Edit tour
Windows
Analysis Report
adobe.exe
Overview
General Information
| Sample name: | adobe.exe |
| Analysis ID: | 1374165 |
| MD5: | e9a2997ee4cfb48cb3988f3048e041e9 |
| SHA1: | 303d4cb34333e085c47ec565a25abcfa2376db6e |
| SHA256: | 6b05ea2717ccbe9837f6b5108900f96c169d9e252b595ddfec97b071fb67dcae |
| Tags: | exeSocks5Systemz |
| Infos: |  |
 | |
Detection
Petite Virus, Socks5Systemz
| Score: | 100 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Antivirus / Scanner detection for submitted sample
Antivirus detection for URL or domain
Detected unpacking (changes PE section rights)
Detected unpacking (overwrites its own PE header)
Yara detected Petite Virus
Yara detected Socks5Systemz
Contains functionality to infect the boot sector
Machine Learning detection for dropped file
PE file has nameless sections
Contains functionality to call native functions
Contains functionality to check if a debugger is running (IsDebuggerPresent)
Contains functionality to check if a debugger is running (OutputDebugString,GetLastError)
Contains functionality to check if a window is minimized (may be used to check if an application is visible)
Contains functionality to communicate with device drivers
Contains functionality to dynamically determine API calls
Contains functionality to launch a program with higher privileges
Contains functionality to query CPU information (cpuid)
Contains functionality to query locales information (e.g. system language)
Contains functionality to query network adapater information
Contains functionality to shutdown / reboot the system
Contains functionality which may be used to detect a debugger (GetProcessHeap)
Detected TCP or UDP traffic on non-standard ports
Detected potential crypto function
Dropped file seen in connection with other malware
Drops PE files
Drops PE files to the application program directory (C:\ProgramData)
Entry point lies outside standard sections
Extensive use of GetProcAddress (often used to hide API calls)
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Found dropped PE file which has not been started or loaded
Found evasive API chain (date check)
Found evasive API chain (may stop execution after checking a module file name)
Found potential string decryption / allocating functions
IP address seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
PE file contains executable resources (Code or Archives)
PE file contains more sections than normal
PE file contains sections with non-standard names
Queries disk information (often used to detect virtual machines)
Sample file is different than original file name gathered from version info
Uses 32bit PE files
Uses Microsoft's Enhanced Cryptographic Provider
Uses a known web browser user agent for HTTP communication
Uses code obfuscation techniques (call, push, ret)
Classification
- System is w10x64
adobe.exe (PID: 7300 cmdline: C:\Users\u ser\Deskto p\adobe.ex e MD5: E9A2997EE4CFB48CB3988F3048E041E9) - adobe.tmp (PID: 7320 cmdline:
"C:\Users\ user\AppDa ta\Local\T emp\is-D33 JM.tmp\ado be.tmp" /S L5="$20466 ,4603715,5 4272,C:\Us ers\user\D esktop\ado be.exe" MD5: EAF0354C6EA59246416F73EC28FB11AF) 
aviformattertool.exe (PID: 7356 cmdline: "C:\Users\ user\AppDa ta\Local\A VI formatt er tool\av iformatter tool.exe" -i MD5: 354540FAD1E406C119F19FC2499E892C) - aviformattertool.exe (PID: 7388 cmdline:
"C:\Users\ user\AppDa ta\Local\A VI formatt er tool\av iformatter tool.exe" -s MD5: 354540FAD1E406C119F19FC2499E892C)
- cleanup
⊘No configs have been found
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_PetiteVirus | Yara detected Petite Virus | Joe Security | ||
| JoeSecurity_PetiteVirus | Yara detected Petite Virus | Joe Security | ||
| JoeSecurity_PetiteVirus | Yara detected Petite Virus | Joe Security | ||
| JoeSecurity_PetiteVirus | Yara detected Petite Virus | Joe Security |
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_Socks5Systemz | Yara detected Socks5Systemz | Joe Security | ||
| JoeSecurity_Socks5Systemz | Yara detected Socks5Systemz | Joe Security | ||
| JoeSecurity_Socks5Systemz | Yara detected Socks5Systemz | Joe Security |
⊘No Sigma rule has matched
⊘No Snort rule has matched
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | Avira: | ||
| Source: | Avira URL Cloud: | ||
| Source: | Avira URL Cloud: | ||
| Source: | Avira URL Cloud: | ||
| Source: | Joe Sandbox ML: | ||
| Source: | Joe Sandbox ML: | ||
| Source: | Code function: | 1_2_0045C9A8 | |
| Source: | Code function: | 1_2_0045CA5C | |
| Source: | Code function: | 1_2_0045CA74 | |
| Source: | Code function: | 1_2_10001000 | |
| Source: | Code function: | 1_2_10001130 | |
Compliance | |
|---|
| Source: | Unpacked PE file: | ||
| Source: | Unpacked PE file: | ||
| Source: | Static PE information: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
| Source: | Code function: | 1_2_00474078 | |
| Source: | Code function: | 1_2_004520D0 | |
| Source: | Code function: | 1_2_0049676C | |
| Source: | Code function: | 1_2_00463504 | |
| Source: | Code function: | 1_2_00463980 | |
| Source: | Code function: | 1_2_00461F78 | |
| Source: | TCP traffic: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | UDP traffic detected without corresponding DNS query: | ||
| Source: | Code function: | 3_2_02A172FC | |
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
System Summary | |
|---|
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Code function: | 1_2_0042F394 | |
| Source: | Code function: | 1_2_00423B94 | |
| Source: | Code function: | 1_2_004125E8 | |
| Source: | Code function: | 1_2_0045688C | |
| Source: | Code function: | 1_2_004776DC | |
| Source: | Code function: | 1_2_0042E7A8 | |
| Source: | Code function: | 0_2_00409448 | |
| Source: | Code function: | 1_2_00454B10 | |
| Source: | Code function: | 0_2_0040840C | |
| Source: | Code function: | 1_2_00466BB8 | |
| Source: | Code function: | 1_2_0047F1BC | |
| Source: | Code function: | 1_2_0046F7F0 | |
| Source: | Code function: | 1_2_0048600C | |
| Source: | Code function: | 1_2_004301D0 | |
| Source: | Code function: | 1_2_004442C4 | |
| Source: | Code function: | 1_2_0048C314 | |
| Source: | Code function: | 1_2_0045E8EC | |
| Source: | Code function: | 1_2_0045A994 | |
| Source: | Code function: | 1_2_004449BC | |
| Source: | Code function: | 1_2_00434B1C | |
| Source: | Code function: | 1_2_00468C40 | |
| Source: | Code function: | 1_2_00430D5C | |
| Source: | Code function: | 1_2_00444DC8 | |
| Source: | Code function: | 1_2_0045102C | |
| Source: | Code function: | 1_2_004850D8 | |
| Source: | Code function: | 1_2_0043D5A4 | |
| Source: | Code function: | 1_2_00443D1C | |
| Source: | Code function: | 1_2_00433E18 | |
| Source: | Code function: | 1_2_02311260 | |
| Source: | Code function: | 1_2_02311D20 | |
| Source: | Code function: | 2_2_00401051 | |
| Source: | Code function: | 2_2_00401C26 | |
| Source: | Code function: | 3_2_00401051 | |
| Source: | Code function: | 3_2_00401C26 | |
| Source: | Code function: | 3_2_02A2E1CD | |
| Source: | Code function: | 3_2_02A29EC4 | |
| Source: | Code function: | 3_2_02A34E69 | |
| Source: | Code function: | 3_2_02A1EFFA | |
| Source: | Code function: | 3_2_02A28482 | |
| Source: | Code function: | 3_2_02A2DCD9 | |
| Source: | Code function: | 3_2_02A2AC7A | |
| Source: | Code function: | 3_2_02A2E5E5 | |
| Source: | Code function: | 3_2_02A32DF4 | |
| Source: | Dropped File: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Classification label: | ||
| Source: | Code function: | 3_2_02A208F8 | |
| Source: | Code function: | 0_2_00409448 | |
| Source: | Code function: | 1_2_00454B10 | |
| Source: | Code function: | 1_2_00455338 | |
| Source: | Code function: | 2_2_0040259B | |
| Source: | Code function: | 3_2_0040259B | |
| Source: | Code function: | 0_2_00409BEC | |
| Source: | Code function: | 2_2_0040219E | |
| Source: | Code function: | 2_2_0040219E | |
| Source: | Code function: | 3_2_0040219E | |
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | Key value created or modified: | Jump to behavior | ||
| Source: | File read: | Jump to behavior | ||
| Source: | File read: | Jump to behavior | ||
| Source: | File read: | Jump to behavior | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Source: | Key value created or modified: | Jump to behavior | ||
| Source: | Window found: | Jump to behavior | ||
| Source: | Window detected: | ||
| Source: | Static file information: | ||
| Source: | Binary string: | ||
| Source: | Binary string: | ||
Data Obfuscation | |
|---|
| Source: | Unpacked PE file: | ||
| Source: | Unpacked PE file: | ||
| Source: | Unpacked PE file: | ||
| Source: | Unpacked PE file: | ||
| Source: | Code function: | 1_2_0044C030 | |
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Code function: | 0_2_004065ED | |
| Source: | Code function: | 0_2_004040F1 | |
| Source: | Code function: | 0_2_00408109 | |
| Source: | Code function: | 0_2_00404389 | |
| Source: | Code function: | 0_2_00404389 | |
| Source: | Code function: | 0_2_0040C219 | |
| Source: | Code function: | 0_2_00404389 | |
| Source: | Code function: | 0_2_00404389 | |
| Source: | Code function: | 0_2_0040CDA1 | |
| Source: | Code function: | 0_2_0040CDA1 | |
| Source: | Code function: | 0_2_00408F63 | |
| Source: | Code function: | 1_2_00409989 | |
| Source: | Code function: | 1_2_0040A050 | |
| Source: | Code function: | 1_2_0040A04D | |
| Source: | Code function: | 1_2_004062CD | |
| Source: | Code function: | 1_2_004825CE | |
| Source: | Code function: | 1_2_004106E5 | |
| Source: | Code function: | 1_2_00476725 | |
| Source: | Code function: | 1_2_00412993 | |
| Source: | Code function: | 1_2_00458B2C | |
| Source: | Code function: | 1_2_00442C98 | |
| Source: | Code function: | 1_2_00450E93 | |
| Source: | Code function: | 1_2_00451031 | |
| Source: | Code function: | 1_2_0040D03A | |
| Source: | Code function: | 1_2_004572E0 | |
| Source: | Code function: | 1_2_00493315 | |
| Source: | Code function: | 1_2_004054A9 | |
| Source: | Code function: | 1_2_0045F548 | |
| Source: | Code function: | 1_2_00405741 | |
| Source: | Code function: | 1_2_0040F59A | |
| Source: | Code function: | 1_2_00405741 | |
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
| Source: | Static PE information: | ||
Persistence and Installation Behavior | |
|---|
| Source: | Code function: | 2_2_00401A4F | |
| Source: | Code function: | 3_2_00401A4F | |
| Source: | Code function: | 3_2_02A1F823 | |
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
| Source: | File created: | Jump to dropped file | ||
Boot Survival | |
|---|
| Source: | Code function: | 2_2_00401A4F | |
| Source: | Code function: | 3_2_00401A4F | |
| Source: | Code function: | 3_2_02A1F823 | |
| Source: | Code function: | 2_2_0040219E | |
| Source: | Code function: | 1_2_00423C1C | |
| Source: | Code function: | 1_2_00423C1C | |
| Source: | Code function: | 1_2_004241EC | |
| Source: | Code function: | 1_2_004241A4 | |
| Source: | Code function: | 1_2_00418394 | |
| Source: | Code function: | 1_2_0042286C | |
| Source: | Code function: | 1_2_004175A8 | |
| Source: | Code function: | 1_2_00417CDE | |
| Source: | Code function: | 1_2_00417CE0 | |
| Source: | Code function: | 1_2_00481EB4 | |
| Source: | Code function: | 1_2_0044AEAC | |
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Code function: | 2_2_00401B4B | |
| Source: | Code function: | 3_2_00401B4B | |
| Source: | Code function: | 3_2_02A1F927 | |
| Source: | Window / User API: | Jump to behavior | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Dropped PE file which has not been started: | Jump to dropped file | ||
| Source: | Evasive API call chain: | graph_0-5550 | ||
| Source: | Evasive API call chain: | graph_2-2476 | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | Thread sleep count: | Jump to behavior | ||
| Source: | Thread sleep time: | Jump to behavior | ||
| Source: | File opened: | Jump to behavior | ||
| Source: | Code function: | 1_2_00474078 | |
| Source: | Code function: | 1_2_004520D0 | |
| Source: | Code function: | 1_2_0049676C | |
| Source: | Code function: | 1_2_00463504 | |
| Source: | Code function: | 1_2_00463980 | |
| Source: | Code function: | 1_2_00461F78 | |
| Source: | Code function: | 0_2_00409B30 | |
| Source: | Thread delayed: | Jump to behavior | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | Binary or memory string: | ||
| Source: | API call chain: | graph_0-6682 | ||
| Source: | API call chain: | graph_2-2866 | ||
| Source: | API call chain: | graph_3-18143 | ||
| Source: | API call chain: | graph_3-17872 | ||
| Source: | Code function: | 3_2_02A3013E | |
| Source: | Code function: | 3_2_02A3013E | |
| Source: | Code function: | 1_2_0044C030 | |
| Source: | Code function: | 3_2_02A164DC | |
| Source: | Code function: | 3_2_02A294A8 | |
| Source: | Code function: | 1_2_00477120 | |
| Source: | Code function: | 1_2_0042DFC4 | |
| Source: | Code function: | 3_2_02A27FED | |
| Source: | Code function: | 0_2_004051FC | |
| Source: | Code function: | 0_2_00405248 | |
| Source: | Code function: | 1_2_00408570 | |
| Source: | Code function: | 1_2_004085BC | |
| Source: | Code function: | 1_2_00457DE8 | |
| Source: | Code function: | 0_2_004026C4 | |
| Source: | Code function: | 1_2_00454AC8 | |
| Source: | Code function: | 0_2_00405CE4 | |
Stealing of Sensitive Information | |
|---|
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
Remote Access Functionality | |
|---|
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Exfiltration | Command and Control | Network Effects | Remote Service Effects | Impact | Resource Development | Reconnaissance |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Valid Accounts | 3 Native API | 4 Windows Service | 1 Exploitation for Privilege Escalation | 1 Deobfuscate/Decode Files or Information | OS Credential Dumping | 1 System Time Discovery | Remote Services | 1 Archive Collected Data | Exfiltration Over Other Network Medium | 2 Ingress Tool Transfer | Exploit SS7 to Redirect Phone Calls/SMS | Remotely Wipe Data Without Authorization | 1 System Shutdown/Reboot | Acquire Infrastructure | Gather Victim Identity Information |
| Default Accounts | 2 Service Execution | 1 Bootkit | 1 Access Token Manipulation | 3 Obfuscated Files or Information | LSASS Memory | 1 Account Discovery | Remote Desktop Protocol | Data from Removable Media | Exfiltration Over Bluetooth | 2 Encrypted Channel | SIM Card Swap | Obtain Device Cloud Backups | Network Denial of Service | Domains | Credentials |
| Domain Accounts | At | Logon Script (Windows) | 4 Windows Service | 23 Software Packing | Security Account Manager | 1 File and Directory Discovery | SMB/Windows Admin Shares | Data from Network Shared Drive | Automated Exfiltration | 1 Non-Standard Port | Data Encrypted for Impact | DNS Server | Email Addresses | ||
| Local Accounts | Cron | Login Hook | 2 Process Injection | 1 Masquerading | NTDS | 35 System Information Discovery | Distributed Component Object Model | Input Capture | Traffic Duplication | 2 Non-Application Layer Protocol | Data Destruction | Virtual Private Server | Employee Names | ||
| Cloud Accounts | Launchd | Network Logon Script | Network Logon Script | 21 Virtualization/Sandbox Evasion | LSA Secrets | 41 Security Software Discovery | SSH | Keylogging | Scheduled Transfer | 12 Application Layer Protocol | Data Encrypted for Impact | Server | Gather Victim Network Information | ||
| Replication Through Removable Media | Scheduled Task | RC Scripts | RC Scripts | 1 Access Token Manipulation | Cached Domain Credentials | 21 Virtualization/Sandbox Evasion | VNC | GUI Input Capture | Data Transfer Size Limits | Multiband Communication | Service Stop | Botnet | Domain Properties | ||
| External Remote Services | Systemd Timers | Startup Items | Startup Items | 2 Process Injection | DCSync | 11 Application Window Discovery | Windows Remote Management | Web Portal Capture | Exfiltration Over C2 Channel | Commonly Used Port | Inhibit System Recovery | Web Services | DNS | ||
| Drive-by Compromise | Container Orchestration Job | Scheduled Task/Job | Scheduled Task/Job | 1 Bootkit | Proc Filesystem | 3 System Owner/User Discovery | Cloud Services | Credential API Hooking | Exfiltration Over Alternative Protocol | Application Layer Protocol | Defacement | Serverless | Network Trust Dependencies | ||
| Exploit Public-Facing Application | Command and Scripting Interpreter | At | At | HTML Smuggling | /etc/passwd and /etc/shadow | 1 Remote System Discovery | Direct Cloud VM Connections | Data Staged | Exfiltration Over Symmetric Encrypted Non-C2 Protocol | Web Protocols | Internal Defacement | Malvertising | Network Topology | ||
| Supply Chain Compromise | PowerShell | Cron | Cron | Dynamic API Resolution | Network Sniffing | 1 System Network Configuration Discovery | Shared Webroot | Local Data Staging | Exfiltration Over Asymmetric Encrypted Non-C2 Protocol | File Transfer Protocols | External Defacement | Compromise Infrastructure | IP Addresses |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | Avira | HEUR/AGEN.1332570 |
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | Joe Sandbox ML | |||
| 100% | Joe Sandbox ML | |||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 1% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 1% | Virustotal | Browse | ||
| 3% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 3% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 3% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse | ||
| 0% | ReversingLabs | |||
| 0% | Virustotal | Browse |
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 100% | Avira URL Cloud | malware | ||
| 0% | Avira URL Cloud | safe | ||
| 100% | Avira URL Cloud | malware | ||
| 0% | Avira URL Cloud | safe | ||
| 100% | Avira URL Cloud | malware | ||
| 0% | Avira URL Cloud | safe | ||
| 0% | Avira URL Cloud | safe | ||
| 2% | Virustotal | Browse | ||
| 0% | Virustotal | Browse |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| bfjesdr.com | 185.196.8.22 | true | false | unknown |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false |
| unknown | |
| false |
| unknown |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| true |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 185.196.8.22 | bfjesdr.com | Switzerland | 34888 | SIMPLECARRER2IT | false | |
| 65.109.80.185 | unknown | United States | 11022 | ALABANZA-BALTUS | false |
| Joe Sandbox version: | 38.0.0 Ammolite |
| Analysis ID: | 1374165 |
| Start date and time: | 2024-01-13 06:31:06 +01:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 7m 0s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | default.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 8 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | adobe.exe |
| Detection: | MAL |
| Classification: | mal100.troj.evad.winEXE@7/102@1/2 |
| EGA Information: |
|
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
- Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtDeviceIoControlFile calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
| Time | Type | Description |
|---|---|---|
| 06:32:31 | API Interceptor |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 185.196.8.22 | Get hash | malicious | LummaC, Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Socks5Systemz, Vidar | Browse | ||
| Get hash | malicious | LummaC, Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Socks5Systemz, Vidar | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| 65.109.80.185 | Get hash | malicious | Petite Virus, Socks5Systemz | Browse | ||
| Get hash | malicious | LummaC, Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Socks5Systemz, Vidar | Browse | |||
| Get hash | malicious | LummaC, Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Socks5Systemz, Vidar | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
⊘No context
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| SIMPLECARRER2IT | Get hash | malicious | LummaC, Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Socks5Systemz, Vidar | Browse |
| |
| Get hash | malicious | LummaC, Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Socks5Systemz, Vidar | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| ALABANZA-BALTUS | Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| |
| Get hash | malicious | Mirai | Browse |
| ||
| Get hash | malicious | LummaC, Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Socks5Systemz, Vidar | Browse |
| ||
| Get hash | malicious | LummaC, Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Socks5Systemz, Vidar | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
|
⊘No context
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| C:\Users\user\AppData\Local\AVI formatter tool\bin\x86\7z.exe (copy) | Get hash | malicious | Petite Virus, Socks5Systemz | Browse | ||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | LummaC, Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Socks5Systemz, Vidar | Browse | |||
| Get hash | malicious | LummaC, Glupteba, LummaC Stealer, Petite Virus, SmokeLoader, Socks5Systemz, Vidar | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse | |||
| Get hash | malicious | Petite Virus, Socks5Systemz | Browse |
| Process: | C:\Users\user\AppData\Local\AVI formatter tool\aviformattertool.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1757184 |
| Entropy (8bit): | 7.100391032754955 |
| Encrypted: | false |
| SSDEEP: | 24576:CAQ4shKtykNo8EEOSl9//ryooMLqSB1gmxAMGkTMWad6JNcED/RZVqL3zpUy0NuQ:CAshu19d/mwLqAgjga7n |
| MD5: | 354540FAD1E406C119F19FC2499E892C |
| SHA1: | 98CD46B576B5DE73E16994017103ED293332DDDC |
| SHA-256: | 492E0BA31524B734F4EB4C85C79384CAB14EF3271920C03724607FCAB9991063 |
| SHA-512: | 20D95D55E5343AE5A52173F9A84772503EF36AA8C9615C62218564B29EFF82A346349AFFEC2C26D1350AFCE1A0D1B742C312A6E013FB568603A2D7CBA4F35BD4 |
| Malicious: | true |
| Antivirus: |
|
| Reputation: | low |
| Preview: |
| Process: | C:\Users\user\AppData\Local\AVI formatter tool\aviformattertool.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4 |
| Entropy (8bit): | 0.8112781244591328 |
