Edit tour

Windows Analysis Report
https://facilitator-of-company-case-2605792.netlify.app/id.html/

Overview

General Information

Sample URL:	https://facilitator-of-company-case-2605792.netlify.app/id.html/
Analysis ID:	1448159
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Phishing site detected (based on image similarity)

Detected non-DNS traffic on DNS port

Form action URLs do not match main URL

HTML body contains low number of good links

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1920,i,16783255069544066462,15836163413115638597,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://facilitator-of-company-case-2605792.netlify.app/id.html/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1716848936038&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundAge: 16882Cache-Control: public,max-age=0,must-revalidateCache-Status: "Netlify Edge"; hitContent-Length: 3082Content-Type: text/html; charset=utf-8Date: Mon, 27 May 2024 22:29:14 GMTEtag: 1716781308-sslServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01HYY2R2X4VS5WKM41KAE3BFPHConnection: close

Source: chromecache_95.2.dr, chromecache_100.2.dr, chromecache_85.2.dr, chromecache_74.2.dr	String found in binary or memory: http://www.gimp.org/xmp/
Source: chromecache_90.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_93.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Source: chromecache_78.2.dr	String found in binary or memory: https://answers.netlify.com/t/support-guide-i-ve-deployed-my-site-but-i-still-see-page-not-found/125
Source: chromecache_93.2.dr	String found in binary or memory: https://api.db-ip.com/v2/free/self/
Source: chromecache_93.2.dr	String found in binary or memory: https://api.emailjs.com/api/v1.0/email/send
Source: chromecache_93.2.dr	String found in binary or memory: https://dashboard.emailjs.com/admin
Source: chromecache_93.2.dr	String found in binary or memory: https://dashboard.emailjs.com/admin/account
Source: chromecache_93.2.dr	String found in binary or memory: https://dashboard.emailjs.com/admin/templates/n9wx5on/settings
Source: chromecache_78.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_79.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_79.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_93.2.dr	String found in binary or memory: https://popper.js.org)

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@16/61@10/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1920,i,16783255069544066462,15836163413115638597,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://facilitator-of-company-case-2605792.netlify.app/id.html/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1920,i,16783255069544066462,15836163413115638597,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://facilitator-of-company-case-2605792.netlify.app/id.html/	100%	Avira URL Cloud	phishing
https://facilitator-of-company-case-2605792.netlify.app/id.html/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
http://www.gimp.org/xmp/	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe
https://facilitator-of-company-case-2605792.netlify.app/img/meta-logo-grey.png	100%	Avira URL Cloud	phishing
https://facilitator-of-company-case-2605792.netlify.app/img/phone.png	100%	Avira URL Cloud	phishing
https://facilitator-of-company-case-2605792.netlify.app/ico.ico	100%	Avira URL Cloud	phishing
https://api.emailjs.com/api/v1.0/email/send	0%	Avira URL Cloud	safe
https://api.db-ip.com/v2/free/self/	0%	Avira URL Cloud	safe
https://facilitator-of-company-case-2605792.netlify.app/img/save_img.png	100%	Avira URL Cloud	phishing
https://dashboard.emailjs.com/admin/account	0%	Avira URL Cloud	safe
https://facilitator-of-company-case-2605792.netlify.app/img/Mate.mp4	100%	Avira URL Cloud	phishing
https://facilitator-of-company-case-2605792.netlify.app/img/shild.jpg	100%	Avira URL Cloud	phishing
https://github.com/twbs/bootstrap/blob/main/LICENSE)	0%	Avira URL Cloud	safe
https://facilitator-of-company-case-2605792.netlify.app/styles/bootstrap.min.css	100%	Avira URL Cloud	phishing
https://dashboard.emailjs.com/admin/templates/n9wx5on/settings	0%	Avira URL Cloud	safe
https://facilitator-of-company-case-2605792.netlify.app/styles/style.css	100%	Avira URL Cloud	phishing
https://facilitator-of-company-case-2605792.netlify.app/img/star.png	100%	Avira URL Cloud	phishing
https://answers.netlify.com/t/support-guide-i-ve-deployed-my-site-but-i-still-see-page-not-found/125	0%	Avira URL Cloud	safe
https://facilitator-of-company-case-2605792.netlify.app/favicon.ico	100%	Avira URL Cloud	phishing
https://facilitator-of-company-case-2605792.netlify.app/img/dir.png	100%	Avira URL Cloud	phishing
https://facilitator-of-company-case-2605792.netlify.app/img/doc.png	100%	Avira URL Cloud	phishing
https://facilitator-of-company-case-2605792.netlify.app/img/fb_round_logo.png	100%	Avira URL Cloud	phishing
https://facilitator-of-company-case-2605792.netlify.app/img/no_avatar.png	100%	Avira URL Cloud	phishing
http://www.videolan.org/x264.html	0%	Avira URL Cloud	safe
https://facilitator-of-company-case-2605792.netlify.app/img/block_2.png	100%	Avira URL Cloud	phishing
https://facilitator-of-company-case-2605792.netlify.app/img/2FA.png	100%	Avira URL Cloud	phishing
https://popper.js.org)	0%	Avira URL Cloud	safe
https://dashboard.emailjs.com/admin	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
api.db-ip.com	104.26.5.15	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
facilitator-of-company-case-2605792.netlify.app	52.58.254.253	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://facilitator-of-company-case-2605792.netlify.app/img/phone.png	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/img/meta-logo-grey.png	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/img/shild.jpg	false	Avira URL Cloud: phishing	unknown
https://api.db-ip.com/v2/free/self/	false	Avira URL Cloud: safe	unknown
https://facilitator-of-company-case-2605792.netlify.app/ico.ico	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/img/save_img.png	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/img/Mate.mp4	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/form.html	true		unknown
https://facilitator-of-company-case-2605792.netlify.app/id.html/	true		unknown
https://facilitator-of-company-case-2605792.netlify.app/styles/bootstrap.min.css	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/styles/style.css	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/img/star.png	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/img/dir.png	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/img/fb_round_logo.png	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/img/2FA.png	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/img/doc.png	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/img/no_avatar.png	false	Avira URL Cloud: phishing	unknown
https://facilitator-of-company-case-2605792.netlify.app/img/block_2.png	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.emailjs.com/api/v1.0/email/send	chromecache_93.2.dr	false	Avira URL Cloud: safe	unknown
https://dashboard.emailjs.com/admin/account	chromecache_93.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_79.2.dr	false	Avira URL Cloud: safe	unknown
http://www.gimp.org/xmp/	chromecache_95.2.dr, chromecache_100.2.dr, chromecache_85.2.dr, chromecache_74.2.dr	false	URL Reputation: safe	unknown
https://getbootstrap.com/)	chromecache_79.2.dr	false	URL Reputation: safe	unknown
https://dashboard.emailjs.com/admin/templates/n9wx5on/settings	chromecache_93.2.dr	false	Avira URL Cloud: safe	unknown
https://answers.netlify.com/t/support-guide-i-ve-deployed-my-site-but-i-still-see-page-not-found/125	chromecache_78.2.dr	false	Avira URL Cloud: safe	unknown
http://www.videolan.org/x264.html	chromecache_90.2.dr	false	Avira URL Cloud: safe	unknown
https://dashboard.emailjs.com/admin	chromecache_93.2.dr	false	Avira URL Cloud: safe	unknown
https://popper.js.org)	chromecache_93.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.5.15	api.db-ip.com	United States	13335	CLOUDFLARENETUS	false
104.26.4.15	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
52.58.254.253	facilitator-of-company-case-2605792.netlify.app	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1448159
Start date and time:	2024-05-28 00:28:21 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://facilitator-of-company-case-2605792.netlify.app/id.html/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@16/61@10/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 74.125.71.84, 142.251.40.206, 34.104.35.123, 142.250.184.202, 142.250.185.74, 142.250.186.42, 142.250.186.138, 142.250.186.74, 142.250.181.234, 142.250.185.234, 142.250.184.234, 142.250.185.202, 172.217.18.10, 172.217.16.202, 142.250.186.106, 142.250.185.138, 216.58.206.74, 142.250.186.170, 142.250.185.106, 40.127.169.103, 199.232.210.172, 192.229.221.95, 20.3.187.198, 20.242.39.171, 142.250.181.227, 2.19.126.151, 2.19.126.137
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://facilitator-of-company-case-2605792.netlify.app/id.html/

