Edit tour
Windows
Analysis Report
Potential Phish.msg
Overview
General Information
| Sample name: | Potential Phish.msg |
| Analysis ID: | 1521411 |
| MD5: | 5f7e13b7ad5082a2ebbbe3c77421d928 |
| SHA1: | 59bd9d2ecf11603790cf90e293552eae076ca457 |
| SHA256: | a2dbcbd7a2131c6c768172875f564a6aa8ec29852b4b2d7a326a99fcb74ddd76 |
| Infos: |  |
 | |
Detection
| Score: | 48 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Antivirus detection for URL or domain
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
Queries the volume information (name, serial number etc) of a device
Sigma detected: Office Autorun Keys Modification
Sigma detected: Outlook Security Settings Updated - Registry
Stores files to the Windows start menu directory
Classification
- System is w10x64
OUTLOOK.EXE (PID: 7412 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \Root\Offi ce16\OUTLO OK.EXE" /f "C:\Users \user\Desk top\Potent ial Phish. msg" MD5: 91A5292942864110ED734005B7E005C0) 
ai.exe (PID: 7800 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \root\vfs\ ProgramFil esCommonX6 4\Microsof t Shared\O ffice16\ai .exe" "7E4 7DA79-F67B -43D1-9121 -2D5D2E67A 194" "8E3E D8AE-3152- 46CE-B1B9- A687C01853 FA" "7412" "C:\Progr am Files ( x86)\Micro soft Offic e\Root\Off ice16\OUTL OOK.EXE" " WordCombin edFloatieL reOnline.o nnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD) 
chrome.exe (PID: 7928 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// long-exper ience-2255 76.framer. app/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 7868 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2196 --fi eld-trial- handle=193 2,i,112079 7911199823 9953,10789 5108696045 69881,2621 44 --disab le-feature s=Optimiza tionGuideM odelDownlo ading,Opti mizationHi nts,Optimi zationHint sFetching, Optimizati onTargetPr ediction / prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
⊘No configs have been found
⊘No yara matches
| Source: | Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): | ||
| Source: | Author: frack113: | ||
⊘No Suricata rule has matched
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | SlashNext: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | JA3 fingerprint: | ||
| Source: | JA3 fingerprint: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Classification label: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File read: | Jump to behavior | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | Window found: | Jump to behavior | ||
| Source: | Window detected: | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | File Volume queried: | Jump to behavior | ||
| Source: | Process information queried: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | 1 DLL Side-Loading | 1 Process Injection | 1 Masquerading | OS Credential Dumping | 1 Process Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | 1 Registry Run Keys / Startup Folder | 1 DLL Side-Loading | 1 Process Injection | LSASS Memory | 1 File and Directory Discovery | Remote Desktop Protocol | Data from Removable Media | 4 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 1 Registry Run Keys / Startup Folder | 1 DLL Side-Loading | Security Account Manager | 13 System Information Discovery | SMB/Windows Admin Shares | Data from Network Shared Drive | 5 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 3 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | SlashNext | Credential Stealing type: Phishing & Social Engineering | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| long-experience-225576.framer.app | 35.71.142.77 | true | false | unknown | |
| www.framer.com | 13.32.27.14 | true | false | unknown | |
| www.google.com | 216.58.206.68 | true | false | unknown |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false | unknown |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false | unknown | |||
| false | unknown | |||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 13.32.27.14 | www.framer.com | United States | 7018 | ATT-INTERNET4US | false | |
| 35.71.142.77 | long-experience-225576.framer.app | United States | 237 | MERIT-AS-14US | false | |
| 216.58.206.68 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false |
| IP |
|---|
| 192.168.2.5 |
| Joe Sandbox version: | 41.0.0 Charoite |
| Analysis ID: | 1521411 |
| Start date and time: | 2024-09-28 09:48:02 +02:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 7m 33s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | default.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 10 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | Potential Phish.msg |
| Detection: | MAL |
| Classification: | mal48.winMSG@18/31@6/5 |
| EGA Information: | Failed |
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 52.109.28.46, 52.113.194.132, 104.208.16.92, 199.232.214.172, 142.250.185.131, 142.250.185.238, 64.233.167.84, 34.104.35.123, 142.250.186.35, 142.250.186.78
- Excluded domains from analysis (whitelisted): clients1.google.com, ecs.office.com, client.wns.windows.com, accounts.google.com, slscr.update.microsoft.com, prod.configsvc1.live.com.akadns.net, ctldl.windowsupdate.com, clientservices.googleapis.com, s-0005-office.config.skype.com, mobile.events.data.microsoft.com, fe3cr.delivery.mp.microsoft.com, ecs-office.s-0005.s-msedge.net, onedscolprdcus23.centralus.cloudapp.azure.com, clients2.google.com, edgedl.me.gvt1.com, s-0005.s-msedge.net, config.officeapps.live.com, update.googleapis.com, officeclient.microsoft.com, ecs.office.trafficmanager.net, clients.l.google.com, europe.configsvc1.live.com.akadns.net, mobile.events.data.trafficmanager.net, uks-azsc-config.officeapps.live.com
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtQueryAttributesFile calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
- Report size getting too big, too many NtReadVirtualMemory calls found.
- Report size getting too big, too many NtSetInformationFile calls found.
- VT rate limit hit for: Potential Phish.msg
⊘No simulations
| Input | Output |
|---|---|
| URL: https://long-experience-225576.framer.app/ Model: jbxai | {
"brand":[],
"contains_trigger_text":false,
"trigger_text":"",
"prominent_button_name":"Sign Up for Free",
"text_input_field_labels":"unknown",
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"has_visible_qrcode":false} |
 | |
| URL: Email Model: jbxai | {
"brand":["Forwarding Proyectos,
S.A."],
"contains_trigger_text":false,
"trigger_text":"",
"prominent_button_name":"unknown",
"text_input_field_labels":"unknown",
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"has_visible_qrcode":false} |
 |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 239.255.255.250 | Get hash | malicious | Unknown | Browse | ||
| Get hash | malicious | Porn Scam | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| 13.32.27.14 | Get hash | malicious | HTMLPhisher | Browse | ||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Greatness Phishing Kit, HTMLPhisher | Browse | |||
| Get hash | malicious | Greatness Phishing Kit, HTMLPhisher | Browse | |||
| Get hash | malicious | Greatness Phishing Kit, HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| 35.71.142.77 | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | FormBook, NSISDropper | Browse |
| ||
| Get hash | malicious | FormBook | Browse |
| ||
| Get hash | malicious | FormBook, NSISDropper | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| www.framer.com | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| long-experience-225576.framer.app | Get hash | malicious | Unknown | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| MERIT-AS-14US | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| ATT-INTERNET4US | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 28a2c9bd18a11de089ef85a160da29e4 | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Porn Scam | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| 3b5074b1b5d032e5620f69f9f700ff0e | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | Porn Scam | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | AgentTesla | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | XWorm | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
⊘No context
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 231348 |
| Entropy (8bit): | 4.384373588018976 |
| Encrypted: | false |
| SSDEEP: | 1536:LXYL5Hgsg95PTQ/8Egs+mNcAz79ysQqt2yitNqoQ3Zrcm0FvLQ4y5JBWODebRVz6:0RgbsbgCmiGu23qoQJrt0FvwBvw+ng5M |
| MD5: | 0B6626CACDD84EB018FC28E00177BC7E |
| SHA1: | C77CEDF7FA2078B1367011E8A1F103CA6E6A0E2E |
| SHA-256: | E166E6880F586E01F3D5A350557881E5DF9C1168A05A01A6851639C290E42D78 |
| SHA-512: | D2BE0CF975946FB6E8B32DA2DD57A45731888E8B7551F7C02823FED24B7DEA5493E7EB365E2D3718B9DFCC3A124D7ECA4562FD5B55BE94D9F1DE801431D64B6C |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1869 |
| Entropy (8bit): | 5.094316572700383 |
| Encrypted: | false |
| SSDEEP: | 48:cGWydypdSyrvnzy7SymJdy+dydASyNdyrwnzyrMdnzyDkSyrXnzyO:OyEpdbT27bwE+EdAbNEs2Yd2IbT2O |
| MD5: | C4FBF2EC594EAE653C35AD785E6401E4 |
| SHA1: | 9139AA136C379DEE91D531EA8F7C4F6840550013 |
| SHA-256: | CDB0F2FD8A28C617AD15B1190ADEFF20743944118858F80537DBE2C24B9200A0 |
| SHA-512: | 47EF4A1FF59DC28B37620F2F4E9C093845BD60285413304A7B68B71D67BA68194BA77FB074320533AC1566DFFC7B0EA969D60328F5BBA6CE43B299BE41AF59D0 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\76E9BA02-BB49-4919-B9F6-B46CD471DF8E
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 177088 |
| Entropy (8bit): | 5.286762132725482 |
| Encrypted: | false |
| SSDEEP: | 1536:Oi2XfRAqcbH41gwEwLe7HW8bM/o/NM5cAZl1p5ihs7EXXCEAD2OdaLI:7Ce7HW8bM/o/9XPkiI |
| MD5: | D0A91B612EA1501C2D2795A14AE9DA30 |
| SHA1: | C4B91B7B41CF0F3C04268575732EBBB358C26AEA |
| SHA-256: | A174AD285DF7F168AC98C1AB635C0A0225C1134B669EA39E949BCE09568DEF6F |
| SHA-512: | 0F58C4D1191B752574413155D24F275402DA319565070E421ED13E9187561611B9971B36C205544CE67CE7DD51DCE73C64B5246D96DE316F343ABB4BEFD6C0B5 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 32768 |
| Entropy (8bit): | 0.04591939678467531 |
| Encrypted: | false |
| SSDEEP: | 6:Gt5pcTD3Ilt5pcTD9/X9X01PH4l942wU:yp/Dp6/d0G3L |
