Edit tour
Windows
Analysis Report
file.exe
Overview
General Information
| Sample name: | file.exe |
| Analysis ID: | 1523650 |
| MD5: | ab7bea5cb100ab7acdcf97ae6d034994 |
| SHA1: | 2336e609864055ba6a09607b3d4b30d1e113068d |
| SHA256: | 40d7cbbce05cfa2dac5abbea6911fbc1843ace1ec5fb9508ddacc0368e76e3d0 |
| Tags: | exeuser-Bitsight |
| Infos: |  |
 | |
Detection
Credential Flusher
| Score: | 64 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Yara detected Credential Flusher
AI detected suspicious sample
Binary is likely a compiled AutoIt script file
Found API chain indicative of sandbox detection
Machine Learning detection for sample
Contains functionality for read data from the clipboard
Contains functionality to block mouse and keyboard input (often used to hinder debugging)
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to check if a window is minimized (may be used to check if an application is visible)
Contains functionality to communicate with device drivers
Contains functionality to dynamically determine API calls
Contains functionality to execute programs as a different user
Contains functionality to launch a process as a different user
Contains functionality to launch a program with higher privileges
Contains functionality to modify clipboard data
Contains functionality to open a port and listen for incoming connection (possibly a backdoor)
Contains functionality to query CPU information (cpuid)
Contains functionality to read the PEB
Contains functionality to read the clipboard data
Contains functionality to retrieve information about pressed keystrokes
Contains functionality to shutdown / reboot the system
Contains functionality to simulate keystroke presses
Contains functionality to simulate mouse events
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Detected potential crypto function
Found large amount of non-executed APIs
Found potential string decryption / allocating functions
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
OS version to string mapping found (often used in BOTs)
Potential key logger detected (key state polling based)
Uses 32bit PE files
Uses code obfuscation techniques (call, push, ret)
Classification
- System is w10x64
file.exe (PID: 7352 cmdline: "C:\Users\ user\Deskt op\file.ex e" MD5: AB7BEA5CB100AB7ACDCF97AE6D034994) 
chrome.exe (PID: 7368 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ap p="https:/ /youtube.c om/account ?=https:// accounts.g oogle.com/ v3/signin/ challenge/ pwd" --sta rt-fullscr een --no-f irst-run - -disable-s ession-cra shed-bubbl e --disabl e-features =CrashReco very MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 7572 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2168 --fi eld-trial- handle=194 4,i,833291 6453357013 908,156879 7965328063 3989,26214 4 --disabl e-features =CrashReco very /pref etch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 2668 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= audio.mojo m.AudioSer vice --lan g=en-US -- service-sa ndbox-type =audio --m ojo-platfo rm-channel -handle=52 68 --field -trial-han dle=1944,i ,833291645 3357013908 ,156879796 5328063398 9,262144 - -disable-f eatures=Cr ashRecover y /prefetc h:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 8140 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= video_capt ure.mojom. VideoCaptu reService --lang=en- US --servi ce-sandbox -type=none --mojo-pl atform-cha nnel-handl e=5412 --f ield-trial -handle=19 44,i,83329 1645335701 3908,15687 9796532806 33989,2621 44 --disab le-feature s=CrashRec overy /pre fetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
⊘No configs have been found
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_CredentialFlusher | Yara detected Credential Flusher | Joe Security |
⊘No Sigma rule has matched
⊘No Suricata rule has matched
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | Integrated Neural Analysis Model: | ||
| Source: | Joe Sandbox ML: | ||
| Source: | Static PE information: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Code function: | 0_2_007FDBBE | |
| Source: | Code function: | 0_2_008068EE | |
| Source: | Code function: | 0_2_0080698F | |
| Source: | Code function: | 0_2_007FD076 | |
| Source: | Code function: | 0_2_007FD3A9 | |
| Source: | Code function: | 0_2_00809642 | |
| Source: | Code function: | 0_2_0080979D | |
| Source: | Code function: | 0_2_00809B2B | |
| Source: | Code function: | 0_2_00805C97 | |
| Source: | IP Address: | ||
| Source: | JA3 fingerprint: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | Code function: | 0_2_0080CE44 | |
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Code function: | 0_2_0080EAFF | |
| Source: | Code function: | 0_2_0080ED6A | |
| Source: | Code function: | 0_2_0080EAFF | |
| Source: | Code function: | 0_2_007FAA57 | |
| Source: | Code function: | 0_2_00829576 | |
System Summary | |
|---|
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | memstr_865d4d14-b | |
| Source: | String found in binary or memory: | memstr_15c97690-b | |
| Source: | String found in binary or memory: | memstr_42455d7f-6 | |
| Source: | String found in binary or memory: | memstr_d8f46e0d-1 | |
| Source: | Code function: | 0_2_007FD5EB | |
| Source: | Code function: | 0_2_007F1201 | |
| Source: | Code function: | 0_2_007FE8F6 | |
| Source: | Code function: | 0_2_00798060 | |
| Source: | Code function: | 0_2_00802046 | |
| Source: | Code function: | 0_2_007F8298 | |
| Source: | Code function: | 0_2_007CE4FF | |
| Source: | Code function: | 0_2_007C676B | |
| Source: | Code function: | 0_2_00824873 | |
| Source: | Code function: | 0_2_0079CAF0 | |
| Source: | Code function: | 0_2_007BCAA0 | |
| Source: | Code function: | 0_2_007ACC39 | |
| Source: | Code function: | 0_2_007C6DD9 | |
| Source: | Code function: | 0_2_007AB119 | |
| Source: | Code function: | 0_2_007991C0 | |
| Source: | Code function: | 0_2_007B1394 | |
| Source: | Code function: | 0_2_007B1706 | |
| Source: | Code function: | 0_2_007B781B | |
| Source: | Code function: | 0_2_007A997D | |
| Source: | Code function: | 0_2_00797920 | |
| Source: | Code function: | 0_2_007B19B0 | |
| Source: | Code function: | 0_2_007B7A4A | |
| Source: | Code function: | 0_2_007B1C77 | |
| Source: | Code function: | 0_2_007B7CA7 | |
| Source: | Code function: | 0_2_007C9EEE | |
| Source: | Code function: | 0_2_0081BE44 | |
| Source: | Code function: | 0_2_007B1F32 | |
| Source: | Code function: | ||
| Source: | Code function: | ||
| Source: | Static PE information: | ||
| Source: | Classification label: | ||
| Source: | Code function: | 0_2_008037B5 | |
| Source: | Code function: | 0_2_007F10BF | |
| Source: | Code function: | 0_2_007F16C3 | |
| Source: | Code function: | 0_2_008051CD | |
| Source: | Code function: | 0_2_007FD4DC | |
| Source: | Code function: | 0_2_0080648E | |
| Source: | Code function: | 0_2_007942A2 | |
| Source: | Static PE information: | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Window detected: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Code function: | 0_2_007942DE | |
| Source: | Code function: | 0_2_007B0A89 | |
| Source: | Code function: | 0_2_007AF98E | |
| Source: | Code function: | 0_2_00821C41 | |
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
Malware Analysis System Evasion | |
|---|
| Source: | Sandbox detection routine: | graph_0-95574 | ||
| Source: | API coverage: | ||
| Source: | Code function: | 0_2_007FDBBE | |
| Source: | Code function: | 0_2_008068EE | |
| Source: | Code function: | 0_2_0080698F | |
| Source: | Code function: | 0_2_007FD076 | |
| Source: | Code function: | 0_2_007FD3A9 | |
| Source: | Code function: | 0_2_00809642 | |
| Source: | Code function: | 0_2_0080979D | |
| Source: | Code function: | 0_2_00809B2B | |
| Source: | Code function: | 0_2_00805C97 | |
| Source: | Code function: | 0_2_007942DE | |
| Source: | Process information queried: | Jump to behavior | ||
| Source: | Code function: | 0_2_0080EAA2 | |
| Source: | Code function: | 0_2_007C2622 | |
| Source: | Code function: | 0_2_007942DE | |
| Source: | Code function: | 0_2_007B4CE8 | |
| Source: | Code function: | 0_2_007F0B62 | |
| Source: | Code function: | 0_2_007C2622 | |
| Source: | Code function: | 0_2_007B083F | |
| Source: | Code function: | 0_2_007B09D5 | |
| Source: | Code function: | 0_2_007B0C21 | |
| Source: | Code function: | 0_2_007F1201 | |
| Source: | Code function: | 0_2_007D2BA5 | |
| Source: | Code function: | 0_2_007FB226 | |
| Source: | Code function: | 0_2_008122DA | |
| Source: | Code function: | 0_2_007F0B62 | |
| Source: | Code function: | 0_2_007F1663 | |
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Code function: | 0_2_007B0698 | |
| Source: | Code function: | 0_2_00808195 | |
| Source: | Code function: | 0_2_007ED27A | |
| Source: | Code function: | 0_2_007CBB6F | |
| Source: | Code function: | 0_2_007942DE | |
Stealing of Sensitive Information | |
|---|
| Source: | File source: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
Remote Access Functionality | |
|---|
| Source: | File source: | ||
| Source: | Code function: | 0_2_00811204 | |
| Source: | Code function: | 0_2_00811806 | |
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | 2 Valid Accounts | 1 Native API | 1 DLL Side-Loading | 1 Exploitation for Privilege Escalation | 1 Disable or Modify Tools | 21 Input Capture | 2 System Time Discovery | Remote Services | 1 Archive Collected Data | 2 Ingress Tool Transfer | Exfiltration Over Other Network Medium | 1 System Shutdown/Reboot |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | 2 Valid Accounts | 1 DLL Side-Loading | 1 Deobfuscate/Decode Files or Information | LSASS Memory | 1 Account Discovery | Remote Desktop Protocol | 21 Input Capture | 11 Encrypted Channel | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 2 Valid Accounts | 2 Obfuscated Files or Information | Security Account Manager | 1 File and Directory Discovery | SMB/Windows Admin Shares | 3 Clipboard Data | 3 Non-Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | 21 Access Token Manipulation | 1 DLL Side-Loading | NTDS | 15 System Information Discovery | Distributed Component Object Model | Input Capture | 4 Application Layer Protocol | Traffic Duplication | Data Destruction |
| Gather Victim Network Information | Server | Cloud Accounts | Launchd | Network Logon Script | 2 Process Injection | 2 Valid Accounts | LSA Secrets | 12 Security Software Discovery | SSH | Keylogging | Fallback Channels | Scheduled Transfer | Data Encrypted for Impact |
| Domain Properties | Botnet | Replication Through Removable Media | Scheduled Task | RC Scripts | RC Scripts | 1 Virtualization/Sandbox Evasion | Cached Domain Credentials | 1 Virtualization/Sandbox Evasion | VNC | GUI Input Capture | Multiband Communication | Data Transfer Size Limits | Service Stop |
