Windows
Analysis Report
https://www.2020insight.net/wh4/q.asp?r72962
Overview
Detection
Score: | 0 |
Range: | 0 - 100 |
Whitelisted: | false |
Confidence: | 100% |
Signatures
Classification
- System is w10x64native
- chrome.exe (PID: 1588 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed "about :blank" MD5: BB7C48CDDDE076E7EB44022520F40F77) - chrome.exe (PID: 4996 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --no-subpr oc-heap-pr ofiling -- field-tria l-handle=2 192,i,1167 2242447743 911351,465 3400138562 691382,262 144 --disa ble-featur es=Optimiz ationGuide ModelDownl oading,Opt imizationH intsFetchi ng,Optimiz ationTarge tPredictio n --variat ions-seed- version=20 240909-180 142.416000 --mojo-pl atform-cha nnel-handl e=2188 /pr efetch:3 MD5: BB7C48CDDDE076E7EB44022520F40F77)
- chrome.exe (PID: 7628 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" "htt ps://www.2 020insight .net/wh4/q .asp?r7296 2" MD5: BB7C48CDDDE076E7EB44022520F40F77)
- cleanup
Click to jump to signature section
There are no malicious signatures, click here to show all signatures.
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | HTTP Parser: |
Source: | Directory created: | Jump to behavior | ||
Source: | Directory created: | Jump to behavior |
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | TCP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: | ||
Source: | UDP traffic detected without corresponding DNS query: |
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: | ||
Source: | HTTP traffic detected: |
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: | ||
Source: | DNS traffic detected: |
Source: | TCP traffic: | ||
Source: | TCP traffic: | ||
Source: | TCP traffic: | ||
Source: | TCP traffic: |
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: | ||
Source: | Network traffic detected: |
Source: | Classification label: |
Source: | File created: | Jump to behavior |
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | |||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior | ||
Source: | Process created: | Jump to behavior |
Source: | Window detected: |
Source: | Directory created: | Jump to behavior | ||
Source: | Directory created: | Jump to behavior |
Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Gather Victim Identity Information | Acquire Infrastructure | Valid Accounts | Windows Management Instrumentation | Path Interception | 1 Process Injection | 2 Masquerading | OS Credential Dumping | 1 Network Service Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
Credentials | Domains | Default Accounts | Scheduled Task/Job | Boot or Logon Initialization Scripts | Boot or Logon Initialization Scripts | 1 Process Injection | LSASS Memory | Application Window Discovery | Remote Desktop Protocol | Data from Removable Media | 2 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | Logon Script (Windows) | Obfuscated Files or Information | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 3 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 1 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
This section contains all screenshots as thumbnails, including those not shown in the slideshow.
Name | IP | Active | Malicious | Antivirus Detection | Reputation |
---|---|---|---|---|---|
growstrongleaders.com | 207.21.198.148 | true | false | unknown | |
www.google.com | 142.250.80.100 | true | false | unknown | |
www.2020insight.net | 207.21.199.174 | true | false | unknown |
Name | Malicious | Antivirus Detection | Reputation |
---|---|---|---|
false | unknown | ||
false | unknown | ||
false | unknown | ||
false | unknown | ||
false | unknown | ||
false | unknown | ||
false | unknown | ||
false | unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
142.250.80.100 | www.google.com | United States | 15169 | GOOGLEUS | false | |
207.21.199.174 | www.2020insight.net | Canada | 13768 | COGECO-PEER1CA | false | |
207.21.198.148 | growstrongleaders.com | Canada | 13768 | COGECO-PEER1CA | false | |
239.255.255.250 | unknown | Reserved | unknown | unknown | false |
IP |
---|
192.168.11.20 |
Joe Sandbox version: | 41.0.0 Charoite |
Analysis ID: | 1541183 |
Start date and time: | 2024-10-24 14:59:59 +02:00 |
Joe Sandbox product: | CloudBasic |
Overall analysis duration: | 0h 4m 28s |
Hypervisor based Inspection enabled: | false |
Report type: | full |
Cookbook file name: | browseurl.jbs |
Sample URL: | https://www.2020insight.net/wh4/q.asp?r72962 |
Analysis system description: | Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 128, Firefox 91, Adobe Reader DC 21, Java 8 Update 301 |
Number of analysed new started processes analysed: | 7 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 0 |
Technologies: |
|
Analysis Mode: | default |
Analysis stop reason: | Timeout |
Detection: | CLEAN |
Classification: | clean0.win@16/12@8/5 |
- Exclude process from analysis (whitelisted): TextInputHost.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 142.250.65.195, 142.250.65.238, 172.253.115.84, 34.104.35.123, 172.217.165.138, 142.250.80.74, 142.250.80.106, 142.250.176.202, 142.251.40.202, 142.251.40.234, 142.251.41.10, 142.251.40.106, 142.251.40.138, 142.250.65.234, 142.250.65.170, 142.250.81.234, 142.251.32.106, 142.251.35.170, 142.250.65.202, 142.250.80.42, 142.250.72.106, 142.251.40.170, 142.250.80.10, 72.21.81.240, 142.251.35.163
