEEP: | 384:SoCJjwkWx6BT7zRqeBZcQZ2ZHUkqBG8nhE+hKry5sXWkY:SRWCJM4G7Iuk |
| MD5: | 0A58E051F792BBD11B87245F415121A3 |
| SHA1: | BC9683B2125684BC94DF1CC58CC0D2C09CD49BAE |
| SHA-256: | 8CD90404ABE01CF6914DD1FD4B6581AE23FD6C882B272FD45130FAE4E0E868F9 |
| SHA-512: | 20090F95292EAFE6026C0815BA5162C6AEF27587B29A4BF42CE90289E55F00391475333511E9F98DF215050F3DBDC1D3091F1DE67A042C07C2E0C4A7EC48CED3 |
| Malicious: | false |
| URL: | https://t4.ftcdn.net/jpg/00/82/85/81/360_F_82858162_HjMozPsJzTh7ydwgCUCy9Afd1fSvZvKg.jpg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 122003 |
| Entropy (8bit): | 7.70653472107265 |
| Encrypted: | false |
| SSDEEP: | 3072:tV1lK2LQvwSWP5XQpiuvlJtQunhenbqxZvWoQMGBEesol:tx5dB5XQpi6UnbqScWpl |
| MD5: | A1AFAAC960A0D145DF512E3384BF8324 |
| SHA1: | 8043F69A011566D6D3DD5A010BF0C1E622CB6355 |
| SHA-256: | DA4094A061F976D70F7B9C1B5B27B18A4C0B2DDF2E57B8573FAFB884F0F6A1CB |
| SHA-512: | B27627388DA864751F1620C641E423F5BF23B8DC9E09CB40FB9C14509900E0D7FD26DFCC71A29811800044B44249B309A2C7BE099A5D51DF58430DD4730FBF06 |
| Malicious: | false |
| URL: | https://static-00.iconduck.com/assets.00/godaddy-v2-icon-2048x2048-fnx09smt.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 71173 |
| Entropy (8bit): | 7.894139555167221 |
| Encrypted: | false |
| SSDEEP: | 768:E0zh/ZzYuQR7Sc5aUUVOAiXMmG7hu/yey1hJsfJP/QqanEDKECTssj3lX:/tZzT5c5XYJi87zeyKF/FkEDKECYsj1X |
| MD5: | E5F39D234619A7A484C8EAD9ADD1BD3B |
| SHA1: | FD685ADAF51388CE9F42E0389F77E4263CADC7D0 |
| SHA-256: | 53B46735FBAFE9600094511750DA35F088483A90F8D212F63CEF23C3AB1BCE6D |
| SHA-512: | 7399AC0FE48FB583D7B7A1105C5F2C8BD555286EC71FAF11A6B73B4781D7BF1C83B39D196CAA12431DED081E349DCC80D2019638DB75211F8C0130AB9ADC6DB7 |
| Malicious: | false |
| URL: | https://images.sampletemplates.com/wp-content/uploads/2017/02/23025701/Sample-Payment-Request-Voucher-Form.jpg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 56818 |
| Entropy (8bit): | 7.836165728169892 |
| Encrypted: | false |
| SSDEEP: | 1536:Rs207d+HudYuW/DuKNwFfgsBwWXB80XZx9ZS1Qs0G2:y57d+Hud2/DuKWFfgSX6KZx96H0P |
| MD5: | 056D663D8BDC5341C8746EA98AE457F5 |
| SHA1: | 7D8AB85FA6FB6729407C088AB4E0CB8D88FDBD27 |
| SHA-256: | 7CB58082A0ECD8B738A003E18C4DCFBA24D64D333D2EBBB74B036A3EA571B39B |
| SHA-512: | 6D14DE8BEE0ABFE7A9D45F5C661F11CDC358C3804978C01EC82B9D28683A828586785ADD5FDF9A6520AFFF0982076E5AFA77B857215FAEC19B2D02EBD43718DA |
| Malicious: | false |
| URL: | https://upload.wikimedia.org/wikipedia/commons/thumb/d/df/Microsoft_Office_Outlook_%282018%E2%80%93present%29.svg/1101px-Microsoft_Office_Outlook_%282018%E2%80%93present%29.svg.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 28 |
| Entropy (8bit): | 4.066108939837481 |
| Encrypted: | false |
| SSDEEP: | 3:GMyoSt:jFSt |
| MD5: | 96B191AE794C2C78387B3F4F9BB7A251 |
| SHA1: | F974547DF0ADFFB7E80699552C6BCE3E709343A6 |
| SHA-256: | CE76758AEEF2CAF12021AFB5257D0CA4E9E5C20015C2C85D68BB27FA6B1AFB28 |
| SHA-512: | 07EE1CFDBD53C1046FA4F44FF7C83F4456CDAA099299816B451D114E3EEAAD4BE8F0CD0FC09F0E838418BCBB5E50547E806E8E080B8E3421D0DB26FF4C15D412 |
| Malicious: | false |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCQld8-BBY6odEgUN541ADhIFDc5BTHohoRDqmBVEWW4=?alt=proto |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 83561 |
| Entropy (8bit): | 7.983546920758055 |
| Encrypted: | false |
| SSDEEP: | 1536:RzyfzHlyoNRPG/54f4zgQETOQwjy6MPrMejkQpa4bO2p4Z:FybHLhC54f4GSyh746a4bd4Z |
| MD5: | 851C44C50AB72E4B72344DC10E76991E |
| SHA1: | EF4823DC88BCB42C4A7949CADAC2EAB7A5AC6F57 |
| SHA-256: | 6B67E72CB7B9EEA8995A61976249284EB949DB79C28AFA921FBAFF881FC1BD6B |
| SHA-512: | CC1C91BE1005F90D849B7147AAEE3BC0987E5D0D9137F87EAC1D40E6534F1C0F424FA2A1938C911BB8AE69A2392FBAC489A0578003AA680276B4A50441B4EABE |
| Malicious: | false |
| URL: | https://www.dsaict.eu/web/image/product.template/1782/image_1024?unique=0ec9ce8 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 7466 |
| Entropy (8bit): | 7.581319786894464 |
| Encrypted: | false |
| SSDEEP: | 192:hYNMtKwADY9a6ySey904lNc9Xqq7vEI3Z:hYNg7SYfySey6LXNxp |
| MD5: | 2B97E31CC4EF1C9CEE134DC63EDD72D2 |
| SHA1: | CFF2FDE7BC5011B8389A80E29E703FDB22D82684 |
| SHA-256: | 839D865DA09DED25883564B3011055620EA64D6F5981A4586806C3A114CBA4BB |
| SHA-512: | 998454C85AB4247628368086711CE692E5F3F3FFB2E0BB0C9ED8AAFD4FD2FCD6C0987E8A18F2048F96A0A335FB778F4BF6C12F95D9E543ADA19C22047E40CAFE |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 407279 |
| Entropy (8bit): | 5.474568422670314 |
| Encrypted: | false |
| SSDEEP: | 12288:fpgrZxSAoNEJb0Wie75aUXGuyQZhK4O0s:RCVoNE0Wie75aUWmnO0s |
| MD5: | 2697BF25AFB0982DFA17C73536F934C1 |
| SHA1: | 7D7DB122D0639CD1F1A53EB6018D6D713D312679 |
| SHA-256: | FB798BB21731986940CF3A9950FBCA386E03633E9A45497701E71F9B87D132EA |
| SHA-512: | 658EE630973F04FA367B366C1AC838FA49FCFF01682899F7480ED03201DE5AB7B95420DDC5C2DA116FE05B90A09EF1798B256628AB56D248A1618FDCDD0D79CA |
| Malicious: | false |
| URL: | https://cdn.tailwindcss.com/3.4.16 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 122003 |
| Entropy (8bit): | 7.70653472107265 |
| Encrypted: | false |
| SSDEEP: | 3072:tV1lK2LQvwSWP5XQpiuvlJtQunhenbqxZvWoQMGBEesol:tx5dB5XQpi6UnbqScWpl |
| MD5: | A1AFAAC960A0D145DF512E3384BF8324 |
| SHA1: | 8043F69A011566D6D3DD5A010BF0C1E622CB6355 |
| SHA-256: | DA4094A061F976D70F7B9C1B5B27B18A4C0B2DDF2E57B8573FAFB884F0F6A1CB |
| SHA-512: | B27627388DA864751F1620C641E423F5BF23B8DC9E09CB40FB9C14509900E0D7FD26DFCC71A29811800044B44249B309A2C7BE099A5D51DF58430DD4730FBF06 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 71173 |
| Entropy (8bit): | 7.894139555167221 |
| Encrypted: | false |
| SSDEEP: | 768:E0zh/ZzYuQR7Sc5aUUVOAiXMmG7hu/yey1hJsfJP/QqanEDKECTssj3lX:/tZzT5c5XYJi87zeyKF/FkEDKECYsj1X |
| MD5: | E5F39D234619A7A484C8EAD9ADD1BD3B |
| SHA1: | FD685ADAF51388CE9F42E0389F77E4263CADC7D0 |
| SHA-256: | 53B46735FBAFE9600094511750DA35F088483A90F8D212F63CEF23C3AB1BCE6D |
| SHA-512: | 7399AC0FE48FB583D7B7A1105C5F2C8BD555286EC71FAF11A6B73B4781D7BF1C83B39D196CAA12431DED081E349DCC80D2019638DB75211F8C0130AB9ADC6DB7 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 21030 |
| Entropy (8bit): | 7.3853301705052985 |
| Encrypted: | false |
| SSDEEP: | 384:SoCJjwkWx6BT7zRqeBZcQZ2ZHUkqBG8nhE+hKry5sXWkY:SRWCJM4G7Iuk |
| MD5: | 0A58E051F792BBD11B87245F415121A3 |
| SHA1: | BC9683B2125684BC94DF1CC58CC0D2C09CD49BAE |
| SHA-256: | 8CD90404ABE01CF6914DD1FD4B6581AE23FD6C882B272FD45130FAE4E0E868F9 |
| SHA-512: | 20090F95292EAFE6026C0815BA5162C6AEF27587B29A4BF42CE90289E55F00391475333511E9F98DF215050F3DBDC1D3091F1DE67A042C07C2E0C4A7EC48CED3 |
| Malicious: | false |
| Preview: |
| File type: | |
| Entropy (8bit): | 7.9814764769006805 |
| TrID: |
|
| File name: | letter2481-fitocosmetic.pdf |
| File size: | 763'248 bytes |
| MD5: | 2d0783705f8a7528cd7081073c84ce13 |
| SHA1: | 8ac68a853acefdedaa7bde8fe663a2c13443894d |
| SHA256: | f103987692e2abe9c58a67dff728b181fe5f30f9ad224c714ec908a4b4c82fb3 |
| SHA512: | 170698177b6143ae1441578fff714154cb9fe745f83b94b36b906394a5b4956a677fda9c1b9718de010bcbdfdd2d8257e67b3bd9f42f2e41944ef1a536098728 |
| SSDEEP: | 12288:ZplRBKHHHHHHHHHHHHHHHHLMVVycP7MRnjqqB9T2oTNw/u7o/oEy2Wzqv9Fkz/1Y:jbBLzPI519Nq/zZEm/kEQJQ |
| TLSH: | A9F41273B17066D9C334CDB2F86A6D5853480206BC35F97E241CB9FA26C2667792A0FC |
| File Content Preview: | %PDF-1.7.%.....2 0 obj.<<./Type /Catalog./Pages 4 0 R./AcroForm 5 0 R.>>.endobj.9 0 obj.<<./Filter /FlateDecode./Length 10.>>.stream..x.+......|..endstream.endobj.10 0 obj.<<./Filter /FlateDecode./Length 7223.>>.stream..x..][.d..~._Q.I.>.]G...\. ..d.}.... |
 | |
| Icon Hash: | 62cc8caeb29e8ae0 |
General | |
|---|---|
| Header: | %PDF-1.7 |
| Total Entropy: | 7.981476 |
| Total Bytes: | 763248 |
| Stream Entropy: | 7.981222 |
| Stream Bytes: | 760517 |
| Entropy outside Streams: | 5.068972 |
| Bytes outside Streams: | 2731 |
| Number of EOF found: | 1 |
| Bytes after EOF: | |
| Name | Count |
|---|---|
| obj | 26 |
| endobj | 26 |
| stream | 24 |
| endstream | 24 |
| xref | 0 |
| trailer | 0 |
| startxref | 1 |
| /Page | 0 |
| /Encrypt | 0 |
| /ObjStm | 1 |
| /URI | 0 |
| /JS | 0 |
| /JavaScript | 0 |
| /AA | 0 |
| /OpenAction | 0 |
| /AcroForm | 1 |
| /JBIG2Decode | 0 |
| /RichMedia | 0 |
| /Launch | 0 |
| /EmbeddedFile | 0 |
| ID | DHASH | MD5 | Preview |
|---|---|---|---|
| 15 | 0d2c32c565454512 | a21d4562f17ed0d76b088ffd64943166 |  |
| 16 | 0c1b13a42c2e0403 | f4d0bd8fe7e1550b16a3143f111c33be |  |
| 17 | 90a0347063291d14 | e2f6c33349c787e0703448b42e008fa8 |  |
| 28 | 0d2c36d56545451a | db640fb9bdf40b6623c35384923ed430 |  |
| 30 | 0000000000000000 | 9ef4b4e6181f8e4ddf566a3267d7a326 |  |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library NodeDownload Network PCAP: filtered – full
- Total Packets: 456
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Apr 2, 2025 14:29:08.647559881 CEST | 49702 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.647605896 CEST | 443 | 49702 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.647670984 CEST | 49702 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.647916079 CEST | 49703 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.647953033 CEST | 443 | 49703 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.648005962 CEST | 49703 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.648045063 CEST | 49702 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.648057938 CEST | 443 | 49702 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.648139954 CEST | 49703 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.648152113 CEST | 443 | 49703 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.656486988 CEST | 49702 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.656548023 CEST | 49703 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.656966925 CEST | 49704 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.657078981 CEST | 443 | 49704 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.657166004 CEST | 49704 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.657691002 CEST | 49704 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.657728910 CEST | 443 | 49704 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.700278997 CEST | 443 | 49702 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.700292110 CEST | 443 | 49703 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.861097097 CEST | 443 | 49703 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.861197948 CEST | 49703 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.861217022 CEST | 49703 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.862272024 CEST | 443 | 49704 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.862359047 CEST | 49704 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.863785982 CEST | 49704 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.863809109 CEST | 443 | 49704 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.864085913 CEST | 443 | 49704 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.864397049 CEST | 49704 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.868699074 CEST | 443 | 49702 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.868777990 CEST | 49702 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.868808031 CEST | 49702 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:08.908297062 CEST | 443 | 49704 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:09.115880966 CEST | 443 | 49704 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:09.116074085 CEST | 443 | 49704 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:09.116147041 CEST | 49704 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:09.119229078 CEST | 49704 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:09.119280100 CEST | 443 | 49704 | 104.17.112.233 | 192.168.2.16 |
| Apr 2, 2025 14:29:09.119311094 CEST | 49704 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:09.119357109 CEST | 49704 | 443 | 192.168.2.16 | 104.17.112.233 |
