Edit tour
Windows
Analysis Report
QUOTE 452362.eml
Overview
General Information
| Sample name: | QUOTE 452362.eml |
| Analysis ID: | 1530787 |
| MD5: | c5da031682d07545611f4336226a24cf |
| SHA1: | ed3e66f0f96f0efffcff680c9279a3865a0f0745 |
| SHA256: | 23b733192fc8d50db460b5e20058bfde80c709ec8a978566905bf7644ec20a67 |
| Infos: |  |
 | |
Detection
| Score: | 2 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 60% |
Signatures
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
Queries the volume information (name, serial number etc) of a device
Sigma detected: Office Autorun Keys Modification
Stores files to the Windows start menu directory
Classification
- System is w10x64_ra
OUTLOOK.EXE (PID: 6712 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \Root\Offi ce16\OUTLO OK.EXE" /e ml "C:\Use rs\user\De sktop\QUOT E 452362.e ml" MD5: 91A5292942864110ED734005B7E005C0) 
ai.exe (PID: 2648 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \root\vfs\ ProgramFil esCommonX6 4\Microsof t Shared\O ffice16\ai .exe" "E7D 18160-CC43 -4C8E-B574 -ADC7AAB96 AD4" "7188 BDE5-66D5- 491E-AE9C- E48C452598 3E" "6712" "C:\Progr am Files ( x86)\Micro soft Offic e\Root\Off ice16\OUTL OOK.EXE" " WordCombin edFloatieL reOnline.o nnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD) 
chrome.exe (PID: 4064 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// campaign-s tatistics. com/link_c lick/epjJD Q-oZ7P8Dz- 3Dc7Cq/b02 6cc61e40b5 97ae3518c0 b47e7793d MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 6916 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2168 --fi eld-trial- handle=194 0,i,722463 3850826834 353,527130 4985398107 482,262144 --disable -features= Optimizati onGuideMod elDownload ing,Optimi zationHint s,Optimiza tionHintsF etching,Op timization TargetPred iction /pr efetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 4824 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// campaign-s tatistics. com/link_c lick/epjJD Q-oZ7P8Dz- 3Dc7Cq/b02 6cc61e40b5 97ae3518c0 b47e7793d MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 2408 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2032 --fi eld-trial- handle=194 8,i,994822 4342545650 432,702335 9487037002 687,262144 --disable -features= Optimizati onGuideMod elDownload ing,Optimi zationHint s,Optimiza tionHintsF etching,Op timization TargetPred iction /pr efetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
⊘No configs have been found
⊘No yara matches
| Source: | Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): | ||
⊘No Suricata rule has matched
Click to jump to signature section
Show All Signature Results
There are no malicious signatures, click here to show all signatures.
| Source: | HTTP Parser: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | JA3 fingerprint: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Classification label: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | Window found: | Jump to behavior | ||
| Source: | Window detected: | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | File Volume queried: | Jump to behavior | ||
| Source: | Process information queried: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | 1 DLL Side-Loading | 1 Process Injection | 1 Masquerading | OS Credential Dumping | 1 Process Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | 1 Registry Run Keys / Startup Folder | 1 DLL Side-Loading | 1 Process Injection | LSASS Memory | 13 System Information Discovery | Remote Desktop Protocol | Data from Removable Media | 4 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 1 Registry Run Keys / Startup Folder | 1 DLL Side-Loading | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 5 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 3 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| a.nel.cloudflare.com | 35.190.80.1 | true | false | unknown | |
| stats.sender.net | 104.22.74.115 | true | false | unknown | |
| campaign-statistics.com | 172.66.40.88 | true | false | unknown | |
| www.google.com | 142.250.186.132 | true | false | unknown |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false | unknown | ||
| false | unknown | ||
| false | unknown | ||
| false | unknown | ||
| false | unknown | ||
| false | unknown | ||
| false | unknown | ||
| false | unknown | ||
| false | unknown | ||
| false | unknown | ||
| false | unknown |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false | unknown | |||
| false | unknown | |||
| false | unknown | |||
| false | unknown | |||
| false | unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 172.66.40.88 | campaign-statistics.com | United States | 13335 | CLOUDFLARENETUS | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 104.22.74.115 | stats.sender.net | United States | 13335 | CLOUDFLARENETUS | false | |
| 172.66.43.168 | unknown | United States | 13335 | CLOUDFLARENETUS | false | |
| 142.250.186.132 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 35.190.80.1 | a.nel.cloudflare.com | United States | 15169 | GOOGLEUS | false |
| IP |
|---|
| 192.168.2.16 |
| Joe Sandbox version: | 41.0.0 Charoite |
| Analysis ID: | 1530787 |
| Start date and time: | 2024-10-10 14:40:48 +02:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 5m 7s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 18 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | QUOTE 452362.eml |
| Detection: | CLEAN |
| Classification: | clean2.winEML@24/45@12/7 |
| EGA Information: | Failed |
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 52.113.194.132, 23.60.203.209, 52.109.68.129, 2.19.126.160, 2.19.126.151, 93.184.221.240, 20.42.73.31, 142.250.185.67, 142.250.186.174, 74.125.71.84, 34.104.35.123, 20.42.65.84, 20.42.65.90, 20.189.173.5, 142.250.186.99, 20.189.173.18, 142.250.184.206
- Excluded domains from analysis (whitelisted): omex.cdn.office.net, onedscolprdwus04.westus.cloudapp.azure.com, slscr.update.microsoft.com, clientservices.googleapis.com, onedscolprdeus14.eastus.cloudapp.azure.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, eur.roaming1.live.com.akadns.net, onedscolprdeus21.eastus.cloudapp.azure.com, onedscolprdwus15.westus.cloudapp.azure.com, mobile.events.data.microsoft.com, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, clients2.google.com, login.live.com, e16604.g.akamaiedge.net, onedscolprdeus02.eastus.cloudapp.azure.com, update.googleapis.com, frc-azsc-000.roaming.officeapps.live.com, prod.fs.microsoft.com.akadns.net, a1864.dscd.akamai.net, clients1.google.com, ecs.office.com, fs.microsoft.com, accounts.google.com, osiprod-frc-buff-azsc-000.francecentral.cloudapp.azure.com, ctldl.windowsupdate.com, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, edg
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtQueryAttributesFile calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
- Report size getting too big, too many NtReadVirtualMemory calls found.
- Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- VT rate limit hit for: QUOTE 452362.eml
⊘No simulations
| Input | Output |
|---|---|
| URL: https://campaign-statistics.com/link_click/epjJDQ-oZ7P8Dz-3Dc7Cq/b026cc61e40b597ae3518c0b47e7793d Model: jbxai | {
"brands":["Sender"],
"contains_trigger_text":false,
"trigger_text":"",
"prominent_button_name":"unknown",
"text_input_field_labels":"unknown",
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"text":"Page Not Found The page you are looking for might have been removed,
had its name changed or is temporarily unavailable.",
"has_visible_qrcode":false} |
 | |
| URL: Email Model: jbxai | {
"brands":["BridgeCare"],
"contains_trigger_text":false,
"trigger_text":"",
"prominent_button_name":"unknown",
"text_input_field_labels":"unknown",
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"text":"Hi,
Please see attached and get back to me Kind Regards Colin Joyce MCIHT Senior Project Manager m: +44 (0)7793 589 721 www.bridge-care.co.uk Address Royds Works,
184 Attercliffe Road,
Sheffield,
S4 7WZ,
UK Company Name: ASG Highways Ltd trading as Bridgecare Registered Office: Royds Works,
184 Attercliffe Road,
Sheffield,
S4 7WZ UK Company Registration: 14858741 VAT Number: 450 6006 30",
"has_visible_qrcode":false} |
 |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 239.255.255.250 | Get hash | malicious | HTMLPhisher | Browse | ||
| Get hash | malicious | HtmlDropper | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| 104.22.74.115 | Get hash | malicious | Unknown | Browse | ||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| 172.66.43.168 | Get hash | malicious | HTMLPhisher | Browse | ||
| Get hash | malicious | AsyncRAT | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | LummaC, Glupteba, SmokeLoader, Socks5Systemz, Stealc | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| 172.66.40.88 | Get hash | malicious | LummaC, Glupteba, SmokeLoader, Socks5Systemz, Stealc | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| campaign-statistics.com | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | AsyncRAT | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| stats.sender.net | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| CLOUDFLARENETUS | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | HtmlDropper | Browse |
| ||
| Get hash | malicious | FormBook | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | LummaC | Browse |
| ||
| Get hash | malicious | AgentTesla | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | MassLogger RAT | Browse |
| ||
| Get hash | malicious | Snake Keylogger, VIP Keylogger | Browse |
| ||
| CLOUDFLARENETUS | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | HtmlDropper | Browse |
| ||
| Get hash | malicious | FormBook | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | LummaC | Browse |
| ||
| Get hash | malicious | AgentTesla | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | MassLogger RAT | Browse |
| ||
| Get hash | malicious | Snake Keylogger, VIP Keylogger | Browse |
| ||
| CLOUDFLARENETUS | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | HtmlDropper | Browse |
| ||
| Get hash | malicious | FormBook | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | LummaC | Browse |
| ||
| Get hash | malicious | AgentTesla | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | MassLogger RAT | Browse |
| ||
| Get hash | malicious | Snake Keylogger, VIP Keylogger | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 28a2c9bd18a11de089ef85a160da29e4 | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | HtmlDropper | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
⊘No context
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 231348 |
| Entropy (8bit): | 4.383226892710296 |
| Encrypted: | false |
| SSDEEP: | 1536:IBqYLT3gsiapprbVxSLfgssPNcAz79ysQqt2ptQpLYqoQI5rcm0Fv4np2yGJUISu:e7gibqgRmiGu21qoQKrt0FvwgYm6tCAw |
| MD5: | 4D0755D56E2C74A1F4EA30FC69F39CA1 |
| SHA1: | EC5E37E8B9A662BB05E06BA5534D11CB9730A3B8 |
| SHA-256: | 6EE06485DB5B29F2642009429FF0FFAFEA84CAFA6978F04851DE7402E04083FA |
| SHA-512: | D75701A5F17C14ACC29E410375BC6E31AD5BC0C123498E1E35FFCEB1C5E7A2C2064D6B7B84AB790CDD432BCA95B171BCFD2F33CF6B07841BC3010B62B66B2D54 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 521377 |
| Entropy (8bit): | 4.9084889265453135 |
| Encrypted: | false |
| SSDEEP: | 3072:gdTb5Sb3F2FqSrfZm+CnQsbzxZO7aYb6f5780K2:wb5q3umBnzT |
| MD5: | C37972CBD8748E2CA6DA205839B16444 |
| SHA1: | 9834B46ACF560146DD7EE9086DB6019FBAC13B4E |
| SHA-256: | D4CFBB0E8B9D3E36ECE921B9B51BD37EF1D3195A9CFA1C4586AEA200EB3434A7 |
| SHA-512: | 02B4D134F84122B6EE9A304D79745A003E71803C354FB01BAF986BD15E3BA57BA5EF167CC444ED67B9BA5964FF5922C50E2E92A8A09862059852ECD9CEF1A900 |
| Malicious: | false |
| Reputation: | moderate, very likely benign file |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_40.ttf
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 773040 |
| Entropy (8bit): | 6.55939673749297 |
| Encrypted: | false |
| SSDEEP: | 12288:Zn84XULLDs51UJQSOf9VvLXHyheIQ47gEFGHtAgk3+/cLQ/zhm1kjFKy6Nyjbqq+:N8XPDs5+ivOXgo1kYvyz2 |
| MD5: | 4296A064B917926682E7EED650D4A745 |
| SHA1: | 3953A6AA9100F652A6CA533C2E05895E52343718 |
| SHA-256: | E04E41C74D6C78213BA1588BACEE64B42C0EDECE85224C474A714F39960D8083 |
| SHA-512: | A25388DDCE58D9F06716C0F0BDF2AEFA7F68EBCA7171077533AF4A9BE99A08E3DCD8DFE1A278B7AA5DE65DA9F32501B4B0B0ECAB51F9AF0F12A3A8A75363FF2C |
| Malicious: | false |
| Reputation: | moderate, very likely benign file |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 322260 |
| Entropy (8bit): | 4.000299760592446 |
| Encrypted: | false |
| SSDEEP: | 6144:dztCFLNyoAHq5Rv2SCtUTnRe4N2+A/3oKBL37GZbTSB+pMZIrh:HMLgvKz9CtgRemO3oUHi3SBSMZIl |
| MD5: | CC90D669144261B198DEAD45AA266572 |
| SHA1: | EF164048A8BC8BD3A015CF63E78BDAC720071305 |
| SHA-256: | 89C701EEFF939A44F28921FD85365ECD87041935DCD0FE0BAF04957DA12C9899 |
| SHA-512: | 16F8A8A6DCBAEAEFB88C7CFF910BCCC71B76A723CF808B810F500E28E543112C2FAE2491D4D209569BD810490EDFF564A2B084709B02963BCAF6FDF1AEEC59AC |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 10 |
| Entropy (8bit): | 2.6464393446710157 |
| Encrypted: | false |
| SSDEEP: | 3:LNQdA:hGA |
| MD5: | D9673107D7F1613A9FDF0C4AA38526BE |
| SHA1: | E63B9A9F210070FEBBB65715DDA0A574AF9F4B81 |
| SHA-256: | BB0F85CF4087079E14224D6593CD9CCCACC9F9DC4F8BEEC56BCAD24053030DD9 |
| SHA-512: | 3C7E969677BD5C405BA993B1B3AED1DCB87CE9739C65772B3E1FE3091EF60D4C9175D38F9D6569516B278CF28D832F08E39DE54D13C98D3BE97BF47907204CE1 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4096 |
| Entropy (8bit): | 0.09304735440217722 |
| Encrypted: | false |
| SSDEEP: | 3:lSWFN3l/klslpEl9Xll:l9F8E+9 |
| MD5: | D0DE7DB24F7B0C0FE636B34E253F1562 |
| SHA1: | 6EF2957FDEDDC3EB84974F136C22E39553287B80 |
| SHA-256: | B6DC74E4A39FFA38ED8C93D58AADEB7E7A0674DAC1152AF413E9DA7313ADE6ED |
| SHA-512: | 42D00510CD9771CE63D44991EA10C10C8FBCF69DF08819D60B7F8E7B0F9B1D385AE26912C847A024D1D127EC098904784147218869AE8D2050BCE9B306DB2DDE |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4616 |
| Entropy (8bit): | 0.13784977103055013 |
| Encrypted: | false |
| SSDEEP: | 3:7FEG2l+sK/FllkpMRgSWbNFl/sl+ltlslN04l9XllE:7+/lzSg9bNFlEs1E39M |
| MD5: | 30234BF40C378CCE2C49A6D2254BC772 |
| SHA1: | 7291B9A78872D78C3C223C436CAD8C20F082EA1D |
| SHA-256: | EAD97EC27E700B263835823856225994C822F83B861344023BFBB8F17D2BFA21 |
| SHA-512: | 6EC0C62CFC9DF52C1927B35DDABF716752057D83074A30D5EFA66DC1C13662306D2FC10FF46A6D817F4328BB62F7755677C6DC32BB07A07E456647D54F245199 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 32768 |
| Entropy (8bit): | 0.0446603401158491 |
| Encrypted: | false |
| SSDEEP: | 6:G4l2MhFy8+4l2MhFy8PqL9XXPH4l942U:l2l8d2l8i5A0 |
| MD5: | E7BD639A6E9C15818E68F26C996CEC63 |
| SHA1: | 6E37495144174E4EB0CB82FA96B82B7B0E77092E |