| MD5: | A499D41E3D56A3702B9DF783F359C17B |
| SHA1: | C81BC92FF719A347061F65399D6EEEC28430C6D5 |
| SHA-256: | 41E5B53E08A2D32B32D9F61686925D1D28DD80FFAA2541F5B254FFC895961309 |
| SHA-512: | 632F113362775910B6B5B25B26F23ACC659E0B7849C19513C7FB61016457CC5D75571A61FC28732637FABDA07E6DB1EF21077AF9DE24EF68C21F99AF53BB6DC1 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | modified |
| Size (bytes): | 49472 |
| Entropy (8bit): | 0.4849453949405866 |
| Encrypted: | false |
| SSDEEP: | 48:13Q101Ull7DYMZzO8VFDYMFdKGBBO8VFDYML:6tll4+jVGwdKyjVGC |
| MD5: | 7FE8E523ED1F309ADD34AA984872A8E6 |
| SHA1: | B107AAF8B12C32E4AC99869121DBF30E24DEE10D |
| SHA-256: | CF14DF9FB68A183EEBEE878E436656BDC8C5AC9338B1805DC7AE32CB86CF4229 |
| SHA-512: | 06DDCC27B4C19E3EBB4DB855736CF586945A7B444DD08B57CC25A40454A796E33D233C2A4637C16F183037A65CADA1D1F0EB92B2CF975D412AA3E2DD497DD5E0 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\RWKTB3AY\image001.png
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 15350 |
| Entropy (8bit): | 7.9321541816465 |
| Encrypted: | false |
| SSDEEP: | 192:0Aq/fiix/depJTcQnmD9fK1XZWMkutkFk+G0K8OXufZW3Y8lcse6BV6O7FBZWpy7:0AqXfun8Aht0IW0ufZ2ct6iCFbNCNgD |
| MD5: | B7E3AFF755DC4A01E7C1FCC7D9FC1D8E |
| SHA1: | B8E8542AD9D50653B9E1A23F2502155071B0B7B9 |
| SHA-256: | 792BA136A0C7E7AED48B108BCBF6F6E5EB1F150A8974290E6695B81FB6434994 |
| SHA-512: | 0A4904E50A7D3C7BDEB45B48D1B2911DC2491225DDDC9748A87F6A421CC0CB81E5E25731410D3D3FD443E8439B85A09622F0B90DA571D4B0DB6EB518E5796AEC |
| Malicious: | false |
| Reputation: | low |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\RWKTB3AY\image001.png:Zone.Identifier
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26 |
| Entropy (8bit): | 3.95006375643621 |
| Encrypted: | false |
| SSDEEP: | 3:gAWY3n:qY3n |
| MD5: | FBCCF14D504B7B2DBCB5A5BDA75BD93B |
| SHA1: | D59FC84CDD5217C6CF74785703655F78DA6B582B |
| SHA-256: | EACD09517CE90D34BA562171D15AC40D302F0E691B439F91BE1B6406E25F5913 |
| SHA-512: | AA1D2B1EA3C9DE3CCADB319D4E3E3276A2F27DD1A5244FE72DE2B6F94083DDDC762480482C5C2E53F803CD9E3973DDEFC68966F974E124307B5043E654443B98 |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\RWKTB3AY\image002.png
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 13918 |
| Entropy (8bit): | 7.9798958082645175 |
| Encrypted: | false |
| SSDEEP: | 192:h/vNgppw3Na3DmyP/FwrrRIqJNkAndRmcWNoeNpyx4ClWstcQcLlhIDjp/ISA9yb:Vv2EJuArxWuek4KTcLlyQSuoCUeqxWO |
| MD5: | AE344ED38632CED59E61BD80C7CFB3D2 |
| SHA1: | B87B3A32C3465D8B08A1C1BE31E9D5B2CDDE6BEC |
| SHA-256: | 55BE4B1C8BE74F3CC927CF39BD80ADD0B959C3D56BF53B62CEB1EB0C15F336E1 |
| SHA-512: | E79BCBA02CDB56EE11F53E668288C1E382B39A4BAB74DB4F2B7258889DEA38BF8C4925658550C81CB8D8751D5387C080E616AEBBC317D8F034FC2C1EE7A5A8AB |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Outlook\RWKTB3AY\image002.png:Zone.Identifier
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26 |
| Entropy (8bit): | 3.95006375643621 |
| Encrypted: | false |
| SSDEEP: | 3:gAWY3n:qY3n |
| MD5: | FBCCF14D504B7B2DBCB5A5BDA75BD93B |
| SHA1: | D59FC84CDD5217C6CF74785703655F78DA6B582B |
| SHA-256: | EACD09517CE90D34BA562171D15AC40D302F0E691B439F91BE1B6406E25F5913 |
| SHA-512: | AA1D2B1EA3C9DE3CCADB319D4E3E3276A2F27DD1A5244FE72DE2B6F94083DDDC762480482C5C2E53F803CD9E3973DDEFC68966F974E124307B5043E654443B98 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{86E996DA-7AF1-4AB4-8BFD-6811931B9214}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6368 |
| Entropy (8bit): | 3.1438041513508663 |
| Encrypted: | false |
| SSDEEP: | 96:BeqJYWIiEF7j5vRd1gdXHlhggggmkMeWhtoCDFScWERr+5bjrzNCcgggA:BvYW2v5YJMxhNPd+ |
| MD5: | EFB8AD4F6137EA1478626B3E3164AD21 |
| SHA1: | 9CFEAC3A572700C7620C4B3E678E2B17947AE5FB |
| SHA-256: | 6D4059508FB84DB36D847403F2E7D16E947F44BA5AD4A8E11C743F1424AAB4C1 |
| SHA-512: | B669D15DC238EE3562F54A19AC3BD4AAC7E425067971CEC111FF38B068F2ACA133876D01002C19B72F7F7B8A51545C8DD3CD29BB8E631D0E12DE2910F3DBF843 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1727509758159398500_03C124F6-10AB-4CB8-83F1-D641769E957A.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.17750890719043574 |
| Encrypted: | false |
| SSDEEP: | 1536:ydNH9L5HTQKra+QNRyOl2IIyUSBFHJnbn/IzFjgcSb3dTaR+B/RWMGF0fh:4L9rraxPz+2Z5tfh |
| MD5: | 655C5003B84C0EB9A341BF4309183F6C |
| SHA1: | 87B73A574C059F55DA6D67DF7875EE2D2FF2222D |
| SHA-256: | 870CCC5F8B108ABCBBC777C966D98E0158619448314B1A5A82B21CD5DEC02C30 |
| SHA-512: | 01292FE02FE1334ECEED49DB17AB4456EEDE0A8754D504F67607F6BE146BD8C381EC3803F7E3E46AACF2AC2C7BC47393C276F52BF85A232073983E84B9B9EC8F |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1727509758160076200_03C124F6-10AB-4CB8-83F1-D641769E957A.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | 3:: |
| MD5: | 8F4E33F3DC3E414FF94E5FB6905CBA8C |
| SHA1: | 9674344C90C2F0646F0B78026E127C9B86E3AD77 |
| SHA-256: | CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC |
| SHA-512: | 7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240928T0349170146-7412.etl
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 98304 |
| Entropy (8bit): | 4.47302448767868 |
| Encrypted: | false |
| SSDEEP: | 768:YL2BFABnOfQ1Ha4LLPR9eHq7vGTWZWOX7u+cNJWCmsqmVD:rD4LrR9eHqS4X78Dr |
| MD5: | 114620E693F0CB23F6DE2D38023718FC |
| SHA1: | FC32A6190975843B5143EC85D777B8BD23644BA9 |
| SHA-256: | 67E3B5534E201FF0FC6C3687A6363AC24CA2E1395094FCA4C9EE9FA1F2D5B0B8 |
| SHA-512: | 14F5415C33F9E5CD72545E792E1156AF3A4F6A2225325D6259715E2DEAE9C89B899BA5643E86EBA736288F65A8172709C04E17DB98D9BE3E937C3B84E22210A3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 163840 |
| Entropy (8bit): | 0.4794702449760909 |
| Encrypted: | false |
| SSDEEP: | 384:OCIcFPgyriOrIULWQVMlqiuf5j55iXHOoIMu:OMPl26LWQVMYiuf5j55iXHOPMu |
| MD5: | 9AAC91E41B6BB1F5401BD1A9DE367BD6 |
| SHA1: | 587D9FD8B55C83E0D854BA73D9B9042DF471FCB6 |
| SHA-256: | 09AD5FEE32A37FD49DEAAE6E6FC0A12B8E73BF3876DD7818B2FA5FA3389E7808 |
| SHA-512: | A3DA4B9C34D803EBE777489E7BBEAB93008F27DC1109FD429DCC9D668E01BEC1284E189AE78898B11A4D1DA844B4E7F8A4AABCD9CEE17AF38370DAFB119A8645 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 30 |
| Entropy (8bit): | 1.2389205950315936 |
| Encrypted: | false |
| SSDEEP: | 3:dlIv: |
| MD5: | 7317C3B57A2F41D285F233CEDA384CF1 |
| SHA1: | 45A075D29B480DACCAE9D7D26C1F6C40C3BB729A |
| SHA-256: | 397264EBDB67E482362FBCC4F980DBE0C80D92EB3B3F4786CFC5D98E0271CD42 |
| SHA-512: | A712DC1C24706853AD5D9CA40C010CABD3714AFB577546C2095CB96B123080E511B2F5A85242B68B6E097EDEC1769F26D77CB5901754E17864D15FC26C031229 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.9796980101111603 |
| Encrypted: | false |
| SSDEEP: | 48:89d3TvXQHIidAKZdA19ehwiZUklqehBy+3:8HbHuy |
| MD5: | F6A28E34EE6459C0BEE052F36BB79AF4 |
| SHA1: | FD93F71166E1E5816DDC1C311194DC32F2144181 |
| SHA-256: | C53A1FCF1350B1D29182D3675E063266704748BF678686A9F77734A33558A264 |
| SHA-512: | F2406E722806A5C019271ACD39E833461762795222980FBFA5B918D2E2A120B3428DA051E57B5FD3A96F4154D3828974B53C7B6085A5AC48057BE3894D94C165 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2679 |
| Entropy (8bit): | 3.9954214663445557 |
| Encrypted: | false |
| SSDEEP: | 48:8Ld3TvXQHIidAKZdA1weh/iZUkAQkqehey+2:8Zbt9QHy |
| MD5: | F5CDF035FBD8AD297A4D5E091C971539 |
| SHA1: | 87B1AC1E9676081820FDB8609EA2BC9E0916A1FE |
| SHA-256: | 01801390E5F0B4CC0B5C412B08D3A6014A7C72F7B2BBCF9FCA5B5ABAC25B98B8 |
| SHA-512: | 76CD55118AA8E3F3BFCCDF743DB3CE79459B5097AA27514453A142C4246F0A3D60E475DA4C7967814955EBC4F53FA32BA4DD11197BF85B3AFC53C0F6A44DBF70 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2693 |
| Entropy (8bit): | 4.00715772351985 |
| Encrypted: | false |
| SSDEEP: | 48:8xyd3TvXsHIidAKZdA14tseh7sFiZUkmgqeh7sEy+BX:8xabhnCy |
| MD5: | C4890DF916A96A5472D2D2FCD5EF43B7 |
| SHA1: | 8A9C326DFF561EE84424936B119029592625BCDC |
| SHA-256: | BA072E30120870D5DC8200957A4FF8DB78EF6F9DCD046EBDB62D49675D679F01 |
| SHA-512: | 888700BEDBECBDA51AAD2CA7E222701E5C5D7C6BA7EE85BFB8B9E64893916EDA5D26A4ECD0C12813C1DC08C1E0A6D6B06823C0915CD61D211AE7BB9019603D26 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2681 |
| Entropy (8bit): | 3.9946775907089163 |
| Encrypted: | false |
| SSDEEP: | 48:8sd3TvXQHIidAKZdA1vehDiZUkwqeh6y+R:8IbOcy |
| MD5: | 5D459DCFEDD050088F3C9FF53EEB7A10 |
| SHA1: | C226F10A9104736CDE1206D610A662E34A1190CA |
| SHA-256: | 355C445E548311728144B287159604CA02214C94D00506524789A08DD5E5B6A8 |
| SHA-512: | 27B98ED0359531EC144C98A8D4D06D1896A389CF49F872C736F0BB7FF527F8FCB5FB6E6E2B4E016030021759682DF407B4682F804C0F451B2D280582C26E428F |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2681 |
| Entropy (8bit): | 3.9826596826337175 |
| Encrypted: | false |
| SSDEEP: | 48:8Jd3TvXQHIidAKZdA1hehBiZUk1W1qehYy+C:87b+94y |
| MD5: | 840EC95B366CC26DDF066EDFCCA626D7 |
| SHA1: | BD71B0FFC1189042E5F5024EA29076ECDFB58B3B |
| SHA-256: | 550B798B858C564BA4A03F86EA208DB32F27789EA53B42CBABFE4C22CB2500A5 |
| SHA-512: | FE700736ED22255E7FCF33A21A9B72EEE4FE8F589E1C09B04A75D78B8600FADF0C87E514D0517DBDB0398F2E97E37F552559C8ACB225F868232F883DBF2228F5 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2683 |
| Entropy (8bit): | 3.9914303445232635 |
| Encrypted: | false |
| SSDEEP: | 48:8dd3TvXQHIidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbCy+yT+:8nbgT/TbxWOvTbCy7T |
| MD5: | C03FCF07FA0636274F6AEF9428D4AE92 |
| SHA1: | 4779CE87FDD2EFD0B579F912732F337DFB98D97A |
| SHA-256: | 1ADE4350F8F946B39C968025EB94F7252D4CE9D45F86F83FF48E5E806D280A0A |
| SHA-512: | DAB804321D7C3C44C7C52F94A2C817E284252A02576A66303A8AF8D1DC9B1CA14DEC7BCB767E6A060E3EBD779F228FD36646159C85341CDDF840EAA07438DF6F |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 271360 |
| Entropy (8bit): | 1.2817864528004568 |
| Encrypted: | false |
| SSDEEP: | 768:D+Qc0otYlemUROJ84bMCimX3yBbSeo22AGkZZBfe8BUTIZ:XymUCXNxMdfeeNZ |
| MD5: | 467F49A406B93AA9E2479DD06C2E7A4E |
| SHA1: | 09B5DAD2B79B54B8FF7C7FD4F24B02E337C51703 |
| SHA-256: | 01A192D881175229A91D81FAAF2701AEC84E828EF86B74532C911539954D486C |
| SHA-512: | 16E8B41CE95B48EAFAD08DAA8E2F430B5ABE965F974B794C1B072F6372F794304CAD926BB341BAFD395868A180BC931E6FA19AB7C1C3C36B646DCED9313D9B38 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 131072 |