Input	Output
URL: https://facilitator-of-company-case-2605792.netlify.app/form.html Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is a mobile device detection script. It checks the user agent string to determine if the user is accessing the site from a mobile device. This is a common and legitimate functionality used to optimize user experience on different devices. There are no indications of malicious behavior in this code." }
window.mobileCheck = function () { let check = false; (function (a) { if (/(android\|bb\d+\|meego).+mobile\|avantgo\|bada\/\|blackberry\|blazer\|compal\|elaine\|fennec\|hiptop\|iemobile\|ip(hone\|od)\|iris\|kindle\|lge \|maemo\|midp\|mmp\|mobile.+firefox\|netfront\|opera m(ob\|in)i\|palm( os)?\|phone\|p(ixi\|re)\/\|plucker\|pocket\|psp\|series(4\|6)0\|symbian\|treo\|up\.(browser\|link)\|vodafone\|wap\|windows ce\|xda\|xiino/i .test(a) \|\| /1207\|6310\|6590\|3gso\|4thp\|50[1-6]i\|770s\|802s\|a wa\|abac\|ac(er\|oo\|s\-)\|ai(ko\|rn)\|al(av\|ca\|co)\|amoi\|an(ex\|ny\|yw)\|aptu\|ar(ch\|go)\|as(te\|us)\|attw\|au(di\|\-m\|r \|s )\|avan\|be(ck\|ll\|nq)\|bi(lb\|rd)\|bl(ac\|az)\|br(e\|v)w\|bumb\|bw\-(n\|u)\|c55\/\|capi\|ccwa\|cdm\-\|cell\|chtm\|cldc\|cmd\-\|co(mp\|nd)\|craw\|da(it\|ll\|ng)\|dbte\|dc\-s\|devi\|dica\|dmob\|do(c\|p)o\|ds(12\|\-d)\|el(49\|ai)\|em(l2\|ul)\|er(ic\|k0)\|esl8\|ez([4-7]0\|os\|wa\|ze)\|fetc\|fly(\-\|_)\|g1 u\|g560\|gene\|gf\-5\|g\-mo\|go(\.w\|od)\|gr(ad\|un)\|haie\|hcit\|hd\-(m\|p\|t)\|hei\-\|hi(pt\|ta)\|hp( i\|ip)\|hs\-c\|ht(c(\-\| \|_\|a\|g\|p\|s\|t)\|tp)\|hu(aw\|tc)\|i\-(20\|go\|ma)\|i230\|iac( \|\-\|\/)\|ibro\|idea\|ig01\|ikom\|im1k\|inno\|ipaq\|iris\|ja(t\|v)a\|jbro\|jemu\|jigs\|kddi\|keji\|kgt( \|\/)\|klon\|kpt \|kwc\-\|kyo(c\|k)\|le(no\|xi)\|lg( g\|\/(k\|l\|u)\|50\|54\|\-[a-w])\|libw\|lynx\|m1\-w\|m3ga\|m50\/\|ma(te\|ui\|xo)\|mc(01\|21\|ca)\|m\-cr\|me(rc\|ri)\|mi(o8\|oa\|ts)\|mmef\|mo(01\|02\|bi\|de\|do\|t(\-\| \|o\|v)\|zz)\|mt(50\|p1\|v )\|mwbp\|mywa\|n10[0-2]\|n20[2-3]\|n30(0\|2)\|n50(0\|2\|5)\|n7(0(0\|1)\|10)\|ne((c\|m)\-\|on\|tf\|wf\|wg\|wt)\|nok(6\|i)\|nzph\|o2im\|op(ti\|wv)\|oran\|owg1\|p800\|pan(a\|d\|t)\|pdxg\|pg(13\|\-([1-8]\|c))\|phil\|pire\|pl(ay\|uc)\|pn\-2\|po(ck\|rt\|se)\|prox\|psio\|pt\-g\|qa\-a\|qc(07\|12\|21\|32\|60\|\-[2-7]\|i\-)\|qtek\|r380\|r600\|raks\|rim9\|ro(ve\|zo)\|s55\/\|sa(ge\|ma\|mm\|ms\|ny\|va)\|sc(01\|h\-\|oo\|p\-)\|sdk\/\|se(c(\-\|0\|1)\|47\|mc\|nd\|ri)\|sgh\-\|shar\|sie(\-\|m)\|sk\-0\|sl(45\|id)\|sm(al\|ar\|b3\|it\|t5)\|so(ft\|ny)\|sp(01\|h\-\|v\-\|v )\|sy(01\|mb)\|t2(18\|50)\|t6(00\|10\|18)\|ta(gt\|lk)\|tcl\-\|tdg\-\|tel(i\|m)\|tim\-\|t\-mo\|to(pl\|sh)\|ts(70\|m\-\|m3\|m5)\|tx\-9\|up(\.b\|g1\|si)\|utst\|v400\|v750\|veri\|vi(rg\|te)\|vk(40\|5[0-3]\|\-v)\|vm40\|voda\|vulc\|vx(52\|53\|60\|61\|70\|80\|81\|83\|85\|98)\|w3c(\-\| )\|webc\|whit\|wi(g \|nc\|nw)\|wmlb\|wonu\|x700\|yas\-\|your\|zeto\|zte\-/i .test(a.substr(0, 4))) check = true; })(navigator.userAgent \|\| navigator.vendor \|\| window.opera); return check; };
URL: https://facilitator-of-company-case-2605792.netlify.app/form.html Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code contains only static text and link definitions related to privacy policies and terms of service. There are no indications of malicious behavior such as data exfiltration, unauthorized access, or harmful operations. The code appears to be part of a legitimate website's informational content." }
const subLinks = { 'PolicyCollapse': [{ 'text': 'What is the Privacy Policy and what does it cover?', 'link': '', 'add_svg_link': false }, { 'text': 'What information do we collect?', 'link': '', 'add_svg_link': false }, { 'text': 'How do we use your information?', 'link': '', 'add_svg_link': false }, { 'text': 'How do we share your information on Meta Products or with integrated partners?', 'link': '', 'add_svg_link': false }, { 'text': 'How do we share information with third parties?', 'link': '', 'add_svg_link': false }, { 'text': 'How is the cooperation between Meta Companies organized?', 'link': '', 'add_svg_link': false }, { 'text': 'How can you manage or delete your information and exercise your rights?', 'link': '', 'add_svg_link': false }, { 'text': 'How long do we keep your information?', 'link': '', 'add_svg_link': false }, { 'text': 'How do we transmit information?', 'link': '', 'add_svg_link': false }, { 'text': 'How do we respond to official requests, comply with applicable laws, and prevent harm?', 'link': '', 'add_svg_link': false }, { 'text': 'How will you know when the policy changes?', 'link': '', 'add_svg_link': false }, { 'text': 'How to ask Meta questions?', 'link': '', 'add_svg_link': false }, { 'text': 'Why and how we process your data', 'link': '', 'add_svg_link': false }, ], 'RulesCollapse': [{ 'text': 'Cookie Policy', 'link': '', 'add_svg_link': false }, { 'text': 'Information for those who do not use Meta Products', 'link': '', 'add_svg_link': true }, { 'text': 'How Meta uses information for generative AI models', 'link': '', 'add_svg_link': false }, { 'text': 'Data Transfer Framework Policy', 'link': '', 'add_svg_link': false }, { 'text': 'Other terms and conditions', 'link'
URL: https://facilitator-of-company-case-2605792.netlify.app/form.html Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be part of a legitimate library, likely Bootstrap, used for DOM manipulation and event handling. There are no obvious signs of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code primarily focuses on querying and manipulating DOM elements. The risk score is set to 1 due to the general caution required when dealing with any JavaScript code." }
! function (t, e) { "object" == typeof exports && "undefined" != typeof module ? module.exports = e() : "function" == typeof define && define.amd ? define(e) : (t = "undefined" != typeof globalThis ? globalThis : t \|\| self).bootstrap = e() }(this, (function () { "use strict"; const t = { find: (t, e = document.documentElement) => [].concat(...Element.prototype.querySelectorAll.call(e, t)), findOne: (t, e = document.documentElement) => Element.prototype.querySelector.call(e, t), children: (t, e) => [].concat(...t.children).filter(t => t.matches(e)), parents(t, e) { const i = []; let n = t.parentNode; for (; n && n.nodeType === Node.ELEMENT_NODE && 3 !== n.nodeType;) n.matches(e) && i.push(n), n = n.parentNode; return i }, prev(t, e) { let i = t.previousElementSibling; for (; i;) { if (i.matches(e)) return [i]; i = i.previousElementSibling } return [] }, next(t, e) { let i = t.nextElementSibling; for (; i;) { if (i.matches(e)) return [i]; i = i.nextElementSibling } return [] } }, e = t => { do { t += Math.floor(1e6 * Math.random()) } while (document.getElementById(t)); return t }, i = t => { let e = t.getAttribute("data-bs-target"); if (!e \|\| "#" === e) { let i = t.getAttribute("href"); if (!i \|\| !i.includes("#") && !i.startsWith(".")) return null; i.includes("#") && !i.startsWith("#") && (i = "#" + i.split("#")[1]), e = i && "#" !== i ? i.trim() : null } return e }, n = t => { const e = i(t); return e && document.querySelector(e) ? e : null }, s = t => { const e = i(t); return e ? document.querySelector(e) : null }, o = t => { t.dispatchEvent(new Event("transitionend")) }, r = t => !(!t \|\| "object" != typeof t) && (void 0 !== t.jquery && (t = t[0]), void 0 !== t.nodeType), a = e => r(e) ? e.jquery ? e[0] : e : "string" == typeof e && e.length > 0 ? t.findOne(e) : null, l = (t, e, i) => { Object.keys(i).forEach(n => { const s = i[n],

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:29:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.987162952106213
Encrypted:	false
SSDEEP:	48:8FdYTcwRHLidAKZdA19ehwiZUklqehHMy+3:8gvjmMy
MD5:	ACCF99EF6B71267DB1529BDF92226CDE
SHA1:	3BD8445D0BEAE50425AE0027CF017B573B131A48
SHA-256:	D7EA52A2ADCA507B00B0AA0729961F4C44E1798B7F37A755D6CA6D80DB805527
SHA-512:	D0AB6909877FBB901C777AD006342C2663D29033B0EA70A28273396568E38FEA0F57FA798AF4FDC567698A36B8EAD0E98714706350A6CEE1D44CA2537C72F4A0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....GW;L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:29:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.003617871769234
Encrypted:	false
SSDEEP:	48:8uRdYTcwRHLidAKZdA1weh/iZUkAQkqehWMy+2:8usvR9QBMy
MD5:	67C32AF396CD327D9B62B701B9585BB9
SHA1:	984FFC705A4A36AD47BAACBB0BC99348896D6FFB
SHA-256:	71806BE5969C8536F4EC78DA6521644F3C7811EB90C773983E1D05B0C2442FF2
SHA-512:	5F0B288140DC990A77B388B97FC053E1A2210EB66DAE7851A757382BBBC4E4884986D49A51D5F34D7D2E226AA0A5BB6FD440D86E0E6FEC1CF4651BE1DD023B8E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....j.0L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.014275960829863
Encrypted:	false
SSDEEP:	48:8xJdYTcwsHLidAKZdA14tseh7sFiZUkmgqeh7sgMy+BX:8x0vOnqMy
MD5:	3982714B557B70E601E955AE12EA29A9
SHA1:	4047A73BB04190FCD39EE100DBFD4634605A2C10
SHA-256:	4243DD2B6E53F45BD2DF1F370678DA63551A0CAF8C8911203CFFAAAE0B2E8896
SHA-512:	FBF2A96E4AAE897DC2FE78F4196C11AC88DE90D575E2896ABF2362E3330A9EEF7468FCE02D3B876A7DD57D9963BA6272AAD212ECECD7E11386DED0D3DBC7CC50
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:29:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.003150134947164
Encrypted:	false
SSDEEP:	48:8Q2dYTcwRHLidAKZdA1vehDiZUkwqehyMy+R:8OvSIMy
MD5:	084E0BD7D09DC9BDBF0D3E8AD28C1907
SHA1:	2C3BA0C12B1FC8FD900F8AC7D6311ADD127922FA
SHA-256:	31F1D2BC545D963763E26B4A5E1A4836908A6245EB34CB1292B488A8F97868C0
SHA-512:	3772FE263C27AC0E9DAC01A7CD292B56E6D06E3D05D3B3AD90E701D08B6D8CD8E6B225C22E92DED592B4BD3E3E95442517FDA9EFA381DB70DD21723273B903CC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......,L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:29:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9924578933391146
Encrypted:	false
SSDEEP:	48:8zdYTcwRHLidAKZdA1hehBiZUk1W1qeh0My+C:8yvi9UMy
MD5:	40067B5FAE6EF85505C003045A51E9F4
SHA1:	C0EA51F3A835DD1AA09F41514D72E581D7496FF0
SHA-256:	95B0F1E7915977EC60BAB243E61ECD8BC98A9D8E8FAB78CCBD776AAEBCB0A60C
SHA-512:	2EC60D97D3AEC8DAF05DC9DE26C19FBA89EB46C8561A8C967766F14BBD05FAA72FB1F7DD6FB272E040A38D925AC9CA201DB06BA3B93683857094A2B97F57A1A8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......6L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 21:29:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.004369353766476
Encrypted:	false
SSDEEP:	48:8SudYTcwRHLidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbqMy+yT+:8SdvcT/TbxWOvTbqMy7T
MD5:	EC9EDBE6CD28D94918774AC274890F08
SHA1:	AF93644853FED3C388AC9A901219F81171051484
SHA-256:	242D1CABB9888CE0AEDF256D1B2232EE3B9B136C1CD8E85D8180ABC4B88B3BCE
SHA-512:	0293C21D5DDB873D0606D27CBED0EB50E95988C267D76E11831A6B0F215A77CDE498CDFB3A51EAE7CAF65FDABDBF85DA6508B625D5089A817431F3CBD5534A2F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....-.#L....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	18787
Entropy (8bit):	7.541894332943817
Encrypted:	false
SSDEEP:	384:RLwiYUB+GVTS4XHEHc6jMfHrk0T0U0t9424sWnUq5/cYC1/KNk7:miYdvGH+MDk0Y79jjBqRcYcKNe
MD5:	8942E3FF39CD6784C7C89BD6EB26D604
SHA1:	B03E96FA075BA36FC3D6729FB312F0A59C2A023A
SHA-256:	9B7C1670777CC38A18FC6B98443B40036FDE8DE97CDBA6087E2A31A1DE9E748B
SHA-512:	AF5040882B3BA0D18C56B5CF0CAD4C2F8E6FCBABDA8B85D0284DAB2662A5BAB76E38CE6FDD261B27A394D55E58F427ABA7EDBE8D3A8A33EE422D43CBA85BF741
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...e.......F...$.zTXtRaw profile type exif..x..k..7.d.s........<gv0...lIn..d.J.Y.H..D......{......\Z..V.<.o..................7"/%...?{........>_&.........7..c.i....4#}...._...y#\|.0..RFo._.....l.......i......sR..B........$.&oD..)..K....)\|....>}.5...T..~............Z9~}$......?\|......s....w.....3..v_..=..5...+[]...m).;>.x...U..S.........../~.0B.\7.p..7....f.9...ob.K/.........pc.'u,...s.....c...=.....h..&w......{..!....-.W..l.!..o>.E.....6.........Bd...3..7$H.....~b0..5.[......`..J....[.ld.@..Gbfa.PJ<L2...Q..GZx..%..u..K.TS.6D....?-w\|h.Tr)..Vz.e.Ts-..V.....]+...z.m..s/...{.}.8..YF.m.1.<s2..'..s.V^....k..q..w.u........q.i..q...,[.j....W...\|...~..........j..j.YJ.l...}.".N.l......7.......!.(..f..N.D&Yd..d1,.-.r.7....,.?......?.......~...Y.(..g.O.jS}".x...}.....i..dc...T...v....i./.Tl.F.1W....3........6.S.....+a .\.+.U.V.7..w.....<..i[tq.}s....}..d_.b..6I...lb..gmg-.8,.....I.o..~~....Yg.'..\| .....j......