| Apr 2, 2025 14:29:09.415725946 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:09.415792942 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:09.418611050 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:09.422513008 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:09.422527075 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:09.766187906 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:09.766331911 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:09.768769026 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:09.768790960 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:09.769071102 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:09.769490004 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:09.812294006 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.146516085 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.199455976 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:10.199510098 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.246469975 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:10.301662922 CEST | 49713 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.301721096 CEST | 443 | 49713 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.301795959 CEST | 49713 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.301934958 CEST | 49713 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.301944971 CEST | 443 | 49713 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.313673973 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.313713074 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.313730955 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.313760042 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:10.313775063 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.313796043 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.313817978 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:10.313860893 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.313895941 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:10.313896894 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:10.313981056 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.314049959 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:10.314232111 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:10.314269066 CEST | 443 | 49706 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.314312935 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:10.314666033 CEST | 49706 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:10.416148901 CEST | 49714 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.416198969 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.416281939 CEST | 49714 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.416419029 CEST | 49714 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.416430950 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.451798916 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:10.451845884 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.452121973 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:10.452121973 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:10.452260017 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.514286041 CEST | 443 | 49713 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.514358044 CEST | 49713 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.515254974 CEST | 49713 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.515264034 CEST | 443 | 49713 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.515738964 CEST | 443 | 49713 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.515963078 CEST | 49713 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.560269117 CEST | 443 | 49713 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.747452021 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.747577906 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:10.748601913 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:10.748617887 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.748950958 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.749289036 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:10.758182049 CEST | 443 | 49713 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.758327007 CEST | 443 | 49713 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.758384943 CEST | 49713 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.759720087 CEST | 49713 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.759744883 CEST | 443 | 49713 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.761318922 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.761419058 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.761509895 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.761657000 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.761677980 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.765096903 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.765177965 CEST | 49714 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.768141985 CEST | 49714 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.768157005 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.768522978 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.770287037 CEST | 49714 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.792289019 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.812272072 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.862176895 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.862418890 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.862509966 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.862582922 CEST | 49714 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.862602949 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.862648964 CEST | 49714 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.862656116 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.862765074 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.862814903 CEST | 49714 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.864006042 CEST | 49714 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.864022017 CEST | 443 | 49714 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.920671940 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.933119059 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.933135986 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.933275938 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:10.933290005 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.933461905 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:10.961772919 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.961793900 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.961885929 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:10.961900949 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.966804028 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.967014074 CEST | 49718 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.967065096 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.967120886 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.967134953 CEST | 49718 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.967174053 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.967255116 CEST | 49718 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:10.967262030 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.967361927 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:10.967375994 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.004731894 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.004776955 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.004971027 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.005003929 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.005012035 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.011472940 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.023845911 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.023868084 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.023953915 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.023972988 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.024013042 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.040852070 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.040868044 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.041090012 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.041099072 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.041153908 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.064804077 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.064819098 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.064899921 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.064908981 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.064951897 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.109468937 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.109484911 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.109539032 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.109549999 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.109610081 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.121187925 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.121202946 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.121263981 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.121270895 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.121309996 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.121328115 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.128236055 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.128310919 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.128315926 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.128357887 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.128559113 CEST | 49715 | 443 | 192.168.2.16 | 13.226.94.10 |
| Apr 2, 2025 14:29:11.128577948 CEST | 443 | 49715 | 13.226.94.10 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.158164024 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.158256054 CEST | 49718 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:11.158798933 CEST | 49718 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:11.158807039 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.159589052 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.159908056 CEST | 49718 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:11.204267979 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.208921909 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.218868971 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.218938112 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.218961954 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.219005108 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.219989061 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.219993114 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.220341921 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.220789909 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.252240896 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.252274990 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.262007952 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.262044907 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.262129068 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.262295008 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.262309074 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.268265963 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.299455881 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.307979107 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308068037 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308109045 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308139086 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.308145046 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308187962 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308201075 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.308203936 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308244944 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.308248997 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308315039 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308357000 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308363914 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.308368921 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308434010 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308439970 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.308444023 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308478117 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.308481932 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308532953 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308582067 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.308583021 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308594942 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308634996 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.308639050 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308702946 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308741093 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308743000 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.308751106 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.308792114 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.308795929 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.310858965 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.310916901 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.310933113 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.310937881 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.310988903 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.310995102 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311038971 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311079025 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.311081886 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311094046 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311136007 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.311141014 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311193943 