Edit tour
Windows
Analysis Report
Paper Extension tax filing Update.eml
Overview
General Information
| Sample name: | Paper Extension tax filing Update.eml |
| Analysis ID: | 1427018 |
| MD5: | 50886a951b615d33426822bd4baa4899 |
| SHA1: | a4cb2f165af9d6a0f1363db33e520b88f8cb7ace |
| SHA256: | d1c96dca83b679d49ddde83e71a33d445cef686fa7258fa1dfee0bf5f7835f71 |
| Infos: |  |
 | |
Detection
HTMLPhisher
| Score: | 72 |
| Range: | 0 - 100 |
| Whitelisted: | false |
| Confidence: | 100% |
Signatures
Antivirus detection for URL or domain
Phishing site detected (based on favicon image match)
Yara detected HtmlPhish54
Phishing site detected (based on image similarity)
Phishing site detected (based on logo match)
Detected hidden input values containing email addresses (often used in phishing pages)
Found iframes
HTML body contains low number of good links
HTML title does not match URL
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
Queries the volume information (name, serial number etc) of a device
Sigma detected: Office Autorun Keys Modification
Stores files to the Windows start menu directory
Classification
- System is w10x64_ra
OUTLOOK.EXE (PID: 6212 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \Root\Offi ce16\OUTLO OK.EXE" /e ml "C:\Use rs\user\De sktop\Pape r Extensio n tax fili ng Update. eml" MD5: 91A5292942864110ED734005B7E005C0) 
ai.exe (PID: 3924 cmdline: "C:\Progra m Files (x 86)\Micros oft Office \root\vfs\ ProgramFil esCommonX6 4\Microsof t Shared\O ffice16\ai .exe" "CC6 732E0-2F50 -4934-9466 -D3DA2EABD CED" "CE0F D662-5B9A- 482F-BB4E- 645EEF8AB9 E8" "6212" "C:\Progr am Files ( x86)\Micro soft Offic e\Root\Off ice16\OUTL OOK.EXE" " WordCombin edFloatieL reOnline.o nnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD) 
chrome.exe (PID: 3436 cmdline: "C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --st art-maximi zed --sing le-argumen t https:// u2355257.c t.sendgrid .net/ls/cl ick?upn=u0 01.4YkCuNY TF3S1epm9K ijHzHFfZe6 RGn3F0umQQ jG6fIb5h6U 0n3Lap6J1h KqXi7Fiss- 2Fnjz-2BcF RXpypvRmmf gWgS9YOA42 mWEN6Q3lVK aoWq5kCFdg ptgm12P2IT f3ZI5OC4x_ ovuZeGJ-2F F3ZygvyEwl Cpf4K-2FBT 4P5dS9YDsi lIX8zOjQKr VBMLDIxfLr Why3JYWFj2 al1ZQrpyrA 0-2BroCDjJ z26Xz7Hx1W PMrLManVR2 0bZ1gyqnIr q3pxy4IB2w bo1xSju1t4 x-2FaWM3jI eyKNTVrWWN KsqBDy7zf- 2B1GVEjDVd -2Fl7OBuSE f1BtAssX-2 B5owIdCVia lP-2BmTac8 GicUOMuWMg -3D-3D MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4) - chrome.exe (PID: 7008 cmdline:
"C:\Progra m Files\Go ogle\Chrom e\Applicat ion\chrome .exe" --ty pe=utility --utility -sub-type= network.mo jom.Networ kService - -lang=en-U S --servic e-sandbox- type=none --mojo-pla tform-chan nel-handle =2224 --fi eld-trial- handle=183 6,i,807967 2795350965 77,1007574 7481210455 159,262144 --disable -features= Optimizati onGuideMod elDownload ing,Optimi zationHint s,Optimiza tionHintsF etching,Op timization TargetPred iction /pr efetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
- cleanup
⊘No configs have been found
| Source | Rule | Description | Author | Strings |
|---|---|---|---|---|
| JoeSecurity_HtmlPhish_54 | Yara detected HtmlPhish_54 | Joe Security | ||
| JoeSecurity_HtmlPhish_54 | Yara detected HtmlPhish_54 | Joe Security | ||
| JoeSecurity_HtmlPhish_54 | Yara detected HtmlPhish_54 | Joe Security |
| Source: | Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): | ||
⊘No Snort rule has matched
Click to jump to signature section
Show All Signature Results
AV Detection |   |
|---|
| Source: | SlashNext: | ||
Phishing | |
|---|
| Source: | Matcher: | ||
| Source: | Matcher: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | File source: | ||
| Source: | Matcher: | ||
| Source: | Matcher: | ||
| Source: | Matcher: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTP Parser: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | IP Address: | ||
| Source: | JA3 fingerprint: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | TCP traffic detected without corresponding DNS query: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | DNS traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | HTTP traffic detected: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | String found in binary or memory: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | Network traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | HTTPS traffic detected: | ||
| Source: | Classification label: | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | |||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Process created: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Section loaded: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | LNK file: | ||
| Source: | Window found: | Jump to behavior | ||
| Source: | Window detected: | ||
| Source: | Key opened: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | File created: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | Process information set: | Jump to behavior | ||
| Source: | File Volume queried: | Jump to behavior | ||
| Source: | Process information queried: | Jump to behavior | ||
| Source: | Queries volume information: | Jump to behavior | ||
| Source: | Key value queried: | Jump to behavior | ||
| Reconnaissance | Resource Development | Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gather Victim Identity Information | Acquire Infrastructure | 1 Drive-by Compromise | Windows Management Instrumentation | 1 DLL Side-Loading | 1 Process Injection | 1 Masquerading | OS Credential Dumping | 1 Process Discovery | Remote Services | Data from Local System | 1 Encrypted Channel | Exfiltration Over Other Network Medium | Abuse Accessibility Features |
| Credentials | Domains | Default Accounts | Scheduled Task/Job | 1 Registry Run Keys / Startup Folder | 1 DLL Side-Loading | 1 Process Injection | LSASS Memory | 13 System Information Discovery | Remote Desktop Protocol | Data from Removable Media | 4 Non-Application Layer Protocol | Exfiltration Over Bluetooth | Network Denial of Service |
| Email Addresses | DNS Server | Domain Accounts | At | Logon Script (Windows) | 1 Registry Run Keys / Startup Folder | 1 DLL Side-Loading | Security Account Manager | Query Registry | SMB/Windows Admin Shares | Data from Network Shared Drive | 5 Application Layer Protocol | Automated Exfiltration | Data Encrypted for Impact |
| Employee Names | Virtual Private Server | Local Accounts | Cron | Login Hook | Login Hook | Binary Padding | NTDS | System Network Configuration Discovery | Distributed Component Object Model | Input Capture | 3 Ingress Tool Transfer | Traffic Duplication | Data Destruction |
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
InternetThis section contains all screenshots as thumbnails, including those not shown in the slideshow.
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
⊘No Antivirus matches
| Source | Detection | Scanner | Label | Link |
|---|---|---|---|---|
| 100% | SlashNext | Credential Stealing type: Phishing & Social Engineering | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe | ||
| 0% | URL Reputation | safe |
| Name | IP | Active | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|---|
| a.nel.cloudflare.com | 35.190.80.1 | true | false | high | |
| portal.cklglhcewevsqdgaemswijeahkgbsv.cfd | 172.67.187.49 | true | false | unknown | |
| part-0013.t-0009.t-msedge.net | 13.107.246.41 | true | false | unknown | |
| www.google.com | 64.233.177.103 | true | false | high | |
| u2355257.ct.sendgrid.net | 167.89.123.16 | true | false | high | |
| aadcdn.cklglhcewevsqdgaemswijeahkgbsv.cfd | 172.67.187.49 | true | false | unknown | |
| passwordreset.cklglhcewevsqdgaemswijeahkgbsv.cfd | 172.67.187.49 | true | false | unknown | |
| login.cklglhcewevsqdgaemswijeahkgbsv.cfd | 172.67.187.49 | true | false | unknown | |
| part-0042.t-0009.t-msedge.net | 13.107.213.70 | true | false | unknown | |
| identity.nel.measure.office.net | unknown | unknown | false | high |
| Name | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|
| false | unknown | ||
| false | low | ||
| false | high | ||
| true | unknown | ||
| false | unknown | ||
| true | unknown |
| Name | Source | Malicious | Antivirus Detection | Reputation |
|---|---|---|---|---|
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | low | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false | unknown | |||
| false |
| unknown | ||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | unknown | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | low | |||
| false |
| unknown | ||
| false | high | |||
| false | high | |||
| false | high | |||
| false | high |
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
| IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
|---|---|---|---|---|---|---|
| 13.107.246.41 | part-0013.t-0009.t-msedge.net | United States | 8068 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 167.89.123.16 | u2355257.ct.sendgrid.net | United States | 11377 | SENDGRIDUS | false | |
| 239.255.255.250 | unknown | Reserved | unknown | unknown | false | |
| 64.233.177.103 | www.google.com | United States | 15169 | GOOGLEUS | false | |
| 172.67.187.49 | portal.cklglhcewevsqdgaemswijeahkgbsv.cfd | United States | 13335 | CLOUDFLARENETUS | false | |
| 13.107.213.70 | part-0042.t-0009.t-msedge.net | United States | 8068 | MICROSOFT-CORP-MSN-AS-BLOCKUS | false | |
| 35.190.80.1 | a.nel.cloudflare.com | United States | 15169 | GOOGLEUS | false |
| IP |
|---|
| 192.168.2.16 |
| Joe Sandbox version: | 40.0.0 Tourmaline |
| Analysis ID: | 1427018 |
| Start date and time: | 2024-04-16 22:12:48 +02:00 |
| Joe Sandbox product: | CloudBasic |
| Overall analysis duration: | 0h 4m 56s |
| Hypervisor based Inspection enabled: | false |
| Report type: | full |
| Cookbook file name: | defaultwindowsinteractivecookbook.jbs |
| Analysis system description: | Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01 |
| Number of analysed new started processes analysed: | 19 |
| Number of new started drivers analysed: | 0 |
| Number of existing processes analysed: | 0 |
| Number of existing drivers analysed: | 0 |
| Number of injected processes analysed: | 0 |
| Technologies: |
|
| Analysis Mode: | default |
| Analysis stop reason: | Timeout |
| Sample name: | Paper Extension tax filing Update.eml |
| Detection: | MAL |
| Classification: | mal72.phis.winEML@18/63@20/8 |
| EGA Information: | Failed |
| HCA Information: |
|
| Cookbook Comments: |
|
- Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
- Excluded IPs from analysis (whitelisted): 199.232.214.172, 52.109.52.131, 52.109.8.36, 23.209.188.145, 23.209.188.146, 52.113.194.132, 172.253.124.94, 142.250.9.102, 142.250.9.101, 142.250.9.139, 142.250.9.113, 142.250.9.138, 142.250.9.100, 74.125.138.84, 34.104.35.123, 52.182.143.209, 64.233.176.95, 173.194.219.95, 142.250.9.95, 172.253.124.95, 142.250.105.95, 108.177.122.95, 64.233.185.95, 64.233.177.95, 74.125.138.95, 172.217.215.95, 142.251.15.95, 74.125.138.94, 23.45.13.51, 23.45.13.16, 64.233.176.102, 64.233.176.101, 64.233.176.113, 64.233.176.138, 64.233.176.139, 64.233.176.100
- Excluded domains from analysis (whitelisted): omex.cdn.office.net, slscr.update.microsoft.com, clientservices.googleapis.com, a1894.dscb.akamai.net, asia.configsvc1.live.com.akadns.net, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, osiprod-cus-buff-azsc-000.centralus.cloudapp.azure.com, clients2.google.com, login.live.com, update.googleapis.com, officeclient.microsoft.com, a1864.dscd.akamai.net, clients1.google.com, ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, prod.configsvc1.live.com.akadns.net, self.events.data.microsoft.com, ctldl.windowsupdate.com, aadcdn.msauth.net, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, cus-azsc-000.roaming.officeapps.live.com, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, us1.roaming1.live.com.akadns.net, jpe-azsc-config.officeapps.live.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, s-00
- HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
- Not all processes where analyzed, report is missing behavior information
- Report size getting too big, too many NtQueryAttributesFile calls found.
- Report size getting too big, too many NtQueryValueKey calls found.