| DNS | Web Services | External Remote Services | Systemd Timers | Startup Items | Startup Items | 21 Access Token Manipulation | DCSync | 3 Process Discovery | Windows Remote Management | Web Portal Capture | Commonly Used Port | Exfiltration Over C2 Channel | Inhibit System Recovery |
| Network Trust Dependencies | Serverless | Drive-by Compromise | Container Orchestration Job | Scheduled Task/Job | Scheduled Task/Job | 2 Process Injection | Proc Filesystem | 1 Application Window Discovery | Cloud Services | Credential API Hooking | Application Layer Protocol | Exfiltration Over Alternative Protocol | Defacement |
| Network Topology | Malvertising | Exploit Public-Facing Application | Command and Scripting Interpreter | At | At | HTML Smuggling | /etc/passwd and /etc/shadow | 1 System Owner/User Discovery | Direct Cloud VM Connections | Data Staged | Web Protocols | Exfiltration Over Symmetric Encrypted Non-C2 Protocol | Internal Defacement |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | Joe Sandbox ML |
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| youtube-ui.l.google.com | 142.250.186.174 | true | false | unknown | |
| www3.l.google.com | 142.250.184.238 | true | false | unknown | |
| play.google.com | 172.217.16.142 | true | false | unknown | |
| www.google.com | 142.250.184.196 | true | false | unknown | |
| youtube.com | 142.250.186.78 | true | false | unknown | |
| accounts.youtube.com | unknown | unknown | false | unknown | |
| www.youtube.com | unknown | unknown | false | unknown |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false | unknown | ||
| false | unknown | ||
| false | unknown |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false |
| unknown | ||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | unknown | |||
| false | unknown | |||
| false | unknown | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 142.250.184.196 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 216.58.212.142 | unknown | United States | 15169 | GOOGLEUS | false | |
| 142.250.186.174 | youtube-ui.l.google.com | United States | 15169 | GOOGLEUS | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 142.250.184.238 | www3.l.google.com | United States | 15169 | GOOGLEUS | false | |
| 172.217.16.142 | play.google.com | United States | 15169 | GOOGLEUS | false |
| IP |
|---|
| 192.168.2.4 |
| 192.168.2.5 |
| Joe Sandbox version: | 41.0.0 Charoite |
| Analysis ID: | 1523650 |
| Start date and time: | 2024-10-01 22:14:06 +02:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 4m 37s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | default.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 11 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | file.exe |
| Detection: | MAL |
| Classification: | mal64.troj.evad.winEXE@31/30@12/8 |
| EGA Information: |
|
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 172.217.16.195, 74.125.71.84, 142.250.186.78, 34.104.35.123, 142.250.185.227, 142.250.181.227, 142.250.181.234, 172.217.18.10, 142.250.186.106, 142.250.74.202, 216.58.212.170, 172.217.16.202, 172.217.18.106, 142.250.186.170, 142.250.184.234, 172.217.16.138, 216.58.206.74, 142.250.184.202, 216.58.206.42, 142.250.186.138, 142.250.186.74, 142.250.186.42, 142.250.185.170, 142.250.185.106, 142.250.185.74, 142.250.185.234, 142.250.185.138, 142.250.185.202, 2.19.126.137, 192.229.221.95, 2.19.126.163, 142.250.186.163, 142.250.186.142
- Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, optimizationguide-pa.googleapis.com
- Not all processes where analyzed, report is missing behavior information
- Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- VT rate limit hit for: file.exe
⊘No simulations
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 239.255.255.250 | Get hash | malicious | HTMLPhisher | Browse | ||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Tycoon2FA | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Credential Flusher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|
⊘No context
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 28a2c9bd18a11de089ef85a160da29e4 | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Tycoon2FA | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Credential Flusher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | LummaC, Go Injector, LummaC Stealer | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Credential Flusher | Browse |
| ||
| Get hash | malicious | LummaC | Browse |
|
⊘No context
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 4067 |
| Entropy (8bit): | 5.363457972758152 |
| Encrypted: | false |
| SSDEEP: | 96:G2CiFZX5BReR68ujioIRVrqtyzBeTV6SfyAKLif9cLw:bCMZXVeR6jiosVrqtyzBaImyAKw9z |
| MD5: | B027BF10F968F37628EB698B2CF46D8E |
| SHA1: | 0C9801E4FF3BE18102E6E22246B4262FCC6CE011 |
| SHA-256: | 98608C8414932B6F029948A323B1236EFB96861306FD1EDEB6CE47E180392B47 |
| SHA-512: | 3B1E5A3B247273F025EACF389F98BC139F8453ECEC7A2EC762A4E3279F220B7BED2CB23CD5630E92ED03187C514956DF814E9450FFAA10BFE312633B445DBEF1 |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHHHUTOu8QCHKV2CSS4q8_ZgreBVQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 9210 |
| Entropy (8bit): | 5.404371326611379 |
| Encrypted: | false |
| SSDEEP: | 192:EEFZpeip4HzZlY0If0Ma23jcUcrhCx6VD1TYPi8:Es/p4jgjUhtD1TY68 |
| MD5: | 21E893B65627B397E22619A9F5BB9662 |
| SHA1: | F561B0F66211C1E7B22F94B4935C312AB7087E85 |
| SHA-256: | FFA9B8BC8EF2CDFF5EB4BA1A0BA1710A253A5B42535E2A369D5026967DCF4673 |
| SHA-512: | 3DE3CD6A4E9B06AB3EB324E90A40B5F2AEEA8D7D6A2651C310E993CF79EEB5AC6E2E33C587F46B2DD20CC862354FD1A61AEBB9B990E6805F6629404BA285F8FA |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=AvtSve,CMcBD,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,qPfo0c,qmdT9,rCcCxc,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHHHUTOu8QCHKV2CSS4q8_ZgreBVQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1608 |
| Entropy (8bit): | 5.257113147606035 |
| Encrypted: | false |
| SSDEEP: | 48:o72ZrNZ4yNAbU+15fMxIdf5WENoBCbw7DbG2bEJrw:oyNNAY+1i4HoBNG2Ilw |
| MD5: | F06E2DC5CC446B39F878B5F8E4D78418 |
| SHA1: | 9F1F34FDD8F8DAB942A9B95D9F720587B6F6AD48 |
| SHA-256: | 118E4D2FE7CEF205F9AFC87636554C6D8220882B158333EE3D1990282D158B8F |
| SHA-512: | 893C4F883CD1C88C6AAF5A6E7F232D62823A53E1FFDE5C1C52BB066D75781DD041F4D281CDBF18070D921CE862652D8863E2B9D5E0190CFA4128890D62C44168 |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHHHUTOu8QCHKV2CSS4q8_ZgreBVQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5430 |
| Entropy (8bit): | 3.6534652184263736 |
| Encrypted: | false |
| SSDEEP: | 48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B |
| MD5: | F3418A443E7D841097C714D69EC4BCB8 |
| SHA1: | 49263695F6B0CDD72F45CF1B775E660FDC36C606 |
| SHA-256: | 6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770 |
| SHA-512: | 82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563 |
| Malicious: | false |
| Reputation: | high, very likely benign file |
| URL: | https://www.google.com/favicon.ico |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 22833 |
| Entropy (8bit): | 5.425034548615223 |
| Encrypted: | false |
| SSDEEP: | 384:7lFo6ZEdpgtmyiPixV9OX9gMBpHkHnfst9lZulagGcwYHiRFjJzN7:77o6ZviPixV8xpEHn89l4IgGcwYCRtb7 |
| MD5: | 749B18538FE32BFE0815D75F899F5B21 |
| SHA1: | AF95A019211AF69F752A43CAA54A83C2AFD41D28 |
| SHA-256: | 116B2687C1D5E00DB56A79894AB0C12D4E2E000B9379B7E7AD751B84DF611F3F |
| SHA-512: | E4B6F4556AA0FD9979BB52681508F5E26FFB256473803F74F7F5C8D93FA3636D7D0A5835618FBC6123022805CE0D9616A7451A0F302C665E28A6090B5D588505 |
| Malicious: | false |
| Reputation: | low |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHHHUTOu8QCHKV2CSS4q8_ZgreBVQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3131 |
| Entropy (8bit): | 5.355381206612617 |
| Encrypted: | false |
| SSDEEP: | 48:o7FEEM3MtH15jNQ8jsK3rnw0dkckTrKEp/OqLE9xz0W5Bzv3M6hIHYA+JITbwrF8:oq675jOArwoAmI/DLaxNPL5m+m6w |
| MD5: | E2A7251AD83A0D0634FEA2703D10ED07 |
| SHA1: | 90D72011F31FC40D3DA3748F2817F90A29EB5C01 |
| SHA-256: | 1079B49C4AAF5C10E4F2E6A086623F40D200A71FF2A1F64E88AA6C91E4BE7A6F |
| SHA-512: | CD6D75580EA8BD97CF7C7C0E0BD9D9A54FB6EA7DF1DDB5A95E94D38B260F9EE1425C640839ECD229B8D01E145CF2786CA374D31EC537EB8FE17FF415D5B985F5 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHHHUTOu8QCHKV2CSS4q8_ZgreBVQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1858 |
| Entropy (8bit): | 5.298162049824456 |
| Encrypted: | false |
| SSDEEP: | 48:o7vGoolL3ALFKphnpiu7xOKAcfO/3d/rYh4vZorw:o/QLUFUL4KA+2y0Mw |
| MD5: | CE055F881BDAB4EF6C1C8AA4B3890348 |
| SHA1: | 2671741A70E9F5B608F690AAEEA4972003747654 |
| SHA-256: | 9B91C23691D6032CDFE28863E369624B2EDB033E1487A1D1BB0977E3590E5462 |
| SHA-512: | 8A22250628985C2E570E6FBADFC0D5CB6753F0735130F9E74962A409476C2859C5C81F8A0F5C427A9F13ED399C8E251FA43FF67AD5F16860640D45E7A538E857 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHHHUTOu8QCHKV2CSS4q8_ZgreBVQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 698791 |
| Entropy (8bit): | 5.595243292922648 |
| Encrypted: | false |
| SSDEEP: | 6144:TJvaKtQfcxene0F2HhPM8RGYcBlKmd5r6XIQqS7SlncOpYMSrBg5X3O4mAEFD7:TJyKtkIct842IQqHJ09 |
| MD5: | 7A4AEFC2F596D19F522738DB34C5A680 |
| SHA1: | 7F6E9BE8B3C1450075365A31FF6E4B49F1D35BA7 |
| SHA-256: | 61D7FF7565945545C0D823CCFC5DB5D09C8714FBF8AD77994F389F08289124B2 |
| SHA-512: | 7D80188B002DB3ED7360B9B236DE435F2008345ECEC00FDE39412BE39DE5C08FD80CBD2D7370D0DBB98F4BCCA0CEF147AD9E7935AC2894DB55D81C1B32EB647E |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHHHUTOu8QCHKV2CSS4q8_ZgreBVQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,XVq9Qb,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,iyZMqd,NTMZac,mzzZzc,rCcCxc,vvMGie,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,qPfo0c,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,gJzDyc,SpsfSb,aC1iue,tUnxGc,aW3pY,ZakeSe,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,MY7mZe,xBaz7b,GwYlN,eVCnO,EIOG1e,LDQI" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1460 |
| Entropy (8bit): | 5.291808298251231 |
| Encrypted: | false |
| SSDEEP: | 24:kMYD7DuZvuhqCsNRxoYTY9/qoVk7hz1l2p6vDMW94uEQOeGbCx4VGbgCSFBV87OU:o7DuZWhv6oy12kvwKEeGbC6GbHSh/Hrw |
| MD5: | 4CA7ADFE744A690411EA4D3EA8DB9E4B |
| SHA1: | 2CF1777A199E25378D330DA68BED1871B5C5BC32 |
| SHA-256: | 128129BA736B3094323499B0498A5B3A909C1529717461C34B70080A5B1603BD |
| SHA-512: | 8BD3477AF41D1F0FE74AFFCB177BEC0F5F4FDCBBA6BD29D9C2567E6FFDEF5DEB7FF74BF348F33209C39D7BB4958E748DF6731D3DC8F6947352276BC92EAF9E79 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHHHUTOu8QCHKV2CSS4q8_ZgreBVQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 32500 |
| Entropy (8bit): | 5.378903546681047 |
| Encrypted: | false |
| SSDEEP: | 768:zYlbuROstb0e39nKGrkysU0smpu4OLOdzIf1p/5GeSsngurz6aKEEEGo/:zYl61Cysbu4OLOdzIfrIen72ZFo/ |
| MD5: | BF4BF9728A7C302FBA5B14F3D0F1878B |