| Entropy (8bit): | 1.2298287976804736 |
| Encrypted: | false |
| SSDEEP: | 384:PwqHrYjTIXJRkMYxftPT3EmCRxGN2Fu1ZG0yO4rGWSQg4731RDzUsPw6:JrUTIZivQGYMSBfWPUIsf |
| MD5: | EFFD118D5AF7618317B334B218CF42AA |
| SHA1: | 3ECDF3FA631E45B7568EAC9817569080F40F932D |
| SHA-256: | 04D6B5221BF84BC73987674231FF87784952B5E0EFD31AEA163F1F89C46E61EA |
| SHA-512: | 38F712E46150CFA64E7E42D3ABA481B726EA2935F5445343B96368F3E58DEDBDF952A61745BCC47FD02917EC96C2E80C4838D88E50D0DAAF03DC9A5382CBB408 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 4268 |
| Entropy (8bit): | 4.848263982009917 |
| Encrypted: | false |
| SSDEEP: | 48:i6PVbumClCdzVQgq3ymmnO9P2aXSzJF7h2Mm6DPXi2YNiZGgPu:isBQgEyzOQaXi8mzWku |
| MD5: | 05F4C23596C44046784809ACCCAE4F5E |
| SHA1: | 51F781603453A8851BF2DF062CBA5D7AC47BE1E8 |
| SHA-256: | 9F95E55F359969CB6825F5B23AF9B6D7D3B2BCCBAC6C5C11A07D1D4356B664AB |
| SHA-512: | FFFC5AAAA3BA3C63FBD88B19E83305101ABBE53AC63342358D84AC3A6381EDAB3E2F173A695C911307F3912CAB7805D7464B54C7884ADDE9DE387173F08DC619 |
| Malicious: | false |
| URL: | https://long-experience-225576.framer.app/ |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 20024 |
| Entropy (8bit): | 7.988327609838537 |
| Encrypted: | false |
| SSDEEP: | 384:BaxPYZobR3lP4Whz4ODb2q39p7lJH6tqKCdcEmNWERAcvdRz:kxPYC/P5j6M9lJH6zReU/ |
| MD5: | C6C9CC5CF5101629A4138BB1B7EDC046 |
| SHA1: | 94D6CB5B48A786240314BEA4D197F87BC33E3A5E |
| SHA-256: | 62BD14B670C4D27D750A20D31B924EF5866E45B1635E769730A57792DD3B52BD |
| SHA-512: | 1CA7FEF6C40877F02C7BA2BBF079DD5EBCF252DAC6EE54926FAE5DEC3F7D91003560E9F685E0AB4A8BCBCE4384281E37191080D0AFF9B3653821A42362589D05 |
| Malicious: | false |
| URL: | https://www.framer.com/fonts/GT-Walsheim/GT-Walsheim-Regular-subset.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 20248 |
| Entropy (8bit): | 7.991218749835485 |
| Encrypted: | true |
| SSDEEP: | 384:gjUI0juy6MndjVyL7A9NQs6KUCSdiylYdutAKTJ1RHLDCUTOG/0bllgfjIS:gjUI0juyLn9ewQsQ4mTJXLDC1G/Klijh |
| MD5: | 7C250B154223D810EA33E61A54EA44E9 |
| SHA1: | D5C93C110B8ECA3DFF9A07B3B3FC02E706DF1F0A |
| SHA-256: | 4E6C62AEA082FA5D57929A9674552137402496DA78265BA67A27833C51050589 |
| SHA-512: | 6D786180AA52B9CD453B6896DB0E0B37F49C0E8F5BCF2E354C7F13F4701E535F2552D342D6F9FBA6381A760D4703A2514C907C21469AED722B19FA5A29969352 |
| Malicious: | false |
| URL: | https://www.framer.com/fonts/GT-Walsheim/GT-Walsheim-Bold-subset.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 19032 |
| Entropy (8bit): | 7.988053206945128 |
| Encrypted: | false |
| SSDEEP: | 384:VAH9U0SrJQkCqmgZXZTScILorqjmNamgKBvc0yoNXfg:VW97zkKOXZTpDrqIamdhg |
| MD5: | 27EFE7989FC51B3DCAE329681D061245 |
| SHA1: | F8513D5B15571F058DB9776600B26741C96F207E |
| SHA-256: | 8DF31A855A1E926287C7AA0A46D942A08A33070EDE77D511738E220119BB12B2 |
| SHA-512: | 4BA42FD0F21EB9166F1EBBE2C5181E7053B8A00E66769CDDFA0081979EF5A15A5A9B5CAB061F2CF55F34242FB8E8820A757C9F3106489DB938D0D705CFAF04CA |
| Malicious: | false |
| URL: | https://www.framer.com/fonts/GT-Walsheim/GT-Walsheim-Medium-subset.woff2 |
| Preview: |
| File type: | |
| Entropy (8bit): | 5.63855050705642 |
| TrID: |
|
| File name: | Potential Phish.msg |
| File size: | 122'368 bytes |
| MD5: | 5f7e13b7ad5082a2ebbbe3c77421d928 |
| SHA1: | 59bd9d2ecf11603790cf90e293552eae076ca457 |
| SHA256: | a2dbcbd7a2131c6c768172875f564a6aa8ec29852b4b2d7a326a99fcb74ddd76 |
| SHA512: | 455716ad45a3f300c482ddee0e72e6216eeab887ee0dbf42175f8dc20e2d65529708776a4f242bc63169f4ff59a9e14d3d9b072bcdaa6b76aa066318a64ed074 |
| SSDEEP: | 1536:liViPaMaakOh0cynCg0tCWZWWC+qEfpMtMy7AGBXBOJuCUDecSRWTb:liViPbkOh0cdcEfoMgAMhKcSRW3 |
| TLSH: | 40C384203AFA521AF2B7EF3249F55497993ABC62AD11C94F2191334E0572A40ED71F3B |
| File Content Preview: | ........................>...................................................................................................................................................................................................................................... |
| Subject: | Forwarding Proyectos S.A. |
| From: | Miguel Ruiz <miguel.ruiz@forwardingproyectos.com> |
| To: | Miguel Ruiz <miguel.ruiz@forwardingproyectos.com> |
| Cc: | |
| BCC: | |
| Date: | Fri, 27 Sep 2024 12:34:50 +0200 |
| Communications: |
|
| Attachments: |
|
| Key | Value |
|---|---|
| Content-Type | multipart/mixed; boundary="===============4546381072124091530==" |
| Date | Fri, 27 Sep 2024 10:34:50 +0000 |
| From | Miguel Ruiz <miguel.ruiz@forwardingproyectos.com> |
| Subject | Forwarding Proyectos S.A. |
| To | Miguel Ruiz <miguel.ruiz@forwardingproyectos.com> |
| Message-Id | <73358a4abedc4f99ab0f22a6762e9dbe@DU0PR05MB10244.eurprd05.prod.outlook.com> |
| Received | from DU0PR05MB10244.eurprd05.prod.outlook.com ([::1]) by DU0PR05MB10244.eurprd05.prod.outlook.com ([fe80::6b4d:59be:4bb4:6cbe%7]) with Microsoft SMTP Server id 15.20.7982.022; Fri, 27 Sep 2024 10:36:29 +0000 |
| Authentication-Results | dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=forwardingproyectos.com; |
| Thread-Topic | Forwarding Proyectos S.A. |
| Thread-Index | AdsQx2Ep11ljUO7/SKuygVaIOykU7g== |
| Accept-Language | es-ES, en-US |
| Content-Language | en-US |
| X-MS-Exchange-Organization-AuthAs | Anonymous |
| X-MS-Exchange-Organization-AuthSource | AMS0EPF00000195.eurprd05.prod.outlook.com |
| X-MS-Has-Attach | yes |
| X-MS-Exchange-Organization-SCL | 1 |
| X-MS-Exchange-Inbox-Rules-Loop | carcarrier.sdr@bergelogistics.com |
| X-MS-TNEF-Correlator | 43040992-a584-4722-873f-251521571a42 |
| arc-seal | i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=MNVCbVzBQRuUdpWkyXWhBVa+WOIjmW54KejsK68oq6cDenibLLm0q1RUyjVqMF78hHc17Yy2In9uKa4a8Caw1IaFTRfKDWnkzVuDCC0GU/AHs1sUkWIw/xXqIiVvMiq9ChE1BbUK69OyKzqnHocucGEcHOXYaAI/3Ei18OzSp/clUu/RAivXYrBJKAaY27/ebEf5qtB7J/JlCVoY9ciE/GoU6Nmt9pSrX10+6l+WgOychVgB9MpQeXz0BAgR3Q9DzQljeto8Tcn6mGjK169UfGKKUC4KWf12PTd23T4iDtYnyDG2KZCoExGHZqo8MTB+17ZjDCyWr2s41jgYSIpIyw== |
| arc-message-signature | i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=m1k2sThrLr7HSePTovtOiycBIEY1jJ/CZ4qpww4K3LE=; b=LEbPpZ9m3HWLivW6PK5/X6QF7NCOwMpTsBfSFlirj0rx6t/ij6hLbosTJqMmQyeWbsD7UKg7DrMte9DOf4XZuVuUJtlufV52H3ytIBYigRx2bXGEp9m9clMR9Je9INsC4vYVy3RS3Z7VktZBvpICZJVcZMmwRdInCurENDfmsWwflLIojNM3FyPjy7Bo5x37/5+GF5vOva1B+Hwp5oLLp8mIkJbZdrvgTz31SCIlKR29tbUvlRwFX8u+WtJUfMCzxQOwr6RuWKRi7kyPb2EVKtyTMp5bpjOAe0XOvkYuRio1lCUA/dRiPeNn/axwUIF8kSDvRuh/Nbz1FH1NFF0fDQ== |
| arc-authentication-results | i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=forwardingproyectos.com; dmarc=pass action=none header.from=forwardingproyectos.com; dkim=pass header.d=forwardingproyectos.com; arc=none |
| authentication-results | spf=pass (sender IP is 40.107.22.133) smtp.mailfrom=forwardingproyectos.com; dkim=none (message not signed) header.d=none;dmarc=bestguesspass action=none header.from=forwardingproyectos.com;compauth=pass reason=109 |
| received-spf | Pass (protection.outlook.com: domain of forwardingproyectos.com designates 40.107.22.133 as permitted sender) receiver=protection.outlook.com; client-ip=40.107.22.133; helo=EUR05-AM6-obe.outbound.protection.outlook.com; pr=C |
| authentication-results-original | dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=forwardingproyectos.com; |
| x-ms-traffictypediagnostic | VI2P190MB2086:EE_|AS8P190MB1885:EE_|AMS0EPF00000195:EE_|PAVPR05MB9951:EE_|DU0PR05MB10244:EE_|AS2PR05MB10399:EE_|VI1PR05MB3277:EE_ |
| X-MS-Office365-Filtering-Correlation-Id | 5b1f1b19-0ead-49f2-cdc5-08dcdee03f2b |
| x-ms-exchange-senderadcheck | 1 |
| x-ms-exchange-antispam-relay | 0 |
| x-microsoft-antispam-untrusted | BCL:0;ARA:13230040|7416014|1800799024|366016|376014|38070700018; |
| x-microsoft-antispam-message-info-original | LhAvW1FFbdfwjCAJjrRt5+4rGbziZLG5MUhG9UdgIi8Z9yxi+LJMq6iP/huoIv7Ievawu4A2sRfbhGSHVnf7CcVqdm4xqd2lyRLkFmFpqcIFfbHsvF/4GcQGURmlZB3XJU9UaMNjQCaCR0m6DeCxZiEtBB5qcdU3R6QhkDm7JYh4ozYhB552stdK+0Te94NORdl3/hQcwq3ndH/kvl+THp0I3IjcTxZY2f62JjBI08n/b/SB42Pmee+aigtkW9iSzT6px+M0f83amw7qZ4WHT8EUQ3Gqn9DoAipQr7cYBSApcwYDtysXdjZfGpQlgIgl3xvJhw/56EJ04NunC0SqY/yAygfSC2F6YsxcvHVquB/2qLbUfdwW96V6C6iZKLfL+NRVclJg64rGq6gJ2AJIPOPZzWtO+NbH1R+C7NQNxJcEhvrvZ5KjmlhE2smmSB8A9j5pU7Tfk9mr18/qgyaf4J9LHmt77MK9mABn/2RfIiGYlk47eR1/PuxksFcMgLWMVClePRJEbX2tMkRx/5mWwTM9Z31QtIX6uc8KvP6Zw5L7rdai5gIRpccG5LEKrIDzo+JsTygHcs1RIgQ/jkoGXoJKOgMlwzU/UQvMuTy5iGjXn42KHvtfUo3akkSReQe85IZsgVGNj8sLCgShwmm9ynMn9nnwAHjJugJ0y+33V2pineQYoSDhal8f8DFz+Elz5gHQtKWetiNppJrmRRmjp3YyHCbE/GQiTh2lyawL5HDM5/R7N0fPR5WkxWXTNmRV+6mdI+2FpQwm+0trnwaIBy47GBAlphKOJocoxDcx3rkXQiVJB5rqC4zPausaOjCk5SmgSIIaRYNnKq0yYhhY6VaWzbmS4+xugxUK6xPNRcJdaxG24CNXAdn4s8ZLk6pHPsJXniOK1o85xzg1bIXNYP/AXq90hK9cKnGCkbPG1hn+WVM/MH8FCP0v80 |
| x-forefront-antispam-report-untrusted | CIP:255.255.255.255;CTRY:;LANG:es;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:VI2P190MB2086.EURP190.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(7416014)(1800799024)(366016)(376014)(38070700018);DIR:OUT;SFP:1102; |
| x-ms-exchange-antispam-messagedata-original-chunkcount | 1 |
| x-ms-exchange-antispam-messagedata-original-0 | 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 |
| x-ms-exchange-transport-crosstenantheadersstamped | PAVPR05MB9951 |
| x-eopattributedmessage | 0 |
| x-eoptenantattributedmessage | 35340923-ae24-4b72-950b-2bc4620641ae:0 |
| x-ms-exchange-transport-crosstenantheadersstripped | AMS0EPF00000195.eurprd05.prod.outlook.com |
| x-ms-exchange-transport-crosstenantheaderspromoted | AMS0EPF00000195.eurprd05.prod.outlook.com |
| x-ms-publictraffictype | |
| x-ms-office365-filtering-correlation-id-prvs | 0a686556-63c0-4850-cf1a-08dcdee00438 |
| X-MS-Exchange-AtpMessageProperties | SA|SL |
| X-Microsoft-Antispam | BCL:0;ARA:13230040|12012899012|35042699022; |
| X-Forefront-Antispam-Report | CIP:255.255.255.255;CTRY:;LANG:es;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR05MB10244.eurprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(12012899012)(35042699022);DIR:INB; |
| x-ms-exchange-crosstenant-originalarrivaltime | 27 Sep 2024 10:34:52.4521 (UTC) |
| x-ms-exchange-crosstenant-network-message-id | 80974017-b471-42bf-8f85-08dcdee0056a |