- VT rate limit hit for: Paper Extension tax filing Update.eml
⊘No simulations
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 13.107.246.41 | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| 167.89.123.16 | Get hash | malicious | Unknown | Browse | ||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Phisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Phisher | Browse | |||
| 239.255.255.250 | Get hash | malicious | NetSupport RAT | Browse | ||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Phisher | Browse | |||
| Get hash | malicious | Phisher | Browse | |||
| 13.107.213.70 | Get hash | malicious | Unknown | Browse | ||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | HTMLPhisher | Browse | |||
| Get hash | malicious | Unknown | Browse | |||
| Get hash | malicious | HtmlDropper, HTMLPhisher | Browse |
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| part-0013.t-0009.t-msedge.net | Get hash | malicious | NetSupport RAT | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| part-0042.t-0009.t-msedge.net | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | TechSupportScam | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| SENDGRIDUS | Get hash | malicious | Unknown | Browse |
| |
| Get hash | malicious | Mirai | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| CLOUDFLARENETUS | Get hash | malicious | NetSupport RAT | Browse |
| |
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Phisher | Browse |
| ||
| MICROSOFT-CORP-MSN-AS-BLOCKUS | Get hash | malicious | NetSupport RAT | Browse |
| |
| Get hash | malicious | DBatLoader | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | AteraAgent | Browse |
| ||
| Get hash | malicious | AgentTesla, DBatLoader, PureLog Stealer, RedLine | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| MICROSOFT-CORP-MSN-AS-BLOCKUS | Get hash | malicious | NetSupport RAT | Browse |
| |
| Get hash | malicious | DBatLoader | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | AteraAgent | Browse |
| ||
| Get hash | malicious | AgentTesla, DBatLoader, PureLog Stealer, RedLine | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
| Match | Associated Sample Name / URL | SHA 256 | Detection | Threat Name | Link | Context |
|---|---|---|---|---|---|---|
| 28a2c9bd18a11de089ef85a160da29e4 | Get hash | malicious | HTMLPhisher | Browse |
| |
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | HTMLPhisher | Browse |
| ||
| Get hash | malicious | Phisher | Browse |
| ||
| Get hash | malicious | Phisher | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
| ||
| Get hash | malicious | Unknown | Browse |
|
⊘No context
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 231348 |
| Entropy (8bit): | 4.386943034410443 |
| Encrypted: | false |
| SSDEEP: | 1536:PCYLgGgspfUDwxVfejgsHpNcAz79ysQqt29P7WqoQV4rcm0Fvj6HyG8xlQ26xQft:R1gnwigumiGu2UqoQSrt0FvPVc67u2gI |
| MD5: | 5C7BD398612D9FBC26A7716D85FF6F31 |
| SHA1: | 6FDC8289DA194D56F22DA7C3A44C9386E438BB8A |
| SHA-256: | 4BFB88662C45F839A148F5BD4DF3CE6E08CDADFFA4228B4C6118C8ADCED7E6F4 |
| SHA-512: | 1A77320BC47A91E4FBC385E222A1EA1496ED9008C70BE41A0212F2BDFB04B3A9EEC9775065630C302DB0980ABFE745B500B7A2DD154BE5E40AC446EAC18CBC26 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 322260 |
| Entropy (8bit): | 4.000299760592446 |
| Encrypted: | false |
| SSDEEP: | 6144:dztCFLNyoAHq5Rv2SCtUTnRe4N2+A/3oKBL37GZbTSB+pMZIrh:HMLgvKz9CtgRemO3oUHi3SBSMZIl |
| MD5: | CC90D669144261B198DEAD45AA266572 |
| SHA1: | EF164048A8BC8BD3A015CF63E78BDAC720071305 |
| SHA-256: | 89C701EEFF939A44F28921FD85365ECD87041935DCD0FE0BAF04957DA12C9899 |
| SHA-512: | 16F8A8A6DCBAEAEFB88C7CFF910BCCC71B76A723CF808B810F500E28E543112C2FAE2491D4D209569BD810490EDFF564A2B084709B02963BCAF6FDF1AEEC59AC |
| Malicious: | false |
| Reputation: | moderate, very likely benign file |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 10 |
| Entropy (8bit): | 2.9219280948873623 |
| Encrypted: | false |
| SSDEEP: | 3:LEdRVS:4dR4 |
| MD5: | 926F05A4C320322A9D816737EEBF0563 |
| SHA1: | 0DF60F7301E28FF6DD7236A933F53133424DCE11 |
| SHA-256: | 3CA6340FDCD20AF112C676A87460EC24FFF8F3D8852C9902B004DC9C3A74274B |
| SHA-512: | 363E22F323DF317FC8C188E98BB9EAFF9039BCEB238247F791844F5D42D9605C719220C1BBB1908B683F31F4306E751E22365C66B4CA09730E55C6847B6870D8 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\3CEDFC9C-9059-4584-BF97-B95471D71D48
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 166203 |
| Entropy (8bit): | 5.340896214086944 |
| Encrypted: | false |
| SSDEEP: | 1536:++C7FPgOsB3U9guwwJQ9DQA+zqzhQik4F77nXmvYd8XRTEwreOR6g:rIQ9DQA+zqzMXeMJ |
| MD5: | 7328B9FFB2F2D4E6CD7F9A26EBC51D24 |
| SHA1: | 23684309ACCAE0822F17B9868AA91DF431DB58F7 |
| SHA-256: | 2D46E547C074EA380B28277734A81CFB292AA6AAC3D8F4457F1AC6015ECEEF36 |
| SHA-512: | 5D57C5847F14440637955311A9E9B9407FBCDB84F97889A685160ABB64966B9AF383B51FE0478CA17955899BFB8B4015087C2EC87A07741190616B4AE4FCA5D0 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4096 |
| Entropy (8bit): | 0.09216609452072291 |
| Encrypted: | false |
| SSDEEP: | 3:lSWFN3l/klslpF/4llfll:l9F8E0/ |
| MD5: | F138A66469C10D5761C6CBB36F2163C3 |
| SHA1: | EEA136206474280549586923B7A4A3C6D5DB1E25 |
| SHA-256: | C712D6C7A60F170A0C6C5EC768D962C58B1F59A2D417E98C7C528A037C427AB6 |
| SHA-512: | 9D25F943B6137DD2981EE75D57BAF3A9E0EE27EEA2DF19591D580F02EC8520D837B8E419A8B1EB7197614A3C6D8793C56EBC848C38295ADA23C31273DAA302D9 |
| Malicious: | false |
| Reputation: | moderate, very likely benign file |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 4616 |
| Entropy (8bit): | 0.13673511612852962 |
| Encrypted: | false |
| SSDEEP: | 3:7FEG2l+TS/FllkpMRgSWbNFl/sl+ltlslVlllfllB:7+/loKg9bNFlEs1EP/R |
| MD5: | 33F55107A0E7831519C9F18B09C2F10F |
| SHA1: | 6F1E7307FDA8F3F72DB313CDE09D007B9FDA9C77 |
| SHA-256: | E69C0B2B87070CBAB35E2F4A483F5EFB1803B7BE160D8885454934EAE11CCE0D |
| SHA-512: | B99B0468E32F5012360A856D5BB24D05E8707E3EE7DA39F1CD295957B5CE5BAC7DAEDC087A40F7C10C158EF254E46F73CEE655976CF3C7E8864CC8C109735D66 |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 32768 |
| Entropy (8bit): | 0.0444161994908491 |
| Encrypted: | false |
| SSDEEP: | 3:G4l2egEmo9kfWAl2egEmo9kf1lWlL9//Xlvlll1lllwlvlllglbXdbllAlldl+l:G4l2egEkfnl2egEkf10L9XXPH4l942U |
| MD5: | 9643B356BDDB229DD9F51DBE05079124 |
| SHA1: | 139002BC344A42E22298C75B6E590A1335DD1F05 |
| SHA-256: | C38C1F46D080C2E375534CCB887C05430D24A22E15D4C1C7A4A4B3149B7BFE9F |
| SHA-512: | D47E859ECEFBA94584FB78B7AD98EF68471E55C3A798F8EF3101743EEA5C7654789952895240E127D1BDB8123E0224A8562DB74DF777E37315B49AE56502097C |
| Malicious: | false |
| Reputation: | low |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | modified |
| Size (bytes): | 45352 |
| Entropy (8bit): | 0.3943470082056723 |
| Encrypted: | false |
| SSDEEP: | 24:KArT4Z8OyQ3zRDE9P8Ull7DBtDi4kZERDKr/Xftzqt8VtbDBtDi4kZERDk:Nr8Z8LQ1zUll7DYM0/XVzO8VFDYM |
| MD5: | AB100C332E313B2951C459D16236FC08 |
| SHA1: | 6C6453F4E2C720780AB5187E28CF5E39F04DA860 |
| SHA-256: | 91BC2FB76FAD7605E9EBC8D2E23B59BD2EDF923D556B03125707C9EE14FD6E93 |
| SHA-512: | 76A549B30B3143D25A96751CFDFB62ABF7118417E649FC7C64E0AF0CEAB34B0F0BB73C939B83FAB56FABAAB1B647974FB6DD2BD673C9F809678D3C27AEE8B83B |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{BFC0B54A-8775-40A0-B1BE-A30591683D7A}.tmp
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2508 |
| Entropy (8bit): | 2.84121217763138 |
| Encrypted: | false |
| SSDEEP: | 48:H90gx5yUFywLEgSW83qk8i2SUh/AGxNNaGtLwYX:H90Sy7FoSUhRR |
| MD5: | 049202A0B127FBB985096E97D6D884EB |
| SHA1: | D29713CAD953C93C25B19CA8F265D621F9124A89 |
| SHA-256: | D22539B65EB2714C1786166F1EC69C4A2581748A1BB831868899ED7F1D63A97A |
| SHA-512: | 1B49CE89DEF87A219DF20527BF79B06612EAAF9E76B5470CBD8949EFCE333CF6B76F9AC901C60EF305645F3DF5BBC69CFEF3D3317DDC3DC6B363277277A7303F |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1713298404579151200_319EC4C4-5D84-4266-9016-120BA9938604.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.004877551291677898 |
| Encrypted: | false |
| SSDEEP: | 96:v+QNJ/ZorqmMYb19LKk1Q8dum7KebBKT8LK3lPQ8d94h7Kb9Q8dvaMmjKssvQ8dh:RPYqLEFKTx+h7jQjiP4Hb28ubXXB |
| MD5: | FFD1CAD5D628F10ADEADDC97D439A8C3 |
| SHA1: | 31D2907418139CC98670B9F239A35D83ECB0B953 |
| SHA-256: | 0CD78F0C75FFD7A994760752B9072EDE20D623A1959CED1560D26D16843A15B5 |
| SHA-512: | 55B43EE2164659153D9532D6B479DBAD81247CAF065FD7EF00317CF72657F51EF6E97F6D35311FA45C0D5B7D88D27AED546E71C8B130AEA5735B157B66FCCD86 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1713298404579843200_319EC4C4-5D84-4266-9016-120BA9938604.log
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 20971520 |
| Entropy (8bit): | 0.0 |
| Encrypted: | false |
| SSDEEP: | 3:: |
| MD5: | 8F4E33F3DC3E414FF94E5FB6905CBA8C |
| SHA1: | 9674344C90C2F0646F0B78026E127C9B86E3AD77 |
| SHA-256: | CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC |
| SHA-512: | 7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20240416T2213240411-6212.etl
Download File
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 126976 |
| Entropy (8bit): | 4.656758789477392 |
| Encrypted: | false |
| SSDEEP: | 768:7oZWjXroOcBREx4TmZ9NZco1fUbE1X+ne8ekMfXbe7rZEeCnbKd50CN/Pj:7b46Z9NZtUbE1X+5rZEeCb/W |
| MD5: | 49BFD60415D41B0219FA0B28AB231C73 |
| SHA1: | AE9D0C9E094BA9C73BE35D043847B6BBBE206034 |
| SHA-256: | FD9E0CED142471B35CC19BACE121CD4E70BD7147D36A3BA22D0E2D4CC06CAC3A |
| SHA-512: | 11A4DEB0E35D0B7B7C33232F407540601B53E66EC751A16C5C40877D086D00DCEB9A825193810988DCEB06A1339379EE50B9D2C0AE8BC48275189699D1098345 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 30 |
| Entropy (8bit): | 1.2389205950315936 |
| Encrypted: | false |
| SSDEEP: | 3:A4sj:A |
| MD5: | 5B812E67AB9251D435739B6C233A4258 |
| SHA1: | AB2DCF6E1996C861F9F21F4C9D240766355F72E0 |
| SHA-256: | 6740299905FD7C56EA5DB24C5533E189FB1BCA5CFC956A6A5989F8D1AF7061E7 |
| SHA-512: | E04CE672DC76A612198E8E90E63129AD7B51AC42719E6EEB461BA01667DCE0E14DA59D3A8924B7BE482D4D9ADE9AD4FCE92F20AD567A57473F2601B4ECB1BF9E |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 16384 |
| Entropy (8bit): | 0.6708860667649674 |
| Encrypted: | false |
| SSDEEP: | 12:rl3baFH/sqLKeTy2MyheC8T23BMyhe+S7wzQP9zNMyhe+S7xMyheCHqtx:remnq1Py961K7 |
| MD5: | 9A698D7D9F10670E0BDE064CDD16E2F9 |
| SHA1: | A709EC4BFBD90FD7F92739E247BAA2194650D604 |
| SHA-256: | 71125589B49E56698F1E453CA7A54F2B926926EF0428EED69B146B760BCDE81B |
| SHA-512: | 2972B22C7F953364994A9E8A61C38D00FA74CBF1108EE92177CDCF78C18644A12AB1125825A87D319C66066810D033F93036E7E591C52E4EFF403435C6AB1CF4 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2673 |
| Entropy (8bit): | 3.9882556079434077 |
| Encrypted: | false |
| SSDEEP: | 48:84d5ThBjSH7idAKZdA1FehwiZUklqehzxy+3:8ivy2xy |
| MD5: | 164C526B157A5BFC1688986E415DBE80 |
| SHA1: | FEB5A566DAEDAC53845294B18416DC973F4F345A |
| SHA-256: | BC20199B3FE267025AE7A10BFD744397C6A165003706AFD0BF939474ED39C866 |
| SHA-512: | 5C25C136D57F0697C2FB9A6BBD9CEFEC6D6712D308D70A928F526B722D3CFCD1CA1D42253BE7B3A92DA63F1C4BDBBEA2FBE8C673955A24ECBC44A61301DB41F8 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2675 |
| Entropy (8bit): | 4.007754073441661 |
| Encrypted: | false |
| SSDEEP: | 48:8Dd5ThBjSH7idAKZdA1seh/iZUkAQkqehmxy+2:8Hvs9Qhxy |
| MD5: | B007EF606F6E3987DD009F935BF70F5A |
| SHA1: | 8930FD96F04AF7254E90197EFE587CEF3D9D1C52 |
| SHA-256: | 6E3B8C88977BC8F054A18D34D44A72C343A892651EA3102D21FD241A58FE5A47 |
| SHA-512: | 3E6789514A7942729ECE49F93024491B82E8241724DCBA02B4A06AC7A7568BA4894E73532BAE691AA2024536BCA66F664C851F5168443314FE0CC2CCBB33EAA9 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2689 |
| Entropy (8bit): | 4.014565773100293 |
| Encrypted: | false |
| SSDEEP: | 48:85d5ThBjAH7idAKZdA14meh7sFiZUkmgqeh7sExy+BX:8FvSnKxy |
| MD5: | A70722AB03B1527BAF71CD9721391AA7 |
| SHA1: | 24B2334AA732EE408A684AC0DF4C24E4AA19E7FB |
| SHA-256: | D9242742D6FC574E8BE8A15C21398E020FB09B5C3F898963BE3CF7BEB02B4BC1 |
| SHA-512: | 734F391DA3949A94F0EB217462A67C5E307DBCDA115AD82241210323082695E8C90803A30679D0CE11F91138F73614E7123BF54ECA4C7C600AFC2829708D45DF |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 4.005911917559908 |
| Encrypted: | false |
| SSDEEP: | 48:82d5ThBjSH7idAKZdA1TehDiZUkwqehixy+R:8gvn8xy |
| MD5: | 8F218366ECAEDC3DB659473DAB1A53A6 |
| SHA1: | 70DD98C5E0724F6AE5DFE648B227560834CD6F1B |
| SHA-256: | 1894DA54E98581A1CB047E2403BD2B3462E2FE97C6AB3D80AE44A17A6F926006 |
| SHA-512: | 7F2B94644BD7DFA5B2019B7C379A82CD96FEC9123F07CEA43E1EB2EE7E99366289A84CB75C1FB7DF21534BA146A08F411DF7D628C969E306D0109D733BBCF64F |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2677 |
| Entropy (8bit): | 3.992582302685125 |
| Encrypted: | false |
| SSDEEP: | 48:83d5ThBjSH7idAKZdA1dehBiZUk1W1qehYxy+C:8rv394xy |
| MD5: | 5C61733711A0791970E8DA4617CC1BA4 |
| SHA1: | 5DB0D4BBB62390F17034D86B1BAF8EC99A574AFC |
| SHA-256: | 66C1D9AA6002710F3B1A2D6E4B6471F7399FFE0A8AB5AFE3BF065818C5C69D1D |
| SHA-512: | 859BB7A924FFC4712688B6C5593B4ED4FCC08ACFD2FA0CBCBA795843973DDCBA83DE6A74474A5F6754038683E7AE103A4E276602D222AF85709574BBBAE6FBE0 |
| Malicious: | false |
| Preview: |
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
Download File
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2679 |
| Entropy (8bit): | 4.0034329225311 |
| Encrypted: | false |
| SSDEEP: | 48:8Pd5ThBjSH7idAKZdA1duTeehOuTbbiZUk5OjqehOuTbKxy+yT+:8Dv7TfTbxWOvTbKxy7T |
| MD5: | 1BA9247CED5AEBFB46D966327E5E8294 |
| SHA1: | 85B52AA875F5399B915ABCF59ECC70401C25247C |
| SHA-256: | 27A2BFE5DE678F0A96889B7E110BCB74629ADDFB0A3767E1827AD75543AEFF4A |
| SHA-512: | 42C9239CCD145F937B52C974D2BC570DF14373A82107CD484EA809A1C119B99EA615960E34E96A613B6DA779AC8E32043AAD513C8ADECF0A10019EE9B8B69A49 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 271360 |
| Entropy (8bit): | 2.418943266816834 |
| Encrypted: | false |
| SSDEEP: | 1536:JOqrSkQYcEtPr6sV64ZWTW53jEpEHPVQ10BAwrOEiLfMfW53jEpEHPVQ10BAwr1:Jr1QKr6snWlpjAcMhpj |
| MD5: | D9DB671474A77E72DEF0B130738CF502 |
| SHA1: | 54BDD780208127333FE8AF793BF834856322BED2 |
| SHA-256: | 50024D95E8C7CCFC5B50865C023DE7AB8DC48B79A46204445956731754D4DA7D |
| SHA-512: | 41AB9BEFABAF738CDA9F640555682E8145F2D6F1F5B7E2E8E2DD46DB1D81392EB9418DBCE55690F9A2E4D5294F80CE8DAA4736D49241F6F994EF4FD74AEDD8E5 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 131072 |
| Entropy (8bit): | 2.378859626775913 |
| Encrypted: | false |
| SSDEEP: | 1536:MW53jEpEHPVQ10BAwr1EgLfxUKuTqnEfyO:OpjnKj4y |
| MD5: | F551D76CE617160EA581D5402EF7478F |
| SHA1: | 7BA790F1CD777D5946D066D6F957576B34024AF4 |
| SHA-256: | 6B40EE4B976611C56F75A07DC3F9A23D702E2D9157E05EFADDBCA7E223AC4643 |
| SHA-512: | 61027641218B8C67128217A08D8D44777A3809CB73ADA649F071C8BDB75833B12DED8681E934367EC7F1F252D6F66BDF8C73C4C221B4A2EE4BC4998AE34BF2D6 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 17174 |
| Entropy (8bit): | 2.9129715116732746 |
| Encrypted: | false |
| SSDEEP: | 24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO |
| MD5: | 12E3DAC858061D088023B2BD48E2FA96 |
| SHA1: | E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5 |
| SHA-256: | 90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21 |
| SHA-512: | C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 621 |
| Entropy (8bit): | 7.673946009263606 |
| Encrypted: | false |
| SSDEEP: | 12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD |
| MD5: | 4761405717E938D7E7400BB15715DB1E |
| SHA1: | 76FED7C229D353A27DB3257F5927C1EAF0AB8DE9 |
| SHA-256: | F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF |
| SHA-512: | E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2407 |
| Entropy (8bit): | 5.342656676029853 |
| Encrypted: | false |
| SSDEEP: | 48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEF+MY+suse+sOCWrtv:gC3Na5+GX+Ti2XsYEMEsushs6 |
| MD5: | 310976169BC3A59BB3E638B5F50FEB90 |
| SHA1: | 28ED183B4A92A0D72EF9705B93AA76A44F5305B4 |
| SHA-256: | C333EF89D01424ECC1A5679032862B7BDCAE5EF3CF532B2D0D198ACF4EACEEE2 |
| SHA-512: | 0CF8E5BF47C08109A07EFB6F7F2D65CA749D0FC5290ED252FC1DED5399617B06375DEDFA8F65704C0FD40F4FAB28A2CF4E56B456F80400A40ACB8FCBF65963C1 |
| Malicious: | false |
| URL: | https://login.cklglhcewevsqdgaemswijeahkgbsv.cfd/Me.htm?v=3 |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 1435 |
| Entropy (8bit): | 7.8613342322590265 |
| Encrypted: | false |
| SSDEEP: | 24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY |
| MD5: | 9F368BC4580FED907775F31C6B26D6CF |
| SHA1: | E393A40B3E337F43057EEE3DE189F197AB056451 |
| SHA-256: | 7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36 |
| SHA-512: | 0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 121212 |
| Entropy (8bit): | 7.9972852524966695 |
| Encrypted: | true |
| SSDEEP: | 1536:iD6XUiMe8qYwKDImT4zkhRc8JbmxMwGysvrO/Q0wjsFUUXbBHfy18nZIH9JxhmTK:wHHDZT33eAvrn0wjsm8Z0otE |
| MD5: | 0868DA2DD5EFFED92904047439E49D48 |
| SHA1: | D760173E5E6B25461B0D2A0B32D384FE659B2338 |
| SHA-256: | 8C41E973CB5EE0194EBF3BAA0716EEEB57EED53552F042E200190E3C37F08CFD |
| SHA-512: | 9F430A42D5380D12C553255A324E347A37337E659D623F50314CF47FE52889FD4120F8DD2895DE3327ED97B65DE4E78C982DA966A3F5253286AB0DE0260817CB |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_jHSrlUosdD1xxbmcR_lMNA2.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 20314 |
| Entropy (8bit): | 7.979540464295058 |
| Encrypted: | false |
| SSDEEP: | 384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IM6mxqrghTvUty7T9Q:9CGEiL/w7R8DW9Z5B6AasTv37T9Q |
| MD5: | 92A840DC3D177339DAE03FEDF22A22B5 |
| SHA1: | C1C9A6E6442388D07A9D9D72C12DA25094D6920F |
| SHA-256: | 4A986BA8875F22A0EABC356112A6790F90E114ADB72EAEC4632E03812EC1EDE4 |
| SHA-512: | 98C705395DD249501D8069A03E0068BC9CCF4F2D139BEC63A00564C69CD21C05CB25CF56BA7B40822963737989D5048AD310E20D6022E84346C982CFCEF79E11 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 7886 |
| Entropy (8bit): | 5.761466657927833 |
| Encrypted: | false |
| SSDEEP: | 192:TNwmThUQ7q46H2rSfF9SMo9+032pm/K02g:TNBt17q46H2rmvoXmUCW |
| MD5: | 9E79EFA92BD0F246B77B2924D55A5A72 |
| SHA1: | 4F023613F32DDE0D16D427A2DDFCC725AA1F8DFD |
| SHA-256: | 16D8DF54012CA96403737B900BA897B46D1ADB870C9E3F514AC72D68847C3297 |
| SHA-512: | B8068350489487171475F0DD81E88DD6C3D21664BCF79B714E6830C6669EF1C32BC63333AF6E89FDC4041D0280FE44F6538F5A67F087C2282AEB3DA5AE223007 |
| Malicious: | false |
| URL: | https://login.cklglhcewevsqdgaemswijeahkgbsv.cfd/cdn-cgi/challenge-platform/h/b/scripts/jsd/bcc5fb0a8815/main.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 54325 |
| Entropy (8bit): | 7.996017457525811 |
| Encrypted: | true |
| SSDEEP: | 768:MBOXdNQNgHZp9Ga0EqoitKVFF9dMVtakANyFeDpz3ZSgaDpk4JGUISrX+pk7RU/P:bDQNg5pFneONYu9ZpfUv7+m7aITS2Du |
| MD5: | 799F880143F17E47C4EFDBB3FF35A54C |
| SHA1: | 8CECC74EB422322F78EDE1111F175A28725CCA9F |
| SHA-256: | EA70CC2977F4DEB5236041A7A0628FA671FB8AD20A5E9E3FD6885A11359EF2FE |
| SHA-512: | 46E811AA3D03023596B47DB39B6FABCC1A4B7388C7F0A187A4C23B024695593702A70227F5B770174A258A265A48D4F87EF01281210229E51022E9BC6948214B |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 276 |
| Entropy (8bit): | 7.316609873335077 |
| Encrypted: | false |
| SSDEEP: | 6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/ |
| MD5: | 4E3510919D29D18EEB6E3E8B2687D2F5 |
| SHA1: | 31522A9EC576A462C3F1FFA65C010D4EB77E9A85 |
| SHA-256: | 1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E |
| SHA-512: | DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 35813 |
| Entropy (8bit): | 7.9933603091137355 |
| Encrypted: | true |
| SSDEEP: | 768:GuwXn8kBZAqgpsnCq63v9K6eodOamRz3YkdBSqwSsg84Yk5RFB6:Jc8kBBnChQodOamRz3YQFSLk3q |
| MD5: | 57911010756C90D58754C91EF1EE2765 |
| SHA1: | BAA48FEF4866D7DAFD9F59417745EE838F0E63CA |
| SHA-256: | 87C5385BA17F84CC25FB7BBE1EDB4169BC702842BD74B758ACDC130986D55BC2 |
| SHA-512: | FF5A7B638CD9117C89C277F6846506D41768D3A30F81B63768379294160AEE89F0D60E853F938D28A654226E18FE3389808ECCDA7D106F76EBE95A53A00DD560 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 15799 |
| Entropy (8bit): | 7.985179973188672 |
| Encrypted: | false |
| SSDEEP: | 384:UwXl87i4naaFtPESJ2DWOq1IcQS0SL7EOONPk:UwXW7i4naTSOAszOG8 |
| MD5: | 978A6C1AA934E5B1C5320D515FD25662 |
| SHA1: | 64636EF3E1AD607F095DBA6CB01447AC133B483D |
| SHA-256: | D1963B1837F4087E988FD18BB4CF25B38D61D675C4B6A6FC01158BD39945F10A |
| SHA-512: | 411A51CC19890DC5B27E4800E5BB4BFB4D0E3DC076010C6AB8B10396524F4C996D86420888AF3A1632D5FB281CEB4373C18B0EEFC9F8A84AA59D295450393DA7 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l2bvdjfwt697xziuhxpwsg2.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 3620 |
| Entropy (8bit): | 6.867828878374734 |
| Encrypted: | false |
| SSDEEP: | 48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd |
| MD5: | B540A8E518037192E32C4FE58BF2DBAB |
| SHA1: | 3047C1DB97B86F6981E0AD2F96AF40CDF43511AF |
| SHA-256: | 8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D |
| SHA-512: | E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 276 |
| Entropy (8bit): | 7.316609873335077 |
| Encrypted: | false |
| SSDEEP: | 6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/ |
| MD5: | 4E3510919D29D18EEB6E3E8B2687D2F5 |
| SHA1: | 31522A9EC576A462C3F1FFA65C010D4EB77E9A85 |
| SHA-256: | 1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E |
| SHA-512: | DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 673 |
| Entropy (8bit): | 7.6596900876595075 |
| Encrypted: | false |
| SSDEEP: | 12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D |
| MD5: | 0E176276362B94279A4492511BFCBD98 |
| SHA1: | 389FE6B51F62254BB98939896B8C89EBEFFE2A02 |
