Edit tour
Windows
Analysis Report
(No subject) (62).eml
Overview
General Information
| Sample name: | (No subject) (62).eml |
| Analysis ID: | 1500184 |
| MD5: | 164d61b5275cc077e037502a5edd58c1 |
| SHA1: | 8b9eee694ce12a5cfc1aec127b229792c64981fc |
| SHA256: | 0254a9a1627132089584a67de0da74cc1c57ab4c1f9c19566e40fa4e99e2085e |
| Infos: |  |
 | |
Detection
| Score: | 4 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 80% |
Signatures
HTML body contains low number of good links
HTML title does not match URL
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
Queries the volume information (name, serial number etc) of a device
Sigma detected: Office Autorun Keys Modification
Stores files to the Windows start menu directory
Submit button contains javascript call
Classification
- System is w10x64_ra
OUTLOOK.EXE (PID: 6916 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \Root\Offi ce16\OUTLO OK.EXE" /e ml "C:\Use rs\user\De sktop\(No subject) ( 62).eml" MD5: 91A5292942864110ED734005B7E005C0) 
ai.exe (PID: 7104 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \root\vfs\ ProgramFil esCommonX6 4\Microsof t Shared\O ffice16\ai .exe" "841 2447D-8FDE -43B4-BEE2 -8A5077BCB DA4" "E175 592C-C5E0- 4174-9536- 387220A546 08" "6916" "C:\Progr am Files ( x86)\Micro soft Offic e\Root\Off ice16\OUTL OOK.EXE" " WordCombin edFloatieL reOnline.o nnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD) 
chrome.exe (PID: 5856 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// cityofunio ncity-my.s harepoint. com/:o:/g/ personal/c lifff_unio ncity_org/ EqwonIYFm8 1KkAt2sVK8 RBIBfbO9ST gFqNLDrcC0 AoyHIw?e=5 %3aTiIrsC& xsdata=MDV 8MDJ8a2hpY 2tleUBzYW5 0YWNsYXJhY 2EuZ292fDd hMDMyZDAxN TFjZTQ5ZDI 5NjM2MDhkY 2M2ZDkzN2N kfDI4ZWEzN TQ4MTA2OTR lODFhYTBiN mU0YjMyNzF hNWNifDB8M Hw2Mzg2MDM 4ODM1MTIwN zY0MDB8VW5 rbm93bnxUV 0ZwYkdac2I zZDhleUpXS WpvaU1DNHd MakF3TURBa UxDSlFJam9 pVjJsdU16S WlMQ0pCVGl JNklrMWhhV 3dpTENKWFZ DSTZNbjA9f DYwMDAwfHx 8&sdata=ZU RhM3RzbWFz elg4Qm1wUX RvTnlobEpE akR4YVpuT3 pIWHIzd1JE SlFkWT0%3d MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 1764 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2056 --fi eld-trial- handle=180 8,i,655065 4911768703 969,121949 9775504718 7339,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 7892 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// cityofunio ncity-my.s harepoint. com/:o:/g/ personal/c lifff_unio ncity_org/ EqwonIYFm8 1KkAt2sVK8 RBIBfbO9ST gFqNLDrcC0 AoyHIw?e=5 %3aTiIrsC& xsdata=MDV 8MDJ8a2hpY 2tleUBzYW5 0YWNsYXJhY 2EuZ292fDd hMDMyZDAxN TFjZTQ5ZDI 5NjM2MDhkY 2M2ZDkzN2N kfDI4ZWEzN TQ4MTA2OTR lODFhYTBiN mU0YjMyNzF hNWNifDB8M Hw2Mzg2MDM 4ODM1MTIwN DgxMTd8VW5 rbm93bnxUV 0ZwYkdac2I zZDhleUpXS WpvaU1DNHd MakF3TURBa UxDSlFJam9 pVjJsdU16S WlMQ0pCVGl JNklrMWhhV 3dpTENKWFZ DSTZNbjA9f DYwMDAwfHx 8&sdata=UX VsTlIrRVNZ U05Qc2NiK2 N1MmpqdnZi QWtqUklQQV ZUNTI5dCs1 alI5cz0%3d MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 8080 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =1992 --fi eld-trial- handle=195 2,i,145183 2865797876 2194,69199 6328231858 7821,26214 4 --disabl e-features =Optimizat ionGuideMo delDownloa ding,Optim izationHin ts,Optimiz ationHints Fetching,O ptimizatio nTargetPre diction /p refetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
⊘No configs have been found
⊘No yara matches
| Source: | Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): | ||
⊘No Suricata rule has matched
Click to jump to signature section
Show All Signature Results
There are no malicious signatures, click here to show all signatures.
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | Directory created: | Jump to behavior | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | IP Address: | ||
| Source: | JA3 fingerprint: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Classification label: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | Window found: | Jump to behavior | ||
| Source: | Window detected: | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | Directory created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | File Volume queried: | Jump to behavior | ||
| Source: | Process information queried: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | 1 Scripting | Valid Accounts | Windows Management Instrumentation | 1 Scripting | 1 Process Injection | 3 Masquerading | OS Credential Dumping | 1 Process Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | 1 DLL Side-Loading | 1 DLL Side-Loading | 1 Process Injection | LSASS Memory | 13 System Information Discovery | Remote Desktop Protocol | Data from Removable Media | 3 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | 1 Registry Run Keys / Startup Folder | 1 Registry Run Keys / Startup Folder | 1 DLL Side-Loading | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 4 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 1 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| bg.microsoft.map.fastly.net | 199.232.214.172 | true | false | unknown | |
| mira-ssc.tm-4.office.com | 52.107.243.85 | true | false | unknown | |
| www.google.com | 142.250.185.196 | true | false | unknown | |
| cityofunioncity-my.sharepoint.com | unknown | unknown | false | unknown | |
| m365cdn.nel.measure.office.net | unknown | unknown | false | unknown |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false |
| unknown | |
| false |
| unknown | |
| false | unknown | ||
| false | unknown | ||
| false | unknown | ||
| false |
| unknown | |
| false |
| unknown | |
| false |
| unknown | |
| false |
| unknown | |
| false |
| unknown | |
| false |
| unknown |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 52.107.243.149 | unknown | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 142.250.185.196 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 52.107.243.85 | mira-ssc.tm-4.office.com | United States | 8075 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false |
| IP |
|---|
| 192.168.2.16 |
| Joe Sandbox version: | 40.0.0 Tourmaline |
| Analysis ID: | 1500184 |
| Start date and time: | 2024-08-28 00:50:10 +02:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 3m 54s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 19 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | (No subject) (62).eml |
| Detection: | CLEAN |
| Classification: | clean4.winEML@24/70@10/5 |
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 199.232.214.172, 52.113.194.132, 52.109.68.129, 2.19.126.160, 2.19.126.151, 20.42.73.26, 142.250.184.195, 216.58.206.46, 173.194.76.84, 34.104.35.123, 2.23.209.37, 2.23.209.42, 142.250.186.106, 142.250.186.42, 142.250.184.202, 142.250.185.202, 142.250.181.234, 172.217.16.202, 142.250.184.234, 142.250.186.74, 172.217.18.10, 142.250.185.234, 172.217.18.106, 172.217.16.138, 142.250.185.170, 172.217.23.106, 216.58.206.74, 216.58.206.42, 95.101.54.226, 95.101.54.225, 51.132.193.104, 13.89.179.9, 142.250.185.142, 216.58.212.174, 20.189.173.25, 216.58.206.67, 2.19.126.143, 2.19.126.146, 104.46.162.227
- Excluded domains from analysis (whitelisted): omex.cdn.office.net, slscr.update.microsoft.com, res-2-gcc.cdn.office.net.edgekey.net, onedscolprduks02.uksouth.cloudapp.azure.com, e40491.dscd.akamaiedge.net, clientservices.googleapis.com, 192335-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net, eur.roaming1.live.com.akadns.net, a1894.dscb.akamai.net, mobile.events.data.microsoft.com, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, onedscolprdcus09.centralus.cloudapp.azure.com, clients2.google.com, redirector.gvt1.com, onedscolprdaus03.australiasoutheast.cloudapp.azure.com, login.live.com, onedscolprdeus09.eastus.cloudapp.azure.com, update.googleapis.com, frc-azsc-000.roaming.officeapps.live.com, wu-b-net.trafficmanager.net, a1864.dscd.akamai.net, ecs.office.com, res-2-gcc.cdn.office.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, osiprod-frc-buff-azsc-000.francecentral.cloudapp.azure.com, settings-win.data.microsof
- Not all processes where analyzed, report is missing behavior information
- Report size exceeded maximum capacity and may have missing behavior information.
- Report size getting too big, too many NtQueryAttributesFile calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
- Report size getting too big, too many NtReadVirtualMemory calls found.
- VT rate limit hit for: (No subject) (62).eml
⊘No simulations
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 239.255.255.250 | Get hash | malicious | Unknown | Browse | ||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| mira-ssc.tm-4.office.com | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| bg.microsoft.map.fastly.net | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| MICROSOFT-CORP-MSN-AS-BLOCKUS | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Phisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Amadey, Stealc, Vidar | Browse |
| ||
| MICROSOFT-CORP-MSN-AS-BLOCKUS | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Phisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Amadey, Stealc, Vidar | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 28a2c9bd18a11de089ef85a160da29e4 | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
⊘No context
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 231348 |
| Entropy (8bit): | 4.39492243820043 |
| Encrypted: | false |
| SSDEEP: | 3072:IHgl6kgNmiGu2LqoQ1rt0Fvq4nsUvDTSI:I7tmi2OXgsUvDTF |
| MD5: | 11CB11D2CEDF51D4328D82E55BA62E41 |
| SHA1: | 1DA678A45A30FD17132FF8A4D29E3F6E04959B4C |
| SHA-256: | CB835F4207F9BB6A5C91FD9E04CB6CC9BCA0FA3C646C3D1D907A652EF8D404B2 |
| SHA-512: | 0A2452E1E9886176121EB2F57D38BAB7FA78E85B1B5BC5BF82901B76AC20ED3D492BBC09A0207533DCF65A90B4F0F68467756734CA436A7C10EC3AEF946AA1B9 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 322260 |
| Entropy (8bit): | 4.000299760592446 |
| Encrypted: | false |
| SSDEEP: | 6144:dztCFLNyoAHq5Rv2SCtUTnRe4N2+A/3oKBL37GZbTSB+pMZIrh:HMLgvKz9CtgRemO3oUHi3SBSMZIl |
| MD5: | CC90D669144261B198DEAD45AA266572 |
| SHA1: | EF164048A8BC8BD3A015CF63E78BDAC720071305 |
| SHA-256: | 89C701EEFF939A44F28921FD85365ECD87041935DCD0FE0BAF04957DA12C9899 |
| SHA-512: | 16F8A8A6DCBAEAEFB88C7CFF910BCCC71B76A723CF808B810F500E28E543112C2FAE2491D4D209569BD810490EDFF564A2B084709B02963BCAF6FDF1AEEC59AC |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 10 |
| Entropy (8bit): | 2.7219280948873625 |
| Encrypted: | false |
| SSDEEP: | 3:LBSt6Xn:tE8n |
| MD5: | A252DEC1CA9BBEC6A8C9C307ABA71E82 |
| SHA1: | C53F1099216AA5F9773BBDB81BA4ED55B46C3B30 |
| SHA-256: | 44474ABCF4D26BDE7129D897FECDD6C11615DF067B67C45B9BE58E067ACF7EE9 |
| SHA-512: | D8E02F5C0D037F2A84BED32485E6A5AD8BD20BD3C991590E6892E1A32ECE27C6E22305317B04C17769019497B671AEE28120B50B464669EF83C68B78A2240B9C |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4096 |
| Entropy (8bit): | 0.09304735440217722 |
| Encrypted: | false |
| SSDEEP: | 3:lSWFN3l/klslpEl9Xll:l9F8E+9 |
| MD5: | D0DE7DB24F7B0C0FE636B34E253F1562 |
| SHA1: | 6EF2957FDEDDC3EB84974F136C22E39553287B80 |
| SHA-256: | B6DC74E4A39FFA38ED8C93D58AADEB7E7A0674DAC1152AF413E9DA7313ADE6ED |
| SHA-512: | 42D00510CD9771CE63D44991EA10C10C8FBCF69DF08819D60B7F8E7B0F9B1D385AE26912C847A024D1D127EC098904784147218869AE8D2050BCE9B306DB2DDE |
| Malicious: | false |
| Reputation: | moderate, very likely benign file |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4616 |
| Entropy (8bit): | 0.1384465837476566 |
| Encrypted: | false |
| SSDEEP: | 3:7FEG2l+mBV+/l/FllkpMRgSWbNFl/sl+ltlslN04l9Xll3E:7+/lZBag9bNFlEs1E39s |
| MD5: | F3132CAD3BD14714AE8C63A6090B41CC |
| SHA1: | 04AB068AD7C63B5DF11D7664BC5B73722C75F7A3 |
| SHA-256: | 3A987137B0B2EDB1C8FBA2AF7DCDF6F45CB3217EE48FC1CAF9EEEE0CF46EBAED |
| SHA-512: | 2F79D55971D23BAD16386C984CA75F3B631383F5D19B7B52A48FE7A2638A1AABF2DB836BB917F25CD12ABFCF9F94C5DB66873353EDBD9AB26F6159F2ABFE02BB |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 32768 |
| Entropy (8bit): | 0.04482848510499482 |
| Encrypted: | false |
| SSDEEP: | 6:G4l28wRNVoevHY4l28wRNVoe3lSL9XXPH4l942U:l2xCevX2xCe3lS5A0 |
| MD5: | BE8E9FDF7378EE322F143C46CA6D768A |
| SHA1: | 26DC3CE8BAE0A72DA7F6E185903B66B945AC01A2 |
| SHA-256: | 02E553E1E5CEF7C5D3428625206B8184F11E0D52C451875C494931FE4DFCAC7E |
| SHA-512: | D41DF4588EA35DA1466C81E42A9E12691B3EDCEE7FD0FD0653D7FF8D2259B72DDDE1AACD77E229CA31E7F98E8E378BDBFE24F935528BE09F78EB86EB2B5A37B7 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | modified |
| Size (bytes): | 45352 |
| Entropy (8bit): | 0.39621397541915904 |
| Encrypted: | false |
| SSDEEP: | 24:KDbH5QMIzRDQdW2ill7DBtDi4kZERDQhY8xqt8VtbDBtDi4kZERD:AH5Qjz2ill7DYMN8xO8VFDYM |
| MD5: | 785738F5196DB6DD5F651A67466239BC |
| SHA1: | FEA521DF927FF63932E2D5A7A4CFF178850E18C4 |
| SHA-256: | 1DCFA922471DD446E79A4977291F066035A7CF897F2CECF10EE8424EFA24D919 |
| SHA-512: | DF33BB8AF892DA4D2E289C44B67F7AB4A262E5C290CD3D1B71A3236C925D902989457EE936DE07DEB2C9E1C846E3D4C0653BD3A5FFB50155BCFE42F49F197A77 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2877 |
| Entropy (8bit): | 7.9028514706867385 |
| Encrypted: | false |
| SSDEEP: | 48:RgHrMEg/Nf3otqzX6xRFyvGmgoeK0vhHGic8Z/FtFDzioSPHDNOM9UqjFm:MrME6LEF0Y1K0vhHGS1WoSvDNOt2m |
| MD5: | 1E13EE0ED09C4AF1ADFB6C0D280879B0 |
| SHA1: | 1192A79F7B4C4FF814583743F8C66ACA7ECB8ACF |
| SHA-256: | E2395FBA25D3FB8A971345CA65D144F7D9C9D933F70409165446E63D18C0958D |
| SHA-512: | 4D86A41DE4B3CA8BB73BF641838953BE03FFF34A890B7BDDC506276186D42979BC99A7DC5553005F135AA1C02137C85C6A2623498C78A617CC195E28FD8B3C95 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 558 |
| Entropy (8bit): | 7.123275457405295 |
| Encrypted: | false |
| SSDEEP: | 12:6v/7FAPC60nddiW9WrsCwje1QVTCkEE91UrMJRj:CyC6gHJCwjCQjE8Lj |
| MD5: | D9DCA1CAC67A8515C5E7572528BDD5A2 |
| SHA1: | E758AF30B557F3E6DC91FCF3F114725BE898B4F4 |
| SHA-256: | D03539CC6A66D43CFD2347316E7F93720B2D0D9228836EAA86726D87A5113D90 |
| SHA-512: | 1AF4329F527D2F0B01CD0C18AA614E439EF4B0A5ABC69658A6B04F7236F3CFE769E9C0E79C100C3C6AD721456D791E9BCC502F7EF84225A76BD84F9A79BC3F11 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2133 |
| Entropy (8bit): | 7.86298626930999 |
| Encrypted: | false |
| SSDEEP: | 48:ieGreai8Z6DREuByJTO4X4+0aP2raRG1/1wBadvpP3jc:DmeaiGSRDByJ657ac9Y |
| MD5: | 4DF1205B01187B26FF893615B19C65DE |
| SHA1: | 13856C6DCE2C8C328153C9C6FD37643EDCC45B81 |
| SHA-256: | 5931FFF65F3CF45DA0DDD4F29D39BA23063A3735A8F99868DF6C23E26BD61788 |
| SHA-512: | 074239FBFE2D5B34EFDD6EC0255A459CFDDCA9538FDAE5F371F50414B4EC305D551461CBD852294E89197BD8375E7FC5C888657971281AFCCC06051AFA01FA1E |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 9322 |
| Entropy (8bit): | 7.970957504532259 |
| Encrypted: | false |
| SSDEEP: | 192:fkbgJz09/ZPZ2/PusAZPNcPFM+mvdWNhHmZscrP9R/:fXJMysN+IWnGOcZx |
| MD5: | 57F9636EB7A96B8BD33B7A306D5632F8 |
| SHA1: | 94F6D29F86F6271C34211695F01871309822249D |
| SHA-256: | 9094BA188FAB8A3F940C527705AE45A914A8C595AD18B57E1F5C76E0D83D075D |
| SHA-512: | E875842C6E1FF050EB492B45A81D596BEB9F407689AE37545910EF3F0183B78BCED3574E644A0867C3BCE85E56E94A5F4E15837BC3B0832F9543CD2CCA9ADD5A |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{93D29297-C59C-4667-B105-0897C1273FAB}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 12420 |
| Entropy (8bit): | 3.5214548852034735 |
| Encrypted: | false |
| SSDEEP: | 192:65EOu9lXxlB+c08HZvFBru+FBr972I0WFBr4Bo2i6S5FBr:62Ou9l4c08HZvF1FL2LWFsRi6S5F |
| MD5: | 1E860A2A1361E91CA0F6046AC7970905 |
| SHA1: | 3F1913383CBB36BDF40BC43F317FC095E60FEA7D |
| SHA-256: | 1FFA37D8FEBF7D2E16E4A0BDEC803DE5B605427EE7AA0BB55A51AEC2034CAD38 |
| SHA-512: | FBB191CB55D389B8DA93D42D45129591FE8D2A68310184B14FE8028B99BA3AD724099902E43C4A35C087B1E5347BD27B60C4E4E7F6420D6A36706280BA648CBA |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1724799049713006500_60D0B74F-8749-4C78-9E66-33C6417F027A.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.17742041044754253 |
| Encrypted: | false |
| SSDEEP: | 1536:nVw0oz1QXhTMaeHaLxsF7qy7RkIFeR7jVwbccLWH1KC0Q2BtgRY5vBDW:WzqRzeHIOq0MMvB |
| MD5: | B740C4C1001E2684AFF67BE33ECCA37B |
| SHA1: | FADE959CFBEF3917560C34B8527CD389231F1CAE |
| SHA-256: | DBEABEB0074172494735210B9ADCEA98B208DD752BEFD8CAC87ED90DE97F141C |
| SHA-512: | D5495B64632CA6D29E5F6CD61429BCEAC490B0D108B623C55EB16E68D2EF81EBE0A8A535650B6B70E26C77F8CAE5156455E0505E9BE19C41E06D7A522A602EAC |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1724799049713750700_60D0B74F-8749-4C78-9E66-33C6417F027A.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | 3:: |
| MD5: | 8F4E33F3DC3E414FF94E5FB6905CBA8C |
| SHA1: | 9674344C90C2F0646F0B78026E127C9B86E3AD77 |
| SHA-256: | CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC |
| SHA-512: | 7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240827T1850490510-6916.etl
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 102400 |
| Entropy (8bit): | 4.470351062445492 |
| Encrypted: | false |
| SSDEEP: | 768:p2Yrk/89tpfEJjHd4b/9k9bIvstcPszXFegjvGyjpXbTnzmoZZ0nC:QR4b/9k9NSPszXFegjvZjpXb37 |
| MD5: | 1F8554034E3068C9073849552BCE03FC |
| SHA1: | E64C46C63E71F4D101AFD0E12ECA728D499E2623 |
| SHA-256: | FD041DD6D8B928E288CF9A6AC4E2FEB6ACE5EF44CC9827B2E22964FF242B2FD4 |
| SHA-512: | 97EF0411CA70EFD5C0BBD86D001BB2639D829640BF44FDEFB21A9BF7E2F9D6030C0203F37679B4C8863A8F4E512BB2C47187BD2B902FB52604E9859705BB6D06 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 30 |
| Entropy (8bit): | 1.2389205950315936 |
| Encrypted: | false |
| SSDEEP: | 3:S4X:S |
| MD5: | F156BC5D98B330EA1E112DC8FB1481C6 |
| SHA1: | 10B9E9A45A4279A8386EBA4F58AF47FA0A41107F |
| SHA-256: | 44A4D193502432668356C42CA7A0662098B693B35AE26ABBA0129651FE31A08D |
| SHA-512: | 86D5EB9EE25C2A0B3947902A62C7F7D03A434385E846149F185BE89FBFEFADB3CFA68338411F54C18865130FB991C910FAD517C7696D71F86FC770D7ABEBE60D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 16384 |
| Entropy (8bit): | 0.6706940961211854 |
| Encrypted: | false |
| SSDEEP: | 12:rl3baFAEsqLKeTy2MyheC8T23BMyhe+S7wzQP9zNMyhe+S7xMyheCjtwm:rZqmnq1Py961Sm |
| MD5: | 41BE8106AFA73A0666E15266D8251292 |
| SHA1: | E66E4D5200334577A1C8F8EDE733C56B597002FD |
| SHA-256: | 399077E097641F76BDB6A66709A1334E6C562135979CBDCDCB10896F7727AE7A |
| SHA-512: | CC24D4D5179ECEA8046845ABFFEF9848DF0E18E2581F1A88D586C604A2146B961811F2083ED2A5F9A343CC532A854294046000BAEA498BB0F235E1E7F9863734 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2673 |