| SHA-256: | 7C56C0D99D5D2BA4420070316F8B92FBA3354EC7608A79A1314A46DAB3B25BA0 |
| SHA-512: | F364CE71373E38CD8329AB6DDACDB238ECEFBFD4F692120A9EBFA75C732510C56022C7DEECE224A4762CCF5975C104ECAEA1FB7F5EC97509CE6226D3AB022E1D |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | modified |
| Size (bytes): | 45352 |
| Entropy (8bit): | 0.396570392435988 |
| Encrypted: | false |
| SSDEEP: | 24:KgFXAQMIzRDIyill7DBtDi4kZERDIyxqt8VtbDBtDi4kZERD:HAQjNill7DYMxxO8VFDYM |
| MD5: | E49BB193AFF4ECE82B29F2B8F5049BD8 |
| SHA1: | E5D0F97249CAB866829C66062F231CB3BC83FCB3 |
| SHA-256: | F38F747259D57C168E481FFE62A19FBF709EB66630FE318AC83D1817F1688A6B |
| SHA-512: | 66AE6139E91D797DEA86298FDC0CF8C2A7898A8B99667C6E1DB210E636FF83A7879505AB07B2FD3216938DFDDA193EB83D40082419A9837E1E3395A385E188C3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 12583 |
| Entropy (8bit): | 7.946884846402382 |
| Encrypted: | false |
| SSDEEP: | 192:f3xJ+b17p29hR7YaiG8BnZLDdfAw/OliOYDsTGWGYWdR2WlcfvTAD8EfeF4kqH:fhJ8IDrQTHtAzxSsKlYyR2UTfeF+ |
| MD5: | 82C4F9B1EE2532CED9218A8230B02ACE |
| SHA1: | 65C57B72D3ABC2F9196338595A3986385A77ACA2 |
| SHA-256: | 82CF0D93349DEC7A1899136888925544F69AF7DB9085BC7AB2078E303A94C1BB |
| SHA-512: | 2EEA256D78F757ADF8730E7A03683BE862B55AB88BE26DADB85C890E26DB65C8A6FCB74C92A733BA1648C8719B2C04679EA582546D1E82979B6C9CD20B0D2520 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 51905 |
| Entropy (8bit): | 7.993775811647558 |
| Encrypted: | true |
| SSDEEP: | 1536:R/xUTscCu3c0wuQJ7k8HpNP2T+shq9qYoaVi9zg:R/1cCuq71A+shuJViVg |
| MD5: | 277DF12FC4595F71C1547C102D35500C |
| SHA1: | 787606F044CD88BE8FEA2836F0FE75604D104694 |
| SHA-256: | C45D845122D50A0EEBFA433B088D10B45FE61B3E932524B78D81D678D49F268E |
| SHA-512: | 74952BD0FC18F129D530E938B86769385206B15C955419806C7BA678F7E991EF8CDD61A8C5E7B1FD355857D295AA5011EAA5F6CB71A7A2F745CF476C7C482998 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{06449F0E-441D-4BD5-8997-03F32AA50A48}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3764 |
| Entropy (8bit): | 3.0577789051694846 |
| Encrypted: | false |
| SSDEEP: | 48:li7s+3w1TmLihC5T0fzXNhgggggkT2b9/AI2WM:li7st5Zhgggggko9YI2J |
| MD5: | 6154FB6D8E89B9D2E502E657F5B5795D |
| SHA1: | AD557F3C6CC5F05AAEDA9CF65620AA30CE5094F8 |
| SHA-256: | 20F393E0C44EA0291D71C6A66EC0268E66939207E06A9C3528F70C9CFF8659A2 |
| SHA-512: | F900F67EA3ACEF4AE6DE8C2F136D6130BA9DC50029C03B80F1DA40C82A65775F1E53BC5A3CDF66804E630D4465C8D6564E3CD013BEB6CF3B70139267DE932A37 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728564113853210200_38D7F205-5C57-48A1-8959-C4195BE2998A.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.16474608948520722 |
| Encrypted: | false |
| SSDEEP: | 1536:6tdMAibfZ0TfuOTRdnLJJGzBRmQlJ6uxZ3iWmojeXWEY6FOrwo2xAhbipGKqq9Fh:2KfGCOTLjFC6z6bq |
| MD5: | 740D2641B6F7B9424B0BED08246FA86B |
| SHA1: | E945017E5689AD230D00CD991E540E3594839261 |
| SHA-256: | 123DFC78CECD22382A9C14B97CCC62A1FF94A27414DB36261DD2128C8189935B |
| SHA-512: | ABFE385DF5AE23D9BCAE00C5D4BAD30460FEF3E3CAD4CAFE8B8C96357D8A7B3F7F1332BDAD148483EFC1533E3C9BA126E76B1333B2206DE40692F7832B4D9713 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728564113854207800_38D7F205-5C57-48A1-8959-C4195BE2998A.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | 3:: |
| MD5: | 8F4E33F3DC3E414FF94E5FB6905CBA8C |
| SHA1: | 9674344C90C2F0646F0B78026E127C9B86E3AD77 |
| SHA-256: | CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC |
| SHA-512: | 7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241010T0841530636-6712.etl
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 106496 |
| Entropy (8bit): | 4.488778176932979 |
| Encrypted: | false |
| SSDEEP: | 3072:k4mZ72gZYFyXHY+MJ9Ifv+dZ4Hd2vNdhlZxk4Y0HvD4mInRnlXJnjA:2ZYFyXHY+MJ9Ifv+dZ4Hd2vNdhlZxk4/ |
| MD5: | A77BCD0952ED7AB336E5A75D0F4B9862 |
| SHA1: | DFFF88EC65513BA103CD2EFAC47EA9A967AEA187 |
| SHA-256: | FC4AA44DFD5E3DF096569EADB8276C10364152DD87886C5179C268DFE0B3F203 |
| SHA-512: | D2D60C9554ADCD52C7DE43798FB7D3FC85EF9A83ADCBF513490E7B81FE5D403DEAD562594527ADDE5E8C4C0DB4E4D09FBCCD86330A8C67AA64687CE8ED5E0005 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 30 |
| Entropy (8bit): | 1.2389205950315936 |
| Encrypted: | false |
| SSDEEP: | 3:Telt:e |
| MD5: | 7CB3C0545ACE82BE690BF80C90EB3944 |
| SHA1: | 00A1DB877D74CD3AE6CCD13A36E78F496EC92CC0 |
| SHA-256: | 4E252094343A7D06FAE0011139C5C0C400DBFA46C2A2827D84839A281556EEF9 |
| SHA-512: | B675C0857C89D67ADF456DCFDC6A71B027BECFC886A0D4A17C521632C8128A70FFFCE04171F4DEB9268924ED10EEB1205A0C65C6E9FF4829E287CEE9F5EA4005 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 16384 |
| Entropy (8bit): | 0.6694773661801112 |
| Encrypted: | false |
| SSDEEP: | 12:rl3baFYVqLKeTy2MyheC8T23BMyhe+S7wzQP9zNMyhe+S7xMyheCEnVm:rymnq1Py961EVm |
| MD5: | 112CCF629ACC9E2F5C1146002FF0DA5A |
| SHA1: | 0A12C8D34131D22A3235149CC00245A7FBBCB405 |
| SHA-256: | BCFA3D7BDFB7BB35044330ED98A75BF84D7F4805A9889463ECC8FC22851B31BE |
| SHA-512: | 832CEA83FE21BB6BEB8E8783F63DCC27D41972E9F15541B20F5C63B6CB7AE0AB6D8F120E23F497A134B4FF26F8232FCC410C04B30FDC174E3105CAE6205B50AC |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2673 |
| Entropy (8bit): | 3.9816202991944696 |
| Encrypted: | false |
| SSDEEP: | 48:8lbdKT26lHqidAKZdA1FehwiZUklqehVy+3:8lcTq2y |
| MD5: | 6FE7E256168149A3F8A88A2AFD86BA39 |
| SHA1: | 4BB7A76081182D5D02FFD09230BC66ACB71FEA40 |
| SHA-256: | 854F944BCC51E10103A61AD1D2312E41B4FE4BE6BCF51E998025C36C95A1A875 |
| SHA-512: | 5C5D9C7493A565214CC9AC3E69E56F903CE5C3DEF240AB9AE2F81A7938906F5A371259A5DBC21BAB40F3E49C9B8B08D19DA27B92200530DC9304ED8FED496292 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2675 |
| Entropy (8bit): | 3.993800067631335 |
| Encrypted: | false |
| SSDEEP: | 48:8KbdKT26lHqidAKZdA1seh/iZUkAQkqehmy+2:8KcTE9Qry |
| MD5: | 0334B2F7154670788BE609D3E502C7D1 |
| SHA1: | D610CF3F4B62EA37D06C67239EA4155B32BE108B |
| SHA-256: | F2B2C4698637ABF70996EA160546375C2C6919D7F06B4A377E9D757C71C137BF |
| SHA-512: | DB48ED837984152297E410476001A7ED3046742331B9E81D2E85F5636984C20B2CB73F09C52DB211997E0DC4A05C4AC98A1E18966B3C0535654270C98473FC10 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2689 |
| Entropy (8bit): | 4.00530806057263 |
| Encrypted: | false |
| SSDEEP: | 48:8+dKT26AHqidAKZdA14meh7sFiZUkmgqeh7sMy+BX:83T/nyy |
| MD5: | 0CF24C771B24D110DE33956A87B4D3A6 |
| SHA1: | 011991FD5A8F30C2D20B3458660E21E72A1426A1 |
| SHA-256: | 915715DA00A586587CF7370410D391FEA485C8F85DBAB5E4B241E7D2C1A66AB2 |
| SHA-512: | D136A37B448B43885AC227BAFDB8C67F32141107F7E83F9308556298A4B6262113A43DFFA657F571AFA7D8FEF1EC70075F9945E224AC2015C8EC415C3181F229 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.996837210218356 |
| Encrypted: | false |
| SSDEEP: | 48:8ckbdKT26lHqidAKZdA1TehDiZUkwqeh6y+R:8ckcTfUy |
| MD5: | E9B82A0C5260EDD1791EB14E5E8CF953 |
| SHA1: | 477CB7AC33D26C351CB0CEC4BC985A2C1D81AC20 |
| SHA-256: | 23D6AA4F841285D2100492E9F999DE619C63E328491736BFA2FA93D42F72FFEC |
| SHA-512: | 45702BFD7965A817370E38FA692B2F47AEA6644F4AB0D75AD9F10D3D4977D183282182DA905E2535C638F2F6410D133DE7262BFA9A3FC457652C659B4DA5667D |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.984081389400462 |
| Encrypted: | false |
| SSDEEP: | 48:8lbdKT26lHqidAKZdA1dehBiZUk1W1qeh4y+C:8lcT/9Yy |
| MD5: | F9C91B99B5E0C7891707E65B74673330 |
| SHA1: | 490398A0FE174346870509F5435929B7CBD591F8 |
| SHA-256: | AA571DDC8E8AA1B3AEDE0BC9BB898FE124A368AE76A13FDD18FB8AE2D073AC97 |
| SHA-512: | 5C963484CCC97E570934A71DEB279D8CF3AC22643EFB74911602463A3490CBC0154A094D6E18AB8D570855BE095FE9104CE6AC0E9215425F4490883E2F8025B0 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2679 |
| Entropy (8bit): | 3.9885190352137414 |
| Encrypted: | false |
| SSDEEP: | 48:8nbdKT26lHqidAKZdA1duTeehOuTbbiZUk5OjqehOuTbyy+yT+:8ncTDTfTbxWOvTbyy7T |
| MD5: | A17B7DBA552B6C2DC56EFF842295EDF9 |
| SHA1: | 88EBCC5A85BD419EAF5A071924192BD73B072B2C |
| SHA-256: | 1622182C12255E96617D75EB0950C3C008EEFB14FFEDEE129B074D5DD9830D94 |
| SHA-512: | 73EC6E5B06AEAF4E26C51E79A05030661AB3115075AC46698D0110F2C66321573CC579BCD218773849DA9A9DB9D5F8BDB1D304A508F5181A69CD359C974BA30C |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 271360 |
| Entropy (8bit): | 4.97559239338379 |
| Encrypted: | false |
| SSDEEP: | 3072:iCKfEIn2YbMC9TfnsM2GkIFK3xCRp9Gx/p9:zHYlf9AM2VItR2/ |
| MD5: | 1398D1D08AC596BD8C3F98FFAAB2E25A |
| SHA1: | 180451E2833AA1E6A5D739BD02834A9487AB689E |
| SHA-256: | 99EA717AD792956722F751B82A025ED3217B949E7BA9623E9A139A9255D6441C |
| SHA-512: | 2A52E7B3E52F3402E225E70F5AD00A67C52C6DDEF212C55FD6FA6F257EE1A181DD168FF91C0CE38329A8B74E6D06B4DEA96D95C5937F3F316D78D13D07810823 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 262144 |
| Entropy (8bit): | 4.266733218101383 |
| Encrypted: | false |
| SSDEEP: | 1536:XDW53jEpEHP4qQ10PAwr1lgBU8xfXvPsMIqCIBjCMf8W2Phe2giMG89KuW53jEpj:X1p95r5vDC4zf5KM2Dkwcp9LyE |
| MD5: | 48E9DAB873B5D02BB24626076586C877 |
| SHA1: | 704B796022FF17CD20FC8A73D3899B56E1620CAF |
| SHA-256: | 6E62C526C0482E7F816AC372FBFD30DCA4D382E131B6FCD084C0DE1D170A498E |
| SHA-512: | E798D122FE4B85E43A42914CD09973D28C882BD9093FCC9B4B7EDF1A951591E0DA3235B055610D54FB4264289B117D97C8F6FDE58AD5CE1CFFA56F52B7953B01 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1108 |
| Entropy (8bit): | 4.620441648817938 |
| Encrypted: | false |
| SSDEEP: | 24:twn8ztusAI55S8PSfxHnxjo2MRkGDVBJyB54GFJEE4GTMwlF8WgxRt:68/NI4WxH5aIlTlFgR |
| MD5: | 6AFB13186E9A763923D81539AC40DFD5 |
| SHA1: | C60F20D279378ED3DA708B6B6BD501A1A8254BAE |
| SHA-256: | 3888AB1A5C21B5177EF0C6D4F879C7BC9539C772F134FED8766E0E8B1FE8FACF |
| SHA-512: | 2B71A30172F7EB601949FE0EF29C8F55BB37B5EF4A33104B8E99F12AAE7068B9FEEECD8B8E168528924480D053555BB5F6B48DFBFAAAFFB64928161A7DCFA25C |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3897 |
| Entropy (8bit): | 4.939684101691333 |
| Encrypted: | false |
| SSDEEP: | 48:c3UknLhEnH9LuCH9LuzH9Lue+P/hlc/SDM6Yr9wFlYKwNusa4uhFNWupyNR9yNXj:xknCnl8I3cmY5nudcjRal4Ju |
| MD5: | 7DFEED736D6A66B947A8D7DD6E776EB2 |
| SHA1: | D44FBB142B9943F5732E372BACC8E12225857732 |
| SHA-256: | E56E9E257859DE5DE4DF546FA0F47526CE55B72BF4B12EE2AAFF44D3A63A2A18 |
| SHA-512: | D31CB064871ABF6C72E2134BD26416B401BB57EC36E3B2E2BE126611E9E3875A4EF9EF5D0418FEBC31B5C81959927DD0D904D87B7F3EECD73FBCF665F69BB72B |
| Malicious: | false |
| URL: | https://stats.sender.net/img/sender-logo-coloured.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 21702 |
| Entropy (8bit): | 7.986450524379623 |
| Encrypted: | false |
| SSDEEP: | 384:9HAxODiSxah//aMsfc6eIWdRsvv/gKjaoTI/O+YVmsSqh6vJqb8vw2+:/01iRLeIYsXYBR/OFVTjcs8vwL |
| MD5: | 45299E83AE30B9807C5C8C9EC5642D3B |
| SHA1: | 84D8A2FD843BA0C566829BB3113460353A98307C |
| SHA-256: | 92E68E3B34A4FBA6DFF4054C841ECE330A0D7C97A5C29DF46A70292C60FC08A6 |
| SHA-512: | CA62CDE68E82179FD94023F90E2834A2FA00BEEF2A471AB9F311C0CA72EAAA6B06AADAD1E8545BDACB0F22BACA18EFE188F93F88897589B296074F33214D406B |
| Malicious: | false |
| URL: | https://stats.sender.net/img/compressed/error-occurred.webp |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1108 |
| Entropy (8bit): | 4.620441648817938 |
| Encrypted: | false |
| SSDEEP: | 24:twn8ztusAI55S8PSfxHnxjo2MRkGDVBJyB54GFJEE4GTMwlF8WgxRt:68/NI4WxH5aIlTlFgR |
| MD5: | 6AFB13186E9A763923D81539AC40DFD5 |
| SHA1: | C60F20D279378ED3DA708B6B6BD501A1A8254BAE |
| SHA-256: | 3888AB1A5C21B5177EF0C6D4F879C7BC9539C772F134FED8766E0E8B1FE8FACF |
| SHA-512: | 2B71A30172F7EB601949FE0EF29C8F55BB37B5EF4A33104B8E99F12AAE7068B9FEEECD8B8E168528924480D053555BB5F6B48DFBFAAAFFB64928161A7DCFA25C |
| Malicious: | false |
| URL: | https://stats.sender.net/img/vectors/vector-group.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 801 |
| Entropy (8bit): | 4.671035276083725 |
| Encrypted: | false |
| SSDEEP: | 24:tAYDDuBlUDla0s6bGeuNGjJ1+BNGm1AwU:vDi0sgqv9S |
| MD5: | 564A7F44F5912C58F688C788855B4EFE |
| SHA1: | 40B37B80AE91ADE5982B691F8B42A3B8E3F3B3AC |
| SHA-256: | 1649AE705B570522F7AA00AAEE848BDEC024822C39B6D4C84E1CF4FFB48A6C06 |
| SHA-512: | 024807CDBEAC093918CF960A0FBE99F4F0BFA0976F54D4BFB67BE0B6762BA8C2A0059E60DEE91B6CB3BB661B2EBFC33316CBF64F2BF55052A33D543B9D6AF625 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 68956 |
| Entropy (8bit): | 7.996948952615057 |
| Encrypted: | true |
| SSDEEP: | 1536:bO5cyFJccdE82S4WLO6PaExqPAK9N+GKzeAwc7qE+6JKcL0dzHOJnTz4EZ:GcyoS4WLI9NbKzeANquL4aJTz4q |
| MD5: | 9C1ACA0D3F7E29E25A05B3799F3D14DC |
| SHA1: | 6DA26EF84E51EA45022A9F25FAB790D9BC648CCF |
| SHA-256: | 4889BED9299840D1C7A2D663D0C90F4741991D5F70A290CCC636B84411FA5FDD |
| SHA-512: | 5E968EF1D33651088DC79EA2A944A84E94AF95239864E148B1E6C2CBA550B229DFA7958440AEE3DC79A45892602EEC4F6CAB785250210914B7D2A93DB846D697 |
| Malicious: | false |
| URL: | https://stats.sender.net/fonts/suisseintl-semibold-webxl.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 801 |
| Entropy (8bit): | 4.671035276083725 |
| Encrypted: | false |
| SSDEEP: | 24:tAYDDuBlUDla0s6bGeuNGjJ1+BNGm1AwU:vDi0sgqv9S |
| MD5: | 564A7F44F5912C58F688C788855B4EFE |
| SHA1: | 40B37B80AE91ADE5982B691F8B42A3B8E3F3B3AC |
| SHA-256: | 1649AE705B570522F7AA00AAEE848BDEC024822C39B6D4C84E1CF4FFB48A6C06 |
| SHA-512: | 024807CDBEAC093918CF960A0FBE99F4F0BFA0976F54D4BFB67BE0B6762BA8C2A0059E60DEE91B6CB3BB661B2EBFC33316CBF64F2BF55052A33D543B9D6AF625 |
| Malicious: | false |
| URL: | https://stats.sender.net/img/vectors/vector-group-2.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3897 |
| Entropy (8bit): | 4.939684101691333 |
| Encrypted: | false |
| SSDEEP: | 48:c3UknLhEnH9LuCH9LuzH9Lue+P/hlc/SDM6Yr9wFlYKwNusa4uhFNWupyNR9yNXj:xknCnl8I3cmY5nudcjRal4Ju |
| MD5: | 7DFEED736D6A66B947A8D7DD6E776EB2 |
| SHA1: | D44FBB142B9943F5732E372BACC8E12225857732 |
| SHA-256: | E56E9E257859DE5DE4DF546FA0F47526CE55B72BF4B12EE2AAFF44D3A63A2A18 |
| SHA-512: | D31CB064871ABF6C72E2134BD26416B401BB57EC36E3B2E2BE126611E9E3875A4EF9EF5D0418FEBC31B5C81959927DD0D904D87B7F3EECD73FBCF665F69BB72B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2955 |
| Entropy (8bit): | 4.947787096769878 |
| Encrypted: | false |
| SSDEEP: | 48:mMW0RuRVRNRhsjvydQvpTZ6YdR6FwyutyudzxL65rYkrDrY/reLrYhrY/rmF:XDupNLsLiw6YdQ+DddL65rYkrDrY/rew |
| MD5: | B466939C0189393CE047AC91FA448EDA |
| SHA1: | F051DEA42FF215555BE44BDF1AF20CD7947C440D |
| SHA-256: | D927AA31D8F6C57AD03C05E3F8FB3B2B7B8BD52F195D1AA4906DF5E4C5A94FB5 |
| SHA-512: | EAF4642789CD65CF9369D6696C3FF410FE81AA06588F44188BE883D97BFD43FB79E5F36B526A25CB0781BD32C457BEF5E327A661DF66E64ED2B1CB47069667FB |
| Malicious: | false |
| URL: | https://campaign-statistics.com/link_click/epjJDQ-oZ7P8Dz-3Dc7Cq/b026cc61e40b597ae3518c0b47e7793d |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 21702 |
| Entropy (8bit): | 7.986450524379623 |
| Encrypted: | false |
| SSDEEP: | 384:9HAxODiSxah//aMsfc6eIWdRsvv/gKjaoTI/O+YVmsSqh6vJqb8vw2+:/01iRLeIYsXYBR/OFVTjcs8vwL |