| SHA-256: | 9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C |
| SHA-512: | 8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 49617 |
| Entropy (8bit): | 7.995534454154058 |
| Encrypted: | true |
| SSDEEP: | 1536:IohTdtbswK1RfDDUDXsbGSKtnbiR+fU6I/dUG:PywkRLDwXSG2R+PI/qG |
| MD5: | 97A274B38A866C3FEFFF29003D3511D1 |
| SHA1: | 0752DA49A4F7E374C76D0573AFD9CD1A074FBF00 |
| SHA-256: | 6B1FF2587733BD9F44BC787C319AF8C23D01C14ED633DC8CB6F5DF55B5178E9B |
| SHA-512: | 62C400A3013A96A9B1AB5FEB2ADFF64CD3FA219C407B10F028AB04A96863F925D8D8D9AAF937ACDAF9091AC1B1DC262AAB92C2DD483C3B8715C71F3F1EC6D401 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_3b4rnVNi70Sso4_c42_ImQ2.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 621 |
| Entropy (8bit): | 7.673946009263606 |
| Encrypted: | false |
| SSDEEP: | 12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD |
| MD5: | 4761405717E938D7E7400BB15715DB1E |
| SHA1: | 76FED7C229D353A27DB3257F5927C1EAF0AB8DE9 |
| SHA-256: | F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF |
| SHA-512: | E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 1435 |
| Entropy (8bit): | 7.8613342322590265 |
| Encrypted: | false |
| SSDEEP: | 24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY |
| MD5: | 9F368BC4580FED907775F31C6B26D6CF |
| SHA1: | E393A40B3E337F43057EEE3DE189F197AB056451 |
| SHA-256: | 7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36 |
| SHA-512: | 0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 3620 |
| Entropy (8bit): | 6.867828878374734 |
| Encrypted: | false |
| SSDEEP: | 48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd |
| MD5: | B540A8E518037192E32C4FE58BF2DBAB |
| SHA1: | 3047C1DB97B86F6981E0AD2F96AF40CDF43511AF |
| SHA-256: | 8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D |
| SHA-512: | E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 2672 |
| Entropy (8bit): | 6.640973516071413 |
| Encrypted: | false |
| SSDEEP: | 48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/ |
| MD5: | 166DE53471265253AB3A456DEFE6DA23 |
| SHA1: | 17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D |
| SHA-256: | A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13 |
| SHA-512: | 80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 2672 |
| Entropy (8bit): | 6.640973516071413 |
| Encrypted: | false |
| SSDEEP: | 48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/ |
| MD5: | 166DE53471265253AB3A456DEFE6DA23 |
| SHA1: | 17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D |
| SHA-256: | A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13 |
| SHA-512: | 80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 7400 |
| Entropy (8bit): | 7.971782884007007 |
| Encrypted: | false |
| SSDEEP: | 192:Nqeny64fJx4zbEBk85xNvBExnZKav9GPq:NMhfJAEhfBEFZKQ9Gy |
| MD5: | 2A787F8E4B0744D5ADD6A95E34F58485 |
| SHA1: | 6E0820EAE15CD58AC4A46D005FD1DE5E71AD1A5B |
| SHA-256: | 315B5157770FD4EABBAD2D7FA5CE0DAE972509BCDE23770E44AA1914F6E58B4F |
| SHA-512: | C1F2086331EF0ADBB3E8FF8F8F258F5A0715C69765221F2C880234EE20AC7A432C4FB0EB923441557552512C17704585F0F91CB3DD4810BA2126E78D3AF98C61 |
| Malicious: | false |
| URL: | https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_beba75e58c98af016c6f.js |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 673 |
| Entropy (8bit): | 7.6596900876595075 |
| Encrypted: | false |
| SSDEEP: | 12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D |
| MD5: | 0E176276362B94279A4492511BFCBD98 |
| SHA1: | 389FE6B51F62254BB98939896B8C89EBEFFE2A02 |
| SHA-256: | 9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C |
| SHA-512: | 8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | dropped |
| Size (bytes): | 17174 |
| Entropy (8bit): | 2.9129715116732746 |
| Encrypted: | false |
| SSDEEP: | 24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO |
| MD5: | 12E3DAC858061D088023B2BD48E2FA96 |
| SHA1: | E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5 |
| SHA-256: | 90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21 |
| SHA-512: | C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01 |
| Malicious: | false |
| Preview: |
| Process: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| File Type: | |
| Category: | downloaded |
| Size (bytes): | 28 |
| Entropy (8bit): | 4.307354922057605 |
| Encrypted: | false |
| SSDEEP: | 3:8Kiun9ks:8Kiun2s |
| MD5: | 9F9FA94F28FE0DE82BC8FD039A7BDB24 |
| SHA1: | 6FE91F82974BD5B101782941064BCB2AFDEB17D8 |
| SHA-256: | 9A37FDC0DBA8B23EB7D3AA9473D59A45B3547CF060D68B4D52253EE0DA1AF92E |
| SHA-512: | 34946EF12CE635F3445ED7B945CF2C272EF7DD9482DA6B1A49C9D09A6C9E111B19B130A3EEBE5AC0CCD394C523B54DD7EB9BF052168979A9E37E7DB174433F64 |
| Malicious: | false |
| URL: | https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwn4cd6_7GUHkRIFDdFbUVISBQ1Xevf9?alt=proto |
| Preview: |
| File type: | |
| Entropy (8bit): | 5.894406615350166 |
| TrID: | |
| File name: | Paper Extension tax filing Update.eml |
| File size: | 10'664 bytes |
| MD5: | 50886a951b615d33426822bd4baa4899 |
| SHA1: | a4cb2f165af9d6a0f1363db33e520b88f8cb7ace |
| SHA256: | d1c96dca83b679d49ddde83e71a33d445cef686fa7258fa1dfee0bf5f7835f71 |
| SHA512: | 0b2c739e4572a80dc92e61be11ee3b7d7a32fcbd061d53b0ee8ad3373859e41ff17561508e4ce2f3d44ffafe7e4912423c3664c5641be15a455f3dbe756bd5fc |
| SSDEEP: | 192:YtIT2GeGgcsUzK5Y9AtVuGJiHDZEv+ym5Y7/7qhMu+/YLRXe+WAE55mP2QFds5G4:YtIyGeGFS5Y9A3raZEJ7qh+YLRO+TP2z |
| TLSH: | FF22B68DD70607A6557020E1F12B7B46F8E0D90DA37569317D7E3B9AEC8E26848833DC |
| File Content Preview: | Authentication-Results: relay.mimecast.com;...dkim=pass header.d=vcelka.cz header.s=s1 header.b=tlA+9x8n;...dmarc=pass (policy=none) header.from=vcelka.cz;...spf=pass (relay.mimecast.com: domain of "bounces+2355257-48eb-eprifti=stonhard.com@mail.vcelka.cz |
| Subject: | Paper Extension tax filing Update |
| From: | Eprifti <podpora@vcelka.cz> |
| To: | eprifti@stonhard.com |
| Cc: | |
| BCC: | |
| Date: | Tue, 16 Apr 2024 18:07:26 +0000 |
| Communications: | |
| Attachments: |
| Key | Value |
|---|---|
| Authentication-Results | relay.mimecast.com; dkim=pass header.d=vcelka.cz header.s=s1 header.b=tlA+9x8n; dmarc=pass (policy=none) header.from=vcelka.cz; spf=pass (relay.mimecast.com: domain of "bounces+2355257-48eb-eprifti=stonhard.com@mail.vcelka.cz" designates 159.183.224.107 as permitted sender) smtp.mailfrom="bounces+2355257-48eb-eprifti=stonhard.com@mail.vcelka.cz" |
| Received | from [127.0.0.1] (unknown) by geopod-ismtpd-30 (SG) with ESMTP id RU1t74-zSgmA9Lnsmc2Hzw for <eprifti@stonhard.com>; Tue, 16 Apr 2024 18:07:26.571 +0000 (UTC) |
| X-MC-Unique | aWnHPNOdMpKqv1BBe7vt8g-1 |
| DKIM-Signature | v=1; a=rsa-sha256; c=relaxed/relaxed; d=vcelka.cz; h=content-type:from:subject:content-transfer-encoding:mime-version:to: cc:content-type:from:subject:to; s=s1; bh=BPtxm10ARv1NOovREFf/mQKrcZemLC45W6um+Rg6i7E=; b=tlA+9x8nCvMg3wmWl6Mwr94L3yJOSY2M8gXowZIZz9rrV3A/ZKm7j5/OB8TvgxjMzXYT CGqv89O6MtPZ2zr50l7uYN/NOxQkcezNyHGwBigFyJA7HYD61WgJ8RMaIxG8Qu5WSZ7rqp WSzrAhOPV6WGPUIQ1KWU4UJ9ZPKrZ4j4pN3dDg/4C899I+Vc52EcPyie8Spwsm3G0/KsZR aygr+Daf/VZ5RoPNCO9Wb5tmT6FbPvt8wPQcl7S+tBBYeybvtbD4FrsXtNd/WxnNs1M2ZK fxrpqZZHl1yVS5FNqTsvPqPSszquarD8uDX1Vf321z8eU2PEZxJg2tl1leW+cfjQ== |
| From | Eprifti <podpora@vcelka.cz> |
| Subject | Paper Extension tax filing Update |
| Message-ID | <31a7d054-4b44-1c03-0748-afa6a6f33f81@vcelka.cz> |
| Date | Tue, 16 Apr 2024 18:07:26 +0000 |
| MIME-Version | 1.0 |
| X-SG-EID | u001.G1383LC0qyXr0VWli9cgEj33nGrYpvcyYqdd7PXXiXmaOcVcDGR1rXRx0SMrQCgSpG58VpAPApCSxM4JvIfIPCCwGFKJ0QfUzZ7W2k4PKwLxs8aamFtYF+8Omyst4HbC3tIyUFZlbAg4Nl7gBU+48Ag1THtoxc7IGirbTbehaX1Bsq+zroyskO8RRN0ftUJnqprp8VygcjsXy3ZUx2VkWDLrTU4iM89kTGSxyvywcUo= |
| To | eprifti@stonhard.com |
| X-Entity-ID | u001.QBbX2cCtWDrCjgkBuoKkvA== |
| X-Mimecast-Spam-Score | 0 |
| Content-Type | text/html; charset="UTF-8" |
| Content-Transfer-Encoding | quoted-printable |
 | |
| Icon Hash: | 46070c0a8e0c67d6 |
Key Decision
Richest Path
Thread / callback creation
Lower opacity -> Library Node| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Apr 16, 2024 22:13:21.915083885 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 16, 2024 22:13:22.218849897 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 16, 2024 22:13:22.826841116 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 16, 2024 22:13:24.006748915 CEST | 49689 | 80 | 192.168.2.16 | 192.229.211.108 |
| Apr 16, 2024 22:13:24.036242962 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 16, 2024 22:13:26.440929890 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 16, 2024 22:13:28.248399019 CEST | 49708 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.248451948 CEST | 443 | 49708 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.248538017 CEST | 49708 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.250264883 CEST | 49708 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.250296116 CEST | 443 | 49708 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.481292009 CEST | 443 | 49708 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.481370926 CEST | 49708 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.482820988 CEST | 49708 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.482840061 CEST | 443 | 49708 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.483272076 CEST | 443 | 49708 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.522932053 CEST | 49708 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.564141989 CEST | 443 | 49708 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.678471088 CEST | 443 | 49708 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.678694963 CEST | 49708 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.678695917 CEST | 49708 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.678761005 CEST | 443 | 49708 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.678803921 CEST | 443 | 49708 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.710031033 CEST | 49709 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.710073948 CEST | 443 | 49709 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.710150003 CEST | 49709 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.710441113 CEST | 49709 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.710454941 CEST | 443 | 49709 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.924171925 CEST | 443 | 49709 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.924257994 CEST | 49709 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.925390005 CEST | 49709 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.925404072 CEST | 443 | 49709 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.925666094 CEST | 443 | 49709 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:28.926774979 CEST | 49709 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:28.968118906 CEST | 443 | 49709 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:29.291698933 CEST | 443 | 49709 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:29.291816950 CEST | 443 | 49709 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:29.291874886 CEST | 49709 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:29.292638063 CEST | 49709 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:29.292665005 CEST | 443 | 49709 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:29.292680025 CEST | 49709 | 443 | 192.168.2.16 | 23.60.84.144 |
| Apr 16, 2024 22:13:29.292687893 CEST | 443 | 49709 | 23.60.84.144 | 192.168.2.16 |
| Apr 16, 2024 22:13:30.079252958 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Apr 16, 2024 22:13:30.381839037 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Apr 16, 2024 22:13:30.508996010 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:30.509043932 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:30.509777069 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:30.511046886 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:30.511068106 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:30.902609110 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:30.902776957 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:30.954005957 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:30.954027891 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:30.955025911 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:30.962208033 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:30.962359905 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:30.962454081 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:30.986881971 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Apr 16, 2024 22:13:31.242734909 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 16, 2024 22:13:31.264903069 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.264961004 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.265001059 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.265043020 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:31.265062094 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.265094995 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:31.265186071 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.265316963 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:31.265485048 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:31.265501022 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.265530109 CEST | 49710 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:31.265536070 CEST | 443 | 49710 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.383542061 CEST | 49711 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:31.383580923 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.383763075 CEST | 49711 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:31.383869886 CEST | 49711 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:31.383878946 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.770270109 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.770843029 CEST | 49711 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:31.770880938 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.771616936 CEST | 49711 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:31.771622896 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:31.771645069 CEST | 49711 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:31.771653891 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.060903072 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.060961008 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.061064005 CEST | 49711 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.061094999 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.061160088 CEST | 49711 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.061167002 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.061224937 CEST | 49711 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.061485052 CEST | 49711 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.061507940 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.061520100 CEST | 49711 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.061526060 CEST | 443 | 49711 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.114546061 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.114633083 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.114727974 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.114959002 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.114991903 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.200701952 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Apr 16, 2024 22:13:32.496596098 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.496695042 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.498406887 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.498424053 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.498755932 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.499167919 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.499228954 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.499262094 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.786869049 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.786926985 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.786964893 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.786998034 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.787014008 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.787049055 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.787157059 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.787246943 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.787424088 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.787442923 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.787456989 CEST | 49712 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.787462950 CEST | 443 | 49712 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.827061892 CEST | 49713 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.827110052 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:32.827178001 CEST | 49713 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.827323914 CEST | 49713 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:32.827334881 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:33.207683086 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:33.208410025 CEST | 49713 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:33.208450079 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:33.209139109 CEST | 49713 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:33.209139109 CEST | 49713 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:33.209148884 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:33.209167004 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:33.498049974 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:33.498106956 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:33.498145103 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:33.498183012 CEST | 49713 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:33.498203039 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:33.498224974 CEST | 49713 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:33.498332024 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:33.498392105 CEST | 49713 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:33.498554945 CEST | 49713 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:33.498554945 CEST | 49713 | 443 | 192.168.2.16 | 40.126.28.12 |
| Apr 16, 2024 22:13:33.498572111 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:33.498580933 CEST | 443 | 49713 | 40.126.28.12 | 192.168.2.16 |
| Apr 16, 2024 22:13:34.405932903 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:34.405983925 CEST | 443 | 49714 | 167.89.123.16 | 192.168.2.16 |
| Apr 16, 2024 22:13:34.406045914 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:34.408416986 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:34.408441067 CEST | 443 | 49714 | 167.89.123.16 | 192.168.2.16 |
| Apr 16, 2024 22:13:34.560175896 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Apr 16, 2024 22:13:34.606795073 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Apr 16, 2024 22:13:34.801700115 CEST | 443 | 49714 | 167.89.123.16 | 192.168.2.16 |
| Apr 16, 2024 22:13:34.802031040 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:34.802061081 CEST | 443 | 49714 | 167.89.123.16 | 192.168.2.16 |
| Apr 16, 2024 22:13:34.803694010 CEST | 443 | 49714 | 167.89.123.16 | 192.168.2.16 |
| Apr 16, 2024 22:13:34.803761959 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:34.804723024 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:34.804805994 CEST | 443 | 49714 | 167.89.123.16 | 192.168.2.16 |
| Apr 16, 2024 22:13:34.804908037 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:34.804919004 CEST | 443 | 49714 | 167.89.123.16 | 192.168.2.16 |
| Apr 16, 2024 22:13:34.846684933 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:34.862831116 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Apr 16, 2024 22:13:35.092720985 CEST | 443 | 49714 | 167.89.123.16 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.092905045 CEST | 443 | 49714 | 167.89.123.16 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.092967033 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:35.093120098 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:35.093142986 CEST | 443 | 49714 | 167.89.123.16 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.093154907 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:35.093221903 CEST | 49714 | 443 | 192.168.2.16 | 167.89.123.16 |