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311238050 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311245918 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.311249971 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311295033 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.311299086 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311346054 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311382055 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311405897 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.311413050 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311450005 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.311454058 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311499119 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311537981 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.311542034 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311584949 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.311645985 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.311650991 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.341059923 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.341173887 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.341219902 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.341223001 CEST | 49718 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:11.341248035 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.341284037 CEST | 49718 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:11.341289997 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.341308117 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.341353893 CEST | 49718 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:11.341361046 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.341411114 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.341466904 CEST | 49718 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:11.342364073 CEST | 49718 | 443 | 192.168.2.16 | 151.101.2.208 |
| Apr 2, 2025 14:29:11.342377901 CEST | 443 | 49718 | 151.101.2.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.363445997 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.411210060 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.411231995 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.411303997 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.411320925 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.411365986 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.411377907 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.411387920 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.411444902 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.411562920 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.411609888 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.411618948 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.411623955 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.411659956 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.412684917 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.412753105 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.412759066 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.412801981 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.413544893 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.413608074 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.413611889 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.413661957 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.413701057 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.413757086 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.414863110 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.414925098 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.454524994 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.454559088 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.454581976 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.454619884 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.454632044 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.454636097 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.454683065 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.454731941 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.455256939 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.455280066 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.455560923 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.456187010 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.500277996 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.506481886 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.512330055 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.512427092 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.512793064 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.512851000 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.512856007 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.512875080 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.512902975 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.513140917 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.513205051 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.513211966 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.513251066 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.513794899 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.513824940 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.513853073 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.513859034 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.513916016 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.514617920 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.514684916 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.514687061 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.514703035 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.514738083 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.514770985 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.515544891 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.515594006 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.515611887 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.515618086 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.515652895 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.515682936 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.516618013 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.516676903 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.516678095 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.516690016 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.516722918 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.516746998 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.517726898 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.517760038 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.517788887 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.517796993 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.517831087 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.517851114 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.518554926 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.518615007 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.519299984 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.519351959 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.519747019 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.519804001 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.520533085 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.520589113 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.520781040 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.520836115 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.521953106 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.521991014 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.522031069 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.522037029 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.522077084 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.522459030 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.522510052 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.523191929 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.523267984 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.523547888 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.523611069 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.523658037 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.523710012 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.524899006 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.524966002 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.524970055 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.524980068 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.525034904 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.526081085 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.526135921 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.526484013 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.526541948 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.527703047 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.527717113 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.527755022 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.527775049 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.527782917 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.527836084 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.538633108 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.538700104 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.538712978 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.538736105 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.538760900 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.577487946 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.577518940 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.577608109 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.577625036 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.577682018 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.609628916 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.609658003 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.609730005 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.609756947 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.609775066 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.609817028 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.611176968 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.611268044 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.611288071 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.611288071 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.611339092 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.611546993 CEST | 49719 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.611562967 CEST | 443 | 49719 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.611593008 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.611629963 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.611681938 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.611689091 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.611746073 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.612951040 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.612977982 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.613027096 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.613033056 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.613092899 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.615500927 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.615524054 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.615576982 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.615583897 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.615645885 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.617676973 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.617707968 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.617762089 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.617769957 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.617810011 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.617837906 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.621551991 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.621577024 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.621654987 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.621680021 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.621711016 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.621728897 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.623294115 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.623318911 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.623392105 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.623409033 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.623467922 