| SHA1: | 2607CA7A93710D629400077FF3602CB207E6F53D |
| SHA-256: | 8981E7B228DF7D6A8797C0CD1E9B0F1F88337D5F0E1C27A04E7A57D2C4309798 |
| SHA-512: | AC9E170FC3AFDC0CF6BB8E926B93EF129A5FAD1BBA51B60BABCF3555E9B652E98F86A00FB099879DED35DD3FFE72ECFA597E20E6CA8CF402BEDEC40F78412EDA |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHHHUTOu8QCHKV2CSS4q8_ZgreBVQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 52280 |
| Entropy (8bit): | 7.995413196679271 |
| Encrypted: | true |
| SSDEEP: | 1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d |
| MD5: | F61F0D4D0F968D5BBA39A84C76277E1A |
| SHA1: | AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2 |
| SHA-256: | 57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC |
| SHA-512: | 6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487 |
| Malicious: | false |
| URL: | https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3467 |
| Entropy (8bit): | 5.514745431912774 |
| Encrypted: | false |
| SSDEEP: | 96:ozbld2fNUmeqJNizhNtt1W8t//loyIpXmdVE2w:onSKE8PWe/Cy4X3j |
| MD5: | 8DEF399E8355ABC23E64505281005099 |
| SHA1: | 24FF74C3AEFD7696D84FF148465DF4B1B60B1696 |
| SHA-256: | F128D7218E1286B05DF11310AD3C8F4CF781402698E45448850D2A3A22F5F185 |
| SHA-512: | 33721DD47658D8E12ADF6BD9E9316EB89F5B6297927F7FD60F954E04B829DCBF0E1AE6DDD9A3401F45E0011AE4B1397B960C218238A3D0F633A2173D8E604082 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHHHUTOu8QCHKV2CSS4q8_ZgreBVQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 84 |
| Entropy (8bit): | 4.875266466142591 |
| Encrypted: | false |
| SSDEEP: | 3:DZFJu0+WVTBCq2Bjdw2KsJJuYHSKnZ:lFJuuVTBudw29nu4SKZ |
| MD5: | 87B6333E98B7620EA1FF98D1A837A39E |
| SHA1: | 105DE6815B0885357DE1414BFC0D77FCC9E924EF |
| SHA-256: | DCD3C133C5C40BECD4100BBE6EDAE84C9735E778E4234A5E8395C56FF8A733BA |
| SHA-512: | 867D7943D813685FAA76394E53199750C55817E836FD19C933F74D11E9657CE66719A6D6B2E39EE1DE62358BCE364E38A55F4E138DF92337DE6985DDCD5D0994 |
| Malicious: | false |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 744362 |
| Entropy (8bit): | 5.791334302173818 |
| Encrypted: | false |
| SSDEEP: | 6144:YVXWBQkPdzg5pTX1ROv/duPzd8C3s891/Q:Nfd8j91/Q |
| MD5: | 5998B16F22823CDA571E9767D2F000F5 |
| SHA1: | 8F191C974AF3FDEF368C7A2706A1C81C7F379ADB |
| SHA-256: | 7FFEA98E198646D080873710AD217394C63EF97E6B8F5DD0EBF5E3BB8B7AED8E |
| SHA-512: | 951A410744AFBD905141EB68846DCC707F36B6A3A7C3734633B98064441E417A14F52B1F3FB347114ED15E7899D3554EA9745EACF7076955119AA0EF9ADD206E |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlGukuT5y8NnMp7TQhoXvWQoBnYT8w/m=_b,_tp" |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 5050 |
| Entropy (8bit): | 5.289052544075544 |
| Encrypted: | false |
| SSDEEP: | 96:o4We0hP7OBFXYvB1sig3Fd8HkaXzLmUrv8Vh1WJlLQXT2v2gqw:655758Fd8HkaPZ0GmAD |
| MD5: | 26E26FD11772DFF5C7004BEA334289CC |
| SHA1: | 638DAAF541BDE31E95AEE4F8ADA677434D7051DB |
| SHA-256: | ADFE3E4960982F5EF4C043052A9990D8683C5FC2B590E817B6B1A5774DDE2CE3 |
| SHA-512: | C31929EB6D1C60D6A84A2574FF60490394A6D6F9B354972F3328952F570D80B3F2AEC916B0E1B66DDB1AC056EB75BFAC477E7AF631D0AD1810EDBAF025465D66 |
| Malicious: | false |
| URL: | "https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.RgRbaBHDctU.es5.O/ck=boq-identity.AccountsSignInUi.gAiX_O5afVA.L.B1.O/am=xIFgKBimEQjEH54DekBRIOQAAAAAAAAAAKANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHHHUTOu8QCHKV2CSS4q8_ZgreBVQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b" |
| Preview: |
| File type: | |
| Entropy (8bit): | 6.581000778304807 |
| TrID: |
|
| File name: | file.exe |
| File size: | 918'016 bytes |
| MD5: | ab7bea5cb100ab7acdcf97ae6d034994 |
| SHA1: | 2336e609864055ba6a09607b3d4b30d1e113068d |
| SHA256: | 40d7cbbce05cfa2dac5abbea6911fbc1843ace1ec5fb9508ddacc0368e76e3d0 |
| SHA512: | 8d2c0c4881d08b8f3837522acc817322faf43e8515e208e5235fd5977c730b3d327a67a05cedacd367214b4fb35915ab345e9b0c76953de53e20d3d7d5748663 |
| SSDEEP: | 12288:QqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgawTI:QqDEvCTbMWu7rQYlBQcBiT6rprG8aII |
| TLSH: | CB159E0273D1C062FF9B92334B5AF6515BBC69260123E61F13981DB9BE701B1563E7A3 |
| File Content Preview: | MZ......................@................................... ...........!..L.!This program cannot be run in DOS mode....$.......................j:......j:..C...j:......@.*...............................n.......~.............{.......{.......{.........z.... |
 | |
| Icon Hash: | aaf3e3e3938382a0 |
| Entrypoint: | 0x420577 |
| Entrypoint Section: | .text |
| Digitally signed: | false |
| Imagebase: | 0x400000 |
| Subsystem: | windows gui |
| Image File Characteristics: | EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE, 32BIT_MACHINE |
| DLL Characteristics: | DYNAMIC_BASE, TERMINAL_SERVER_AWARE |
| Time Stamp: | 0x66FC55B8 [Tue Oct 1 20:04:08 2024 UTC] |
| TLS Callbacks: | |
| CLR (.Net) Version: | |
| OS Version Major: | 5 |
| OS Version Minor: | 1 |
| File Version Major: | 5 |
| File Version Minor: | 1 |
| Subsystem Version Major: | 5 |
| Subsystem Version Minor: | 1 |
| Import Hash: | 948cc502fe9226992dce9417f952fce3 |
| Instruction |
|---|
| call 00007F26E8D1B7B3h |
| jmp 00007F26E8D1B0BFh |
| push ebp |
| mov ebp, esp |
| push esi |
| push dword ptr [ebp+08h] |
| mov esi, ecx |
| call 00007F26E8D1B29Dh |
| mov dword ptr [esi], 0049FDF0h |
| mov eax, esi |
| pop esi |
| pop ebp |
| retn 0004h |
| and dword ptr [ecx+04h], 00000000h |
| mov eax, ecx |
| and dword ptr [ecx+08h], 00000000h |
| mov dword ptr [ecx+04h], 0049FDF8h |
| mov dword ptr [ecx], 0049FDF0h |
| ret |
| push ebp |
| mov ebp, esp |
| push esi |
| push dword ptr [ebp+08h] |
| mov esi, ecx |
| call 00007F26E8D1B26Ah |
| mov dword ptr [esi], 0049FE0Ch |
| mov eax, esi |
| pop esi |
| pop ebp |
| retn 0004h |
| and dword ptr [ecx+04h], 00000000h |
| mov eax, ecx |
| and dword ptr [ecx+08h], 00000000h |
| mov dword ptr [ecx+04h], 0049FE14h |
| mov dword ptr [ecx], 0049FE0Ch |
| ret |
| push ebp |
| mov ebp, esp |
| push esi |
| mov esi, ecx |
| lea eax, dword ptr [esi+04h] |
| mov dword ptr [esi], 0049FDD0h |
| and dword ptr [eax], 00000000h |
| and dword ptr [eax+04h], 00000000h |
| push eax |
| mov eax, dword ptr [ebp+08h] |
| add eax, 04h |
| push eax |
| call 00007F26E8D1DE5Dh |
| pop ecx |
| pop ecx |
| mov eax, esi |
| pop esi |
| pop ebp |
| retn 0004h |
| lea eax, dword ptr [ecx+04h] |
| mov dword ptr [ecx], 0049FDD0h |
| push eax |
| call 00007F26E8D1DEA8h |
| pop ecx |
| ret |
| push ebp |
| mov ebp, esp |
| push esi |
| mov esi, ecx |
| lea eax, dword ptr [esi+04h] |
| mov dword ptr [esi], 0049FDD0h |
| push eax |
| call 00007F26E8D1DE91h |
| test byte ptr [ebp+08h], 00000001h |
| pop ecx |
| Programming Language: |
|
| Name | Virtual Address | Virtual Size | Is in Section |
|---|---|---|---|
| IMAGE_DIRECTORY_ENTRY_EXPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IMPORT | 0xc8e64 | 0x17c | .rdata |
| IMAGE_DIRECTORY_ENTRY_RESOURCE | 0xd4000 | 0x9734 | .rsrc |
| IMAGE_DIRECTORY_ENTRY_EXCEPTION | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_SECURITY | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BASERELOC | 0xde000 | 0x7594 | .reloc |
| IMAGE_DIRECTORY_ENTRY_DEBUG | 0xb0ff0 | 0x1c | .rdata |
| IMAGE_DIRECTORY_ENTRY_COPYRIGHT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_GLOBALPTR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_TLS | 0xc3400 | 0x18 | .rdata |
| IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG | 0xb1010 | 0x40 | .rdata |
| IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IAT | 0x9c000 | 0x894 | .rdata |
| IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_RESERVED | 0x0 | 0x0 |
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Xored PE | ZLIB Complexity | File Type | Entropy | Characteristics |
|---|---|---|---|---|---|---|---|---|---|
| .text | 0x1000 | 0x9ab1d | 0x9ac00 | 0a1473f3064dcbc32ef93c5c8a90f3a6 | False | 0.565500681542811 | data | 6.668273581389308 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ |
| .rdata | 0x9c000 | 0x2fb82 | 0x2fc00 | c9cf2468b60bf4f80f136ed54b3989fb | False | 0.35289185209424084 | data | 5.691811547483722 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| .data | 0xcc000 | 0x706c | 0x4800 | 53b9025d545d65e23295e30afdbd16d9 | False | 0.04356553819444445 | DOS executable (block device driver @\273\) | 0.5846666986982398 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .rsrc | 0xd4000 | 0x9734 | 0x9800 | 296b3ac9062ec48bb37a67e115c9deb2 | False | 0.29345703125 | data | 5.222798618085453 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ |
| .reloc | 0xde000 | 0x7594 | 0x7600 | c68ee8931a32d45eb82dc450ee40efc3 | False | 0.7628111758474576 | data | 6.7972128181359786 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ |
| Name | RVA | Size | Type | Language | Country | ZLIB Complexity |
|---|---|---|---|---|---|---|
| RT_ICON | 0xd45a8 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 192 | English | Great Britain | 0.7466216216216216 |
| RT_ICON | 0xd46d0 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 128, 16 important colors | English | Great Britain | 0.3277027027027027 |
| RT_ICON | 0xd47f8 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 192 | English | Great Britain | 0.3885135135135135 |
| RT_ICON | 0xd4920 | 0x2e8 | Device independent bitmap graphic, 32 x 64 x 4, image size 0 | English | Great Britain | 0.3333333333333333 |
| RT_ICON | 0xd4c08 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 0 | English | Great Britain | 0.5 |
| RT_ICON | 0xd4d30 | 0xea8 | Device independent bitmap graphic, 48 x 96 x 8, image size 0 | English | Great Britain | 0.2835820895522388 |
| RT_ICON | 0xd5bd8 | 0x8a8 | Device independent bitmap graphic, 32 x 64 x 8, image size 0 | English | Great Britain | 0.37906137184115524 |
| RT_ICON | 0xd6480 | 0x568 | Device independent bitmap graphic, 16 x 32 x 8, image size 0 | English | Great Britain | 0.23699421965317918 |
| RT_ICON | 0xd69e8 | 0x25a8 | Device independent bitmap graphic, 48 x 96 x 32, image size 0 | English | Great Britain | 0.13858921161825727 |
| RT_ICON | 0xd8f90 | 0x10a8 | Device independent bitmap graphic, 32 x 64 x 32, image size 0 | English | Great Britain | 0.25070356472795496 |
| RT_ICON | 0xda038 | 0x468 | Device independent bitmap graphic, 16 x 32 x 32, image size 0 | English | Great Britain | 0.3173758865248227 |
| RT_MENU | 0xda4a0 | 0x50 | data | English | Great Britain | 0.9 |
| RT_STRING | 0xda4f0 | 0x594 | data | English | Great Britain | 0.3333333333333333 |
| RT_STRING | 0xdaa84 | 0x68a | data | English | Great Britain | 0.2735961768219833 |
| RT_STRING | 0xdb110 | 0x490 | data | English | Great Britain | 0.3715753424657534 |
| RT_STRING | 0xdb5a0 | 0x5fc | data | English | Great Britain | 0.3087467362924282 |
| RT_STRING | 0xdbb9c | 0x65c | data | English | Great Britain | 0.34336609336609336 |