| Entropy (8bit): | 3.98567791844492 |
| Encrypted: | false |
| SSDEEP: | 48:80daTmC6H3idAKZdA1FehwiZUklqeh6y+3:8Z/u5y |
| MD5: | C807E35815BA0A01BDB2D32E3BE8FC6F |
| SHA1: | C6BA57C384E1310107CD0DDA782B728526F7B841 |
| SHA-256: | 4DB6716683D1AA311330E6ADB35028D34CA183F4BA04B930CF27E15CF8698297 |
| SHA-512: | 33611864FB94EF5AAED2E8E36A56ADBC2D7FC5748216979CA9FD3B77A30029FE5D60271DE5802F93A51689320E119810DF42E1CD2B24C3398455F70351624A28 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2675 |
| Entropy (8bit): | 4.002529578364453 |
| Encrypted: | false |
| SSDEEP: | 48:8GdaTmC6H3idAKZdA1seh/iZUkAQkqehpy+2:8D/I9Q8y |
| MD5: | 21168DBAF3B60038EE2EAD1BC031FF2A |
| SHA1: | 6F4B159AA1CFCF34BAAEA8A9E7BAAC40139F14A8 |
| SHA-256: | 8F2E3677AACF7D99D0C8046760F7154B2165D9270E2E14DE5104AF1FAE013DB9 |
| SHA-512: | AD98FB69573D1FE4D5A030829A05F556915164D1059981682009EC41A0379913FEA16AC57DA7604F7E759C996D532BDAB7D8D26B03693A7CB4B1058DC8AA2B1F |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2689 |
| Entropy (8bit): | 4.008313246571529 |
| Encrypted: | false |
| SSDEEP: | 48:8RdaTmCAH3idAKZdA14meh7sFiZUkmgqeh7sTy+BX:8m/+nFy |
| MD5: | EB7901B391512226A5A19E3CDDD7D92B |
| SHA1: | 14D0D961931B85359BA369F3C8187726E71399FE |
| SHA-256: | 8D68E4E24EA98CEC6424ACFD44AE7F18FE57330AD2F0B9E8635DEFE2CB6AC8B4 |
| SHA-512: | 2B8405158C4AE11AEED260346655954B43F08D2C3BCD326B5A6CF7F48E79DE1A12D6BB980E66F278A0D35C6963DA3FF9AAC9FFFCADB1241DF79CD972030ECC03 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 4.001651348857717 |
| Encrypted: | false |
| SSDEEP: | 48:85daTmC6H3idAKZdA1TehDiZUkwqeh9y+R:8+/jry |
| MD5: | 66EB78F629FE8EC7D70C23A3631D0F26 |
| SHA1: | C3479B995ACF36F54E83D14DDF182F8E8B4A6851 |
| SHA-256: | DE9E5C532D3702718DEFA3148FF0506A6E35122F0CFA6B694DA8D68AC062F0D5 |
| SHA-512: | 4E6B139DA3B7EBC6159CFCAF3C0B90031349433C0900ED0DCC99D5C3F5D513DC2A0B961D0D883AC48EDC3CA5A9DAF9B33098E2E7DF31FD545FED90E5E6ECDEDF |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.9902805126391145 |
| Encrypted: | false |
| SSDEEP: | 48:89daTmC6H3idAKZdA1dehBiZUk1W1qeh/y+C:8q/T9fy |
| MD5: | EFBFC89C603427E6A08BF48157B1BCAA |
| SHA1: | 4047C64CCADA52A132B4EA8214ED0ED5D8AB5F01 |
| SHA-256: | 008FFD618E2E1A3B9D8806916FFFC15F2E6B4DD19EFD2626EBD5C957088399E3 |
| SHA-512: | 754667098784C8C7F466ACBC455742DCF1F14E19ABE0774F3C48D1511BF69C55EEE2C7E72B71B7C2D74C1D0CE38FC8B85A2239137723D3309B2C6A02D9AA982F |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2679 |
| Entropy (8bit): | 3.998254212548605 |
| Encrypted: | false |
| SSDEEP: | 48:8fdaTmC6H3idAKZdA1duTeehOuTbbiZUk5OjqehOuTbFy+yT+:88/3TfTbxWOvTbFy7T |
| MD5: | 4E892866064BFF6D068B890FDAD9FEAC |
| SHA1: | 9807891AC31522BE09333333DFBEE615C9F2D38B |
| SHA-256: | AF1349FB8AE453CEBDCA9D83E459FE7C59CD8145F6F84A1C13E570A3F6A4C659 |
| SHA-512: | 46B330E953B2B7ED40BC743DFA59113AC5328CD4ED02548B409B088197B63622F2659059E5623FB429B86D8066A73AB6481DC4F7DD725FCBBFFE43B28DC2E952 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 271360 |
| Entropy (8bit): | 4.144850264472919 |
| Encrypted: | false |
| SSDEEP: | 6144:G+ihCEkNCEk2CEkaCEk/CEkoCEk1CEknjUOedz:TihCEkNCEk2CEkaCEk/CEkoCEk1CEkn4 |
| MD5: | F25901AF6BB1331D0D57BF9A08033AEA |
| SHA1: | 79D585163DA36F05889B5EDF43810CFCD9334166 |
| SHA-256: | 78FFAFB5EF1C8094F20B8762AAF1682F7264AE63DAE333E50B8C70639E8CE13C |
| SHA-512: | 31CB532093013C028109E39C3C3EAC900339516326068E70ABB52D33AE14843A8B5F397AF8FB9421DAD8EBF0FFEC78877AE6F7D7AB530DC28580F09647872ACA |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 131072 |
| Entropy (8bit): | 5.706007026353156 |
| Encrypted: | false |
| SSDEEP: | 3072:d6oaCEkNCEk3CEkaCEk/CEkoCEk1CEkOJIUe+1vPp9Sf:dgCEkNCEk3CEkaCEk/CEkoCEk1CEkOJ8 |
| MD5: | AFD189DE7902A4D1BEABACE8A9D16A89 |
| SHA1: | 0BD0E68B1C3B58E7A22980EED3BEA2DB20C14BE2 |
| SHA-256: | 0A4F51EF066097AA5C2459943A79758D1EC00CF4E13F71F7210314B5B5E53E19 |
| SHA-512: | C4B459CAA904C6A0EAC9A1712DEAB5C9052E5F9652CF3D85EDC70E322CB584FB63B3A40CB9F49B48C0E86ED8FB602B8A460E66827281B5AA5613B9D01FB52A8C |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 17672 |
| Entropy (8bit): | 5.233316811547578 |
| Encrypted: | false |
| SSDEEP: | 384:lpLsOooX8uvFBiRh+HnEDuvvy1pqvuvDX/0ohHK9mm+tMHvVOPoQeOMmuI:QnoX8uNB2YHnEDsvy1pqvub/0iq4NMHM |
| MD5: | 6EFDDF589864D2E146A55C01C6764A35 |
| SHA1: | EFA8BBA46CB97877EEC5430C43F0AC32585B6B2F |
| SHA-256: | 2D92F0CE8491D2F9A27EA16D261A15089C4A9BE879D1EEDCB6F4A3859E7F1999 |
| SHA-512: | 1AFC735660AAE010C04EF89C732D08EBA1B87BE6048164F273BEAEBECA3F30062812B4CD141DDF0291A6AB54F730875D597678A3564C0EED2AAC11E5400F951A |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 16 |
| Entropy (8bit): | 3.702819531114783 |
| Encrypted: | false |
| SSDEEP: | 3:H6xhkY:aQY |
| MD5: | 858372DD32511CB4DD08E48A93B4F175 |
| SHA1: | CE4555B7B2EFBBD644D8E34CF3453A0E8CAA3C43 |
| SHA-256: | 3D18F3E1469C83D62CF3A39BA93F8EAA5B22447FE630E59F39DC1B7747635359 |
| SHA-512: | 6A57E0D4A1C23CB693AA9312F6FDAA1FC4309B5BC91D1B2279B5792BEE3534749FD3693C19AA95E0768800472D11D438EC3116F337679A249C28BE0E038E6DE0 |
| Malicious: | false |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmj6rM7wgrttBIFDfSCVyI=?alt=proto |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 40326 |
| Entropy (8bit): | 5.245555585297941 |
| Encrypted: | false |
| SSDEEP: | 384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE |
| MD5: | DA9DC1C32E89C02FC1E9EEB7E5AAB91E |
| SHA1: | 3EFB110EFA6068CE6B586A67F87DA5125310BC30 |
| SHA-256: | 398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1 |
| SHA-512: | D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/ScriptResource.axd?d=aAOYtpBf_GXg5NSmtKwVTDiMPD1bags60QZEu3i6XG37HSaAJuGLo2l2_vzRH0e2xKvwCyFHsxHqFGU-En0uVIzI2k3L1zRSpU5251rPJVOSsE62aEsky6hzwdKGgeecz9jIRD4VADMaq6tH1r_8JzgMi7Go2eChJg1G_TVqx4oeVFRNoDMThw8mNTVqVwVZ0&t=74258c30 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 102801 |
| Entropy (8bit): | 5.336080509196147 |
| Encrypted: | false |
| SSDEEP: | 1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE |
| MD5: | C89EAA5B28DF1E17376BE71D71649173 |
| SHA1: | 2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD |
| SHA-256: | 66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C |
| SHA-512: | B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0 |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/ScriptResource.axd?d=oGTz3cMZ17SjSHW4EbzE1KvDeuABRKv2Lp_KhoJV8wZDjKT7rx_oz4fGRO5OALb3r3kFQXSFi8RTU-fGd-fotUMohz_1FNrqucrFGmbzjuIvBJ0RB0UrVR8mzrDuqzAqMTPbBKOGytaq0kPI9RXbBct7nQ5WrHca6n4rriGz5DZlnLEE1Ca8F8-iSt9xyMsm0&t=7a0cc936 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 69166 |
| Entropy (8bit): | 5.668537924358053 |
| Encrypted: | false |
| SSDEEP: | 1536:Plggu8lFhxwWXBOxSPSW8N6fGNNKsbAJs2wVXuNH3Q:PLuGCGeTKsXVXuC |
| MD5: | 2AD093997864131A760742A686406B9B |
| SHA1: | 26AAC3A890CB6A375443822E8CCD3C1CE168639F |
| SHA-256: | 4CB787C1521C7D6684A6004FAC3B47319B16D9A216932440931098FFD351A929 |
| SHA-512: | 748655FDA322B80094D70833BEDA23F82DBBFC166E8F2065E2C4839EF5C318E8C6F4A1349FB1E89690F6915E4EB36029F5DC77360B798D181C3330CB3BCFF560 |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/:o:/g/personal/clifff_unioncity_org/EqwonIYFm81KkAt2sVK8RBIBfbO9STgFqNLDrcC0AoyHIw?e=5%3aTiIrsC&xsdata=MDV8MDJ8a2hpY2tleUBzYW50YWNsYXJhY2EuZ292fDdhMDMyZDAxNTFjZTQ5ZDI5NjM2MDhkY2M2ZDkzN2NkfDI4ZWEzNTQ4MTA2OTRlODFhYTBiNmU0YjMyNzFhNWNifDB8MHw2Mzg2MDM4ODM1MTIwNDgxMTd8VW5rbm93bnxUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZNbjA9fDYwMDAwfHx8&sdata=UXVsTlIrRVNZU05Qc2NiK2N1MmpqdnZiQWtqUklQQVZUNTI5dCs1alI5cz0%3d |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 17672 |
| Entropy (8bit): | 5.233316811547578 |
| Encrypted: | false |
| SSDEEP: | 384:lpLsOooX8uvFBiRh+HnEDuvvy1pqvuvDX/0ohHK9mm+tMHvVOPoQeOMmuI:QnoX8uNB2YHnEDsvy1pqvub/0iq4NMHM |
| MD5: | 6EFDDF589864D2E146A55C01C6764A35 |
| SHA1: | EFA8BBA46CB97877EEC5430C43F0AC32585B6B2F |
| SHA-256: | 2D92F0CE8491D2F9A27EA16D261A15089C4A9BE879D1EEDCB6F4A3859E7F1999 |
| SHA-512: | 1AFC735660AAE010C04EF89C732D08EBA1B87BE6048164F273BEAEBECA3F30062812B4CD141DDF0291A6AB54F730875D597678A3564C0EED2AAC11E5400F951A |
| Malicious: | false |
| URL: | https://res-2-gcc.cdn.office.net/bld/_layouts/15/16.0.25207.12004/require.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26951 |
| Entropy (8bit): | 4.514992390210281 |
| Encrypted: | false |
| SSDEEP: | 384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v |
| MD5: | B3D7A123BE5203A1A3F0F10233ED373F |
| SHA1: | F4C61F321D8F79A805B356C6EC94090C0D96215C |
| SHA-256: | EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192 |
| SHA-512: | A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 23063 |
| Entropy (8bit): | 4.7535440881548165 |
| Encrypted: | false |
| SSDEEP: | 384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG |
| MD5: | 90EA7274F19755002360945D54C2A0D7 |
| SHA1: | 647B5D8BF7D119A2C97895363A07A0C6EB8CD284 |
| SHA-256: | 40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB |
| SHA-512: | 7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07 |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/WebResource.axd?d=Hh-aJJmL0826l0G2-eaJeO12RJ7m9XpFZMjUQnqHTlcQfVceBlRX577w6TfqxBcsKWmqlDoS9vxeokfzYC8ZJr1vsIiXzxdUDDi5jgMBNxA1&t=638555714997292641 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3331 |
| Entropy (8bit): | 7.927896166439245 |
| Encrypted: | false |
| SSDEEP: | 96:zHjOKn3csE3x5liVsCo4GcPIZpV6x5cge8oo9:zDOK3zE3x5TCwcP4LQNeq |
| MD5: | EF884BDEDEF280DF97A4C5604058D8DB |
| SHA1: | 6F04244B51AD2409659E267D308B97E09CE9062B |
| SHA-256: | 825DE044D5AC6442A094FF95099F9F67E9249A8110A2FBD57128285776632ADB |
| SHA-512: | A083381C53070B65B3B8A7A7293D5D2674D2F6EC69C0E19748823D3FDD6F527E8D3D31D311CCEF8E26FC531770F101CDAF95F23ECC990DB405B5EF48B0C91BA2 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 40326 |
| Entropy (8bit): | 5.245555585297941 |
| Encrypted: | false |
| SSDEEP: | 384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE |
| MD5: | DA9DC1C32E89C02FC1E9EEB7E5AAB91E |
| SHA1: | 3EFB110EFA6068CE6B586A67F87DA5125310BC30 |
| SHA-256: | 398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1 |
| SHA-512: | D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 23063 |
| Entropy (8bit): | 4.7535440881548165 |
| Encrypted: | false |
| SSDEEP: | 384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG |
| MD5: | 90EA7274F19755002360945D54C2A0D7 |
| SHA1: | 647B5D8BF7D119A2C97895363A07A0C6EB8CD284 |
| SHA-256: | 40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB |
| SHA-512: | 7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 81911 |
| Entropy (8bit): | 5.347755348771571 |
| Encrypted: | false |
| SSDEEP: | 1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46jA:MGLXGFKT79DSsH |
| MD5: | 763508A4BBB3F582483681DF053F4EAA |
| SHA1: | 95F4DDC8E09D96F5C43C32DA821917D7F5B4FC5B |
| SHA-256: | 98112E3C44BD60FF257A38B6AAF3802EE67C09F6C6E825D8351BDEE78C346B16 |
| SHA-512: | 44B86B2CA75A082FF3741E49D2D5B861825F51FB6DB03D80D9266873D1A0289B24206056AE4497CD94C6C1A6FFBBB8BDBA1B7F5D34AF4FF401BAEB1DA54D9664 |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/ScriptResource.axd?d=oGTz3cMZ17SjSHW4EbzE1KvDeuABRKv2Lp_KhoJV8wZDjKT7rx_oz4fGRO5OALb3r3kFQXSFi8RTU-fGd-fotUMohz_1FNrqucrFGmbzjuIvBJ0RB0UrVR8mzrDuqzAqMTPbBKOGytaq0kPI9RXbBct7nQ5WrHca6n4rriGz5DZlnLEE1Ca8F8-iSt9xyMsm0&t=74258c30 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26951 |
| Entropy (8bit): | 4.514992390210281 |
| Encrypted: | false |
| SSDEEP: | 384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v |
| MD5: | B3D7A123BE5203A1A3F0F10233ED373F |
| SHA1: | F4C61F321D8F79A805B356C6EC94090C0D96215C |
| SHA-256: | EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192 |
| SHA-512: | A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 23063 |
| Entropy (8bit): | 4.7535440881548165 |
| Encrypted: | false |
| SSDEEP: | 384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG |
| MD5: | 90EA7274F19755002360945D54C2A0D7 |
| SHA1: | 647B5D8BF7D119A2C97895363A07A0C6EB8CD284 |
| SHA-256: | 40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB |
| SHA-512: | 7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07 |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/WebResource.axd?d=Hh-aJJmL0826l0G2-eaJeO12RJ7m9XpFZMjUQnqHTlcQfVceBlRX577w6TfqxBcsKWmqlDoS9vxeokfzYC8ZJr1vsIiXzxdUDDi5jgMBNxA1&t=638588829843638381 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 23063 |
| Entropy (8bit): | 4.7535440881548165 |
| Encrypted: | false |
| SSDEEP: | 384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG |
| MD5: | 90EA7274F19755002360945D54C2A0D7 |
| SHA1: | 647B5D8BF7D119A2C97895363A07A0C6EB8CD284 |
| SHA-256: | 40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB |
| SHA-512: | 7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 69166 |
| Entropy (8bit): | 5.668190410757759 |
| Encrypted: | false |
| SSDEEP: | 1536:Plggu8Guh6JWXBOxSPSW8N6fGNNKPpJs2wVXuNH3d:PLu2CGeTKPaVXuf |
| MD5: | 8C3B8F3571DC3E4755608FF917C27C3F |
| SHA1: | 8AB1EDAD993D436B52432EEA0A38E4676489E787 |
| SHA-256: | 6B42DC159964ECCA61CA563FF044A50B3F7672115754B0CF4A3073257E696CD0 |
| SHA-512: | 67D166D94391E84BE490B07566DF9A52C00937022B5DACC7086DA23FE5C9F52127D441AEACA42576914EC7ED3395818A6B89E3B72B27049EBA77F8304E249B8C |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/:o:/g/personal/clifff_unioncity_org/EqwonIYFm81KkAt2sVK8RBIBfbO9STgFqNLDrcC0AoyHIw?e=5%3aTiIrsC&xsdata=MDV8MDJ8a2hpY2tleUBzYW50YWNsYXJhY2EuZ292fDdhMDMyZDAxNTFjZTQ5ZDI5NjM2MDhkY2M2ZDkzN2NkfDI4ZWEzNTQ4MTA2OTRlODFhYTBiNmU0YjMyNzFhNWNifDB8MHw2Mzg2MDM4ODM1MTIwNzY0MDB8VW5rbm93bnxUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZNbjA9fDYwMDAwfHx8&sdata=ZURhM3RzbWFzelg4Qm1wUXRvTnlobEpEakR4YVpuT3pIWHIzd1JESlFkWT0%3d |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 40512 |
| Entropy (8bit): | 5.386921349191213 |
| Encrypted: | false |
| SSDEEP: | 768:Tkv+rkfa2aH5m7UYfXLMQWGjaKEstpgG9ycj:Pr8LaZkzLM46G9 |
| MD5: | 8DCE60169BA666CA03A31D123DB49908 |
| SHA1: | 956C46BB6058C23D35440DCC656CE61C7B151399 |
| SHA-256: | F9F5A40C01C6D569373CE61EE77849F30E4176E1310652FF17D458C68680CF75 |
| SHA-512: | 26BA15ADE0F62393413156C5061B04AA8FCE3A5A5EE06EE35DFC42D3F76AF850980731A38DCF7094711E7FAB18C80EF66C9B354C029D06FA2E846330ACCC7E9E |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 215 |
| Entropy (8bit): | 5.347576819613972 |
| Encrypted: | false |
| SSDEEP: | 6:JiMVBdgqZjZWtMfgRTH1zamtDBGMRIpWOlAg6n:MMHdVBZWyUTpamevWMF6 |
| MD5: | 5C319BF7967F4ABC07B591F5945CACAF |
| SHA1: | A66A0FF9A5D6FAB2A1C83166AEB487EFB6C86BDB |
| SHA-256: | 40B81F26F0C8343D5CE37CF26878AC6404E8E7E422162CA49E09A7D14092D0DC |
| SHA-512: | 10EA61E6D7D6003362619E9B81AA5743E74DC02DB2A5A53B4259FE81047CBD6241BCC25441F4AB25515A4E97F41EF26AFFF1323E00D0485AB0E9AE16299D7A0B |
| Malicious: | false |
| URL: | https://res-2-gcc.cdn.office.net/files/odsp-web-prod_2024-08-09.009/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 40326 |
| Entropy (8bit): | 5.245555585297941 |
| Encrypted: | false |
| SSDEEP: | 384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE |
| MD5: | DA9DC1C32E89C02FC1E9EEB7E5AAB91E |
| SHA1: | 3EFB110EFA6068CE6B586A67F87DA5125310BC30 |
| SHA-256: | 398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1 |
| SHA-512: | D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 40326 |
| Entropy (8bit): | 5.245555585297941 |
| Encrypted: | false |
| SSDEEP: | 384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE |
| MD5: | DA9DC1C32E89C02FC1E9EEB7E5AAB91E |
| SHA1: | 3EFB110EFA6068CE6B586A67F87DA5125310BC30 |
| SHA-256: | 398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1 |
| SHA-512: | D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/ScriptResource.axd?d=aAOYtpBf_GXg5NSmtKwVTDiMPD1bags60QZEu3i6XG37HSaAJuGLo2l2_vzRH0e2xKvwCyFHsxHqFGU-En0uVIzI2k3L1zRSpU5251rPJVOSsE62aEsky6hzwdKGgeecz9jIRD4VADMaq6tH1r_8JzgMi7Go2eChJg1G_TVqx4oeVFRNoDMThw8mNTVqVwVZ0&t=7a0cc936 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 7886 |
| Entropy (8bit): | 3.9482833105763633 |
| Encrypted: | false |
| SSDEEP: | 48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E |
| MD5: | 0B60F3C9E4DA6E807E808DA7360F24F2 |
| SHA1: | 9AFC7ABB910DE855EFB426206E547574A1E074B7 |
| SHA-256: | ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341 |
| SHA-512: | 1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80 |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 7886 |
| Entropy (8bit): | 3.9482833105763633 |
| Encrypted: | false |
| SSDEEP: | 48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E |
| MD5: | 0B60F3C9E4DA6E807E808DA7360F24F2 |
| SHA1: | 9AFC7ABB910DE855EFB426206E547574A1E074B7 |
| SHA-256: | ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341 |
| SHA-512: | 1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 26951 |
| Entropy (8bit): | 4.514992390210281 |
| Encrypted: | false |
| SSDEEP: | 384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v |
| MD5: | B3D7A123BE5203A1A3F0F10233ED373F |
| SHA1: | F4C61F321D8F79A805B356C6EC94090C0D96215C |
| SHA-256: | EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192 |
| SHA-512: | A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/ScriptResource.axd?d=GtUB5wNA9V9Q1GMw2L8NG0k5VPw9JvBjJX_SApQKGJhBsTpSN4-haI6xrqoZ45UB9qJNi1oSLzflaSwYw3yTBr1auTWQxUw-RsMe1pZ54ixxuTVUNTZwFTouck5hmp-2ZBzVUw15-OdWBzv3-J5YktHN66-i84qnWTdtwX31lB81&t=ffffffffedc3492c |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 102801 |
| Entropy (8bit): | 5.336080509196147 |
| Encrypted: | false |
| SSDEEP: | 1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE |
| MD5: | C89EAA5B28DF1E17376BE71D71649173 |
| SHA1: | 2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD |
| SHA-256: | 66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C |
| SHA-512: | B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 40512 |
| Entropy (8bit): | 5.386921349191213 |
| Encrypted: | false |
| SSDEEP: | 768:Tkv+rkfa2aH5m7UYfXLMQWGjaKEstpgG9ycj:Pr8LaZkzLM46G9 |
| MD5: | 8DCE60169BA666CA03A31D123DB49908 |
| SHA1: | 956C46BB6058C23D35440DCC656CE61C7B151399 |
| SHA-256: | F9F5A40C01C6D569373CE61EE77849F30E4176E1310652FF17D458C68680CF75 |
| SHA-512: | 26BA15ADE0F62393413156C5061B04AA8FCE3A5A5EE06EE35DFC42D3F76AF850980731A38DCF7094711E7FAB18C80EF66C9B354C029D06FA2E846330ACCC7E9E |
| Malicious: | false |