| x-ms-exchange-crosstenant-id | 35340923-ae24-4b72-950b-2bc4620641ae |
| x-ms-exchange-crosstenant-authsource | AMS0EPF00000195.eurprd05.prod.outlook.com |
| x-ms-exchange-crosstenant-authas | Anonymous |
| x-ms-exchange-crosstenant-fromentityheader | Internet |
| x-ms-exchange-transport-endtoendlatency | 00:00:03.4556772 |
| x-ms-exchange-processed-by-bccfoldering | 15.20.7982.022 |
| Resent-From | <carcarrier.sdr@bergelogistics.com> |
| X-MS-Exchange-Organization-MessageDirectionality | Originating |
| X-MS-Exchange-Organization-Network-Message-Id | 5b1f1b19-0ead-49f2-cdc5-08dcdee03f2b |
| X-MS-Exchange-Parent-Message-Id | <VI2P190MB20866DD241EDB0FFEE978FC3F16B2@VI2P190MB2086.EURP190.PROD.OUTLOOK.COM> |
| Auto-Submitted | auto-generated |
| X-MS-Exchange-Generated-Message-Source | Mailbox Rules Agent |
| Return-Path | carcarrier.sdr@bergelogistics.com |
| X-MS-Exchange-Organization-ExpirationStartTime | 27 Sep 2024 10:36:29.8659 (UTC) |
| X-MS-Exchange-Organization-ExpirationStartTimeReason | OriginalSubmit |
| X-MS-Exchange-Organization-ExpirationInterval | 1:00:00:00.0000000 |
| X-MS-Exchange-Organization-ExpirationIntervalReason | OriginalSubmit |
| X-MS-Office365-Filtering-Correlation-Id-Prvs | 80974017-b471-42bf-8f85-08dcdee0056a |
| X-MS-Exchange-CrossTenant-AuthAs | Anonymous |
| X-MS-Exchange-CrossTenant-AuthSource | AMS0EPF00000195.eurprd05.prod.outlook.com |
| X-MS-Exchange-CrossTenant-OriginalArrivalTime | 27 Sep 2024 10:36:29.3514 (UTC) |
| X-MS-Exchange-CrossTenant-FromEntityHeader | Hosted |
| X-MS-Exchange-CrossTenant-Id | 35340923-ae24-4b72-950b-2bc4620641ae |
| X-MS-Exchange-CrossTenant-Network-Message-Id | 5b1f1b19-0ead-49f2-cdc5-08dcdee03f2b |
| X-MS-Exchange-Transport-CrossTenantHeadersStamped | AS2PR05MB10399 |
| X-MS-Exchange-Processed-By-BccFoldering | 15.20.7962.017 |
| X-Microsoft-Antispam-Mailbox-Delivery | ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003)(1420198); |
| X-Microsoft-Antispam-Message-Info | oSS3MOB2curjzls6ugpPeEM1iXQ/Rv4H7J6zn7Vd7fooBUpkpLgZGlJJGU+q90qS0dlgFazmbxr1y5tsnPJQFcbrnWa6bDgq7hpHhoPaRml2++Eph3hs27MHD+ZasukspbUakWcQKuq/c9h/1WiQgswPBGhT5QUi0aW4Xg7DBMxV0ioweK7qwGsUdvQxFcjYry7Nr5ynJzgfiWXeD/Pj9houdQzLS7D4l6q2LTaaDhbZWRuSKnVp8l0byrZSJvkacy94rSLatK/8XAf2CCAftZ8d8V5CptWL90C0iNnXY43vOz0mvOUc5GAbcG1UisMxu7BgTfHWXVeiubccO0WF8KBihlh0sO9q1ZNubjfE3IvDnOT6BXG7cM8Zmj6CA4DyYuLch9j2zEWWFLV+KZj36x0OhcwesdpaZVvJNY09vFlA4ogZv0rOT+RBRqtUeyakf++nx3JtsmM90aCxSDTCdXjgHLq420eB3AdR6s/CfGRWnpN8qas0n2Z/osMI2GyZ2Z4x155AQwGSLaPDK8xxdtpba3hLLLFKCBYEMfgPn0A4tNZAOFuUST/9qEKSajusncvNZnnnCC8rCCQNpFUfO3bB15qHIkJrFNityW/y4X+gSXJCt69IgePl9JdxHj9HWZuBEhO6xupyA20LEdJdBwhVgwLKeK/wtQSw8YtARFjG8YwKXy7Cf9YloRuCMoyn6ivYn0Bbtge0RbpKZNY6cdiHEosDk6BwSM/GFNlprznu/NV+aEF2Yl4lIQO8FIvMlAblAB90VIF4FiE15dFTj/POMHwUSnfv3l729hS8FeZQLrTDbKAaA3TOgDmcwzEIZkwFeXQ3Tr3Kr6V7r+RSd4UsJMUbsvvKM90p5/2cF3HQg4olQYK/KNNM+umv+ggPlSpnMSVexyG2Ui4j3vIOPu4qig7px94oX0rkYMeCp5U+wH5YNMkSGUwqhhNYK//yaqt |
| X-PhishAlarm-Format | PhishAlarm O365 Add-In/4.4.190 |
| MIME-Version | 1.0 |
| date | Fri, 27 Sep 2024 12:34:50 +0200 |
 | |
| Icon Hash: | c4e1928eacb280a2 |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Sep 28, 2024 09:49:09.119160891 CEST | 49738 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:09.119174004 CEST | 443 | 49738 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:09.119239092 CEST | 49738 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:09.119818926 CEST | 49738 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:09.119832039 CEST | 443 | 49738 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:09.908862114 CEST | 443 | 49738 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:09.909018993 CEST | 49738 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:09.915940046 CEST | 49738 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:09.915950060 CEST | 443 | 49738 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:09.916208982 CEST | 443 | 49738 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:09.918098927 CEST | 49738 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:09.918162107 CEST | 49738 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:09.918167114 CEST | 443 | 49738 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:09.918450117 CEST | 49738 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:09.959414005 CEST | 443 | 49738 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:10.088107109 CEST | 443 | 49738 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:10.088263035 CEST | 443 | 49738 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:10.088363886 CEST | 49738 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:10.088488102 CEST | 49738 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:10.088507891 CEST | 443 | 49738 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:12.408324003 CEST | 49674 | 443 | 192.168.2.5 | 23.1.237.91 |
| Sep 28, 2024 09:49:12.408339977 CEST | 49675 | 443 | 192.168.2.5 | 23.1.237.91 |
| Sep 28, 2024 09:49:13.142719030 CEST | 49673 | 443 | 192.168.2.5 | 23.1.237.91 |
| Sep 28, 2024 09:49:18.996568918 CEST | 49739 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:18.996611118 CEST | 443 | 49739 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:18.996676922 CEST | 49739 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:18.997441053 CEST | 49739 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:18.997457027 CEST | 443 | 49739 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:19.773859024 CEST | 443 | 49739 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:19.773951054 CEST | 49739 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:19.779470921 CEST | 49739 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:19.779480934 CEST | 443 | 49739 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:19.779728889 CEST | 443 | 49739 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:19.782995939 CEST | 49739 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:19.783085108 CEST | 49739 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:19.783092022 CEST | 443 | 49739 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:19.785576105 CEST | 49739 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:19.831389904 CEST | 443 | 49739 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:19.987762928 CEST | 443 | 49739 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:19.987847090 CEST | 443 | 49739 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:19.988080025 CEST | 49739 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:19.988472939 CEST | 49739 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:19.988490105 CEST | 443 | 49739 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:22.727754116 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:22.727793932 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:22.728039026 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:22.730384111 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:22.730396986 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:23.510143995 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:23.510415077 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:25.872689009 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:25.872735023 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:25.873100996 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.002059937 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:26.296818018 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:26.334623098 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:26.334676027 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.334757090 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:26.343410969 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.346342087 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:26.346365929 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.553735018 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.553755045 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.553761959 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.553786039 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.553798914 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.553809881 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.553827047 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:26.553853035 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.553874969 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:26.553905964 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.553914070 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.553936005 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:26.553946018 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.553960085 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:26.553987026 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:26.553997040 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:26.554574013 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.554635048 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.554743052 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:26.574856043 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:26.574875116 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:26.574892044 CEST | 49742 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:49:26.574898005 CEST | 443 | 49742 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:49:27.149739981 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:27.149833918 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:27.224915028 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:27.224960089 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:27.225869894 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:27.226685047 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:27.226718903 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:27.226756096 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:27.513653040 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:27.513709068 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:27.513772964 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:27.513833046 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:27.513860941 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:27.513880968 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:27.513907909 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:27.513959885 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:27.622838020 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:27.622869015 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:27.622883081 CEST | 49743 | 443 | 192.168.2.5 | 20.190.159.64 |