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.623488903 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.624620914 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.624645948 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.624711037 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.624722958 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.624808073 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.626523018 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.626550913 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.626612902 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.626625061 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.626663923 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.626683950 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.627660036 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.627695084 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.627759933 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.627772093 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.627825975 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.627851009 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.634841919 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:11.634884119 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.634993076 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:11.635128975 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:11.635138035 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.640609026 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.654306889 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.654330015 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.654412031 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.654448032 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.654544115 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.683346987 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.683376074 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.683469057 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.683492899 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.729465008 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.730225086 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.730320930 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.730400085 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.730604887 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.730647087 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.743236065 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.743268013 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.743323088 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.743369102 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.743406057 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.743427038 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.755080938 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.755172968 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.755203962 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.755234003 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.755278111 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.755305052 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.755686998 CEST | 49717 | 443 | 192.168.2.16 | 172.67.41.16 |
| Apr 2, 2025 14:29:11.755717993 CEST | 443 | 49717 | 172.67.41.16 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.759613991 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.759634972 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.759697914 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.759716988 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.759744883 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.759767056 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.778352976 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.778369904 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.778470039 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.778491974 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.778547049 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.825124979 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.825149059 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.825221062 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.825237989 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.825275898 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.825294971 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.838227987 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.838246107 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.838330984 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.838347912 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.838411093 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.844235897 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.844305992 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.844332933 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.844376087 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.844927073 CEST | 49721 | 443 | 192.168.2.16 | 13.226.94.91 |
| Apr 2, 2025 14:29:11.844949007 CEST | 443 | 49721 | 13.226.94.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.864634037 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:11.864692926 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.864763975 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:11.864917040 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:11.864933014 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.928106070 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.928368092 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.928417921 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.928498983 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.928850889 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.928860903 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.929188967 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.929435015 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:11.976267099 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.979198933 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.979283094 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:11.980381966 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:11.980386972 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.980695009 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.981904984 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.028266907 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.069360018 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.069585085 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.070429087 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.070437908 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.070843935 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.071119070 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.105928898 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.106035948 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.106127024 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.106302977 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.106340885 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.116314888 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.175017118 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.175050020 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.175070047 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.175153017 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:12.175187111 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.215488911 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:12.253168106 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.253222942 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.253283024 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:12.253310919 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.253331900 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:12.254067898 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.254328012 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.254385948 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.254401922 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.254492998 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.254549980 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.254558086 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.257165909 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.257198095 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.257247925 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.257257938 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.257311106 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.260186911 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.263222933 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.263283014 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.263293028 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.266882896 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.266947031 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.266957045 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.269694090 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.269756079 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.269764900 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.273948908 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.274008036 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.274009943 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.274064064 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.274267912 CEST | 49726 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.274281979 CEST | 443 | 49726 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.292112112 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.292136908 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.292191982 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:12.292224884 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.292273045 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:12.292303085 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:12.303663969 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.303769112 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.304727077 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.304739952 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.305052996 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.305289030 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.326153994 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.326211929 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.326256037 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.326263905 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:12.326303005 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:12.326458931 CEST | 49725 | 443 | 192.168.2.16 | 208.80.154.240 |
| Apr 2, 2025 14:29:12.326489925 CEST | 443 | 49725 | 208.80.154.240 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.348287106 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.389377117 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.389421940 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.389499903 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.389642954 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.389656067 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.455341101 CEST | 49730 | 443 | 192.168.2.16 | 142.251.40.228 |
| Apr 2, 2025 14:29:12.455445051 CEST | 443 | 49730 | 142.251.40.228 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.455550909 CEST | 49730 | 443 | 192.168.2.16 | 142.251.40.228 |
| Apr 2, 2025 14:29:12.455722094 CEST | 49730 | 443 | 192.168.2.16 | 142.251.40.228 |