| MD5: | 45299E83AE30B9807C5C8C9EC5642D3B |
| SHA1: | 84D8A2FD843BA0C566829BB3113460353A98307C |
| SHA-256: | 92E68E3B34A4FBA6DFF4054C841ECE330A0D7C97A5C29DF46A70292C60FC08A6 |
| SHA-512: | CA62CDE68E82179FD94023F90E2834A2FA00BEEF2A471AB9F311C0CA72EAAA6B06AADAD1E8545BDACB0F22BACA18EFE188F93F88897589B296074F33214D406B |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 68316 |
| Entropy (8bit): | 7.997124335291101 |
| Encrypted: | true |
| SSDEEP: | 1536:giF8ETh3JEwSFImKgzIWSGQNxpbnKr/JUzuwFDBx:giFTh3JcFvsGMjKNU6wFDBx |
| MD5: | B5C7CF1C74AA9B19421670F7E0986D67 |
| SHA1: | 540C72F2F67AB5247CD45AD2D2D9E5E388F8A854 |
| SHA-256: | 595C9B95CC4D52B94A19987DC9F2E2743C4E74F140510B04A91A9602C6E5BDDF |
| SHA-512: | 058367BD3D8F98063558A6F78591EF7F0199DC51CA8F0D48A2A5C92B0C7931FEFAF5ED388A3FEED14F04A3AB477149C911E9FC14575D1A356E22DE3AC8FCB9D7 |
| Malicious: | false |
| URL: | https://stats.sender.net/fonts/suisseintl-regular-webxl.woff2 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 8333 |
| Entropy (8bit): | 4.798772317609426 |
| Encrypted: | false |
| SSDEEP: | 192:Qr+7sXrO9pdQcgvkhBkWcn9VrxKejcogCi8SwRMOL+/6:SXWpcWaxKejcNBzzOL+C |
| MD5: | 0021185F2B750FEE3930EA674E53FF8D |
| SHA1: | 1ED183067471046904279D867F8358D09A0718FD |
| SHA-256: | A9AF6CCC7986217BF89585732B962366ECF4AA4867866B4D37821B3566DFE46C |
| SHA-512: | 1080B9E7F4988894E2C44FCCFFAC3242EF0737C28F6EED7EB837589ABB5CABE57503681A16406A40FBBB5BFEFAF421A2F903A0D6EE18F9D10D3BEF7F38D61215 |
| Malicious: | false |
| URL: | https://stats.sender.net/css/styles.css |
| Preview: |
| File type: | |
| Entropy (8bit): | 6.096297076513513 |
| TrID: | |
| File name: | QUOTE 452362.eml |
| File size: | 115'990 bytes |
| MD5: | c5da031682d07545611f4336226a24cf |
| SHA1: | ed3e66f0f96f0efffcff680c9279a3865a0f0745 |
| SHA256: | 23b733192fc8d50db460b5e20058bfde80c709ec8a978566905bf7644ec20a67 |
| SHA512: | 424688f2258935406ea943ce3fe1541609e42446427eaaf0179b3da37bdccd2e1bb8f7c94150b8239cef41ce6549b4a4482669c0321c7f17194f588182c50f72 |
| SSDEEP: | 3072:8YP9MBraVoUFVSOXSVWfGNQjovyEwRx/p:8e9MuuOXy3Nbstp |
| TLSH: | 2CB3F2B027121972AA101E107B1CBA197E71BD0F517B94D1B8FF524E56BEFFA2D90B80 |
| File Content Preview: | Authentication-Results: relay.mimecast.com;...dkim=none;...arc=pass ("microsoft.com:s=arcselector10001:i=1");...dmarc=none;...spf=pass (relay.mimecast.com: domain of colin.joyce@bridge-care.com designates 40.107.121.137 as permitted sender) smtp.mailfrom= |
| Subject: | QUOTE 452362 |
| From: | Colin Joyce <colin.joyce@bridge-care.com> |
| To: | Colin Joyce <colin.joyce@bridge-care.com> |
| Cc: | |
| BCC: | |
| Date: | Tue, 08 Oct 2024 09:43:24 +0000 |
| Communications: |
|
| Attachments: |
|
| Key | Value |
|---|---|
| Authentication-Results | relay.mimecast.com; dkim=none; arc=pass ("microsoft.com:s=arcselector10001:i=1"); dmarc=none; spf=pass (relay.mimecast.com: domain of colin.joyce@bridge-care.com designates 40.107.121.137 as permitted sender) smtp.mailfrom=colin.joyce@bridge-care.com |
| Received | from CWXP123MB3879.GBRP123.PROD.OUTLOOK.COM ([fe80::df29:319d:9426:c55]) by CWXP123MB3879.GBRP123.PROD.OUTLOOK.COM ([fe80::df29:319d:9426:c55%7]) with mapi id 15.20.8026.020; Tue, 8 Oct 2024 09:43:24 +0000 |
| X-MC-Unique | GVZEKBH0OQy7s3MgctFECg-1 |
| ARC-Seal | i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=Ljim2vGhtkmi0g4i70+Wuhz0l5g/q50faL0r+ZBqDfMWi+8Dpmc/x6GHln8FYyECSD6Yqzg478PCvdKEKqrrygXW1dWeKzQBeUebJFJj/PyJET+vSUHId3MgLrb6YFLv57CzODNEPZOYV9GWdYdb41OnKYVwX3iSUre9GXgQMMjEw6XRnou/yP771AceINp9j+Dm1VKotJlvcGETBh8icy8gEg/jlBijzF4aE+/8dfS6aNN+oLKOO1HWmr53o3U1PVGTtoqaeR5iAwKR4WS9GtzIAO7giGYzjfs4y4+mcxzeXbFp8+GNulq07w8hfIIM1DBpdWvt9aOIT+0wPEe2aQ== |
| ARC-Message-Signature | i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=0plMvEcFrKLFUZ7QTqetKaHfQOlh+xCaMpUnuoPCLt4=; b=ku+NJLC0y3S7F6u3Xu1c3GO/fPNHdZ6PPug+3lEFC6fOiZx3V5OKOK4B+I0NRnxkUEJ9Qwnr9MCD0U0/cBT8fVB2iDRDxLKgsdDzNJIwr/1bAeR8HoiJE1Qznei2DfemOpeaYe0woxiXk73AUuX3ZtxusNyX1S/F+PdZkJsgJHVV8f7VgKtzruFFx6LWFEx7MS7iMUTh//6ARbUIYG2bP3mpmjcvNzINSecc7DLaWkU0bV9Frz2Uv4hD3yB0OM0fQuqJMQ2ivU44rkYu0frZP2p7DAxTfXunsHJeH/ZfF+ozyWqWGMbpWDfoJ03rV7lDFCc1lMDFOoz8Vyc9dnt9BQ== |
| ARC-Authentication-Results | i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=bridge-care.com; dmarc=pass action=none header.from=bridge-care.com; dkim=pass header.d=bridge-care.com; arc=none |
| From | Colin Joyce <colin.joyce@bridge-care.com> |
| To | Colin Joyce <colin.joyce@bridge-care.com> |
| Subject | QUOTE 452362 |
| Thread-Topic | QUOTE 452362 |
| Thread-Index | AQHbGWaEpDemU9Id/kCUPSBurAi1OQ== |
| Importance | high |
| X-Priority | 1 |
| Date | Tue, 08 Oct 2024 09:43:24 +0000 |
| Message-ID | <90FEA98E-0B26-415B-8DC5-C46FE335539C@bridge-care.com> |
| Accept-Language | en-GB, en-US |
| X-MS-Has-Attach | yes |
| X-MS-TNEF-Correlator | |
| x-ms-publictraffictype | |
| x-ms-traffictypediagnostic | CWXP123MB3879:EE_|LO0P123MB7766:EE_ |
| x-ms-office365-filtering-correlation-id | 0932229d-c664-4ba9-5c19-08dce77da755 |
| x-ms-exchange-senderadcheck | 1 |
| x-ms-exchange-antispam-relay | 0 |
| x-microsoft-antispam | BCL:0;ARA:13230040|7416014|376014|1800799024|366016|38070700018 |
| x-microsoft-antispam-message-info | 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 |
| x-forefront-antispam-report | CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:CWXP123MB3879.GBRP123.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(7416014)(376014)(1800799024)(366016)(38070700018);DIR:OUT;SFP:1102 |
| x-ms-exchange-antispam-messagedata-chunkcount | 1 |
| x-ms-exchange-antispam-messagedata-0 | 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 |
| MIME-Version | 1.0 |
| X-OriginatorOrg | bridge-care.com |
| X-MS-Exchange-CrossTenant-AuthAs | Internal |
| X-MS-Exchange-CrossTenant-AuthSource | CWXP123MB3879.GBRP123.PROD.OUTLOOK.COM |
| X-MS-Exchange-CrossTenant-Network-Message-Id | 0932229d-c664-4ba9-5c19-08dce77da755 |
| X-MS-Exchange-CrossTenant-originalarrivaltime | 08 Oct 2024 09:43:24.3861 (UTC) |
| X-MS-Exchange-CrossTenant-fromentityheader | Hosted |
| X-MS-Exchange-CrossTenant-id | de9fe840-b9a9-44da-aed4-463746cf750b |
| X-MS-Exchange-CrossTenant-mailboxtype | HOSTED |
| X-MS-Exchange-CrossTenant-userprincipalname | +/YvuTjFmEr98QS+Y4JIc8nhaWLch2kFG7oEhKeZlylyweH1BHl6i8mHac1h3aIDifpDVyB22wNBsxm8TIBGhk5uDI4Loab4lTzXih7eYFs= |
| X-MS-Exchange-Transport-CrossTenantHeadersStamped | LO0P123MB7766 |
| X-Mimecast-Spam-Score | 6 |
| Content-Language | en-US |
| Content-Type | multipart/related; boundary="_005_90FEA98E0B26415B8DC5C46FE335539Cbridgecarecom_"; type="multipart/alternative" |
 | |
| Icon Hash: | 46070c0a8e0c67d6 |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Oct 10, 2024 14:41:55.013655901 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Oct 10, 2024 14:41:55.326044083 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Oct 10, 2024 14:41:55.938040972 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Oct 10, 2024 14:41:57.143021107 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Oct 10, 2024 14:41:58.070611000 CEST | 49689 | 80 | 192.168.2.16 | 192.229.211.108 |
| Oct 10, 2024 14:41:59.549022913 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Oct 10, 2024 14:42:00.364141941 CEST | 49706 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:00.364171982 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:00.364248037 CEST | 49706 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:00.378635883 CEST | 49706 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:00.378643990 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.166352034 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.166445017 CEST | 49706 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:01.199958086 CEST | 49706 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:01.199987888 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.200318098 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.201493979 CEST | 49706 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:01.201540947 CEST | 49706 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:01.201596022 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.523817062 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.523849964 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.523906946 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.523977041 CEST | 49706 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:01.523978949 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.524029970 CEST | 49706 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:01.524621010 CEST | 49706 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:01.524650097 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.524672985 CEST | 49706 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:01.524678946 CEST | 443 | 49706 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.657104015 CEST | 49708 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:01.657206059 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:01.657318115 CEST | 49708 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:01.657620907 CEST | 49708 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:01.657651901 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.055635929 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:02.055651903 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.055727005 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:02.056725025 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:02.056731939 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.430984020 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.431560993 CEST | 49708 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:02.431586981 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.432766914 CEST | 49708 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:02.432771921 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.432794094 CEST | 49708 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:02.432804108 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.704794884 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.704968929 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.705023050 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.705092907 CEST | 49708 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:02.705094099 CEST | 49708 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:02.705132008 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.705163002 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.705212116 CEST | 49708 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:02.705405951 CEST | 49708 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:02.705431938 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.705440998 CEST | 49708 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:02.705446959 CEST | 443 | 49708 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.751828909 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.751914024 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:02.753876925 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:02.753895044 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.754304886 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.806025982 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:02.829636097 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:02.846796036 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:02.846899033 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.847007036 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:02.847433090 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:02.847467899 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:02.871416092 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.072815895 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.072844982 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.072851896 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.072875977 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.072887897 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.072894096 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.072916031 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:03.072951078 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.072973013 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:03.073025942 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:03.073658943 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.073720932 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:03.073729992 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.073837996 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.073888063 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:03.087596893 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:03.087614059 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.087630033 CEST | 49709 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:03.087635994 CEST | 443 | 49709 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.174633026 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Oct 10, 2024 14:42:03.478030920 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Oct 10, 2024 14:42:03.649991989 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.650084019 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:03.658884048 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:03.658926964 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.659166098 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.660736084 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:03.660785913 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:03.660818100 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.964415073 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.964440107 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.964473009 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.964515924 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:03.964567900 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.964602947 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:03.964826107 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.964972973 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:03.965135098 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:03.965135098 CEST | 49711 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:03.965178013 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:03.965200901 CEST | 443 | 49711 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:04.021006107 CEST | 49713 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:04.021044016 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:04.021128893 CEST | 49713 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:04.021281004 CEST | 49713 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:04.021295071 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:04.083172083 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Oct 10, 2024 14:42:04.355000973 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Oct 10, 2024 14:42:05.054964066 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:05.055504084 CEST | 49713 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:05.055542946 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:05.056302071 CEST | 49713 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:05.056308985 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:05.056379080 CEST | 49713 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:05.056386948 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:05.293051958 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Oct 10, 2024 14:42:05.434678078 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:05.434746027 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:05.434798002 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:05.434820890 CEST | 49713 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:05.434839010 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:05.434855938 CEST | 49713 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:05.435194016 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:05.435197115 CEST | 49713 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:05.435214996 CEST | 49713 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:05.435250998 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:05.435260057 CEST | 49713 | 443 | 192.168.2.16 | 20.190.160.14 |