| Encrypted: | false |
| SSDEEP: | 3:bln:B |
| MD5: | DBDF56957D6E4CFD0A3551C6B6191793 |
| SHA1: | 9D12E4B32EC3558DD008BABB38FB85DD4DDD10B1 |
| SHA-256: | A508ABA2F9ECB586E66AF72AD7AE18A1B38F8A5BD61E5CA3022ABCDD081C0531 |
| SHA-512: | F0A1DF5E5AA1EB17E18AF7112A0CAD2AF543235481D3200F181309A07ED082392459FA772552FF357B68EEDB178F65CEFA325D7F1C66400E7D67DB69A845398A |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Users\user\AppData\Local\AVI formatter tool\aviformattertool.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 128 |
| Entropy (8bit): | 2.9545817380615236 |
| Encrypted: | false |
| SSDEEP: | 3:SmwW3Fde9UUDrjStGs/:Smze7DPStGM |
| MD5: | 98DDA7FC0B3E548B68DE836D333D1539 |
| SHA1: | D0CB784FA2BBD3BDE2BA4400211C3B613638F1C6 |
| SHA-256: | 870555CDCBA1F066D893554731AE99A21AE776D41BCB680CBD6510CB9F420E3D |
| SHA-512: | E79BD8C2E0426DBEBA8AC2350DA66DC0413F79860611A05210905506FEF8B80A60BB7E76546B0CE9C6E6BC9DDD4BC66FF4C438548F26187EAAF6278F769B3AC1 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Users\user\AppData\Local\AVI formatter tool\aviformattertool.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 128 |
| Entropy (8bit): | 1.2701231977328944 |
| Encrypted: | false |
| SSDEEP: | 3:WAmJuXDz8/:HHzc |
| MD5: | 0D6174E4525CFDED5DD1C9440B9DC1E7 |
| SHA1: | 173EF30A035CE666278904625EADCFAE09233A47 |
| SHA-256: | 458677CDF0E1A4E87D32AB67D6A5EEA9E67CB3545D79A21A0624E6BB5E1087E7 |
| SHA-512: | 86DA96385985A1BA3D67A8676A041CA563838F474DF33D82B6ECD90C101703B30747121A6B7281E025A3C11CE28ACCEDFC94DB4E8D38E391199458056C2CD27A |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Users\user\AppData\Local\AVI formatter tool\aviformattertool.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 8 |
| Entropy (8bit): | 2.0 |
| Encrypted: | false |
| SSDEEP: | 3:kgln:kgl |
| MD5: | 499AE62316402A220844EBF1FC2682BF |
| SHA1: | 9DF275E32916B1BCE6D21F6C9B6015EBC50F4C15 |
| SHA-256: | 06D87BD139932954B213115591FC07BACCB1A66C7C5222C47BF501905C0C71A2 |
| SHA-512: | 417027486B0895874509F5029991D846B775AFCDF86BBABE0429054A8799C625366AC0E064D37CA01D442EBE239C333E56E360663A6573F7A6550A7AFBA6D825 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | modified |
| Size (bytes): | 1757184 |
| Entropy (8bit): | 7.100391032754955 |
| Encrypted: | false |
| SSDEEP: | 24576:CAQ4shKtykNo8EEOSl9//ryooMLqSB1gmxAMGkTMWad6JNcED/RZVqL3zpUy0NuQ:CAshu19d/mwLqAgjga7n |
| MD5: | 354540FAD1E406C119F19FC2499E892C |
| SHA1: | 98CD46B576B5DE73E16994017103ED293332DDDC |
| SHA-256: | 492E0BA31524B734F4EB4C85C79384CAB14EF3271920C03724607FCAB9991063 |
| SHA-512: | 20D95D55E5343AE5A52173F9A84772503EF36AA8C9615C62218564B29EFF82A346349AFFEC2C26D1350AFCE1A0D1B742C312A6E013FB568603A2D7CBA4F35BD4 |
| Malicious: | true |
| Antivirus: |
|
| Reputation: | low |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 337408 |
| Entropy (8bit): | 6.515131904432587 |
| Encrypted: | false |
| SSDEEP: | 6144:3nzsyDn7PDS+FDflUjvJUkbEOyF1rOpsuCOuOff5k4F/lTRHA:3377SKfgvqkbFyFJCRRzH |
| MD5: | 62D2156E3CA8387964F7AA13DD1CCD5B |
| SHA1: | A5067E046ED9EA5512C94D1D17C394D6CF89CCCA |
| SHA-256: | 59CBFBA941D3AC0238219DAA11C93969489B40F1E8B38FABDB5805AC3DD72BFA |
| SHA-512: | 006F7C46021F339B6CBF9F0B80CFFA74ABB8D48E12986266D069738C4E6BDB799BFBA4B8EE4565A01E90DBE679A96A2399D795A6EAD6EACBB4818A155858BF60 |
| Malicious: | true |
| Antivirus: |
|
| Joe Sandbox View: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26526 |
| Entropy (8bit): | 4.600837395607617 |
| Encrypted: | false |
| SSDEEP: | 384:Lc56OuAbnn0UReX6wFDVxnFw7xqsvzt+z/k8E9HinIhFkspcM9bc7ups0CZuQG:Lc5trLeDnFMz1ReScmc7GshZuQG |
| MD5: | BD7A443320AF8C812E4C18D1B79DF004 |
| SHA1: | 37D2F1D62FEC4DA0CAF06E5DA21AFC3521B597AA |
| SHA-256: | B634AB5640E258563C536E658CAD87080553DF6F34F62269A21D554844E58BFE |
| SHA-512: | 21AEF7129B5B70E3F9255B1EA4DC994BF48B8A7F42CD90748D71465738D934891BBEC6C6FC6A1CCFAF7D3F35496677D62E2AF346D5E8266F6A51AE21A65C4460 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 214016 |
| Entropy (8bit): | 6.676457645865373 |
| Encrypted: | false |
| SSDEEP: | 3072:v3UEEkp2yVTcc295GSSazZq0/OlxAOxN5jZ2Ti30ezAg0Fu9RBhk1Xion:cEEpYcc2G/adqLtxLZ2+vAO9Hhkzn |
| MD5: | 2C747F19BF1295EBBDAB9FB14BB19EE2 |
| SHA1: | 6F3B71826C51C739D6BB75085E634B2B2EF538BC |
| SHA-256: | D2074B91A63219CFD3313C850B2833CD579CC869EF751B1F5AD7EDFB77BD1EDD |
| SHA-512: | C100C0A5AF52D951F3905884E9B9D0EC1A0D0AEBE70550A646BA6E5D33583247F67CA19E1D045170A286D92EE84E1676A6C1B0527E017A35B6242DD9DEE05AF4 |
| Malicious: | false |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 34392 |
| Entropy (8bit): | 7.81689943223162 |
| Encrypted: | false |
| SSDEEP: | 768:mYBs3O9YL558R6R8P8W2rjQZQtfTIxRYsetoPNvPWIl+syr:vsUY15mqzW2u8rIxisFcJr |
| MD5: | EA245B00B9D27EF2BD96548A50A9CC2C |
| SHA1: | 8463FDCDD5CED10C519EE0B406408AE55368E094 |
| SHA-256: | 4824A06B819CBE49C485D68A9802D9DAE3E3C54D4C2D8B706C8A87B56CEEFBF3 |
| SHA-512: | EF1E107571402925AB5B1D9B096D7CEFF39C1245A23692A3976164D0DE0314F726CCA0CB10246FE58A13618FD5629A92025628373B3264153FC1D79B0415D9A7 |
| Malicious: | false |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5960 |
| Entropy (8bit): | 5.956401374574174 |
| Encrypted: | false |
| SSDEEP: | 96:dj78cqhzbWKlECE7WbjDFf6IhaYYUOAoDf4+XCVhovG9AkM7Ui10:CjlEJ7WbjDFf6waYvdc4gYAkM10 |
| MD5: | B3CC560AC7A5D1D266CB54E9A5A4767E |
| SHA1: | E169E924405C2114022674256AFC28FE493FBFDF |
| SHA-256: | EDDE733A8D2CA65C8B4865525290E55B703530C954F001E68D1B76B2A54EDCB5 |
| SHA-512: | A836DECACB42CC3F7D42E2BF7A482AE066F5D1DF08CCCC466880391028059516847E1BF71E4C6A90D2D34016519D16981DDEEACFB94E166E4A9A720D9CC5D699 |
| Malicious: | false |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 7910 |
| Entropy (8bit): | 6.931925007191986 |
| Encrypted: | false |
| SSDEEP: | 192:piDl1jKrGer007ia6abHX0d/aeHeN+VPHIJQxNiJCl9AK0f:IDJ9aDb30dCe+4PHIJrJCl9AK0f |
| MD5: | 1268DEA570A7511FDC8E70C1149F6743 |
| SHA1: | 1D646FC69145EC6A4C0C9CAD80626AD40F22E8CD |
| SHA-256: | F266DBA7B23321BF963C8D8B1257A50E1467FAAAB9952EF7FFED1B6844616649 |
| SHA-512: | E19F0EA39FF7AA11830AF5AAD53343288C742BE22299C815C84D24251FA2643B1E0401AF04E5F9B25CAB29601EA56783522DDB06C4195C6A609804880BAE9E9B |
| Malicious: | false |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 18966 |
| Entropy (8bit): | 7.620111275837424 |
| Encrypted: | false |
| SSDEEP: | 384:gOKwxnw6OVDU839fgRgFMkucNauTT80CyTIz2bGjqXOK0Jo:gOHwBDUOe2McQkI0Cyo2Q/o |
| MD5: | F0F973781B6A66ADF354B04A36C5E944 |
| SHA1: | 8E8EE3A18D4CEC163AF8756E1644DF41C747EDC7 |
| SHA-256: | 04AB613C895B35044AF8A9A98A372A5769C80245CC9D6BF710A94C5BC42FA1B3 |
| SHA-512: | 118D5DACC2379913B725BD338F8445016F5A0D1987283B082D37C1D1C76200240E8C79660E980F05E13E4EB79BDA02256EAC52385DAA557C6E0C5D326D43A835 |
| Malicious: | true |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 36752 |
| Entropy (8bit): | 7.780431937344781 |
| Encrypted: | false |
| SSDEEP: | 768:E7epCl6I8YbTvEKXQ2vm+iocmmMt7KjuDnlVahRlmftuY5B:EepUv8aZvmd+7nDDalauy |
| MD5: | 9FF783BB73F8868FA6599CDE65ED21D7 |
| SHA1: | F515F91D62D36DC64ADAA06FA0EF6CF769376BDF |
| SHA-256: | E0234AF5F71592C472439536E710BA8105D62DFA68722965DF87FED50BAB1816 |
| SHA-512: | C9D3C3502601026B6D55A91C583E0BB607BFC695409B984C0561D0CBE7D4F8BD231BC614E0EC1621C287BF0F207017D3E041694320E692FF00BC2220BFA26C26 |
| Malicious: | true |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 36416 |
| Entropy (8bit): | 7.842278356440954 |
| Encrypted: | false |
| SSDEEP: | 768:lshkyPXvH6bPACtmb8boNQdVfCXewki/OvXEApOqmFfSq1oIQMW:lsh3n5Pb8boOdVCuwNEXEAonfSq1JQb |
| MD5: | BEBA64522AA8265751187E38D1FC0653 |
| SHA1: | 63FFB566AA7B2242FCC91A67E0EDA940C4596E8E |
| SHA-256: | 8C58BC6C89772D0CD72C61E6CF982A3F51DEE9AAC946E076A0273CD3AAF3BE9D |
| SHA-512: | 13214E191C6D94DB914835577C048ADF2240C7335C0A2C2274C096114B7B75CD2CE13A76316963CCD55EE371631998FAC678FCF82AE2AE178B7813B2C35C6651 |
| Malicious: | true |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 19008 |
| Entropy (8bit): | 7.672481244971812 |
| Encrypted: | false |
| SSDEEP: | 384:dz7otnjFa4ECX3yeGjA+tSXGnUav92hca+XWRlsuG+is:po7GU+szS3W7sQ7 |
| MD5: | 8EE91149989D50DFCF9DAD00DF87C9B0 |
| SHA1: | E5581E6C1334A78E493539F8EA1CE585C9FFAF89 |
| SHA-256: | 3030E22F4A854E11A8AA2128991E4867CA1DF33BC7B9AFF76A5E6DEEF56927F6 |
| SHA-512: | FA04E8524DA444DD91E4BD682CC9ADEE445259E0C6190A7DEF82B8C4478A78AAA8049337079AD01F7984DBA28316D72445A0F0D876F268A062AD9B8FF2A6E58D |
| Malicious: | true |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 68876 |
| Entropy (8bit): | 7.922125376804506 |
| Encrypted: | false |
| SSDEEP: | 1536:q0Z4sz1ZMjCjDIhoLffiedENahBzzxO/JfgmYFGKEvi8TxCI+vHVl:v4MzMjGkhoLfsahS/JYN2vUl |
| MD5: | 4E35BA785CD3B37A3702E577510F39E3 |
| SHA1: | A2FD74A68BEFF732E5F3CB0835713AEA8D639902 |
| SHA-256: | 0AFE688B6FCA94C69780F454BE65E12D616C6E6376E80C5B3835E3FA6DE3EB8A |
| SHA-512: | 1B839AF5B4049A20D9B8A0779FE943A4238C8FBFBF306BC6D3A27AF45C76F6C56B57B2EC8F087F7034D89B5B139E53A626A8D7316BE1374EAC28B06D23E7995D |
| Malicious: | false |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 17472 |
| Entropy (8bit): | 7.524548435291935 |
| Encrypted: | false |
| SSDEEP: | 384:IwwsQD13cT5HhSVeEQNW5kbbcGEh/qTio+lyTnGy:QRD13ySVeEOW5kbSSTHNTnr |
| MD5: | 7B52BE6D702AA590DB57A0E135F81C45 |
| SHA1: | 518FB84C77E547DD73C335D2090A35537111F837 |
| SHA-256: | 9B5A8B323D2D1209A5696EAF521669886F028CE1ECDBB49D1610C09A22746330 |
| SHA-512: | 79C1959A689BDC29B63CA771F7E1AB6FF960552CADF0644A7C25C31775FE3458884821A0130B1BAB425C3B41F1C680D4776DD5311CE3939775A39143C873A6FE |
| Malicious: | false |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 35588 |
| Entropy (8bit): | 7.817557274117395 |
| Encrypted: | false |
| SSDEEP: | 768:dCrMZHv56WRldhmLjQDrbfc8cznHvc6modHQ:sAR0LzHvc6m2HQ |
| MD5: | 58521D1AC2C588B85642354F6C0C7812 |
| SHA1: | 5912D2507F78C18D5DC567B2FA8D5AE305345972 |
| SHA-256: | 452EEE1E4EF2FE2E00060113CCE206E90986E2807BB966019AC4E9DEB303A9BD |
| SHA-512: | 3988B61F6B633718DE36C0669101E438E70A17E3962A5C3A519BDECC3942201BA9C3B3F94515898BB2F8354338BA202A801B22129FC6D56598103B13364748C1 |
| Malicious: | false |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1059 |
| Entropy (8bit): | 5.1208137218866945 |
| Encrypted: | false |
| SSDEEP: | 24:LLDrmJHHH0yN3gtsHw1hj9QHOsUv4eOk4/+/m3oqLF5n:LLDaJHlxE35QHOs5exm3ogF5n |
| MD5: | B7EDCC6CB01ACE25EBD2555CF15473DC |
| SHA1: | 2627FF03833F74ED51A7F43C55D30B249B6A0707 |
| SHA-256: | D6B4754BB67BDD08B97D5D11B2D7434997A371585A78FE77007149DF3AF8D09C |
| SHA-512: | 962BD5C9FB510D57FAC0C3B189B7ADEB29E00BED60F0BB9D7E899601C06C2263EDA976E64C352E4B7C0AAEFB70D2FCB0ABEF45E43882089477881A303EB88C09 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 16910 |
| Entropy (8bit): | 5.289608933932413 |
| Encrypted: | false |
| SSDEEP: | 384:ohtyjknGC7hipL+9mLYFOozxkdlDNUwS5Qq:UGknGC74l+MUFI7C |
| MD5: | 2F040608E68E679DD42B7D8D3FCA563E |
| SHA1: | 4B2C3A6B8902E32CDA33A241B24A79BE380C55FC |
| SHA-256: | 6B980CADC3E7047CC51AD1234CB7E76FF520149A746CB64E5631AF1EA1939962 |
| SHA-512: | 718AF5BE259973732179ABA45B672637FCA21AE575B4115A62139A751C04F267F355B8F7F7432B56719D91390DABA774B39283CBCFE18F09CA033389FB31A4FC |
| Malicious: | true |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 15374 |
| Entropy (8bit): | 5.192037544202194 |
| Encrypted: | false |
| SSDEEP: | 384:lhgkOI7BGi9gKV6uq+u6JewsNhNXUwSCgQ:DT7BGVKPKbXF |
| MD5: | BEFD36FE8383549246E1FD49DB270C07 |
| SHA1: | 1EF12B568599F31292879A8581F6CD0279F3E92A |
| SHA-256: | B5942E8096C95118C425B30CEC8838904897CDEF78297C7BBB96D7E2D45EE288 |
| SHA-512: | FD9AA6A4134858A715BE846841827196382D0D86F2B1AA5C7A249B770408815B0FE30C4D1E634E8D6D3C8FEDBCE4654CD5DC240F91D54FC8A7EFE7CAE2E569F4 |
| Malicious: | true |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 197646 |
| Entropy (8bit): | 6.1570532273946625 |
| Encrypted: | false |
| SSDEEP: | 3072:brPGp0y4SP+iBGgySYm+dE3sYrJqkAzhU88vsAGSW+:brPGaTEsHSYmbbOU8osAGG |
| MD5: | 2C8EC61630F8AA6AAC674E4C63F4C973 |
| SHA1: | 64E3BB9AA505C66E87FE912D4EA3054ADF6CEF76 |
| SHA-256: | DFD55D0DDD1A7D081FCE8E552DC29706A84DC6CA2FDD2F82D63F33D74E882849 |
| SHA-512: | 488378012FB5F477ED4636C37D7A883B1DAD0FBC671D238B577A9374EFE40AB781F5E483AE921F1909A9B7C1C2A3E78E29B533D3B6FFE15AAEE840CAD2DCF5D0 |
| Malicious: | true |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 31936 |
| Entropy (8bit): | 6.6461204214578 |
| Encrypted: | false |
| SSDEEP: | 768:SEEn30ilOAb++HynTDbc3fwaVCPxWE/MM:SEa0YOU1HgU3fwaVCPxqM |
| MD5: | 72E3BDD0CE0AF6A3A3C82F3AE6426814 |
| SHA1: | A2FB64D5B9F5F3181D1A622D918262CE2F9A7AA3 |
| SHA-256: | 7AC8A8D5679C96D14C15E6DBC6C72C260AAEFB002D0A4B5D28B3A5C2B15DF0AB |
| SHA-512: | A876D0872BFBF099101F7F042AEAF1FD44208A354E64FC18BAB496BEEC6FDABCA432A852795CFC0A220013F619F13281B93ECC46160763AC7018AD97E8CC7971 |
| Malicious: | true |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 197120 |
| Entropy (8bit): | 6.423554884287906 |
| Encrypted: | false |
| SSDEEP: | 6144:X+dMKihenEUunaA+mVMISPCG5vHglwiaJVZkRyAHeOdrQpCklkHy+axeY0R2JdXs:MagxOOZWP2dC28d+y2e |
| MD5: | 67247C0ACA089BDE943F802BFBA8752C |
| SHA1: | 508DA6E0CF31A245D27772C70FFA9A2AE54930A3 |
| SHA-256: | BAB8D388EA3AF1AABB61B8884CFAA7276A2BFD77789856DD610480C55E4D0A60 |
| SHA-512: | C4A690A53581D3E4304188FD772C6F1DA1C72ED2237A13951ACE8879D1986423813A6F7534FF506790CB81633CEB7FF6A6239C1F852725FBACA4B40D9AE3F2DB |
| Malicious: | true |
| Antivirus: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 115712 |
| Entropy (8bit): | 6.401537154757194 |
| Encrypted: | false |
| SSDEEP: | 3072:rY4gILp0Vt7BMkvfHutO+eP0ZjflQf5xqkYXeo21sb2rqG70:rY4gILp0Vt77nLBCtQfjqv8qG70 |
| MD5: | 840D631DA54C308B23590AD6366EBA77 |
| SHA1: | 5ED0928667451239E62E6A0A744DA47C74E1CF89 |
| SHA-256: | 6BAD60DF9A560FB7D6F8647B75C367FDA232BDFCA2291273A21179495DAC3DB9 |
| SHA-512: | 1394A48240BA4EF386215942465BDE418C5C6ED73FC935FE7D207D2A1370155C94CDC15431985ED4E656CA6B777BA79FFC88E78FA3D99DB7E0E6EAC7D1663594 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 62478 |
| Entropy (8bit): | 6.063363187934607 |
| Encrypted: | false |
| SSDEEP: | 768:q3s6+NMpjqudP/XB9rGCWLEc6wY3U0LvDcb0wGNPdqdRJy/5f4mdajO42iySAqB:q8zNM1nBId/ce7GNP6m/5AQGySAs |
| MD5: | 940EEBDB301CB64C7EA2E7FA0646DAA3 |
| SHA1: | 0347F029DA33C30BBF3FB067A634B49E8C89FEC2 |
| SHA-256: | B0B56F11549CE55B4DC6F94ECBA84AEEDBA4300D92F4DC8F43C3C9EEEFCBE3C5 |
| SHA-512: | 50D455C16076C0738FB1FECAE7705E2C9757DF5961D74B7155D7DFB3FAB671F964C73F919CC749D100F6A90A3454BFF0D15ED245A7D26ABCAA5E0FDE3DC958FD |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26126 |
| Entropy (8bit): | 6.048294343792499 |
| Encrypted: | false |
| SSDEEP: | 384:hhkxE9v7/GRm4v5OxlBWaEybb9p7aCyS/hU7CateHcUwSCnq6D:Yx6jGXvc5WaBb99yS/hQh |
| MD5: | D1223F86EDF0D5A2D32F1E2AAAF8AE3F |
| SHA1: | C286CA29826A138F3E01A3D654B2F15E21DBE445 |
| SHA-256: | E0E11A058C4B0ADD3892E0BEA204F6F60A47AFC86A21076036393607235B469C |
| SHA-512: | 7EA1FFB23F8A850F5D3893C6BB66BF95FAB2F10F236A781620E9DC6026F175AAE824FD0E03082F0CF13D05D13A8EEDE4F5067491945FCA82BBCDCF68A0109CFF |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1059 |
| Entropy (8bit): | 5.1208137218866945 |
| Encrypted: | false |
| SSDEEP: | 24:LLDrmJHHH0yN3gtsHw1hj9QHOsUv4eOk4/+/m3oqLF5n:LLDaJHlxE35QHOs5exm3ogF5n |
| MD5: | B7EDCC6CB01ACE25EBD2555CF15473DC |
| SHA1: | 2627FF03833F74ED51A7F43C55D30B249B6A0707 |
| SHA-256: | D6B4754BB67BDD08B97D5D11B2D7434997A371585A78FE77007149DF3AF8D09C |
| SHA-512: | 962BD5C9FB510D57FAC0C3B189B7ADEB29E00BED60F0BB9D7E899601C06C2263EDA976E64C352E4B7C0AAEFB70D2FCB0ABEF45E43882089477881A303EB88C09 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 772608 |
| Entropy (8bit): | 6.546391052615969 |
| Encrypted: | false |
| SSDEEP: | 6144:Q75mFL0MNnM/SQdtij4UujFhGiNV1SckT3wio2L2jV6EfnQ29mwF3s4iGtInw1m8:AwN0e0lN1fnQUFccGns9ukS6 |
| MD5: | B3B487FC3832B607A853211E8AC42CAD |
| SHA1: | 06E32C28103D33DAD53BE06C894203F8808D38C1 |
| SHA-256: | 30BC10BD6E5B2DB1ACE93C2004E24C128D20C242063D4F0889FD3FB3E284A9E4 |
| SHA-512: | FA6BDBA4F2A0CF4CCA40A333B69FD041D9EDC0736EDA206F17F10AF5505CC4688B0401A3CAD2D2F69392E752B8877DB593C7872BCDB133DC785A200FF38598BB |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 62478 |
| Entropy (8bit): | 6.063363187934607 |
| Encrypted: | false |
| SSDEEP: | 768:q3s6+NMpjqudP/XB9rGCWLEc6wY3U0LvDcb0wGNPdqdRJy/5f4mdajO42iySAqB:q8zNM1nBId/ce7GNP6m/5AQGySAs |
| MD5: | 940EEBDB301CB64C7EA2E7FA0646DAA3 |
| SHA1: | 0347F029DA33C30BBF3FB067A634B49E8C89FEC2 |
| SHA-256: | B0B56F11549CE55B4DC6F94ECBA84AEEDBA4300D92F4DC8F43C3C9EEEFCBE3C5 |
| SHA-512: | 50D455C16076C0738FB1FECAE7705E2C9757DF5961D74B7155D7DFB3FAB671F964C73F919CC749D100F6A90A3454BFF0D15ED245A7D26ABCAA5E0FDE3DC958FD |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 512014 |
| Entropy (8bit): | 6.566561154468342 |
| Encrypted: | false |
| SSDEEP: | 12288:BNKab1bu1dEpBZvkO4KTYnyA0bFHmufLKNs3gv:rKcozEpbvkOCyA0xGufLKau |
| MD5: | C4A2068C59597175CD1A29F3E7F31BC1 |
| SHA1: | 89DE0169028E2BDD5F87A51E2251F7364981044D |
| SHA-256: | 7AE79F834A4B875A14D63A0DB356EEC1D356F8E64FF9964E458D1C2050E5D180 |
| SHA-512: | 0989EA9E0EFADF1F6C31E7FC243371BB92BFD1446CF62798DCA38A021FAD8B6ADB0AEABDFBDC5CE8B71FE920E341FC8AB4E906B1839C6E469C75D8148A74A08A |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 227328 |
| Entropy (8bit): | 6.641153481093122 |
| Encrypted: | false |
| SSDEEP: | 6144:jtJXnqDMJgH50aKyumLCGTrS4ifbjoO88k:KqgHlKyumLCGTrS4inoZ |
| MD5: | BC824DC1D1417DE0A0E47A30A51428FD |
| SHA1: | C909C48C625488508026C57D1ED75A4AE6A7F9DB |
| SHA-256: | A87AA800F996902F06C735EA44F4F1E47F03274FE714A193C9E13C5D47230FAB |
| SHA-512: | 566B5D5DDEA920A31E0FB9E048E28EF2AC149EF075DB44542A46671380F904427AC9A6F59FBC09FE3A4FBB2994F3CAEEE65452FE55804E403CEABC091FFAF670 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 258560 |
| Entropy (8bit): | 6.491223412910377 |
| Encrypted: | false |
| SSDEEP: | 6144:X+FRYMGwNozw5upAagZnb80OXrGSc+w9nI7ZMcyVhk233M:SGMGbw5upAagZb80SMXzkgM |
| MD5: | DB191B89F4D015B1B9AEE99AC78A7E65 |
| SHA1: | 8DAC370768E7480481300DD5EBF8BA9CE36E11E3 |
| SHA-256: | 38A75F86DB58EB8D2A7C0213861860A64833C78F59EFF19141FFD6C3B6E28835 |
| SHA-512: | A27E26962B43BA84A5A82238556D06672DCF17931F866D24E6E8DCE88F7B30E80BA38B071943B407A7F150A57CF1DA13D2137C235B902405BEDBE229B6D03784 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 115712 |
| Entropy (8bit): | 6.401537154757194 |
| Encrypted: | false |
| SSDEEP: | 3072:rY4gILp0Vt7BMkvfHutO+eP0ZjflQf5xqkYXeo21sb2rqG70:rY4gILp0Vt77nLBCtQfjqv8qG70 |
| MD5: | 840D631DA54C308B23590AD6366EBA77 |
| SHA1: | 5ED0928667451239E62E6A0A744DA47C74E1CF89 |
| SHA-256: | 6BAD60DF9A560FB7D6F8647B75C367FDA232BDFCA2291273A21179495DAC3DB9 |
| SHA-512: | 1394A48240BA4EF386215942465BDE418C5C6ED73FC935FE7D207D2A1370155C94CDC15431985ED4E656CA6B777BA79FFC88E78FA3D99DB7E0E6EAC7D1663594 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 43520 |
| Entropy (8bit): | 6.232860260916194 |
| Encrypted: | false |
| SSDEEP: | 768:XozEJVjDF38DrOPwLg0cAY7K+k+Y+TyHMjMbHVJx9jm3LkkteFfXbBekdAnPKx:Xo4JJDirOoLg0C7F/rDGdpB52PK |
| MD5: | B162992412E08888456AE13BA8BD3D90 |
| SHA1: | 095FA02EB14FD4BD6EA06F112FDAFE97522F9888 |
| SHA-256: | 2581A6BCA6F4B307658B24A7584A6B300C91E32F2FE06EB1DCA00ADCE60FA723 |
| SHA-512: | 078594DE66F7E065DCB48DA7C13A6A15F8516800D5CEE14BA267F43DC73BC38779A4A4ED9444AFDFA581523392CBE06B0241AA8EC0148E6BCEA8E23B78486824 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 112640 |
| Entropy (8bit): | 6.540227486061059 |
| Encrypted: | false |
| SSDEEP: | 1536:45vq1zsdXYjZmGz9anu3MwjLA/eeiUKJP3Djl23HTKJ7WMU3lPyK+ZSrKxV/UJ9G:vzMMg/gMKeGsMIl6K+Zvry5zNY |
| MD5: | BDB65DCE335AC29ECCBC2CA7A7AD36B7 |
| SHA1: | CE7678DCF7AF0DBF9649B660DB63DB87325E6F69 |
| SHA-256: | 7EC9EE07BFD67150D1BC26158000436B63CA8DBB2623095C049E06091FA374C3 |
| SHA-512: | 8AABCA6BE47A365ACD28DF8224F9B9B5E1654F67E825719286697FB9E1B75478DDDF31671E3921F06632EED5BB3DDA91D81E48D4550C2DCD8E2404D566F1BC29 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 13838 |
| Entropy (8bit): | 5.173769974589746 |
| Encrypted: | false |
| SSDEEP: | 192:oh3ZZBe9xz7rdz9Us5bsRuKUYDpesWAhQqCNhNXUwS7RuLH9+E:ohLBe3dz9UsikKDGZqCNhNXUwS4bcE |
| MD5: | 9C55B3E5ED1365E82AE9D5DA3EAEC9F2 |
| SHA1: | BB3D30805A84C6F0803BE549C070F21C735E10A9 |
| SHA-256: | D2E374DF7122C0676B4618AED537DFC8A7B5714B75D362BFBE85B38F47E3D4A4 |
| SHA-512: | EEFE8793309FDC801B1649661B0C17C38406A9DAA1E12959CD20344975747D470D6D9C8BE51A46279A42FE1843C254C432938981D108F4899B93CDD744B5D968 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 123406 |
| Entropy (8bit): | 6.263889638223575 |
| Encrypted: | false |
| SSDEEP: | 1536:hnPkU1t2P2hHV5JG1YBBAUBEd8+poyez9djcx2/8s6UJqfxX+1XOAhbKzb3+d:xPu21IYyCTToE6c+6e+d |
| MD5: | B49ECFA819479C3DCD97FAE2A8AB6EC6 |
| SHA1: | 1B8D47D4125028BBB025AAFCA1759DEB3FC0C298 |
| SHA-256: | B9D5317E10E49AA9AD8AD738EEBE9ACD360CC5B20E2617E5C0C43740B95FC0F2 |
| SHA-512: | 18617E57A76EFF6D95A1ED735CE8D5B752F1FB550045FBBEDAC4E8E67062ACD7845ADC6FBE62238C383CED5E01D7AA4AB8F968DC442B67D62D2ED712DB67DC13 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 34392 |
| Entropy (8bit): | 7.81689943223162 |
| Encrypted: | false |
| SSDEEP: | 768:mYBs3O9YL558R6R8P8W2rjQZQtfTIxRYsetoPNvPWIl+syr:vsUY15mqzW2u8rIxisFcJr |
| MD5: | EA245B00B9D27EF2BD96548A50A9CC2C |
| SHA1: | 8463FDCDD5CED10C519EE0B406408AE55368E094 |
| SHA-256: | 4824A06B819CBE49C485D68A9802D9DAE3E3C54D4C2D8B706C8A87B56CEEFBF3 |
| SHA-512: | EF1E107571402925AB5B1D9B096D7CEFF39C1245A23692A3976164D0DE0314F726CCA0CB10246FE58A13618FD5629A92025628373B3264153FC1D79B0415D9A7 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 15374 |
| Entropy (8bit): | 5.192037544202194 |
| Encrypted: | false |
| SSDEEP: | 384:lhgkOI7BGi9gKV6uq+u6JewsNhNXUwSCgQ:DT7BGVKPKbXF |
| MD5: | BEFD36FE8383549246E1FD49DB270C07 |
| SHA1: | 1EF12B568599F31292879A8581F6CD0279F3E92A |
| SHA-256: | B5942E8096C95118C425B30CEC8838904897CDEF78297C7BBB96D7E2D45EE288 |
| SHA-512: | FD9AA6A4134858A715BE846841827196382D0D86F2B1AA5C7A249B770408815B0FE30C4D1E634E8D6D3C8FEDBCE4654CD5DC240F91D54FC8A7EFE7CAE2E569F4 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 68876 |
| Entropy (8bit): | 7.922125376804506 |
| Encrypted: | false |