- Excluded domains from analysis (whitelisted): clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, www.googleapis.com, dns.msftncsi.com
- Not all processes where analyzed, report is missing behavior information
- VT rate limit hit for: https://www.2020insight.net/wh4/q.asp?r72962
Input | Output |
---|---|
URL: https://www.2020insight.net/wh4/r/login.asp?project=72962 Model: claude-3-haiku-20240307 | ```json { "contains_trigger_text": true, "trigger_text": "Respondent login:", "prominent_button_name": "Login", "text_input_field_labels": [ "Username:", "Password:" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false } |
URL: https://www.2020insight.net/wh4/r/login.asp?project=72962 Model: claude-3-haiku-20240307 | ```json { "brands": [ "Ellis Locke" ] } |
URL: https://www.2020insight.net/wh4/r/login.asp?project=72962 Model: gpt-4o | ```json{ "legit_domain": "unknown", "classification": "unknown", "reasons": [ "The brand 'Ellis Locke' is not widely recognized and does not have an obvious association with a well-known domain.", "The URL 'www.2020insight.net' does not directly relate to the brand 'Ellis Locke' and does not match any known legitimate domain for this brand.", "The domain '2020insight.net' does not appear to be a well-known or established domain associated with a major brand.", "The presence of input fields for 'Username' and 'Password' without a clear brand association raises suspicion.", "The URL does not contain any obvious misspellings or unusual characters, but the lack of brand association is concerning." ], "riskscore": 7} |
URL: www.2020insight.net Brands: Ellis Locke Input Fields: Username:, Password: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 806 |
Entropy (8bit): | 5.373007909346691 |
Encrypted: | false |
SSDEEP: | 24:8m1+IOvi0vR/3M53MXX3M6MY3Mt4sVmAcc:z+W0vsAHMgtsoc |
MD5: | BA8C622B2745EFCEB25803DA029A6236 |
SHA1: | F3EE8896E4895F06B0D0240BF53BE47650954139 |
SHA-256: | C26ED8C05906EDC9225167FCDF9E5BAD50216840FA545634D296492370230EEE |
SHA-512: | 0C30BEDE8DFBCB0E3B15D3DE260E650B05E07C959C54843965171D42672EFEF84CA5A3C9A69650EEA05B0775DC136B74C409918CA627BD97D079CCFA8860AD2A |
Malicious: | false |
Reputation: | low |
URL: | https://www.2020insight.net/wh4/r/default.css |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 74 |
Entropy (8bit): | 5.046211679319879 |
Encrypted: | false |
SSDEEP: | 3:CseLNqalNMuWuQLktefoS2W:NypXMqQLktemW |
MD5: | B7A8B151A58EDEFA32C36829C214CDC9 |
SHA1: | 69D344FA6BEDD2806C3D561FD43F2E22235E3078 |
SHA-256: | 302AEE36F06833DB1BB71FC5DB848233045D840FE2E0E713DF8695DCA9402888 |
SHA-512: | 36C3800A87903FD81F317C9E506272B80AD64E8C7850E8716DF6AB135F983416234B9F8C3ED5CEF21D61FBDAFB606848FE3266F36F2C5B0D004FE57F5C6174C2 |
Malicious: | false |
Reputation: | low |
URL: | https://www.2020insight.net/wh4/i/respondent16x16.gif |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 28 |
Entropy (8bit): | 4.208966082694624 |
Encrypted: | false |
SSDEEP: | 3:hwS:hwS |
MD5: | 8411D2BE1BE616638BEED307094F281F |
SHA1: | CF4638ECD2E9A0814874064AA92189E31F02A6C3 |
SHA-256: | 7299B800FA1A26ED28E8E90070D9E14E1F98A6F4183E72D96F32111A04EA468D |
SHA-512: | B94EEFFCB41F505C54337A14FC11E2984622AB764167E5FF1D613695C49941C8D54F91AF1C2F6203A00673D6376FFB912E718AEC028230C4FD1473366B321BFA |
Malicious: | false |
Reputation: | low |
URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTI4LjAuNjYxMy4xMjASIAmaOx_WwbRq6BIFDVDBrlcSBQ2JeCHDISJVhWC3Pelg?alt=proto |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 74 |
Entropy (8bit): | 5.046211679319879 |
Encrypted: | false |
SSDEEP: | 3:CseLNqalNMuWuQLktefoS2W:NypXMqQLktemW |
MD5: | B7A8B151A58EDEFA32C36829C214CDC9 |
SHA1: | 69D344FA6BEDD2806C3D561FD43F2E22235E3078 |
SHA-256: | 302AEE36F06833DB1BB71FC5DB848233045D840FE2E0E713DF8695DCA9402888 |
SHA-512: | 36C3800A87903FD81F317C9E506272B80AD64E8C7850E8716DF6AB135F983416234B9F8C3ED5CEF21D61FBDAFB606848FE3266F36F2C5B0D004FE57F5C6174C2 |
Malicious: | false |
Reputation: | low |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 3511 |
Entropy (8bit): | 5.0920241927899905 |
Encrypted: | false |
SSDEEP: | 48:xiVqH6eJWLdkCgwqkLP+a4QYFPhsLY5WZ1sXZjmW2ZJez6hvtq+YasOLGk:zH/J4eELWK6QRIjZ9ILP |
MD5: | 7677A7FECEB63DF8CB1E7D3292D981E4 |
SHA1: | 81B5D3BA499A153557B496E0C00B2739F71F6C6B |
SHA-256: | 232DC55F21122B96D5A38A0BC9243B7DB1B5042F1F02DFDD1B545272355AF8A6 |
SHA-512: | B4302F6122DAB75F58B9DD9F83C62D9F75C9082CDF74AC5163B6639A818B60D107E20AEF76583C3177648765F549D48E66A94F431423E17C254F5D505699352B |
Malicious: | false |
Reputation: | low |
URL: | https://www.2020insight.net/wh4/r/login.asp?project=72962 |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | downloaded |
Size (bytes): | 4019 |
Entropy (8bit): | 7.790969914801027 |
Encrypted: | false |
SSDEEP: | 48:PuERAR5F045wtsOTLwGOtX/TGJCPu/dWGJGocPocr3vnA6APVmVomNg30GAn:mEaZ5weOHAZ/cWuk346APVmV3NGAn |
MD5: | F2F7F390523C58ECAA49050D2F2FCE48 |
SHA1: | 68F02DC91F3E0B14AFEFFF0524E96EE8581E4C52 |
SHA-256: | 0C6EE6126D474D13BA20136463122A14D63813119C61E0DFF322246783B1033C |