| Oct 10, 2024 14:42:05.435276031 CEST | 443 | 49713 | 20.190.160.14 | 192.168.2.16 |
| Oct 10, 2024 14:42:07.658185005 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Oct 10, 2024 14:42:07.706015110 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Oct 10, 2024 14:42:07.961049080 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Oct 10, 2024 14:42:08.569013119 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Oct 10, 2024 14:42:09.779031992 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Oct 10, 2024 14:42:12.191085100 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Oct 10, 2024 14:42:12.508053064 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Oct 10, 2024 14:42:13.958003044 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Oct 10, 2024 14:42:16.993052006 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Oct 10, 2024 14:42:22.110030890 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Oct 10, 2024 14:42:25.880206108 CEST | 49714 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:25.880275011 CEST | 443 | 49714 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:25.880343914 CEST | 49714 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:25.881339073 CEST | 49714 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:25.881351948 CEST | 443 | 49714 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.373765945 CEST | 443 | 49714 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.374301910 CEST | 49714 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.374346972 CEST | 443 | 49714 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.375325918 CEST | 443 | 49714 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.375420094 CEST | 49714 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.378345966 CEST | 49714 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.378386021 CEST | 49714 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.378436089 CEST | 443 | 49714 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.378448963 CEST | 49714 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.378484011 CEST | 49714 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.379044056 CEST | 49718 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.379091024 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.379148006 CEST | 49718 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.379375935 CEST | 49718 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.379398108 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.603949070 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Oct 10, 2024 14:42:26.850004911 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.850346088 CEST | 49718 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.850378036 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.851372004 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.851449013 CEST | 49718 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.853435040 CEST | 49718 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.853534937 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.855109930 CEST | 49718 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:26.855118990 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.907013893 CEST | 49718 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:27.100939035 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.101207972 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.101241112 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.101265907 CEST | 49718 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:27.101289034 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.101346016 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.101393938 CEST | 49718 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:27.103037119 CEST | 49718 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:27.103055000 CEST | 443 | 49718 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.114713907 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.114762068 CEST | 443 | 49719 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.114836931 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.115264893 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.115283012 CEST | 443 | 49719 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.133981943 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.134035110 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.134111881 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.134159088 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.134191036 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.134219885 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.134255886 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.134263039 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.134432077 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.134536982 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.134548903 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.134685040 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.134700060 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.134828091 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.134836912 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.600104094 CEST | 443 | 49719 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.600253105 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.600428104 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.600441933 CEST | 443 | 49719 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.600600004 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.600616932 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.601578951 CEST | 443 | 49719 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.601655960 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.601675034 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.601727009 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.602793932 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.602861881 CEST | 443 | 49719 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.604259968 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.604336023 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.604424000 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.604432106 CEST | 443 | 49719 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.604535103 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.604545116 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.610626936 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.612035036 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.613305092 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.613312006 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.613441944 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.613450050 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.614312887 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.614387035 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.614500046 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.614553928 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.614921093 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.614984035 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.615243912 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.615309000 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.615436077 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.615443945 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.615534067 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.615539074 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.655976057 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.655976057 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.655988932 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.655998945 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.745440006 CEST | 443 | 49719 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.745517969 CEST | 443 | 49719 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.745663881 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.745949984 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.745965004 CEST | 443 | 49719 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.745991945 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.746014118 CEST | 49719 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.746644974 CEST | 49723 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.746689081 CEST | 443 | 49723 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.746773005 CEST | 49723 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.747050047 CEST | 49723 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:27.747064114 CEST | 443 | 49723 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.768121958 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.768162966 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.768197060 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.768217087 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.768224955 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.768237114 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.768260956 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.768548012 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.768600941 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.768613100 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.768712997 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.768764019 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.768773079 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.769299984 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.769354105 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.769364119 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.786082983 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.786137104 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.786180973 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.786215067 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.786227942 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.786236048 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.786271095 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.786278009 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.786282063 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.786309004 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.786344051 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.786384106 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.786389112 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.786978960 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.787030935 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.787039995 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.788275957 CEST | 49724 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.788324118 CEST | 443 | 49724 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.788398981 CEST | 49724 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.788815022 CEST | 49725 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.788883924 CEST | 443 | 49725 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.789048910 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.789089918 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.789122105 CEST | 49725 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.789381981 CEST | 49724 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.789396048 CEST | 443 | 49724 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.789426088 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.789606094 CEST | 49725 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.789638996 CEST | 443 | 49725 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.789836884 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.789865017 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.791012049 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.791107893 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.791116953 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.814950943 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.814959049 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.838534117 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.838582993 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.838613987 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.838643074 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.838656902 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.838675022 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.838705063 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.838725090 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.838736057 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.838767052 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.838773012 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.838819027 