| Apr 16, 2024 22:13:35.240533113 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:35.240572929 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.240752935 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:35.241017103 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:35.241029024 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.465775013 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Apr 16, 2024 22:13:35.473469019 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.473810911 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:35.473823071 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.475474119 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.476118088 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:35.476782084 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:35.476871014 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.477174997 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:35.477184057 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.528667927 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:36.675784111 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Apr 16, 2024 22:13:37.844999075 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.845247030 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.845323086 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.845408916 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.845453024 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:37.845453024 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:37.845469952 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.845549107 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.845619917 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:37.845627069 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.845716953 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.845799923 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:37.845803976 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.845829964 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.845946074 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:37.845958948 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.846049070 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.846110106 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:37.846117020 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.846210003 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.846425056 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:37.846434116 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.846735954 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.846801996 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:37.846807957 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.847032070 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.847163916 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:37.847259998 CEST | 49719 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:37.847276926 CEST | 443 | 49719 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.974998951 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:37.975115061 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:37.975209951 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:37.975419998 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:37.975446939 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.308840036 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.309082985 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.309101105 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.310514927 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.310607910 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.311486959 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.311553955 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.311623096 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.311630011 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.361612082 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.611566067 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.611624956 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.611646891 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.611690998 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.611726046 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.611752987 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.611782074 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.611844063 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.611855984 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.611927032 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.611983061 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.612001896 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.612018108 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.612051010 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.663630009 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.715914011 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.715945959 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.715997934 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.716046095 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.716077089 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.716149092 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.716150045 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.716269970 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.716438055 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.716497898 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.717968941 CEST | 49721 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:38.717998028 CEST | 443 | 49721 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.754571915 CEST | 49722 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:38.754627943 CEST | 443 | 49722 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.754787922 CEST | 49722 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:38.755006075 CEST | 49722 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:38.755024910 CEST | 443 | 49722 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.980123043 CEST | 443 | 49722 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.980545044 CEST | 49722 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:38.980607033 CEST | 443 | 49722 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.981120110 CEST | 443 | 49722 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:38.981441021 CEST | 49722 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:38.981563091 CEST | 49722 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:38.981573105 CEST | 443 | 49722 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.028120041 CEST | 443 | 49722 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.030611038 CEST | 49722 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.077630043 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Apr 16, 2024 22:13:39.179076910 CEST | 49723 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:13:39.179126978 CEST | 443 | 49723 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.179421902 CEST | 49723 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:13:39.179421902 CEST | 49723 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:13:39.179461956 CEST | 443 | 49723 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.231580019 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:39.231625080 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.231776953 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:39.232642889 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:39.232660055 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.266206980 CEST | 443 | 49722 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.266325951 CEST | 443 | 49722 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.266441107 CEST | 49722 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.266710043 CEST | 49722 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.266752958 CEST | 443 | 49722 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.266767025 CEST | 49722 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.266866922 CEST | 49722 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.268192053 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.268205881 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.268357038 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.268584013 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.268594027 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.400602102 CEST | 443 | 49723 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.401283026 CEST | 49723 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:13:39.401309967 CEST | 443 | 49723 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.402915001 CEST | 443 | 49723 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.402986050 CEST | 49723 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:13:39.403882027 CEST | 49723 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:13:39.403964996 CEST | 443 | 49723 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.413625956 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Apr 16, 2024 22:13:39.446419954 CEST | 49723 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:13:39.446429014 CEST | 443 | 49723 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.492038012 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.492598057 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.492614031 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.493607044 CEST | 49723 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:13:39.493747950 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.494285107 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.494458914 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.494489908 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.540132999 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.541708946 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.748656988 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.748753071 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.748831034 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.748838902 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.748867035 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.749059916 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.749085903 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.749130011 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.749130011 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.749140024 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.749356031 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.749404907 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.749927044 CEST | 49725 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.749942064 CEST | 443 | 49725 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.826639891 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.826678038 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.826868057 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.828130960 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.828146935 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.837572098 CEST | 49727 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.837615013 CEST | 443 | 49727 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.837795973 CEST | 49727 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.838224888 CEST | 49727 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.838242054 CEST | 443 | 49727 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.838587999 CEST | 49728 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.838640928 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.839251041 CEST | 49728 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.839445114 CEST | 49728 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:39.839463949 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.865279913 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.865354061 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:39.866854906 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:39.866859913 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.867347002 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.909662962 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:39.924628973 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:39.968116999 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.051713943 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.052016973 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.052036047 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.053184032 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.053637028 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.053805113 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.053812027 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.064748049 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.064992905 CEST | 49728 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.065010071 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.066689968 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.066767931 CEST | 49728 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.067125082 CEST | 49728 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.067235947 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.067322969 CEST | 49728 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.067342043 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.067445993 CEST | 49728 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.067470074 CEST | 49728 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.067481041 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.067507029 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.068418980 CEST | 443 | 49727 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.068866014 CEST | 49727 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.068888903 CEST | 443 | 49727 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.070008039 CEST | 443 | 49727 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.070353031 CEST | 49727 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.070476055 CEST | 49727 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.070482969 CEST | 443 | 49727 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.070522070 CEST | 443 | 49727 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.096120119 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.100584984 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.116601944 CEST | 49727 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.300230980 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.300400972 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.300580978 CEST | 49728 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.300841093 CEST | 49728 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.300880909 CEST | 443 | 49728 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.451181889 CEST | 49730 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.451224089 CEST | 443 | 49730 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.451284885 CEST | 49730 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.451472998 CEST | 49730 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.451482058 CEST | 443 | 49730 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.469048977 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.469110012 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.469130993 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.469166040 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:40.469177008 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.469207048 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:40.469208956 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.469227076 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:40.469227076 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.469253063 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:40.469274044 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:40.469384909 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.469451904 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:40.469465017 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.469574928 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.469633102 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:40.480195045 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:40.480206013 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.480215073 CEST | 49724 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:13:40.480220079 CEST | 443 | 49724 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.680772066 CEST | 443 | 49730 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.680989027 CEST | 49730 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.681021929 CEST | 443 | 49730 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.682457924 CEST | 443 | 49730 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.682522058 CEST | 49730 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.682790995 CEST | 49730 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.682863951 CEST | 443 | 49730 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.682986021 CEST | 49730 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.728121996 CEST | 443 | 49730 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.735582113 CEST | 49730 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.735610008 CEST | 443 | 49730 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.783560991 CEST | 49730 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.846632957 CEST | 49673 | 443 | 192.168.2.16 | 204.79.197.203 |
| Apr 16, 2024 22:13:40.943578005 CEST | 443 | 49730 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.943862915 CEST | 443 | 49730 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.943923950 CEST | 49730 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.945549965 CEST | 49730 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:40.945569992 CEST | 443 | 49730 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.050751925 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.050833941 CEST | 443 | 49732 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.050921917 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.051203966 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.051227093 CEST | 443 | 49732 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.274772882 CEST | 443 | 49732 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.275084972 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.275108099 CEST | 443 | 49732 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.276762962 CEST | 443 | 49732 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.276844978 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.277925014 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.278116941 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.278130054 CEST | 443 | 49732 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.278171062 CEST | 443 | 49732 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.325654030 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.325690031 CEST | 443 | 49732 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.372637033 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.507978916 CEST | 443 | 49732 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.508076906 CEST | 443 | 49732 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.508260965 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.508339882 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.508368969 CEST | 443 | 49732 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.508378029 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.508438110 CEST | 49732 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.509279966 CEST | 49733 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.509309053 CEST | 443 | 49733 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.509628057 CEST | 49733 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.509628057 CEST | 49733 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.509651899 CEST | 443 | 49733 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.726624966 CEST | 443 | 49733 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.726893902 CEST | 49733 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.726908922 CEST | 443 | 49733 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.727588892 CEST | 443 | 49733 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.727957964 CEST | 49733 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.728125095 CEST | 49733 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.728132963 CEST | 443 | 49733 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.728215933 CEST | 443 | 49733 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.772636890 CEST | 49733 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.964562893 CEST | 443 | 49733 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.964659929 CEST | 443 | 49733 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.964797020 CEST | 49733 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.964875937 CEST | 49733 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.964875937 CEST | 49733 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:41.964891911 CEST | 443 | 49733 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.964965105 CEST | 49733 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:13:42.265598059 CEST | 443 | 49727 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.265691042 CEST | 443 | 49727 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.267446041 CEST | 49727 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.268548012 CEST | 49727 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.268573046 CEST | 443 | 49727 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.436629057 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.436728001 