| URL: | https://res-2-gcc.cdn.office.net/files/odsp-web-prod_2024-08-09.009/spoguestaccesswebpack/spoguestaccess.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 68996 |
| Entropy (8bit): | 5.668243325335606 |
| Encrypted: | false |
| SSDEEP: | 1536:Plggu8g0hQ7WXBOxSPSW8N6fGNNKlKJs2wVX5NHx:PLuCCGeTKl9VX5j |
| MD5: | B4C0AEF42E4F7818D1130FBC1A2C4B04 |
| SHA1: | F3A28F06E8D7A2B1F40C6A385A9BEDF435CE2E7B |
| SHA-256: | 9DA62DC761D0C0EE4D7F0970C71A38CA97C9492146276DE36F21F77F8BA85125 |
| SHA-512: | 53EA885F8767044F79E32E48B7826CD737D3519998C95F366448C09FA1D279DF4E4DCC22225C85770D3BD216DEE23EC76D1769B5973AF8E181145A5F5885A6B6 |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/personal/clifff_unioncity_org/_layouts/15/guestaccess.aspx?e=5%3aTiIrsC&share=EqwonIYFm81KkAt2sVK8RBIBfbO9STgFqNLDrcC0AoyHIw |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3331 |
| Entropy (8bit): | 7.927896166439245 |
| Encrypted: | false |
| SSDEEP: | 96:zHjOKn3csE3x5liVsCo4GcPIZpV6x5cge8oo9:zDOK3zE3x5TCwcP4LQNeq |
| MD5: | EF884BDEDEF280DF97A4C5604058D8DB |
| SHA1: | 6F04244B51AD2409659E267D308B97E09CE9062B |
| SHA-256: | 825DE044D5AC6442A094FF95099F9F67E9249A8110A2FBD57128285776632ADB |
| SHA-512: | A083381C53070B65B3B8A7A7293D5D2674D2F6EC69C0E19748823D3FDD6F527E8D3D31D311CCEF8E26FC531770F101CDAF95F23ECC990DB405B5EF48B0C91BA2 |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/_layouts/15/images/microsoft-logo.png |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 26951 |
| Entropy (8bit): | 4.514992390210281 |
| Encrypted: | false |
| SSDEEP: | 384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v |
| MD5: | B3D7A123BE5203A1A3F0F10233ED373F |
| SHA1: | F4C61F321D8F79A805B356C6EC94090C0D96215C |
| SHA-256: | EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192 |
| SHA-512: | A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B |
| Malicious: | false |
| URL: | https://cityofunioncity-my.sharepoint.com/ScriptResource.axd?d=GtUB5wNA9V9Q1GMw2L8NG0k5VPw9JvBjJX_SApQKGJhBsTpSN4-haI6xrqoZ45UB9qJNi1oSLzflaSwYw3yTBr1auTWQxUw-RsMe1pZ54ixxuTVUNTZwFTouck5hmp-2ZBzVUw15-OdWBzv3-J5YktHN66-i84qnWTdtwX31lB81&t=ffffffffa8ad04d3 |
| Preview: |
| File type: | |
| Entropy (8bit): | 6.0280649686360945 |
| TrID: |
|
| File name: | (No subject) (62).eml |
| File size: | 71'155 bytes |
| MD5: | 164d61b5275cc077e037502a5edd58c1 |
| SHA1: | 8b9eee694ce12a5cfc1aec127b229792c64981fc |
| SHA256: | 0254a9a1627132089584a67de0da74cc1c57ab4c1f9c19566e40fa4e99e2085e |
| SHA512: | 57ca8bee6c181d66436152a0422ddf0bfe2a61b361cd73417cef1cbdb92e54d67af6d1114381402c833ff527edd1fedd92a6568d4de0dd332a416a96179d46c3 |
| SSDEEP: | 1536:HdbvCHbzfYfaztN8Sv22p2Kd/Iz61To/hKiFFnYYmzoamRuFVNxAT:HdrC7zfjzpI9YU50Nx0 |
| TLSH: | 1763071BFBC01C16982B55A4A8137B3DBF7848D79B234870749F7A7A0F5DCD7898A248 |
| File Content Preview: | Received: from SA1PR09MB11185.namprd09.prod.outlook.com.. (2603:10b6:806:364::15) by SA1PR09MB8669.namprd09.prod.outlook.com with.. HTTPS; Tue, 27 Aug 2024 20:45:51 +0000..ARC-Seal: i=2; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=pass;.. b=Uabz |
| Subject: | Cliff Feldman shared "Union city secured docs shared" with you |
| From: | Cliff Feldman <CliffF@unioncity.org> |
| To: | "khickey@santaclaraca.gov" <khickey@santaclaraca.gov> |
| Cc: | |
| BCC: | |
| Date: | Tue, 27 Aug 2024 20:45:29 +0000 |
| Communications: |
|
| Attachments: |
|
| Key | Value |
|---|---|
| Received | from CO6PR09MB8167.namprd09.prod.outlook.com ([fe80::c72c:d330:5083:77c]) by CO6PR09MB8167.namprd09.prod.outlook.com ([fe80::c72c:d330:5083:77c%4]) with mapi id 15.20.7897.027; Tue, 27 Aug 2024 20:45:32 +0000 |
| ARC-Seal | i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=amUyuVbs+4xqKgpS376BzxOdlfxkG3MkjGmAC2xhO4HgE+Xt5zTLIMvR2pCtlGBudOQ9pJgas8gMV398flRC3MtVYDHIZZlQ2E0M/QPH4MsfxbhzgsBFhmBYM5fLA+sM5j/06vZ2lXmd0aHnnNKAuQW0V4wA1jiEpBvU8Ytvu9tb9Dm1tcLJUltCIto+/lYvbcAJr4VUqHc6NIdedwwxPPCpmm3DaemryzloDP/ZbTyvmLKyDvXUEfbB+kwVG1HWQu217m56ame8UTiFaTQWX84c5yLKa5op95CjUPlEvPmM9/pgr1xTsmf986E83E2xNFqPVOu3El5jeFNAiac0Gw== |
| ARC-Message-Signature | i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=gOvLXoSWJ67rrgQevTYZiyi+QZQ++dsz1K4tBlrKseg=; b=qnFP2/UnTvkCmfouPDg6eebk0L0cPLrRr07XJ1rr7ErNlm0DeZkj/ZDq/P6nc6TbhdCOVRo8WsHpk2WGmyt2zu7TTlTbcm/4BN51ueddzUzPY2hNN8vwN/Ln+U7jx+yUPAO/T65euB38462uRL40wueHjFTPWdbzGyyQqHDpNr6LKTPhEoH17BAM2F68KKkZqY4UvrYRbiYeR3lFk/sPsvsUnQ5wNd4BJIEAEqOhJPM0OYjt6maODaxLbypFn6Xy6GupJjF4esZgsCM4O8WbMNJ96Vx3DVQa4fmi5VlNbIeaJx1HGDRQY71JXY7Ld9jjQpMj7LBw+9DUSOJwPsMsFg== |
| ARC-Authentication-Results | i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=unioncity.org; dmarc=pass action=none header.from=unioncity.org; dkim=pass header.d=unioncity.org; arc=none |
| Authentication-Results | spf=pass (sender IP is 209.222.82.38) smtp.mailfrom=unioncity.org; dkim=none (message not signed) header.d=none;dmarc=pass action=none header.from=unioncity.org;compauth=pass reason=100 |
| Received-SPF | Pass (protection.outlook.com: domain of unioncity.org designates 209.222.82.38 as permitted sender) receiver=protection.outlook.com; client-ip=209.222.82.38; helo=outbound-ip170a.ess.barracuda.com; pr=C |
| From | Cliff Feldman <CliffF@unioncity.org> |
| To | "khickey@santaclaraca.gov" <khickey@santaclaraca.gov> |
| Subject | Cliff Feldman shared "Union city secured docs shared" with you |
| Thread-Topic | Cliff Feldman shared "Union city secured docs shared" with you |
| Thread-Index | AQHa+MINilEF1n11HEGHv4sNNxQjKA== |
| Date | Tue, 27 Aug 2024 20:45:29 +0000 |
| Message-ID | <Share-2a7c4aa1-0066-6000-3dbc-a75da9bd7142-667c4fd5-a9fc-43fb-b1da-588b1241e162-0bcfd0e7-7a20-4ace-a888-994e606504cf-DispatchToRecipients-PreprocessPayload-r0-SendEmail@odspnotify> |
| Accept-Language | en-US |
| Content-Language | en-US |
| X-MS-Has-Attach | yes |
| X-MS-TNEF-Correlator | |
| Authentication-Results-Original | dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=unioncity.org; |
| x-ms-traffictypediagnostic | CO6PR09MB8167:EE_|SA0PR09MB6300:EE_|DS1PEPF00017E0A:EE_|SA1PR09MB11185:EE_|SA1PR09MB8669:EE_ |
| X-MS-Office365-Filtering-Correlation-Id | 7a032d01-51ce-49d2-9636-08dcc6d937cd |
| x-ms-exchange-senderadcheck | 1 |
| x-ms-exchange-antispam-relay | 0 |
| X-Microsoft-Antispam-Untrusted | BCL:0;ARA:13230040|366016|41320700013|1800799024|38070700018; |
| X-Microsoft-Antispam-Message-Info-Original | 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 |
| X-Forefront-Antispam-Report-Untrusted | CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CO6PR09MB8167.namprd09.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(366016)(41320700013)(1800799024)(38070700018);DIR:OUT;SFP:1101; |
| X-MS-Exchange-AntiSpam-MessageData-Original-ChunkCount | 1 |
| X-MS-Exchange-AntiSpam-MessageData-Original-0 | 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 |
| Content-Type | multipart/related; boundary="_007_Share2a7c4aa1006660003dbca75da9bd7142667c4fd5a9fc43fbb1_"; type="multipart/alternative" |
| X-MS-Exchange-Transport-CrossTenantHeadersStamped | SA1PR09MB11185 |
| X-BESS-ID | 1724791534-102432-18646-12654-4 |
| X-BESS-VER | 2019.1_20240827.1824 |
| X-BESS-Apparent-Source-IP | 40.93.12.52 |
| X-BESS-Parts | H4sIAAAAAAACA22PO25EMQhF9+J6CgPGwGwlSmEMzjT5SJkiUjR7j4s3UorXoC ukcy68/Jb8uZdrue95KZ/f5SrQdrjtHaFha5gI3JquFiACkuZzGaJ4eVye+O3+fuBAXP EQWFUI1tmVYZCkWw3zTGwj0+C/4Ovj7RCgihw8JFBmzag221gwYnmfNVCrink95Zn1wM NiDphjdhn7Ap6cwoKM6hE88LweiA6+xQKs7BVAxbGvpUYd2MFm58hT3gif77Ms69TTZV j3XUq0I9Ue3AmXlsfrH8aIsOuAAQAA |
| X-BESS-Outbound-Spam-Score | 0.00 |
| X-BESS-Outbound-Spam-Report | Code version 3.2, rules version 3.2.2.258638 [from cloudscan21-13.us-east-2b.ess.aws.cudaops.com] Rule breakdown below pts rule name description ---- ---------------------- -------------------------------- 0.00 HTML_MESSAGE BODY: HTML included in message 0.00 BSF_BESS_OUTBOUND META: BESS Outbound |
| X-BESS-Outbound-Spam-Status | SCORE=0.00 using account:ESS98151 scores of KILL_LEVEL=7.0 tests=HTML_MESSAGE, BSF_BESS_OUTBOUND |
| X-BESS-BRTS-Status | 1 |
| Return-Path | CliffF@unioncity.org |
| X-MS-Exchange-Organization-ExpirationStartTime | 27 Aug 2024 20:45:42.6190 (UTC) |
| X-MS-Exchange-Organization-ExpirationStartTimeReason | OriginalSubmit |
| X-MS-Exchange-Organization-ExpirationInterval | 1:00:00:00.0000000 |
| X-MS-Exchange-Organization-ExpirationIntervalReason | OriginalSubmit |
| X-MS-Exchange-Organization-Network-Message-Id | 7a032d01-51ce-49d2-9636-08dcc6d937cd |
| X-EOPAttributedMessage | 0 |
| X-EOPTenantAttributedMessage | 28ea3548-1069-4e81-aa0b-6e4b3271a5cb:0 |
| X-MS-Exchange-Organization-MessageDirectionality | Incoming |
| X-MS-Exchange-Transport-CrossTenantHeadersStripped | DS1PEPF00017E0A.namprd09.prod.outlook.com |
| X-MS-PublicTrafficType | |
| X-MS-Exchange-Organization-AuthSource | DS1PEPF00017E0A.namprd09.prod.outlook.com |
| X-MS-Exchange-Organization-AuthAs | Anonymous |
| X-MS-Office365-Filtering-Correlation-Id-Prvs | 83b7cc34-b2a0-4d94-b539-08dcc6d931bd |
| X-MS-Exchange-AtpMessageProperties | SA|SL |
| X-MS-Exchange-Organization-SCL | 1 |
| X-Microsoft-Antispam | BCL:0;ARA:13230040|4073199012|22003199012|5063199012|31092699021|5073199012|35042699022; |
| X-Forefront-Antispam-Report | CIP:209.222.82.38;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:outbound-ip170a.ess.barracuda.com;PTR:outbound-ip170a.ess.barracuda.com;CAT:NONE;SFTY:9.25;SFS:(13230040)(4073199012)(22003199012)(5063199012)(31092699021)(5073199012)(35042699022);DIR:INB;SFTY:9.25; |
| X-MS-Exchange-CrossTenant-OriginalArrivalTime | 27 Aug 2024 20:45:42.5722 (UTC) |
| X-MS-Exchange-CrossTenant-Network-Message-Id | 7a032d01-51ce-49d2-9636-08dcc6d937cd |
| X-MS-Exchange-CrossTenant-Id | 28ea3548-1069-4e81-aa0b-6e4b3271a5cb |
| X-MS-Exchange-CrossTenant-AuthSource | DS1PEPF00017E0A.namprd09.prod.outlook.com |
| X-MS-Exchange-CrossTenant-AuthAs | Anonymous |
| X-MS-Exchange-CrossTenant-FromEntityHeader | Internet |
| X-MS-Exchange-Transport-EndToEndLatency | 00:00:08.5368672 |
| X-MS-Exchange-Processed-By-BccFoldering | 15.20.7897.019 |
| X-Microsoft-Antispam-Mailbox-Delivery | ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003)(1420198); |
| X-Microsoft-Antispam-Message-Info | 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 |
| MIME-Version | 1.0 |
 | |
| Icon Hash: | 46070c0a8e0c67d6 |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Aug 28, 2024 00:50:45.107888937 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Aug 28, 2024 00:50:46.313910961 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Aug 28, 2024 00:50:48.723999023 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Aug 28, 2024 00:50:50.215497017 CEST | 49704 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:50.215529919 CEST | 443 | 49704 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:50.215617895 CEST | 49704 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:50.216406107 CEST | 49704 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:50.216422081 CEST | 443 | 49704 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:50.857655048 CEST | 443 | 49704 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:50.857733011 CEST | 49704 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:50.862128973 CEST | 49704 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:50.862139940 CEST | 443 | 49704 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:50.862443924 CEST | 443 | 49704 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:50.888623953 CEST | 49704 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:50.932501078 CEST | 443 | 49704 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.101659060 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:51.101686001 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.101763010 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:51.103837967 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:51.103848934 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.265744925 CEST | 443 | 49704 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.265932083 CEST | 49704 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:51.265959024 CEST | 443 | 49704 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.265978098 CEST | 49704 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:51.265980005 CEST | 443 | 49704 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.265993118 CEST | 443 | 49704 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.301837921 CEST | 49707 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:51.301873922 CEST | 443 | 49707 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.301964998 CEST | 49707 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:51.302203894 CEST | 49707 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:51.302222967 CEST | 443 | 49707 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.789172888 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.789257050 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:51.791737080 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:51.791749001 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.792006016 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.837976933 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:51.918091059 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:51.961117029 CEST | 443 | 49707 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.961213112 CEST | 49707 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:51.962622881 CEST | 49707 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:51.962641001 CEST | 443 | 49707 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.962905884 CEST | 443 | 49707 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:51.963888884 CEST | 49707 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:51.964505911 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.004508018 CEST | 443 | 49707 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.141808987 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.141840935 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.141848087 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.141860008 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.141889095 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.141956091 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:52.141973019 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.142014980 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:52.142393112 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.142467976 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:52.142474890 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.142599106 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.142729998 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:52.199090004 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:52.199117899 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.199132919 CEST | 49706 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:50:52.199140072 CEST | 443 | 49706 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.237454891 CEST | 443 | 49707 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.237515926 CEST | 443 | 49707 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.237588882 CEST | 49707 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:52.238097906 CEST | 49707 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:52.238111973 CEST | 443 | 49707 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.238122940 CEST | 49707 | 443 | 192.168.2.16 | 184.28.90.27 |
| Aug 28, 2024 00:50:52.238130093 CEST | 443 | 49707 | 184.28.90.27 | 192.168.2.16 |
| Aug 28, 2024 00:50:52.347969055 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Aug 28, 2024 00:50:52.650960922 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Aug 28, 2024 00:50:53.254915953 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Aug 28, 2024 00:50:53.338917017 CEST | 49710 | 443 | 192.168.2.16 | 51.124.78.146 |
| Aug 28, 2024 00:50:53.338963985 CEST | 443 | 49710 | 51.124.78.146 | 192.168.2.16 |
| Aug 28, 2024 00:50:53.339103937 CEST | 49710 | 443 | 192.168.2.16 | 51.124.78.146 |
| Aug 28, 2024 00:50:53.339905024 CEST | 49710 | 443 | 192.168.2.16 | 51.124.78.146 |
| Aug 28, 2024 00:50:53.339926958 CEST | 443 | 49710 | 51.124.78.146 | 192.168.2.16 |
| Aug 28, 2024 00:50:53.525938988 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Aug 28, 2024 00:50:54.166384935 CEST | 443 | 49710 | 51.124.78.146 | 192.168.2.16 |
| Aug 28, 2024 00:50:54.166486979 CEST | 49710 | 443 | 192.168.2.16 | 51.124.78.146 |
| Aug 28, 2024 00:50:54.168066025 CEST | 49710 | 443 | 192.168.2.16 | 51.124.78.146 |
| Aug 28, 2024 00:50:54.168071032 CEST | 443 | 49710 | 51.124.78.146 | 192.168.2.16 |
| Aug 28, 2024 00:50:54.168375969 CEST | 443 | 49710 | 51.124.78.146 | 192.168.2.16 |
| Aug 28, 2024 00:50:54.212948084 CEST | 49710 | 443 | 192.168.2.16 | 51.124.78.146 |
| Aug 28, 2024 00:50:54.214447975 CEST | 49710 | 443 | 192.168.2.16 | 51.124.78.146 |
| Aug 28, 2024 00:50:54.214557886 CEST | 443 | 49710 | 51.124.78.146 | 192.168.2.16 |
| Aug 28, 2024 00:50:54.214689016 CEST | 49710 | 443 | 192.168.2.16 | 51.124.78.146 |