| SSDEEP: | 1536:q0Z4sz1ZMjCjDIhoLffiedENahBzzxO/JfgmYFGKEvi8TxCI+vHVl:v4MzMjGkhoLfsahS/JYN2vUl |
| MD5: | 4E35BA785CD3B37A3702E577510F39E3 |
| SHA1: | A2FD74A68BEFF732E5F3CB0835713AEA8D639902 |
| SHA-256: | 0AFE688B6FCA94C69780F454BE65E12D616C6E6376E80C5B3835E3FA6DE3EB8A |
| SHA-512: | 1B839AF5B4049A20D9B8A0779FE943A4238C8FBFBF306BC6D3A27AF45C76F6C56B57B2EC8F087F7034D89B5B139E53A626A8D7316BE1374EAC28B06D23E7995D |
| Malicious: | false |
| Yara Hits: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 18966 |
| Entropy (8bit): | 7.620111275837424 |
| Encrypted: | false |
| SSDEEP: | 384:gOKwxnw6OVDU839fgRgFMkucNauTT80CyTIz2bGjqXOK0Jo:gOHwBDUOe2McQkI0Cyo2Q/o |
| MD5: | F0F973781B6A66ADF354B04A36C5E944 |
| SHA1: | 8E8EE3A18D4CEC163AF8756E1644DF41C747EDC7 |
| SHA-256: | 04AB613C895B35044AF8A9A98A372A5769C80245CC9D6BF710A94C5BC42FA1B3 |
| SHA-512: | 118D5DACC2379913B725BD338F8445016F5A0D1987283B082D37C1D1C76200240E8C79660E980F05E13E4EB79BDA02256EAC52385DAA557C6E0C5D326D43A835 |
| Malicious: | true |
| Yara Hits: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 5960 |
| Entropy (8bit): | 5.956401374574174 |
| Encrypted: | false |
| SSDEEP: | 96:dj78cqhzbWKlECE7WbjDFf6IhaYYUOAoDf4+XCVhovG9AkM7Ui10:CjlEJ7WbjDFf6waYvdc4gYAkM10 |
| MD5: | B3CC560AC7A5D1D266CB54E9A5A4767E |
| SHA1: | E169E924405C2114022674256AFC28FE493FBFDF |
| SHA-256: | EDDE733A8D2CA65C8B4865525290E55B703530C954F001E68D1B76B2A54EDCB5 |
| SHA-512: | A836DECACB42CC3F7D42E2BF7A482AE066F5D1DF08CCCC466880391028059516847E1BF71E4C6A90D2D34016519D16981DDEEACFB94E166E4A9A720D9CC5D699 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 294926 |
| Entropy (8bit): | 6.191604766067493 |
| Encrypted: | false |
| SSDEEP: | 3072:7E0FFjiAeF21pLQFgK33duKMnlCj3eWyNg2hlNvFXl8rzJjjOjVmdX566Uwqwqwm:wKFX3LygKjjN2HIfpruwqwqwFUgVE |
| MD5: | C76C9AE552E4CE69E3EB9EC380BC0A42 |
| SHA1: | EFFEC2973C3D678441AF76CFAA55E781271BD1FB |
| SHA-256: | 574595B5FD6223E4A004FA85CBB3588C18CC6B83BF3140D8F94C83D11DBCA7BD |
| SHA-512: | 7FB385227E802A0C77749978831245235CD1343B95D97E610D20FB0454241C465387BCCB937A2EE8A2E0B461DD3D2834F7F542E7739D8E428E146F378A24EE97 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26526 |
| Entropy (8bit): | 4.600837395607617 |
| Encrypted: | false |
| SSDEEP: | 384:Lc56OuAbnn0UReX6wFDVxnFw7xqsvzt+z/k8E9HinIhFkspcM9bc7ups0CZuQG:Lc5trLeDnFMz1ReScmc7GshZuQG |
| MD5: | BD7A443320AF8C812E4C18D1B79DF004 |
| SHA1: | 37D2F1D62FEC4DA0CAF06E5DA21AFC3521B597AA |
| SHA-256: | B634AB5640E258563C536E658CAD87080553DF6F34F62269A21D554844E58BFE |
| SHA-512: | 21AEF7129B5B70E3F9255B1EA4DC994BF48B8A7F42CD90748D71465738D934891BBEC6C6FC6A1CCFAF7D3F35496677D62E2AF346D5E8266F6A51AE21A65C4460 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 126478 |
| Entropy (8bit): | 6.268811819718352 |
| Encrypted: | false |
| SSDEEP: | 3072:UnNKg6JaJUeHjiaphKMLrn8uexz3TmBUg6xcE:UNcJGGehKMLJBUg6x |
| MD5: | 6E93C9C8AADA15890073E74ED8D400C9 |
| SHA1: | 94757DBD181346C7933694EA7D217B2B7977CC5F |
| SHA-256: | B6E2FA50E0BE319104B05D6A754FE38991E6E1C476951CEE3C7EBDA0DC785E02 |
| SHA-512: | A9F71F91961C75BB32871B1EFC58AF1E1710BDE1E39E7958AE9BB2A174E84E0DD32EBAAB9F5AE37275651297D8175EFA0B3379567E0EB0272423B604B4510852 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 394752 |
| Entropy (8bit): | 6.662070316214798 |
| Encrypted: | false |
| SSDEEP: | 6144:uAlmRfeS+mOxv8bgDTuXU54l8WybBE36IpuIT9nxQPQnhH/a0CRdWqWJwGKp:zlm0S+SEuXU54NylJIJ9KPQnhilRsVJ |
| MD5: | A4123DE65270C91849FFEB8515A864C4 |
| SHA1: | 93971C6BB25F3F4D54D4DF6C0C002199A2F84525 |
| SHA-256: | 43A9928D6604BF604E43C2E1BAB30AE1654B3C26E66475F9488A95D89A4E6113 |
| SHA-512: | D0834F7DB31ABA8AA9D97479938DA2D4CD945F76DC2203D60D24C75D29D36E635C2B0D97425027C4DEBA558B8A41A77E288F73263FA9ABC12C54E93510E3D384 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 240654 |
| Entropy (8bit): | 6.518503846592995 |
| Encrypted: | false |
| SSDEEP: | 6144:yZDfF4DjzIHBV+bUeenu+t+oSTdjpNZ7utS81qpHW4paP2L:ekjzMBVKXeuq+oSTdjpr7N8f+L |
| MD5: | 4F0C85351AEC4B00300451424DB4B5A4 |
| SHA1: | BB66D807EDE0D7D86438207EB850F50126924C9D |
| SHA-256: | CC0B53969670C7275A855557EA16182C932160BC0F8543EFFC570F760AE2185E |
| SHA-512: | 80C84403ED47380FF75EBA50A23E565F7E5C68C7BE8C208A5A48B7FB0798FF51F3D33780C902A6F8AB0E6DB328860C071C77B93AC88CADF84FEF7DF34DE3E2DA |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 31936 |
| Entropy (8bit): | 6.6461204214578 |
| Encrypted: | false |
| SSDEEP: | 768:SEEn30ilOAb++HynTDbc3fwaVCPxWE/MM:SEa0YOU1HgU3fwaVCPxqM |
| MD5: | 72E3BDD0CE0AF6A3A3C82F3AE6426814 |
| SHA1: | A2FB64D5B9F5F3181D1A622D918262CE2F9A7AA3 |
| SHA-256: | 7AC8A8D5679C96D14C15E6DBC6C72C260AAEFB002D0A4B5D28B3A5C2B15DF0AB |
| SHA-512: | A876D0872BFBF099101F7F042AEAF1FD44208A354E64FC18BAB496BEEC6FDABCA432A852795CFC0A220013F619F13281B93ECC46160763AC7018AD97E8CC7971 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 197646 |
| Entropy (8bit): | 6.1570532273946625 |
| Encrypted: | false |
| SSDEEP: | 3072:brPGp0y4SP+iBGgySYm+dE3sYrJqkAzhU88vsAGSW+:brPGaTEsHSYmbbOU8osAGG |
| MD5: | 2C8EC61630F8AA6AAC674E4C63F4C973 |
| SHA1: | 64E3BB9AA505C66E87FE912D4EA3054ADF6CEF76 |
| SHA-256: | DFD55D0DDD1A7D081FCE8E552DC29706A84DC6CA2FDD2F82D63F33D74E882849 |
| SHA-512: | 488378012FB5F477ED4636C37D7A883B1DAD0FBC671D238B577A9374EFE40AB781F5E483AE921F1909A9B7C1C2A3E78E29B533D3B6FFE15AAEE840CAD2DCF5D0 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 337408 |
| Entropy (8bit): | 6.515131904432587 |
| Encrypted: | false |
| SSDEEP: | 6144:3nzsyDn7PDS+FDflUjvJUkbEOyF1rOpsuCOuOff5k4F/lTRHA:3377SKfgvqkbFyFJCRRzH |
| MD5: | 62D2156E3CA8387964F7AA13DD1CCD5B |
| SHA1: | A5067E046ED9EA5512C94D1D17C394D6CF89CCCA |
| SHA-256: | 59CBFBA941D3AC0238219DAA11C93969489B40F1E8B38FABDB5805AC3DD72BFA |
| SHA-512: | 006F7C46021F339B6CBF9F0B80CFFA74ABB8D48E12986266D069738C4E6BDB799BFBA4B8EE4565A01E90DBE679A96A2399D795A6EAD6EACBB4818A155858BF60 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 197120 |
| Entropy (8bit): | 6.423554884287906 |
| Encrypted: | false |
| SSDEEP: | 6144:X+dMKihenEUunaA+mVMISPCG5vHglwiaJVZkRyAHeOdrQpCklkHy+axeY0R2JdXs:MagxOOZWP2dC28d+y2e |
| MD5: | 67247C0ACA089BDE943F802BFBA8752C |
| SHA1: | 508DA6E0CF31A245D27772C70FFA9A2AE54930A3 |
| SHA-256: | BAB8D388EA3AF1AABB61B8884CFAA7276A2BFD77789856DD610480C55E4D0A60 |
| SHA-512: | C4A690A53581D3E4304188FD772C6F1DA1C72ED2237A13951ACE8879D1986423813A6F7534FF506790CB81633CEB7FF6A6239C1F852725FBACA4B40D9AE3F2DB |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 17472 |
| Entropy (8bit): | 7.524548435291935 |
| Encrypted: | false |
| SSDEEP: | 384:IwwsQD13cT5HhSVeEQNW5kbbcGEh/qTio+lyTnGy:QRD13ySVeEOW5kbSSTHNTnr |
| MD5: | 7B52BE6D702AA590DB57A0E135F81C45 |
| SHA1: | 518FB84C77E547DD73C335D2090A35537111F837 |
| SHA-256: | 9B5A8B323D2D1209A5696EAF521669886F028CE1ECDBB49D1610C09A22746330 |
| SHA-512: | 79C1959A689BDC29B63CA771F7E1AB6FF960552CADF0644A7C25C31775FE3458884821A0130B1BAB425C3B41F1C680D4776DD5311CE3939775A39143C873A6FE |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 214016 |
| Entropy (8bit): | 6.676457645865373 |
| Encrypted: | false |
| SSDEEP: | 3072:v3UEEkp2yVTcc295GSSazZq0/OlxAOxN5jZ2Ti30ezAg0Fu9RBhk1Xion:cEEpYcc2G/adqLtxLZ2+vAO9Hhkzn |
| MD5: | 2C747F19BF1295EBBDAB9FB14BB19EE2 |
| SHA1: | 6F3B71826C51C739D6BB75085E634B2B2EF538BC |
| SHA-256: | D2074B91A63219CFD3313C850B2833CD579CC869EF751B1F5AD7EDFB77BD1EDD |
| SHA-512: | C100C0A5AF52D951F3905884E9B9D0EC1A0D0AEBE70550A646BA6E5D33583247F67CA19E1D045170A286D92EE84E1676A6C1B0527E017A35B6242DD9DEE05AF4 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 26126 |
| Entropy (8bit): | 6.048294343792499 |
| Encrypted: | false |
| SSDEEP: | 384:hhkxE9v7/GRm4v5OxlBWaEybb9p7aCyS/hU7CateHcUwSCnq6D:Yx6jGXvc5WaBb99yS/hQh |
| MD5: | D1223F86EDF0D5A2D32F1E2AAAF8AE3F |
| SHA1: | C286CA29826A138F3E01A3D654B2F15E21DBE445 |
| SHA-256: | E0E11A058C4B0ADD3892E0BEA204F6F60A47AFC86A21076036393607235B469C |
| SHA-512: | 7EA1FFB23F8A850F5D3893C6BB66BF95FAB2F10F236A781620E9DC6026F175AAE824FD0E03082F0CF13D05D13A8EEDE4F5067491945FCA82BBCDCF68A0109CFF |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 68042 |
| Entropy (8bit): | 6.090396152400884 |
| Encrypted: | false |
| SSDEEP: | 768:RX3HAdi7wgCsL6dVSngk2IFm3ZJVRDBLRROBBKRzPm3YRiF+ixh:NHQpe6SnZQLjICPm3Ytib |
| MD5: | 5DDA5D34AC6AA5691031FD4241538C82 |
| SHA1: | 22788C2EBE5D50FF36345EA0CB16035FABAB8A6C |
| SHA-256: | DE1A9DD251E29718176F675455592BC1904086B9235A89E6263A3085DDDCBB63 |
| SHA-512: | 08385DE11A0943A6F05AC3F8F1E309E1799D28EA50BF1CA6CEB01E128C0CD7518A64E55E8B56A4B8EF9DB3ECD2DE33D39779DCA1FBF21DE735E489A09159A1FD |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 22542 |
| Entropy (8bit): | 5.5875455203930615 |
| Encrypted: | false |
| SSDEEP: | 384:RKAPwPQJgZd3rw0bGMtyz1fiaqmjj1nFY4j70UotV9mRyK:YPQJgZZwUGH1fJljj1+D18 |
| MD5: | E1C0147422B8C4DB4FC4C1AD6DD1B6EE |
| SHA1: | 4D10C5AD96756CBC530F3C35ADCD9E4B3F467CFA |
| SHA-256: | 124F210C04C12D8C6E4224E257D934838567D587E5ABAEA967CBD5F088677049 |
| SHA-512: | A163122DFFE729E6F1CA6EB756A776F6F01A784A488E2ACCE63AEAFA14668E8B1148BE948EB4AF4CA8C5980E85E681960B8A43C94B95DFFC72FCCEE1E170BD9A |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 19008 |
| Entropy (8bit): | 7.672481244971812 |
| Encrypted: | false |
| SSDEEP: | 384:dz7otnjFa4ECX3yeGjA+tSXGnUav92hca+XWRlsuG+is:po7GU+szS3W7sQ7 |
| MD5: | 8EE91149989D50DFCF9DAD00DF87C9B0 |
| SHA1: | E5581E6C1334A78E493539F8EA1CE585C9FFAF89 |
| SHA-256: | 3030E22F4A854E11A8AA2128991E4867CA1DF33BC7B9AFF76A5E6DEEF56927F6 |
| SHA-512: | FA04E8524DA444DD91E4BD682CC9ADEE445259E0C6190A7DEF82B8C4478A78AAA8049337079AD01F7984DBA28316D72445A0F0D876F268A062AD9B8FF2A6E58D |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 967168 |
| Entropy (8bit): | 6.500850562754145 |
| Encrypted: | false |
| SSDEEP: | 12288:j2ezAN6FpYQSzclODziLQEkkDHFb1aWGssVvVmPUwV+SiRm7rhj:jhAgFptPlqmPDHJ1apVdYUy+jRmX |
| MD5: | C06D6F4DABD9E8BBDECFC5D61B43A8A9 |
| SHA1: | 16D9F4F035835AFE8F694AE5529F95E4C3C78526 |
| SHA-256: | 665D47597146DDAAA44B771787B750D3CD82C5B5C0B33CA38F093F298326C9BB |
| SHA-512: | B0EBE9E2682A603C34F2B884121FA5D2D87ED3891990CCD91CD14005B28FE208A3B86FA20E182F9E7FC5142A267C8225AEFDCB23CF5B7556D2CF8F9E3BDE62D4 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 36752 |
| Entropy (8bit): | 7.780431937344781 |
| Encrypted: | false |
| SSDEEP: | 768:E7epCl6I8YbTvEKXQ2vm+iocmmMt7KjuDnlVahRlmftuY5B:EepUv8aZvmd+7nDDalauy |
| MD5: | 9FF783BB73F8868FA6599CDE65ED21D7 |
| SHA1: | F515F91D62D36DC64ADAA06FA0EF6CF769376BDF |
| SHA-256: | E0234AF5F71592C472439536E710BA8105D62DFA68722965DF87FED50BAB1816 |
| SHA-512: | C9D3C3502601026B6D55A91C583E0BB607BFC695409B984C0561D0CBE7D4F8BD231BC614E0EC1621C287BF0F207017D3E041694320E692FF00BC2220BFA26C26 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 35588 |
| Entropy (8bit): | 7.817557274117395 |
| Encrypted: | false |
| SSDEEP: | 768:dCrMZHv56WRldhmLjQDrbfc8cznHvc6modHQ:sAR0LzHvc6m2HQ |
| MD5: | 58521D1AC2C588B85642354F6C0C7812 |
| SHA1: | 5912D2507F78C18D5DC567B2FA8D5AE305345972 |
| SHA-256: | 452EEE1E4EF2FE2E00060113CCE206E90986E2807BB966019AC4E9DEB303A9BD |
| SHA-512: | 3988B61F6B633718DE36C0669101E438E70A17E3962A5C3A519BDECC3942201BA9C3B3F94515898BB2F8354338BA202A801B22129FC6D56598103B13364748C1 |
| Malicious: | false |
| Yara Hits: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 7910 |
| Entropy (8bit): | 6.931925007191986 |
| Encrypted: | false |
| SSDEEP: | 192:piDl1jKrGer007ia6abHX0d/aeHeN+VPHIJQxNiJCl9AK0f:IDJ9aDb30dCe+4PHIJrJCl9AK0f |
| MD5: | 1268DEA570A7511FDC8E70C1149F6743 |
| SHA1: | 1D646FC69145EC6A4C0C9CAD80626AD40F22E8CD |
| SHA-256: | F266DBA7B23321BF963C8D8B1257A50E1467FAAAB9952EF7FFED1B6844616649 |
| SHA-512: | E19F0EA39FF7AA11830AF5AAD53343288C742BE22299C815C84D24251FA2643B1E0401AF04E5F9B25CAB29601EA56783522DDB06C4195C6A609804880BAE9E9B |
| Malicious: | false |
| Yara Hits: |
|
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 16910 |
| Entropy (8bit): | 5.289608933932413 |
| Encrypted: | false |
| SSDEEP: | 384:ohtyjknGC7hipL+9mLYFOozxkdlDNUwS5Qq:UGknGC74l+MUFI7C |
| MD5: | 2F040608E68E679DD42B7D8D3FCA563E |
| SHA1: | 4B2C3A6B8902E32CDA33A241B24A79BE380C55FC |
| SHA-256: | 6B980CADC3E7047CC51AD1234CB7E76FF520149A746CB64E5631AF1EA1939962 |
| SHA-512: | 718AF5BE259973732179ABA45B672637FCA21AE575B4115A62139A751C04F267F355B8F7F7432B56719D91390DABA774B39283CBCFE18F09CA033389FB31A4FC |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 36416 |
| Entropy (8bit): | 7.842278356440954 |
| Encrypted: | false |
| SSDEEP: | 768:lshkyPXvH6bPACtmb8boNQdVfCXewki/OvXEApOqmFfSq1oIQMW:lsh3n5Pb8boOdVCuwNEXEAonfSq1JQb |
| MD5: | BEBA64522AA8265751187E38D1FC0653 |
| SHA1: | 63FFB566AA7B2242FCC91A67E0EDA940C4596E8E |
| SHA-256: | 8C58BC6C89772D0CD72C61E6CF982A3F51DEE9AAC946E076A0273CD3AAF3BE9D |
| SHA-512: | 13214E191C6D94DB914835577C048ADF2240C7335C0A2C2274C096114B7B75CD2CE13A76316963CCD55EE371631998FAC678FCF82AE2AE178B7813B2C35C6651 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 967168 |
| Entropy (8bit): | 6.500850562754145 |
| Encrypted: | false |
| SSDEEP: | 12288:j2ezAN6FpYQSzclODziLQEkkDHFb1aWGssVvVmPUwV+SiRm7rhj:jhAgFptPlqmPDHJ1apVdYUy+jRmX |
| MD5: | C06D6F4DABD9E8BBDECFC5D61B43A8A9 |
| SHA1: | 16D9F4F035835AFE8F694AE5529F95E4C3C78526 |
| SHA-256: | 665D47597146DDAAA44B771787B750D3CD82C5B5C0B33CA38F093F298326C9BB |
| SHA-512: | B0EBE9E2682A603C34F2B884121FA5D2D87ED3891990CCD91CD14005B28FE208A3B86FA20E182F9E7FC5142A267C8225AEFDCB23CF5B7556D2CF8F9E3BDE62D4 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 506871 |
| Entropy (8bit): | 7.998074018431883 |
| Encrypted: | true |
| SSDEEP: | 12288:VCtY2iynJj4iqp1WjsxlD71zFusqzKZXGky4H2po:V+Y1y7qp0oxF7T3ZXGky4Wq |
| MD5: | D52F8AE89AC65F755C28A95C274C1FFE |
| SHA1: | 50D581469FF0648EE628A027396F39598995D8B0 |
| SHA-256: | 2F9A9DFD0C0B0CFAF9C700B4659A4F2F3D11368E6C30A3FA0F93ECDD3B4D2E66 |
| SHA-512: | B7B585EED261C262499C73688DFD985818F7869319285168AEEAC1F2CF5FAD487280FCAE1DAC633296E5DB0E0BC454495A09A90C2E37A7E7AF07EF93563503C6 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\AVI formatter tool\bin\x86\lessmsi\lessmsi-v1.6.91.zip (copy) 
Download File
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 506871 |
| Entropy (8bit): | 7.998074018431883 |
| Encrypted: | true |
| SSDEEP: | 12288:VCtY2iynJj4iqp1WjsxlD71zFusqzKZXGky4H2po:V+Y1y7qp0oxF7T3ZXGky4Wq |
| MD5: | D52F8AE89AC65F755C28A95C274C1FFE |
| SHA1: | 50D581469FF0648EE628A027396F39598995D8B0 |
| SHA-256: | 2F9A9DFD0C0B0CFAF9C700B4659A4F2F3D11368E6C30A3FA0F93ECDD3B4D2E66 |
| SHA-512: | B7B585EED261C262499C73688DFD985818F7869319285168AEEAC1F2CF5FAD487280FCAE1DAC633296E5DB0E0BC454495A09A90C2E37A7E7AF07EF93563503C6 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 512014 |
| Entropy (8bit): | 6.566561154468342 |
| Encrypted: | false |
| SSDEEP: | 12288:BNKab1bu1dEpBZvkO4KTYnyA0bFHmufLKNs3gv:rKcozEpbvkOCyA0xGufLKau |
| MD5: | C4A2068C59597175CD1A29F3E7F31BC1 |
| SHA1: | 89DE0169028E2BDD5F87A51E2251F7364981044D |
| SHA-256: | 7AE79F834A4B875A14D63A0DB356EEC1D356F8E64FF9964E458D1C2050E5D180 |
| SHA-512: | 0989EA9E0EFADF1F6C31E7FC243371BB92BFD1446CF62798DCA38A021FAD8B6ADB0AEABDFBDC5CE8B71FE920E341FC8AB4E906B1839C6E469C75D8148A74A08A |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 126478 |
| Entropy (8bit): | 6.268811819718352 |
| Encrypted: | false |
| SSDEEP: | 3072:UnNKg6JaJUeHjiaphKMLrn8uexz3TmBUg6xcE:UNcJGGehKMLJBUg6x |
| MD5: | 6E93C9C8AADA15890073E74ED8D400C9 |
| SHA1: | 94757DBD181346C7933694EA7D217B2B7977CC5F |
| SHA-256: | B6E2FA50E0BE319104B05D6A754FE38991E6E1C476951CEE3C7EBDA0DC785E02 |
| SHA-512: | A9F71F91961C75BB32871B1EFC58AF1E1710BDE1E39E7958AE9BB2A174E84E0DD32EBAAB9F5AE37275651297D8175EFA0B3379567E0EB0272423B604B4510852 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 227328 |
| Entropy (8bit): | 6.641153481093122 |
| Encrypted: | false |
| SSDEEP: | 6144:jtJXnqDMJgH50aKyumLCGTrS4ifbjoO88k:KqgHlKyumLCGTrS4inoZ |
| MD5: | BC824DC1D1417DE0A0E47A30A51428FD |
| SHA1: | C909C48C625488508026C57D1ED75A4AE6A7F9DB |
| SHA-256: | A87AA800F996902F06C735EA44F4F1E47F03274FE714A193C9E13C5D47230FAB |
| SHA-512: | 566B5D5DDEA920A31E0FB9E048E28EF2AC149EF075DB44542A46671380F904427AC9A6F59FBC09FE3A4FBB2994F3CAEEE65452FE55804E403CEABC091FFAF670 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 394752 |
| Entropy (8bit): | 6.662070316214798 |
| Encrypted: | false |
| SSDEEP: | 6144:uAlmRfeS+mOxv8bgDTuXU54l8WybBE36IpuIT9nxQPQnhH/a0CRdWqWJwGKp:zlm0S+SEuXU54NylJIJ9KPQnhilRsVJ |
| MD5: | A4123DE65270C91849FFEB8515A864C4 |
| SHA1: | 93971C6BB25F3F4D54D4DF6C0C002199A2F84525 |
| SHA-256: | 43A9928D6604BF604E43C2E1BAB30AE1654B3C26E66475F9488A95D89A4E6113 |
| SHA-512: | D0834F7DB31ABA8AA9D97479938DA2D4CD945F76DC2203D60D24C75D29D36E635C2B0D97425027C4DEBA558B8A41A77E288F73263FA9ABC12C54E93510E3D384 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 68042 |
| Entropy (8bit): | 6.090396152400884 |
| Encrypted: | false |
| SSDEEP: | 768:RX3HAdi7wgCsL6dVSngk2IFm3ZJVRDBLRROBBKRzPm3YRiF+ixh:NHQpe6SnZQLjICPm3Ytib |
| MD5: | 5DDA5D34AC6AA5691031FD4241538C82 |
| SHA1: | 22788C2EBE5D50FF36345EA0CB16035FABAB8A6C |
| SHA-256: | DE1A9DD251E29718176F675455592BC1904086B9235A89E6263A3085DDDCBB63 |
| SHA-512: | 08385DE11A0943A6F05AC3F8F1E309E1799D28EA50BF1CA6CEB01E128C0CD7518A64E55E8B56A4B8EF9DB3ECD2DE33D39779DCA1FBF21DE735E489A09159A1FD |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 123406 |
| Entropy (8bit): | 6.263889638223575 |
| Encrypted: | false |
| SSDEEP: | 1536:hnPkU1t2P2hHV5JG1YBBAUBEd8+poyez9djcx2/8s6UJqfxX+1XOAhbKzb3+d:xPu21IYyCTToE6c+6e+d |
| MD5: | B49ECFA819479C3DCD97FAE2A8AB6EC6 |
| SHA1: | 1B8D47D4125028BBB025AAFCA1759DEB3FC0C298 |
| SHA-256: | B9D5317E10E49AA9AD8AD738EEBE9ACD360CC5B20E2617E5C0C43740B95FC0F2 |
| SHA-512: | 18617E57A76EFF6D95A1ED735CE8D5B752F1FB550045FBBEDAC4E8E67062ACD7845ADC6FBE62238C383CED5E01D7AA4AB8F968DC442B67D62D2ED712DB67DC13 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 22542 |
| Entropy (8bit): | 5.5875455203930615 |
| Encrypted: | false |
| SSDEEP: | 384:RKAPwPQJgZd3rw0bGMtyz1fiaqmjj1nFY4j70UotV9mRyK:YPQJgZZwUGH1fJljj1+D18 |
| MD5: | E1C0147422B8C4DB4FC4C1AD6DD1B6EE |
| SHA1: | 4D10C5AD96756CBC530F3C35ADCD9E4B3F467CFA |
| SHA-256: | 124F210C04C12D8C6E4224E257D934838567D587E5ABAEA967CBD5F088677049 |
| SHA-512: | A163122DFFE729E6F1CA6EB756A776F6F01A784A488E2ACCE63AEAFA14668E8B1148BE948EB4AF4CA8C5980E85E681960B8A43C94B95DFFC72FCCEE1E170BD9A |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 15374 |
| Entropy (8bit): | 5.25938266470983 |
| Encrypted: | false |
| SSDEEP: | 192:l0HhuwYqkoiCBJRgcsZQPCkWa/HI77wbcRODYCpes2n13dwczbUwS7RE8SD:lqhoqkVCXWgI77B0hGnLwczbUwSC8g |
| MD5: | 228EE3AFDCC5F75244C0E25050A346CB |
| SHA1: | 822B7674D1B7B091C1478ADD2F88E0892542516F |
| SHA-256: | 7ACD537F3BE069C7813DA55D6BC27C3A933DF2CF07D29B4120A8DF0C26D26561 |
| SHA-512: | 7DFA06B9775A176A9893E362B08DA7F2255037DC99FB6BE53020ECD4841C7E873C03BAC11D14914EFDFE84EFEB3FB99745566BB39784962365BEEBDB89A4531B |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 25614 |
| Entropy (8bit): | 6.0293046975090325 |
| Encrypted: | false |
| SSDEEP: | 768:MiksLrrN6mRXYYYYYYYYYYYYYYYYYYYYYYYYYI9W0oM:zrHFYYYYYYYYYYYYYYYYYYYYYYYYY70N |
| MD5: | B82364A204396C352F8CC9B2F8ABEF73 |
| SHA1: | 20AD466787D65C987A9EBDBD4A2E8845E4D37B68 |
| SHA-256: | 2A64047F9B9B07F6CB22BFE4F9D4A7DB06994B6107B5EA2A7E38FAFA9E282667 |
| SHA-512: | C8CAFA4C315CE96D41AD521E72180DF99931B5F448C8647161E7F9DCA29AA07213B9CCEF9E3F7FB5353C7B459E3DA620E560153BDBA1AB529C206330DBD26FF5 |
| Malicious: | true |
| Preview: |
C:\Users\user\AppData\Local\AVI formatter tool\bin\x86\plugins\internal\peak_scanner_plugin_c.dll (copy) 
Download File
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 15374 |
| Entropy (8bit): | 5.25938266470983 |
| Encrypted: | false |
| SSDEEP: | 192:l0HhuwYqkoiCBJRgcsZQPCkWa/HI77wbcRODYCpes2n13dwczbUwS7RE8SD:lqhoqkVCXWgI77B0hGnLwczbUwSC8g |
| MD5: | 228EE3AFDCC5F75244C0E25050A346CB |
| SHA1: | 822B7674D1B7B091C1478ADD2F88E0892542516F |
| SHA-256: | 7ACD537F3BE069C7813DA55D6BC27C3A933DF2CF07D29B4120A8DF0C26D26561 |
| SHA-512: | 7DFA06B9775A176A9893E362B08DA7F2255037DC99FB6BE53020ECD4841C7E873C03BAC11D14914EFDFE84EFEB3FB99745566BB39784962365BEEBDB89A4531B |
| Malicious: | true |
| Preview: |
C:\Users\user\AppData\Local\AVI formatter tool\bin\x86\plugins\internal\raw_decode_plugin_c.dll (copy)
Download File
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 25614 |
| Entropy (8bit): | 6.0293046975090325 |
| Encrypted: | false |
| SSDEEP: | 768:MiksLrrN6mRXYYYYYYYYYYYYYYYYYYYYYYYYYI9W0oM:zrHFYYYYYYYYYYYYYYYYYYYYYYYYY70N |
| MD5: | B82364A204396C352F8CC9B2F8ABEF73 |
| SHA1: | 20AD466787D65C987A9EBDBD4A2E8845E4D37B68 |
| SHA-256: | 2A64047F9B9B07F6CB22BFE4F9D4A7DB06994B6107B5EA2A7E38FAFA9E282667 |
| SHA-512: | C8CAFA4C315CE96D41AD521E72180DF99931B5F448C8647161E7F9DCA29AA07213B9CCEF9E3F7FB5353C7B459E3DA620E560153BDBA1AB529C206330DBD26FF5 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 43520 |
| Entropy (8bit): | 6.232860260916194 |
| Encrypted: | false |
| SSDEEP: | 768:XozEJVjDF38DrOPwLg0cAY7K+k+Y+TyHMjMbHVJx9jm3LkkteFfXbBekdAnPKx:Xo4JJDirOoLg0C7F/rDGdpB52PK |
| MD5: | B162992412E08888456AE13BA8BD3D90 |
| SHA1: | 095FA02EB14FD4BD6EA06F112FDAFE97522F9888 |
| SHA-256: | 2581A6BCA6F4B307658B24A7584A6B300C91E32F2FE06EB1DCA00ADCE60FA723 |
| SHA-512: | 078594DE66F7E065DCB48DA7C13A6A15F8516800D5CEE14BA267F43DC73BC38779A4A4ED9444AFDFA581523392CBE06B0241AA8EC0148E6BCEA8E23B78486824 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 240654 |
| Entropy (8bit): | 6.518503846592995 |
| Encrypted: | false |
| SSDEEP: | 6144:yZDfF4DjzIHBV+bUeenu+t+oSTdjpNZ7utS81qpHW4paP2L:ekjzMBVKXeuq+oSTdjpr7N8f+L |
| MD5: | 4F0C85351AEC4B00300451424DB4B5A4 |
| SHA1: | BB66D807EDE0D7D86438207EB850F50126924C9D |
| SHA-256: | CC0B53969670C7275A855557EA16182C932160BC0F8543EFFC570F760AE2185E |
| SHA-512: | 80C84403ED47380FF75EBA50A23E565F7E5C68C7BE8C208A5A48B7FB0798FF51F3D33780C902A6F8AB0E6DB328860C071C77B93AC88CADF84FEF7DF34DE3E2DA |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 112640 |
| Entropy (8bit): | 6.540227486061059 |
| Encrypted: | false |