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	120
Entropy (8bit):	5.086401091923359
Encrypted:	false
SSDEEP:	3:xPVcCnlI/iuSRKhfiuLWEQekBthB+kfCGDNR+uZYn:xPxlhPRq9eGKFT+uZYn
MD5:	7937D20428CCBA26B5A071185B22E17F
SHA1:	5117000B5E31F4BBB73F8DA629E9B3AF88715AF4
SHA-256:	2086D1581AE86AFE2C67269640265417B8DF613A9CAA622FC4C649803A1A20B2
SHA-512:	ED2AC120430430F43CA93FFFB115AFF8CBD88E6A47AFC983381DAED7701BCF54368BED7E7920CA4628B605E693401603CBFC70E958D66B9F8FE12EFA2E3BC203
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwmf8TG8BeFIExIFDR1W4RcSBQ3WBO6xEgUNZ8dkmRIFDez-GpQSBQ2q6czqEgUNGLGuSBIQCfPEYnC7CbylEgUN4TC68hIQCVBOIzx3dxAKEgUNcyTUaBIQCfJf2y6THUWMEgUNkWGVTg==?alt=proto
Preview:	CjYKBw0dVuEXGgAKBw3WBO6xGgAKBw1nx2SZGgAKBw3s/hqUGgAKBw2q6czqGgAKBw0Ysa5IGgAKCQoHDeEwuvIaAAoJCgcNcyTUaBoACgkKBw2RYZVOGgA=

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5071
Entropy (8bit):	7.937255848953508
Encrypted:	false
SSDEEP:	96:+ucvBzkcoiWTe8MBzUCRtm4gs2ZrxtLRxQ1kM911BK79p1/1qFu:+ucvdkGWJyoDPZrx1s11BK/7V
MD5:	AEF2B30F6701BA271C07E3E26FFC416E
SHA1:	71CB73EC54A5FC973CCD4F4127B6716F6370709F
SHA-256:	60A4BDDC93553F14C2DFEF0299FA5F3AD0E4005F7B8054E34DB89B8AFE6A0F2F
SHA-512:	C743DB1FDDF637FC568E6BB8FB39B3C752FE57A26764DB5B79BE4102F2997392B8620CDF337885DED9337470FB304DA852C98A2AC3E7BC8E72CB12880D9B8B28
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/dir.png
Preview:	.PNG........IHDR...x...x.............gAMA......a.....sRGB.........PLTE.h..i..i..j..b..`..X..Z..]..V..f..T..R..d..l.....{..u.....p......................h....................................................................P..j...I....M..D......................b..i..\..x.....r....t..n..R..O............@..E..;..7......R..3....Q..R..S..U..W..X..V..Y..P..<NW8<>?Wb577Gx.M..K..0..&..(..*..,..H.....Cco...,..K......................3.,/..............,.....hx.m}._r.]p.[o.Ym.Vk.Si.cu.z........=X~Pg....u..............:BE!.......8..fD+..........h.j....uP..N....w..Y&..I)....k.m.s..lL4.o.z.k.cCEo.T4.~X:..c.\|.............Cb{Ld.]:#532...O../'%5NR.,1k...k.ku...9N.f{i~u[qm#n...l.Xl4cl6s....Yjctl2ak%\k/W[4gq5my..k.kJ...l,_j3..1\b.FT...n...Naivl...b.{.M].J_............}......$_.....tRNS...)Y....eIDATx......@..@~.I...u...8.q..y......;...q.k{$2.c...`eF.\|..P..V..r....\|.b...w.t.)..a.2.3..J...q.qI....}...N.Fq.$....<..,N.(...,..,).....S^....

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	947
Entropy (8bit):	4.693760528916501
Encrypted:	false
SSDEEP:	12:hPGXACy7C/LTLIIScBE/zS+LA/F+xvmA2o+Mc7RE4blDcfH1dnOAVqZTo5/3fMtI:hPCCGLQj4+xvNehbRwUVa/E3LIrMzM
MD5:	6DCB5D46A8067EA8CCA251E6EF4D881F
SHA1:	D4A7B0678AD4EC4277EAAA1B99142D01700BBB7F
SHA-256:	F45C3847DEBBBC16F6CBFFCE2278122C1FE1EC4242DFB7517FCBF29C13DE5E24
SHA-512:	7BCB181FA8EA8954D4234F82E0701767681B92BBE789DF126A0EC42E0F8E7DFBA81EFE32A8D29EFA5CB662D38369BAAF726B755E76CC321DB7D29FB3BDA4881A
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/id.html/
Preview:	<!DOCTYPE html>..<html lang="en">....<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Trang ch.</title>.. <style>.. #myVideo {.. width: 100%;.. height: auto;.. }.. </style> -->.. <style>.. body, html {.. margin: 0;.. padding: 0;.. height: 100%;.. display: flex;.. justify-content: center;.. align-items: center;.. }.. .. #myVideo {.. max-width: 100%;.. max-height: 100%;.. }.. </style>..</head>....<body>.. .. <video id="myVideo" autoplay muted playsinline>.. <source src="../img/Mate.mp4" type="video/mp4">.. Your browser does not support the video tag... </video>.. .... <script>.. setTimeout(function () {.. window.location.href = window.location.origin + "/form.html";.... }, 4000);.. </script>..</body>....</html>

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	7550
Entropy (8bit):	7.960579777190278
Encrypted:	false
SSDEEP:	192:ri4sn8ZlCLFUm5Dk3CqDEkV8YaTETosC1nEDuO0f+htV:rfsn4CBnKCqYkaUoseEDuO0C7
MD5:	8D3BCD1278891FC1E52D38E72549B3D0
SHA1:	AF1AB86B5A3993C468C3BE9C59A8ED3D9091454D
SHA-256:	8FC3F44A189200B47C93A90AD8DFFE40FCDEDA8A718E62BB4BAF98F00D536E97
SHA-512:	E8C73AB69E70BDCA02C1C7004947186455C632692311B4CA91D1BEA143CE7F0B986DC0B0623B8AE82F9561549337171B3E89A55F7BCD92964FE214DDAB1C4FEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............PLTE.......................W............M.............................\|k~`P..{.........mWN'.7..>..U.._9&...H .-..C..lI4...$..J#...T..E........uK.G.V5....{..T.gB.s.w.s.u.q.n....h........`........u...>...A.................:..e..F.......B..............._.....`...............{......o................................................d........5.............................A.................x..u....y..p..............`..s...................n.......i....e..N...................x........\|....k.......Y....T...........F./......m.p..J..N...@....i..........f......[.....u...........z..Q..............u......<.....f.......j....I.....^.........+.......tRNS...........#.q....(IDATx^..E.#W.......^........<.a...^[..Y..LZ.r\^y........$YY.~...>........o............f.t.g.3.Q.......V.......lSt..s..rp..4...7K;..d6)._.6r......voS.2T.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 41, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1980
Entropy (8bit):	7.646852770425228
Encrypted:	false
SSDEEP:	48:OKhgm5s5fCYgaQcqSeJ4U3H14W1LKmLBqkLoUc:5BkfXeXH31LKmLfLzc
MD5:	AAE920FAED2A3FE4C3083B339CD783DF
SHA1:	BE5E47195C28B585D65478E2399D0D5F9B74435C
SHA-256:	F75D9BCACC1A1AABC6F93C383F5494307D91F7F302C266626D6DC92B4B86585E
SHA-512:	968D180A7D9A2FE273A075174F6E7B4561A060F37FD7B1C6F12B2FD7A7D653318672F298245373B15F9AECA1982B2138546F300D48EC2DAFAAC73F3339147653
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/star.png
Preview:	.PNG........IHDR...)...).............PLTEGpL..............................................................................................................................................................................................................................................................................................................................................................................s.......%.D..................................j..............=.....=...................u........................&.....^.......I........................w..w....3.3.......................f............A...............l.....................H..x.........................A..~..b...............................U.(....9.0.......................1.....tRNS.@..f...sIDATx^..ut.H......@H....Y..V(..w..v+[..w.z..r.n.~.........$.n...........hf.Tbc..\.......\..1....f:@.M.r..^u..P.P.0..7.k.....G....b....<....0A.2H......RM~*n..Q..Xu.!%...+