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.436753035 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.436774015 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.436793089 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.436815023 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.436837912 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.437062979 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.437104940 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.437104940 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.437114000 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.437144041 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.437148094 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.437691927 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.437721968 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.437760115 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.437763929 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.437809944 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.438178062 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.438239098 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.438266993 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.438292980 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.438309908 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.438313961 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.438330889 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.439034939 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.439064980 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.439105988 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.439111948 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.439117908 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.439133883 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.439142942 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.439178944 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.439182997 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.439955950 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.439982891 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.440011978 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.440016031 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.440035105 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.440056086 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.440059900 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.440301895 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.440794945 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.440831900 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.440903902 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.440907955 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.440928936 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.440999031 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.441090107 CEST | 49726 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:42.441103935 CEST | 443 | 49726 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.453886032 CEST | 49734 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.453927040 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.453991890 CEST | 49734 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.454433918 CEST | 49734 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.454471111 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.456430912 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.456465960 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.456542015 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.456923008 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.456970930 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.457041025 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.457318068 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.457334995 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.458434105 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.458452940 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.776771069 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.777178049 CEST | 49734 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.777220011 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.777771950 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.778492928 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.779042006 CEST | 49734 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.779228926 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.779288054 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.779350996 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.779442072 CEST | 49734 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.780963898 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.781043053 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.781404972 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.781519890 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.781533003 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.782399893 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.782633066 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.782660961 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.783827066 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.784178019 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.784288883 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.784292936 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.784352064 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.820147991 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.825676918 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.825687885 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:42.825721025 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.873656034 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.089320898 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.089342117 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.089355946 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.089437008 CEST | 49734 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.089453936 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.089482069 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.089489937 CEST | 49734 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.089526892 CEST | 49734 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.090740919 CEST | 49734 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.090754032 CEST | 443 | 49734 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.094724894 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.094788074 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.094809055 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.094850063 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.094861031 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.094886065 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.094896078 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.094906092 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.094906092 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.094918966 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.094935894 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.094957113 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.095113039 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.095601082 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.095608950 CEST | 443 | 49735 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.095618963 CEST | 49735 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.097791910 CEST | 49737 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:43.097821951 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.097877026 CEST | 49737 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:43.098212004 CEST | 49737 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:43.098227024 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.325350046 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.325678110 CEST | 49737 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:43.325704098 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.326004028 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.326266050 CEST | 49737 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:43.326313019 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.326421022 CEST | 49737 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:43.326437950 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680309057 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680335999 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680344105 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680370092 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680387020 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680399895 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680428982 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.680500031 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680546999 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.680572987 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.680654049 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680661917 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680675983 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680702925 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.680732965 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.680747032 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.680794954 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.784116030 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.784153938 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.784296036 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.784359932 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.784454107 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.784713030 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.784739971 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.784791946 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.784827948 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.784868002 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.784898043 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.785181999 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.785209894 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.785259008 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.785286903 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.785320997 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.785347939 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.879642010 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Apr 16, 2024 22:13:43.888462067 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.888501883 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.888578892 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.888609886 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.888637066 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.888655901 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.889427900 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.889452934 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.889513016 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.889532089 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.889586926 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.889617920 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.889667988 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.889678001 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.889698982 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.889734030 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.890378952 CEST | 49736 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:43.890396118 CEST | 443 | 49736 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.985274076 CEST | 49738 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:43.985330105 CEST | 443 | 49738 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:43.985446930 CEST | 49738 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:43.985671043 CEST | 49738 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:43.985692978 CEST | 443 | 49738 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.002769947 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.002804041 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.002904892 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.003108025 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.003118992 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.142848969 CEST | 49740 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.142930984 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.143033981 CEST | 49740 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.143419027 CEST | 49740 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.143492937 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.210997105 CEST | 443 | 49738 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.211365938 CEST | 49738 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.211425066 CEST | 443 | 49738 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.212982893 CEST | 443 | 49738 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.213419914 CEST | 49738 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.213635921 CEST | 49738 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.213709116 CEST | 49738 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.213845968 CEST | 443 | 49738 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.213936090 CEST | 49738 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.214010000 CEST | 443 | 49738 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.322391987 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.322746992 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.322772980 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.323640108 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.323708057 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.324084044 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.324145079 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.324259043 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.324265003 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.367456913 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.367867947 CEST | 49740 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.367923021 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.369539976 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.369628906 CEST | 49740 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.370728016 CEST | 49740 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.370831013 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.370923996 CEST | 49740 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.370944023 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.375540018 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.423621893 CEST | 49740 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.453959942 CEST | 443 | 49738 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.454135895 CEST | 443 | 49738 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.454216957 CEST | 49738 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.454761028 CEST | 49738 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.454797029 CEST | 443 | 49738 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.458136082 CEST | 49741 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.458182096 CEST | 443 | 49741 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.458266020 CEST | 49741 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.458525896 CEST | 49741 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.458543062 CEST | 443 | 49741 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.636544943 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.636568069 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.636576891 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.636591911 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.636598110 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.636600971 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.636642933 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.636663914 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.636684895 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.636710882 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.637186050 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.637201071 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.637253046 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.637260914 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.637300968 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.685378075 CEST | 443 | 49741 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.685678959 CEST | 49741 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.685707092 CEST | 443 | 49741 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.686403990 CEST | 443 | 49741 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.686815023 CEST | 49741 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.686908007 CEST | 443 | 49741 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.687050104 CEST | 49741 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.687081099 CEST | 443 | 49741 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.740551949 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.740571976 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.740742922 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.740771055 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.740823030 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.744209051 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.744278908 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.744285107 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.744297028 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.744368076 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.744648933 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.744668961 CEST | 443 | 49739 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.744680882 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.744715929 CEST | 49739 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.777503014 CEST | 49742 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.777534008 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.777600050 CEST | 49742 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.777756929 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.777787924 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.777842045 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.777930975 CEST | 49742 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.777939081 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.778069019 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.778078079 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.780167103 CEST | 49744 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.780194044 CEST | 443 | 49744 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.780275106 CEST | 49744 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.780544996 CEST | 49744 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.780558109 CEST | 443 | 49744 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.824835062 CEST | 49745 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.824861050 CEST | 443 | 49745 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.824930906 CEST | 49745 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.825131893 CEST | 49745 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:44.825139046 CEST | 443 | 49745 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.847609997 CEST | 49746 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.847656965 CEST | 443 | 49746 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.847729921 CEST | 49746 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.847910881 CEST | 49746 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.847920895 CEST | 443 | 49746 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.908184052 CEST | 443 | 49741 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.908440113 CEST | 443 | 49741 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.908510923 CEST | 49741 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.909068108 CEST | 49741 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:44.909087896 CEST | 443 | 49741 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.076706886 CEST | 443 | 49746 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.077125072 CEST | 49746 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:45.077152967 CEST | 443 | 49746 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.078649998 CEST | 443 | 49746 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.079092979 CEST | 49746 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:45.079340935 CEST | 49746 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:45.079372883 CEST | 49746 