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.838857889 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.839832067 CEST | 49720 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.839848995 CEST | 443 | 49720 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.841816902 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.841861963 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.841986895 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.842200041 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.842211008 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.846978903 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.859060049 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.859105110 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.859132051 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.859138012 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.859169960 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.859184027 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.859220982 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.859255075 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.859271049 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.859282017 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.859397888 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.859843969 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.860229969 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.860263109 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.860277891 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.860285997 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.860321999 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.860373974 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.860382080 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.860428095 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.860862017 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.860914946 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.861067057 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.861098051 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.861110926 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.861128092 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.861139059 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.861165047 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.861308098 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.861315012 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.876940966 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.877106905 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.877139091 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.877202034 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.877213001 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.877259016 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.877518892 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.877655983 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.877712011 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.877721071 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.877916098 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.877948999 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.877963066 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.877968073 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.878031969 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.878036976 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.878155947 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.878197908 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.878204107 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.878760099 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.878788948 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.878810883 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.878815889 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.878921032 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.878926039 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.878954887 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.879064083 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.879069090 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.879703999 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.879734039 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.879755020 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.879760027 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.879820108 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.879836082 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.901209116 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.901257992 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.901278019 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.901294947 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.901340008 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.923974037 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.923980951 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.951426983 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.951513052 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.951546907 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.951575994 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.951603889 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.951602936 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.951617956 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.951641083 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.951680899 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.951688051 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.951797009 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.951848030 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.951854944 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.951898098 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.952028036 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.952084064 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.952143908 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.952179909 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.952183962 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.952213049 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.952263117 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.952270031 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.952299118 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.952308893 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.952343941 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.952502012 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.952516079 CEST | 443 | 49722 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.952538013 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.952559948 CEST | 49722 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.968050003 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.968091965 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.968127966 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.968128920 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.968188047 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.968215942 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.968491077 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.968501091 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.968542099 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.968549967 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.968570948 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.968625069 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.968628883 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.968861103 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.968864918 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.968970060 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.969016075 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.969019890 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.969074011 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.969122887 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.969388008 CEST | 49721 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:27.969397068 CEST | 443 | 49721 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.225785017 CEST | 443 | 49723 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.226139069 CEST | 49723 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:28.226156950 CEST | 443 | 49723 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.226488113 CEST | 443 | 49723 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.226886988 CEST | 49723 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:28.226953030 CEST | 443 | 49723 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.227080107 CEST | 49723 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:28.245573997 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.245870113 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.245934963 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.247014046 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.247112989 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.247464895 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.247539997 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.247684956 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.249757051 CEST | 443 | 49725 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.250094891 CEST | 49725 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.250114918 CEST | 443 | 49725 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.250475883 CEST | 443 | 49725 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.250809908 CEST | 49725 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.250889063 CEST | 443 | 49725 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.250988007 CEST | 49725 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.255842924 CEST | 443 | 49724 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.256072044 CEST | 49724 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.256086111 CEST | 443 | 49724 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.256406069 CEST | 443 | 49724 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.256839037 CEST | 49724 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.256902933 CEST | 443 | 49724 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.257000923 CEST | 49724 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.271399021 CEST | 443 | 49723 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.289007902 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.289053917 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.295399904 CEST | 443 | 49725 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.303411007 CEST | 443 | 49724 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.305001020 CEST | 49724 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.323187113 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.323463917 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.323482990 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.324525118 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.324589014 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.324975014 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.325040102 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.325140953 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.325148106 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.336972952 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.357567072 CEST | 443 | 49723 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.358035088 CEST | 49723 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:28.358088017 CEST | 443 | 49723 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.358164072 CEST | 49723 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:42:28.368980885 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.392220020 CEST | 443 | 49725 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.392355919 CEST | 443 | 49725 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.392541885 CEST | 49725 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.393166065 CEST | 49725 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.393197060 CEST | 443 | 49725 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.399756908 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.399806023 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.399835110 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.399903059 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.399926901 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.399955988 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.399980068 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.400015116 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.400867939 CEST | 49726 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.400883913 CEST | 443 | 49726 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.409385920 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.409411907 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.409527063 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.409579992 CEST | 49730 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.409590960 CEST | 443 | 49730 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.409627914 CEST | 49730 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.409852028 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.409862995 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.410018921 CEST | 49730 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.410027027 CEST | 443 | 49730 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.411276102 CEST | 443 | 49724 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.411375999 CEST | 443 | 49724 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.411716938 CEST | 49724 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.411999941 CEST | 49724 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.412019014 CEST | 443 | 49724 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.414441109 CEST | 49731 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.414478064 CEST | 443 | 49731 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.414546013 CEST | 49731 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.414800882 CEST | 49731 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.414819002 