| Sep 28, 2024 09:49:27.622889996 CEST | 443 | 49743 | 20.190.159.64 | 192.168.2.5 |
| Sep 28, 2024 09:49:36.705374002 CEST | 49745 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:36.705425978 CEST | 443 | 49745 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:36.705490112 CEST | 49745 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:36.706403971 CEST | 49745 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:36.706418991 CEST | 443 | 49745 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:37.644546032 CEST | 443 | 49745 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:37.644629955 CEST | 49745 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:37.671797037 CEST | 49745 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:37.671823978 CEST | 443 | 49745 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:37.672101021 CEST | 443 | 49745 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:37.677119970 CEST | 49745 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:37.677177906 CEST | 49745 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:37.677182913 CEST | 443 | 49745 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:37.677309990 CEST | 49745 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:37.723397017 CEST | 443 | 49745 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:37.851073980 CEST | 443 | 49745 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:37.851367950 CEST | 443 | 49745 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:49:37.851423025 CEST | 49745 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:37.851579905 CEST | 49745 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:49:37.851604939 CEST | 443 | 49745 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:01.164414883 CEST | 49747 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:01.164449930 CEST | 443 | 49747 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:01.164566994 CEST | 49747 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:01.165220022 CEST | 49747 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:01.165231943 CEST | 443 | 49747 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:01.994003057 CEST | 443 | 49747 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:01.994087934 CEST | 49747 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:01.999361992 CEST | 49747 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:01.999371052 CEST | 443 | 49747 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:01.999625921 CEST | 443 | 49747 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:02.002625942 CEST | 49747 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:02.002715111 CEST | 49747 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:02.002722979 CEST | 443 | 49747 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:02.003037930 CEST | 49747 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:02.047399998 CEST | 443 | 49747 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:02.180582047 CEST | 443 | 49747 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:02.181042910 CEST | 443 | 49747 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:02.181098938 CEST | 49747 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:02.182496071 CEST | 49747 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:02.182516098 CEST | 443 | 49747 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:02.182526112 CEST | 49747 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:03.476650953 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:03.476730108 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:03.476809978 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:03.477284908 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:03.477315903 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.297416925 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.297494888 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:04.299493074 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:04.299520969 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.299774885 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.308191061 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:04.355395079 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.639960051 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.639981985 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.639996052 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.640059948 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:04.640083075 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.640208960 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:04.641448021 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.641479015 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.641519070 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:04.641527891 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.641554117 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:04.641617060 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.642781019 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:04.644696951 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:04.644720078 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:04.644735098 CEST | 49748 | 443 | 192.168.2.5 | 20.114.59.183 |
| Sep 28, 2024 09:50:04.644751072 CEST | 443 | 49748 | 20.114.59.183 | 192.168.2.5 |
| Sep 28, 2024 09:50:10.571727037 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:10.571744919 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:10.571813107 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:10.572278023 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:10.572288036 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.069134951 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.109834909 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:11.109853029 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.111491919 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.111552000 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:11.257232904 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:11.257380009 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.260940075 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:11.260951042 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.309227943 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:11.371619940 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.372723103 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.372809887 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:11.372818947 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.372859955 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:11.372865915 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.372941971 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.372982979 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:11.375744104 CEST | 49752 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:11.375762939 CEST | 443 | 49752 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.423738956 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:11.423779964 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.423856020 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:11.423944950 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:11.423952103 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.424010992 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:11.424103975 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:11.424169064 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.424227953 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:11.424356937 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:11.424371958 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.424530029 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:11.424544096 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.424691916 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:11.424722910 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.162961006 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.163270950 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.163305044 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.164305925 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.164361954 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.165688992 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.165751934 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.165913105 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.166598082 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.166845083 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.166853905 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.168359041 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.168451071 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.169272900 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.169357061 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.169445038 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.169450998 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.176373959 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.176623106 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.176645041 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.180236101 