| RT_STRING | 0xdc1f8 | 0x466 | data | English | Great Britain | 0.3605683836589698 |
| RT_STRING | 0xdc660 | 0x158 | Matlab v4 mat-file (little endian) n, numeric, rows 0, columns 0 | English | Great Britain | 0.502906976744186 |
| RT_RCDATA | 0xdc7b8 | 0x9fa | data | 1.0043069694596711 | ||
| RT_GROUP_ICON | 0xdd1b4 | 0x76 | data | English | Great Britain | 0.6610169491525424 |
| RT_GROUP_ICON | 0xdd22c | 0x14 | data | English | Great Britain | 1.25 |
| RT_GROUP_ICON | 0xdd240 | 0x14 | data | English | Great Britain | 1.15 |
| RT_GROUP_ICON | 0xdd254 | 0x14 | data | English | Great Britain | 1.25 |
| RT_VERSION | 0xdd268 | 0xdc | data | English | Great Britain | 0.6181818181818182 |
| RT_MANIFEST | 0xdd344 | 0x3ef | ASCII text, with CRLF line terminators | English | Great Britain | 0.5074478649453823 |
| DLL | Import |
|---|---|
| WSOCK32.dll | gethostbyname, recv, send, socket, inet_ntoa, setsockopt, ntohs, WSACleanup, WSAStartup, sendto, htons, __WSAFDIsSet, select, accept, listen, bind, inet_addr, ioctlsocket, recvfrom, WSAGetLastError, closesocket, gethostname, connect |
| VERSION.dll | GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW |
| WINMM.dll | timeGetTime, waveOutSetVolume, mciSendStringW |
| COMCTL32.dll | ImageList_ReplaceIcon, ImageList_Destroy, ImageList_Remove, ImageList_SetDragCursorImage, ImageList_BeginDrag, ImageList_DragEnter, ImageList_DragLeave, ImageList_EndDrag, ImageList_DragMove, InitCommonControlsEx, ImageList_Create |
| MPR.dll | WNetGetConnectionW, WNetCancelConnection2W, WNetUseConnectionW, WNetAddConnection2W |
| WININET.dll | HttpOpenRequestW, InternetCloseHandle, InternetOpenW, InternetSetOptionW, InternetCrackUrlW, HttpQueryInfoW, InternetQueryOptionW, InternetConnectW, HttpSendRequestW, FtpOpenFileW, FtpGetFileSize, InternetOpenUrlW, InternetReadFile, InternetQueryDataAvailable |
| PSAPI.DLL | GetProcessMemoryInfo |
| IPHLPAPI.DLL | IcmpSendEcho, IcmpCloseHandle, IcmpCreateFile |
| USERENV.dll | DestroyEnvironmentBlock, LoadUserProfileW, CreateEnvironmentBlock, UnloadUserProfile |
| UxTheme.dll | IsThemeActive |
| KERNEL32.dll | DuplicateHandle, CreateThread, WaitForSingleObject, HeapAlloc, GetProcessHeap, HeapFree, Sleep, GetCurrentThreadId, MultiByteToWideChar, MulDiv, GetVersionExW, IsWow64Process, GetSystemInfo, FreeLibrary, LoadLibraryA, GetProcAddress, SetErrorMode, GetModuleFileNameW, WideCharToMultiByte, lstrcpyW, lstrlenW, GetModuleHandleW, QueryPerformanceCounter, VirtualFreeEx, OpenProcess, VirtualAllocEx, WriteProcessMemory, ReadProcessMemory, CreateFileW, SetFilePointerEx, SetEndOfFile, ReadFile, WriteFile, FlushFileBuffers, TerminateProcess, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, SetFileTime, GetFileAttributesW, FindFirstFileW, FindClose, GetLongPathNameW, GetShortPathNameW, DeleteFileW, IsDebuggerPresent, CopyFileExW, MoveFileW, CreateDirectoryW, RemoveDirectoryW, SetSystemPowerState, QueryPerformanceFrequency, LoadResource, LockResource, SizeofResource, OutputDebugStringW, GetTempPathW, GetTempFileNameW, DeviceIoControl, LoadLibraryW, GetLocalTime, CompareStringW, GetCurrentThread, EnterCriticalSection, LeaveCriticalSection, GetStdHandle, CreatePipe, InterlockedExchange, TerminateThread, LoadLibraryExW, FindResourceExW, CopyFileW, VirtualFree, FormatMessageW, GetExitCodeProcess, GetPrivateProfileStringW, WritePrivateProfileStringW, GetPrivateProfileSectionW, WritePrivateProfileSectionW, GetPrivateProfileSectionNamesW, FileTimeToLocalFileTime, FileTimeToSystemTime, SystemTimeToFileTime, LocalFileTimeToFileTime, GetDriveTypeW, GetDiskFreeSpaceExW, GetDiskFreeSpaceW, GetVolumeInformationW, SetVolumeLabelW, CreateHardLinkW, SetFileAttributesW, CreateEventW, SetEvent, GetEnvironmentVariableW, SetEnvironmentVariableW, GlobalLock, GlobalUnlock, GlobalAlloc, GetFileSize, GlobalFree, GlobalMemoryStatusEx, Beep, GetSystemDirectoryW, HeapReAlloc, HeapSize, GetComputerNameW, GetWindowsDirectoryW, GetCurrentProcessId, GetProcessIoCounters, CreateProcessW, GetProcessId, SetPriorityClass, VirtualAlloc, GetCurrentDirectoryW, lstrcmpiW, DecodePointer, GetLastError, RaiseException, InitializeCriticalSectionAndSpinCount, DeleteCriticalSection, InterlockedDecrement, InterlockedIncrement, ResetEvent, WaitForSingleObjectEx, IsProcessorFeaturePresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, GetCurrentProcess, CloseHandle, GetFullPathNameW, GetStartupInfoW, GetSystemTimeAsFileTime, InitializeSListHead, RtlUnwind, SetLastError, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, EncodePointer, ExitProcess, GetModuleHandleExW, ExitThread, ResumeThread, FreeLibraryAndExitThread, GetACP, GetDateFormatW, GetTimeFormatW, LCMapStringW, GetStringTypeW, GetFileType, SetStdHandle, GetConsoleCP, GetConsoleMode, ReadConsoleW, GetTimeZoneInformation, FindFirstFileExW, IsValidCodePage, GetOEMCP, GetCPInfo, GetCommandLineA, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, SetEnvironmentVariableA, SetCurrentDirectoryW, FindNextFileW, WriteConsoleW |
| USER32.dll | GetKeyboardLayoutNameW, IsCharAlphaW, IsCharAlphaNumericW, IsCharLowerW, IsCharUpperW, GetMenuStringW, GetSubMenu, GetCaretPos, IsZoomed, GetMonitorInfoW, SetWindowLongW, SetLayeredWindowAttributes, FlashWindow, GetClassLongW, TranslateAcceleratorW, IsDialogMessageW, GetSysColor, InflateRect, DrawFocusRect, DrawTextW, FrameRect, DrawFrameControl, FillRect, PtInRect, DestroyAcceleratorTable, CreateAcceleratorTableW, SetCursor, GetWindowDC, GetSystemMetrics, GetActiveWindow, CharNextW, wsprintfW, RedrawWindow, DrawMenuBar, DestroyMenu, SetMenu, GetWindowTextLengthW, CreateMenu, IsDlgButtonChecked, DefDlgProcW, CallWindowProcW, ReleaseCapture, SetCapture, PeekMessageW, GetInputState, UnregisterHotKey, CharLowerBuffW, MonitorFromPoint, MonitorFromRect, LoadImageW, mouse_event, ExitWindowsEx, SetActiveWindow, FindWindowExW, EnumThreadWindows, SetMenuDefaultItem, InsertMenuItemW, IsMenu, ClientToScreen, GetCursorPos, DeleteMenu, CheckMenuRadioItem, GetMenuItemID, GetMenuItemCount, SetMenuItemInfoW, GetMenuItemInfoW, SetForegroundWindow, IsIconic, FindWindowW, SystemParametersInfoW, LockWindowUpdate, SendInput, GetAsyncKeyState, SetKeyboardState, GetKeyboardState, GetKeyState, VkKeyScanW, LoadStringW, DialogBoxParamW, MessageBeep, EndDialog, SendDlgItemMessageW, GetDlgItem, SetWindowTextW, CopyRect, ReleaseDC, GetDC, EndPaint, BeginPaint, GetClientRect, GetMenu, DestroyWindow, EnumWindows, GetDesktopWindow, IsWindow, IsWindowEnabled, IsWindowVisible, EnableWindow, InvalidateRect, GetWindowLongW, GetWindowThreadProcessId, AttachThreadInput, GetFocus, GetWindowTextW, SendMessageTimeoutW, EnumChildWindows, CharUpperBuffW, GetClassNameW, GetParent, GetDlgCtrlID, SendMessageW, MapVirtualKeyW, PostMessageW, GetWindowRect, SetUserObjectSecurity, CloseDesktop, CloseWindowStation, OpenDesktopW, RegisterHotKey, GetCursorInfo, SetWindowPos, CopyImage, AdjustWindowRectEx, SetRect, SetClipboardData, EmptyClipboard, CountClipboardFormats, CloseClipboard, GetClipboardData, IsClipboardFormatAvailable, OpenClipboard, BlockInput, TrackPopupMenuEx, GetMessageW, SetProcessWindowStation, GetProcessWindowStation, OpenWindowStationW, GetUserObjectSecurity, MessageBoxW, DefWindowProcW, MoveWindow, SetFocus, PostQuitMessage, KillTimer, CreatePopupMenu, RegisterWindowMessageW, SetTimer, ShowWindow, CreateWindowExW, RegisterClassExW, LoadIconW, LoadCursorW, GetSysColorBrush, GetForegroundWindow, MessageBoxA, DestroyIcon, DispatchMessageW, keybd_event, TranslateMessage, ScreenToClient |
| GDI32.dll | EndPath, DeleteObject, GetTextExtentPoint32W, ExtCreatePen, StrokeAndFillPath, GetDeviceCaps, SetPixel, CloseFigure, LineTo, AngleArc, MoveToEx, Ellipse, CreateCompatibleBitmap, CreateCompatibleDC, PolyDraw, BeginPath, Rectangle, SetViewportOrgEx, GetObjectW, SetBkMode, RoundRect, SetBkColor, CreatePen, SelectObject, StretchBlt, CreateSolidBrush, SetTextColor, CreateFontW, GetTextFaceW, GetStockObject, CreateDCW, GetPixel, DeleteDC, GetDIBits, StrokePath |
| COMDLG32.dll | GetSaveFileNameW, GetOpenFileNameW |
| ADVAPI32.dll | GetAce, RegEnumValueW, RegDeleteValueW, RegDeleteKeyW, RegEnumKeyExW, RegSetValueExW, RegOpenKeyExW, RegCloseKey, RegQueryValueExW, RegConnectRegistryW, InitializeSecurityDescriptor, InitializeAcl, AdjustTokenPrivileges, OpenThreadToken, OpenProcessToken, LookupPrivilegeValueW, DuplicateTokenEx, CreateProcessAsUserW, CreateProcessWithLogonW, GetLengthSid, CopySid, LogonUserW, AllocateAndInitializeSid, CheckTokenMembership, FreeSid, GetTokenInformation, RegCreateKeyExW, GetSecurityDescriptorDacl, GetAclInformation, GetUserNameW, AddAce, SetSecurityDescriptorDacl, InitiateSystemShutdownExW |
| SHELL32.dll | DragFinish, DragQueryPoint, ShellExecuteExW, DragQueryFileW, SHEmptyRecycleBinW, SHGetPathFromIDListW, SHBrowseForFolderW, SHCreateShellItem, SHGetDesktopFolder, SHGetSpecialFolderLocation, SHGetFolderPathW, SHFileOperationW, ExtractIconExW, Shell_NotifyIconW, ShellExecuteW |
| ole32.dll | CoTaskMemAlloc, CoTaskMemFree, CLSIDFromString, ProgIDFromCLSID, CLSIDFromProgID, OleSetMenuDescriptor, MkParseDisplayName, OleSetContainedObject, CoCreateInstance, IIDFromString, StringFromGUID2, CreateStreamOnHGlobal, OleInitialize, OleUninitialize, CoInitialize, CoUninitialize, GetRunningObjectTable, CoGetInstanceFromFile, CoGetObject, CoInitializeSecurity, CoCreateInstanceEx, CoSetProxyBlanket |
| OLEAUT32.dll | CreateStdDispatch, CreateDispTypeInfo, UnRegisterTypeLib, UnRegisterTypeLibForUser, RegisterTypeLibForUser, RegisterTypeLib, LoadTypeLibEx, VariantCopyInd, SysReAllocString, SysFreeString, VariantChangeType, SafeArrayDestroyData, SafeArrayUnaccessData, SafeArrayAccessData, SafeArrayAllocData, SafeArrayAllocDescriptorEx, SafeArrayCreateVector, SysStringLen, QueryPathOfRegTypeLib, SysAllocString, VariantInit, VariantClear, DispCallFunc, VariantTimeToSystemTime, VarR8FromDec, SafeArrayGetVartype, SafeArrayDestroyDescriptor, VariantCopy, OleLoadPicture |
| Language of compilation system | Country where language is spoken | Map |
|---|---|---|