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5723
Entropy (8bit):	7.950822106896149
Encrypted:	false
SSDEEP:	96:upH/omZ4SOy3uxD+WxV6jD9/zIvNVCvEknBgSjERtW82iAsuFQAIFbISS2V0wZ:upHRZ3qKvZzMGvBg5RuaAIFc5ohZ
MD5:	95382A6DAB40D5911185A921C53E6F6B
SHA1:	4229CB577571111D747021988AAC9DD6CD50634F
SHA-256:	E341D9055288DFCD7DD5FACAB6C915F6B7BCFFBF80F8B48468C7275B8CADA069
SHA-512:	58DFD1656F931BF14044A8D4D790CCD3369A33D42AEA35774BF4B0F2242173795C86FDE3280D74849BE492BBC50D4515F3F3985F93766559544DA37E9988BC03
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r..."IDATx^.k..Wy...Zk.}..s.a....x<.B....L..j......$%U?D.zQ....$m...$R...hU.(..`..-.4$.[..M......./..9g......Gk..B...%.y.....{....y.=2...S.~..D@"H...F..ZzD"...e...%.....D...Z.8F......K...-...^(..B....+.B..<.f\|...;..PE....G.Dt..H..0...........l.!......~....6.'..%....P..".~.{......=....b.P......hA.. i................U$,#.JK$.\c.o.O..u-.\)H.h...R...A.6.kVh....QUP.\l..^.......V&...(.q.........q....7.Aq3.`p...........&....`......\.........(.Y..!.`GvO.c...".=..4."Z.."._...~.".P..../..xv.>p........L....hq.bB../M.DZ@....feb~/(".A..........G.IsAJ...B.j@0).1w0Z..m....u.......w..........<.>P...n...v.q...8t....^r\..M.....^..i.\|_.n.....X..P;.d...ph..............C?.N..y...>r0..y.A.O......4.....$YpU%P.E..>.........;h.i....X.X...z.N._.%\{..s.-..\....~=..T..=Ok.]3\%.Q3....}....T.I{.R..@..~.D.t..k?FV....'"...........r..."5.%...\p...Z....G9.......{.J....R..J.?..{_B.cn>.A"..&..\|... X:STLU.......Se'(..V..BB....Et...f\|/..RT+..!...A...

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 541 x 252, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	114767
Entropy (8bit):	7.9936922187201365
Encrypted:	true
SSDEEP:	3072:SOEFifYmNYKElSiLVN6MOzKqJdnJYJe4kiUh6sq:SIZYKEzmXZdJ8eYx
MD5:	03D39D5D071182ABA1B01BA2E859DE39
SHA1:	7BA8F968B03E92FD59A6C4F6CE5C8AA36A5D2B92
SHA-256:	A7FD65363687E512751D88F7850B61969427E8D3AA9A177946BCD4BC280B71AD
SHA-512:	5BF4D0B9FF650FF11C8FF69C409C45FBFD31BC3F8C4B55F665BEA8E11A42C412B9EA25B9974908AB9B670A22E80A445692A26B98535B84CB49299C37C22E16E6
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/2FA.png
Preview:	.PNG........IHDR.....................iCCPICC profile..(.}.=H.@.._S."..3Hq.P.Z..q...B..Zu0....4$)...k........... ......"%..).......=...B..t.g....J'.R6..^.F."b.(.6.d9...u.._..<...c@....H.......M..O,.......,. .#.U..8.[,.L...Eb...j.....O.G5.\|!..y..^...=...yce..4G..". C.....A.V...i.O..#-.L..\e0r,...J..........^R8......(....u..>v....\|.......f>I.w...0..\\w4u......L.RZR..P(..g.M9`..._.zk.....PW......+R.....{..L.....r. @......bKGD..............pHYs.................tIME.....-.Pc.0....tEXtComment.Created with GIMPW..... .IDATx..i.%.q%x<"2........@...8ZF....Lw.....}k.....nY.%.".. .@.....w.....dd......y.b.n.F...?~....Y".....$ ........v.....0...A......,``!X..C.....,YH.Xr.[.d8......2..,.."....`,....f... ....w.&v.....!".../.]_.-.!...!....p.q..1..i.~...vSr.s.....f.7..j...). ......}....>....1....Wb...{......A3.7.`g>O.5..x\|...7.z..~..+.k.w._............k$..x.pN..ul.W3....[3......@.\...o...:\|...p.a}Mm....G.Z..u.x6.v.....;._#.?..=k-..H.8....,C..^..]t...A.`.Zc.{...;.C

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	105511
Entropy (8bit):	7.947376852451873
Encrypted:	false
SSDEEP:	1536:VudXKa4pprle5L3Ve48HXzXl4F4fTy9AeC9hhxVK0cYUFLWyMjmy/Yu:/xe5UHDaCTy9bmPJURWBjma
MD5:	FFBA640622DD859D554EE43A03D53769
SHA1:	C91A100DB7BFC04DF9A5F3223D5B6F17536BF5EE
SHA-256:	139D38D0FBFED2FD9F2B782AF9B3EB08005B9BC75FAAA31FE29720CC64BCAB0F
SHA-512:	70C7C4DF14A22E00A0CAF1DAF001E608454604FA0B4C13583EFAC7A8CAFF6C726D62C024F9E0626760B524F7D08184E4E30CF4A49BE505ACB1F9D29CFCE35993
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............X..q....zTXtRaw profile type exif..x..i......c.^..a9..pN....wAJ....].L%I.....w@.;......#._]...Q..G.q...c....{~..}.~....~..tH..P?......~......~.~.b........%iFzo..w..?_....,_Go.\.:.W.....uz...i.....Y.:).B.<...@.ori.E........c.' ......`k../..%+?........=[9~.I....\|...](.}.~^?.r..}....v.....}..k..5...+...E.X.{.q.K...1.....!....t.zS.._..0B$]7.`a...{.a3......cz.vr7.&.!e...[..R'...=..s..]v....:W...10XxE.7...=.^..../.....l......H......?.?..D.......v}.X%....Kt.....B...L.K.&... k!.P.o1...d'A...."...hL2...Q.....D>v\|....B.5r3.$Y9...N..J....J/..j....@q..k...Zo..z...z...G.4...>..kNF..=9`..WZy...j....\|v.e..v.cO.....j...'.J..SN=..3...M..[n...;....oZ...7...Y./S:.......c. 8)......2...:g....2........dQ.,(cd0....?r..'....+o.._.....sJ......WY3..~..t.........8..d.,=..l...c.7s......G<...4....W_a.[W...\|...U@.+.Uz.5.i...2+...S....[...2.2...gX[..P.NX......l..b....M.....~.f#.....jy... yl./.....l..,.3........G:..H.G..x....v...4

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	42676
Entropy (8bit):	7.751709220078662
Encrypted:	false
SSDEEP:	768:QJ6R1m5mLWd4WdvyQqjv9YRNt2ZDmzqSqBoruj6f3drrFpY85JW81Cl1xB+aArel:QJ41emLWxdv7C8Nt2UzqSuu46v9rvY8I
MD5:	81BB5CF1E451109CF0B1868B2152914B
SHA1:	B70017639AFC079394BE1EA8625F7C4BEB44D617
SHA-256:	676C83478E410D324FE56ACA428D3305505732C648667B22E15C8222117C75E6
SHA-512:	1782966B78F57CC91392F3FF03F05D37E0A5FD8B04B0997B2EF708D13C162EA4AAD607E7705A36E0539D6A6B60337432EF271BFF062F7170018B42C9B8B81DE6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............!......iCCPICC profile..(.}.=H.P..OS."..;..f.N.DE...B..Z.U.....M....G.....b...YW.WA...quqRt...K.-b\|py..s..>@...f....n..D\.dW..+....,cV...]_..............H<...&^'.......V.U.s....$~............q.X,....hj...QU.)_.x.r....'.a8.//q.j..,`..D(.`.%...b!E.q......k....(C.......l........./..1..v.z.q....~....+../..O.M-z..l...MM...w..'C6eW.R..<.~F..zo..Uon.s.>.i.U..88...........{.1...vr.+.......bKGD..............pHYs.................tIME.....;)P..w.. .IDATx...y..u}...u..s..+;.....a........,.Vp.E....^.U..z[.V....Z{....jk.V..E..k........Ir..........e.....&.H.oN.\.>....I.$I.$I.$I.$I...@.$..4+b`.N.?#@}...p....<.Y.-n........5..;.^....]I...,.$IR.J.".j@..l.P.Lq.....x..l...u.....U:??]F-.,..-.<vV..t...V.....x...&.......;.1...JY.m.\|....Lt~..]<O.$.Y'I.....$I.3.*.......b`)e.4......jA.......W:.FDY2U:?...uN.,..~....&.......y..y....B....w~........$Is..K.$.N1...DZLY0-..`Z.....QK.U..'....e.5..{.2/Z...d.yzjk;.....[..(...vz.AY.5;.V...I....

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	downloaded
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/shild.jpg
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6043
Entropy (8bit):	7.939355751318444
Encrypted:	false
SSDEEP:	96:s7xaydiMkBvGfzBKIFuC/bG6UAlQloqPZ6UtCjcphNixjT0vtK9E0NJGNKIX3D7b:s7xxr3oFloqPHtCQViV0vMVUj3D71rrx
MD5:	D5D30F28CA92743610C956684A424B7E
SHA1:	FD4A7207B724254D981A4ED4C7F675FD87868535
SHA-256:	4B842E25C6BE485FD7F06B745AC91DB2B6E9EEE778C5442B157BE78D51F83563
SHA-512:	7D0A522805B0A34B33F48791BBBFDFC361B9D91EE9D5843D67E8E1A774F9D8DAD42C7D0EFA429738A0680FCB8D71DACC4B47E22F1DAA8CE718DBF36E6DB35328
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\r.f....bKGD.............PIDATx...p].u......h.R..2.P.P6C.`7,!m&.N..N.L.M.M'@gZ....().4...b.e.Z,..Y..la..nU(.XR...f3...H...zzz....wf~c..z..s....s.X.A.........y..3...q......i....'..a..-[...'..?...].u..<...6l........a.)...O.c..~......H..G..n.w.w.6.........../...<.'. .8...l{.....m....<_^....../...:.'. id..'..o6...r......S..w..O...._..d9.D.x1D..{..........$.........e..bo.>.....K>^$].. ......N.],v....xP\..!.{..m6'..{.g._'r.s....s...H..}..u......7".Y.[V;qD..;...J..%_.x.2..d\|...8c.. ....,.qU.$6Qy.....;-W`.X.dRo?9..e`.8Y`....*J...Kl.).....d.6n.x...d..z....Quh.C.Y,....JT..8!.6.O.#@....'.{..].y...D]l.E.6.].#r.`....D4....."..yl...xEDD}...b....H...-..tvv...}.x...4]..........!...p.m..9....[.}....w.z.(.b.s...0d...r..5.............x...K&.z0Zp.>..Xn.....?#1i.c.7..%..3I\..:...1.}..O.y.....3.a..........-...Ch....\|(...._..\.#.?......8.9.7....V...............A+@.S.q.[...~G.`T}.g..&.n#......?...x.."e~.Q].@v.v/..[..!A.y[