| Apr 2, 2025 14:29:12.455779076 CEST | 443 | 49730 | 142.251.40.228 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.499298096 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.499365091 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.499408960 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.499526024 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.499526024 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.499566078 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.499599934 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.499639988 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.499661922 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.499664068 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.499692917 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.499733925 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.499758005 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.582642078 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.582742929 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.583273888 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.583297968 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.583520889 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.587256908 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.595828056 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.600862026 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.602936029 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.602953911 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.604543924 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.604615927 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.604624033 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.611159086 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.611183882 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.611207008 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.611232042 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.611257076 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.611264944 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.611290932 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.611320019 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.611320019 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.611346960 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.611367941 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.611388922 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.611397982 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.611412048 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.611443043 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.618484974 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.618501902 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.618583918 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.618601084 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.618998051 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.625119925 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.632071018 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.632131100 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.632164001 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.632205963 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.632266045 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.632386923 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.662831068 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.662905931 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.662965059 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.662990093 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.663019896 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.663091898 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.663142920 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.663161993 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.663186073 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.663223028 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.663250923 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.663398027 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.663451910 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.663481951 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.663496017 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.663532019 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.663532019 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.663547039 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.663573027 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.663625956 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.663641930 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.663733959 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.663791895 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.664028883 CEST | 49724 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:12.664058924 CEST | 443 | 49724 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.679625034 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.682498932 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.682517052 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.682566881 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.682576895 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.683445930 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.689436913 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.694490910 CEST | 443 | 49730 | 142.251.40.228 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.694593906 CEST | 49730 | 443 | 192.168.2.16 | 142.251.40.228 |
| Apr 2, 2025 14:29:12.695739031 CEST | 49730 | 443 | 192.168.2.16 | 142.251.40.228 |
| Apr 2, 2025 14:29:12.695763111 CEST | 443 | 49730 | 142.251.40.228 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.696032047 CEST | 443 | 49730 | 142.251.40.228 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.697902918 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.697938919 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.698002100 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.698024988 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.698262930 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.704849958 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.712073088 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.712104082 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.712131023 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.712140083 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.712223053 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.718933105 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.725928068 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.725984097 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.725991011 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.733122110 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.733150005 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.733184099 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.733201027 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.733439922 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.738882065 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.741481066 CEST | 49730 | 443 | 192.168.2.16 | 142.251.40.228 |
| Apr 2, 2025 14:29:12.743623018 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.743647099 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.743711948 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.743722916 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.743891001 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.747178078 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.752501965 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.752526045 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.752598047 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.752608061 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.753818035 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.757890940 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.763920069 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.763948917 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.763977051 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.764009953 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.764019966 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.764043093 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.764065981 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.764075994 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.764102936 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.764102936 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.764116049 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.764157057 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.764162064 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.764209986 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.767400980 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.770868063 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.771833897 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.771894932 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.771902084 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.775175095 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.776915073 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.776937962 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.776983976 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.776990891 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.776993990 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.777005911 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.777034998 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.778426886 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.778779984 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.778793097 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.781653881 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.782201052 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.782666922 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.782679081 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.784884930 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.784943104 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.784977913 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.785011053 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.785206079 CEST | 49729 | 443 | 192.168.2.16 | 151.101.1.91 |
| Apr 2, 2025 14:29:12.785237074 CEST | 443 | 49729 | 151.101.1.91 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.785250902 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.785275936 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.785307884 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.785315037 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.785355091 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.785360098 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.785413980 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.785455942 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.787065029 CEST | 49728 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.787075043 CEST | 443 | 49728 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.793382883 CEST | 49731 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:12.793428898 CEST | 443 | 49731 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.793499947 CEST | 49731 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:12.793680906 CEST | 49731 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:12.793695927 CEST | 443 | 49731 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.995892048 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.995930910 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.996020079 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.996203899 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:12.996213913 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.169869900 CEST | 443 | 49731 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.170099020 CEST | 49731 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:13.170131922 CEST | 443 | 49731 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.170258999 CEST | 49731 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:13.170264006 CEST | 443 | 49731 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.179944038 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.180071115 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.188911915 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.188961983 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.189327002 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.189688921 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.232274055 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.366266012 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.366345882 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.366393089 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.366452932 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.366466999 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.366482973 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.366518021 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.366559982 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.366596937 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.366602898 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.366609097 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.366668940 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.372322083 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.379595041 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.379650116 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.379664898 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.424475908 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.455378056 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.458403111 