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.180310011 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.180753946 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.180928946 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.180943012 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.206976891 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.206988096 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.221179962 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.221183062 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.221198082 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.252003908 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.267440081 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.463488102 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.463522911 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.463531971 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.463557959 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.463568926 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.463602066 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.463608027 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.463620901 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.463649988 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.463676929 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.468602896 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.468662024 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.468669891 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.468700886 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.468713045 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.468816996 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.470447063 CEST | 49753 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.470462084 CEST | 443 | 49753 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.478451014 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.478872061 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.488903046 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.488914013 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.488944054 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.488959074 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.488966942 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.489058971 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.489058971 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.489073992 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.489085913 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.489120007 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.489444017 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.489469051 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.489489079 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.489522934 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.489528894 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.489550114 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.489550114 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.489579916 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.489586115 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.489612103 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.489631891 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.565846920 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.565921068 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.565954924 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.565980911 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.565998077 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.566040039 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.568998098 CEST | 49754 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.569015980 CEST | 443 | 49754 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.570080042 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.570173025 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.570194006 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.570276976 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.570297003 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.570322037 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.581448078 CEST | 49755 | 443 | 192.168.2.5 | 13.32.27.14 |
| Sep 28, 2024 09:50:12.581486940 CEST | 443 | 49755 | 13.32.27.14 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.608711958 CEST | 49756 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:12.608748913 CEST | 443 | 49756 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:12.608871937 CEST | 49756 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:12.610065937 CEST | 49756 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:12.610076904 CEST | 443 | 49756 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:13.100783110 CEST | 443 | 49756 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:13.101156950 CEST | 49756 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:13.101175070 CEST | 443 | 49756 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:13.101620913 CEST | 443 | 49756 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:13.102009058 CEST | 49756 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:13.102083921 CEST | 443 | 49756 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:13.102200031 CEST | 49756 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:13.145576954 CEST | 49756 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:13.145591974 CEST | 443 | 49756 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:13.251760960 CEST | 443 | 49756 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:13.251842976 CEST | 443 | 49756 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:13.251888037 CEST | 49756 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:13.252399921 CEST | 49756 | 443 | 192.168.2.5 | 35.71.142.77 |
| Sep 28, 2024 09:50:13.252414942 CEST | 443 | 49756 | 35.71.142.77 | 192.168.2.5 |
| Sep 28, 2024 09:50:16.066816092 CEST | 49759 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:50:16.066859961 CEST | 443 | 49759 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:50:16.066934109 CEST | 49759 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:50:16.074421883 CEST | 49759 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:50:16.074445963 CEST | 443 | 49759 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:50:16.746525049 CEST | 443 | 49759 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:50:16.747030020 CEST | 49759 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:50:16.747045994 CEST | 443 | 49759 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:50:16.748569012 CEST | 443 | 49759 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:50:16.748627901 CEST | 49759 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:50:17.198057890 CEST | 49759 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:50:17.198309898 CEST | 443 | 49759 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:50:17.271935940 CEST | 49759 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:50:17.271945000 CEST | 443 | 49759 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:50:17.381309032 CEST | 49759 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:50:24.641504049 CEST | 49760 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:24.641547918 CEST | 443 | 49760 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:24.641819954 CEST | 49760 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:24.642565966 CEST | 49760 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:24.642580986 CEST | 443 | 49760 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:25.445709944 CEST | 443 | 49760 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:25.445847988 CEST | 49760 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:25.458118916 CEST | 49760 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:25.458141088 CEST | 443 | 49760 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:25.458889008 CEST | 443 | 49760 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:25.465483904 CEST | 49760 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:25.465605021 CEST | 49760 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:25.465610981 CEST | 443 | 49760 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:25.466236115 CEST | 49760 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:25.511447906 CEST | 443 | 49760 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:25.637965918 CEST | 443 | 49760 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:25.638139009 CEST | 443 | 49760 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:25.638271093 CEST | 49760 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:25.638566971 CEST | 49760 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:26.639072895 CEST | 443 | 49759 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:50:26.639147043 CEST | 443 | 49759 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:50:26.639312029 CEST | 49759 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:50:27.612341881 CEST | 49759 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:50:27.612364054 CEST | 443 | 49759 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:50:40.849514008 CEST | 49712 | 80 | 192.168.2.5 | 192.229.221.95 |
| Sep 28, 2024 09:50:40.849766970 CEST | 49711 | 80 | 192.168.2.5 | 2.19.126.163 |
| Sep 28, 2024 09:50:40.854871988 CEST | 80 | 49712 | 192.229.221.95 | 192.168.2.5 |
| Sep 28, 2024 09:50:40.854932070 CEST | 49712 | 80 | 192.168.2.5 | 192.229.221.95 |
| Sep 28, 2024 09:50:40.855206966 CEST | 80 | 49711 | 2.19.126.163 | 192.168.2.5 |
| Sep 28, 2024 09:50:40.855274916 CEST | 49711 | 80 | 192.168.2.5 | 2.19.126.163 |
| Sep 28, 2024 09:50:45.898408890 CEST | 49718 | 80 | 192.168.2.5 | 192.229.221.95 |
| Sep 28, 2024 09:50:45.903845072 CEST | 80 | 49718 | 192.229.221.95 | 192.168.2.5 |
| Sep 28, 2024 09:50:45.903913021 CEST | 49718 | 80 | 192.168.2.5 | 192.229.221.95 |