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (331)
Category:	downloaded
Size (bytes):	3082
Entropy (8bit):	5.004299541640028
Encrypted:	false
SSDEEP:	48:+upMbJ+UJTB4jjTc6gz2EXpV2NnR3XKImkBI9W1ZUHozliLC:+usJWjPc6gz2EXp6XKImxWAoUC
MD5:	4C1920DA7E5D9180796A7CBD50C058FC
SHA1:	EBC6858E8987CDB52FD011A29A6914F65E753A3E
SHA-256:	69E48D9DB7C27991E0DCE1A56F246FEC93363CC286C71E6160282A31BF05E867
SHA-512:	C281DD50C956DAB6B5E579B33DF9FACF71F9E8A9B87483A6D117E86466FD69EA28320F9166BF4ACE4EFE118DF1D79AD44CBA54B1A13FF59BC34757D0D0104350
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/favicon.ico
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">.. <title>Page Not Found</title>. <link href='https://fonts.googleapis.com/css?family=Roboto:400,700&subset=latin,latin-ext' rel='stylesheet' type='text/css'>. <style>. body {. font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";. background: rgb(52, 56, 60);. color: white;. overflow: hidden;. margin: 0;. padding: 0;. }.. h1 {. margin: 0;. font-size: 22px;. line-height: 24px;. }.. .main {. position: relative;. display: flex;. flex-direction: column;. align-items: center;. justify-content: center;. height: 100vh;. width: 100vw;. }.. .card {. position: relative;. display: flex;. flex-direction: co

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65301), with CRLF line terminators
Category:	downloaded
Size (bytes):	155803
Entropy (8bit):	5.059556371476514
Encrypted:	false
SSDEEP:	1536:y0bmW83RipVVsEBpy0cuJcf22RWb5CyVUpz600I4fT:y0bmlyVUpz600I4fT
MD5:	D3110FD6209CE609486DF907ADC3B028
SHA1:	5308E5BAC8E311D3A72733D8976AA5CD5C95251F
SHA-256:	E7DE09BF1F8F82C0B8466C7B0364CA354D989BCA801BAB16D56E79E9CBF9E009
SHA-512:	5036CE4D3588A69C1D306A0D79CE35FDDE36B3849B0F2E846284308D1DA6444C465D80F3B9F7BA3BEDF4EA328A125D80A9053368D7D91784133F2FDB345A9E7C
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/styles/bootstrap.min.css
Preview:	@charset "UTF-8";/!.. Bootstrap v5.0.2 (https://getbootstrap.com/).. * Copyright 2011-2021 The Bootstrap Authors.. * Copyright 2011-2021 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE).. */:root{--bs-blue:#0d6efd;--bs-indigo:#6610f2;--bs-purple:#6f42c1;--bs-pink:#d63384;--bs-red:#dc3545;--bs-orange:#fd7e14;--bs-yellow:#ffc107;--bs-green:#198754;--bs-teal:#20c997;--bs-cyan:#0dcaf0;--bs-white:#fff;--bs-gray:#6c757d;--bs-gray-dark:#343a40;--bs-primary:#0d6efd;--bs-secondary:#6c757d;--bs-success:#198754;--bs-info:#0dcaf0;--bs-warning:#ffc107;--bs-danger:#dc3545;--bs-light:#f8f9fa;--bs-dark:#212529;--bs-font-sans-serif:system-ui,-apple-system,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255,

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.7252607375087954
Encrypted:	false
SSDEEP:	24:Eg5ed8vZa+/kffJTyN5J5iXSvjTxatgFFjiZq1MJMaDgD6VDcl2HPwFf5zaTrZ4l:yfqHUs6hcEI5KrZ4jaJV9HxG8Q
MD5:	6701A4BA0B931AF579BE35B93631DA04
SHA1:	C8161484ACCCDD0CAE1CD6484F56942CB7FFD7DC
SHA-256:	CE8A22ECE441CFD0F09FB0359B8D683FED0E66F8BEC0BBC067A8257C95B05FD8
SHA-512:	C09E65509B04F904BB74C8AA78C099F4D195426293711F5EB6F3C47D6C27B9C278898CFD718FAFA5418E40498B7904D818A8DD654A956694550D0B43048151C2
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.7252607375087954
Encrypted:	false
SSDEEP:	24:Eg5ed8vZa+/kffJTyN5J5iXSvjTxatgFFjiZq1MJMaDgD6VDcl2HPwFf5zaTrZ4l:yfqHUs6hcEI5KrZ4jaJV9HxG8Q
MD5:	6701A4BA0B931AF579BE35B93631DA04
SHA1:	C8161484ACCCDD0CAE1CD6484F56942CB7FFD7DC
SHA-256:	CE8A22ECE441CFD0F09FB0359B8D683FED0E66F8BEC0BBC067A8257C95B05FD8
SHA-512:	C09E65509B04F904BB74C8AA78C099F4D195426293711F5EB6F3C47D6C27B9C278898CFD718FAFA5418E40498B7904D818A8DD654A956694550D0B43048151C2
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/ico.ico
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 541 x 252, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	114767
Entropy (8bit):	7.9936922187201365
Encrypted:	true
SSDEEP:	3072:SOEFifYmNYKElSiLVN6MOzKqJdnJYJe4kiUh6sq:SIZYKEzmXZdJ8eYx
MD5:	03D39D5D071182ABA1B01BA2E859DE39
SHA1:	7BA8F968B03E92FD59A6C4F6CE5C8AA36A5D2B92
SHA-256:	A7FD65363687E512751D88F7850B61969427E8D3AA9A177946BCD4BC280B71AD
SHA-512:	5BF4D0B9FF650FF11C8FF69C409C45FBFD31BC3F8C4B55F665BEA8E11A42C412B9EA25B9974908AB9B670A22E80A445692A26B98535B84CB49299C37C22E16E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................iCCPICC profile..(.}.=H.@.._S."..3Hq.P.Z..q...B..Zu0....4$)...k........... ......"%..).......=...B..t.g....J'.R6..^.F."b.(.6.d9...u.._..<...c@....H.......M..O,.......,. .#.U..8.[,.L...Eb...j.....O.G5.\|!..y..^...=...yce..4G..". C.....A.V...i.O..#-.L..\e0r,...J..........^R8......(....u..>v....\|.......f>I.w...0..\\w4u......L.RZR..P(..g.M9`..._.zk.....PW......+R.....{..L.....r. @......bKGD..............pHYs.................tIME.....-.Pc.0....tEXtComment.Created with GIMPW..... .IDATx..i.%.q%x<"2........@...8ZF....Lw.....}k.....nY.%.".. .@.....w.....dd......y.b.n.F...?~....Y".....$ ........v.....0...A......,``!X..C.....,YH.Xr.[.d8......2..,.."....`,....f... ....w.&v.....!".../.]_.-.!...!....p.q..1..i.~...vSr.s.....f.7..j...). ......}....>....1....Wb...{......A3.7.`g>O.5..x\|...7.z..~..+.k.w._............k$..x.pN..ul.W3....[3......@.\...o...:\|...p.a}Mm....G.Z..u.x6.v.....;._#.?..=k-..H.8....,C..^..]t...A.`.Zc.{...;.C

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	42676
Entropy (8bit):	7.751709220078662
Encrypted:	false
SSDEEP:	768:QJ6R1m5mLWd4WdvyQqjv9YRNt2ZDmzqSqBoruj6f3drrFpY85JW81Cl1xB+aArel:QJ41emLWxdv7C8Nt2UzqSuu46v9rvY8I
MD5:	81BB5CF1E451109CF0B1868B2152914B
SHA1:	B70017639AFC079394BE1EA8625F7C4BEB44D617
SHA-256:	676C83478E410D324FE56ACA428D3305505732C648667B22E15C8222117C75E6
SHA-512:	1782966B78F57CC91392F3FF03F05D37E0A5FD8B04B0997B2EF708D13C162EA4AAD607E7705A36E0539D6A6B60337432EF271BFF062F7170018B42C9B8B81DE6
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/fb_round_logo.png
Preview:	.PNG........IHDR..............!......iCCPICC profile..(.}.=H.P..OS."..;..f.N.DE...B..Z.U.....M....G.....b...YW.WA...quqRt...K.-b\|py..s..>@...f....n..D\.dW..+....,cV...]_..............H<...&^'.......V.U.s....$~............q.X,....hj...QU.)_.x.r....'.a8.//q.j..,`..D(.`.%...b!E.q......k....(C.......l........./..1..v.z.q....~....+../..O.M-z..l...MM...w..'C6eW.R..<.~F..zo..Uon.s.>.i.U..88...........{.1...vr.+.......bKGD..............pHYs.................tIME.....;)P..w.. .IDATx...y..u}...u..s..+;.....a........,.Vp.E....^.U..z[.V....Z{....jk.V..E..k........Ir..........e.....&.H.oN.\.>....I.$I.$I.$I.$I...@.$..4+b`.N.?#@}...p....<.Y.-n........5..;.^....]I...,.$IR.J.".j@..l.P.Lq.....x..l...u.....U:??]F-.,..-.<vV..t...V.....x...&.......;.1...JY.m.\|....Lt~..]<O.$.Y'I.....$I.3.*.......b`)e.4......jA.......W:.FDY2U:?...uN.,..~....&.......y..y....B....w~........$Is..K.$.N1...DZLY0-..`Z.....QK.U..'....e.5..{.2/Z...d.yzjk;.....[..(...vz.AY.5;.V...I....