| English | Great Britain |  |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Oct 1, 2024 22:14:59.775151014 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:14:59.775197029 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:14:59.775264978 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:14:59.775638103 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:14:59.775655031 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:00.425561905 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:00.427560091 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:15:00.427622080 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:00.428281069 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:00.428355932 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:15:00.428993940 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:00.429049969 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:15:00.430146933 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:15:00.430217028 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:00.430327892 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:15:00.430345058 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:00.471548080 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:15:00.732413054 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:00.732466936 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:00.732614994 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:15:00.732661963 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:00.732692957 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:00.732753992 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:15:00.734909058 CEST | 49736 | 443 | 192.168.2.4 | 142.250.186.174 |
| Oct 1, 2024 22:15:00.734939098 CEST | 443 | 49736 | 142.250.186.174 | 192.168.2.4 |
| Oct 1, 2024 22:15:01.424772978 CEST | 49675 | 443 | 192.168.2.4 | 173.222.162.32 |
| Oct 1, 2024 22:15:03.155623913 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:03.155672073 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:03.155734062 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:03.155957937 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:03.155972004 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:03.484112978 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:03.484148026 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:03.484210968 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:03.485788107 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:03.485799074 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:03.797849894 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:03.798077106 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:03.798094988 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:03.798974991 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:03.799030066 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:03.800170898 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:03.800225019 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:03.846781969 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:03.846788883 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:03.893655062 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:04.143580914 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:04.143640995 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:04.154611111 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:04.154625893 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:04.154958963 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:04.208647013 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:04.424089909 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:04.467443943 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:04.613341093 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:04.613411903 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:04.613586903 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:04.613780022 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:04.613801003 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:04.613810062 CEST | 49743 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:04.613816977 CEST | 443 | 49743 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:04.647721052 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:04.647742987 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:04.647815943 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:04.648080111 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:04.648092031 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:05.298635960 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:05.298827887 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:05.300298929 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:05.300303936 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:05.300635099 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:05.301887035 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:05.347399950 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:05.572293997 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:05.572469950 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:05.572535038 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:05.573220968 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:05.573230028 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:05.573240995 CEST | 49745 | 443 | 192.168.2.4 | 184.28.90.27 |
| Oct 1, 2024 22:15:05.573245049 CEST | 443 | 49745 | 184.28.90.27 | 192.168.2.4 |
| Oct 1, 2024 22:15:09.461436033 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:09.461515903 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:09.461626053 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:09.462438107 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:09.462474108 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.208384991 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.208610058 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.208625078 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.209177017 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.209244013 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.210190058 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.210242987 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.211041927 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.211117029 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.211236954 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.211246967 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.254364967 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.463634014 CEST | 49762 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:10.463660002 CEST | 443 | 49762 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.463737011 CEST | 49762 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:10.463944912 CEST | 49762 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:10.463958025 CEST | 443 | 49762 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.515969992 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:10.516028881 CEST | 443 | 49763 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.516119003 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:10.516527891 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:10.516556025 CEST | 443 | 49763 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.525913000 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.526051998 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.526129007 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.526140928 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.526160955 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.526185989 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.526190996 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.526230097 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.531604052 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.531673908 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.538038969 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.538110971 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.538125038 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.538175106 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.544255972 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.544332027 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.550570965 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.550649881 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.550657034 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.550683022 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.550725937 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.614331961 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.614420891 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.614434004 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.614444971 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.614500046 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.615061045 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.615125895 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.621381044 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.621414900 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.621450901 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.621459007 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.621500015 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.628046989 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.628120899 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.634046078 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.634124041 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.634139061 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.640496016 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.640578032 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.640590906 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.646917105 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.646980047 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.647001028 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.647104025 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.647165060 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.647293091 CEST | 49756 | 443 | 192.168.2.4 | 142.250.184.238 |