| Aug 28, 2024 00:50:54.467030048 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Aug 28, 2024 00:50:54.507318974 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:54.507358074 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:54.507446051 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:54.508493900 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:54.508508921 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.297200918 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.297291994 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.325037003 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.325057030 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.325462103 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.326628923 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.326670885 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.326713085 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.685425997 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.685450077 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.685508966 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.685533047 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.685564995 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.685581923 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.685950994 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.686013937 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.686394930 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.686407089 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.686446905 CEST | 49711 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.686451912 CEST | 443 | 49711 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.792473078 CEST | 49712 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.792504072 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.792665005 CEST | 49712 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.793032885 CEST | 49712 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.793047905 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.793126106 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.793164968 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:55.793312073 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.793576002 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:55.793590069 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:56.714819908 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:56.715473890 CEST | 49712 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:56.715507984 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:56.715598106 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:56.715662956 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:56.716186047 CEST | 49712 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:56.716193914 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:56.716221094 CEST | 49712 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:56.716228008 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:56.725635052 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:56.725655079 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:56.725927114 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:56.726388931 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:56.726416111 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:56.726459980 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:56.814090967 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Aug 28, 2024 00:50:56.877952099 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Aug 28, 2024 00:50:57.080862045 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.080883980 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.080939054 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.080967903 CEST | 49712 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.080996990 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.081012011 CEST | 49712 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.081464052 CEST | 49712 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.081473112 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.081485987 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.081486940 CEST | 49712 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.081538916 CEST | 443 | 49712 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.116949081 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Aug 28, 2024 00:50:57.119524002 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.119548082 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.119587898 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.119621038 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.119647980 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.119663954 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.120079994 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.120096922 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.120242119 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.120276928 CEST | 443 | 49713 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.120331049 CEST | 49713 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.144536972 CEST | 49714 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:57.144587994 CEST | 443 | 49714 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.144676924 CEST | 49714 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:57.144915104 CEST | 49714 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:57.144928932 CEST | 443 | 49714 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.168596983 CEST | 49715 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.168642044 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.168724060 CEST | 49715 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.169089079 CEST | 49715 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.169106007 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.725347042 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Aug 28, 2024 00:50:57.935246944 CEST | 443 | 49714 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.935336113 CEST | 49714 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:57.936583996 CEST | 49714 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:57.936605930 CEST | 443 | 49714 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.936847925 CEST | 443 | 49714 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.938548088 CEST | 49714 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:57.938599110 CEST | 443 | 49714 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.938702106 CEST | 443 | 49714 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.938787937 CEST | 49714 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:57.938787937 CEST | 49714 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:57.951528072 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.951746941 CEST | 49715 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.954556942 CEST | 49715 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.954567909 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.954858065 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:57.955382109 CEST | 49715 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.955382109 CEST | 49715 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:57.955410004 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.000087023 CEST | 49716 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:58.000147104 CEST | 443 | 49716 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.000289917 CEST | 49716 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:58.000461102 CEST | 49716 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:58.000473976 CEST | 443 | 49716 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.275357008 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.275386095 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.275423050 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.275469065 CEST | 49715 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:58.275502920 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.275585890 CEST | 49715 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:58.275768995 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.276259899 CEST | 49715 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:58.276293993 CEST | 443 | 49715 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.318137884 CEST | 49717 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:58.318212986 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.318299055 CEST | 49717 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:58.318504095 CEST | 49717 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:58.318517923 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.929646015 CEST | 443 | 49716 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.929730892 CEST | 49716 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:58.931061983 CEST | 49716 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:58.931078911 CEST | 443 | 49716 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.931365013 CEST | 443 | 49716 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.932691097 CEST | 49716 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:58.932751894 CEST | 443 | 49716 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.932816029 CEST | 49716 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:58.952931881 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Aug 28, 2024 00:50:58.996591091 CEST | 49718 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:58.996628046 CEST | 443 | 49718 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:58.996702909 CEST | 49718 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:58.996957064 CEST | 49718 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:58.996972084 CEST | 443 | 49718 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.080472946 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.081034899 CEST | 49717 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:59.081068993 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.081851959 CEST | 49717 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:59.081867933 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.081916094 CEST | 49717 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:59.081926107 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.403459072 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.403489113 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.403527975 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.403580904 CEST | 49717 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:59.403614044 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.403630018 CEST | 49717 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:59.403815985 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.403872967 CEST | 49717 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:59.404125929 CEST | 49717 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:59.404144049 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.404158115 CEST | 49717 | 443 | 192.168.2.16 | 40.126.31.67 |
| Aug 28, 2024 00:50:59.404164076 CEST | 443 | 49717 | 40.126.31.67 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.767297983 CEST | 443 | 49718 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.767384052 CEST | 49718 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:59.768738031 CEST | 49718 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:59.768745899 CEST | 443 | 49718 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.769006014 CEST | 443 | 49718 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.770338058 CEST | 49718 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:59.770365953 CEST | 443 | 49718 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.770450115 CEST | 49718 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:59.828809023 CEST | 49719 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:59.828856945 CEST | 443 | 49719 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:50:59.828954935 CEST | 49719 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:59.829190969 CEST | 49719 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:50:59.829204082 CEST | 443 | 49719 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:51:00.620112896 CEST | 443 | 49719 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:51:00.620227098 CEST | 49719 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:51:00.621689081 CEST | 49719 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:51:00.621700048 CEST | 443 | 49719 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:51:00.621948004 CEST | 443 | 49719 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:51:00.623096943 CEST | 49719 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:51:00.623137951 CEST | 443 | 49719 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:51:00.623202085 CEST | 49719 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:51:00.882422924 CEST | 49721 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:51:00.882461071 CEST | 443 | 49721 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:51:00.882539034 CEST | 49721 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:51:00.882941008 CEST | 49721 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:51:00.882951975 CEST | 443 | 49721 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:51:01.353956938 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Aug 28, 2024 00:51:01.647783995 CEST | 443 | 49721 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:51:01.647881031 CEST | 49721 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:51:01.649095058 CEST | 49721 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:51:01.649102926 CEST | 443 | 49721 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:51:01.649398088 CEST | 443 | 49721 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:51:01.650615931 CEST | 49721 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:51:01.650669098 CEST | 443 | 49721 | 51.11.168.232 | 192.168.2.16 |
| Aug 28, 2024 00:51:01.650737047 CEST | 49721 | 443 | 192.168.2.16 | 51.11.168.232 |
| Aug 28, 2024 00:51:01.686960936 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Aug 28, 2024 00:51:03.129000902 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Aug 28, 2024 00:51:03.192471981 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:03.192507982 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:03.192567110 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:03.193165064 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:03.193176031 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:04.198909044 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:04.199206114 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:04.199214935 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:04.200330973 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:04.200385094 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:04.201510906 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:04.201584101 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:04.201877117 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:04.201904058 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:04.243961096 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.354238033 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.354265928 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.354296923 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.354298115 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.354311943 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.354331017 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.354341984 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.354352951 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.354367018 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.354394913 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.357208967 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.357261896 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.475476980 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.475508928 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.475548983 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.475563049 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.475603104 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.560472012 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.560498953 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.560539961 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.560555935 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.560568094 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.560591936 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.561511040 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.561528921 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.561574936 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.561579943 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.561585903 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.561623096 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.561850071 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.561906099 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.561996937 CEST | 443 | 49725 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.562047005 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.562062025 CEST | 49725 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.573610067 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.573642015 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.573708057 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.575182915 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.575192928 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.575931072 CEST | 49734 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.575980902 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.576144934 CEST | 49734 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.576730013 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.576740026 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.576809883 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.576987982 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.576993942 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.577049971 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.577173948 CEST | 49734 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.577187061 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.577387094 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.577394962 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:05.577522993 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:05.577532053 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.155002117 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Aug 28, 2024 00:51:06.475687981 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.475980997 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.476149082 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.476217985 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.476221085 