| Sep 28, 2024 09:50:50.499448061 CEST | 49731 | 443 | 192.168.2.5 | 184.28.90.27 |
| Sep 28, 2024 09:50:50.504668951 CEST | 443 | 49731 | 184.28.90.27 | 192.168.2.5 |
| Sep 28, 2024 09:50:50.504745007 CEST | 49731 | 443 | 192.168.2.5 | 184.28.90.27 |
| Sep 28, 2024 09:50:51.474992037 CEST | 49735 | 443 | 192.168.2.5 | 184.28.90.27 |
| Sep 28, 2024 09:50:51.480290890 CEST | 443 | 49735 | 184.28.90.27 | 192.168.2.5 |
| Sep 28, 2024 09:50:51.480370045 CEST | 49735 | 443 | 192.168.2.5 | 184.28.90.27 |
| Sep 28, 2024 09:50:51.707328081 CEST | 49761 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:51.707390070 CEST | 443 | 49761 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:51.707453012 CEST | 49761 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:51.708204031 CEST | 49761 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:51.708219051 CEST | 443 | 49761 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:52.487188101 CEST | 443 | 49761 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:52.487276077 CEST | 49761 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:52.489574909 CEST | 49761 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:52.489590883 CEST | 443 | 49761 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:52.489866018 CEST | 443 | 49761 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:52.495682001 CEST | 49761 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:52.495932102 CEST | 49761 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:52.495938063 CEST | 443 | 49761 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:52.496165991 CEST | 49761 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:52.543400049 CEST | 443 | 49761 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:52.671097994 CEST | 443 | 49761 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:52.671186924 CEST | 443 | 49761 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:52.671401024 CEST | 49761 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:52.671806097 CEST | 49761 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:52.671835899 CEST | 443 | 49761 | 40.115.3.253 | 192.168.2.5 |
| Sep 28, 2024 09:50:52.671852112 CEST | 49761 | 443 | 192.168.2.5 | 40.115.3.253 |
| Sep 28, 2024 09:50:56.534527063 CEST | 443 | 49715 | 23.1.237.91 | 192.168.2.5 |
| Sep 28, 2024 09:50:56.534612894 CEST | 443 | 49715 | 23.1.237.91 | 192.168.2.5 |
| Sep 28, 2024 09:50:56.534650087 CEST | 49715 | 443 | 192.168.2.5 | 23.1.237.91 |
| Sep 28, 2024 09:50:56.534691095 CEST | 49715 | 443 | 192.168.2.5 | 23.1.237.91 |
| Sep 28, 2024 09:51:14.739070892 CEST | 49765 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:51:14.739136934 CEST | 443 | 49765 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:51:14.739214897 CEST | 49765 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:51:14.739511967 CEST | 49765 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:51:14.739531040 CEST | 443 | 49765 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:51:15.543296099 CEST | 443 | 49765 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:51:15.543625116 CEST | 49765 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:51:15.543675900 CEST | 443 | 49765 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:51:15.544174910 CEST | 443 | 49765 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:51:15.544600964 CEST | 49765 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:51:15.544677019 CEST | 443 | 49765 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:51:15.724014044 CEST | 49765 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:51:19.761051893 CEST | 49767 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:19.761116982 CEST | 443 | 49767 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:19.761187077 CEST | 49767 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:19.762273073 CEST | 49767 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:19.762291908 CEST | 443 | 49767 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:20.562580109 CEST | 443 | 49767 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:20.562683105 CEST | 49767 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:20.569931030 CEST | 49767 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:20.569961071 CEST | 443 | 49767 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:20.570322990 CEST | 443 | 49767 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:20.702586889 CEST | 49767 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:20.702852964 CEST | 49767 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:20.702874899 CEST | 443 | 49767 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:20.703509092 CEST | 49767 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:20.747447014 CEST | 443 | 49767 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:20.877487898 CEST | 443 | 49767 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:20.877607107 CEST | 443 | 49767 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:20.877684116 CEST | 49767 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:20.878556013 CEST | 49767 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:20.878578901 CEST | 443 | 49767 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:25.302870989 CEST | 443 | 49765 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:51:25.302946091 CEST | 443 | 49765 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:51:25.303169012 CEST | 49765 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:51:25.657726049 CEST | 49765 | 443 | 192.168.2.5 | 216.58.206.68 |
| Sep 28, 2024 09:51:25.657769918 CEST | 443 | 49765 | 216.58.206.68 | 192.168.2.5 |
| Sep 28, 2024 09:51:56.374389887 CEST | 80 | 49716 | 192.229.221.95 | 192.168.2.5 |
| Sep 28, 2024 09:51:56.374514103 CEST | 49716 | 80 | 192.168.2.5 | 192.229.221.95 |
| Sep 28, 2024 09:51:56.764236927 CEST | 49769 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:56.764313936 CEST | 443 | 49769 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:56.764395952 CEST | 49769 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:56.765018940 CEST | 49769 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:56.765048027 CEST | 443 | 49769 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:57.853189945 CEST | 443 | 49769 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:57.853266954 CEST | 49769 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:57.858522892 CEST | 49769 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:57.858550072 CEST | 443 | 49769 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:57.858943939 CEST | 443 | 49769 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:57.911569118 CEST | 49769 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:57.939512014 CEST | 49769 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:57.939836979 CEST | 49769 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:57.939851046 CEST | 443 | 49769 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:57.940478086 CEST | 49769 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:57.987406015 CEST | 443 | 49769 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:58.118895054 CEST | 443 | 49769 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:58.119147062 CEST | 443 | 49769 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:51:58.119204998 CEST | 49769 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:58.119513988 CEST | 49769 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:51:58.119537115 CEST | 443 | 49769 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:53:00.564476967 CEST | 49770 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:53:00.564579964 CEST | 443 | 49770 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:53:00.564656973 CEST | 49770 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:53:00.565310955 CEST | 49770 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:53:00.565346956 CEST | 443 | 49770 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:53:01.342781067 CEST | 443 | 49770 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:53:01.342907906 CEST | 49770 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:53:01.347137928 CEST | 49770 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:53:01.347146034 CEST | 443 | 49770 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:53:01.347388029 CEST | 443 | 49770 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:53:01.351424932 CEST | 49770 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:53:01.351793051 CEST | 49770 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:53:01.351798058 CEST | 443 | 49770 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:53:01.352097034 CEST | 49770 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:53:01.399432898 CEST | 443 | 49770 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:53:01.525702953 CEST | 443 | 49770 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:53:01.525852919 CEST | 443 | 49770 | 40.113.110.67 | 192.168.2.5 |
| Sep 28, 2024 09:53:01.525904894 CEST | 49770 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:53:01.526129961 CEST | 49770 | 443 | 192.168.2.5 | 40.113.110.67 |
| Sep 28, 2024 09:53:01.526139975 CEST | 443 | 49770 | 40.113.110.67 | 192.168.2.5 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Sep 28, 2024 09:50:10.520354986 CEST | 56834 | 53 | 192.168.2.5 | 1.1.1.1 |
| Sep 28, 2024 09:50:10.520499945 CEST | 56199 | 53 | 192.168.2.5 | 1.1.1.1 |
| Sep 28, 2024 09:50:10.549216986 CEST | 53 | 65464 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:50:10.550728083 CEST | 53 | 52778 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:50:10.561106920 CEST | 53 | 56834 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:50:10.578823090 CEST | 53 | 56199 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.404078960 CEST | 63976 | 53 | 192.168.2.5 | 1.1.1.1 |
| Sep 28, 2024 09:50:11.404642105 CEST | 57306 | 53 | 192.168.2.5 | 1.1.1.1 |