SHA-512: | 8AB018AFF3CD50EBE48EEE8CB0DC228D1C3F0AE85BA6A5E1F6EE43483E9B192CA9802F8720A542A5E396ABEA3176D8A2DAA2A068654A89C4EA4E3D1560B03C49 |
Malicious: | false |
Reputation: | low |
URL: | https://www.2020insight.net/wh4/l/1518.jpg |
Preview: |
Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
File Type: | |
Category: | dropped |
Size (bytes): | 4019 |
Entropy (8bit): | 7.790969914801027 |
Encrypted: | false |
SSDEEP: | 48:PuERAR5F045wtsOTLwGOtX/TGJCPu/dWGJGocPocr3vnA6APVmVomNg30GAn:mEaZ5weOHAZ/cWuk346APVmV3NGAn |
MD5: | F2F7F390523C58ECAA49050D2F2FCE48 |
SHA1: | 68F02DC91F3E0B14AFEFFF0524E96EE8581E4C52 |
SHA-256: | 0C6EE6126D474D13BA20136463122A14D63813119C61E0DFF322246783B1033C |
SHA-512: | 8AB018AFF3CD50EBE48EEE8CB0DC228D1C3F0AE85BA6A5E1F6EE43483E9B192CA9802F8720A542A5E396ABEA3176D8A2DAA2A068654A89C4EA4E3D1560B03C49 |
Malicious: | false |
Reputation: | low |
Preview: |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Oct 24, 2024 15:02:04.089458942 CEST | 49681 | 80 | 192.168.11.20 | 192.229.211.108 |
Oct 24, 2024 15:02:09.408118963 CEST | 49789 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:09.408174992 CEST | 443 | 49789 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:09.408288002 CEST | 49789 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:09.408560991 CEST | 49790 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:09.408617973 CEST | 443 | 49790 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:09.408816099 CEST | 49790 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:09.408818007 CEST | 49789 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:09.408862114 CEST | 443 | 49789 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:09.409121037 CEST | 49790 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:09.409162998 CEST | 443 | 49790 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.014691114 CEST | 443 | 49790 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.014909029 CEST | 443 | 49789 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.015408993 CEST | 49790 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.015444994 CEST | 443 | 49790 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.015865088 CEST | 49789 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.015897036 CEST | 443 | 49789 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.018171072 CEST | 443 | 49790 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.018421888 CEST | 49790 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.018651009 CEST | 443 | 49789 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.018863916 CEST | 49789 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.019305944 CEST | 49790 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.019378901 CEST | 49790 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.019525051 CEST | 49789 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.019556999 CEST | 443 | 49790 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.019785881 CEST | 443 | 49789 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.063709974 CEST | 49790 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.063747883 CEST | 443 | 49790 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.063874960 CEST | 49789 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.063922882 CEST | 443 | 49789 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.113224983 CEST | 49789 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.113244057 CEST | 49790 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.161092997 CEST | 443 | 49790 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.161144972 CEST | 443 | 49790 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.161330938 CEST | 49790 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.161734104 CEST | 49790 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.161755085 CEST | 443 | 49790 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.163105965 CEST | 49789 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.163238049 CEST | 443 | 49789 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.163378000 CEST | 49789 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.166836977 CEST | 49792 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.166893005 CEST | 443 | 49792 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.167217016 CEST | 49792 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.169055939 CEST | 49792 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.169095993 CEST | 443 | 49792 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.629528046 CEST | 443 | 49792 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.629987001 CEST | 49792 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.630023956 CEST | 443 | 49792 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.631078005 CEST | 443 | 49792 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.632004976 CEST | 49792 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.632059097 CEST | 49792 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.632266045 CEST | 443 | 49792 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.681521893 CEST | 49792 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.954616070 CEST | 443 | 49792 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.954664946 