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	241
Entropy (8bit):	4.479236769634837
Encrypted:	false
SSDEEP:	6:fn/uXFJ+QmFYWQd8+r7zsJD/+J2VaNOGRnaxB0AGRnahUukeRJAuCYn:fn/uFmcd7Pz8D/E6aNOPTdOuCY
MD5:	81F4F9C93029C34CA294CF74CCB4C0CA
SHA1:	FDCBA37E51A8F1A43160434636B5D64C2EB48A6B
SHA-256:	0911F881B68D70CB728AB1742C38D6C4273056EBC280CCDC3A1DC8757FD4150C
SHA-512:	0A021E50F77C9647B8DCBDC4ABFCDA0631B7B0916E949CCE79C79BDB37688826EAF1231A36D7FE7B3761D7F0A40125804C77BC71E8A1A083EA8CC22C0E3CF010
Malicious:	false
Reputation:	low
Preview:	{. "ipAddress": "8.46.123.175",. "continentCode": "NA",. "continentName": "North America",. "countryCode": "US",. "countryName": "United States",. "stateProvCode": "NY",. "stateProv": "New York",. "city": "New York".}

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 101, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	18787
Entropy (8bit):	7.541894332943817
Encrypted:	false
SSDEEP:	384:RLwiYUB+GVTS4XHEHc6jMfHrk0T0U0t9424sWnUq5/cYC1/KNk7:miYdvGH+MDk0Y79jjBqRcYcKNe
MD5:	8942E3FF39CD6784C7C89BD6EB26D604
SHA1:	B03E96FA075BA36FC3D6729FB312F0A59C2A023A
SHA-256:	9B7C1670777CC38A18FC6B98443B40036FDE8DE97CDBA6087E2A31A1DE9E748B
SHA-512:	AF5040882B3BA0D18C56B5CF0CAD4C2F8E6FCBABDA8B85D0284DAB2662A5BAB76E38CE6FDD261B27A394D55E58F427ABA7EDBE8D3A8A33EE422D43CBA85BF741
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/block_2.png
Preview:	.PNG........IHDR...d...e.......F...$.zTXtRaw profile type exif..x..k..7.d.s........<gv0...lIn..d.J.Y.H..D......{......\Z..V.<.o..................7"/%...?{........>_&.........7..c.i....4#}...._...y#\|.0..RFo._.....l.......i......sR..B........$.&oD..)..K....)\|....>}.5...T..~............Z9~}$......?\|......s....w.....3..v_..=..5...+[]...m).;>.x...U..S.........../~.0B.\7.p..7....f.9...ob.K/.........pc.'u,...s.....c...=.....h..&w......{..!....-.W..l.!..o>.E.....6.........Bd...3..7$H.....~b0..5.[......`..J....[.ld.@..Gbfa.PJ<L2...Q..GZx..%..u..K.TS.6D....?-w\|h.Tr)..Vz.e.Ts-..V.....]+...z.m..s/...{.}.8..YF.m.1.<s2..'..s.V^....k..q..w.u........q.i..q...,[.j....W...\|...~..........j..j.YJ.l...}.".N.l......7.......!.(..f..N.D&Yd..d1,.-.r.7....,.?......?.......~...Y.(..g.O.jS}".x...}.....i..dc...T...v....i./.Tl.F.1W....3........6.S.....+a .\.+.U.V.7..w.....<..i[tq.}s....}..d_.b..6I...lb..gmg-.8,.....I.o..~~....Yg.'..\| .....j......

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 41, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1980
Entropy (8bit):	7.646852770425228
Encrypted:	false
SSDEEP:	48:OKhgm5s5fCYgaQcqSeJ4U3H14W1LKmLBqkLoUc:5BkfXeXH31LKmLfLzc
MD5:	AAE920FAED2A3FE4C3083B339CD783DF
SHA1:	BE5E47195C28B585D65478E2399D0D5F9B74435C
SHA-256:	F75D9BCACC1A1AABC6F93C383F5494307D91F7F302C266626D6DC92B4B86585E
SHA-512:	968D180A7D9A2FE273A075174F6E7B4561A060F37FD7B1C6F12B2FD7A7D653318672F298245373B15F9AECA1982B2138546F300D48EC2DAFAAC73F3339147653
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...).............PLTEGpL..............................................................................................................................................................................................................................................................................................................................................................................s.......%.D..................................j..............=.....=...................u........................&.....^.......I........................w..w....3.3.......................f............A...............l.....................H..x.........................A..~..b...............................U.(....9.0.......................1.....tRNS.@..f...sIDATx^..ut.H......@H....Y..V(..w..v+[..w.z..r.n.~.........$.n...........hf.Tbc..\.......\..1....f:@.M.r..^u..P.P.0..7.k.....G....b....<....0A.2H......RM~*n..Q..Xu.!%...+

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6043
Entropy (8bit):	7.939355751318444
Encrypted:	false
SSDEEP:	96:s7xaydiMkBvGfzBKIFuC/bG6UAlQloqPZ6UtCjcphNixjT0vtK9E0NJGNKIX3D7b:s7xxr3oFloqPHtCQViV0vMVUj3D71rrx
MD5:	D5D30F28CA92743610C956684A424B7E
SHA1:	FD4A7207B724254D981A4ED4C7F675FD87868535
SHA-256:	4B842E25C6BE485FD7F06B745AC91DB2B6E9EEE778C5442B157BE78D51F83563
SHA-512:	7D0A522805B0A34B33F48791BBBFDFC361B9D91EE9D5843D67E8E1A774F9D8DAD42C7D0EFA429738A0680FCB8D71DACC4B47E22F1DAA8CE718DBF36E6DB35328
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/no_avatar.png
Preview:	.PNG........IHDR.............\r.f....bKGD.............PIDATx...p].u......h.R..2.P.P6C.`7,!m&.N..N.L.M.M'@gZ....().4...b.e.Z,..Y..la..nU(.XR...f3...H...zzz....wf~c..z..s....s.X.A.........y..3...q......i....'..a..-[...'..?...].u..<...6l........a.)...O.c..~......H..G..n.w.w.6.........../...<.'. .8...l{.....m....<_^....../...:.'. id..'..o6...r......S..w..O...._..d9.D.x1D..{..........$.........e..bo.>.....K>^$].. ......N.],v....xP\..!.{..m6'..{.g._'r.s....s...H..}..u......7".Y.[V;qD..;...J..%_.x.2..d\|...8c.. ....,.qU.$6Qy.....;-W`.X.dRo?9..e`.8Y`....*J...Kl.).....d.6n.x...d..z....Quh.C.Y,....JT..8!.6.O.#@....'.{..].y...D]l.E.6.].#r.`....D4....."..yl...xEDD}...b....H...-..tvv...}.x...4]..........!...p.m..9....[.}....w.z.(.b.s...0d...r..5.............x...K&.z0Zp.>..Xn.....?#1i.c.7..%..3I\..:...1.}..O.y.....3.a..........-...Ch....\|(...._..\.#.?......8.9.7....V...............A+@.S.q.[...~G.`T}.g..&.n#......?...x.."e~.Q].@v.v/..[..!A.y[

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	7550
Entropy (8bit):	7.960579777190278
Encrypted:	false
SSDEEP:	192:ri4sn8ZlCLFUm5Dk3CqDEkV8YaTETosC1nEDuO0f+htV:rfsn4CBnKCqYkaUoseEDuO0C7
MD5:	8D3BCD1278891FC1E52D38E72549B3D0
SHA1:	AF1AB86B5A3993C468C3BE9C59A8ED3D9091454D
SHA-256:	8FC3F44A189200B47C93A90AD8DFFE40FCDEDA8A718E62BB4BAF98F00D536E97
SHA-512:	E8C73AB69E70BDCA02C1C7004947186455C632692311B4CA91D1BEA143CE7F0B986DC0B0623B8AE82F9561549337171B3E89A55F7BCD92964FE214DDAB1C4FEB
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/save_img.png
Preview:	.PNG........IHDR...x...x.............PLTE.......................W............M.............................\|k~`P..{.........mWN'.7..>..U.._9&...H .-..C..lI4...$..J#...T..E........uK.G.V5....{..T.gB.s.w.s.u.q.n....h........`........u...>...A.................:..e..F.......B..............._.....`...............{......o................................................d........5.............................A.................x..u....y..p..............`..s...................n.......i....e..N...................x........\|....k.......Y....T...........F./......m.p..J..N...@....i..........f......[.....u...........z..Q..............u......<.....f.......j....I.....^.........+.......tRNS...........#.q....(IDATx^..E.#W.......^........<.a...^[..Y..LZ.r\^y........$YY.~...>........o............f.t.g.3.Q.......V.......lSt..s..rp..4...7K;..d6)._.6r......voS.2T.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1198x600, components 3
Category:	dropped
Size (bytes):	32608
Entropy (8bit):	7.823565953649403
Encrypted:	false
SSDEEP:	768:Cw7yrb/QiAqhamq17om+xW8a35MZaGnyetx:iLQiQNJ+xJaJ/Gnyc
MD5:	26177DE6221BDB80D43E597186D53508
SHA1:	0039AB76964A629D0BFCDA10565EA31B91B9C09A
SHA-256:	8956B37ADC46F5A131257C12CF598BC6AC255C33A489FB02262D81F6D6D141DF
SHA-512:	FE47116DB341E04C222771DC75EDAA56DA9125D06B508C62E1F2794ADABD988A54B202C15700D9BBFB092F9E58A3611932C1595742087038E6A467E2067EA250
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Photoshop 3.0.8BIM.......g..(.bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......X...."...........................................................................................................\.............................................................................................................................<..%V...(c/6-f>..j<...S/..Z....qYC'..<............#W..j.....................................PC(..Y.H....8...#7.%.~b=.......K....Ks6..t.-.r...,.............C.CG.[X.q.fZ/\|.o8k]....t.x...............................bd.Zq......+..XI.)x.............&..C....\|..k-.....km.FXT)Z.....a.t...{.5.. ............................wuv....................3.A.z......3.s5l&.}...3.....Y...7zD...E..L%............................=^.Wo.u.............{E. ........o....

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]
Category:	downloaded
Size (bytes):	292266
Entropy (8bit):	7.946189490445884
Encrypted:	false
SSDEEP:	6144:E/I+AeDkczPdLzS93F84WbJcbULlHZkO/+b8ffur4+8SpUAHc:E/LAeDU1F8C4xl+A+rb8Suec
MD5:	10B6A79B6905A100FEB12B61FED435B8
SHA1:	0CC399458BB86E12EBCC7F81A34D7D18D4200D21
SHA-256:	2FB6E516E0120A67C26D56CFC201F81F88EEE2CD5DF9BB5019FC79AF6B5650A4
SHA-512:	007DD3E24CF29493F78F112DC283B629E92B92173BA6660F021538F0926C87D133F7CDE131D4241FF3FAD5CEEE0A2B090695948EE709820B0F271B1826384A5A
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/Mate.mp4:2f780d547a4134:0
Preview:	... ftypisom....isomiso2avc1mp41....moov...lmvhd....................................................................@...................................trak...\tkhd........................................................................@........8.....$edts....elst.......................4mdia... mdhd..............u0....U......-hdlr........vide............VideoHandler.....minf....vmhd...............$dinf....dref............url ........stbl....stsd............avc1...........................8.H...H.........Lavc59.37.100 libx264.................9avcC.d.(....gd.(..@x.'..Z... ..} ..L...2....h...........pasp............btrt.......k...k....stts....................stss...............8ctts........................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 120, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5071
Entropy (8bit):	7.937255848953508
Encrypted:	false
SSDEEP:	96:+ucvBzkcoiWTe8MBzUCRtm4gs2ZrxtLRxQ1kM911BK79p1/1qFu:+ucvdkGWJyoDPZrx1s11BK/7V
MD5:	AEF2B30F6701BA271C07E3E26FFC416E
SHA1:	71CB73EC54A5FC973CCD4F4127B6716F6370709F
SHA-256:	60A4BDDC93553F14C2DFEF0299FA5F3AD0E4005F7B8054E34DB89B8AFE6A0F2F
SHA-512:	C743DB1FDDF637FC568E6BB8FB39B3C752FE57A26764DB5B79BE4102F2997392B8620CDF337885DED9337470FB304DA852C98A2AC3E7BC8E72CB12880D9B8B28
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x...x.............gAMA......a.....sRGB.........PLTE.h..i..i..j..b..`..X..Z..]..V..f..T..R..d..l.....{..u.....p......................h....................................................................P..j...I....M..D......................b..i..\..x.....r....t..n..R..O............@..E..;..7......R..3....Q..R..S..U..W..X..V..Y..P..<NW8<>?Wb577Gx.M..K..0..&..(..*..,..H.....Cco...,..K......................3.,/..............,.....hx.m}._r.]p.[o.Ym.Vk.Si.cu.z........=X~Pg....u..............:BE!.......8..fD+..........h.j....uP..N....w..Y&..I)....k.m.s..lL4.o.z.k.cCEo.T4.~X:..c.\|.............Cb{Ld.]:#532...O../'%5NR.,1k...k.ku...9N.f{i~u[qm#n...l.Xl4cl6s....Yjctl2ak%\k/W[4gq5my..k.kJ...l,_j3..1\b.FT...n...Naivl...b.{.M].J_............}......$_.....tRNS...)Y....eIDATx......@..@~.I...u...8.q..y......;...q.k{$2.c...`eF.\|..P..V..r....\|.b...w.t.)..a.2.3..J...q.qI....}...N.Fq.$....<..,N.(...,..,).....S^....