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.476241112 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.477474928 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.477544069 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.478363991 CEST | 49734 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.478384972 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.478528023 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.478538036 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.478708982 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.478714943 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.478889942 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.479047060 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.479132891 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.479306936 CEST | 49734 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.479377031 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.479474068 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.479480982 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.479530096 CEST | 49734 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.479671001 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.479729891 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.479933977 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.479991913 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.480036974 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.480107069 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.480304956 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.480375051 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.480462074 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.480469942 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.480511904 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.480518103 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.520510912 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:06.521971941 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.521972895 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:06.524684906 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.139780045 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.139801979 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.139818907 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.139904022 CEST | 49734 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.139935970 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.139986038 CEST | 49734 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.221846104 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.221872091 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.221906900 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.221925020 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.221946001 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.221961021 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.221975088 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.222002983 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.222012043 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.222038031 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.222052097 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.222081900 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.222992897 CEST | 49732 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.223009109 CEST | 443 | 49732 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.223300934 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.223326921 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.223357916 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.223376036 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.223385096 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.223391056 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.223401070 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.223427057 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.223453999 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.223458052 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.240633965 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.240665913 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.240693092 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.240704060 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.240716934 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.240750074 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.240767002 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.240782022 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.240816116 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.250282049 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.250359058 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.250379086 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.250396967 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.250417948 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.251326084 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.251409054 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.251415968 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.251616001 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.251696110 CEST | 443 | 49735 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.251743078 CEST | 49735 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.254949093 CEST | 49738 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.254982948 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.255048037 CEST | 49738 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.255474091 CEST | 49738 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.255485058 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.262398958 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.262450933 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.262495995 CEST | 49734 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.262505054 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.263040066 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.263103962 CEST | 49734 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.263256073 CEST | 49734 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.263263941 CEST | 443 | 49734 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.268969059 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.268995047 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.269045115 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.269052029 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.269084930 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.297241926 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.297276974 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.297360897 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.297398090 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.297399998 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.297508001 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.297514915 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.297534943 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.297560930 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.297760010 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.297775030 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.297892094 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.297900915 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.298016071 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.298032999 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.316004038 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.331440926 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.331456900 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.331496000 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.331546068 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.331557989 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.331609011 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.356779099 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.356810093 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.356880903 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.356893063 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.356947899 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.385514975 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.385545969 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.385602951 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.385611057 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.385653973 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.385673046 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.387465954 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.387485981 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.387548923 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.387557030 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.387583017 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.387608051 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.387613058 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.387638092 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.387667894 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.387674093 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.387685061 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.387732029 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.387993097 CEST | 49736 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:07.388009071 CEST | 443 | 49736 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.401724100 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.401762009 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.401832104 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.402061939 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:07.402076006 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.908586025 CEST | 49746 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:51:07.908623934 CEST | 443 | 49746 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.908696890 CEST | 49746 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:51:07.908899069 CEST | 49746 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:51:07.908911943 CEST | 443 | 49746 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.065668106 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.065939903 CEST | 49738 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.065953970 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.066293001 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.066596985 CEST | 49738 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.066656113 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.066729069 CEST | 49738 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.108504057 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.556783915 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.556797981 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.556960106 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.557538033 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.557552099 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.557667017 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.557679892 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.557766914 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.557775021 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.558656931 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.558717012 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.558763981 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.558821917 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.558893919 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.558954954 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.559027910 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.559091091 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.559381962 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.559442043 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.559636116 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.559715986 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.559943914 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.559952021 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.560019970 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.560026884 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.560055971 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.560061932 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.563369989 CEST | 443 | 49746 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.563618898 CEST | 49746 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:51:08.563636065 CEST | 443 | 49746 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.564721107 CEST | 443 | 49746 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.564790964 CEST | 49746 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:51:08.591654062 CEST | 49746 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:51:08.591775894 CEST | 443 | 49746 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.594743013 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.594778061 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.594835997 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.595156908 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.595169067 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.614947081 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.614964962 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.615101099 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.645869017 CEST | 49746 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:51:08.645876884 CEST | 443 | 49746 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.647910118 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.658931971 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.658943892 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.660095930 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.660151958 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.660459995 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.660522938 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.660618067 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.660624981 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.696368933 CEST | 49746 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:51:08.710969925 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.719417095 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.719439030 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.719501019 CEST | 49738 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.719516039 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.719525099 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.719557047 CEST | 49738 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.720318079 CEST | 49738 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.720328093 CEST | 443 | 49738 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.722994089 CEST | 49748 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.723010063 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.726649046 CEST | 49748 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.726984024 CEST | 49749 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.727000952 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.727056980 CEST | 49749 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.727313042 CEST | 49748 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:08.727327108 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:08.727484941 CEST | 49749 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:08.727497101 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.426557064 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.426918030 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:09.426947117 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.427330017 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.427860022 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:09.427943945 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.428095102 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:09.472497940 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.553742886 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.554229975 CEST | 49749 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:09.554255962 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.554668903 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.555088043 CEST | 49749 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:09.555166960 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.555249929 CEST | 49749 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:09.596515894 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.954770088 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.954798937 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.954806089 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.954837084 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.954852104 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.954866886 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.954869986 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:09.954885960 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.954902887 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:09.954931021 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:09.963349104 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.963380098 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.963387012 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.963402033 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.963414907 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.963426113 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.963447094 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:09.963459015 