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.458430052 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.458467007 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.458502054 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.458566904 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.465157032 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.471412897 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.471451044 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.471468925 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.471483946 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.471550941 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.478068113 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.484782934 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.484838009 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.484847069 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.484863997 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.484916925 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.491179943 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.497390985 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.497427940 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.497462034 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.497484922 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.497534037 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.504127979 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.511359930 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.511399984 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.511426926 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.511435986 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.511475086 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.518138885 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.523962975 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.523998022 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.524008989 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.524018049 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.524053097 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.546861887 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.548830986 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.548876047 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.548882961 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.548892021 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.548926115 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.555124998 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.562092066 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.562131882 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.562144041 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.562154055 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.562201023 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.567410946 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.568582058 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:13.568623066 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.568845987 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:13.568919897 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:13.568929911 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.572407007 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.572446108 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.572458982 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.572468042 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.572501898 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.578512907 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.584832907 CEST | 443 | 49731 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.585130930 CEST | 443 | 49731 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.585180044 CEST | 49731 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:13.585326910 CEST | 49731 | 443 | 192.168.2.16 | 192.142.10.5 |
| Apr 2, 2025 14:29:13.585340977 CEST | 443 | 49731 | 192.142.10.5 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.585508108 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.585557938 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.585565090 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.591952085 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.591989994 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.592015028 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.592020035 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.592056036 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.598833084 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.604033947 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.604074001 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.604101896 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.604106903 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.604154110 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.608408928 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.608522892 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.608570099 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.608577013 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.608613014 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.608653069 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.608818054 CEST | 49732 | 443 | 192.168.2.16 | 34.110.143.245 |
| Apr 2, 2025 14:29:13.608831882 CEST | 443 | 49732 | 34.110.143.245 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.907499075 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.907576084 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:13.908032894 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:13.908050060 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.908382893 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.908739090 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:13.956295013 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.409631968 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.409665108 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.409714937 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.409758091 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.409764051 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.409804106 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.409820080 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.410996914 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.411025047 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.411201000 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.411201000 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.411210060 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.411380053 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.579996109 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.580018044 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.580147028 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.580161095 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.580205917 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.580960035 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.580979109 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.581053972 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.581062078 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.581207037 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.581314087 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.581331968 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.581367016 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.581382990 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.581391096 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.581410885 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.581464052 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:14.581505060 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.581505060 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.581671953 CEST | 49733 | 443 | 192.168.2.16 | 35.195.5.115 |
| Apr 2, 2025 14:29:14.581687927 CEST | 443 | 49733 | 35.195.5.115 | 192.168.2.16 |
| Apr 2, 2025 14:29:17.688441992 CEST | 49735 | 80 | 192.168.2.16 | 23.197.253.105 |
| Apr 2, 2025 14:29:17.779090881 CEST | 80 | 49735 | 23.197.253.105 | 192.168.2.16 |
| Apr 2, 2025 14:29:17.779319048 CEST | 49735 | 80 | 192.168.2.16 | 23.197.253.105 |
| Apr 2, 2025 14:29:17.779463053 CEST | 49735 | 80 | 192.168.2.16 | 23.197.253.105 |
| Apr 2, 2025 14:29:17.869389057 CEST | 80 | 49735 | 23.197.253.105 | 192.168.2.16 |
| Apr 2, 2025 14:29:17.871454000 CEST | 80 | 49735 | 23.197.253.105 | 192.168.2.16 |
| Apr 2, 2025 14:29:17.871479034 CEST | 80 | 49735 | 23.197.253.105 | 192.168.2.16 |
| Apr 2, 2025 14:29:17.871536016 CEST | 49735 | 80 | 192.168.2.16 | 23.197.253.105 |
| Apr 2, 2025 14:29:19.464062929 CEST | 49673 | 443 | 192.168.2.16 | 2.23.227.208 |
| Apr 2, 2025 14:29:19.464097023 CEST | 443 | 49673 | 2.23.227.208 | 192.168.2.16 |
| Apr 2, 2025 14:29:22.658489943 CEST | 443 | 49730 | 142.251.40.228 | 192.168.2.16 |
| Apr 2, 2025 14:29:22.658559084 CEST | 443 | 49730 | 142.251.40.228 | 192.168.2.16 |
| Apr 2, 2025 14:29:22.658668995 CEST | 49730 | 443 | 192.168.2.16 | 142.251.40.228 |
| Apr 2, 2025 14:29:24.267505884 CEST | 49730 | 443 | 192.168.2.16 | 142.251.40.228 |
| Apr 2, 2025 14:29:24.267560005 CEST | 443 | 49730 | 142.251.40.228 | 192.168.2.16 |
| Apr 2, 2025 14:29:24.378218889 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 2, 2025 14:29:24.681559086 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 2, 2025 14:29:25.288558960 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 2, 2025 14:29:26.503550053 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 2, 2025 14:29:28.914587975 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 2, 2025 14:29:32.810277939 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 2, 2025 14:29:33.112550974 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 2, 2025 14:29:33.718552113 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 2, 2025 14:29:33.718592882 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 2, 2025 14:29:34.931586027 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 2, 2025 14:29:37.337583065 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 2, 2025 14:29:42.142730951 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 2, 2025 14:29:43.324668884 CEST | 49671 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 2, 2025 14:29:51.748588085 CEST | 49679 | 443 | 192.168.2.16 | 52.182.143.211 |
| Apr 2, 2025 14:29:52.689017057 CEST | 49693 | 80 | 192.168.2.16 | 199.232.210.172 |
| Apr 2, 2025 14:29:52.781455040 CEST | 80 | 49693 | 199.232.210.172 | 192.168.2.16 |
| Apr 2, 2025 14:29:52.781553030 CEST | 80 | 49693 | 199.232.210.172 | 192.168.2.16 |
| Apr 2, 2025 14:29:52.781604052 CEST | 49693 | 80 | 192.168.2.16 | 199.232.210.172 |
| Apr 2, 2025 14:30:18.499958038 CEST | 49735 | 80 | 192.168.2.16 | 23.197.253.105 |
| Apr 2, 2025 14:30:18.591109037 CEST | 80 | 49735 | 23.197.253.105 | 192.168.2.16 |