| Oct 1, 2024 22:15:10.647306919 CEST | 443 | 49756 | 142.250.184.238 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.115443945 CEST | 443 | 49762 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.115673065 CEST | 49762 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.115686893 CEST | 443 | 49762 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.116044998 CEST | 443 | 49762 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.116112947 CEST | 49762 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.116719007 CEST | 443 | 49762 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.116775036 CEST | 49762 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.117681980 CEST | 49762 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.117746115 CEST | 443 | 49762 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.117814064 CEST | 49762 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.117822886 CEST | 443 | 49762 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.145757914 CEST | 443 | 49763 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.145975113 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.146002054 CEST | 443 | 49763 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.146383047 CEST | 443 | 49763 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.146451950 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.147089958 CEST | 443 | 49763 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.147156954 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.147269011 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.147336960 CEST | 443 | 49763 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.147406101 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.158684015 CEST | 49762 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.189503908 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.189517975 CEST | 443 | 49763 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.236005068 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.419939995 CEST | 443 | 49762 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.420016050 CEST | 443 | 49762 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.420087099 CEST | 49762 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.420479059 CEST | 49762 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.420494080 CEST | 443 | 49762 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.421475887 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.421525955 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.421612024 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.421961069 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.421977043 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.445983887 CEST | 443 | 49763 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.446338892 CEST | 443 | 49763 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.446419001 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.446500063 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.446548939 CEST | 443 | 49763 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.446573973 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.446609020 CEST | 49763 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.447277069 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.447325945 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.447402954 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.448436975 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:11.448451996 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.051064968 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.051356077 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.051382065 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.051765919 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.051831007 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.052496910 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.052558899 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.052685022 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.052747011 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.052828074 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.052838087 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.052855015 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.089008093 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.089261055 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.089274883 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.089633942 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.089701891 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.090307951 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.090367079 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.090466976 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.090526104 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.090584040 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.090590954 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.090605021 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.097388983 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.097398043 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.135400057 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.145240068 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.267915010 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.268963099 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.269062042 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.269763947 CEST | 49767 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.269787073 CEST | 443 | 49767 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.292499065 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:12.308173895 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.309103012 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.309163094 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.309731007 CEST | 49768 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:12.309736967 CEST | 443 | 49768 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.335412979 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.562406063 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.562450886 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.562484980 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.562503099 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:12.562513113 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.562525034 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.562556982 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:12.562637091 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:12.562683105 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:12.564568996 CEST | 49741 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:15:12.564587116 CEST | 443 | 49741 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:15:14.801136017 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:14.801194906 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:14.801345110 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:14.802475929 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:14.802509069 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:15.504326105 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:15.504437923 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:15.507744074 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:15.507777929 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:15.508279085 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:15.548508883 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:16.234462023 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:16.275413036 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.465025902 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.465054035 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.465063095 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.465080023 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.465109110 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.465169907 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:16.465260983 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.465301037 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:16.465327978 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:16.465528011 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.465595007 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:16.465610981 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.465636969 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.465717077 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:16.946753025 CEST | 49777 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:16.946773052 CEST | 443 | 49777 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.946835995 CEST | 49777 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:16.947097063 CEST | 49777 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:16.947110891 CEST | 443 | 49777 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:17.158507109 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:17.158571005 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:17.158617020 CEST | 49773 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:17.158636093 CEST | 443 | 49773 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:17.586941004 CEST | 443 | 49777 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:17.587214947 CEST | 49777 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:17.587224007 CEST | 443 | 49777 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:17.587759018 CEST | 443 | 49777 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:17.588100910 CEST | 49777 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:17.588185072 CEST | 443 | 49777 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:17.588279963 CEST | 49777 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:17.588296890 CEST | 49777 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:17.588315964 CEST | 443 | 49777 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:17.912211895 CEST | 443 | 49777 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:17.934851885 CEST | 443 | 49777 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:17.934917927 CEST | 49777 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:17.936763048 CEST | 49777 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:17.936773062 CEST | 443 | 49777 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:41.391529083 CEST | 49781 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:41.391561031 CEST | 443 | 49781 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:41.391639948 CEST | 49781 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:41.392138958 CEST | 49781 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:41.392151117 CEST | 443 | 49781 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:41.522283077 CEST | 49782 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:41.522315979 CEST | 443 | 49782 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:41.522375107 CEST | 49782 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:41.522851944 CEST | 49782 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:41.522862911 CEST | 443 | 49782 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:41.621691942 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:41.621742964 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:41.621824026 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:41.622148037 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:41.622160912 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.071532965 CEST | 443 | 49781 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.071875095 CEST | 49781 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.071892023 CEST | 443 | 49781 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.072237015 CEST | 443 | 49781 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.072511911 CEST | 49781 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.072561026 CEST | 443 | 49781 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.072683096 CEST | 49781 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.072695971 CEST | 49781 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.072705984 CEST | 443 | 49781 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.256709099 CEST | 443 | 49782 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.257174969 CEST | 49782 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.257189035 CEST | 443 | 49782 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.257565975 CEST | 443 | 49782 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.257941961 CEST | 49782 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.258002996 CEST | 443 | 49782 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.258127928 CEST | 49782 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.258147001 CEST | 49782 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.258156061 CEST | 443 | 49782 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.341881037 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.342197895 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.342214108 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.342581034 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.342763901 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.343307018 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.343358994 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.343544960 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.343595028 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.343744993 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.343750954 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.343775988 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.376966000 CEST | 443 | 49781 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.378907919 CEST | 443 | 49781 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.378999949 CEST | 49781 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.379272938 CEST | 49781 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.379295111 CEST | 443 | 49781 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.387398005 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.393541098 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.570410013 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.570574045 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.570648909 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.571477890 CEST | 49783 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.571497917 CEST | 443 | 49783 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.588299036 CEST | 443 | 49782 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.588438988 CEST | 443 | 49782 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:42.588510990 CEST | 49782 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.588850021 CEST | 49782 | 443 | 192.168.2.4 | 172.217.16.142 |
| Oct 1, 2024 22:15:42.588874102 CEST | 443 | 49782 | 172.217.16.142 | 192.168.2.4 |
| Oct 1, 2024 22:15:53.646965981 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:53.647011995 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:53.647078037 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:53.647545099 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:53.647556067 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.689431906 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.689575911 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:54.695132971 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:54.695153952 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.695413113 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.704449892 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:54.751394033 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.992011070 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.992036104 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.992050886 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.992119074 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:54.992136955 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.992198944 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:54.996959925 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.997000933 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.997050047 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.997061968 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:54.997093916 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:54.997093916 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:54.997241020 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:54.997241020 CEST | 49784 | 443 | 192.168.2.4 | 52.165.165.26 |
| Oct 1, 2024 22:15:54.997260094 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:15:54.997267962 CEST | 443 | 49784 | 52.165.165.26 | 192.168.2.4 |
| Oct 1, 2024 22:16:03.200160027 CEST | 49786 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:16:03.200223923 CEST | 443 | 49786 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:16:03.200297117 CEST | 49786 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:16:03.201400042 CEST | 49786 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:16:03.201419115 CEST | 443 | 49786 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:16:03.877832890 CEST | 443 | 49786 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:16:03.878241062 CEST | 49786 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:16:03.878268957 CEST | 443 | 49786 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:16:03.878557920 CEST | 443 | 49786 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:16:03.878941059 CEST | 49786 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:16:03.878992081 CEST | 443 | 49786 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:16:03.924227953 CEST | 49786 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:16:07.955123901 CEST | 49724 | 80 | 192.168.2.4 | 199.232.214.172 |
| Oct 1, 2024 22:16:07.960391998 CEST | 80 | 49724 | 199.232.214.172 | 192.168.2.4 |
| Oct 1, 2024 22:16:07.960462093 CEST | 49724 | 80 | 192.168.2.4 | 199.232.214.172 |
| Oct 1, 2024 22:16:12.283277988 CEST | 49788 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:12.283339024 CEST | 443 | 49788 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:12.283466101 CEST | 49788 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:12.283718109 CEST | 49788 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:12.283735991 CEST | 443 | 49788 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:12.678174019 CEST | 49789 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:12.678216934 CEST | 443 | 49789 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:12.678354979 CEST | 49789 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:12.678747892 CEST | 49789 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:12.678760052 CEST | 443 | 49789 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:12.913525105 CEST | 443 | 49788 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:12.913791895 CEST | 49788 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:12.913805008 CEST | 443 | 49788 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:12.914159060 CEST | 443 | 49788 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:12.914565086 CEST | 49788 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:12.914628029 CEST | 443 | 49788 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:12.914777040 CEST | 49788 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:12.914803982 CEST | 49788 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:12.914809942 CEST | 443 | 49788 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:13.174734116 CEST | 443 | 49788 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:13.174911022 CEST | 443 | 49788 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:13.174964905 CEST | 49788 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:13.175993919 CEST | 49788 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:13.176013947 CEST | 443 | 49788 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:14.221420050 CEST | 443 | 49786 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:16:14.221477985 CEST | 443 | 49786 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:16:14.221528053 CEST | 49786 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:16:14.221961021 CEST | 443 | 49789 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:14.222174883 CEST | 49789 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:14.222193003 CEST | 443 | 49789 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:14.222552061 CEST | 443 | 49789 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:14.222831011 CEST | 49789 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:14.222893000 CEST | 443 | 49789 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:14.222971916 CEST | 49789 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:14.222987890 CEST | 49789 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:14.223001957 CEST | 443 | 49789 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:14.661108971 CEST | 443 | 49789 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:14.661747932 CEST | 443 | 49789 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:14.661804914 CEST | 49789 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:14.662076950 CEST | 49789 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:14.662091017 CEST | 443 | 49789 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:27.288229942 CEST | 49786 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:16:27.288325071 CEST | 443 | 49786 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:16:42.991838932 CEST | 49791 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:42.991877079 CEST | 443 | 49791 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:42.991933107 CEST | 49791 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:42.992373943 CEST | 49791 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:42.992387056 CEST | 443 | 49791 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.102054119 CEST | 49792 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.102171898 CEST | 443 | 49792 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.102277994 CEST | 49792 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.102482080 CEST | 49792 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.102509975 CEST | 443 | 49792 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.632256031 CEST | 443 | 49791 