| SSDEEP: | 1536:45vq1zsdXYjZmGz9anu3MwjLA/eeiUKJP3Djl23HTKJ7WMU3lPyK+ZSrKxV/UJ9G:vzMMg/gMKeGsMIl6K+Zvry5zNY |
| MD5: | BDB65DCE335AC29ECCBC2CA7A7AD36B7 |
| SHA1: | CE7678DCF7AF0DBF9649B660DB63DB87325E6F69 |
| SHA-256: | 7EC9EE07BFD67150D1BC26158000436B63CA8DBB2623095C049E06091FA374C3 |
| SHA-512: | 8AABCA6BE47A365ACD28DF8224F9B9B5E1654F67E825719286697FB9E1B75478DDDF31671E3921F06632EED5BB3DDA91D81E48D4550C2DCD8E2404D566F1BC29 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 772608 |
| Entropy (8bit): | 6.546391052615969 |
| Encrypted: | false |
| SSDEEP: | 6144:Q75mFL0MNnM/SQdtij4UujFhGiNV1SckT3wio2L2jV6EfnQ29mwF3s4iGtInw1m8:AwN0e0lN1fnQUFccGns9ukS6 |
| MD5: | B3B487FC3832B607A853211E8AC42CAD |
| SHA1: | 06E32C28103D33DAD53BE06C894203F8808D38C1 |
| SHA-256: | 30BC10BD6E5B2DB1ACE93C2004E24C128D20C242063D4F0889FD3FB3E284A9E4 |
| SHA-512: | FA6BDBA4F2A0CF4CCA40A333B69FD041D9EDC0736EDA206F17F10AF5505CC4688B0401A3CAD2D2F69392E752B8877DB593C7872BCDB133DC785A200FF38598BB |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 294926 |
| Entropy (8bit): | 6.191604766067493 |
| Encrypted: | false |
| SSDEEP: | 3072:7E0FFjiAeF21pLQFgK33duKMnlCj3eWyNg2hlNvFXl8rzJjjOjVmdX566Uwqwqwm:wKFX3LygKjjN2HIfpruwqwqwFUgVE |
| MD5: | C76C9AE552E4CE69E3EB9EC380BC0A42 |
| SHA1: | EFFEC2973C3D678441AF76CFAA55E781271BD1FB |
| SHA-256: | 574595B5FD6223E4A004FA85CBB3588C18CC6B83BF3140D8F94C83D11DBCA7BD |
| SHA-512: | 7FB385227E802A0C77749978831245235CD1343B95D97E610D20FB0454241C465387BCCB937A2EE8A2E0B461DD3D2834F7F542E7739D8E428E146F378A24EE97 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 13838 |
| Entropy (8bit): | 5.173769974589746 |
| Encrypted: | false |
| SSDEEP: | 192:oh3ZZBe9xz7rdz9Us5bsRuKUYDpesWAhQqCNhNXUwS7RuLH9+E:ohLBe3dz9UsikKDGZqCNhNXUwS4bcE |
| MD5: | 9C55B3E5ED1365E82AE9D5DA3EAEC9F2 |
| SHA1: | BB3D30805A84C6F0803BE549C070F21C735E10A9 |
| SHA-256: | D2E374DF7122C0676B4618AED537DFC8A7B5714B75D362BFBE85B38F47E3D4A4 |
| SHA-512: | EEFE8793309FDC801B1649661B0C17C38406A9DAA1E12959CD20344975747D470D6D9C8BE51A46279A42FE1843C254C432938981D108F4899B93CDD744B5D968 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 258560 |
| Entropy (8bit): | 6.491223412910377 |
| Encrypted: | false |
| SSDEEP: | 6144:X+FRYMGwNozw5upAagZnb80OXrGSc+w9nI7ZMcyVhk233M:SGMGbw5upAagZb80SMXzkgM |
| MD5: | DB191B89F4D015B1B9AEE99AC78A7E65 |
| SHA1: | 8DAC370768E7480481300DD5EBF8BA9CE36E11E3 |
| SHA-256: | 38A75F86DB58EB8D2A7C0213861860A64833C78F59EFF19141FFD6C3B6E28835 |
| SHA-512: | A27E26962B43BA84A5A82238556D06672DCF17931F866D24E6E8DCE88F7B30E80BA38B071943B407A7F150A57CF1DA13D2137C235B902405BEDBE229B6D03784 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 715038 |
| Entropy (8bit): | 6.506117629405352 |
| Encrypted: | false |
| SSDEEP: | 12288:RRObekMtkfohrPUs37uzHnA6zgpKq35eERXprNrHIR3/j1vGgZpDExyc/:LObekYkfohrP337uzHnA6cgqpeEFHS9M |
| MD5: | B3409D6A8032BDC34CC66F558D065980 |
| SHA1: | D9FADAD0B88C38243D51D5D600C021F7EB787365 |
| SHA-256: | 2B7E19859B5E49083A988005C98C6E315B0B3D34C45AEACCB6C8E5DE68D4D94E |
| SHA-512: | BDB716FFDB409CF64C121F4C8EBF1AF01DB004992187BA1CD667D237FC015657B1A4C6F668A3F86EA6DC138004D382A73BB8242AD53DA838FFB332E7843EC125 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1757184 |
| Entropy (8bit): | 7.100391080204771 |
| Encrypted: | false |
| SSDEEP: | 24576:JAQ4shKtykNo8EEOSl9//ryooMLqSB1gmxAMGkTMWad6JNcED/RZVqL3zpUy0NuQ:JAshu19d/mwLqAgjga7n |
| MD5: | 553F6C0E3426D5D3D0332C31637B5232 |
| SHA1: | 6D3BE1372F5E1427D67E9504E5A7E5759CD5F9BC |
| SHA-256: | D0BCF991900B065DB2E8E0290548825BFB46C72D4198EBAFC06427AEE136237F |
| SHA-512: | 1BE7A24AC3D8B62FA1CA0E64A5ACAE1B97F7BFF53FD9A0CF6A3864BC89C1571F9CD60C85970C94A054086766A7D738EAE1C3B3AEA44AD198E6806D10531C913A |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1716 |
| Entropy (8bit): | 4.781797138644031 |
| Encrypted: | false |
| SSDEEP: | 24:wSXqInX3C5DMDxJWyjPTw2C4F0lB6v4AnFt+cUeC1/B0vFFNgpX27:wSacX3ChMDxPpulB6gAFHSJE6X27 |
| MD5: | 257D1BF38FA7859FFC3717EF36577C04 |
| SHA1: | A9D2606CFC35E17108D7C079A355A4DB54C7C2EE |
| SHA-256: | DFACC2F208EBF6D6180EE6E882117C31BB58E8B6A76A26FB07AC4F40E245A0CB |
| SHA-512: | E13A6F489C9C5BA840502F73ACD152D366E0CCDD9D3D8E74B65FF89FDC70CD46F52E42EEE0B4BA9F151323EC07C4168CF82446334564ADAA8666624F7B8035F3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1716 |
| Entropy (8bit): | 4.781797138644031 |
| Encrypted: | false |
| SSDEEP: | 24:wSXqInX3C5DMDxJWyjPTw2C4F0lB6v4AnFt+cUeC1/B0vFFNgpX27:wSacX3ChMDxPpulB6gAFHSJE6X27 |
| MD5: | 257D1BF38FA7859FFC3717EF36577C04 |
| SHA1: | A9D2606CFC35E17108D7C079A355A4DB54C7C2EE |
| SHA-256: | DFACC2F208EBF6D6180EE6E882117C31BB58E8B6A76A26FB07AC4F40E245A0CB |
| SHA-512: | E13A6F489C9C5BA840502F73ACD152D366E0CCDD9D3D8E74B65FF89FDC70CD46F52E42EEE0B4BA9F151323EC07C4168CF82446334564ADAA8666624F7B8035F3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1825 |
| Entropy (8bit): | 5.088030483893024 |
| Encrypted: | false |
| SSDEEP: | 24:ZhIPjdbiNJQ387Udf9NpHjjY2S7AJYazRMiZMjYzMX2OP5usmC2ZxJnIBVjYHwZ2:vg79lS7sbtujNfuvlXJEVjH4O2 |
| MD5: | 992C00BEAB194CE392117BB419F53051 |
| SHA1: | 8F9114C95E2A2C9F9C65B9243D941DCB5CEA40DE |
| SHA-256: | 9E35C8E29CA055CE344E4C206E7B8FF1736158D0B47BF7B3DBC362F7EC7E722C |
| SHA-512: | FACDCA78AE7D874300EACBE3014A9E39868C93493B9CD44AAE1AB39AFA4D2E0868E167BCA34F8C445AA7CCC9DDB27E1B607D739AF94AA4840789A3F01E7BED9D |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1716 |
| Entropy (8bit): | 4.781797138644031 |
| Encrypted: | false |
| SSDEEP: | 24:wSXqInX3C5DMDxJWyjPTw2C4F0lB6v4AnFt+cUeC1/B0vFFNgpX27:wSacX3ChMDxPpulB6gAFHSJE6X27 |
| MD5: | 257D1BF38FA7859FFC3717EF36577C04 |
| SHA1: | A9D2606CFC35E17108D7C079A355A4DB54C7C2EE |
| SHA-256: | DFACC2F208EBF6D6180EE6E882117C31BB58E8B6A76A26FB07AC4F40E245A0CB |
| SHA-512: | E13A6F489C9C5BA840502F73ACD152D366E0CCDD9D3D8E74B65FF89FDC70CD46F52E42EEE0B4BA9F151323EC07C4168CF82446334564ADAA8666624F7B8035F3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1825 |
| Entropy (8bit): | 5.088030483893024 |
| Encrypted: | false |
| SSDEEP: | 24:ZhIPjdbiNJQ387Udf9NpHjjY2S7AJYazRMiZMjYzMX2OP5usmC2ZxJnIBVjYHwZ2:vg79lS7sbtujNfuvlXJEVjH4O2 |
| MD5: | 992C00BEAB194CE392117BB419F53051 |
| SHA1: | 8F9114C95E2A2C9F9C65B9243D941DCB5CEA40DE |
| SHA-256: | 9E35C8E29CA055CE344E4C206E7B8FF1736158D0B47BF7B3DBC362F7EC7E722C |
| SHA-512: | FACDCA78AE7D874300EACBE3014A9E39868C93493B9CD44AAE1AB39AFA4D2E0868E167BCA34F8C445AA7CCC9DDB27E1B607D739AF94AA4840789A3F01E7BED9D |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1825 |
| Entropy (8bit): | 5.088030483893024 |
| Encrypted: | false |
| SSDEEP: | 24:ZhIPjdbiNJQ387Udf9NpHjjY2S7AJYazRMiZMjYzMX2OP5usmC2ZxJnIBVjYHwZ2:vg79lS7sbtujNfuvlXJEVjH4O2 |
| MD5: | 992C00BEAB194CE392117BB419F53051 |
| SHA1: | 8F9114C95E2A2C9F9C65B9243D941DCB5CEA40DE |
| SHA-256: | 9E35C8E29CA055CE344E4C206E7B8FF1736158D0B47BF7B3DBC362F7EC7E722C |
| SHA-512: | FACDCA78AE7D874300EACBE3014A9E39868C93493B9CD44AAE1AB39AFA4D2E0868E167BCA34F8C445AA7CCC9DDB27E1B607D739AF94AA4840789A3F01E7BED9D |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 8188 |
| Entropy (8bit): | 4.996949785393219 |
| Encrypted: | false |
| SSDEEP: | 96:CuZg5WgDX7pbbjHm4JOIhNH4cVSQs0LnrimDfMbS4m9VKvjr:Cz5WgD7pLGTIhycVSQ1nrimDfMvm9MP |
| MD5: | 8BD0F7BCB39EBD29CADC16E0218ADEAC |
| SHA1: | E589260A04F7D0571765DC94794E3A2206F7723A |
| SHA-256: | BF0416A84FFE3A0FE890A01359DF213102FD623117AFA98A8261B4E2508AAA9D |
| SHA-512: | 23CB6737198A8541C61776A730A99BC219F32931AF5A04754D06C13D4D60622576C490798801CCAFAE0E1FDEFCB2455B0C96617ACEEDA2D8A31E7B9BEB71EBDB |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 715038 |
| Entropy (8bit): | 6.506117629405352 |
| Encrypted: | false |
| SSDEEP: | 12288:RRObekMtkfohrPUs37uzHnA6zgpKq35eERXprNrHIR3/j1vGgZpDExyc/:LObekYkfohrP337uzHnA6cgqpeEFHS9M |
| MD5: | B3409D6A8032BDC34CC66F558D065980 |
| SHA1: | D9FADAD0B88C38243D51D5D600C021F7EB787365 |
| SHA-256: | 2B7E19859B5E49083A988005C98C6E315B0B3D34C45AEACCB6C8E5DE68D4D94E |
| SHA-512: | BDB716FFDB409CF64C121F4C8EBF1AF01DB004992187BA1CD667D237FC015657B1A4C6F668A3F86EA6DC138004D382A73BB8242AD53DA838FFB332E7843EC125 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4096 |
| Entropy (8bit): | 4.026670007889822 |
| Encrypted: | false |
| SSDEEP: | 48:ivuz1hEU3FR/pmqBl8/QMCBaquEMx5BC+SS4k+bkguj0KHc:bz1eEFNcqBC/Qrex5iSKDkc |
| MD5: | 0EE914C6F0BB93996C75941E1AD629C6 |
| SHA1: | 12E2CB05506EE3E82046C41510F39A258A5E5549 |
| SHA-256: | 4DC09BAC0613590F1FAC8771D18AF5BE25A1E1CB8FDBF4031AA364F3057E74A2 |
| SHA-512: | A899519E78125C69DC40F7E371310516CF8FAA69E3B3FF747E0DDF461F34E50A9FF331AB53B4D07BB45465039E8EBA2EE4684B3EE56987977AE8C7721751F5F9 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2560 |
| Entropy (8bit): | 2.8818118453929262 |
| Encrypted: | false |
| SSDEEP: | 24:e1GSgDIX566lIB6SXvVmMPUjvhBrDsqZ:SgDKRlVImgUNBsG |
| MD5: | A69559718AB506675E907FE49DEB71E9 |
| SHA1: | BC8F404FFDB1960B50C12FF9413C893B56F2E36F |
| SHA-256: | 2F6294F9AA09F59A574B5DCD33BE54E16B39377984F3D5658CDA44950FA0F8FC |
| SHA-512: | E52E0AA7FE3F79E36330C455D944653D449BA05B2F9ABEE0914A0910C3452CFA679A40441F9AC696B3CCF9445CBB85095747E86153402FC362BB30AC08249A63 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 13312 |
| Entropy (8bit): | 5.745960477552938 |
| Encrypted: | false |
| SSDEEP: | 384:BXvhMwoSitz/bjx7yxnbdn+EHvbsHoOODCg:BZ7FEAbd+EDsIO |
| MD5: | A813D18268AFFD4763DDE940246DC7E5 |
| SHA1: | C7366E1FD925C17CC6068001BD38EAEF5B42852F |
| SHA-256: | E19781AABE466DD8779CB9C8FA41BBB73375447066BB34E876CF388A6ED63C64 |
| SHA-512: | B310ED4CD2E94381C00A6A370FCB7CC867EBE425D705B69CAAAAFFDAFBAB91F72D357966916053E72E68ECF712F2AF7585500C58BB53EC3E1D539179FCB45FB4 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 6144 |
| Entropy (8bit): | 4.215994423157539 |
| Encrypted: | false |
| SSDEEP: | 96:sfkcXegaJ/ZAYNzcld1xaX12pS5SKvkc:sfJEVYlvxaX12EF |
| MD5: | 4FF75F505FDDCC6A9AE62216446205D9 |
| SHA1: | EFE32D504CE72F32E92DCF01AA2752B04D81A342 |
| SHA-256: | A4C86FC4836AC728D7BD96E7915090FD59521A9E74F1D06EF8E5A47C8695FD81 |
| SHA-512: | BA0469851438212D19906D6DA8C4AE95FF1C0711A095D9F21F13530A6B8B21C3ACBB0FF55EDB8A35B41C1A9A342F5D3421C00BA395BC13BB1EF5902B979CE824 |
| Malicious: | true |
| Preview: |
| Process: | C:\Users\user\AppData\Local\Temp\is-D33JM.tmp\adobe.tmp |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 23312 |
| Entropy (8bit): | 4.596242908851566 |
| Encrypted: | false |
| SSDEEP: | 384:+Vm08QoKkiWZ76UJuP71W55iWHHoSHigH2euwsHTGHVb+VHHmnH+aHjHqLHxmoq1:2m08QotiCjJuPGw4 |
| MD5: | 92DC6EF532FBB4A5C3201469A5B5EB63 |
| SHA1: | 3E89FF837147C16B4E41C30D6C796374E0B8E62C |
| SHA-256: | 9884E9D1B4F8A873CCBD81F8AD0AE257776D2348D027D811A56475E028360D87 |
| SHA-512: | 9908E573921D5DBC3454A1C0A6C969AB8A81CC2E8B5385391D46B1A738FB06A76AA3282E0E58D0D2FFA6F27C85668CD5178E1500B8A39B1BBAE04366AE6A86D3 |
| Malicious: | false |
| Preview: |
| Process: | C:\Users\user\Desktop\adobe.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 704512 |
| Entropy (8bit): | 6.498045515703036 |
| Encrypted: | false |
| SSDEEP: | 12288:ZRObekMtkfohrPUs37uzHnA6zgpKq35eERXprNrHIR3/j1vGgZpDExyc:jObekYkfohrP337uzHnA6cgqpeEFHS9A |
| MD5: | EAF0354C6EA59246416F73EC28FB11AF |
| SHA1: | EE6CF822FF6D82F4AE958D90EEBA282D5EF48DA1 |
| SHA-256: | 958C0E917DA7DF3215B28005FAE0ACACDBA44CE4AFA8BCDCED6AAFC1357D7FEE |
| SHA-512: | 68BDF0502F0432BE7F45FE41B16D0D0FD9F8BF69613651C5BF0E26307F8B404EB32E19155538C44925950ADA495E4FC524EE07A6AAA34F2284D6718B49501150 |
| Malicious: | true |
| Preview: |
| File type: | |
| Entropy (8bit): | 7.998783197769266 |
| TrID: |
|
| File name: | adobe.exe |
| File size: | 4'855'286 bytes |
| MD5: | e9a2997ee4cfb48cb3988f3048e041e9 |
| SHA1: | 303d4cb34333e085c47ec565a25abcfa2376db6e |
| SHA256: | 6b05ea2717ccbe9837f6b5108900f96c169d9e252b595ddfec97b071fb67dcae |
| SHA512: | a8f65dc8df2d15d2201f6acae8d358b370f2df7dce0713358f2f01b0a8dd06e5fe0357d63e4b254f8300df28fd22146b0b79a516ce6f31a36d61fecbcfd4bbe0 |
| SSDEEP: | 98304:QImrB3xNJVSKxvPROQR9FMrBcbYQ6RF+I5GtvB7waAipLdAP95g:HS3xNJMKxXkwFMrBu9m+VfDldQ95g |
| TLSH: | 21263324FD732332C5B20CB89A66BF1774346C3F92F994352ADC4DFD5BA7542A6022A1 |
| File Content Preview: | MZP.....................@...............................................!..L.!..This program must be run under Win32..$7....................................................................................................................................... |
 | |
| Icon Hash: | 2d2e3797b32b2b99 |
| Entrypoint: | 0x409c40 |
| Entrypoint Section: | CODE |
| Digitally signed: | false |
| Imagebase: | 0x400000 |
| Subsystem: | windows gui |
| Image File Characteristics: | RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, BYTES_REVERSED_LO, 32BIT_MACHINE, BYTES_REVERSED_HI |
| DLL Characteristics: | TERMINAL_SERVER_AWARE |
| Time Stamp: | 0x2A425E19 [Fri Jun 19 22:22:17 1992 UTC] |
| TLS Callbacks: | |
| CLR (.Net) Version: | |
| OS Version Major: | 1 |
| OS Version Minor: | 0 |
| File Version Major: | 1 |
| File Version Minor: | 0 |
| Subsystem Version Major: | 1 |
| Subsystem Version Minor: | 0 |
| Import Hash: | 884310b1928934402ea6fec1dbd3cf5e |
| Instruction |
|---|
| push ebp |
| mov ebp, esp |
| add esp, FFFFFFC4h |
| push ebx |
| push esi |
| push edi |
| xor eax, eax |
| mov dword ptr [ebp-10h], eax |
| mov dword ptr [ebp-24h], eax |
| call 00007FE0E062441Bh |
| call 00007FE0E0625622h |
| call 00007FE0E06258B1h |
| call 00007FE0E06278E8h |
| call 00007FE0E062792Fh |
| call 00007FE0E062A25Eh |
| call 00007FE0E062A3C5h |
| xor eax, eax |
| push ebp |
| push 0040A2FCh |
| push dword ptr fs:[eax] |
| mov dword ptr fs:[eax], esp |
| xor edx, edx |
| push ebp |
| push 0040A2C5h |
| push dword ptr fs:[edx] |
| mov dword ptr fs:[edx], esp |
| mov eax, dword ptr [0040C014h] |
| call 00007FE0E062AE2Bh |
| call 00007FE0E062AA5Eh |
| lea edx, dword ptr [ebp-10h] |
| xor eax, eax |
| call 00007FE0E0627F18h |
| mov edx, dword ptr [ebp-10h] |
| mov eax, 0040CDE8h |
| call 00007FE0E06244C7h |
| push 00000002h |
| push 00000000h |
| push 00000001h |
| mov ecx, dword ptr [0040CDE8h] |
| mov dl, 01h |
| mov eax, 0040738Ch |
| call 00007FE0E06287A7h |
| mov dword ptr [0040CDECh], eax |
| xor edx, edx |
| push ebp |
| push 0040A27Dh |
| push dword ptr fs:[edx] |
| mov dword ptr fs:[edx], esp |
| call 00007FE0E062AE9Bh |
| mov dword ptr [0040CDF4h], eax |
| mov eax, dword ptr [0040CDF4h] |
| cmp dword ptr [eax+0Ch], 01h |
| jne 00007FE0E062AFDAh |
| mov eax, dword ptr [0040CDF4h] |
| mov edx, 00000028h |
| call 00007FE0E0628BA8h |
| mov edx, dword ptr [000000F4h] |
| Name | Virtual Address | Virtual Size | Is in Section |
|---|---|---|---|
| IMAGE_DIRECTORY_ENTRY_EXPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IMPORT | 0xd000 | 0x950 | .idata |
| IMAGE_DIRECTORY_ENTRY_RESOURCE | 0x11000 | 0x2c00 | .rsrc |
| IMAGE_DIRECTORY_ENTRY_EXCEPTION | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_SECURITY | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BASERELOC | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_DEBUG | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COPYRIGHT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_GLOBALPTR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_TLS | 0xf000 | 0x18 | .rdata |
| IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_IAT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR | 0x0 | 0x0 | |
| IMAGE_DIRECTORY_ENTRY_RESERVED | 0x0 | 0x0 |
| Name | Virtual Address | Virtual Size | Raw Size | Xored PE | ZLIB Complexity | File Type | Entropy | Characteristics |
|---|---|---|---|---|---|---|---|---|
| CODE | 0x1000 | 0x9364 | 0x9400 | False | 0.6148648648648649 | data | 6.56223225792919 | IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ |
| DATA | 0xb000 | 0x24c | 0x400 | False | 0.3154296875 | data | 2.753482278202086 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| BSS | 0xc000 | 0xe4c | 0x0 | False | 0 | empty | 0.0 | IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .idata | 0xd000 | 0x950 | 0xa00 | False | 0.414453125 | data | 4.430733069799036 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .tls | 0xe000 | 0x8 | 0x0 | False | 0 | empty | 0.0 | IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE |
| .rdata | 0xf000 | 0x18 | 0x200 | False | 0.052734375 | data | 0.2044881574398449 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ |
| .reloc | 0x10000 | 0x8b4 | 0x0 | False | 0 | empty | 0.0 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ |
| .rsrc | 0x11000 | 0x2c00 | 0x2c00 | False | 0.3231534090909091 | data | 4.458098236885354 | IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_SHARED, IMAGE_SCN_MEM_READ |
| Name | RVA | Size | Type | Language | Country | ZLIB Complexity |
|---|---|---|---|---|---|---|
| RT_ICON | 0x11354 | 0x128 | Device independent bitmap graphic, 16 x 32 x 4, image size 192 | Dutch | Netherlands | 0.5675675675675675 |
| RT_ICON | 0x1147c | 0x568 | Device independent bitmap graphic, 16 x 32 x 8, image size 320 | Dutch | Netherlands | 0.4486994219653179 |
| RT_ICON | 0x119e4 | 0x2e8 | Device independent bitmap graphic, 32 x 64 x 4, image size 640 | Dutch | Netherlands | 0.4637096774193548 |
| RT_ICON | 0x11ccc | 0x8a8 | Device independent bitmap graphic, 32 x 64 x 8, image size 1152 | Dutch | Netherlands | 0.3935018050541516 |
| RT_STRING | 0x12574 | 0x2f2 | data | 0.35543766578249336 | ||
| RT_STRING | 0x12868 | 0x30c | data | 0.3871794871794872 | ||
| RT_STRING | 0x12b74 | 0x2ce | data | 0.42618384401114207 | ||
| RT_STRING | 0x12e44 | 0x68 | data | 0.75 | ||
| RT_STRING | 0x12eac | 0xb4 | data | 0.6277777777777778 | ||
| RT_STRING | 0x12f60 | 0xae | data | 0.5344827586206896 | ||
| RT_RCDATA | 0x13010 | 0x2c | data | 1.1818181818181819 | ||
| RT_GROUP_ICON | 0x1303c | 0x3e | data | English | United States | 0.8387096774193549 |
| RT_VERSION | 0x1307c | 0x4b8 | COM executable for DOS | English | United States | 0.28228476821192056 |
| RT_MANIFEST | 0x13534 | 0x560 | XML 1.0 document, ASCII text, with CRLF line terminators | English | United States | 0.4251453488372093 |
| DLL | Import |
|---|---|
| kernel32.dll | DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSection, VirtualFree, VirtualAlloc, LocalFree, LocalAlloc, WideCharToMultiByte, TlsSetValue, TlsGetValue, MultiByteToWideChar, GetModuleHandleA, GetLastError, GetCommandLineA, WriteFile, SetFilePointer, SetEndOfFile, RtlUnwind, ReadFile, RaiseException, GetStdHandle, GetFileSize, GetSystemTime, GetFileType, ExitProcess, CreateFileA, CloseHandle |
| user32.dll | MessageBoxA |
| oleaut32.dll | VariantChangeTypeEx, VariantCopyInd, VariantClear, SysStringLen, SysAllocStringLen |
| advapi32.dll | RegQueryValueExA, RegOpenKeyExA, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA |
| kernel32.dll | WriteFile, VirtualQuery, VirtualProtect, VirtualFree, VirtualAlloc, Sleep, SizeofResource, SetLastError, SetFilePointer, SetErrorMode, SetEndOfFile, RemoveDirectoryA, ReadFile, LockResource, LoadResource, LoadLibraryA, IsDBCSLeadByte, GetWindowsDirectoryA, GetVersionExA, GetUserDefaultLangID, GetSystemInfo, GetSystemDefaultLCID, GetProcAddress, GetModuleHandleA, GetModuleFileNameA, GetLocaleInfoA, GetLastError, GetFullPathNameA, GetFileSize, GetFileAttributesA, GetExitCodeProcess, GetEnvironmentVariableA, GetCurrentProcess, GetCommandLineA, GetACP, InterlockedExchange, FormatMessageA, FindResourceA, DeleteFileA, CreateProcessA, CreateFileA, CreateDirectoryA, CloseHandle |
| user32.dll | TranslateMessage, SetWindowLongA, PeekMessageA, MsgWaitForMultipleObjects, MessageBoxA, LoadStringA, ExitWindowsEx, DispatchMessageA, DestroyWindow, CreateWindowExA, CallWindowProcA, CharPrevA |
| comctl32.dll | InitCommonControls |
| advapi32.dll | AdjustTokenPrivileges |
| Language of compilation system | Country where language is spoken | Map |
|---|---|---|
| Dutch | Netherlands |  |
| English | United States |  |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Jan 13, 2024 06:32:50.066613913 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:50.252819061 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:50.252942085 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:50.253227949 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:50.440485954 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:50.482608080 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:50.482676029 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:50.482769966 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:50.482775927 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:50.482810020 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:50.482810974 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:50.482831955 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:50.482851982 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:50.482891083 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:50.482892036 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:50.487788916 CET | 49736 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:50.696322918 CET | 2023 | 49736 | 65.109.80.185 | 192.168.2.4 |
| Jan 13, 2024 06:32:50.696405888 CET | 49736 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:50.696504116 CET | 49736 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:50.696589947 CET | 49736 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:50.904870033 CET | 2023 | 49736 | 65.109.80.185 | 192.168.2.4 |
| Jan 13, 2024 06:32:50.904982090 CET | 2023 | 49736 | 65.109.80.185 | 192.168.2.4 |
| Jan 13, 2024 06:32:50.905002117 CET | 49736 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:51.114022017 CET | 2023 | 49736 | 65.109.80.185 | 192.168.2.4 |
| Jan 13, 2024 06:32:51.114131927 CET | 2023 | 49736 | 65.109.80.185 | 192.168.2.4 |