| Apr 2, 2025 14:30:18.591159105 CEST | 49735 | 80 | 192.168.2.16 | 23.197.253.105 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Apr 2, 2025 14:29:07.851373911 CEST | 53 | 49705 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:07.883073092 CEST | 53 | 54399 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.546958923 CEST | 64492 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:08.547693014 CEST | 60320 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:08.624250889 CEST | 53 | 53421 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.646893024 CEST | 53 | 60320 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.646915913 CEST | 53 | 64492 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:08.756092072 CEST | 53 | 56984 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:09.120811939 CEST | 56204 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:09.120811939 CEST | 62425 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:09.317007065 CEST | 53 | 62425 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:09.414964914 CEST | 53 | 56204 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.202053070 CEST | 64412 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:10.202176094 CEST | 65326 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:10.300947905 CEST | 53 | 65326 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.301002979 CEST | 53 | 64412 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.316540956 CEST | 62229 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:10.316806078 CEST | 54308 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:10.317087889 CEST | 58031 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:10.317241907 CEST | 64374 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:10.415452003 CEST | 53 | 62229 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.415647984 CEST | 53 | 54308 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.446147919 CEST | 53 | 64374 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.451180935 CEST | 53 | 58031 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.866096020 CEST | 49798 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:10.866257906 CEST | 56078 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:10.867824078 CEST | 60716 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:10.867922068 CEST | 55958 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:10.963784933 CEST | 53 | 56078 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.966331959 CEST | 53 | 60716 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:10.966401100 CEST | 53 | 55958 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.004015923 CEST | 53 | 49798 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.131942034 CEST | 64088 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:11.132175922 CEST | 62337 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:11.132572889 CEST | 51143 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:11.132719040 CEST | 56483 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:11.236057997 CEST | 53 | 51143 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.261476040 CEST | 53 | 56483 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.581717014 CEST | 53 | 64088 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.616069078 CEST | 59752 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:11.616399050 CEST | 53052 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:11.716927052 CEST | 53 | 53052 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.729482889 CEST | 53 | 59752 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.761701107 CEST | 57588 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:11.763235092 CEST | 51116 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:11.861598969 CEST | 53 | 57588 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.863959074 CEST | 53 | 51116 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.877526045 CEST | 53 | 62337 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:11.935762882 CEST | 52724 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:11.935887098 CEST | 52089 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:12.063961029 CEST | 53 | 52724 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.079163074 CEST | 53 | 49266 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.149028063 CEST | 53 | 52089 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.276634932 CEST | 60855 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:12.276791096 CEST | 55424 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:12.341295004 CEST | 51849 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:12.341561079 CEST | 56532 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:12.379122972 CEST | 53 | 60855 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.388911963 CEST | 53 | 55424 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.447267056 CEST | 53 | 56532 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.452704906 CEST | 53 | 51849 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:12.679241896 CEST | 59966 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:12.679430008 CEST | 59763 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:12.815782070 CEST | 55055 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:12.815938950 CEST | 55713 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:12.960650921 CEST | 53 | 55055 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.039736986 CEST | 53 | 55713 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.101614952 CEST | 53 | 59763 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:13.567779064 CEST | 53 | 59966 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:17.585902929 CEST | 53154 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 2, 2025 14:29:17.684520006 CEST | 53 | 53154 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:25.835648060 CEST | 53 | 57463 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:29:44.827322960 CEST | 53 | 57379 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:30:07.649758101 CEST | 53 | 53752 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:30:07.900976896 CEST | 53 | 54685 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:30:10.777003050 CEST | 53 | 55227 | 1.1.1.1 | 192.168.2.16 |
| Apr 2, 2025 14:30:30.426709890 CEST | 138 | 138 | 192.168.2.16 | 192.168.2.255 |
| Apr 2, 2025 14:30:38.265445948 CEST | 53 | 57876 | 1.1.1.1 | 192.168.2.16 |
| Timestamp | Source IP | Dest IP | Checksum | Code | Type |
|---|---|---|---|---|---|
| Apr 2, 2025 14:29:11.878492117 CEST | 192.168.2.16 | 1.1.1.1 | c23a | (Port unreachable) | Destination Unreachable |
| Apr 2, 2025 14:29:13.039833069 CEST | 192.168.2.16 | 1.1.1.1 | c256 | (Port unreachable) | Destination Unreachable |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Apr 2, 2025 14:29:08.546958923 CEST | 192.168.2.16 | 1.1.1.1 | 0x47e0 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:08.547693014 CEST | 192.168.2.16 | 1.1.1.1 | 0x8eb8 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:09.120811939 CEST | 192.168.2.16 | 1.1.1.1 | 0x9214 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:09.120811939 CEST | 192.168.2.16 | 1.1.1.1 | 0xa99f | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:10.202053070 CEST | 192.168.2.16 | 1.1.1.1 | 0xfb55 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:10.202176094 CEST | 192.168.2.16 | 1.1.1.1 | 0x573e | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:10.316540956 CEST | 192.168.2.16 | 1.1.1.1 | 0x421f | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:10.316806078 CEST | 192.168.2.16 | 1.1.1.1 | 0x3e33 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:10.317087889 CEST | 192.168.2.16 | 1.1.1.1 | 0x63ad | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:10.317241907 CEST | 192.168.2.16 | 1.1.1.1 | 0x1e81 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:10.866096020 CEST | 192.168.2.16 | 1.1.1.1 | 0x8bdc | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:10.866257906 CEST | 192.168.2.16 | 1.1.1.1 | 0xe017 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:10.867824078 CEST | 192.168.2.16 | 1.1.1.1 | 0x73d3 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:10.867922068 CEST | 192.168.2.16 | 1.1.1.1 | 0xbd61 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:11.131942034 CEST | 192.168.2.16 | 1.1.1.1 | 0xefa4 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:11.132175922 CEST | 192.168.2.16 | 1.1.1.1 | 0xc603 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:11.132572889 CEST | 192.168.2.16 | 1.1.1.1 | 0x42b0 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:11.132719040 CEST | 192.168.2.16 | 1.1.1.1 | 0xde0c | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:11.616069078 CEST | 192.168.2.16 | 1.1.1.1 | 0xabe8 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:11.616399050 CEST | 192.168.2.16 | 1.1.1.1 | 0x5e84 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:11.761701107 CEST | 192.168.2.16 | 1.1.1.1 | 0xa8e3 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:11.763235092 CEST | 192.168.2.16 | 1.1.1.1 | 0xb6c7 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:11.935762882 CEST | 192.168.2.16 | 1.1.1.1 | 0xeb49 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:11.935887098 CEST | 192.168.2.16 | 1.1.1.1 | 0x486e | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:12.276634932 CEST | 192.168.2.16 | 1.1.1.1 | 0x6eb6 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:12.276791096 CEST | 192.168.2.16 | 1.1.1.1 | 0xe0ef | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:12.341295004 CEST | 192.168.2.16 | 1.1.1.1 | 0x7872 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:12.341561079 CEST | 192.168.2.16 | 1.1.1.1 | 0x4666 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:12.679241896 CEST | 192.168.2.16 | 1.1.1.1 | 0xd04d | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:12.679430008 CEST | 192.168.2.16 | 1.1.1.1 | 0x3d1 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:12.815782070 CEST | 192.168.2.16 | 1.1.1.1 | 0xef3e | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 2, 2025 14:29:12.815938950 CEST | 192.168.2.16 | 1.1.1.1 | 0x2a05 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 2, 2025 14:29:17.585902929 CEST | 192.168.2.16 | 1.1.1.1 | 0xcc63 | Standard query (0) | A (IP address) | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Apr 2, 2025 14:29:08.646893024 CEST | 1.1.1.1 | 192.168.2.16 | 0x8eb8 | No error (0) | 65 | IN (0x0001) | false | |||
| Apr 2, 2025 14:29:08.646915913 CEST | 1.1.1.1 | 192.168.2.16 | 0x47e0 | No error (0) | 104.17.112.233 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:08.646915913 CEST | 1.1.1.1 | 192.168.2.16 | 0x47e0 | No error (0) | 104.18.111.161 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:09.414964914 CEST | 1.1.1.1 | 192.168.2.16 | 0x9214 | No error (0) | 192.142.10.5 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.300947905 CEST | 1.1.1.1 | 192.168.2.16 | 0x573e | No error (0) | 65 | IN (0x0001) | false | |||
| Apr 2, 2025 14:29:10.301002979 CEST | 1.1.1.1 | 192.168.2.16 | 0xfb55 | No error (0) | 172.67.41.16 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.301002979 CEST | 1.1.1.1 | 192.168.2.16 | 0xfb55 | No error (0) | 104.22.20.144 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.301002979 CEST | 1.1.1.1 | 192.168.2.16 | 0xfb55 | No error (0) | 104.22.21.144 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.415452003 CEST | 1.1.1.1 | 192.168.2.16 | 0x421f | No error (0) | unsplash.imgix.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.415452003 CEST | 1.1.1.1 | 192.168.2.16 | 0x421f | No error (0) | dualstack.com.imgix.map.fastly.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.415452003 CEST | 1.1.1.1 | 192.168.2.16 | 0x421f | No error (0) | 151.101.2.208 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.415452003 CEST | 1.1.1.1 | 192.168.2.16 | 0x421f | No error (0) | 151.101.130.208 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.415452003 CEST | 1.1.1.1 | 192.168.2.16 | 0x421f | No error (0) | 151.101.194.208 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.415452003 CEST | 1.1.1.1 | 192.168.2.16 | 0x421f | No error (0) | 151.101.66.208 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.415647984 CEST | 1.1.1.1 | 192.168.2.16 | 0x3e33 | No error (0) | unsplash.imgix.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.415647984 CEST | 1.1.1.1 | 192.168.2.16 | 0x3e33 | No error (0) | dualstack.com.imgix.map.fastly.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.446147919 CEST | 1.1.1.1 | 192.168.2.16 | 0x1e81 | No error (0) | d72ilj4fw1mla.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.451180935 CEST | 1.1.1.1 | 192.168.2.16 | 0x63ad | No error (0) | d72ilj4fw1mla.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.451180935 CEST | 1.1.1.1 | 192.168.2.16 | 0x63ad | No error (0) | 13.226.94.10 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.451180935 CEST | 1.1.1.1 | 192.168.2.16 | 0x63ad | No error (0) | 13.226.94.59 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.451180935 CEST | 1.1.1.1 | 192.168.2.16 | 0x63ad | No error (0) | 13.226.94.92 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.451180935 CEST | 1.1.1.1 | 192.168.2.16 | 0x63ad | No error (0) | 13.226.94.91 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.966331959 CEST | 1.1.1.1 | 192.168.2.16 | 0x73d3 | No error (0) | unsplash.imgix.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.966331959 CEST | 1.1.1.1 | 192.168.2.16 | 0x73d3 | No error (0) | dualstack.com.imgix.map.fastly.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.966331959 CEST | 1.1.1.1 | 192.168.2.16 | 0x73d3 | No error (0) | 151.101.2.208 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.966331959 CEST | 1.1.1.1 | 192.168.2.16 | 0x73d3 | No error (0) | 151.101.66.208 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.966331959 CEST | 1.1.1.1 | 192.168.2.16 | 0x73d3 | No error (0) | 151.101.130.208 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.966331959 CEST | 1.1.1.1 | 192.168.2.16 | 0x73d3 | No error (0) | 151.101.194.208 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.966401100 CEST | 1.1.1.1 | 192.168.2.16 | 0xbd61 | No error (0) | unsplash.imgix.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:10.966401100 CEST | 1.1.1.1 | 192.168.2.16 | 0xbd61 | No error (0) | dualstack.com.imgix.map.fastly.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.004015923 CEST | 1.1.1.1 | 192.168.2.16 | 0x8bdc | No error (0) | 208.80.154.240 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.236057997 CEST | 1.1.1.1 | 192.168.2.16 | 0x42b0 | No error (0) | d72ilj4fw1mla.