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:45.079499006 CEST | 443 | 49746 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.095396996 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.095670938 CEST | 49742 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.095685959 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.095974922 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.096343994 CEST | 49742 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.096399069 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.096497059 CEST | 49742 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.099126101 CEST | 443 | 49744 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.099453926 CEST | 49744 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.099514008 CEST | 443 | 49744 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.100445986 CEST | 443 | 49744 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.100519896 CEST | 49744 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.100863934 CEST | 49744 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.100929976 CEST | 443 | 49744 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.100974083 CEST | 49744 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.101694107 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.101908922 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.101927042 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.103034973 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.103441954 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.103548050 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.103559017 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.103621960 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.124527931 CEST | 49746 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:45.144124031 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.144143105 CEST | 443 | 49744 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.149597883 CEST | 443 | 49745 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.149862051 CEST | 49745 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.149876118 CEST | 443 | 49745 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.153745890 CEST | 443 | 49745 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.153817892 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.153835058 CEST | 49745 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.153897047 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.153976917 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.154268980 CEST | 49745 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.154439926 CEST | 443 | 49745 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.154473066 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.154511929 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.154547930 CEST | 49745 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.156505108 CEST | 49744 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.156505108 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.156562090 CEST | 443 | 49744 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.156940937 CEST | 443 | 49745 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.204495907 CEST | 49745 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.204648972 CEST | 49744 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.231443882 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.231580019 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.231642008 CEST | 49737 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:45.231662035 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.231867075 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.231915951 CEST | 49737 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:45.232417107 CEST | 49737 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:45.232434034 CEST | 443 | 49737 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.307318926 CEST | 443 | 49744 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.307399035 CEST | 443 | 49744 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.307467937 CEST | 49744 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.308270931 CEST | 49744 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.308305979 CEST | 443 | 49744 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.308998108 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.309037924 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.309089899 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.309109926 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.309135914 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.309185982 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.309629917 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.309648991 CEST | 443 | 49743 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.309669971 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.309696913 CEST | 49743 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.357182026 CEST | 443 | 49745 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.357280970 CEST | 443 | 49745 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.357399940 CEST | 49745 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.358170986 CEST | 49745 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.358189106 CEST | 443 | 49745 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.359889030 CEST | 49749 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.359975100 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.360075951 CEST | 49749 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.360275984 CEST | 49749 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.360297918 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.408927917 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.408953905 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.408968925 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.409066916 CEST | 49742 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.409090042 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.409132957 CEST | 49742 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.409919024 CEST | 49742 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.409934044 CEST | 443 | 49742 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.414880037 CEST | 49750 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.414932013 CEST | 443 | 49750 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.415030956 CEST | 49750 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.415246010 CEST | 49750 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.415265083 CEST | 443 | 49750 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.418386936 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.418436050 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.418500900 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.418575048 CEST | 49752 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.418597937 CEST | 443 | 49752 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.418654919 CEST | 49752 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.418705940 CEST | 49753 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.418735981 CEST | 443 | 49753 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.418787956 CEST | 49753 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.418837070 CEST | 49754 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.418888092 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.418951988 CEST | 49754 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.419034958 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.419054985 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.419171095 CEST | 49752 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.419182062 CEST | 443 | 49752 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.419308901 CEST | 49753 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.419321060 CEST | 443 | 49753 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.419433117 CEST | 49754 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.419460058 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.482009888 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.482358932 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.482399940 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.483520031 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.483913898 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.484074116 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.484086990 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.484129906 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.537548065 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.688601017 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.688905001 CEST | 49749 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.688965082 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.689487934 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.689800978 CEST | 49749 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.689882994 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.689928055 CEST | 49749 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.732124090 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.734358072 CEST | 443 | 49750 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.736068010 CEST | 49750 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.736097097 CEST | 443 | 49750 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.736913919 CEST | 443 | 49752 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.737673044 CEST | 443 | 49750 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.739432096 CEST | 49750 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.739608049 CEST | 443 | 49750 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.739615917 CEST | 49752 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.739631891 CEST | 443 | 49752 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.739813089 CEST | 49750 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.740179062 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.740405083 CEST | 49754 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.740432024 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.740647078 CEST | 443 | 49752 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.740709066 CEST | 49752 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.740982056 CEST | 49752 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.741039038 CEST | 443 | 49752 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.741142035 CEST | 49752 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.741149902 CEST | 443 | 49752 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.741513014 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.741575956 CEST | 49754 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.741679907 CEST | 443 | 49753 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.741838932 CEST | 49754 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.741897106 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.742017031 CEST | 49753 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.742063999 CEST | 443 | 49753 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.742567062 CEST | 49754 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.742575884 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.743505001 CEST | 443 | 49753 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.743571043 CEST | 49753 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.743828058 CEST | 49753 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.743917942 CEST | 443 | 49753 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.743952990 CEST | 49753 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.745034933 CEST | 49749 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.745623112 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.745872974 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.745929003 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.747400045 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.747488022 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.747836113 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.747910976 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.747973919 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.780142069 CEST | 443 | 49750 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.784135103 CEST | 443 | 49753 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.788136959 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.790519953 CEST | 49754 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.790539026 CEST | 49752 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.790550947 CEST | 49753 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.790550947 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.790606022 CEST | 443 | 49753 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.790606976 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803175926 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803232908 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803252935 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803311110 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.803337097 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803416014 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803433895 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803462982 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.803462982 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.803463936 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803499937 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803514004 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.803533077 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803569078 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803570986 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.803626060 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.803626060 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.803642035 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.803689957 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.838623047 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.840475082 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.840523958 CEST | 49753 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.840583086 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.840614080 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.840668917 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.840684891 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.840739965 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.840828896 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.840867996 CEST | 443 | 49748 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.840892076 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.840923071 CEST | 49748 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.897456884 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.897533894 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.897629976 CEST | 49749 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.897691965 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.897749901 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.897869110 CEST | 49749 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.898504019 CEST | 49749 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.898535013 CEST | 443 | 49749 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.902029991 CEST | 49755 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.902071953 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.902163029 CEST | 49755 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.902422905 CEST | 49755 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.902436018 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.943834066 CEST | 443 | 49750 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.943892956 CEST | 443 | 49750 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.944044113 CEST | 443 | 49750 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.944119930 CEST | 49750 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.944119930 CEST | 49750 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.944670916 CEST | 49750 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:45.944727898 CEST | 443 | 49750 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.945197105 CEST | 443 | 49752 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.945271015 CEST | 443 | 49752 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.945350885 CEST | 49752 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.947400093 CEST | 49756 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.947478056 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.947578907 CEST | 49756 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.948755980 CEST | 49756 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.948792934 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.948904037 CEST | 49752 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.948923111 CEST | 443 | 49752 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.949815035 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.949907064 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.949966908 CEST | 49754 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.950006962 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.950042009 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.950093985 CEST | 49754 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.954575062 CEST | 443 | 49753 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.954762936 CEST | 443 | 49753 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.954824924 CEST | 49753 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.970808983 CEST | 49753 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.970837116 CEST | 443 | 49753 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:45.971164942 CEST | 49754 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:45.971194983 CEST | 443 | 49754 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.062414885 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.062477112 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.062504053 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.062522888 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.062545061 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.062565088 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.062586069 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.062588930 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.062618017 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.062622070 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.062644005 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.062665939 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.062750101 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.062794924 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.062820911 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.062905073 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.062966108 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.063997030 CEST | 49751 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.064026117 CEST | 443 | 49751 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.225687027 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.225986004 CEST | 49755 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.226008892 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.226587057 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.227171898 CEST | 49755 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.227231026 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.227324963 CEST | 49755 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.268161058 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.272228956 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.277484894 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.277631998 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.277693033 CEST | 49740 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:46.277751923 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.277896881 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.277956009 CEST | 49740 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:46.281142950 CEST | 49756 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.281199932 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.281436920 CEST | 49740 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:46.281466961 CEST | 443 | 49740 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.281682968 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.282238960 CEST | 49756 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.282324076 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.285060883 CEST | 49756 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.332125902 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.433584929 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.433604002 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.433657885 