| Jan 13, 2024 06:32:51.162251949 CET | 49736 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:53.119539976 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:53.306019068 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:53.401035070 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:53.401144981 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:53.510107994 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:53.696444035 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:53.732130051 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:53.732162952 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:53.732180119 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:53.732204914 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:53.732218981 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:53.732223988 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:53.732273102 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:53.732273102 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:53.732301950 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:53.735656977 CET | 49738 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:53.944207907 CET | 2023 | 49738 | 65.109.80.185 | 192.168.2.4 |
| Jan 13, 2024 06:32:53.944364071 CET | 49738 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:53.944452047 CET | 49738 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:53.944480896 CET | 49738 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:53.944523096 CET | 49738 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:54.059176922 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:54.059952021 CET | 49739 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:54.152597904 CET | 2023 | 49738 | 65.109.80.185 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.152656078 CET | 2023 | 49738 | 65.109.80.185 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.152690887 CET | 2023 | 49738 | 65.109.80.185 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.153258085 CET | 2023 | 49738 | 65.109.80.185 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.153464079 CET | 49738 | 2023 | 192.168.2.4 | 65.109.80.185 |
| Jan 13, 2024 06:32:54.245136976 CET | 80 | 49735 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.246010065 CET | 80 | 49739 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.246113062 CET | 49735 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:54.246144056 CET | 49739 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:54.247020006 CET | 49739 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:54.433665991 CET | 80 | 49739 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.473670959 CET | 80 | 49739 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.473870993 CET | 49739 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:54.588351965 CET | 49739 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:54.589015007 CET | 49740 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:54.774772882 CET | 80 | 49739 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.774962902 CET | 49739 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:54.775068045 CET | 80 | 49740 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.775203943 CET | 49740 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:54.775568962 CET | 49740 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:54.967932940 CET | 80 | 49740 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.992610931 CET | 80 | 49740 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:54.992688894 CET | 49740 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:55.106118917 CET | 49740 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:55.331656933 CET | 80 | 49740 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:55.331852913 CET | 49740 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:55.449701071 CET | 49740 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:55.450196981 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:55.635859013 CET | 80 | 49740 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:55.635956049 CET | 49740 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:55.636006117 CET | 80 | 49741 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:55.636106014 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:55.636356115 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:55.822384119 CET | 80 | 49741 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:55.852837086 CET | 80 | 49741 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:55.852941990 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:55.962891102 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:56.184292078 CET | 80 | 49741 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:56.184398890 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:56.291934967 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:56.509675980 CET | 80 | 49741 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:56.509928942 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:56.619421959 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:56.836061001 CET | 80 | 49741 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:56.836170912 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:56.947837114 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:57.171179056 CET | 80 | 49741 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:57.171305895 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:57.293560028 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:57.294080019 CET | 49742 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:57.479914904 CET | 80 | 49741 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:57.479973078 CET | 80 | 49742 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:57.480030060 CET | 49741 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:57.480087042 CET | 49742 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:57.480485916 CET | 49742 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:57.666487932 CET | 80 | 49742 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:57.697202921 CET | 80 | 49742 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:57.697412968 CET | 49742 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:57.807179928 CET | 49742 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:58.023518085 CET | 80 | 49742 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:58.023590088 CET | 49742 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:58.135067940 CET | 49742 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:58.360673904 CET | 80 | 49742 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:58.361965895 CET | 80 | 49742 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:58.362065077 CET | 49742 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:58.478743076 CET | 49742 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:58.479305983 CET | 49743 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:58.664894104 CET | 80 | 49742 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:58.664966106 CET | 49742 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:58.665066957 CET | 80 | 49743 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:58.665141106 CET | 49743 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:58.666810989 CET | 49743 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:58.852902889 CET | 80 | 49743 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:58.883490086 CET | 80 | 49743 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:58.883574009 CET | 49743 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:58.994115114 CET | 49743 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:59.215150118 CET | 80 | 49743 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:59.215221882 CET | 49743 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:59.337743998 CET | 49743 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:59.338231087 CET | 49744 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:59.524311066 CET | 80 | 49743 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:59.524377108 CET | 80 | 49744 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:59.524494886 CET | 49743 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:59.524619102 CET | 49744 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:59.524748087 CET | 49744 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:59.710566044 CET | 80 | 49744 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:59.741477966 CET | 80 | 49744 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:32:59.741790056 CET | 49744 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:32:59.853621006 CET | 49744 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:00.070429087 CET | 80 | 49744 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:00.070538044 CET | 49744 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:00.182375908 CET | 49744 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:00.406045914 CET | 80 | 49744 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:00.406136990 CET | 49744 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:00.525379896 CET | 49744 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:00.525752068 CET | 49745 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:00.711555958 CET | 80 | 49744 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:00.711704016 CET | 80 | 49745 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:00.711899042 CET | 49745 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:00.711960077 CET | 49744 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:00.712280035 CET | 49745 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:00.898427010 CET | 80 | 49745 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:00.928683996 CET | 80 | 49745 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:00.928790092 CET | 49745 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:01.041418076 CET | 49745 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:01.263536930 CET | 80 | 49745 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:01.263663054 CET | 49745 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:01.386909962 CET | 49745 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:01.387403965 CET | 49746 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:01.573206902 CET | 80 | 49745 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:01.573322058 CET | 49745 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:01.573693991 CET | 80 | 49746 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:01.573801994 CET | 49746 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:01.574083090 CET | 49746 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:01.760930061 CET | 80 | 49746 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:01.791479111 CET | 80 | 49746 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:01.791572094 CET | 49746 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:01.916584969 CET | 49746 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:01.917304993 CET | 49747 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.102874041 CET | 80 | 49746 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:02.103002071 CET | 49746 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.103462934 CET | 80 | 49747 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:02.103658915 CET | 49747 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.104852915 CET | 49747 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.291224957 CET | 80 | 49747 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:02.326613903 CET | 80 | 49747 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:02.326811075 CET | 49747 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.449719906 CET | 49747 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.450042009 CET | 49748 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.636183023 CET | 80 | 49748 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:02.636248112 CET | 80 | 49747 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:02.636548996 CET | 49748 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.636552095 CET | 49747 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.636725903 CET | 49748 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.823101997 CET | 80 | 49748 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:02.853491068 CET | 80 | 49748 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:02.853801966 CET | 49748 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.995610952 CET | 49748 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:02.996082067 CET | 49749 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:03.182034969 CET | 80 | 49748 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:03.182121992 CET | 80 | 49749 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:03.182290077 CET | 49748 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:03.182332039 CET | 49749 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:03.182521105 CET | 49749 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:03.369158030 CET | 80 | 49749 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:03.405860901 CET | 80 | 49749 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:03.406162024 CET | 49749 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:03.525754929 CET | 49749 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:03.526201963 CET | 49750 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:03.712014914 CET | 80 | 49749 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:03.712078094 CET | 80 | 49750 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:03.712131977 CET | 49749 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:03.712214947 CET | 49750 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:03.712527990 CET | 49750 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:03.900110006 CET | 80 | 49750 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:03.931130886 CET | 80 | 49750 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:03.931258917 CET | 49750 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:04.041182995 CET | 49750 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:04.266657114 CET | 80 | 49750 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:04.266748905 CET | 49750 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:04.387151957 CET | 49750 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:04.387686014 CET | 49751 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:04.573446989 CET | 80 | 49750 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:04.573478937 CET | 80 | 49751 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:04.573566914 CET | 49750 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:04.573710918 CET | 49751 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:04.574387074 CET | 49751 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:04.778069973 CET | 80 | 49751 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:04.808871984 CET | 80 | 49751 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:04.809140921 CET | 49751 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:04.942831993 CET | 49751 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:04.943419933 CET | 49752 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:05.128801107 CET | 80 | 49751 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:05.129059076 CET | 49751 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:05.129344940 CET | 80 | 49752 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:05.129487038 CET | 49752 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:05.129722118 CET | 49752 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:05.315696955 CET | 80 | 49752 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:05.351854086 CET | 80 | 49752 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:05.352066040 CET | 49752 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:05.463480949 CET | 49752 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:05.681056023 CET | 80 | 49752 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:05.681287050 CET | 49752 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:05.793431997 CET | 49752 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.010400057 CET | 80 | 49752 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:06.010657072 CET | 49752 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.138029099 CET | 49752 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.138797045 CET | 49753 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.324012041 CET | 80 | 49752 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:06.324117899 CET | 49752 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.324538946 CET | 80 | 49753 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:06.324644089 CET | 49753 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.324937105 CET | 49753 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.510740995 CET | 80 | 49753 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:06.546228886 CET | 80 | 49753 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:06.546605110 CET | 49753 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.668463945 CET | 49753 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.669007063 CET | 49754 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.854470015 CET | 80 | 49753 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:06.854556084 CET | 49753 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.854687929 CET | 80 | 49754 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:06.854767084 CET | 49754 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:06.855163097 CET | 49754 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:07.040931940 CET | 80 | 49754 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:07.072206020 CET | 80 | 49754 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:07.072567940 CET | 49754 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:07.182902098 CET | 49754 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:07.405956984 CET | 80 | 49754 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:07.406023026 CET | 49754 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:07.525722980 CET | 49754 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:07.526361942 CET | 49755 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:07.712887049 CET | 80 | 49754 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:07.712953091 CET | 80 | 49755 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:07.713140011 CET | 49754 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:07.713331938 CET | 49755 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:07.714122057 CET | 49755 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:07.900322914 CET | 80 | 49755 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:07.930588007 CET | 80 | 49755 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:07.930792093 CET | 49755 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:08.041169882 CET | 49755 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:08.262914896 CET | 80 | 49755 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:08.263178110 CET | 49755 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:08.385014057 CET | 49755 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:08.385545969 CET | 49756 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:08.571403027 CET | 80 | 49755 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:08.571526051 CET | 49755 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:08.571860075 CET | 80 | 49756 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:08.571957111 CET | 49756 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:08.572235107 CET | 49756 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:08.758392096 CET | 80 | 49756 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:08.788881063 CET | 80 | 49756 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:08.789092064 CET | 49756 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:08.901734114 CET | 49756 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:09.127883911 CET | 80 | 49756 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:09.128509998 CET | 80 | 49756 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:09.128870964 CET | 49756 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:09.244364977 CET | 49756 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:09.244851112 CET | 49757 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:09.430813074 CET | 80 | 49756 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:09.430841923 CET | 80 | 49757 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:09.430994987 CET | 49757 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:09.431061983 CET | 49756 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:09.431405067 CET | 49757 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:09.617533922 CET | 80 | 49757 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:09.647475958 CET | 80 | 49757 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:09.647600889 CET | 49757 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:09.764830112 CET | 49757 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:09.981295109 CET | 80 | 49757 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:09.981384039 CET | 49757 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:10.106203079 CET | 49757 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:10.106911898 CET | 49758 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:10.292205095 CET | 80 | 49757 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:10.292469025 CET | 49757 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:10.292907953 CET | 80 | 49758 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:10.292999029 CET | 49758 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:10.293401003 CET | 49758 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:10.479598999 CET | 80 | 49758 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:10.514431953 CET | 80 | 49758 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:10.514841080 CET | 49758 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:10.637371063 