CEST | 443 | 49792 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.954813004 CEST | 443 | 49792 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.954833984 CEST | 49792 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.955068111 CEST | 49792 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.955632925 CEST | 49792 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.955672026 CEST | 443 | 49792 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.986715078 CEST | 49793 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.986768007 CEST | 443 | 49793 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.987011909 CEST | 49793 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.987426996 CEST | 49793 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.987464905 CEST | 443 | 49793 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.988066912 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.988122940 CEST | 443 | 49794 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.988301039 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.988565922 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.988586903 CEST | 443 | 49794 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.997224092 CEST | 49795 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.997268915 CEST | 443 | 49795 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:10.997467041 CEST | 49795 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.997775078 CEST | 49795 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:10.997798920 CEST | 443 | 49795 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.444952965 CEST | 443 | 49793 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.445338011 CEST | 49793 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.445355892 CEST | 443 | 49793 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.445898056 CEST | 443 | 49793 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.446371078 CEST | 49793 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.446470976 CEST | 49793 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.446513891 CEST | 443 | 49793 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.448204994 CEST | 443 | 49794 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.448671103 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.448685884 CEST | 443 | 49794 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.450098991 CEST | 443 | 49794 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.450432062 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.451302052 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.451347113 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.451435089 CEST | 443 | 49794 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.456399918 CEST | 443 | 49795 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.456902981 CEST | 49795 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.456914902 CEST | 443 | 49795 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.458492994 CEST | 443 | 49795 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.458822012 CEST | 49795 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.459005117 CEST | 49795 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.459103107 CEST | 443 | 49795 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.459188938 CEST | 49795 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.497926950 CEST | 49793 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.498176098 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.498188019 CEST | 443 | 49794 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.503959894 CEST | 443 | 49795 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.513818026 CEST | 49795 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.513827085 CEST | 443 | 49795 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.548115015 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.563493967 CEST | 49795 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.773365021 CEST | 443 | 49795 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.773488045 CEST | 443 | 49795 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.773704052 CEST | 49795 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.773925066 CEST | 49795 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.773941040 CEST | 443 | 49795 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.812345982 CEST | 443 | 49793 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.812417030 CEST | 443 | 49793 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.812563896 CEST | 49793 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.813055992 CEST | 49793 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.813076019 CEST | 443 | 49793 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.814191103 CEST | 443 | 49794 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.814218998 CEST | 443 | 49794 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.814352036 CEST | 443 | 49794 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.814563990 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.814563990 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.814758062 CEST | 49794 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.814774036 CEST | 443 | 49794 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.828777075 CEST | 49798 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.828823090 CEST | 443 | 49798 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.828986883 CEST | 49798 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.829308987 CEST | 49798 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.829339981 CEST | 443 | 49798 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.967192888 CEST | 49799 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.967247009 CEST | 443 | 49799 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.967261076 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.967314005 CEST | 443 | 49800 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.967425108 CEST | 49799 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.967587948 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.967727900 CEST | 49799 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.967761993 CEST | 443 | 49799 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:11.967915058 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:11.967952967 CEST | 443 | 49800 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.229805946 CEST | 49801 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:02:12.229866028 CEST | 443 | 49801 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:02:12.230042934 CEST | 49801 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:02:12.230367899 CEST | 49801 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:02:12.230403900 CEST | 443 | 49801 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:02:12.290831089 CEST | 443 | 49798 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.291209936 CEST | 49798 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.291260004 CEST | 443 | 49798 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.292781115 CEST | 443 | 49798 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.293251038 CEST | 49798 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.293297052 CEST | 49798 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.293627977 CEST | 443 | 49798 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.338494062 CEST | 49798 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.427577972 CEST | 443 | 49799 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.427941084 CEST | 49799 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.428006887 CEST | 443 | 49799 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.431279898 CEST | 443 | 49800 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.431580067 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.431631088 CEST | 443 | 49800 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.432616949 CEST | 443 | 49799 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.432864904 CEST | 49799 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.433161974 CEST | 49799 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.433238983 CEST | 49799 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.433535099 CEST | 443 | 49799 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.435837984 CEST | 443 | 49800 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.436211109 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.436321020 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.436373949 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.436707020 CEST | 443 | 49800 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.479738951 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.479753971 CEST | 49799 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.479789019 CEST | 443 | 49800 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.479809046 CEST | 443 | 49799 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.526575089 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.526576042 CEST | 49799 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.602322102 CEST | 443 | 49798 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.602500916 CEST | 443 | 49798 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.602736950 CEST | 49798 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.602937937 CEST | 49798 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.602938890 CEST | 49798 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.602996111 CEST | 443 | 49798 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.603182077 CEST | 49798 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.657233953 CEST | 443 | 49801 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:02:12.657572985 CEST | 49801 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:02:12.657625914 CEST | 443 | 49801 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:02:12.661823988 CEST | 443 | 49801 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:02:12.662072897 CEST | 49801 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:02:12.662765980 CEST | 49801 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:02:12.663108110 CEST | 443 | 49801 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:02:12.714056015 CEST | 49801 