CEST | 49755 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.433681011 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.433697939 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.433736086 CEST | 49755 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.434478045 CEST | 49755 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.434493065 CEST | 443 | 49755 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.480232000 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.480295897 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.480367899 CEST | 49756 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.480421066 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.480453968 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:46.480498075 CEST | 49756 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.480529070 CEST | 49756 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.480961084 CEST | 49756 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:46.480992079 CEST | 443 | 49756 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.369632959 CEST | 443 | 49746 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.369796991 CEST | 443 | 49746 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.369872093 CEST | 49746 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:47.369906902 CEST | 443 | 49746 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.369942904 CEST | 443 | 49746 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.370009899 CEST | 49746 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:47.370774984 CEST | 49746 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:47.370790005 CEST | 443 | 49746 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.373296976 CEST | 49760 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:47.373338938 CEST | 443 | 49760 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.373416901 CEST | 49760 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:47.373610973 CEST | 49760 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:47.373624086 CEST | 443 | 49760 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.377156973 CEST | 49761 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:47.377238035 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.377335072 CEST | 49761 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:47.377501011 CEST | 49761 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:47.377521992 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.593871117 CEST | 443 | 49760 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.594129086 CEST | 49760 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:47.594158888 CEST | 443 | 49760 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.594508886 CEST | 443 | 49760 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.594794989 CEST | 49760 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:47.594861984 CEST | 443 | 49760 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.594954967 CEST | 49760 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:47.594983101 CEST | 443 | 49760 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.698333025 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.698668957 CEST | 49761 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:47.698734045 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.699223995 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.699496031 CEST | 49761 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:47.699615002 CEST | 49761 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:47.699631929 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.699754000 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.754479885 CEST | 49761 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:47.907644033 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.907718897 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.907738924 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.907762051 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.907816887 CEST | 49761 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:47.907888889 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.907927990 CEST | 49761 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:47.907934904 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:47.907998085 CEST | 49761 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:47.908523083 CEST | 49761 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:47.908552885 CEST | 443 | 49761 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.182228088 CEST | 49762 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:48.182348013 CEST | 443 | 49762 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.182476997 CEST | 49762 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:48.182718992 CEST | 49762 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:48.182743073 CEST | 443 | 49762 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.506373882 CEST | 443 | 49762 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.506894112 CEST | 49762 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:48.506922960 CEST | 443 | 49762 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.507438898 CEST | 443 | 49762 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.507756948 CEST | 49762 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:48.507837057 CEST | 443 | 49762 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.507879972 CEST | 49762 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:48.551481962 CEST | 49762 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:48.551498890 CEST | 443 | 49762 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.721257925 CEST | 443 | 49762 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.721354961 CEST | 443 | 49762 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.721468925 CEST | 49762 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:48.722131014 CEST | 49762 | 443 | 192.168.2.16 | 13.107.213.70 |
| Apr 16, 2024 22:13:48.722189903 CEST | 443 | 49762 | 13.107.213.70 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.724335909 CEST | 49763 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:48.724421978 CEST | 443 | 49763 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:48.724512100 CEST | 49763 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:48.724720001 CEST | 49763 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:48.724754095 CEST | 443 | 49763 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.015490055 CEST | 49678 | 443 | 192.168.2.16 | 20.189.173.10 |
| Apr 16, 2024 22:13:49.043521881 CEST | 443 | 49763 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.043876886 CEST | 49763 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:49.043915987 CEST | 443 | 49763 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.044399023 CEST | 443 | 49763 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.044684887 CEST | 49763 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:49.044771910 CEST | 443 | 49763 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.044801950 CEST | 49763 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:49.088150024 CEST | 443 | 49763 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.095457077 CEST | 49763 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:49.253397942 CEST | 443 | 49763 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.253590107 CEST | 443 | 49763 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.253662109 CEST | 49763 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:49.254347086 CEST | 49763 | 443 | 192.168.2.16 | 13.107.246.41 |
| Apr 16, 2024 22:13:49.254373074 CEST | 443 | 49763 | 13.107.246.41 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.408788919 CEST | 443 | 49723 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.408858061 CEST | 443 | 49723 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.408929110 CEST | 49723 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:13:49.854360104 CEST | 443 | 49760 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.854595900 CEST | 443 | 49760 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:49.854679108 CEST | 49760 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:49.855948925 CEST | 49760 | 443 | 192.168.2.16 | 172.67.187.49 |
| Apr 16, 2024 22:13:49.855971098 CEST | 443 | 49760 | 172.67.187.49 | 192.168.2.16 |
| Apr 16, 2024 22:13:50.500844002 CEST | 49723 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:13:50.500875950 CEST | 443 | 49723 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:13:53.481446028 CEST | 49680 | 80 | 192.168.2.16 | 192.229.211.108 |
| Apr 16, 2024 22:14:16.778656960 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:16.778742075 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:16.778856039 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:16.779164076 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:16.779196024 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:17.408015013 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:17.408135891 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:17.409205914 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:17.409231901 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:17.409723043 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:17.410757065 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:17.456114054 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:18.019139051 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:18.019200087 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:18.019243956 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:18.019288063 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:18.019313097 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:18.019335032 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:18.019351006 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:18.019397974 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:18.019460917 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:18.019475937 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:18.019519091 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:18.019556046 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:18.019562006 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:18.019618034 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:18.019660950 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:18.022063017 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:18.022079945 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:18.022093058 CEST | 49764 | 443 | 192.168.2.16 | 40.68.123.157 |
| Apr 16, 2024 22:14:18.022099972 CEST | 443 | 49764 | 40.68.123.157 | 192.168.2.16 |
| Apr 16, 2024 22:14:24.089065075 CEST | 49688 | 443 | 192.168.2.16 | 204.79.197.200 |
| Apr 16, 2024 22:14:39.128385067 CEST | 49766 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:14:39.128472090 CEST | 443 | 49766 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:14:39.128576040 CEST | 49766 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:14:39.128871918 CEST | 49766 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:14:39.128909111 CEST | 443 | 49766 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:14:39.346201897 CEST | 443 | 49766 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:14:39.346672058 CEST | 49766 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:14:39.346731901 CEST | 443 | 49766 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:14:39.347039938 CEST | 443 | 49766 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:14:39.347543001 CEST | 49766 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:14:39.347608089 CEST | 443 | 49766 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:14:39.398861885 CEST | 49766 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:14:41.056613922 CEST | 49767 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.056701899 CEST | 443 | 49767 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.056816101 CEST | 49767 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.057003975 CEST | 49767 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.057028055 CEST | 443 | 49767 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.279026031 CEST | 443 | 49767 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.279459000 CEST | 49767 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.279489040 CEST | 443 | 49767 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.282638073 CEST | 443 | 49767 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.282728910 CEST | 49767 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.282974005 CEST | 49767 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.283082008 CEST | 49767 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.283087015 CEST | 443 | 49767 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.283122063 CEST | 443 | 49767 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.332767010 CEST | 49767 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.332794905 CEST | 443 | 49767 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.380829096 CEST | 49767 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.518399000 CEST | 443 | 49767 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.518495083 CEST | 443 | 49767 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.518563986 CEST | 49767 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.518769026 CEST | 49767 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.518784046 CEST | 443 | 49767 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.519485950 CEST | 49770 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.519565105 CEST | 443 | 49770 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.519669056 CEST | 49770 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.519963980 CEST | 49770 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.519999981 CEST | 443 | 49770 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.737946033 CEST | 443 | 49770 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.738431931 CEST | 49770 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.738491058 CEST | 443 | 49770 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.739624977 CEST | 443 | 49770 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.740056038 CEST | 49770 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.740206957 CEST | 49770 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.740219116 CEST | 443 | 49770 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.740269899 CEST | 443 | 49770 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.795864105 CEST | 49770 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.973526001 CEST | 443 | 49770 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.973634958 CEST | 443 | 49770 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.973814964 CEST | 49770 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.974078894 CEST | 49770 | 443 | 192.168.2.16 | 35.190.80.1 |
| Apr 16, 2024 22:14:41.974116087 CEST | 443 | 49770 | 35.190.80.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:49.342514038 CEST | 443 | 49766 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:14:49.342670918 CEST | 443 | 49766 | 64.233.177.103 | 192.168.2.16 |
| Apr 16, 2024 22:14:49.343214989 CEST | 49766 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:14:50.496654034 CEST | 49766 | 443 | 192.168.2.16 | 64.233.177.103 |
| Apr 16, 2024 22:14:50.496717930 CEST | 443 | 49766 | 64.233.177.103 | 192.168.2.16 |
| Timestamp | Source Port | Dest Port | Source IP | Dest IP |
|---|---|---|---|---|
| Apr 16, 2024 22:13:34.278412104 CEST | 55733 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:34.278630972 CEST | 52543 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:34.370198011 CEST | 53 | 56514 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:34.384453058 CEST | 53 | 53347 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:34.385365009 CEST | 53 | 52543 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:34.387821913 CEST | 53 | 55733 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.006294012 CEST | 53 | 54382 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.094866991 CEST | 58894 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:35.094989061 CEST | 53091 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:35.221142054 CEST | 53 | 58894 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:35.239762068 CEST | 53 | 53091 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.073262930 CEST | 60533 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:39.073415995 CEST | 60087 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:39.178031921 CEST | 53 | 60087 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:39.178190947 CEST | 53 | 60533 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.303721905 CEST | 51687 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:40.303847075 CEST | 49685 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:40.412931919 CEST | 53 | 51687 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.461261988 CEST | 53 | 49685 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:40.945209980 CEST | 50993 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:40.945406914 CEST | 59406 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:41.049871922 CEST | 53 | 50993 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:41.050174952 CEST | 53 | 59406 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.457832098 CEST | 57597 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:42.458225012 CEST | 55483 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:42.568131924 CEST | 53 | 55483 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:42.578068972 CEST | 53 | 57597 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.031420946 CEST | 49468 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:44.031600952 CEST | 52057 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:13:44.141824007 CEST | 53 | 52057 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.141891003 CEST | 53 | 49468 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:44.977468967 CEST | 53 | 56417 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:13:51.978149891 CEST | 53 | 51521 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:10.029202938 CEST | 61772 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:14:10.029308081 CEST | 49431 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:14:10.140299082 CEST | 53 | 49431 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:10.140362978 CEST | 53 | 61772 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:10.816075087 CEST | 53 | 64062 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:26.254765987 CEST | 138 | 138 | 192.168.2.16 | 192.168.2.255 |
| Apr 16, 2024 22:14:33.661286116 CEST | 53 | 51825 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:34.300000906 CEST | 53 | 50148 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:40.950170040 CEST | 63133 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:14:40.950274944 CEST | 53634 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:14:40.950757980 CEST | 65471 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:14:40.951025963 CEST | 50771 | 53 | 192.168.2.16 | 1.1.1.1 |
| Apr 16, 2024 22:14:41.055927992 CEST | 53 | 65471 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:14:41.055995941 CEST | 53 | 50771 | 1.1.1.1 | 192.168.2.16 |
| Apr 16, 2024 22:15:02.160193920 CEST | 53 | 54411 | 1.1.1.1 | 192.168.2.16 |
| Timestamp | Source IP | Dest IP | Checksum | Code | Type |
|---|---|---|---|---|---|
| Apr 16, 2024 22:13:40.461344004 CEST | 192.168.2.16 | 1.1.1.1 | c253 | (Port unreachable) | Destination Unreachable |
| Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|
| Apr 16, 2024 22:13:34.278412104 CEST | 192.168.2.16 | 1.1.1.1 | 0x124a | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 16, 2024 22:13:34.278630972 CEST | 192.168.2.16 | 1.1.1.1 | 0x35a | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 16, 2024 22:13:35.094866991 CEST | 192.168.2.16 | 1.1.1.1 | 0x813c | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 16, 2024 22:13:35.094989061 CEST | 192.168.2.16 | 1.1.1.1 | 0xa9ae | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 16, 2024 22:13:39.073262930 CEST | 192.168.2.16 | 1.1.1.1 | 0xa42d | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 16, 2024 22:13:39.073415995 CEST | 192.168.2.16 | 1.1.1.1 | 0xf7e1 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 16, 2024 22:13:40.303721905 CEST | 192.168.2.16 | 1.1.1.1 | 0x4fab | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 16, 2024 22:13:40.303847075 CEST | 192.168.2.16 | 1.1.1.1 | 0x405e | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 16, 2024 22:13:40.945209980 CEST | 192.168.2.16 | 1.1.1.1 | 0x12ee | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 16, 2024 22:13:40.945406914 CEST | 192.168.2.16 | 1.1.1.1 | 0x3c2b | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 16, 2024 22:13:42.457832098 CEST | 192.168.2.16 | 1.1.1.1 | 0x9636 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 16, 2024 22:13:42.458225012 CEST | 192.168.2.16 | 1.1.1.1 | 0x7261 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 16, 2024 22:13:44.031420946 CEST | 192.168.2.16 | 1.1.1.1 | 0xfa6 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 16, 2024 22:13:44.031600952 CEST | 192.168.2.16 | 1.1.1.1 | 0x92ac | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 16, 2024 22:14:10.029202938 CEST | 192.168.2.16 | 1.1.1.1 | 0xa9d | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 16, 2024 22:14:10.029308081 CEST | 192.168.2.16 | 1.1.1.1 | 0xb3a8 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 16, 2024 22:14:40.950170040 CEST | 192.168.2.16 | 1.1.1.1 | 0xb291 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 16, 2024 22:14:40.950274944 CEST | 192.168.2.16 | 1.1.1.1 | 0x21e3 | Standard query (0) | 65 | IN (0x0001) | false | |