CEST | 443 | 49731 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.479470015 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.479521990 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.479562044 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.479584932 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.479621887 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.479620934 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.479652882 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.479667902 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.479768038 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.480146885 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.480638027 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.480674982 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.480696917 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.480725050 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.480748892 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.480762005 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.485675097 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.485742092 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.485769033 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.528984070 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.568015099 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.568089962 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.568191051 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.568209887 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.568638086 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.568685055 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.568692923 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.568725109 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.568763018 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.569005966 CEST | 49727 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.569019079 CEST | 443 | 49727 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.574362993 CEST | 49732 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:28.574398041 CEST | 443 | 49732 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.574455023 CEST | 49732 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:28.574757099 CEST | 49732 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:28.574768066 CEST | 443 | 49732 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.576395035 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.576427937 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.576546907 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.576827049 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.576842070 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.872807026 CEST | 443 | 49731 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.873110056 CEST | 49731 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.873136997 CEST | 443 | 49731 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.873428106 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.873622894 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.873646021 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.874206066 CEST | 443 | 49731 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.874269962 CEST | 49731 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.874567986 CEST | 49731 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.874634027 CEST | 443 | 49731 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.874649048 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.874746084 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.875078917 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.875137091 CEST | 49731 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.875152111 CEST | 443 | 49731 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.875159025 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.875206947 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.896637917 CEST | 443 | 49730 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.897038937 CEST | 49730 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.897056103 CEST | 443 | 49730 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.898065090 CEST | 443 | 49730 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.898194075 CEST | 49730 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.898541927 CEST | 49730 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.898607969 CEST | 443 | 49730 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.898731947 CEST | 49730 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.898739100 CEST | 443 | 49730 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.915410042 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.924957991 CEST | 49731 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.925080061 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.925086975 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.939975023 CEST | 49730 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:28.970978975 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.017117023 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.017168045 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.017225981 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.017235994 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.017385960 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.017472982 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.017554998 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.017554998 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.018285990 CEST | 49729 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.018299103 CEST | 443 | 49729 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.024393082 CEST | 443 | 49731 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.024504900 CEST | 443 | 49731 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.024559021 CEST | 49731 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.025146961 CEST | 49731 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.025175095 CEST | 443 | 49731 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.035962105 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.036226988 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.036307096 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.037389994 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.037460089 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.037533045 CEST | 443 | 49732 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.037776947 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.037854910 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.037919998 CEST | 49732 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.037935019 CEST | 443 | 49732 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.038024902 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.038042068 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.038531065 CEST | 443 | 49730 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.038630962 CEST | 443 | 49730 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.038747072 CEST | 49730 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.039411068 CEST | 49730 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.039417982 CEST | 443 | 49730 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.039551020 CEST | 443 | 49732 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.039607048 CEST | 49732 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.040013075 CEST | 49732 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.040030956 CEST | 49732 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.040077925 CEST | 49732 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.040189981 CEST | 443 | 49732 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.040318966 CEST | 49732 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.040384054 CEST | 49735 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.040416956 CEST | 443 | 49735 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.040501118 CEST | 49735 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.040697098 CEST | 49735 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.040714979 CEST | 443 | 49735 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.079987049 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.188132048 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.188179016 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.188203096 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.188252926 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.188265085 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.188311100 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.188371897 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.188376904 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.188544989 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.188683033 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.188895941 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.188991070 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.188997030 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.193021059 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.193057060 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.193128109 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.193134069 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.193140030 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.193192959 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.274755001 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.275170088 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.275389910 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.275418997 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.275495052 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.275566101 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.275662899 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.275815964 CEST | 49733 | 443 | 192.168.2.16 | 104.22.74.115 |
| Oct 10, 2024 14:42:29.275826931 CEST | 443 | 49733 | 104.22.74.115 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.497085094 CEST | 443 | 49735 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.500272989 CEST | 49735 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.500291109 CEST | 443 | 49735 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.500689030 CEST | 443 | 49735 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.504532099 CEST | 49735 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.504621029 CEST | 443 | 49735 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.504697084 CEST | 49735 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.551402092 CEST | 443 | 49735 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.649326086 CEST | 443 | 49735 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.649394989 CEST | 443 | 49735 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.649502039 CEST | 49735 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.650352955 CEST | 49735 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:29.650372028 CEST | 443 | 49735 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.668359995 CEST | 49739 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:29.668395996 CEST | 443 | 49739 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.668620110 CEST | 49739 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:29.669050932 CEST | 49739 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:29.669064999 CEST | 443 | 49739 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.239572048 CEST | 443 | 49739 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.240169048 CEST | 49739 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.240190029 CEST | 443 | 49739 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.241229057 CEST | 443 | 49739 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.241384983 CEST | 49739 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.241889954 CEST | 49739 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.241889954 CEST | 49739 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.241889954 CEST | 49739 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.241956949 CEST | 443 | 49739 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.242043972 CEST | 49739 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.242305040 CEST | 49741 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.242333889 CEST | 443 | 49741 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.242425919 CEST | 49741 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.242750883 CEST | 49741 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.242763042 CEST | 443 | 49741 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.685615063 CEST | 49742 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:42:30.685656071 CEST | 443 | 49742 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.685767889 CEST | 49742 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:42:30.686003923 CEST | 49742 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:42:30.686026096 CEST | 443 | 49742 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.697422981 CEST | 443 | 49741 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.697720051 CEST | 49741 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.697737932 CEST | 443 | 49741 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.698724985 CEST | 443 | 49741 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.698820114 CEST | 49741 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.699350119 CEST | 49741 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.699417114 CEST | 443 | 49741 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.699639082 CEST | 49741 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.699645042 CEST | 443 | 49741 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.740091085 CEST | 49741 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.845385075 CEST | 443 | 49741 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.845469952 CEST | 443 | 49741 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.845619917 CEST | 49741 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.846658945 CEST | 49741 | 443 | 192.168.2.16 | 172.66.43.168 |
| Oct 10, 2024 14:42:30.846673965 CEST | 443 | 49741 | 172.66.43.168 | 192.168.2.16 |