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.963473082 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:09.963504076 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:09.963654041 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.971879005 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.973788977 CEST | 49748 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:09.973815918 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.974138975 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.976387978 CEST | 49748 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:09.976443052 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:09.976526976 CEST | 49748 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.015976906 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.020504951 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.031968117 CEST | 49748 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.046540976 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.046571016 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.046578884 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.046652079 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.046706915 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.046737909 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.046739101 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.046778917 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.046799898 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.046834946 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.046834946 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.046870947 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.058813095 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.058856964 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.058866024 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.058877945 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.058885098 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.058908939 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.058926105 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.058939934 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.058949947 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.058994055 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.186252117 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.186261892 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.186305046 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.186351061 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.186363935 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.186392069 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.186414003 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.190787077 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.190877914 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.190881968 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.190983057 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.191234112 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.191246986 CEST | 443 | 49740 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.191256046 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.191287994 CEST | 49740 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.194783926 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.194797993 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.194825888 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.194848061 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.194868088 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.194878101 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.194935083 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.194955111 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.196724892 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.196803093 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.196809053 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.196822882 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.196868896 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.196984053 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.196995020 CEST | 443 | 49741 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.197002888 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.197040081 CEST | 49741 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.207986116 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.208014965 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.208046913 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.208060980 CEST | 49749 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.208081961 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.208096981 CEST | 49749 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.208106041 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.208147049 CEST | 49749 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.208839893 CEST | 49749 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.208849907 CEST | 443 | 49749 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.210560083 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.210613966 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.210640907 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.210649014 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.210694075 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.210978985 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.211016893 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.211090088 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.211163044 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.211170912 CEST | 443 | 49739 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.211178064 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.211214066 CEST | 49739 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.213768959 CEST | 49751 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.213792086 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.213864088 CEST | 49751 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.214083910 CEST | 49751 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.214098930 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.414803982 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.414814949 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.414861917 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.414901972 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.414917946 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.414962053 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.417697906 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.417716026 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.417777061 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.417787075 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.417829990 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.418971062 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.418987036 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.419044971 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.419055939 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.419101954 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.421377897 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.421395063 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.421452999 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.421463013 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.421485901 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.421513081 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.421520948 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.421545029 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.421576977 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.421582937 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.421617985 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.421901941 CEST | 49742 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.421916962 CEST | 443 | 49742 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.481944084 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.481971025 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.481988907 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.482008934 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.482033014 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.482064009 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.482091904 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.487610102 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.487641096 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.487685919 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.487701893 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.487719059 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.487740040 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.542002916 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.572293043 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.572320938 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.572356939 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.572485924 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.572494984 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.572529078 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.577461004 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.577485085 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.577547073 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.577554941 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.577578068 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.577601910 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.578244925 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.578309059 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.578315020 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.578350067 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.578387976 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.578500986 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.578512907 CEST | 443 | 49747 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.578572989 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.578588963 CEST | 49747 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.584598064 CEST | 49755 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.584599018 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.584599018 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.584599018 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.584625006 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.584633112 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.584634066 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.584641933 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.584718943 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.584728956 CEST | 49755 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.584743023 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.584760904 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.585544109 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.585556030 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.586292982 CEST | 49755 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.586307049 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.586476088 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.586488962 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.586694956 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:10.586707115 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.774538994 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.774569988 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.774621964 CEST | 49748 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.774641037 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.774871111 CEST | 49748 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.774878025 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.774912119 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.774950981 CEST | 49748 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.775667906 CEST | 49748 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:10.775682926 CEST | 443 | 49748 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.291007996 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Aug 28, 2024 00:51:11.389188051 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.390928030 CEST | 49755 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.390937090 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.391283989 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.391587019 CEST | 49755 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.391657114 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.391716003 CEST | 49755 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.398554087 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.398730993 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.398741961 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.399796963 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.399867058 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.400115013 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.400175095 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.400193930 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.412728071 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.413044930 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.413053989 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.414108038 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.414182901 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.414526939 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.414586067 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.414738894 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.434353113 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.434621096 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.434628963 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.434995890 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.436311960 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.436381102 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.436470985 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.436500072 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.440502882 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.450965881 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.450978041 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.456502914 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.466955900 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.466964960 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.476497889 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:11.498995066 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:11.514947891 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.489172935 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.496037960 CEST | 49751 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.496052980 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.496458054 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.497544050 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.497569084 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.497587919 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.497625113 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.497634888 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.497656107 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.497679949 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498151064 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498178005 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498193979 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498246908 CEST | 49755 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498265982 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498330116 CEST | 49755 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498353004 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498383999 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498392105 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498404980 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498413086 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498428106 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498430014 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498445988 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498450994 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498456001 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498465061 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498475075 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498478889 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498491049 CEST | 49751 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.498512983 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498533010 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498538017 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498544931 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498550892 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498563051 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498567104 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498574018 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498578072 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498595953 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498604059 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498621941 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498795033 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498830080 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498862028 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498869896 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.498894930 