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:02:12.714062929 CEST | 443 | 49801 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:02:12.740340948 CEST | 49802 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:12.740358114 CEST | 443 | 49802 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:12.740565062 CEST | 49802 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:12.740909100 CEST | 49802 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:12.740919113 CEST | 443 | 49802 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:12.743052006 CEST | 443 | 49799 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.743104935 CEST | 443 | 49799 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.743268967 CEST | 49799 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.743460894 CEST | 443 | 49800 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.743474007 CEST | 443 | 49800 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.743513107 CEST | 443 | 49800 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.743612051 CEST | 49799 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.743624926 CEST | 443 | 49799 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.743645906 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.743711948 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.744224072 CEST | 49800 | 443 | 192.168.11.20 | 207.21.199.174 |
Oct 24, 2024 15:02:12.744235992 CEST | 443 | 49800 | 207.21.199.174 | 192.168.11.20 |
Oct 24, 2024 15:02:12.760921001 CEST | 49801 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:02:13.348613977 CEST | 443 | 49802 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:13.349062920 CEST | 49802 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:13.349107981 CEST | 443 | 49802 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:13.352374077 CEST | 443 | 49802 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:13.352694988 CEST | 49802 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:13.353522062 CEST | 49802 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:13.353626013 CEST | 49802 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:13.353836060 CEST | 443 | 49802 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:13.403871059 CEST | 49802 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:13.403913975 CEST | 443 | 49802 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:13.452850103 CEST | 49802 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:14.484113932 CEST | 443 | 49802 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:14.484271049 CEST | 443 | 49802 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:14.484436989 CEST | 49802 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:14.484694958 CEST | 49802 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:14.484744072 CEST | 443 | 49802 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:14.485805035 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:14.485873938 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:14.486011028 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:14.486417055 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:14.486447096 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:14.944899082 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:14.945383072 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:14.945422888 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:14.946456909 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:14.946927071 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:14.946969986 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:14.947208881 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:14.988599062 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:15.921664000 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:15.921689987 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:15.921694994 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:15.921806097 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:15.921838045 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:15.921860933 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:15.921864986 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:15.921886921 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:15.922136068 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:15.922461033 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:15.922518969 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:15.922646999 CEST | 443 | 49805 | 207.21.198.148 | 192.168.11.20 |
Oct 24, 2024 15:02:15.922694921 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:15.922694921 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:15.922813892 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:15.923074007 CEST | 49805 | 443 | 192.168.11.20 | 207.21.198.148 |
Oct 24, 2024 15:02:22.661739111 CEST | 443 | 49801 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:02:22.661798954 CEST | 443 | 49801 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:02:22.662014008 CEST | 49801 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:02:23.920866966 CEST | 49801 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:02:23.920949936 CEST | 443 | 49801 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:02:47.544569969 CEST | 49784 | 443 | 192.168.11.20 | 23.219.82.48 |