| Apr 16, 2024 22:14:40.950757980 CEST | 192.168.2.16 | 1.1.1.1 | 0x66e8 | Standard query (0) | A (IP address) | IN (0x0001) | false | |
| Apr 16, 2024 22:14:40.951025963 CEST | 192.168.2.16 | 1.1.1.1 | 0x961c | Standard query (0) | 65 | IN (0x0001) | false |
| Timestamp | Source IP | Dest IP | Trans ID | Reply Code | Name | CName | Address | Type | Class | DNS over HTTPS |
|---|---|---|---|---|---|---|---|---|---|---|
| Apr 16, 2024 22:13:34.387821913 CEST | 1.1.1.1 | 192.168.2.16 | 0x124a | No error (0) | 167.89.123.16 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:34.387821913 CEST | 1.1.1.1 | 192.168.2.16 | 0x124a | No error (0) | 167.89.123.122 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:34.387821913 CEST | 1.1.1.1 | 192.168.2.16 | 0x124a | No error (0) | 167.89.115.54 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:34.387821913 CEST | 1.1.1.1 | 192.168.2.16 | 0x124a | No error (0) | 167.89.115.147 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:34.387821913 CEST | 1.1.1.1 | 192.168.2.16 | 0x124a | No error (0) | 167.89.123.147 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:34.387821913 CEST | 1.1.1.1 | 192.168.2.16 | 0x124a | No error (0) | 167.89.115.121 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:35.221142054 CEST | 1.1.1.1 | 192.168.2.16 | 0x813c | No error (0) | 172.67.187.49 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:35.221142054 CEST | 1.1.1.1 | 192.168.2.16 | 0x813c | No error (0) | 104.21.64.172 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:35.239762068 CEST | 1.1.1.1 | 192.168.2.16 | 0xa9ae | No error (0) | 65 | IN (0x0001) | false | |||
| Apr 16, 2024 22:13:37.974169970 CEST | 1.1.1.1 | 192.168.2.16 | 0x3504 | No error (0) | part-0042.t-0009.t-msedge.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:37.974169970 CEST | 1.1.1.1 | 192.168.2.16 | 0x3504 | No error (0) | 13.107.213.70 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:37.974169970 CEST | 1.1.1.1 | 192.168.2.16 | 0x3504 | No error (0) | 13.107.246.70 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:39.178031921 CEST | 1.1.1.1 | 192.168.2.16 | 0xf7e1 | No error (0) | 65 | IN (0x0001) | false | |||
| Apr 16, 2024 22:13:39.178190947 CEST | 1.1.1.1 | 192.168.2.16 | 0xa42d | No error (0) | 64.233.177.103 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:39.178190947 CEST | 1.1.1.1 | 192.168.2.16 | 0xa42d | No error (0) | 64.233.177.106 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:39.178190947 CEST | 1.1.1.1 | 192.168.2.16 | 0xa42d | No error (0) | 64.233.177.99 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:39.178190947 CEST | 1.1.1.1 | 192.168.2.16 | 0xa42d | No error (0) | 64.233.177.105 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:39.178190947 CEST | 1.1.1.1 | 192.168.2.16 | 0xa42d | No error (0) | 64.233.177.147 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:39.178190947 CEST | 1.1.1.1 | 192.168.2.16 | 0xa42d | No error (0) | 64.233.177.104 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:40.412931919 CEST | 1.1.1.1 | 192.168.2.16 | 0x4fab | No error (0) | 172.67.187.49 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:40.412931919 CEST | 1.1.1.1 | 192.168.2.16 | 0x4fab | No error (0) | 104.21.64.172 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:40.461261988 CEST | 1.1.1.1 | 192.168.2.16 | 0x405e | No error (0) | 65 | IN (0x0001) | false | |||
| Apr 16, 2024 22:13:41.049871922 CEST | 1.1.1.1 | 192.168.2.16 | 0x12ee | No error (0) | 35.190.80.1 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:42.568131924 CEST | 1.1.1.1 | 192.168.2.16 | 0x7261 | No error (0) | 65 | IN (0x0001) | false | |||
| Apr 16, 2024 22:13:42.578068972 CEST | 1.1.1.1 | 192.168.2.16 | 0x9636 | No error (0) | 172.67.187.49 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:42.578068972 CEST | 1.1.1.1 | 192.168.2.16 | 0x9636 | No error (0) | 104.21.64.172 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:44.141824007 CEST | 1.1.1.1 | 192.168.2.16 | 0x92ac | No error (0) | 65 | IN (0x0001) | false | |||
| Apr 16, 2024 22:13:44.141891003 CEST | 1.1.1.1 | 192.168.2.16 | 0xfa6 | No error (0) | 172.67.187.49 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:44.141891003 CEST | 1.1.1.1 | 192.168.2.16 | 0xfa6 | No error (0) | 104.21.64.172 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:45.417706013 CEST | 1.1.1.1 | 192.168.2.16 | 0xcb64 | No error (0) | part-0013.t-0009.t-msedge.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:45.417706013 CEST | 1.1.1.1 | 192.168.2.16 | 0xcb64 | No error (0) | 13.107.246.41 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:13:45.417706013 CEST | 1.1.1.1 | 192.168.2.16 | 0xcb64 | No error (0) | 13.107.213.41 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:14:10.140299082 CEST | 1.1.1.1 | 192.168.2.16 | 0xb3a8 | No error (0) | 65 | IN (0x0001) | false | |||
| Apr 16, 2024 22:14:10.140362978 CEST | 1.1.1.1 | 192.168.2.16 | 0xa9d | No error (0) | 172.67.187.49 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:14:10.140362978 CEST | 1.1.1.1 | 192.168.2.16 | 0xa9d | No error (0) | 104.21.64.172 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:14:41.055927992 CEST | 1.1.1.1 | 192.168.2.16 | 0x66e8 | No error (0) | 35.190.80.1 | A (IP address) | IN (0x0001) | false | ||
| Apr 16, 2024 22:14:41.056149960 CEST | 1.1.1.1 | 192.168.2.16 | 0xb291 | No error (0) | nel.measure.office.net.edgesuite.net | CNAME (Canonical name) | IN (0x0001) | false | ||
| Apr 16, 2024 22:14:41.069354057 CEST | 1.1.1.1 | 192.168.2.16 | 0x21e3 | No error (0) | nel.measure.office.net.edgesuite.net | CNAME (Canonical name) | IN (0x0001) | false |
|
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 0 | 192.168.2.16 | 49708 | 23.60.84.144 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:28 UTC | 161 | OUT | |
| 2024-04-16 20:13:28 UTC | 468 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 1 | 192.168.2.16 | 49709 | 23.60.84.144 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:28 UTC | 239 | OUT | |
| 2024-04-16 20:13:29 UTC | 456 | IN | |
| 2024-04-16 20:13:29 UTC | 55 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 2 | 192.168.2.16 | 49710 | 40.126.28.12 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:30 UTC | 422 | OUT | |
| 2024-04-16 20:13:30 UTC | 3592 | OUT | |
| 2024-04-16 20:13:31 UTC | 569 | IN | |
| 2024-04-16 20:13:31 UTC | 11390 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 3 | 192.168.2.16 | 49711 | 40.126.28.12 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:31 UTC | 422 | OUT | |
| 2024-04-16 20:13:31 UTC | 4775 | OUT | |
| 2024-04-16 20:13:32 UTC | 569 | IN | |
| 2024-04-16 20:13:32 UTC | 11370 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 4 | 192.168.2.16 | 49712 | 40.126.28.12 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:32 UTC | 422 | OUT | |
| 2024-04-16 20:13:32 UTC | 4775 | OUT | |
| 2024-04-16 20:13:32 UTC | 569 | IN | |
| 2024-04-16 20:13:32 UTC | 11370 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 5 | 192.168.2.16 | 49713 | 40.126.28.12 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:33 UTC | 422 | OUT | |
| 2024-04-16 20:13:33 UTC | 4722 | OUT | |
| 2024-04-16 20:13:33 UTC | 569 | IN | |
| 2024-04-16 20:13:33 UTC | 10197 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 6 | 192.168.2.16 | 49714 | 167.89.123.16 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:34 UTC | 1058 | OUT | |
| 2024-04-16 20:13:35 UTC | 278 | IN | |
| 2024-04-16 20:13:35 UTC | 102 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 7 | 192.168.2.16 | 49719 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:35 UTC | 713 | OUT | |
| 2024-04-16 20:13:37 UTC | 1236 | IN | |
| 2024-04-16 20:13:37 UTC | 584 | IN | |
| 2024-04-16 20:13:37 UTC | 1369 | IN | |
| 2024-04-16 20:13:37 UTC | 1369 | IN | |
| 2024-04-16 20:13:37 UTC | 1369 | IN | |
| 2024-04-16 20:13:37 UTC | 1369 | IN | |
| 2024-04-16 20:13:37 UTC | 1369 | IN | |
| 2024-04-16 20:13:37 UTC | 1369 | IN | |
| 2024-04-16 20:13:37 UTC | 1369 | IN | |
| 2024-04-16 20:13:37 UTC | 1369 | IN | |
| 2024-04-16 20:13:37 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 8 | 192.168.2.16 | 49721 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:38 UTC | 663 | OUT | |
| 2024-04-16 20:13:38 UTC | 797 | IN | |
| 2024-04-16 20:13:38 UTC | 15587 | IN | |
| 2024-04-16 20:13:38 UTC | 16384 | IN | |
| 2024-04-16 20:13:38 UTC | 16384 | IN | |
| 2024-04-16 20:13:38 UTC | 1262 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 9 | 192.168.2.16 | 49722 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:38 UTC | 1059 | OUT | |
| 2024-04-16 20:13:39 UTC | 686 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 10 | 192.168.2.16 | 49725 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:39 UTC | 1076 | OUT | |
| 2024-04-16 20:13:39 UTC | 687 | IN | |
| 2024-04-16 20:13:39 UTC | 682 | IN | |
| 2024-04-16 20:13:39 UTC | 1369 | IN | |
| 2024-04-16 20:13:39 UTC | 1369 | IN | |
| 2024-04-16 20:13:39 UTC | 1369 | IN | |
| 2024-04-16 20:13:39 UTC | 1369 | IN | |
| 2024-04-16 20:13:39 UTC | 1369 | IN | |
| 2024-04-16 20:13:39 UTC | 367 | IN | |
| 2024-04-16 20:13:39 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 11 | 192.168.2.16 | 49724 | 40.68.123.157 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:39 UTC | 306 | OUT | |
| 2024-04-16 20:13:40 UTC | 560 | IN | |
| 2024-04-16 20:13:40 UTC | 15824 | IN | |
| 2024-04-16 20:13:40 UTC | 8666 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 12 | 192.168.2.16 | 49726 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:40 UTC | 1356 | OUT | |
| 2024-04-16 20:13:42 UTC | 1312 | IN | |
| 2024-04-16 20:13:42 UTC | 955 | IN | |
| 2024-04-16 20:13:42 UTC | 1369 | IN | |
| 2024-04-16 20:13:42 UTC | 1369 | IN | |
| 2024-04-16 20:13:42 UTC | 1369 | IN | |
| 2024-04-16 20:13:42 UTC | 1369 | IN | |
| 2024-04-16 20:13:42 UTC | 1369 | IN | |
| 2024-04-16 20:13:42 UTC | 1369 | IN | |
| 2024-04-16 20:13:42 UTC | 1369 | IN | |
| 2024-04-16 20:13:42 UTC | 1369 | IN | |
| 2024-04-16 20:13:42 UTC | 1369 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 13 | 192.168.2.16 | 49728 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:40 UTC | 1176 | OUT | |
| 2024-04-16 20:13:40 UTC | 15910 | OUT | |
| 2024-04-16 20:13:40 UTC | 879 | IN | |
| 2024-04-16 20:13:40 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 14 | 192.168.2.16 | 49727 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:40 UTC | 1216 | OUT | |
| 2024-04-16 20:13:42 UTC | 888 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 15 | 192.168.2.16 | 49730 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:40 UTC | 1131 | OUT | |
| 2024-04-16 20:13:40 UTC | 741 | IN | |
| 2024-04-16 20:13:40 UTC | 12 | IN | |
| 2024-04-16 20:13:40 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 16 | 192.168.2.16 | 49732 | 35.190.80.1 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:41 UTC | 591 | OUT | |
| 2024-04-16 20:13:41 UTC | 336 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 17 | 192.168.2.16 | 49733 | 35.190.80.1 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:41 UTC | 508 | OUT | |
| 2024-04-16 20:13:41 UTC | 463 | OUT | |
| 2024-04-16 20:13:41 UTC | 168 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 18 | 192.168.2.16 | 49734 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:42 UTC | 688 | OUT | |
| 2024-04-16 20:13:43 UTC | 775 | IN | |
| 2024-04-16 20:13:43 UTC | 15609 | IN | |
| 2024-04-16 20:13:43 UTC | 4705 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 19 | 192.168.2.16 | 49736 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:42 UTC | 665 | OUT | |
| 2024-04-16 20:13:43 UTC | 799 | IN | |
| 2024-04-16 20:13:43 UTC | 15585 | IN | |
| 2024-04-16 20:13:43 UTC | 16384 | IN | |
| 2024-04-16 20:13:43 UTC | 16384 | IN | |
| 2024-04-16 20:13:43 UTC | 16384 | IN | |
| 2024-04-16 20:13:43 UTC | 16384 | IN | |
| 2024-04-16 20:13:43 UTC | 16384 | IN | |
| 2024-04-16 20:13:43 UTC | 16384 | IN | |
| 2024-04-16 20:13:43 UTC | 7323 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 20 | 192.168.2.16 | 49735 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:42 UTC | 684 | OUT | |
| 2024-04-16 20:13:43 UTC | 791 | IN | |
| 2024-04-16 20:13:43 UTC | 15593 | IN | |
| 2024-04-16 20:13:43 UTC | 206 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 21 | 192.168.2.16 | 49737 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:43 UTC | 1913 | OUT | |
| 2024-04-16 20:13:45 UTC | 1306 | IN | |
| 2024-04-16 20:13:45 UTC | 63 | IN | |
| 2024-04-16 20:13:45 UTC | 1369 | IN | |
| 2024-04-16 20:13:45 UTC | 982 | IN | |
| 2024-04-16 20:13:45 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 22 | 192.168.2.16 | 49738 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:44 UTC | 1810 | OUT | |
| 2024-04-16 20:13:44 UTC | 15929 | OUT | |
| 2024-04-16 20:13:44 UTC | 879 | IN | |
| 2024-04-16 20:13:44 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 23 | 192.168.2.16 | 49739 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:44 UTC | 633 | OUT | |
| 2024-04-16 20:13:44 UTC | 797 | IN | |
| 2024-04-16 20:13:44 UTC | 15587 | IN | |
| 2024-04-16 20:13:44 UTC | 16384 | IN | |
| 2024-04-16 20:13:44 UTC | 16384 | IN | |
| 2024-04-16 20:13:44 UTC | 5970 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 24 | 192.168.2.16 | 49740 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:44 UTC | 921 | OUT | |
| 2024-04-16 20:13:46 UTC | 1096 | IN | |
| 2024-04-16 20:13:46 UTC | 273 | IN | |
| 2024-04-16 20:13:46 UTC | 1369 | IN | |
| 2024-04-16 20:13:46 UTC | 256 | IN | |
| 2024-04-16 20:13:46 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 25 | 192.168.2.16 | 49741 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:44 UTC | 1568 | OUT | |
| 2024-04-16 20:13:44 UTC | 749 | IN | |
| 2024-04-16 20:13:44 UTC | 12 | IN | |
| 2024-04-16 20:13:44 UTC | 5 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 26 | 192.168.2.16 | 49746 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 2328 | OUT | |
| 2024-04-16 20:13:45 UTC | 1282 | OUT | |
| 2024-04-16 20:13:47 UTC | 1173 | IN | |
| 2024-04-16 20:13:47 UTC | 196 | IN | |
| 2024-04-16 20:13:47 UTC | 1062 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 27 | 192.168.2.16 | 49742 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 664 | OUT | |
| 2024-04-16 20:13:45 UTC | 744 | IN | |
| 2024-04-16 20:13:45 UTC | 15640 | IN | |
| 2024-04-16 20:13:45 UTC | 1534 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 28 | 192.168.2.16 | 49744 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 677 | OUT | |
| 2024-04-16 20:13:45 UTC | 784 | IN | |
| 2024-04-16 20:13:45 UTC | 673 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 29 | 192.168.2.16 | 49743 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 678 | OUT | |
| 2024-04-16 20:13:45 UTC | 785 | IN | |
| 2024-04-16 20:13:45 UTC | 1435 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 30 | 192.168.2.16 | 49745 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 678 | OUT | |
| 2024-04-16 20:13:45 UTC | 784 | IN | |
| 2024-04-16 20:13:45 UTC | 621 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 31 | 192.168.2.16 | 49748 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 639 | OUT | |
| 2024-04-16 20:13:45 UTC | 818 | IN | |
| 2024-04-16 20:13:45 UTC | 15566 | IN | |
| 2024-04-16 20:13:45 UTC | 16384 | IN | |
| 2024-04-16 20:13:45 UTC | 3863 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 32 | 192.168.2.16 | 49749 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 683 | OUT | |
| 2024-04-16 20:13:45 UTC | 740 | IN | |
| 2024-04-16 20:13:45 UTC | 2672 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 33 | 192.168.2.16 | 49750 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 677 | OUT | |
| 2024-04-16 20:13:45 UTC | 740 | IN | |
| 2024-04-16 20:13:45 UTC | 3620 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 34 | 192.168.2.16 | 49752 | 13.107.246.41 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 417 | OUT | |
| 2024-04-16 20:13:45 UTC | 778 | IN | |
| 2024-04-16 20:13:45 UTC | 673 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 35 | 192.168.2.16 | 49754 | 13.107.246.41 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 418 | OUT | |
| 2024-04-16 20:13:45 UTC | 806 | IN | |
| 2024-04-16 20:13:45 UTC | 1435 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 36 | 192.168.2.16 | 49753 | 13.107.246.41 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 418 | OUT | |
| 2024-04-16 20:13:45 UTC | 784 | IN | |
| 2024-04-16 20:13:45 UTC | 621 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 37 | 192.168.2.16 | 49751 | 13.107.246.41 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:45 UTC | 404 | OUT | |
| 2024-04-16 20:13:46 UTC | 744 | IN | |
| 2024-04-16 20:13:46 UTC | 15640 | IN | |
| 2024-04-16 20:13:46 UTC | 1534 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 38 | 192.168.2.16 | 49755 | 13.107.246.41 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:46 UTC | 423 | OUT | |
| 2024-04-16 20:13:46 UTC | 740 | IN | |
| 2024-04-16 20:13:46 UTC | 2672 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 39 | 192.168.2.16 | 49756 | 13.107.246.41 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:46 UTC | 417 | OUT | |
| 2024-04-16 20:13:46 UTC | 740 | IN | |
| 2024-04-16 20:13:46 UTC | 3620 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 40 | 192.168.2.16 | 49760 | 172.67.187.49 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:47 UTC | 1621 | OUT | |
| 2024-04-16 20:13:49 UTC | 1116 | IN | |
| 2024-04-16 20:13:49 UTC | 164 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 41 | 192.168.2.16 | 49761 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:47 UTC | 622 | OUT | |
| 2024-04-16 20:13:47 UTC | 796 | IN | |
| 2024-04-16 20:13:47 UTC | 7400 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 42 | 192.168.2.16 | 49762 | 13.107.213.70 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:48 UTC | 674 | OUT | |
| 2024-04-16 20:13:48 UTC | 784 | IN | |
| 2024-04-16 20:13:48 UTC | 276 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 43 | 192.168.2.16 | 49763 | 13.107.246.41 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:13:49 UTC | 414 | OUT | |
| 2024-04-16 20:13:49 UTC | 805 | IN | |
| 2024-04-16 20:13:49 UTC | 276 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 44 | 192.168.2.16 | 49764 | 40.68.123.157 | 443 |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:14:17 UTC | 306 | OUT | |
| 2024-04-16 20:14:18 UTC | 560 | IN | |
| 2024-04-16 20:14:18 UTC | 15824 | IN | |
| 2024-04-16 20:14:18 UTC | 9633 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 45 | 192.168.2.16 | 49767 | 35.190.80.1 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:14:41 UTC | 606 | OUT | |
| 2024-04-16 20:14:41 UTC | 336 | IN |
| Session ID | Source IP | Source Port | Destination IP | Destination Port | PID | Process |
|---|---|---|---|---|---|---|
| 46 | 192.168.2.16 | 49770 | 35.190.80.1 | 443 | 7008 | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Timestamp | Bytes transferred | Direction | Data |
|---|---|---|---|
| 2024-04-16 20:14:41 UTC | 522 | OUT | |
| 2024-04-16 20:14:41 UTC | 487 | OUT | |
| 2024-04-16 20:14:41 UTC | 168 | IN |
Click to jump to process
Click to jump to process
back
Click to dive into process behavior distribution
Click to jump to process
| Target ID: | 1 |
| Start time: | 22:13:24 |
| Start date: | 16/04/2024 |
| Path: | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE |
| Wow64 process (32bit): | true |
| Commandline: | |
| Imagebase: | 0x1a0000 |
| File size: | 34'446'744 bytes |
| MD5 hash: | 91A5292942864110ED734005B7E005C0 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | moderate |
| Has exited: | false |
| Target ID: | 3 |
| Start time: | 22:13:25 |
| Start date: | 16/04/2024 |
| Path: | C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff773ce0000 |
| File size: | 710'048 bytes |
| MD5 hash: | EC652BEDD90E089D9406AFED89A8A8BD |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | moderate |
| Has exited: | false |
| Target ID: | 12 |
| Start time: | 22:13:32 |
| Start date: | 16/04/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
| Target ID: | 13 |
| Start time: | 22:13:33 |
| Start date: | 16/04/2024 |
| Path: | C:\Program Files\Google\Chrome\Application\chrome.exe |
| Wow64 process (32bit): | false |
| Commandline: | |
| Imagebase: | 0x7ff7f9810000 |
| File size: | 3'242'272 bytes |
| MD5 hash: | 45DE480806D1B5D462A7DDE4DCEFC4E4 |
| Has elevated privileges: | true |
| Has administrator privileges: | true |
| Programmed in: | C, C++ or other language |
| Reputation: | high |
| Has exited: | false |
⊘No disassembly