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.236057997 CEST | 1.1.1.1 | 192.168.2.16 | 0x42b0 | No error (0) | 13.226.94.91 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.236057997 CEST | 1.1.1.1 | 192.168.2.16 | 0x42b0 | No error (0) | 13.226.94.59 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.236057997 CEST | 1.1.1.1 | 192.168.2.16 | 0x42b0 | No error (0) | 13.226.94.10 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.236057997 CEST | 1.1.1.1 | 192.168.2.16 | 0x42b0 | No error (0) | 13.226.94.92 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.261476040 CEST | 1.1.1.1 | 192.168.2.16 | 0xde0c | No error (0) | d72ilj4fw1mla.cloudfront.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.581717014 CEST | 1.1.1.1 | 192.168.2.16 | 0xefa4 | No error (0) | dsaict.odoo.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.581717014 CEST | 1.1.1.1 | 192.168.2.16 | 0xefa4 | No error (0) | 35.195.5.115 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.729482889 CEST | 1.1.1.1 | 192.168.2.16 | 0xabe8 | No error (0) | 208.80.154.240 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.861598969 CEST | 1.1.1.1 | 192.168.2.16 | 0xa8e3 | No error (0) | n.sni.global.fastly.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.861598969 CEST | 1.1.1.1 | 192.168.2.16 | 0xa8e3 | No error (0) | 151.101.1.91 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.861598969 CEST | 1.1.1.1 | 192.168.2.16 | 0xa8e3 | No error (0) | 151.101.65.91 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.861598969 CEST | 1.1.1.1 | 192.168.2.16 | 0xa8e3 | No error (0) | 151.101.193.91 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.861598969 CEST | 1.1.1.1 | 192.168.2.16 | 0xa8e3 | No error (0) | 151.101.129.91 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.863959074 CEST | 1.1.1.1 | 192.168.2.16 | 0xb6c7 | No error (0) | n.sni.global.fastly.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:11.877526045 CEST | 1.1.1.1 | 192.168.2.16 | 0xc603 | No error (0) | dsaict.odoo.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:12.063961029 CEST | 1.1.1.1 | 192.168.2.16 | 0xeb49 | No error (0) | 34.110.143.245 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:12.379122972 CEST | 1.1.1.1 | 192.168.2.16 | 0x6eb6 | No error (0) | n.sni.global.fastly.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:12.379122972 CEST | 1.1.1.1 | 192.168.2.16 | 0x6eb6 | No error (0) | 151.101.1.91 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:12.379122972 CEST | 1.1.1.1 | 192.168.2.16 | 0x6eb6 | No error (0) | 151.101.65.91 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:12.379122972 CEST | 1.1.1.1 | 192.168.2.16 | 0x6eb6 | No error (0) | 151.101.129.91 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:12.379122972 CEST | 1.1.1.1 | 192.168.2.16 | 0x6eb6 | No error (0) | 151.101.193.91 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:12.388911963 CEST | 1.1.1.1 | 192.168.2.16 | 0xe0ef | No error (0) | n.sni.global.fastly.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:12.447267056 CEST | 1.1.1.1 | 192.168.2.16 | 0x4666 | No error (0) | 65 | IN (0x0001) | false | |||
| Apr 2, 2025 14:29:12.452704906 CEST | 1.1.1.1 | 192.168.2.16 | 0x7872 | No error (0) | 142.251.40.228 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:12.960650921 CEST | 1.1.1.1 | 192.168.2.16 | 0xef3e | No error (0) | 34.110.143.245 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:13.101614952 CEST | 1.1.1.1 | 192.168.2.16 | 0x3d1 | No error (0) | dsaict.odoo.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:13.567779064 CEST | 1.1.1.1 | 192.168.2.16 | 0xd04d | No error (0) | dsaict.odoo.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:13.567779064 CEST | 1.1.1.1 | 192.168.2.16 | 0xd04d | No error (0) | 35.195.5.115 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:17.684520006 CEST | 1.1.1.1 | 192.168.2.16 | 0xcc63 | No error (0) | crl.root-x1.letsencrypt.org.edgekey.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:17.684520006 CEST | 1.1.1.1 | 192.168.2.16 | 0xcc63 | No error (0) | e8652.dscx.akamaiedge.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:17.684520006 CEST | 1.1.1.1 | 192.168.2.16 | 0xcc63 | No error (0) | 23.197.253.105 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:18.010812998 CEST | 1.1.1.1 | 192.168.2.16 | 0xd92c | No error (0) | 199.232.214.172 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:18.010812998 CEST | 1.1.1.1 | 192.168.2.16 | 0xd92c | No error (0) | 199.232.210.172 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:30.306674957 CEST | 1.1.1.1 | 192.168.2.16 | 0xd8cd | No error (0) | 199.232.210.172 | A (IP address) | IN (0x0001) | false | ||
| Apr 2, 2025 14:29:30.306674957 CEST | 1.1.1.1 | 192.168.2.16 | 0xd8cd | No error (0) | 199.232.214.172 | A (IP address) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.16 | 49735 | 23.197.253.105 | 80 | 6240 | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Apr 2, 2025 14:29:17.779463053 CEST | 115 | OUT | |
| Apr 2, 2025 14:29:17.871454000 CEST | 1254 | IN | |
| Apr 2, 2025 14:29:17.871479034 CEST | 491 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.16 | 49704 | 104.17.112.233 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:08 UTC | 669 | OUT | |
| 2025-04-02 12:29:09 UTC | 1248 | IN | |
| 2025-04-02 12:29:09 UTC | 121 | IN | |
| 2025-04-02 12:29:09 UTC | 708 | IN | |
| 2025-04-02 12:29:09 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.16 | 49706 | 192.142.10.5 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:09 UTC | 667 | OUT | |
| 2025-04-02 12:29:10 UTC | 388 | IN | |
| 2025-04-02 12:29:10 UTC | 980 | IN | |
| 2025-04-02 12:29:10 UTC | 14678 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 2 | 192.168.2.16 | 49713 | 172.67.41.16 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:10 UTC | 561 | OUT | |
| 2025-04-02 12:29:10 UTC | 363 | IN | |
| 2025-04-02 12:29:10 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 3 | 192.168.2.16 | 49715 | 13.226.94.10 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:10 UTC | 672 | OUT | |
| 2025-04-02 12:29:10 UTC | 473 | IN | |
| 2025-04-02 12:29:10 UTC | 16384 | IN | |
| 2025-04-02 12:29:10 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 7315 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 4 | 192.168.2.16 | 49714 | 151.101.2.208 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:10 UTC | 685 | OUT | |
| 2025-04-02 12:29:10 UTC | 552 | IN | |
| 2025-04-02 12:29:10 UTC | 1379 | IN | |
| 2025-04-02 12:29:10 UTC | 1379 | IN | |
| 2025-04-02 12:29:10 UTC | 1379 | IN | |
| 2025-04-02 12:29:10 UTC | 1338 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 5 | 192.168.2.16 | 49717 | 172.67.41.16 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:10 UTC | 567 | OUT | |
| 2025-04-02 12:29:11 UTC | 424 | IN | |
| 2025-04-02 12:29:11 UTC | 945 | IN | |
| 2025-04-02 12:29:11 UTC | 1369 | IN | |
| 2025-04-02 12:29:11 UTC | 1369 | IN | |
| 2025-04-02 12:29:11 UTC | 1369 | IN | |
| 2025-04-02 12:29:11 UTC | 1369 | IN | |
| 2025-04-02 12:29:11 UTC | 1369 | IN | |
| 2025-04-02 12:29:11 UTC | 1369 | IN | |
| 2025-04-02 12:29:11 UTC | 1369 | IN | |
| 2025-04-02 12:29:11 UTC | 1369 | IN | |
| 2025-04-02 12:29:11 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 6 | 192.168.2.16 | 49718 | 151.101.2.208 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:11 UTC | 447 | OUT | |
| 2025-04-02 12:29:11 UTC | 553 | IN | |
| 2025-04-02 12:29:11 UTC | 1379 | IN | |
| 2025-04-02 12:29:11 UTC | 1379 | IN | |
| 2025-04-02 12:29:11 UTC | 1379 | IN | |
| 2025-04-02 12:29:11 UTC | 1379 | IN | |
| 2025-04-02 12:29:11 UTC | 1379 | IN | |
| 2025-04-02 12:29:11 UTC | 571 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 7 | 192.168.2.16 | 49719 | 208.80.154.240 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:11 UTC | 773 | OUT | |
| 2025-04-02 12:29:11 UTC | 1097 | IN | |
| 2025-04-02 12:29:11 UTC | 13800 | IN | |
| 2025-04-02 12:29:11 UTC | 15296 | IN | |
| 2025-04-02 12:29:11 UTC | 15296 | IN | |
| 2025-04-02 12:29:11 UTC | 12426 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 8 | 192.168.2.16 | 49721 | 13.226.94.91 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:11 UTC | 434 | OUT | |
| 2025-04-02 12:29:11 UTC | 473 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 16384 | IN | |
| 2025-04-02 12:29:11 UTC | 7315 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 9 | 192.168.2.16 | 49725 | 208.80.154.240 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:11 UTC | 535 | OUT | |
| 2025-04-02 12:29:12 UTC | 1097 | IN | |
| 2025-04-02 12:29:12 UTC | 13800 | IN | |
| 2025-04-02 12:29:12 UTC | 15296 | IN | |
| 2025-04-02 12:29:12 UTC | 15296 | IN | |
| 2025-04-02 12:29:12 UTC | 12426 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 10 | 192.168.2.16 | 49724 | 35.195.5.115 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:11 UTC | 672 | OUT | |
| 2025-04-02 12:29:12 UTC | 472 | IN | |
| 2025-04-02 12:29:12 UTC | 15912 | IN | |
| 2025-04-02 12:29:12 UTC | 16384 | IN | |
| 2025-04-02 12:29:12 UTC | 16384 | IN | |
| 2025-04-02 12:29:12 UTC | 16384 | IN | |
| 2025-04-02 12:29:12 UTC | 16384 | IN | |
| 2025-04-02 12:29:12 UTC | 2113 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 11 | 192.168.2.16 | 49726 | 151.101.1.91 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:12 UTC | 681 | OUT | |
| 2025-04-02 12:29:12 UTC | 466 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 12 | 192.168.2.16 | 49728 | 34.110.143.245 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:12 UTC | 703 | OUT | |
| 2025-04-02 12:29:12 UTC | 729 | IN | |
| 2025-04-02 12:29:12 UTC | 491 | IN | |
| 2025-04-02 12:29:12 UTC | 1220 | IN | |
| 2025-04-02 12:29:12 UTC | 1220 | IN | |
| 2025-04-02 12:29:12 UTC | 1220 | IN | |
| 2025-04-02 12:29:12 UTC | 1220 | IN | |
| 2025-04-02 12:29:12 UTC | 1220 | IN | |
| 2025-04-02 12:29:12 UTC | 1220 | IN | |
| 2025-04-02 12:29:12 UTC | 1220 | IN | |
| 2025-04-02 12:29:12 UTC | 1220 | IN | |
| 2025-04-02 12:29:12 UTC | 1220 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 13 | 192.168.2.16 | 49729 | 151.101.1.91 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:12 UTC | 443 | OUT | |
| 2025-04-02 12:29:12 UTC | 466 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN | |
| 2025-04-02 12:29:12 UTC | 1378 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 14 | 192.168.2.16 | 49731 | 192.142.10.5 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:13 UTC | 597 | OUT | |
| 2025-04-02 12:29:13 UTC | 416 | IN | |
| 2025-04-02 12:29:13 UTC | 952 | IN | |
| 2025-04-02 12:29:13 UTC | 299 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 15 | 192.168.2.16 | 49732 | 34.110.143.245 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:13 UTC | 465 | OUT | |
| 2025-04-02 12:29:13 UTC | 728 | IN | |
| 2025-04-02 12:29:13 UTC | 492 | IN | |
| 2025-04-02 12:29:13 UTC | 1220 | IN | |
| 2025-04-02 12:29:13 UTC | 1220 | IN | |
| 2025-04-02 12:29:13 UTC | 1220 | IN | |
| 2025-04-02 12:29:13 UTC | 1220 | IN | |
| 2025-04-02 12:29:13 UTC | 1220 | IN | |
| 2025-04-02 12:29:13 UTC | 1220 | IN | |
| 2025-04-02 12:29:13 UTC | 1220 | IN | |
| 2025-04-02 12:29:13 UTC | 1220 | IN | |
| 2025-04-02 12:29:13 UTC | 1220 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 16 | 192.168.2.16 | 49733 | 35.195.5.115 | 443 | 5320 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2025-04-02 12:29:13 UTC | 434 | OUT | |
| 2025-04-02 12:29:14 UTC | 472 | IN | |
| 2025-04-02 12:29:14 UTC | 15912 | IN | |
| 2025-04-02 12:29:14 UTC | 16384 | IN | |
| 2025-04-02 12:29:14 UTC | 16384 | IN | |
| 2025-04-02 12:29:14 UTC | 16384 | IN | |
| 2025-04-02 12:29:14 UTC | 16384 | IN | |
| 2025-04-02 12:29:14 UTC | 2113 | IN |
Click to jump to process
Click to jump to process
back
Click to dive into process behavior distribution
Click to jump to process
| Target ID: | 0 |
| Start time: | 08:29:02 |
| Start date: | 02/04/2025 |
| Path: | C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7aaa20000 |
| File size: | 5'641'176 bytes |
| MD5 hash: | 24EAD1C46A47022347DC0F05F6EFBB8C |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 1 |
| Start time: | 08:29:04 |
| Start date: | 02/04/2025 |
| Path: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff759f90000 |
| File size: | 3'581'912 bytes |
| MD5 hash: | 9B38E8E8B6DD9622D24B53E095C5D9BE |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 2 |
| Start time: | 08:29:04 |
| Start date: | 02/04/2025 |
| Path: | C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff759f90000 |
| File size: | 3'581'912 bytes |
| MD5 hash: | 9B38E8E8B6DD9622D24B53E095C5D9BE |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 3 |
| Start time: | 08:29:05 |
| Start date: | 02/04/2025 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff77eaf0000 |
| File size: | 3'388'000 bytes |
| MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 4 |
| Start time: | 08:29:06 |
| Start date: | 02/04/2025 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff77eaf0000 |
| File size: | 3'388'000 bytes |
| MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 5 |
| Start time: | 08:29:07 |
| Start date: | 02/04/2025 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff77eaf0000 |
| File size: | 3'388'000 bytes |
| MD5 hash: | E81F54E6C1129887AEA47E7D092680BF |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | true |
⊘No disassembly