Oct 24, 2024 15:02:47.714545012 CEST | 49785 | 80 | 192.168.11.20 | 142.251.40.195 |
Oct 24, 2024 15:02:47.811551094 CEST | 80 | 49785 | 142.251.40.195 | 192.168.11.20 |
Oct 24, 2024 15:02:47.811721087 CEST | 49785 | 80 | 192.168.11.20 | 142.251.40.195 |
Oct 24, 2024 15:03:12.199529886 CEST | 49812 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:03:12.199573994 CEST | 443 | 49812 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:03:12.199871063 CEST | 49812 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:03:12.200308084 CEST | 49812 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:03:12.200341940 CEST | 443 | 49812 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:03:12.599092007 CEST | 443 | 49812 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:03:12.599592924 CEST | 49812 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:03:12.599608898 CEST | 443 | 49812 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:03:12.599984884 CEST | 443 | 49812 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:03:12.600466013 CEST | 49812 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:03:12.600627899 CEST | 443 | 49812 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:03:12.655503035 CEST | 49812 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:03:22.591902971 CEST | 443 | 49812 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:03:22.592086077 CEST | 443 | 49812 | 142.250.80.100 | 192.168.11.20 |
Oct 24, 2024 15:03:22.592291117 CEST | 49812 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:03:23.908756971 CEST | 49812 | 443 | 192.168.11.20 | 142.250.80.100 |
Oct 24, 2024 15:03:23.908844948 CEST | 443 | 49812 | 142.250.80.100 | 192.168.11.20 |
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Oct 24, 2024 15:01:59.478818893 CEST | 137 | 137 | 192.168.11.20 | 192.168.11.255 |
Oct 24, 2024 15:02:00.215398073 CEST | 137 | 137 | 192.168.11.20 | 192.168.11.255 |
Oct 24, 2024 15:02:00.980315924 CEST | 137 | 137 | 192.168.11.20 | 192.168.11.255 |
Oct 24, 2024 15:02:07.643698931 CEST | 55600 | 1900 | 192.168.11.20 | 239.255.255.250 |
Oct 24, 2024 15:02:07.700155020 CEST | 53 | 61390 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:07.728806973 CEST | 53 | 55599 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:08.488519907 CEST | 53 | 59959 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:08.650573015 CEST | 55600 | 1900 | 192.168.11.20 | 239.255.255.250 |
Oct 24, 2024 15:02:09.171303988 CEST | 58472 | 53 | 192.168.11.20 | 1.1.1.1 |
Oct 24, 2024 15:02:09.171399117 CEST | 61492 | 53 | 192.168.11.20 | 1.1.1.1 |
Oct 24, 2024 15:02:09.371541023 CEST | 53 | 61492 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:09.407582045 CEST | 53 | 58472 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:09.662890911 CEST | 55600 | 1900 | 192.168.11.20 | 239.255.255.250 |
Oct 24, 2024 15:02:10.260195017 CEST | 53 | 49332 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:10.663460016 CEST | 55600 | 1900 | 192.168.11.20 | 239.255.255.250 |
Oct 24, 2024 15:02:11.234558105 CEST | 53 | 55775 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:11.775882006 CEST | 52044 | 53 | 192.168.11.20 | 1.1.1.1 |
Oct 24, 2024 15:02:11.776021957 CEST | 63984 | 53 | 192.168.11.20 | 1.1.1.1 |
Oct 24, 2024 15:02:11.965878963 CEST | 53 | 63984 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:11.966664076 CEST | 53 | 52044 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:12.133327007 CEST | 57041 | 53 | 192.168.11.20 | 1.1.1.1 |
Oct 24, 2024 15:02:12.133378029 CEST | 57776 | 53 | 192.168.11.20 | 1.1.1.1 |
Oct 24, 2024 15:02:12.228890896 CEST | 53 | 57776 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:12.228938103 CEST | 53 | 57041 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:12.604137897 CEST | 51626 | 53 | 192.168.11.20 | 1.1.1.1 |
Oct 24, 2024 15:02:12.604212999 CEST | 57942 | 53 | 192.168.11.20 | 1.1.1.1 |
Oct 24, 2024 15:02:12.738326073 CEST | 53 | 57942 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:12.739881039 CEST | 53 | 51626 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:22.734283924 CEST | 138 | 138 | 192.168.11.20 | 192.168.11.255 |
Oct 24, 2024 15:02:30.311058044 CEST | 53 | 62141 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:37.195112944 CEST | 53 | 61856 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:02:52.395113945 CEST | 53 | 50438 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:03:07.715682983 CEST | 53 | 54442 | 1.1.1.1 | 192.168.11.20 |
Oct 24, 2024 15:03:17.759255886 CEST | 53 | 61532 | 1.1.1.1 | 192.168.11.20 |
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|
Oct 24, 2024 15:02:09.171303988 CEST | 192.168.11.20 | 1.1.1.1 | 0x4204 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Oct 24, 2024 15:02:09.171399117 CEST | 192.168.11.20 | 1.1.1.1 | 0x619c | Standard query (0) | 65 | IN (0x0001) | false | |
Oct 24, 2024 15:02:11.775882006 CEST | 192.168.11.20 | 1.1.1.1 | 0x52c2 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Oct 24, 2024 15:02:11.776021957 CEST | 192.168.11.20 | 1.1.1.1 | 0x783f | Standard query (0) | 65 | IN (0x0001) | false | |