CET | 49758 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:10.638139963 CET | 49759 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:10.823710918 CET | 80 | 49758 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:10.823908091 CET | 49758 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:10.824208021 CET | 80 | 49759 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:10.824314117 CET | 49759 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:10.824712038 CET | 49759 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.010710955 CET | 80 | 49759 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:11.041846991 CET | 80 | 49759 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:11.041987896 CET | 49759 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.173372030 CET | 49759 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.174005032 CET | 49760 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.359442949 CET | 80 | 49759 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:11.359525919 CET | 49759 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.359925032 CET | 80 | 49760 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:11.360022068 CET | 49760 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.360379934 CET | 49760 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.546143055 CET | 80 | 49760 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:11.581237078 CET | 80 | 49760 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:11.582364082 CET | 49760 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.699915886 CET | 49760 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.700527906 CET | 49761 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.886609077 CET | 80 | 49760 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:11.887006998 CET | 49760 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.887312889 CET | 80 | 49761 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:11.887428045 CET | 49761 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:11.887798071 CET | 49761 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:12.073638916 CET | 80 | 49761 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:12.116878986 CET | 80 | 49761 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:12.116986990 CET | 49761 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:12.231085062 CET | 49761 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:12.417300940 CET | 80 | 49761 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:12.449938059 CET | 80 | 49761 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:12.450032949 CET | 49761 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:12.574639082 CET | 49761 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:12.575325966 CET | 49762 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:12.760967016 CET | 80 | 49761 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:12.761082888 CET | 49761 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:12.761471033 CET | 80 | 49762 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:12.761559963 CET | 49762 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:12.761931896 CET | 49762 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:12.947765112 CET | 80 | 49762 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:12.978080988 CET | 80 | 49762 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:12.978147984 CET | 49762 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:13.090413094 CET | 49762 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:13.315984011 CET | 80 | 49762 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:13.320611000 CET | 80 | 49762 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:13.320774078 CET | 49762 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:13.434138060 CET | 49762 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:13.620373011 CET | 80 | 49762 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:13.650706053 CET | 80 | 49762 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:13.650842905 CET | 49762 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:13.783555984 CET | 49762 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:13.785033941 CET | 49763 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:13.970181942 CET | 80 | 49762 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:13.970257998 CET | 49762 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:13.970982075 CET | 80 | 49763 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:13.971076965 CET | 49763 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:13.971772909 CET | 49763 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:14.158085108 CET | 80 | 49763 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:14.193152905 CET | 80 | 49763 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:14.193439960 CET | 49763 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:14.309309959 CET | 49763 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:14.526736975 CET | 80 | 49763 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:14.526839018 CET | 49763 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:14.658284903 CET | 49763 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:14.659003019 CET | 49764 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:14.845639944 CET | 80 | 49763 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:14.845808983 CET | 49763 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:14.846172094 CET | 80 | 49764 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:14.846507072 CET | 49764 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:14.846693039 CET | 49764 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.033066988 CET | 80 | 49764 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:15.062879086 CET | 80 | 49764 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:15.063143969 CET | 49764 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.199897051 CET | 49764 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.200484037 CET | 49765 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.386491060 CET | 80 | 49764 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:15.386553049 CET | 80 | 49765 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:15.386738062 CET | 49764 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.386869907 CET | 49765 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.387190104 CET | 49765 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.574409008 CET | 80 | 49765 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:15.609944105 CET | 80 | 49765 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:15.610033035 CET | 49765 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.731851101 CET | 49765 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.732871056 CET | 49766 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.917977095 CET | 80 | 49765 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:15.918075085 CET | 49765 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.918930054 CET | 80 | 49766 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:15.919037104 CET | 49766 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:15.931714058 CET | 49766 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:16.118030071 CET | 80 | 49766 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:16.154150009 CET | 80 | 49766 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:16.154258966 CET | 49766 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:16.277714968 CET | 49766 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:16.278592110 CET | 49767 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:16.465208054 CET | 80 | 49766 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:16.465295076 CET | 49766 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:16.465987921 CET | 80 | 49767 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:16.466103077 CET | 49767 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:16.786056042 CET | 49767 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:16.972210884 CET | 80 | 49767 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:17.002783060 CET | 80 | 49767 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:17.003040075 CET | 49767 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:17.333622932 CET | 49767 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:17.395694017 CET | 49768 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:17.520948887 CET | 80 | 49767 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:17.521300077 CET | 49767 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:17.581957102 CET | 80 | 49768 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:17.582135916 CET | 49768 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:18.792203903 CET | 49768 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:18.978605986 CET | 80 | 49768 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:19.013776064 CET | 80 | 49768 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:19.013974905 CET | 49768 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:19.135354042 CET | 49768 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:19.135845900 CET | 49769 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:19.322086096 CET | 80 | 49768 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:19.322144985 CET | 80 | 49769 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:19.322252989 CET | 49768 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:19.322338104 CET | 49769 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:19.323282003 CET | 49769 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:19.509407997 CET | 80 | 49769 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:19.545475960 CET | 80 | 49769 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:19.545536041 CET | 49769 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:19.673347950 CET | 49769 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:19.673815966 CET | 49770 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:19.859540939 CET | 80 | 49769 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:19.859710932 CET | 49769 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:19.859941959 CET | 80 | 49770 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:19.860042095 CET | 49770 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:19.860307932 CET | 49770 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.046413898 CET | 80 | 49770 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:20.077200890 CET | 80 | 49770 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:20.077269077 CET | 49770 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.197540998 CET | 49770 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.198052883 CET | 49771 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.383874893 CET | 80 | 49770 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:20.384100914 CET | 49770 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.384160042 CET | 80 | 49771 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:20.384377003 CET | 49771 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.385287046 CET | 49771 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.572633982 CET | 80 | 49771 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:20.605820894 CET | 80 | 49771 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:20.605918884 CET | 49771 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.730348110 CET | 49771 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.731312990 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.916457891 CET | 80 | 49771 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:20.916690111 CET | 49771 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.917356968 CET | 80 | 49772 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:20.917521954 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:20.917853117 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:21.103904009 CET | 80 | 49772 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:21.145807981 CET | 80 | 49772 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:21.145936966 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:21.260404110 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:21.446788073 CET | 80 | 49772 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:21.477252007 CET | 80 | 49772 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:21.477368116 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:21.589920998 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:21.806840897 CET | 80 | 49772 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:21.806920052 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:21.921629906 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:22.143377066 CET | 80 | 49772 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:22.144304991 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:22.259748936 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:22.260118961 CET | 49773 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:22.446818113 CET | 80 | 49772 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:22.446885109 CET | 80 | 49773 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:22.446970940 CET | 49773 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:22.446980000 CET | 49772 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:22.447246075 CET | 49773 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:22.633584023 CET | 80 | 49773 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:22.664195061 CET | 80 | 49773 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:22.664854050 CET | 49773 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:22.776323080 CET | 49773 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:22.993115902 CET | 80 | 49773 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:22.993303061 CET | 49773 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:23.104121923 CET | 49773 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:23.326683044 CET | 80 | 49773 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:23.326776028 CET | 49773 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:23.447686911 CET | 49773 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:23.448230982 CET | 49774 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:23.634558916 CET | 80 | 49773 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:23.634692907 CET | 80 | 49774 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:23.634747028 CET | 49773 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:23.634784937 CET | 49774 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:23.635052919 CET | 49774 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:23.821125031 CET | 80 | 49774 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:23.851478100 CET | 80 | 49774 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:23.851557016 CET | 49774 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:23.973192930 CET | 49774 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:23.973849058 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:24.159122944 CET | 80 | 49774 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:24.159208059 CET | 49774 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:24.160140038 CET | 80 | 49775 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:24.160370111 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:24.160497904 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:24.347609997 CET | 80 | 49775 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:24.382257938 CET | 80 | 49775 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:24.382483006 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:24.495011091 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:24.711961985 CET | 80 | 49775 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:24.712266922 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:24.822813988 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:25.039720058 CET | 80 | 49775 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:25.039833069 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:25.150953054 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:25.372836113 CET | 80 | 49775 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:25.373131990 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:25.494641066 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:25.495064020 CET | 49776 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:25.681036949 CET | 80 | 49776 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:25.681101084 CET | 80 | 49775 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:25.681142092 CET | 49776 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:25.681284904 CET | 49775 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:25.681452990 CET | 49776 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:25.867326021 CET | 80 | 49776 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:25.897917986 CET | 80 | 49776 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:25.897996902 CET | 49776 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:26.015897989 CET | 49776 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:26.237591982 CET | 80 | 49776 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:26.237669945 CET | 49776 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:26.359246969 CET | 49776 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:26.359913111 CET | 49777 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:26.545491934 CET | 80 | 49776 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:26.545605898 CET | 49776 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:26.545989990 CET | 80 | 49777 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:26.546083927 CET | 49777 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:26.546508074 CET | 49777 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:26.732820034 CET | 80 | 49777 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:26.762892962 CET | 80 | 49777 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:26.763123035 CET | 49777 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:26.885451078 CET | 49777 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:26.885926962 CET | 49778 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:27.071556091 CET | 80 | 49777 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:27.071635008 CET | 49777 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:27.071769953 CET | 80 | 49778 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:27.071912050 CET | 49778 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:27.072328091 CET | 49778 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:27.259557009 CET | 80 | 49778 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:27.294039011 CET | 80 | 49778 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:27.294152975 CET | 49778 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:27.416526079 CET | 49778 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:27.416915894 CET | 49779 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:27.602945089 CET | 80 | 49778 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:27.603008032 CET | 80 | 49779 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:27.603127956 CET | 49779 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:27.603199959 CET | 49778 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:27.603542089 CET | 49779 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:27.789688110 CET | 80 | 49779 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:27.820477962 CET | 80 | 49779 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:27.820650101 CET | 49779 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:27.931664944 CET | 49779 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:28.153575897 CET | 80 | 49779 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:28.153639078 CET | 49779 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:28.275796890 CET | 49779 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:28.276503086 CET | 49780 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:28.462400913 CET | 80 | 49779 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:28.462490082 CET | 49779 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:28.462631941 CET | 80 | 49780 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:28.462763071 CET | 49780 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:28.463033915 CET | 49780 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:28.650403023 CET | 80 | 49780 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:28.680557013 CET | 80 | 49780 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:28.680632114 CET | 49780 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:28.793498993 CET | 49780 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.010036945 CET | 80 | 49780 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:29.010130882 CET | 49780 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.134993076 CET | 49780 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.136028051 CET | 49781 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.321089983 CET | 80 | 49780 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:29.321178913 CET | 49780 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.322022915 CET | 80 | 49781 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:29.322164059 CET | 49781 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.322546005 CET | 49781 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.508713961 CET | 80 | 49781 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:29.543780088 CET | 80 | 49781 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:29.543917894 