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.632514954 CEST | 49791 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.632531881 CEST | 443 | 49791 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.633035898 CEST | 443 | 49791 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.633375883 CEST | 49791 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.633451939 CEST | 443 | 49791 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.633534908 CEST | 49791 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.633557081 CEST | 49791 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.633565903 CEST | 443 | 49791 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.744713068 CEST | 443 | 49792 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.745028973 CEST | 49792 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.745111942 CEST | 443 | 49792 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.745454073 CEST | 443 | 49792 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.745758057 CEST | 49792 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.745830059 CEST | 443 | 49792 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.745898008 CEST | 49792 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.745934010 CEST | 49792 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.745949030 CEST | 443 | 49792 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.936620951 CEST | 443 | 49791 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.936887980 CEST | 443 | 49791 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:43.936989069 CEST | 49791 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.937174082 CEST | 49791 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:43.937194109 CEST | 443 | 49791 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:44.051846027 CEST | 443 | 49792 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:44.051991940 CEST | 443 | 49792 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:16:44.052068949 CEST | 49792 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:44.055269003 CEST | 49792 | 443 | 192.168.2.4 | 216.58.212.142 |
| Oct 1, 2024 22:16:44.055291891 CEST | 443 | 49792 | 216.58.212.142 | 192.168.2.4 |
| Oct 1, 2024 22:17:03.256299973 CEST | 49793 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:17:03.256349087 CEST | 443 | 49793 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:17:03.256479025 CEST | 49793 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:17:03.257322073 CEST | 49793 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:17:03.257334948 CEST | 443 | 49793 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:17:03.942908049 CEST | 443 | 49793 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:17:03.943485022 CEST | 49793 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:17:03.943502903 CEST | 443 | 49793 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:17:03.943830967 CEST | 443 | 49793 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:17:03.944340944 CEST | 49793 | 443 | 192.168.2.4 | 142.250.184.196 |
| Oct 1, 2024 22:17:03.944397926 CEST | 443 | 49793 | 142.250.184.196 | 192.168.2.4 |
| Oct 1, 2024 22:17:03.988533974 CEST | 49793 | 443 | 192.168.2.4 | 142.250.184.196 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Oct 1, 2024 22:14:58.802880049 CEST | 49340 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:14:58.802984953 CEST | 49152 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:14:58.814075947 CEST | 53 | 49340 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:14:58.814116001 CEST | 53 | 65052 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:14:58.814685106 CEST | 53 | 49152 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:14:58.820679903 CEST | 53 | 49572 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:14:59.767338991 CEST | 53435 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:14:59.767513990 CEST | 61943 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:14:59.774511099 CEST | 53 | 53435 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:14:59.774629116 CEST | 53 | 61943 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:14:59.815571070 CEST | 53 | 50047 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:03.145961046 CEST | 56399 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:15:03.146002054 CEST | 53166 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:15:03.154635906 CEST | 53 | 56399 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:03.155028105 CEST | 53 | 53166 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:05.110677004 CEST | 53 | 53226 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:09.433361053 CEST | 54658 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:15:09.433507919 CEST | 57884 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:15:09.441478968 CEST | 53 | 57884 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:09.441520929 CEST | 53 | 54658 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.455339909 CEST | 54521 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:15:10.455954075 CEST | 62355 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:15:10.462498903 CEST | 53 | 54521 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:10.463311911 CEST | 53 | 62355 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:11.058290958 CEST | 53 | 53778 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:16.834749937 CEST | 53 | 55894 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:19.513556957 CEST | 138 | 138 | 192.168.2.4 | 192.168.2.255 |
| Oct 1, 2024 22:15:35.677186966 CEST | 53 | 62780 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:58.443298101 CEST | 53 | 55139 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:15:58.556372881 CEST | 53 | 51456 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:16:09.959114075 CEST | 53 | 54791 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:16:12.274425030 CEST | 63754 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:16:12.274537086 CEST | 52298 | 53 | 192.168.2.4 | 1.1.1.1 |
| Oct 1, 2024 22:16:12.281091928 CEST | 53 | 63754 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:16:12.282167912 CEST | 53 | 52298 | 1.1.1.1 | 192.168.2.4 |
| Oct 1, 2024 22:16:27.299285889 CEST | 53 | 63365 | 1.1.1.1 | 192.168.2.4 |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Oct 1, 2024 22:14:58.802880049 CEST | 192.168.2.4 | 1.1.1.1 | 0xfd8a | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 1, 2024 22:14:58.802984953 CEST | 192.168.2.4 | 1.1.1.1 | 0xdc48 | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 1, 2024 22:14:59.767338991 CEST | 192.168.2.4 | 1.1.1.1 | 0xf3c0 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 1, 2024 22:14:59.767513990 CEST | 192.168.2.4 | 1.1.1.1 | 0x24f7 | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 1, 2024 22:15:03.145961046 CEST | 192.168.2.4 | 1.1.1.1 | 0xbe7b | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 1, 2024 22:15:03.146002054 CEST | 192.168.2.4 | 1.1.1.1 | 0xc7c8 | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 1, 2024 22:15:09.433361053 CEST | 192.168.2.4 | 1.1.1.1 | 0xa22b | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 1, 2024 22:15:09.433507919 CEST | 192.168.2.4 | 1.1.1.1 | 0x96fe | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 1, 2024 22:15:10.455339909 CEST | 192.168.2.4 | 1.1.1.1 | 0x19e1 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 1, 2024 22:15:10.455954075 CEST | 192.168.2.4 | 1.1.1.1 | 0xf17f | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 1, 2024 22:16:12.274425030 CEST | 192.168.2.4 | 1.1.1.1 | 0x7fae | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 1, 2024 22:16:12.274537086 CEST | 192.168.2.4 | 1.1.1.1 | 0x94ea | Standard query (0) | 65 | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Oct 1, 2024 22:14:58.814075947 CEST | 1.1.1.1 | 192.168.2.4 | 0xfd8a | No error (0) | 142.250.186.78 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:58.814685106 CEST | 1.1.1.1 | 192.168.2.4 | 0xdc48 | No error (0) | 65 | IN (0x0001) | false | |||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | youtube-ui.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 142.250.186.174 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 142.250.184.238 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 142.250.184.206 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 142.250.181.238 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 216.58.206.78 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 142.250.185.238 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 216.58.212.174 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 172.217.18.14 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 142.250.186.110 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 172.217.18.110 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 142.250.186.142 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 142.250.186.78 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 172.217.23.110 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 142.250.186.46 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 172.217.16.206 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774511099 CEST | 1.1.1.1 | 192.168.2.4 | 0xf3c0 | No error (0) | 216.58.206.46 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774629116 CEST | 1.1.1.1 | 192.168.2.4 | 0x24f7 | No error (0) | youtube-ui.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Oct 1, 2024 22:14:59.774629116 CEST | 1.1.1.1 | 192.168.2.4 | 0x24f7 | No error (0) | 65 | IN (0x0001) | false | |||
| Oct 1, 2024 22:15:03.154635906 CEST | 1.1.1.1 | 192.168.2.4 | 0xbe7b | No error (0) | 142.250.184.196 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:15:03.155028105 CEST | 1.1.1.1 | 192.168.2.4 | 0xc7c8 | No error (0) | 65 | IN (0x0001) | false | |||
| Oct 1, 2024 22:15:09.441478968 CEST | 1.1.1.1 | 192.168.2.4 | 0x96fe | No error (0) | www3.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Oct 1, 2024 22:15:09.441520929 CEST | 1.1.1.1 | 192.168.2.4 | 0xa22b | No error (0) | www3.l.google.com | CNAME (Canonical name) | IN (0x0001) | false | ||
| Oct 1, 2024 22:15:09.441520929 CEST | 1.1.1.1 | 192.168.2.4 | 0xa22b | No error (0) | 142.250.184.238 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:15:10.462498903 CEST | 1.1.1.1 | 192.168.2.4 | 0x19e1 | No error (0) | 172.217.16.142 | A (IP address) | IN (0x0001) | false | ||
| Oct 1, 2024 22:16:12.281091928 CEST | 1.1.1.1 | 192.168.2.4 | 0x7fae | No error (0) | 216.58.212.142 | A (IP address) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.4 | 49736 | 142.250.186.174 | 443 | 7572 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-01 20:15:00 UTC | 877 | OUT | |
| 2024-10-01 20:15:00 UTC | 2634 | IN |