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498927116 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.498930931 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.499521017 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.499573946 CEST | 49755 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.499582052 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.499592066 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.499629021 CEST | 49755 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.499649048 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.499716997 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.499725103 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.499747992 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.501208067 CEST | 49751 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.501946926 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.501982927 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.502017975 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.502027988 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.502039909 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.502058029 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.502089024 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.503078938 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.503101110 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.503139019 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.503149986 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.503171921 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.506793022 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.506812096 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.506875992 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.506886005 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.506905079 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.508601904 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.508625984 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.508677959 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.508686066 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.509773970 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.509789944 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.509862900 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.509870052 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.510845900 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.510894060 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.525444031 CEST | 49753 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.525460005 CEST | 443 | 49753 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.525757074 CEST | 49756 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.525768042 CEST | 443 | 49756 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.528059006 CEST | 49755 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.528083086 CEST | 443 | 49755 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.533859968 CEST | 49754 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:12.533878088 CEST | 443 | 49754 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.544501066 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.597070932 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.597106934 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.597171068 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.597538948 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.597553968 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.597898006 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.597934008 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.597994089 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.598474979 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.598489046 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.598805904 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.598854065 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:12.598912954 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.599157095 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:12.599169016 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.865612030 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.865917921 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.865933895 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.866430044 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.866652012 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.866660118 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.866990089 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.867218971 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.867398977 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.867463112 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.867568016 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.867613077 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.867620945 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.867634058 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.868091106 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.868165970 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.868199110 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.868298054 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.868304014 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.868515968 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.868870974 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.868974924 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.869205952 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.898722887 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.898755074 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.898785114 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.898844957 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.898850918 CEST | 49751 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.898884058 CEST | 49751 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.898902893 CEST | 49751 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.899671078 CEST | 49751 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.899687052 CEST | 443 | 49751 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.908499002 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:13.908973932 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:13.923988104 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.669941902 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.669994116 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.670110941 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.670141935 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.670157909 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.670165062 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.670201063 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.670242071 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.765553951 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.765582085 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.765590906 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.765619040 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.765630960 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.765649080 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.765680075 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.765697002 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.765722036 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.765757084 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.901174068 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.901187897 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.901221991 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.901305914 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.901334047 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.901349068 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.901365042 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.901407003 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.903359890 CEST | 49760 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.903376102 CEST | 443 | 49760 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.911760092 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.911883116 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.911947966 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.912019968 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:14.912075043 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.912724972 CEST | 49758 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:14.912739992 CEST | 443 | 49758 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:15.246377945 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:15.246406078 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:15.246421099 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:15.246527910 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:15.246541977 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:15.246606112 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:15.389568090 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:15.389601946 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:15.389678955 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:15.389693975 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:15.389705896 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:15.389735937 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:15.390408039 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:15.390496969 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:15.390683889 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:15.390718937 CEST | 443 | 49759 | 52.107.243.149 | 192.168.2.16 |
| Aug 28, 2024 00:51:15.390767097 CEST | 49759 | 443 | 192.168.2.16 | 52.107.243.149 |
| Aug 28, 2024 00:51:15.758008957 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Aug 28, 2024 00:51:18.473614931 CEST | 443 | 49746 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:51:18.473681927 CEST | 443 | 49746 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:51:18.473782063 CEST | 49746 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:51:19.377455950 CEST | 49746 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:51:19.377485037 CEST | 443 | 49746 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:51:28.562114954 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:28.562186956 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:28.562284946 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:28.562666893 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:28.562685966 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.373656034 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.373779058 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:29.375138998 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:29.375158072 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.375405073 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.376744986 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:29.424494028 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.639503956 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.639533997 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.639548063 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.639661074 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:29.639698029 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.639750004 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:29.640419006 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.640456915 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.640476942 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:29.640492916 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.640511990 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:29.640520096 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.640563965 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:29.642725945 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:29.642748117 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:29.642757893 CEST | 49762 | 443 | 192.168.2.16 | 52.165.165.26 |
| Aug 28, 2024 00:51:29.642764091 CEST | 443 | 49762 | 52.165.165.26 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.098634005 CEST | 49764 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.098639965 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.098685026 CEST | 443 | 49764 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.098685980 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.098829985 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.099020958 CEST | 49764 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.099383116 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.099400997 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.099566936 CEST | 49764 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.099587917 CEST | 443 | 49764 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.907826900 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.908220053 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.908241034 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.908607006 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.909378052 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.909447908 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.909609079 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.909621000 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.909645081 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.909677982 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.915657043 CEST | 443 | 49764 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.915937901 CEST | 49764 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.915963888 CEST | 443 | 49764 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.916326046 CEST | 443 | 49764 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.916798115 CEST | 49764 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:47.916863918 CEST | 443 | 49764 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:47.972070932 CEST | 49764 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.632762909 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.632797956 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.632812977 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.632906914 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.632939100 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.632953882 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.632986069 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.634736061 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.634761095 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.634788990 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.634833097 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.634843111 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.634891033 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.720069885 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.720096111 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.720184088 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.720222950 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.720273972 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.722306013 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.722331047 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.722373009 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.722379923 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.722390890 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.722393990 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.722414017 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.722419977 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.722436905 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.722742081 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:51:48.722788095 CEST | 443 | 49763 | 52.107.243.85 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.722847939 CEST | 49763 | 443 | 192.168.2.16 | 52.107.243.85 |
| Aug 28, 2024 00:52:07.952600002 CEST | 49768 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:52:07.952635050 CEST | 443 | 49768 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:52:07.952744007 CEST | 49768 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:52:07.952974081 CEST | 49768 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:52:07.952986002 CEST | 443 | 49768 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:52:08.592076063 CEST | 443 | 49768 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:52:08.592421055 CEST | 49768 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:52:08.592437029 CEST | 443 | 49768 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:52:08.592920065 CEST | 443 | 49768 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:52:08.593267918 CEST | 49768 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:52:08.593364000 CEST | 443 | 49768 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:52:08.638248920 CEST | 49768 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:52:18.524749994 CEST | 443 | 49768 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:52:18.524825096 CEST | 443 | 49768 | 142.250.185.196 | 192.168.2.16 |
| Aug 28, 2024 00:52:18.524910927 CEST | 49768 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:52:19.373802900 CEST | 49768 | 443 | 192.168.2.16 | 142.250.185.196 |
| Aug 28, 2024 00:52:19.373830080 CEST | 443 | 49768 | 142.250.185.196 | 192.168.2.16 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Aug 28, 2024 00:51:03.086095095 CEST | 53 | 50229 | 1.1.1.1 | 192.168.2.16 |
| Aug 28, 2024 00:51:03.133248091 CEST | 52903 | 53 | 192.168.2.16 | 1.1.1.1 |
| Aug 28, 2024 00:51:03.133445978 CEST | 55964 | 53 | 192.168.2.16 | 1.1.1.1 |
| Aug 28, 2024 00:51:03.156152964 CEST | 53 | 52398 | 1.1.1.1 | 192.168.2.16 |