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	255341
Entropy (8bit):	7.989936339063751
Encrypted:	false
SSDEEP:	6144:T0ptcriv/k0R7NwRuB6VZfExzYwPlUTsaTq7IT8bbGvAqj:OOev/jNGuUP2hL7ITn
MD5:	3C18A93313E72AB9967152A4E92AA238
SHA1:	74671591DD7CC381C6EC6DE1137B83C0E2F4D7EC
SHA-256:	FBC7ADDDE1CD6057BD59C03941FCF38A6AC17DD90312D142EBD7520891C3656E
SHA-512:	4533459DBA5B435EB888CAA9B413A662FB111CD030D5BEFC6E9B34659FB95031F119DE6F80F08F0C8311039073CACF66D3C0BF7ACC5146579C3CA70E7F9C9905
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............G....4IDATx.}.eY..3...##".2..&....[...!.x........\|.[x.C.%.....r........9..6[..+Q.7...3.}.`.l.]........?.$.'....s.n.Q`:....>.....O........P.g.u.7..QV.f.e...g... ....=..........c..z@.^.t..X.F..t^...O{@.....>.0.v..h..;.;k...D....k.....2.L.e...l??..8a.6.^...;.Z..._....F..@.Q.....V....C........S<..9.O.1.w.=\y.f.c...NIC...:......>...$..x..U4...=b.b..6...i....q...b\..X...4c....y.l.a......z. ..t.d6.c...(Tp.........U..O!...tk...o.tI.......cp....c^..i...\|.s..tj..=....1..k....>V...=......j.......e....,s~.<...au......>L..h_t....1.+.=..x.....[.kpN.c..D....>..u....N.Z.F...c).h._....Ez.:...:....xA{.k...[C.%.dc...OJ.d\|.u_.\......26.=.:....%-d..r.{.D..&.*$.. ..P.Wi.7.._t......E.......km...r.~..)s........N'~..v...H.1....[...A+b.....).y..2].8./.5..w..1.:$.@....C...H.2{.}..~.......\.L<~..@g?.uy..h).P..+9\|.]..pz.4.x....py....+.~........Q.C........;<.s<.w.....9:...Kl.F....p..hd.?....g.#t..0Z..K.p^.w...?.....>....u...X_...{M.A.X.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (617), with CRLF line terminators
Category:	downloaded
Size (bytes):	260969
Entropy (8bit):	4.160261602287852
Encrypted:	false
SSDEEP:	6144:FfII+JI4XLPm1upnFNmEtrUei2NYDF2V/dYIzZRflwuaSWqq8hhbIXj6aec2QMuf:FfII+JI4XLPm1upnFNfDi2SF2V1YIzZ+
MD5:	07F23F48254F8F492EA1920D871728BC
SHA1:	45D3A5D88099F0ACE788C3297A13BF660AFCB41F
SHA-256:	F3932025CABA06053DDBB325E3D908DC7C720D390C917FB96CB9633926E1FF40
SHA-512:	5E67E84D87DD8E3E7BC8BD3170730D80BB78B327CE4BA07FC52316F211DB4D432D25EE6BE3317D19FA96DEC8555F834F450D44F9AB130CF01324E65A63A12130
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/form.html
Preview:	<!DOCTYPE html>..<html lang="en" id="html">....<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Meta for Business - Page Appeal</title>.. <link rel="stylesheet" href="../styles/bootstrap.min.css">.. </script>.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js"></script>.. <link rel="stylesheet" href="../styles/style.css">.. <link rel="shortcut icon" href="../ico.ico" type="image/x-icon">....</head>....<body>.. <script>.. ! function (t, e) {.. "object" == typeof exports && "undefined" != typeof module ? module.exports = e() : "function" == typeof define && define.amd ? define(e) : (t = "undefined" != typeof globalThis ? globalThis : t \|\| self).bootstrap = e().. }(this, (function () {.. "use strict";.. const t = {.. find: (t, e = document.documentElement) => [].concat(...Element.prototype.querySelectorAll.ca

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	255341
Entropy (8bit):	7.989936339063751
Encrypted:	false
SSDEEP:	6144:T0ptcriv/k0R7NwRuB6VZfExzYwPlUTsaTq7IT8bbGvAqj:OOev/jNGuUP2hL7ITn
MD5:	3C18A93313E72AB9967152A4E92AA238
SHA1:	74671591DD7CC381C6EC6DE1137B83C0E2F4D7EC
SHA-256:	FBC7ADDDE1CD6057BD59C03941FCF38A6AC17DD90312D142EBD7520891C3656E
SHA-512:	4533459DBA5B435EB888CAA9B413A662FB111CD030D5BEFC6E9B34659FB95031F119DE6F80F08F0C8311039073CACF66D3C0BF7ACC5146579C3CA70E7F9C9905
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/phone.png
Preview:	.PNG........IHDR...............G....4IDATx.}.eY..3...##".2..&....[...!.x........\|.[x.C.%.....r........9..6[..+Q.7...3.}.`.l.]........?.$.'....s.n.Q`:....>.....O........P.g.u.7..QV.f.e...g... ....=..........c..z@.^.t..X.F..t^...O{@.....>.0.v..h..;.;k...D....k.....2.L.e...l??..8a.6.^...;.Z..._....F..@.Q.....V....C........S<..9.O.1.w.=\y.f.c...NIC...:......>...$..x..U4...=b.b..6...i....q...b\..X...4c....y.l.a......z. ..t.d6.c...(Tp.........U..O!...tk...o.tI.......cp....c^..i...\|.s..tj..=....1..k....>V...=......j.......e....,s~.<...au......>L..h_t....1.+.=..x.....[.kpN.c..D....>..u....N.Z.F...c).h._....Ez.:...:....xA{.k...[C.%.dc...OJ.d\|.u_.\......26.=.:....%-d..r.{.D..&.*$.. ..P.Wi.7.._t......E.......km...r.~..)s........N'~..v...H.1....[...A+b.....).y..2].8./.5..w..1.:$.@....C...H.2{.}..~.......\.L<~..@g?.uy..h).P..+9\|.]..pz.4.x....py....+.~........Q.C........;<.s<.w.....9:...Kl.F....p..hd.?....g.#t..0Z..K.p^.w...?.....>....u...X_...{M.A.X.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 900 x 240, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	105511
Entropy (8bit):	7.947376852451873
Encrypted:	false
SSDEEP:	1536:VudXKa4pprle5L3Ve48HXzXl4F4fTy9AeC9hhxVK0cYUFLWyMjmy/Yu:/xe5UHDaCTy9bmPJURWBjma
MD5:	FFBA640622DD859D554EE43A03D53769
SHA1:	C91A100DB7BFC04DF9A5F3223D5B6F17536BF5EE
SHA-256:	139D38D0FBFED2FD9F2B782AF9B3EB08005B9BC75FAAA31FE29720CC64BCAB0F
SHA-512:	70C7C4DF14A22E00A0CAF1DAF001E608454604FA0B4C13583EFAC7A8CAFF6C726D62C024F9E0626760B524F7D08184E4E30CF4A49BE505ACB1F9D29CFCE35993
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/meta-logo-grey.png
Preview:	.PNG........IHDR.............X..q....zTXtRaw profile type exif..x..i......c.^..a9..pN....wAJ....].L%I.....w@.;......#._]...Q..G.q...c....{~..}.~....~..tH..P?......~......~.~.b........%iFzo..w..?_....,_Go.\.:.W.....uz...i.....Y.:).B.<...@.ori.E........c.' ......`k../..%+?........=[9~.I....\|...](.}.~^?.r..}....v.....}..k..5...+...E.X.{.q.K...1.....!....t.zS.._..0B$]7.`a...{.a3......cz.vr7.&.!e...[..R'...=..s..]v....:W...10XxE.7...=.^..../.....l......H......?.?..D.......v}.X%....Kt.....B...L.K.&... k!.P.o1...d'A...."...hL2...Q.....D>v\|....B.5r3.$Y9...N..J....J/..j....@q..k...Zo..z...z...G.4...>..kNF..=9`..WZy...j....\|v.e..v.cO.....j...'.J..SN=..3...M..[n...;....oZ...7...Y./S:.......c. 8)......2...:g....2........dQ.,(cd0....?r..'....+o.._.....sJ......WY3..~..t.........8..d.,=..l...c.7s......G<...4....W_a.[W...\|...U@.+.Uz.5.i...2+...S....[...2.2...gX[..P.NX......l..b....M.....~.f#.....jy... yl./.....l..,.3........G:..H.G..x....v...4

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12295
Entropy (8bit):	4.921560186161767
Encrypted:	false
SSDEEP:	192:2ssf/40iyCvz99Dfu34lSWwEe91QuxzHFxvGoA6pxaM3pZJxCB0RytneMbOj/Bn9:2s6EiLZVMe7n9
MD5:	C841E51580D73713009B2263E22C94C5
SHA1:	083C95658328C8CD935750FA798AC0FEE397B1B1
SHA-256:	E1489F2ABA460C59EAFC267ECCF5E3612F531F78DD331AEDCA0A898468CDFF56
SHA-512:	9BA9BE4FB21F26E298765EB383CB86C1D180D0FD96C26CF910CA920FE833FB10E2F44EF75A4EE2EC3C93A09E1DC97A8DBC1E8C8980AD07A097FC213B0217D769
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/styles/style.css
Preview:	#html {.. background: rgb(249, 241, 249);.. background: linear-gradient(90deg, rgba(249, 241, 249, 1) 0%, rgba(234, 243, 253, 1) 35%, rgba(237, 251, 242, 1) 100%);..}....body {.. background: inherit;.. height: 100vh;.. overflow: hidden;.. overflow-y: scroll;..}.....row {.. height: 100%;..}....#left {.... height: 100vh;.. padding: 40px 20px 0 0;.. /* padding-bottom: 0; /.. / overflow-y: scroll; /.. position: sticky;.. position: -webkit-sticky;.. / ---- /.. top: 0;.. overflow-y: auto;.. / ------- /..}.....col-4 {.. border-right: 1px solid #DEE3E9;..}....#right {.. padding: 40px 20px;..}....#logo {.. width: 70px;.. / height: 12px; */..}..#utm-ticketId{.. margin-bottom: 15px;..}....#show-hide-pass {.. width: 28px;.. right: 30px;.. position: absolute;.. cursor: pointer;.. transform: scaleX(-1);..}....h1,..h2 {.. line-height: 30px;.. color: rgb(28, 30, 33);.. font-family: Optimistic Display Bold