| Sep 28, 2024 09:50:11.423082113 CEST | 53 | 63976 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.423235893 CEST | 53 | 57306 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:50:11.600048065 CEST | 53 | 49433 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:50:16.018421888 CEST | 53840 | 53 | 192.168.2.5 | 1.1.1.1 |
| Sep 28, 2024 09:50:16.018641949 CEST | 57441 | 53 | 192.168.2.5 | 1.1.1.1 |
| Sep 28, 2024 09:50:16.025378942 CEST | 53 | 53840 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:50:16.025499105 CEST | 53 | 57441 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:50:29.765549898 CEST | 53 | 52669 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:50:48.651709080 CEST | 53 | 60249 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:51:10.128097057 CEST | 53 | 49906 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:51:11.392435074 CEST | 53 | 61091 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:51:41.405256033 CEST | 53 | 56412 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:52:29.691179991 CEST | 53 | 63121 | 1.1.1.1 | 192.168.2.5 |
| Sep 28, 2024 09:52:39.702742100 CEST | 138 | 138 | 192.168.2.5 | 192.168.2.255 |
| Timestamp | Source IP | Dest IP | Checksum | Code | Type |
|---|---|---|---|---|---|
| Sep 28, 2024 09:50:10.578999996 CEST | 192.168.2.5 | 1.1.1.1 | c24d | (Port unreachable) | Destination Unreachable |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Sep 28, 2024 09:50:10.520354986 CEST | 192.168.2.5 | 1.1.1.1 | 0xf989 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Sep 28, 2024 09:50:10.520499945 CEST | 192.168.2.5 | 1.1.1.1 | 0xd460 | Standard query (0) | 65 | IN (0x0001) | false | |
| Sep 28, 2024 09:50:11.404078960 CEST | 192.168.2.5 | 1.1.1.1 | 0xd63 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Sep 28, 2024 09:50:11.404642105 CEST | 192.168.2.5 | 1.1.1.1 | 0x1e63 | Standard query (0) | 65 | IN (0x0001) | false | |
| Sep 28, 2024 09:50:16.018421888 CEST | 192.168.2.5 | 1.1.1.1 | 0xe69a | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Sep 28, 2024 09:50:16.018641949 CEST | 192.168.2.5 | 1.1.1.1 | 0x3b9 | Standard query (0) | 65 | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Sep 28, 2024 09:50:10.561106920 CEST | 1.1.1.1 | 192.168.2.5 | 0xf989 | No error (0) | 35.71.142.77 | A (IP address) | IN (0x0001) | false | ||
| Sep 28, 2024 09:50:10.561106920 CEST | 1.1.1.1 | 192.168.2.5 | 0xf989 | No error (0) | 52.223.52.2 | A (IP address) | IN (0x0001) | false | ||
| Sep 28, 2024 09:50:11.423082113 CEST | 1.1.1.1 | 192.168.2.5 | 0xd63 | No error (0) | 13.32.27.14 | A (IP address) | IN (0x0001) | false | ||
| Sep 28, 2024 09:50:11.423082113 CEST | 1.1.1.1 | 192.168.2.5 | 0xd63 | No error (0) | 13.32.27.87 | A (IP address) | IN (0x0001) | false | ||
| Sep 28, 2024 09:50:11.423082113 CEST | 1.1.1.1 | 192.168.2.5 | 0xd63 | No error (0) | 13.32.27.90 | A (IP address) | IN (0x0001) | false | ||
| Sep 28, 2024 09:50:11.423082113 CEST | 1.1.1.1 | 192.168.2.5 | 0xd63 | No error (0) | 13.32.27.66 | A (IP address) | IN (0x0001) | false | ||
| Sep 28, 2024 09:50:16.025378942 CEST | 1.1.1.1 | 192.168.2.5 | 0xe69a | No error (0) | 216.58.206.68 | A (IP address) | IN (0x0001) | false | ||
| Sep 28, 2024 09:50:16.025499105 CEST | 1.1.1.1 | 192.168.2.5 | 0x3b9 | No error (0) | 65 | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 0 | 192.168.2.5 | 49738 | 40.115.3.253 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:49:09 UTC | 71 | OUT | |
| 2024-09-28 07:49:09 UTC | 249 | OUT | |
| 2024-09-28 07:49:09 UTC | 1084 | OUT | |
| 2024-09-28 07:49:09 UTC | 218 | OUT | |
| 2024-09-28 07:49:10 UTC | 14 | IN | |
| 2024-09-28 07:49:10 UTC | 58 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 1 | 192.168.2.5 | 49739 | 40.115.3.253 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:49:19 UTC | 71 | OUT | |
| 2024-09-28 07:49:19 UTC | 249 | OUT | |
| 2024-09-28 07:49:19 UTC | 1084 | OUT | |
| 2024-09-28 07:49:19 UTC | 218 | OUT | |
| 2024-09-28 07:49:19 UTC | 14 | IN | |
| 2024-09-28 07:49:19 UTC | 58 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 2 | 192.168.2.5 | 49742 | 20.114.59.183 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:49:26 UTC | 306 | OUT | |
| 2024-09-28 07:49:26 UTC | 560 | IN | |
| 2024-09-28 07:49:26 UTC | 15824 | IN | |
| 2024-09-28 07:49:26 UTC | 8666 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 3 | 192.168.2.5 | 49743 | 20.190.159.64 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:49:27 UTC | 422 | OUT | |
| 2024-09-28 07:49:27 UTC | 4762 | OUT | |
| 2024-09-28 07:49:27 UTC | 569 | IN | |
| 2024-09-28 07:49:27 UTC | 10197 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 4 | 192.168.2.5 | 49745 | 40.115.3.253 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:49:37 UTC | 71 | OUT | |
| 2024-09-28 07:49:37 UTC | 249 | OUT | |
| 2024-09-28 07:49:37 UTC | 1084 | OUT | |
| 2024-09-28 07:49:37 UTC | 218 | OUT | |
| 2024-09-28 07:49:37 UTC | 14 | IN | |
| 2024-09-28 07:49:37 UTC | 58 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 5 | 192.168.2.5 | 49747 | 40.115.3.253 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:50:01 UTC | 71 | OUT | |
| 2024-09-28 07:50:01 UTC | 249 | OUT | |
| 2024-09-28 07:50:01 UTC | 1084 | OUT | |
| 2024-09-28 07:50:01 UTC | 218 | OUT | |
| 2024-09-28 07:50:02 UTC | 14 | IN | |
| 2024-09-28 07:50:02 UTC | 58 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 6 | 192.168.2.5 | 49748 | 20.114.59.183 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:50:04 UTC | 306 | OUT | |
| 2024-09-28 07:50:04 UTC | 560 | IN | |
| 2024-09-28 07:50:04 UTC | 15824 | IN | |
| 2024-09-28 07:50:04 UTC | 14181 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 7 | 192.168.2.5 | 49752 | 35.71.142.77 | 443 | 7868 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:50:11 UTC | 676 | OUT | |
| 2024-09-28 07:50:11 UTC | 302 | IN | |
| 2024-09-28 07:50:11 UTC | 884 | IN | |
| 2024-09-28 07:50:11 UTC | 2372 | IN | |
| 2024-09-28 07:50:11 UTC | 538 | IN | |
| 2024-09-28 07:50:11 UTC | 487 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 8 | 192.168.2.5 | 49754 | 13.32.27.14 | 443 | 7868 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:50:12 UTC | 627 | OUT | |
| 2024-09-28 07:50:12 UTC | 972 | IN | |
| 2024-09-28 07:50:12 UTC | 16384 | IN | |
| 2024-09-28 07:50:12 UTC | 3640 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 9 | 192.168.2.5 | 49753 | 13.32.27.14 | 443 | 7868 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:50:12 UTC | 626 | OUT | |
| 2024-09-28 07:50:12 UTC | 970 | IN | |
| 2024-09-28 07:50:12 UTC | 15414 | IN | |
| 2024-09-28 07:50:12 UTC | 3618 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 10 | 192.168.2.5 | 49755 | 13.32.27.14 | 443 | 7868 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:50:12 UTC | 624 | OUT | |
| 2024-09-28 07:50:12 UTC | 966 | IN | |
| 2024-09-28 07:50:12 UTC | 16384 | IN | |
| 2024-09-28 07:50:12 UTC | 3864 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 11 | 192.168.2.5 | 49756 | 35.71.142.77 | 443 | 7868 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:50:13 UTC | 622 | OUT | |
| 2024-09-28 07:50:13 UTC | 202 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 12 | 192.168.2.5 | 49760 | 40.115.3.253 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:50:25 UTC | 71 | OUT | |
| 2024-09-28 07:50:25 UTC | 249 | OUT | |
| 2024-09-28 07:50:25 UTC | 1084 | OUT | |
| 2024-09-28 07:50:25 UTC | 218 | OUT | |
| 2024-09-28 07:50:25 UTC | 14 | IN | |
| 2024-09-28 07:50:25 UTC | 58 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 13 | 192.168.2.5 | 49761 | 40.115.3.253 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:50:52 UTC | 71 | OUT | |
| 2024-09-28 07:50:52 UTC | 249 | OUT | |
| 2024-09-28 07:50:52 UTC | 1084 | OUT | |
| 2024-09-28 07:50:52 UTC | 218 | OUT | |
| 2024-09-28 07:50:52 UTC | 14 | IN | |
| 2024-09-28 07:50:52 UTC | 58 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 14 | 192.168.2.5 | 49767 | 40.113.110.67 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:51:20 UTC | 71 | OUT | |
| 2024-09-28 07:51:20 UTC | 249 | OUT | |
| 2024-09-28 07:51:20 UTC | 1084 | OUT | |
| 2024-09-28 07:51:20 UTC | 218 | OUT | |
| 2024-09-28 07:51:20 UTC | 14 | IN | |
| 2024-09-28 07:51:20 UTC | 58 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 15 | 192.168.2.5 | 49769 | 40.113.110.67 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:51:57 UTC | 71 | OUT | |
| 2024-09-28 07:51:57 UTC | 249 | OUT | |
| 2024-09-28 07:51:57 UTC | 1084 | OUT | |
| 2024-09-28 07:51:57 UTC | 218 | OUT | |
| 2024-09-28 07:51:58 UTC | 14 | IN | |
| 2024-09-28 07:51:58 UTC | 58 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port |
|---|---|---|---|---|
| 16 | 192.168.2.5 | 49770 | 40.113.110.67 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-09-28 07:53:01 UTC | 71 | OUT | |
| 2024-09-28 07:53:01 UTC | 249 | OUT | |
| 2024-09-28 07:53:01 UTC | 1084 | OUT | |
| 2024-09-28 07:53:01 UTC | 218 | OUT | |
| 2024-09-28 07:53:01 UTC | 14 | IN | |
| 2024-09-28 07:53:01 UTC | 58 | IN |
Click to jump to process
Click to jump to process
back
Click to dive into process behavior distribution
Click to jump to process
| Target ID: | 0 |
| Start time: | 03:49:11 |
| Start date: | 28/09/2024 |
| Path: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0xf70000 |
| File size: | 34'446'744 bytes |
| MD5 hash: | 91A5292942864110ED734005B7E005C0 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 3 |
| Start time: | 03:49:21 |
| Start date: | 28/09/2024 |
| Path: | C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff63ba80000 |
| File size: | 710'048 bytes |
| MD5 hash: | EC652BEDD90E089D9406AFED89A8A8BD |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 6 |
| Start time: | 03:50:08 |
| Start date: | 28/09/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff715980000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 7 |
| Start time: | 03:50:08 |
| Start date: | 28/09/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff715980000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
⊘No disassembly