| Oct 10, 2024 14:42:31.337937117 CEST | 443 | 49742 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:42:31.338251114 CEST | 49742 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:42:31.338265896 CEST | 443 | 49742 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:42:31.339279890 CEST | 443 | 49742 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:42:31.339412928 CEST | 49742 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:42:31.340667009 CEST | 49742 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:42:31.340734959 CEST | 443 | 49742 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:42:31.395035982 CEST | 49742 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:42:31.395046949 CEST | 443 | 49742 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:42:31.442991972 CEST | 49742 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:42:39.613270998 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:39.613321066 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:39.613431931 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:39.613861084 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:39.613874912 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.285079956 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.285243988 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:40.286838055 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:40.286849976 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.287103891 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.288539886 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:40.335405111 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.536370993 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.536393881 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.536427021 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.536470890 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:40.536500931 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.536514997 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:40.536561012 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:40.537440062 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.537475109 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.537499905 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:40.537506104 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.537539005 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:40.537741899 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.537791014 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:40.539611101 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:40.539624929 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:40.539637089 CEST | 49743 | 443 | 192.168.2.16 | 20.109.210.53 |
| Oct 10, 2024 14:42:40.539644003 CEST | 443 | 49743 | 20.109.210.53 | 192.168.2.16 |
| Oct 10, 2024 14:42:41.266091108 CEST | 443 | 49742 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:42:41.266261101 CEST | 443 | 49742 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:42:41.266436100 CEST | 49742 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:42:42.174993992 CEST | 49742 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:42:42.175020933 CEST | 443 | 49742 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.046061039 CEST | 49744 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.046117067 CEST | 443 | 49744 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.046221972 CEST | 49744 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.046380997 CEST | 49745 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.046430111 CEST | 443 | 49745 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.046487093 CEST | 49745 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.051347971 CEST | 49745 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.051362991 CEST | 443 | 49745 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.051671982 CEST | 49744 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.051701069 CEST | 443 | 49744 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.508595943 CEST | 443 | 49744 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.509021044 CEST | 49744 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.509047985 CEST | 443 | 49744 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.510471106 CEST | 443 | 49744 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.510548115 CEST | 49744 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.510895967 CEST | 49744 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.510915995 CEST | 49744 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.510974884 CEST | 443 | 49744 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.510999918 CEST | 49744 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.511032104 CEST | 49744 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.511374950 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.511424065 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.511499882 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.511698961 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.511709929 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.562549114 CEST | 443 | 49745 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.563004971 CEST | 49745 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.563034058 CEST | 443 | 49745 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.566138983 CEST | 443 | 49745 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.566222906 CEST | 49745 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.566720009 CEST | 49745 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.566761017 CEST | 49745 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.566781998 CEST | 443 | 49745 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.566847086 CEST | 49745 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.566854954 CEST | 443 | 49745 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.566891909 CEST | 49745 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.566904068 CEST | 49745 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.567430973 CEST | 49747 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.567492008 CEST | 443 | 49747 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:47.567559004 CEST | 49747 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.567884922 CEST | 49747 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:47.567904949 CEST | 443 | 49747 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:48.676057100 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:48.676409006 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:48.676430941 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:48.677862883 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:48.677923918 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:48.678322077 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:48.678410053 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:48.678522110 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:48.678529024 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:48.679909945 CEST | 443 | 49747 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:48.680149078 CEST | 49747 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:48.680180073 CEST | 443 | 49747 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:48.683715105 CEST | 443 | 49747 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:48.683779955 CEST | 49747 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:48.684089899 CEST | 49747 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:48.684262037 CEST | 443 | 49747 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:48.732875109 CEST | 49747 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:48.732894897 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:48.732903957 CEST | 443 | 49747 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:48.780909061 CEST | 49747 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:49.103547096 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:49.103679895 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:49.103769064 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:49.103781939 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:49.103813887 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:49.103872061 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:49.103880882 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:49.104011059 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:42:49.104063988 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:49.105169058 CEST | 49746 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:42:49.105184078 CEST | 443 | 49746 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:43:02.940723896 CEST | 443 | 49747 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:43:02.940804958 CEST | 443 | 49747 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:43:02.940917015 CEST | 49747 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:43:04.168807030 CEST | 49747 | 443 | 192.168.2.16 | 172.66.40.88 |
| Oct 10, 2024 14:43:04.168834925 CEST | 443 | 49747 | 172.66.40.88 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.112987041 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.113023043 CEST | 443 | 49750 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.113104105 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.113378048 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.113392115 CEST | 443 | 49750 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.574368954 CEST | 443 | 49750 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.574606895 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.574625969 CEST | 443 | 49750 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.575659037 CEST | 443 | 49750 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.575720072 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.575999022 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.576056004 CEST | 443 | 49750 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.576139927 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.576148987 CEST | 443 | 49750 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.622061014 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.702636957 CEST | 443 | 49750 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.702864885 CEST | 443 | 49750 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.702953100 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.703026056 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.703039885 CEST | 443 | 49750 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.703052998 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.703083038 CEST | 49750 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.703634977 CEST | 49751 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.703671932 CEST | 443 | 49751 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:27.703762054 CEST | 49751 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.703984976 CEST | 49751 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:27.703999996 CEST | 443 | 49751 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:28.178848982 CEST | 443 | 49751 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:28.179105997 CEST | 49751 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:28.179121971 CEST | 443 | 49751 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:28.179611921 CEST | 443 | 49751 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:28.179919958 CEST | 49751 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:28.179990053 CEST | 443 | 49751 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:28.180033922 CEST | 49751 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:28.223422050 CEST | 443 | 49751 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:28.229852915 CEST | 49751 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:28.310264111 CEST | 443 | 49751 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:28.310390949 CEST | 443 | 49751 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:28.310461998 CEST | 49751 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:28.310765028 CEST | 49751 | 443 | 192.168.2.16 | 35.190.80.1 |
| Oct 10, 2024 14:43:28.310790062 CEST | 443 | 49751 | 35.190.80.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:30.739095926 CEST | 49752 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:43:30.739147902 CEST | 443 | 49752 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:43:30.739242077 CEST | 49752 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:43:30.739599943 CEST | 49752 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:43:30.739612103 CEST | 443 | 49752 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:43:31.373682022 CEST | 443 | 49752 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:43:31.374147892 CEST | 49752 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:43:31.374165058 CEST | 443 | 49752 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:43:31.374633074 CEST | 443 | 49752 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:43:31.375034094 CEST | 49752 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:43:31.375111103 CEST | 443 | 49752 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:43:31.423824072 CEST | 49752 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:43:41.301078081 CEST | 443 | 49752 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:43:41.301148891 CEST | 443 | 49752 | 142.250.186.132 | 192.168.2.16 |
| Oct 10, 2024 14:43:41.301215887 CEST | 49752 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:43:42.177375078 CEST | 49752 | 443 | 192.168.2.16 | 142.250.186.132 |