CET | 49781 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.668488979 CET | 49781 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.668973923 CET | 49782 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.860640049 CET | 80 | 49781 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:29.860747099 CET | 80 | 49782 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:29.860766888 CET | 49781 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.860959053 CET | 49782 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:29.861105919 CET | 49782 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.047925949 CET | 80 | 49782 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:30.078883886 CET | 80 | 49782 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:30.079193115 CET | 49782 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.197848082 CET | 49782 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.198523998 CET | 49783 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.384403944 CET | 80 | 49782 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:30.384632111 CET | 49782 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.384982109 CET | 80 | 49783 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:30.385070086 CET | 49783 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.385277033 CET | 49783 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.571357012 CET | 80 | 49783 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:30.607637882 CET | 80 | 49783 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:30.607708931 CET | 49783 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.728986025 CET | 49783 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.729684114 CET | 49784 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.915194988 CET | 80 | 49783 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:30.915276051 CET | 49783 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.916121960 CET | 80 | 49784 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:30.916209936 CET | 49784 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:30.916450024 CET | 49784 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:31.102711916 CET | 80 | 49784 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:31.138622999 CET | 80 | 49784 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:31.138822079 CET | 49784 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:31.260840893 CET | 49784 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:31.261670113 CET | 49785 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:31.447643995 CET | 80 | 49784 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:31.447758913 CET | 49784 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:31.448488951 CET | 80 | 49785 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:31.448687077 CET | 49785 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:31.448833942 CET | 49785 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:31.634954929 CET | 80 | 49785 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:31.665730953 CET | 80 | 49785 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:31.665934086 CET | 49785 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:31.777925968 CET | 49785 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:31.994685888 CET | 80 | 49785 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:31.994889021 CET | 49785 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:32.119760990 CET | 49785 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:32.121184111 CET | 49786 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:32.306755066 CET | 80 | 49785 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:32.307013988 CET | 49785 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:32.308044910 CET | 80 | 49786 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:32.308305025 CET | 49786 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:32.309164047 CET | 49786 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:32.497107029 CET | 80 | 49786 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:32.530930996 CET | 80 | 49786 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:32.531034946 CET | 49786 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:32.650978088 CET | 49786 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:32.651592970 CET | 49787 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:32.837107897 CET | 80 | 49786 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:32.837332964 CET | 49786 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:32.837802887 CET | 80 | 49787 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:32.837907076 CET | 49787 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:32.838264942 CET | 49787 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.024691105 CET | 80 | 49787 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:33.055308104 CET | 80 | 49787 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:33.055397034 CET | 49787 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.166934013 CET | 49787 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.167613029 CET | 49788 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.353589058 CET | 80 | 49787 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:33.353775024 CET | 49787 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.354150057 CET | 80 | 49788 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:33.354237080 CET | 49788 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.354623079 CET | 49788 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.540823936 CET | 80 | 49788 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:33.575634956 CET | 80 | 49788 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:33.575783014 CET | 49788 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.697894096 CET | 49788 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.698581934 CET | 49789 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.884569883 CET | 80 | 49788 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:33.884646893 CET | 49788 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.885468960 CET | 80 | 49789 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:33.885576010 CET | 49789 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:33.889100075 CET | 49789 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.076008081 CET | 80 | 49789 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:34.114600897 CET | 80 | 49789 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:34.114814997 CET | 49789 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.231781960 CET | 49789 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.232362986 CET | 49790 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.418263912 CET | 80 | 49789 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:34.418411016 CET | 49789 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.418726921 CET | 80 | 49790 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:34.418942928 CET | 49790 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.419281006 CET | 49790 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.606770992 CET | 80 | 49790 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:34.637278080 CET | 80 | 49790 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:34.637639046 CET | 49790 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.806804895 CET | 49790 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.807111979 CET | 49791 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.993197918 CET | 80 | 49790 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:34.993268967 CET | 80 | 49791 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:34.993453979 CET | 49791 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.993539095 CET | 49790 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:34.993797064 CET | 49791 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:35.179886103 CET | 80 | 49791 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:35.214732885 CET | 80 | 49791 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:35.214924097 CET | 49791 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:36.790277958 CET | 49791 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:36.791013956 CET | 49792 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:36.976917028 CET | 80 | 49791 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:36.977010012 CET | 49791 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:36.977756023 CET | 80 | 49792 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:36.977840900 CET | 49792 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:36.978112936 CET | 49792 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:37.164254904 CET | 80 | 49792 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:37.200464964 CET | 80 | 49792 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:37.200567007 CET | 49792 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:37.322170019 CET | 49792 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:37.322556019 CET | 49793 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:37.509646893 CET | 80 | 49792 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:37.509711027 CET | 80 | 49793 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:37.509824991 CET | 49792 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:37.509908915 CET | 49793 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:37.510318041 CET | 49793 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:37.696787119 CET | 80 | 49793 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:37.727576971 CET | 80 | 49793 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:37.727857113 CET | 49793 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:37.856388092 CET | 49793 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:37.857151985 CET | 49794 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.042759895 CET | 80 | 49793 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:38.042994976 CET | 49793 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.043510914 CET | 80 | 49794 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:38.043601990 CET | 49794 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.044367075 CET | 49794 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.230731964 CET | 80 | 49794 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:38.266396999 CET | 80 | 49794 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:38.266680002 CET | 49794 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.394239902 CET | 49794 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.395602942 CET | 49795 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.580713034 CET | 80 | 49794 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:38.580899954 CET | 49794 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.581846952 CET | 80 | 49795 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:38.581979990 CET | 49795 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.582840919 CET | 49795 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.768882036 CET | 80 | 49795 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:38.799787998 CET | 80 | 49795 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:38.799866915 CET | 49795 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.920867920 CET | 49795 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:38.921370029 CET | 49796 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.107454062 CET | 80 | 49795 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:39.107517004 CET | 80 | 49796 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:39.107553959 CET | 49795 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.107606888 CET | 49796 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.107883930 CET | 49796 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.294015884 CET | 80 | 49796 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:39.329850912 CET | 80 | 49796 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:39.329920053 CET | 49796 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.454591990 CET | 49796 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.455255985 CET | 49797 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.640718937 CET | 80 | 49796 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:39.640841007 CET | 49796 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.641350985 CET | 80 | 49797 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:39.641592979 CET | 49797 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.641729116 CET | 49797 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.828012943 CET | 80 | 49797 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:39.858006954 CET | 80 | 49797 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:39.858208895 CET | 49797 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.983839035 CET | 49797 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:39.984318972 CET | 49798 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:40.170248032 CET | 80 | 49797 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:40.170317888 CET | 80 | 49798 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:40.170404911 CET | 49798 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:40.170456886 CET | 49797 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:40.170829058 CET | 49798 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:40.358386993 CET | 80 | 49798 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:40.394274950 CET | 80 | 49798 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:40.394444942 CET | 49798 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:40.525578022 CET | 49798 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:40.526031017 CET | 49799 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:40.711922884 CET | 80 | 49798 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:40.712145090 CET | 49798 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:40.712388039 CET | 80 | 49799 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:40.712522984 CET | 49799 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:40.713318110 CET | 49799 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:40.899255991 CET | 80 | 49799 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:40.930108070 CET | 80 | 49799 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:40.930258036 CET | 49799 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:41.064013004 CET | 49799 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:41.065376043 CET | 49800 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:41.251234055 CET | 80 | 49799 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:41.251306057 CET | 49799 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:41.252362967 CET | 80 | 49800 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:41.252453089 CET | 49800 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:41.253204107 CET | 49800 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:41.440790892 CET | 80 | 49800 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:41.475627899 CET | 80 | 49800 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:41.475699902 CET | 49800 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:41.595482111 CET | 49800 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:41.812356949 CET | 80 | 49800 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:41.812414885 CET | 49800 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:41.931997061 CET | 49800 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:41.932715893 CET | 49801 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:42.118005991 CET | 80 | 49800 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:42.118181944 CET | 49800 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:42.118832111 CET | 80 | 49801 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:42.119045019 CET | 49801 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:42.119170904 CET | 49801 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:42.306890965 CET | 80 | 49801 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:42.347152948 CET | 80 | 49801 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:42.347481966 CET | 49801 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:42.463112116 CET | 49801 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:42.463593960 CET | 49802 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:42.649461985 CET | 80 | 49801 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:42.649574995 CET | 49801 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:42.649846077 CET | 80 | 49802 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:42.650194883 CET | 49802 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:42.650336981 CET | 49802 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:42.836405039 CET | 80 | 49802 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:42.867069960 CET | 80 | 49802 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:42.867206097 CET | 49802 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:42.979331017 CET | 49802 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:43.200664997 CET | 80 | 49802 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:43.200958014 CET | 49802 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:43.322757959 CET | 49802 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:43.323262930 CET | 49803 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:43.509552956 CET | 80 | 49802 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:43.509586096 CET | 80 | 49803 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:43.509836912 CET | 49803 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:43.509851933 CET | 49802 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:43.510046005 CET | 49803 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:43.695882082 CET | 80 | 49803 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:43.726180077 CET | 80 | 49803 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:43.726236105 CET | 49803 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:43.838408947 CET | 49803 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.055813074 CET | 80 | 49803 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:44.055990934 CET | 49803 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.183020115 CET | 49803 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.184415102 CET | 49804 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.368886948 CET | 80 | 49803 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:44.368940115 CET | 49803 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.370335102 CET | 80 | 49804 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:44.370398998 CET | 49804 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.370754004 CET | 49804 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.556660891 CET | 80 | 49804 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:44.591407061 CET | 80 | 49804 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:44.594125032 CET | 49804 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.715099096 CET | 49804 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.717695951 CET | 49805 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.902287960 CET | 80 | 49804 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:44.902359962 CET | 49804 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.905286074 CET | 80 | 49805 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:44.905477047 CET | 49805 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:44.905829906 CET | 49805 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.092017889 CET | 80 | 49805 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:45.125348091 CET | 80 | 49805 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:45.125545025 CET | 49805 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.244316101 CET | 49805 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.244868994 CET | 49806 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.430573940 CET | 80 | 49805 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:45.430787086 CET | 49805 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.430983067 CET | 80 | 49806 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:45.431200027 CET | 49806 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.431524992 CET | 49806 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.617451906 CET | 80 | 49806 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:45.648302078 CET | 80 | 49806 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:45.648571968 CET | 49806 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.777637005 CET | 49806 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.778187990 CET | 49807 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.963848114 CET | 80 | 49806 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:45.964087009 CET | 49806 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.964309931 CET | 80 | 49807 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:45.964390993 CET | 49807 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:45.964760065 CET | 49807 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:46.150558949 CET | 80 | 49807 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:46.186628103 CET | 80 | 49807 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:46.186713934 CET | 49807 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:46.311291933 CET | 49807 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:46.312125921 CET | 49808 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:46.497473955 CET | 80 | 49807 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:46.497575998 CET | 49807 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:46.497874022 CET | 80 | 49808 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:46.498080969 CET | 49808 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:46.498207092 CET | 49808 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:46.684067011 CET | 80 | 49808 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:46.714344025 CET | 80 | 49808 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:46.714437008 CET | 49808 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:46.826745033 CET | 49808 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.043061018 CET | 80 | 49808 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:47.043266058 CET | 49808 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.173468113 CET | 49808 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.174124956 CET | 49809 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.359277964 CET | 80 | 49808 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:47.359379053 CET | 49808 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.359884977 CET | 80 | 49809 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:47.359977007 CET | 49809 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.360348940 CET | 49809 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.546230078 CET | 80 | 49809 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:47.581254959 CET | 80 | 49809 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:47.581345081 CET | 49809 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.699724913 CET | 49809 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.700385094 CET | 49810 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.885603905 CET | 80 | 49809 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:47.885874987 CET | 49809 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.886167049 CET | 80 | 49810 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:47.886244059 CET | 49810 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:47.886632919 CET | 49810 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.072436094 CET | 80 | 49810 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:48.110296965 CET | 80 | 49810 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:48.110352993 CET | 49810 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.231163025 CET | 49810 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.231889009 CET | 49811 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.417247057 CET | 80 | 49810 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:48.417311907 CET | 49810 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.417501926 CET | 80 | 49811 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:48.417583942 CET | 49811 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.417948961 CET | 49811 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.603784084 CET | 80 | 49811 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:48.634325981 CET | 80 | 49811 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:48.634552956 CET | 49811 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.751009941 CET | 49811 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.751755953 CET | 49812 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.936925888 CET | 80 | 49811 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:48.937030077 CET | 49811 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.937582016 CET | 80 | 49812 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:48.937683105 CET | 49812 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:48.938045025 CET | 49812 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.123944998 CET | 80 | 49812 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:49.160002947 CET | 80 | 49812 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:49.160244942 CET | 49812 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.278000116 CET | 49812 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.278625965 CET | 49813 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.464046001 CET | 80 | 49812 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:49.464268923 CET | 49812 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.464452028 CET | 80 | 49813 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:49.464543104 CET | 49813 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.464920998 CET | 49813 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.650610924 CET | 80 | 49813 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:49.681108952 CET | 80 | 49813 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:49.681262970 CET | 49813 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.809413910 CET | 49813 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.810108900 CET | 49814 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.995415926 CET | 80 | 49813 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:49.995623112 CET | 49813 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.996079922 CET | 80 | 49814 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:49.996186018 CET | 49814 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:49.996552944 CET | 49814 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:50.182621002 CET | 80 | 49814 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:50.222256899 CET | 80 | 49814 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:50.222333908 CET | 49814 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:50.343775988 CET | 49814 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:50.344512939 CET | 49815 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:50.529742956 CET | 80 | 49814 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:50.529849052 CET | 49814 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:50.530417919 CET | 80 | 49815 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:50.530514956 CET | 49815 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:50.530996084 CET | 49815 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:50.716871023 CET | 80 | 49815 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:50.747817039 CET | 80 | 49815 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:50.747903109 CET | 49815 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:50.871721029 CET | 49815 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:50.872610092 CET | 49816 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.059303045 CET | 80 | 49815 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:51.059420109 CET | 49815 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.060254097 CET | 80 | 49816 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:51.060363054 CET | 49816 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.060671091 CET | 49816 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.246582031 CET | 80 | 49816 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:51.283536911 CET | 80 | 49816 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:51.283634901 CET | 49816 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.402827978 CET | 49816 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.403834105 CET | 49817 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.588895082 CET | 80 | 49816 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:51.588979006 CET | 49816 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.589720964 CET | 80 | 49817 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:51.589801073 CET | 49817 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.590154886 CET | 49817 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.776204109 CET | 80 | 49817 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:51.807215929 CET | 80 | 49817 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:51.807300091 CET | 49817 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.922252893 CET | 49817 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:51.922957897 CET | 49818 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:52.107934952 CET | 80 | 49817 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:52.108037949 CET | 49817 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:52.108711958 CET | 80 | 49818 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:52.108787060 CET | 49818 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:52.130019903 CET | 49818 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:52.316324949 CET | 80 | 49818 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:52.354525089 CET | 80 | 49818 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:52.354573965 CET | 49818 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:52.736371994 CET | 49818 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:52.736939907 CET | 49819 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:52.922256947 CET | 80 | 49818 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:52.922329903 CET | 49818 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:52.922672987 CET | 80 | 49819 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:52.922898054 CET | 49819 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:52.922993898 CET | 49819 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:53.108541012 CET | 80 | 49819 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:53.144440889 CET | 80 | 49819 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:53.144522905 CET | 49819 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:54.059453964 CET | 49819 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:54.059957981 CET | 49820 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:54.246432066 CET | 80 | 49819 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:54.246629953 CET | 49819 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:54.246706963 CET | 80 | 49820 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:54.246880054 CET | 49820 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:54.626684904 CET | 49820 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:54.812753916 CET | 80 | 49820 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:54.847461939 CET | 80 | 49820 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:54.847630024 CET | 49820 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:54.966784000 CET | 49820 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:54.967947960 CET | 49821 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:55.152877092 CET | 80 | 49820 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:55.152968884 CET | 49820 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:55.153748035 CET | 80 | 49821 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:55.153839111 CET | 49821 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:55.154104948 CET | 49821 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:55.339930058 CET | 80 | 49821 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:55.376924038 CET | 80 | 49821 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:55.376975060 CET | 49821 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:55.496412039 CET | 49821 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:55.497124910 CET | 49822 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:55.682521105 CET | 80 | 49821 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:55.682590008 CET | 49821 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:55.683015108 CET | 80 | 49822 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:55.683223963 CET | 49822 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:55.683355093 CET | 49822 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:55.868922949 CET | 80 | 49822 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:55.899401903 CET | 80 | 49822 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:55.899507999 CET | 49822 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.032516003 CET | 49822 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.033149004 CET | 49823 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.220143080 CET | 80 | 49822 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:56.220316887 CET | 49822 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.220637083 CET | 80 | 49823 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:56.220880985 CET | 49823 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.221788883 CET | 49823 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.407759905 CET | 80 | 49823 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:56.443429947 CET | 80 | 49823 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:56.443500042 CET | 49823 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.561737061 CET | 49823 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.562374115 CET | 49824 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.747785091 CET | 80 | 49823 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:56.747863054 CET | 49823 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.748186111 CET | 80 | 49824 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:56.748262882 CET | 49824 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.748717070 CET | 49824 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:56.934422970 CET | 80 | 49824 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:56.964922905 CET | 80 | 49824 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:56.965070009 CET | 49824 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.092747927 CET | 49824 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.093262911 CET | 49825 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.278981924 CET | 80 | 49824 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:57.279062033 CET | 49824 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.279408932 CET | 80 | 49825 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:57.279465914 CET | 49825 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.279830933 CET | 49825 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.465795040 CET | 80 | 49825 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:57.502969027 CET | 80 | 49825 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:57.503017902 CET | 49825 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.623537064 CET | 49825 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.624026060 CET | 49826 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.809464931 CET | 80 | 49825 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:57.809514046 CET | 49825 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.809839010 CET | 80 | 49826 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:57.809928894 CET | 49826 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.810183048 CET | 49826 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:57.995918036 CET | 80 | 49826 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:58.026194096 CET | 80 | 49826 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:58.026258945 CET | 49826 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:58.139451981 CET | 49826 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:58.140327930 CET | 49827 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:58.327105999 CET | 80 | 49826 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:58.327320099 CET | 49826 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:58.327867985 CET | 80 | 49827 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:58.328063011 CET | 49827 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:58.328392029 CET | 49827 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:58.514048100 CET | 80 | 49827 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:58.550244093 CET | 80 | 49827 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:58.550474882 CET | 49827 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:58.670381069 CET | 49827 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:58.670813084 CET | 49828 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:58.856224060 CET | 80 | 49827 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:58.856313944 CET | 49827 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:58.856755972 CET | 80 | 49828 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:58.856834888 CET | 49828 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:58.857187033 CET | 49828 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.043917894 CET | 80 | 49828 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:59.074208021 CET | 80 | 49828 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:59.074261904 CET | 49828 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.200572968 CET | 49828 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.201003075 CET | 49829 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.386620998 CET | 80 | 49828 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:59.386648893 CET | 80 | 49829 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:59.386712074 CET | 49828 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.386739969 CET | 49829 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.387161970 CET | 49829 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.573246956 CET | 80 | 49829 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:59.609313011 CET | 80 | 49829 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:59.609384060 CET | 49829 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.731683016 CET | 49829 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.732168913 CET | 49830 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.917459011 CET | 80 | 49829 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:59.917975903 CET | 80 | 49830 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:33:59.918032885 CET | 49829 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.918066978 CET | 49830 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:33:59.918338060 CET | 49830 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.104904890 CET | 80 | 49830 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:00.140093088 CET | 80 | 49830 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:00.140274048 CET | 49830 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.261449099 CET | 49830 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.261945009 CET | 49831 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.447417021 CET | 80 | 49830 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:00.447921038 CET | 80 | 49831 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:00.447983980 CET | 49830 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.448024988 CET | 49831 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.448271990 CET | 49831 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.634329081 CET | 80 | 49831 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:00.664535999 CET | 80 | 49831 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:00.668303967 CET | 49831 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.792817116 CET | 49831 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.793345928 CET | 49832 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.979012966 CET | 80 | 49831 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:00.979033947 CET | 80 | 49832 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:00.979090929 CET | 49831 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.979135990 CET | 49832 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:00.979515076 CET | 49832 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:01.165193081 CET | 80 | 49832 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:01.200164080 CET | 80 | 49832 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:01.200252056 CET | 49832 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:01.326400042 CET | 49832 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:01.326916933 CET | 49833 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:01.512120962 CET | 80 | 49832 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:01.512213945 CET | 49832 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:01.512717962 CET | 80 | 49833 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:01.512814045 CET | 49833 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:01.513159037 CET | 49833 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:01.699073076 CET | 80 | 49833 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:01.729543924 CET | 80 | 49833 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:01.729702950 CET | 49833 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:01.859256983 CET | 49833 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:01.859735966 CET | 49834 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:02.045516014 CET | 80 | 49833 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:02.045588017 CET | 49833 | 80 | 192.168.2.4 | 185.196.8.22 |
| Jan 13, 2024 06:34:02.046319008 CET | 80 | 49834 | 185.196.8.22 | 192.168.2.4 |
| Jan 13, 2024 06:34:02.046386003 CET | 49834 | 80 | 192.168.2.4 | 185.196.8.22 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Jan 13, 2024 06:32:49.695250988 CET | 55343 | 53 | 192.168.2.4 | 141.98.234.31 |
| Jan 13, 2024 06:32:49.991533041 CET | 53 | 55343 | 141.98.234.31 | 192.168.2.4 |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Jan 13, 2024 06:32:49.695250988 CET | 192.168.2.4 | 141.98.234.31 | 0x78c6 | Standard query (0) | A (IP address) | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Jan 13, 2024 06:32:49.991533041 CET | 141.98.234.31 | 192.168.2.4 | 0x78c6 | No error (0) | 185.196.8.22 | A (IP address) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.4 | 49735 | 185.196.8.22 | 80 | 7388 | C:\Users\user\AppData\Local\AVI formatter tool\aviformattertool.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| Jan 13, 2024 06:32:50.253227949 CET | 318 | OUT | |
| Jan 13, 2024 06:32:50.482608080 CET | 1286 | IN |