Oct 24, 2024 15:02:12.133327007 CEST | 192.168.11.20 | 1.1.1.1 | 0x721c | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Oct 24, 2024 15:02:12.133378029 CEST | 192.168.11.20 | 1.1.1.1 | 0x423 | Standard query (0) | 65 | IN (0x0001) | false | |
Oct 24, 2024 15:02:12.604137897 CEST | 192.168.11.20 | 1.1.1.1 | 0xe39c | Standard query (0) | A (IP address) | IN (0x0001) | false | |
Oct 24, 2024 15:02:12.604212999 CEST | 192.168.11.20 | 1.1.1.1 | 0xf9f0 | Standard query (0) | 65 | IN (0x0001) | false |
Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
---|---|---|---|---|---|---|---|---|---|---|
Oct 24, 2024 15:02:09.407582045 CEST | 1.1.1.1 | 192.168.11.20 | 0x4204 | No error (0) | 207.21.199.174 | A (IP address) | IN (0x0001) | false | ||
Oct 24, 2024 15:02:11.966664076 CEST | 1.1.1.1 | 192.168.11.20 | 0x52c2 | No error (0) | 207.21.199.174 | A (IP address) | IN (0x0001) | false | ||
Oct 24, 2024 15:02:12.228890896 CEST | 1.1.1.1 | 192.168.11.20 | 0x423 | No error (0) | 65 | IN (0x0001) | false | |||
Oct 24, 2024 15:02:12.228938103 CEST | 1.1.1.1 | 192.168.11.20 | 0x721c | No error (0) | 142.250.80.100 | A (IP address) | IN (0x0001) | false | ||
Oct 24, 2024 15:02:12.739881039 CEST | 1.1.1.1 | 192.168.11.20 | 0xe39c | No error (0) | 207.21.198.148 | A (IP address) | IN (0x0001) | false |
|
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
0 | 192.168.11.20 | 49790 | 207.21.199.174 | 443 | 4996 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-10-24 13:02:10 UTC | 685 | OUT | |
2024-10-24 13:02:10 UTC | 318 | IN | |
2024-10-24 13:02:10 UTC | 146 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
1 | 192.168.11.20 | 49792 | 207.21.199.174 | 443 | 4996 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-10-24 13:02:10 UTC | 753 | OUT | |
2024-10-24 13:02:10 UTC | 428 | IN | |
2024-10-24 13:02:10 UTC | 3511 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
2 | 192.168.11.20 | 49793 | 207.21.199.174 | 443 | 4996 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-10-24 13:02:11 UTC | 645 | OUT | |
2024-10-24 13:02:11 UTC | 265 | IN | |
2024-10-24 13:02:11 UTC | 806 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
3 | 192.168.11.20 | 49794 | 207.21.199.174 | 443 | 4996 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-10-24 13:02:11 UTC | 688 | OUT | |
2024-10-24 13:02:11 UTC | 269 | IN | |
2024-10-24 13:02:11 UTC | 4019 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
4 | 192.168.11.20 | 49795 | 207.21.199.174 | 443 | 4996 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-10-24 13:02:11 UTC | 699 | OUT | |
2024-10-24 13:02:11 UTC | 264 | IN | |
2024-10-24 13:02:11 UTC | 74 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
5 | 192.168.11.20 | 49798 | 207.21.199.174 | 443 | 4996 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-10-24 13:02:12 UTC | 685 | OUT | |
2024-10-24 13:02:12 UTC | 253 | IN | |
2024-10-24 13:02:12 UTC | 162 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
6 | 192.168.11.20 | 49799 | 207.21.199.174 | 443 | 4996 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-10-24 13:02:12 UTC | 429 | OUT | |
2024-10-24 13:02:12 UTC | 264 | IN | |
2024-10-24 13:02:12 UTC | 74 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
7 | 192.168.11.20 | 49800 | 207.21.199.174 | 443 | 4996 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-10-24 13:02:12 UTC | 418 | OUT | |
2024-10-24 13:02:12 UTC | 269 | IN | |
2024-10-24 13:02:12 UTC | 4019 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
8 | 192.168.11.20 | 49802 | 207.21.198.148 | 443 | 4996 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-10-24 13:02:13 UTC | 600 | OUT | |
2024-10-24 13:02:14 UTC | 293 | IN |
Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
---|---|---|---|---|---|---|
9 | 192.168.11.20 | 49805 | 207.21.198.148 | 443 | 4996 | C:\Program Files\Google\Chrome\Application\chrome.exe |
Timestamp | Bytes transferred | Direction | Data |
---|---|---|---|
2024-10-24 13:02:14 UTC | 591 | OUT | |
2024-10-24 13:02:15 UTC | 261 | IN | |
2024-10-24 13:02:15 UTC | 16123 | IN | |
2024-10-24 13:02:15 UTC | 16384 | IN |
Click to jump to process
Click to jump to process
Click to jump to process
Target ID: | 0 |
Start time: | 09:02:04 |
Start date: | 24/10/2024 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff74e300000 |
File size: | 2'742'376 bytes |
MD5 hash: | BB7C48CDDDE076E7EB44022520F40F77 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 1 |
Start time: | 09:02:05 |
Start date: | 24/10/2024 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff74e300000 |
File size: | 2'742'376 bytes |
MD5 hash: | BB7C48CDDDE076E7EB44022520F40F77 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | false |
Target ID: | 3 |
Start time: | 09:02:08 |
Start date: | 24/10/2024 |
Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
Wow64 process (32bit): | false |
Commandline: | |
Imagebase: | 0x7ff74e300000 |
File size: | 2'742'376 bytes |
MD5 hash: | BB7C48CDDDE076E7EB44022520F40F77 |
Has elevated privileges: | true |
Has administrator privileges: | true |
Programmed in: | C, C++ or other language |
Reputation: | low |
Has exited: | true |