| Oct 10, 2024 14:43:42.177405119 CEST | 443 | 49752 | 142.250.186.132 | 192.168.2.16 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Oct 10, 2024 14:42:25.839946032 CEST | 52829 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:25.840440035 CEST | 54680 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:25.840688944 CEST | 53 | 52783 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:25.848515987 CEST | 53 | 52829 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:25.850788116 CEST | 53 | 54680 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:25.945852041 CEST | 53 | 51529 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:26.943262100 CEST | 53 | 62169 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.106405020 CEST | 61395 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:27.106704950 CEST | 57874 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:27.113770962 CEST | 53 | 61395 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.114022970 CEST | 53 | 57874 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.122044086 CEST | 49319 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:27.122453928 CEST | 63512 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:27.132793903 CEST | 53 | 63512 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:27.133485079 CEST | 53 | 49319 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.396950006 CEST | 49328 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:28.397176981 CEST | 54907 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:28.405652046 CEST | 53 | 54907 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:28.408541918 CEST | 53 | 49328 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.653412104 CEST | 55696 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:29.653569937 CEST | 63315 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:29.661135912 CEST | 53 | 55696 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:29.666033030 CEST | 53 | 63315 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.677409887 CEST | 60363 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:30.677649975 CEST | 64166 | 53 | 192.168.2.16 | 1.1.1.1 |
| Oct 10, 2024 14:42:30.684551001 CEST | 53 | 64166 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:30.684617996 CEST | 53 | 60363 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:44.000834942 CEST | 53 | 64429 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:42:59.353741884 CEST | 138 | 138 | 192.168.2.16 | 192.168.2.255 |
| Oct 10, 2024 14:43:02.932965994 CEST | 53 | 57977 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:26.640337944 CEST | 53 | 62113 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:26.640373945 CEST | 53 | 63468 | 1.1.1.1 | 192.168.2.16 |
| Oct 10, 2024 14:43:55.359309912 CEST | 53 | 58703 | 1.1.1.1 | 192.168.2.16 |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Oct 10, 2024 14:42:25.839946032 CEST | 192.168.2.16 | 1.1.1.1 | 0xfa8a | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 10, 2024 14:42:25.840440035 CEST | 192.168.2.16 | 1.1.1.1 | 0x92b3 | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 10, 2024 14:42:27.106405020 CEST | 192.168.2.16 | 1.1.1.1 | 0x6ea5 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 10, 2024 14:42:27.106704950 CEST | 192.168.2.16 | 1.1.1.1 | 0x6b52 | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 10, 2024 14:42:27.122044086 CEST | 192.168.2.16 | 1.1.1.1 | 0xb0ca | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 10, 2024 14:42:27.122453928 CEST | 192.168.2.16 | 1.1.1.1 | 0xac1a | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 10, 2024 14:42:28.396950006 CEST | 192.168.2.16 | 1.1.1.1 | 0x1974 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 10, 2024 14:42:28.397176981 CEST | 192.168.2.16 | 1.1.1.1 | 0x74f3 | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 10, 2024 14:42:29.653412104 CEST | 192.168.2.16 | 1.1.1.1 | 0xffa6 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 10, 2024 14:42:29.653569937 CEST | 192.168.2.16 | 1.1.1.1 | 0xe013 | Standard query (0) | 65 | IN (0x0001) | false | |
| Oct 10, 2024 14:42:30.677409887 CEST | 192.168.2.16 | 1.1.1.1 | 0xc450 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Oct 10, 2024 14:42:30.677649975 CEST | 192.168.2.16 | 1.1.1.1 | 0x8065 | Standard query (0) | 65 | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Oct 10, 2024 14:42:25.848515987 CEST | 1.1.1.1 | 192.168.2.16 | 0xfa8a | No error (0) | 172.66.40.88 | A (IP address) | IN (0x0001) | false | ||
| Oct 10, 2024 14:42:25.848515987 CEST | 1.1.1.1 | 192.168.2.16 | 0xfa8a | No error (0) | 172.66.43.168 | A (IP address) | IN (0x0001) | false | ||
| Oct 10, 2024 14:42:25.850788116 CEST | 1.1.1.1 | 192.168.2.16 | 0x92b3 | No error (0) | 65 | IN (0x0001) | false | |||
| Oct 10, 2024 14:42:27.113770962 CEST | 1.1.1.1 | 192.168.2.16 | 0x6ea5 | No error (0) | 35.190.80.1 | A (IP address) | IN (0x0001) | false | ||
| Oct 10, 2024 14:42:27.132793903 CEST | 1.1.1.1 | 192.168.2.16 | 0xac1a | No error (0) | 65 | IN (0x0001) | false | |||
| Oct 10, 2024 14:42:27.133485079 CEST | 1.1.1.1 | 192.168.2.16 | 0xb0ca | No error (0) | 104.22.74.115 | A (IP address) | IN (0x0001) | false | ||
| Oct 10, 2024 14:42:27.133485079 CEST | 1.1.1.1 | 192.168.2.16 | 0xb0ca | No error (0) | 104.22.75.115 | A (IP address) | IN (0x0001) | false | ||
| Oct 10, 2024 14:42:27.133485079 CEST | 1.1.1.1 | 192.168.2.16 | 0xb0ca | No error (0) | 172.67.27.94 | A (IP address) | IN (0x0001) | false | ||
| Oct 10, 2024 14:42:28.405652046 CEST | 1.1.1.1 | 192.168.2.16 | 0x74f3 | No error (0) | 65 | IN (0x0001) | false | |||
| Oct 10, 2024 14:42:28.408541918 CEST | 1.1.1.1 | 192.168.2.16 | 0x1974 | No error (0) | 104.22.74.115 | A (IP address) | IN (0x0001) | false | ||
| Oct 10, 2024 14:42:28.408541918 CEST | 1.1.1.1 | 192.168.2.16 | 0x1974 | No error (0) | 104.22.75.115 | A (IP address) | IN (0x0001) | false | ||
| Oct 10, 2024 14:42:28.408541918 CEST | 1.1.1.1 | 192.168.2.16 | 0x1974 | No error (0) | 172.67.27.94 | A (IP address) | IN (0x0001) | false | ||
| Oct 10, 2024 14:42:29.661135912 CEST | 1.1.1.1 | 192.168.2.16 | 0xffa6 | No error (0) | 172.66.43.168 | A (IP address) | IN (0x0001) | false | ||
| Oct 10, 2024 14:42:29.661135912 CEST | 1.1.1.1 | 192.168.2.16 | 0xffa6 | No error (0) | 172.66.40.88 | A (IP address) | IN (0x0001) | false | ||
| Oct 10, 2024 14:42:29.666033030 CEST | 1.1.1.1 | 192.168.2.16 | 0xe013 | No error (0) | 65 | IN (0x0001) | false | |||
| Oct 10, 2024 14:42:30.684551001 CEST | 1.1.1.1 | 192.168.2.16 | 0x8065 | No error (0) | 65 | IN (0x0001) | false | |||
| Oct 10, 2024 14:42:30.684617996 CEST | 1.1.1.1 | 192.168.2.16 | 0xc450 | No error (0) | 142.250.186.132 | A (IP address) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.16 | 49706 | 20.190.160.14 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:01 UTC | 422 | OUT | |
| 2024-10-10 12:42:01 UTC | 3592 | OUT | |
| 2024-10-10 12:42:01 UTC | 569 | IN | |
| 2024-10-10 12:42:01 UTC | 11389 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.16 | 49708 | 20.190.160.14 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:02 UTC | 422 | OUT | |
| 2024-10-10 12:42:02 UTC | 4775 | OUT | |
| 2024-10-10 12:42:02 UTC | 569 | IN | |
| 2024-10-10 12:42:02 UTC | 11409 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 2 | 192.168.2.16 | 49709 | 20.109.210.53 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:02 UTC | 306 | OUT | |
| 2024-10-10 12:42:03 UTC | 560 | IN | |
| 2024-10-10 12:42:03 UTC | 15824 | IN | |
| 2024-10-10 12:42:03 UTC | 8666 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 3 | 192.168.2.16 | 49711 | 20.190.160.14 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:03 UTC | 422 | OUT | |
| 2024-10-10 12:42:03 UTC | 4775 | OUT | |
| 2024-10-10 12:42:03 UTC | 569 | IN | |
| 2024-10-10 12:42:03 UTC | 11409 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 4 | 192.168.2.16 | 49713 | 20.190.160.14 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:05 UTC | 422 | OUT | |
| 2024-10-10 12:42:05 UTC | 4762 | OUT | |
| 2024-10-10 12:42:05 UTC | 569 | IN | |
| 2024-10-10 12:42:05 UTC | 10197 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 5 | 192.168.2.16 | 49718 | 172.66.40.88 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:26 UTC | 731 | OUT | |
| 2024-10-10 12:42:27 UTC | 862 | IN | |
| 2024-10-10 12:42:27 UTC | 507 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1086 | IN | |
| 2024-10-10 12:42:27 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 6 | 192.168.2.16 | 49719 | 35.190.80.1 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:27 UTC | 560 | OUT | |
| 2024-10-10 12:42:27 UTC | 336 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 7 | 192.168.2.16 | 49720 | 104.22.74.115 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:27 UTC | 551 | OUT | |
| 2024-10-10 12:42:27 UTC | 697 | IN | |
| 2024-10-10 12:42:27 UTC | 672 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 824 | IN | |
| 2024-10-10 12:42:27 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 8 | 192.168.2.16 | 49722 | 104.22.74.115 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:27 UTC | 595 | OUT | |
| 2024-10-10 12:42:27 UTC | 739 | IN | |
| 2024-10-10 12:42:27 UTC | 630 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 9 | 192.168.2.16 | 49721 | 104.22.74.115 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:27 UTC | 596 | OUT | |
| 2024-10-10 12:42:27 UTC | 740 | IN | |
| 2024-10-10 12:42:27 UTC | 629 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN | |
| 2024-10-10 12:42:27 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 10 | 192.168.2.16 | 49723 | 35.190.80.1 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:28 UTC | 494 | OUT | |
| 2024-10-10 12:42:28 UTC | 458 | OUT | |
| 2024-10-10 12:42:28 UTC | 168 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 11 | 192.168.2.16 | 49726 | 104.22.74.115 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:28 UTC | 611 | OUT | |
| 2024-10-10 12:42:28 UTC | 712 | IN | |
| 2024-10-10 12:42:28 UTC | 657 | IN | |
| 2024-10-10 12:42:28 UTC | 1369 | IN | |
| 2024-10-10 12:42:28 UTC | 1369 | IN | |
| 2024-10-10 12:42:28 UTC | 509 | IN | |
| 2024-10-10 12:42:28 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 12 | 192.168.2.16 | 49725 | 104.22.74.115 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:28 UTC | 611 | OUT | |
| 2024-10-10 12:42:28 UTC | 712 | IN | |
| 2024-10-10 12:42:28 UTC | 657 | IN | |
| 2024-10-10 12:42:28 UTC | 458 | IN | |
| 2024-10-10 12:42:28 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 13 | 192.168.2.16 | 49724 | 104.22.74.115 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:28 UTC | 613 | OUT | |
| 2024-10-10 12:42:28 UTC | 725 | IN | |
| 2024-10-10 12:42:28 UTC | 644 | IN | |
| 2024-10-10 12:42:28 UTC | 157 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 14 | 192.168.2.16 | 49727 | 104.22.74.115 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:28 UTC | 617 | OUT | |
| 2024-10-10 12:42:28 UTC | 750 | IN | |
| 2024-10-10 12:42:28 UTC | 619 | IN | |
| 2024-10-10 12:42:28 UTC | 1369 | IN | |
| 2024-10-10 12:42:28 UTC | 1369 | IN | |
| 2024-10-10 12:42:28 UTC | 1369 | IN | |
| 2024-10-10 12:42:28 UTC | 1369 | IN | |
| 2024-10-10 12:42:28 UTC | 1369 | IN | |
| 2024-10-10 12:42:28 UTC | 1369 | IN | |
| 2024-10-10 12:42:28 UTC | 1369 | IN | |
| 2024-10-10 12:42:28 UTC | 1369 | IN | |
| 2024-10-10 12:42:28 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 15 | 192.168.2.16 | 49731 | 104.22.74.115 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:28 UTC | 368 | OUT | |
| 2024-10-10 12:42:29 UTC | 712 | IN | |
| 2024-10-10 12:42:29 UTC | 657 | IN | |
| 2024-10-10 12:42:29 UTC | 458 | IN | |
| 2024-10-10 12:42:29 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 16 | 192.168.2.16 | 49729 | 104.22.74.115 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:28 UTC | 368 | OUT | |
| 2024-10-10 12:42:29 UTC | 712 | IN | |
| 2024-10-10 12:42:29 UTC | 657 | IN | |
| 2024-10-10 12:42:29 UTC | 1369 | IN | |
| 2024-10-10 12:42:29 UTC | 1369 | IN | |
| 2024-10-10 12:42:29 UTC | 509 | IN | |
| 2024-10-10 12:42:29 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 17 | 192.168.2.16 | 49730 | 104.22.74.115 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:28 UTC | 370 | OUT | |
| 2024-10-10 12:42:29 UTC | 725 | IN | |
| 2024-10-10 12:42:29 UTC | 644 | IN | |
| 2024-10-10 12:42:29 UTC | 157 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 18 | 192.168.2.16 | 49733 | 104.22.74.115 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:29 UTC | 374 | OUT | |
| 2024-10-10 12:42:29 UTC | 750 | IN | |
| 2024-10-10 12:42:29 UTC | 619 | IN | |
| 2024-10-10 12:42:29 UTC | 1369 | IN | |
| 2024-10-10 12:42:29 UTC | 1369 | IN | |
| 2024-10-10 12:42:29 UTC | 1369 | IN | |
| 2024-10-10 12:42:29 UTC | 1369 | IN | |
| 2024-10-10 12:42:29 UTC | 1369 | IN | |
| 2024-10-10 12:42:29 UTC | 1369 | IN | |
| 2024-10-10 12:42:29 UTC | 1369 | IN | |
| 2024-10-10 12:42:29 UTC | 1369 | IN | |
| 2024-10-10 12:42:29 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 19 | 192.168.2.16 | 49735 | 172.66.40.88 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:29 UTC | 667 | OUT | |
| 2024-10-10 12:42:29 UTC | 988 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 20 | 192.168.2.16 | 49741 | 172.66.43.168 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:30 UTC | 358 | OUT | |
| 2024-10-10 12:42:30 UTC | 996 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 21 | 192.168.2.16 | 49743 | 20.109.210.53 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:40 UTC | 306 | OUT | |
| 2024-10-10 12:42:40 UTC | 560 | IN | |
| 2024-10-10 12:42:40 UTC | 15824 | IN | |
| 2024-10-10 12:42:40 UTC | 14181 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 22 | 192.168.2.16 | 49746 | 172.66.40.88 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:42:48 UTC | 731 | OUT | |
| 2024-10-10 12:42:49 UTC | 862 | IN | |
| 2024-10-10 12:42:49 UTC | 507 | IN | |
| 2024-10-10 12:42:49 UTC | 1369 | IN | |
| 2024-10-10 12:42:49 UTC | 1086 | IN | |
| 2024-10-10 12:42:49 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 23 | 192.168.2.16 | 49750 | 35.190.80.1 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:43:27 UTC | 560 | OUT | |
| 2024-10-10 12:43:27 UTC | 336 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 24 | 192.168.2.16 | 49751 | 35.190.80.1 | 443 | 6916 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-10-10 12:43:28 UTC | 494 | OUT | |
| 2024-10-10 12:43:28 UTC | 462 | OUT | |
| 2024-10-10 12:43:28 UTC | 168 | IN |
Click to jump to process
Click to jump to process
back
Click to dive into process behavior distribution
Click to jump to process
| Target ID: | 0 |
| Start time: | 08:41:53 |
| Start date: | 10/10/2024 |
| Path: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0xfd0000 |
| File size: | 34'446'744 bytes |
| MD5 hash: | 91A5292942864110ED734005B7E005C0 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 2 |
| Start time: | 08:41:54 |
| Start date: | 10/10/2024 |
| Path: | C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff6bdf80000 |
| File size: | 710'048 bytes |
| MD5 hash: | EC652BEDD90E089D9406AFED89A8A8BD |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 11 |
| Start time: | 08:42:24 |
| Start date: | 10/10/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 12 |
| Start time: | 08:42:24 |
| Start date: | 10/10/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 14 |
| Start time: | 08:42:46 |
| Start date: | 10/10/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | true |
| Target ID: | 15 |
| Start time: | 08:42:46 |
| Start date: | 10/10/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | true |
⊘No disassembly