| Aug 28, 2024 00:51:04.253870010 CEST | 53 | 55071 | 1.1.1.1 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.228626966 CEST | 49869 | 53 | 192.168.2.16 | 1.1.1.1 |
| Aug 28, 2024 00:51:07.228782892 CEST | 51685 | 53 | 192.168.2.16 | 1.1.1.1 |
| Aug 28, 2024 00:51:07.596148968 CEST | 53 | 49418 | 1.1.1.1 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.899360895 CEST | 62505 | 53 | 192.168.2.16 | 1.1.1.1 |
| Aug 28, 2024 00:51:07.899682045 CEST | 59900 | 53 | 192.168.2.16 | 1.1.1.1 |
| Aug 28, 2024 00:51:07.907550097 CEST | 53 | 62505 | 1.1.1.1 | 192.168.2.16 |
| Aug 28, 2024 00:51:07.907804012 CEST | 53 | 59900 | 1.1.1.1 | 192.168.2.16 |
| Aug 28, 2024 00:51:10.533608913 CEST | 64294 | 53 | 192.168.2.16 | 1.1.1.1 |
| Aug 28, 2024 00:51:10.533760071 CEST | 57798 | 53 | 192.168.2.16 | 1.1.1.1 |
| Aug 28, 2024 00:51:21.162863016 CEST | 53 | 51039 | 1.1.1.1 | 192.168.2.16 |
| Aug 28, 2024 00:51:37.400718927 CEST | 53 | 59115 | 1.1.1.1 | 192.168.2.16 |
| Aug 28, 2024 00:51:40.000672102 CEST | 53 | 51175 | 1.1.1.1 | 192.168.2.16 |
| Aug 28, 2024 00:51:48.519927979 CEST | 138 | 138 | 192.168.2.16 | 192.168.2.255 |
| Aug 28, 2024 00:52:02.587882996 CEST | 53 | 65225 | 1.1.1.1 | 192.168.2.16 |
| Aug 28, 2024 00:52:03.083327055 CEST | 53 | 50454 | 1.1.1.1 | 192.168.2.16 |
| Aug 28, 2024 00:52:10.549264908 CEST | 50991 | 53 | 192.168.2.16 | 1.1.1.1 |
| Aug 28, 2024 00:52:10.549410105 CEST | 59097 | 53 | 192.168.2.16 | 1.1.1.1 |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Aug 28, 2024 00:51:03.133248091 CEST | 192.168.2.16 | 1.1.1.1 | 0xa545 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Aug 28, 2024 00:51:03.133445978 CEST | 192.168.2.16 | 1.1.1.1 | 0x9dd0 | Standard query (0) | 65 | IN (0x0001) | false | |
| Aug 28, 2024 00:51:07.228626966 CEST | 192.168.2.16 | 1.1.1.1 | 0x2b61 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Aug 28, 2024 00:51:07.228782892 CEST | 192.168.2.16 | 1.1.1.1 | 0x12db | Standard query (0) | 65 | IN (0x0001) | false | |
| Aug 28, 2024 00:51:07.899360895 CEST | 192.168.2.16 | 1.1.1.1 | 0x8f49 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Aug 28, 2024 00:51:07.899682045 CEST | 192.168.2.16 | 1.1.1.1 | 0x80b0 | Standard query (0) | 65 | IN (0x0001) | false | |
| Aug 28, 2024 00:51:10.533608913 CEST | 192.168.2.16 | 1.1.1.1 | 0x68d3 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Aug 28, 2024 00:51:10.533760071 CEST | 192.168.2.16 | 1.1.1.1 | 0x6ae6 | Standard query (0) | 65 | IN (0x0001) | false | |
| Aug 28, 2024 00:52:10.549264908 CEST | 192.168.2.16 | 1.1.1.1 | 0x9a | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Aug 28, 2024 00:52:10.549410105 CEST | 192.168.2.16 | 1.1.1.1 | 0x48e3 | Standard query (0) | 65 | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Aug 28, 2024 00:50:46.650949001 CEST | 1.1.1.1 | 192.168.2.16 | 0x41a5 | No error (0) | 199.232.214.172 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:50:46.650949001 CEST | 1.1.1.1 | 192.168.2.16 | 0x41a5 | No error (0) | 199.232.210.172 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | cityofunioncity.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | 5262-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | 192335-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | 192335-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | 52.107.243.85 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | 52.107.243.74 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | 52.107.243.218 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | 52.107.225.8 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | 52.107.243.215 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | 52.107.243.199 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | 52.107.243.195 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.181780100 CEST | 1.1.1.1 | 192.168.2.16 | 0xa545 | No error (0) | 52.107.243.82 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.190886021 CEST | 1.1.1.1 | 192.168.2.16 | 0x9dd0 | No error (0) | cityofunioncity.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.190886021 CEST | 1.1.1.1 | 192.168.2.16 | 0x9dd0 | No error (0) | 5262-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.190886021 CEST | 1.1.1.1 | 192.168.2.16 | 0x9dd0 | No error (0) | 192335-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:03.190886021 CEST | 1.1.1.1 | 192.168.2.16 | 0x9dd0 | No error (0) | 192335-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.274106979 CEST | 1.1.1.1 | 192.168.2.16 | 0x12db | No error (0) | cityofunioncity.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.274106979 CEST | 1.1.1.1 | 192.168.2.16 | 0x12db | No error (0) | 5262-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.274106979 CEST | 1.1.1.1 | 192.168.2.16 | 0x12db | No error (0) | 192335-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.274106979 CEST | 1.1.1.1 | 192.168.2.16 | 0x12db | No error (0) | 192335-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | cityofunioncity.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | 5262-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | 192335-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | 192335-ipv4v6c.farm.dprodmgd105.sharepointonline.com.akadns.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | 52.107.243.149 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | 52.107.243.152 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | 52.107.243.145 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | 52.107.243.144 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | 52.107.243.148 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | 52.107.243.153 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | 52.107.243.146 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.294019938 CEST | 1.1.1.1 | 192.168.2.16 | 0x2b61 | No error (0) | 52.107.243.151 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.907550097 CEST | 1.1.1.1 | 192.168.2.16 | 0x8f49 | No error (0) | 142.250.185.196 | A (IP address) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:07.907804012 CEST | 1.1.1.1 | 192.168.2.16 | 0x80b0 | No error (0) | 65 | IN (0x0001) | false | |||
| Aug 28, 2024 00:51:10.540898085 CEST | 1.1.1.1 | 192.168.2.16 | 0x6ae6 | No error (0) | nel.measure.office.net.edgesuite.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:51:10.540926933 CEST | 1.1.1.1 | 192.168.2.16 | 0x68d3 | No error (0) | nel.measure.office.net.edgesuite.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:52:10.556560993 CEST | 1.1.1.1 | 192.168.2.16 | 0x48e3 | No error (0) | nel.measure.office.net.edgesuite.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Aug 28, 2024 00:52:10.556643009 CEST | 1.1.1.1 | 192.168.2.16 | 0x9a | No error (0) | nel.measure.office.net.edgesuite.net | CNAME (Canonical name) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 0 | 192.168.2.16 | 49704 | 184.28.90.27 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:50:50 UTC | 161 | OUT | |
| 2024-08-27 22:50:51 UTC | 466 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.16 | 49706 | 52.165.165.26 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:50:51 UTC | 306 | OUT | |
| 2024-08-27 22:50:52 UTC | 560 | IN | |
| 2024-08-27 22:50:52 UTC | 15824 | IN | |
| 2024-08-27 22:50:52 UTC | 8666 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 2 | 192.168.2.16 | 49707 | 184.28.90.27 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:50:51 UTC | 239 | OUT | |
| 2024-08-27 22:50:52 UTC | 514 | IN | |
| 2024-08-27 22:50:52 UTC | 55 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 3 | 192.168.2.16 | 49711 | 40.126.31.67 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:50:55 UTC | 422 | OUT | |
| 2024-08-27 22:50:55 UTC | 3592 | OUT | |
| 2024-08-27 22:50:55 UTC | 569 | IN | |
| 2024-08-27 22:50:55 UTC | 11389 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 4 | 192.168.2.16 | 49712 | 40.126.31.67 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:50:56 UTC | 422 | OUT | |
| 2024-08-27 22:50:56 UTC | 4710 | OUT | |
| 2024-08-27 22:50:57 UTC | 569 | IN | |
| 2024-08-27 22:50:57 UTC | 10173 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 5 | 192.168.2.16 | 49713 | 40.126.31.67 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:50:56 UTC | 422 | OUT | |
| 2024-08-27 22:50:56 UTC | 4775 | OUT | |
| 2024-08-27 22:50:57 UTC | 569 | IN | |
| 2024-08-27 22:50:57 UTC | 11409 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 6 | 192.168.2.16 | 49715 | 40.126.31.67 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:50:57 UTC | 422 | OUT | |
| 2024-08-27 22:50:57 UTC | 4775 | OUT | |
| 2024-08-27 22:50:58 UTC | 569 | IN | |
| 2024-08-27 22:50:58 UTC | 11369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 7 | 192.168.2.16 | 49717 | 40.126.31.67 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:50:59 UTC | 422 | OUT | |
| 2024-08-27 22:50:59 UTC | 4722 | OUT | |
| 2024-08-27 22:50:59 UTC | 569 | IN | |
| 2024-08-27 22:50:59 UTC | 10197 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 8 | 192.168.2.16 | 49725 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:04 UTC | 1132 | OUT | |
| 2024-08-27 22:51:05 UTC | 1896 | IN | |
| 2024-08-27 22:51:05 UTC | 14488 | IN | |
| 2024-08-27 22:51:05 UTC | 1896 | IN | |
| 2024-08-27 22:51:05 UTC | 16375 | IN | |
| 2024-08-27 22:51:05 UTC | 16384 | IN | |
| 2024-08-27 22:51:05 UTC | 16384 | IN | |
| 2024-08-27 22:51:05 UTC | 3639 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 9 | 192.168.2.16 | 49732 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:06 UTC | 1154 | OUT | |
| 2024-08-27 22:51:07 UTC | 1077 | IN | |
| 2024-08-27 22:51:07 UTC | 15307 | IN | |
| 2024-08-27 22:51:07 UTC | 7756 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 10 | 192.168.2.16 | 49734 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:06 UTC | 1219 | OUT | |
| 2024-08-27 22:51:07 UTC | 1081 | IN | |
| 2024-08-27 22:51:07 UTC | 15303 | IN | |
| 2024-08-27 22:51:07 UTC | 1081 | IN | |
| 2024-08-27 22:51:07 UTC | 10567 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 11 | 192.168.2.16 | 49736 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:06 UTC | 1232 | OUT | |
| 2024-08-27 22:51:07 UTC | 1083 | IN | |
| 2024-08-27 22:51:07 UTC | 15301 | IN | |
| 2024-08-27 22:51:07 UTC | 1083 | IN | |
| 2024-08-27 22:51:07 UTC | 16375 | IN | |
| 2024-08-27 22:51:07 UTC | 16384 | IN | |
| 2024-08-27 22:51:07 UTC | 16384 | IN | |
| 2024-08-27 22:51:07 UTC | 9 | IN | |
| 2024-08-27 22:51:07 UTC | 16375 | IN | |
| 2024-08-27 22:51:07 UTC | 16384 | IN | |
| 2024-08-27 22:51:07 UTC | 4506 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 12 | 192.168.2.16 | 49735 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:06 UTC | 1232 | OUT | |
| 2024-08-27 22:51:07 UTC | 1081 | IN | |
| 2024-08-27 22:51:07 UTC | 15303 | IN | |
| 2024-08-27 22:51:07 UTC | 1081 | IN | |
| 2024-08-27 22:51:07 UTC | 16375 | IN | |
| 2024-08-27 22:51:07 UTC | 7567 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 13 | 192.168.2.16 | 49738 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:08 UTC | 1104 | OUT | |
| 2024-08-27 22:51:08 UTC | 1041 | IN | |
| 2024-08-27 22:51:08 UTC | 3331 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 14 | 192.168.2.16 | 49740 | 52.107.243.149 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:08 UTC | 504 | OUT | |
| 2024-08-27 22:51:10 UTC | 1066 | IN | |
| 2024-08-27 22:51:10 UTC | 15318 | IN | |
| 2024-08-27 22:51:10 UTC | 7745 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 15 | 192.168.2.16 | 49741 | 52.107.243.149 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:08 UTC | 582 | OUT | |
| 2024-08-27 22:51:09 UTC | 1081 | IN | |
| 2024-08-27 22:51:09 UTC | 15303 | IN | |
| 2024-08-27 22:51:09 UTC | 1081 | IN | |
| 2024-08-27 22:51:10 UTC | 16375 | IN | |
| 2024-08-27 22:51:10 UTC | 7567 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 16 | 192.168.2.16 | 49739 | 52.107.243.149 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:08 UTC | 569 | OUT | |
| 2024-08-27 22:51:10 UTC | 1079 | IN | |
| 2024-08-27 22:51:10 UTC | 15305 | IN | |
| 2024-08-27 22:51:10 UTC | 1079 | IN | |
| 2024-08-27 22:51:10 UTC | 10567 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 17 | 192.168.2.16 | 49742 | 52.107.243.149 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:08 UTC | 582 | OUT | |
| 2024-08-27 22:51:09 UTC | 1080 | IN | |
| 2024-08-27 22:51:09 UTC | 15304 | IN | |
| 2024-08-27 22:51:09 UTC | 1080 | IN | |
| 2024-08-27 22:51:10 UTC | 16375 | IN | |
| 2024-08-27 22:51:10 UTC | 16384 | IN | |
| 2024-08-27 22:51:10 UTC | 16384 | IN | |
| 2024-08-27 22:51:10 UTC | 9 | IN | |
| 2024-08-27 22:51:10 UTC | 16375 | IN | |
| 2024-08-27 22:51:10 UTC | 16384 | IN | |
| 2024-08-27 22:51:10 UTC | 4506 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 18 | 192.168.2.16 | 49747 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:09 UTC | 1132 | OUT | |
| 2024-08-27 22:51:10 UTC | 1897 | IN | |
| 2024-08-27 22:51:10 UTC | 14487 | IN | |
| 2024-08-27 22:51:10 UTC | 16384 | IN | |
| 2024-08-27 22:51:10 UTC | 1897 | IN | |
| 2024-08-27 22:51:10 UTC | 16375 | IN | |
| 2024-08-27 22:51:10 UTC | 16384 | IN | |
| 2024-08-27 22:51:10 UTC | 3639 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 19 | 192.168.2.16 | 49749 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:09 UTC | 1104 | OUT | |
| 2024-08-27 22:51:10 UTC | 1044 | IN | |
| 2024-08-27 22:51:10 UTC | 7886 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 20 | 192.168.2.16 | 49748 | 52.107.243.149 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:09 UTC | 394 | OUT | |
| 2024-08-27 22:51:10 UTC | 1043 | IN | |
| 2024-08-27 22:51:10 UTC | 3331 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 21 | 192.168.2.16 | 49755 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:11 UTC | 1154 | OUT | |
| 2024-08-27 22:51:12 UTC | 1072 | IN | |
| 2024-08-27 22:51:12 UTC | 15312 | IN | |
| 2024-08-27 22:51:12 UTC | 7751 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 22 | 192.168.2.16 | 49756 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:11 UTC | 1219 | OUT | |
| 2024-08-27 22:51:12 UTC | 1081 | IN | |
| 2024-08-27 22:51:12 UTC | 15303 | IN | |
| 2024-08-27 22:51:12 UTC | 1081 | IN | |
| 2024-08-27 22:51:12 UTC | 10567 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 23 | 192.168.2.16 | 49754 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:11 UTC | 1232 | OUT | |
| 2024-08-27 22:51:12 UTC | 1082 | IN | |
| 2024-08-27 22:51:12 UTC | 15302 | IN | |
| 2024-08-27 22:51:12 UTC | 1082 | IN | |
| 2024-08-27 22:51:12 UTC | 16375 | IN | |
| 2024-08-27 22:51:12 UTC | 16384 | IN | |
| 2024-08-27 22:51:12 UTC | 16384 | IN | |
| 2024-08-27 22:51:12 UTC | 9 | IN | |
| 2024-08-27 22:51:12 UTC | 16375 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 24 | 192.168.2.16 | 49753 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:11 UTC | 1232 | OUT | |
| 2024-08-27 22:51:12 UTC | 1085 | IN | |
| 2024-08-27 22:51:12 UTC | 15299 | IN | |
| 2024-08-27 22:51:12 UTC | 16384 | IN | |
| 2024-08-27 22:51:12 UTC | 1085 | IN | |
| 2024-08-27 22:51:12 UTC | 7558 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 25 | 192.168.2.16 | 49751 | 52.107.243.149 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:12 UTC | 394 | OUT | |
| 2024-08-27 22:51:13 UTC | 1044 | IN | |
| 2024-08-27 22:51:13 UTC | 7886 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 26 | 192.168.2.16 | 49759 | 52.107.243.149 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:13 UTC | 582 | OUT | |
| 2024-08-27 22:51:15 UTC | 1082 | IN | |
| 2024-08-27 22:51:15 UTC | 15302 | IN | |
| 2024-08-27 22:51:15 UTC | 1082 | IN | |
| 2024-08-27 22:51:15 UTC | 16375 | IN | |
| 2024-08-27 22:51:15 UTC | 7567 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 27 | 192.168.2.16 | 49760 | 52.107.243.149 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:13 UTC | 569 | OUT | |
| 2024-08-27 22:51:14 UTC | 1081 | IN | |
| 2024-08-27 22:51:14 UTC | 15303 | IN | |
| 2024-08-27 22:51:14 UTC | 11648 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 28 | 192.168.2.16 | 49758 | 52.107.243.149 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:13 UTC | 504 | OUT | |
| 2024-08-27 22:51:14 UTC | 1069 | IN | |
| 2024-08-27 22:51:14 UTC | 15315 | IN | |
| 2024-08-27 22:51:14 UTC | 7748 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 29 | 192.168.2.16 | 49762 | 52.165.165.26 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:29 UTC | 306 | OUT | |
| 2024-08-27 22:51:29 UTC | 560 | IN | |
| 2024-08-27 22:51:29 UTC | 15824 | IN | |
| 2024-08-27 22:51:29 UTC | 14181 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 30 | 192.168.2.16 | 49763 | 52.107.243.85 | 443 | 1764 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-08-27 22:51:47 UTC | 1465 | OUT | |
| 2024-08-27 22:51:47 UTC | 1639 | OUT | |
| 2024-08-27 22:51:48 UTC | 1898 | IN | |
| 2024-08-27 22:51:48 UTC | 14486 | IN | |
| 2024-08-27 22:51:48 UTC | 16384 | IN | |
| 2024-08-27 22:51:48 UTC | 1898 | IN | |
| 2024-08-27 22:51:48 UTC | 16375 | IN | |
| 2024-08-27 22:51:48 UTC | 16384 | IN | |
| 2024-08-27 22:51:48 UTC | 3469 | IN |
Click to jump to process
Click to jump to process
back
Click to dive into process behavior distribution
Click to jump to process
| Target ID: | 0 |
| Start time: | 18:50:49 |
| Start date: | 27/08/2024 |
| Path: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x340000 |
| File size: | 34'446'744 bytes |
| MD5 hash: | 91A5292942864110ED734005B7E005C0 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 3 |
| Start time: | 18:50:50 |
| Start date: | 27/08/2024 |
| Path: | C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff6219f0000 |
| File size: | 710'048 bytes |
| MD5 hash: | EC652BEDD90E089D9406AFED89A8A8BD |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 12 |
| Start time: | 18:51:01 |
| Start date: | 27/08/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 13 |
| Start time: | 18:51:02 |
| Start date: | 27/08/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 15 |
| Start time: | 18:51:07 |
| Start date: | 27/08/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | true |
| Target ID: | 16 |
| Start time: | 18:51:08 |
| Start date: | 27/08/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | true |
⊘No disassembly