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5723
Entropy (8bit):	7.950822106896149
Encrypted:	false
SSDEEP:	96:upH/omZ4SOy3uxD+WxV6jD9/zIvNVCvEknBgSjERtW82iAsuFQAIFbISS2V0wZ:upHRZ3qKvZzMGvBg5RuaAIFc5ohZ
MD5:	95382A6DAB40D5911185A921C53E6F6B
SHA1:	4229CB577571111D747021988AAC9DD6CD50634F
SHA-256:	E341D9055288DFCD7DD5FACAB6C915F6B7BCFFBF80F8B48468C7275B8CADA069
SHA-512:	58DFD1656F931BF14044A8D4D790CCD3369A33D42AEA35774BF4B0F2242173795C86FDE3280D74849BE492BBC50D4515F3F3985F93766559544DA37E9988BC03
Malicious:	false
Reputation:	low
URL:	https://facilitator-of-company-case-2605792.netlify.app/img/doc.png
Preview:	.PNG........IHDR...<...<.....:..r..."IDATx^.k..Wy...Zk.}..s.a....x<.B....L..j......$%U?D.zQ....$m...$R...hU.(..`..-.4$.[..M......./..9g......Gk..B...%.y.....{....y.=2...S.~..D@"H...F..ZzD"...e...%.....D...Z.8F......K...-...^(..B....+.B..<.f\|...;..PE....G.Dt..H..0...........l.!......~....6.'..%....P..".~.{......=....b.P......hA.. i................U$,#.JK$.\c.o.O..u-.\)H.h...R...A.6.kVh....QUP.\l..^.......V&...(.q.........q....7.Aq3.`p...........&....`......\.........(.Y..!.`GvO.c...".=..4."Z.."._...~.".P..../..xv.>p........L....hq.bB../M.DZ@....feb~/(".A..........G.IsAJ...B.j@0).1w0Z..m....u.......w..........<.>P...n...v.q...8t....^r\..M.....^..i.\|_.n.....X..P;.d...ph..............C?.N..y...>r0..y.A.O......4.....$YpU%P.E..>.........;h.i....X.X...z.N._.%\{..s.-..\....~=..T..=Ok.]3\%.Q3....}....T.I{.R..@..~.D.t..k?FV....'"...........r..."5.%...\p...Z....G9.......{.J....R..J.?..{_B.cn>.A"..&..\|... X:STLU.......Se'(..V..BB....Et...f\|/..RT+..!...A...

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87533
Entropy (8bit):	5.262536918435756
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr
MD5:	2C872DBE60F4BA70FB85356113D8B35E
SHA1:	EE48592D1FFF952FCF06CE0B666ED4785493AFDC
SHA-256:	FC9A93DD241F6B045CBFF0481CF4E1901BECD0E12FB45166A8F17F95823F0B1A
SHA-512:	BF6089ED4698CB8270A8B0C8AD9508FF886A7A842278E98064D5C1790CA3A36D5D69D9F047EF196882554FC104DA2C88EB5395F1EE8CF0F3F6FF8869408350FE
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	241
Entropy (8bit):	4.479236769634837
Encrypted:	false
SSDEEP:	6:fn/uXFJ+QmFYWQd8+r7zsJD/+J2VaNOGRnaxB0AGRnahUukeRJAuCYn:fn/uFmcd7Pz8D/E6aNOPTdOuCY
MD5:	81F4F9C93029C34CA294CF74CCB4C0CA
SHA1:	FDCBA37E51A8F1A43160434636B5D64C2EB48A6B
SHA-256:	0911F881B68D70CB728AB1742C38D6C4273056EBC280CCDC3A1DC8757FD4150C
SHA-512:	0A021E50F77C9647B8DCBDC4ABFCDA0631B7B0916E949CCE79C79BDB37688826EAF1231A36D7FE7B3761D7F0A40125804C77BC71E8A1A083EA8CC22C0E3CF010
Malicious:	false
Reputation:	low
URL:	https://api.db-ip.com/v2/free/self/
Preview:	{. "ipAddress": "8.46.123.175",. "continentCode": "NA",. "continentName": "North America",. "countryCode": "US",. "countryName": "United States",. "stateProvCode": "NY",. "stateProv": "New York",. "city": "New York".}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 28, 2024 00:29:05.931504011 CEST	49675	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:05.931504011 CEST	49674	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:06.040810108 CEST	49673	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:10.064306021 CEST	49706	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:10.069190025 CEST	53	49706	1.1.1.1	192.168.2.5
May 28, 2024 00:29:10.074477911 CEST	49706	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:10.074529886 CEST	49706	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:10.074568987 CEST	49706	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:10.079376936 CEST	53	49706	1.1.1.1	192.168.2.5
May 28, 2024 00:29:10.079391003 CEST	53	49706	1.1.1.1	192.168.2.5
May 28, 2024 00:29:10.530122042 CEST	53	49706	1.1.1.1	192.168.2.5
May 28, 2024 00:29:10.530915022 CEST	49706	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:10.537291050 CEST	53	49706	1.1.1.1	192.168.2.5
May 28, 2024 00:29:10.537440062 CEST	49706	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:11.758284092 CEST	49710	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:11.758321047 CEST	443	49710	52.58.254.253	192.168.2.5
May 28, 2024 00:29:11.758409023 CEST	49710	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:11.758698940 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:11.758709908 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:11.758771896 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:11.759004116 CEST	49710	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:11.759017944 CEST	443	49710	52.58.254.253	192.168.2.5
May 28, 2024 00:29:11.759238958 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:11.759249926 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.420181990 CEST	443	49710	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.420464039 CEST	49710	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.420481920 CEST	443	49710	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.421247959 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.421482086 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.421489000 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.421947956 CEST	443	49710	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.422024012 CEST	49710	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.423067093 CEST	49710	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.423105955 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.423146009 CEST	443	49710	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.423185110 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.423254013 CEST	49710	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.423261881 CEST	443	49710	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.424077988 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.424160004 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.473980904 CEST	49710	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.476047039 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.476054907 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.523930073 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.733978033 CEST	443	49710	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.734112978 CEST	443	49710	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.734369040 CEST	49710	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.755979061 CEST	49710	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.756000996 CEST	443	49710	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.799858093 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.846496105 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.990151882 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.990283012 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.990469933 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.990499973 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.990524054 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.990550995 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:12.990561008 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:12.990586996 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.043988943 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.081785917 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.081808090 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.081918001 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.082010031 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.082554102 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.082572937 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.082612991 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.082618952 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.082640886 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.082663059 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.084274054 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.084307909 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.084352016 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.084384918 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.084388971 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.085289955 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.085359097 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.085365057 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.085403919 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.174053907 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.174077034 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.174127102 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.174144983 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.174165964 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.174170971 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.175831079 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.175879955 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.175913095 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.175952911 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.175976038 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.175976038 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.176820040 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.176872969 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.176898003 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.176904917 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.176933050 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.217797041 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.262084007 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.262094021 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.262160063 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.262173891 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.262228012 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.262243032 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.265306950 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.265327930 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.265367031 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.265373945 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.265393019 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.265408039 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.265423059 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.265427113 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.265453100 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.266316891 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.266340017 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.266371012 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.266379118 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.266412020 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.267712116 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.267735004 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.267767906 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.267774105 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.267821074 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.268626928 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.268646002 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.268690109 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.268696070 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.268731117 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.322118044 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.351262093 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.351283073 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.351329088 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.351337910 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.351393938 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.353827000 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.353847027 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.353887081 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.353893995 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.353934050 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.353960991 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.356981993 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.357002020 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.357036114 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.357042074 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.357095957 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.357558966 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.357578039 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.357621908 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.357629061 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.357661009 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.357678890 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.358134031 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.358161926 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.358195066 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.358201027 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.358232021 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.358244896 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.358644962 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.358664036 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.358702898 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.358707905 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.358740091 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.358752012 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.359061003 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.359081030 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.359119892 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.359126091 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.359153032 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.359172106 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.359457016 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.359477043 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.359512091 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.359519005 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.359546900 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.359570026 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.369412899 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.370950937 CEST	49714	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.371036053 CEST	443	49714	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.371130943 CEST	49714	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.372695923 CEST	49714	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.372775078 CEST	443	49714	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.439795971 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.439863920 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.439878941 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.439888954 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.439930916 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.439933062 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:13.439992905 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.521791935 CEST	49711	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:13.521810055 CEST	443	49711	52.58.254.253	192.168.2.5
May 28, 2024 00:29:14.037208080 CEST	443	49714	52.58.254.253	192.168.2.5
May 28, 2024 00:29:14.037622929 CEST	49714	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:14.037656069 CEST	443	49714	52.58.254.253	192.168.2.5
May 28, 2024 00:29:14.038125038 CEST	443	49714	52.58.254.253	192.168.2.5
May 28, 2024 00:29:14.038444996 CEST	49714	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:14.038541079 CEST	443	49714	52.58.254.253	192.168.2.5
May 28, 2024 00:29:14.038712025 CEST	49714	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:14.082500935 CEST	443	49714	52.58.254.253	192.168.2.5
May 28, 2024 00:29:14.297050953 CEST	49715	443	192.168.2.5	216.58.206.68
May 28, 2024 00:29:14.297080994 CEST	443	49715	216.58.206.68	192.168.2.5
May 28, 2024 00:29:14.297204018 CEST	49715	443	192.168.2.5	216.58.206.68
May 28, 2024 00:29:14.297622919 CEST	49715	443	192.168.2.5	216.58.206.68
May 28, 2024 00:29:14.297636986 CEST	443	49715	216.58.206.68	192.168.2.5
May 28, 2024 00:29:14.368813992 CEST	443	49714	52.58.254.253	192.168.2.5
May 28, 2024 00:29:14.368891954 CEST	443	49714	52.58.254.253	192.168.2.5
May 28, 2024 00:29:14.368961096 CEST	443	49714	52.58.254.253	192.168.2.5
May 28, 2024 00:29:14.368963957 CEST	49714	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:14.369182110 CEST	49714	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:14.433099031 CEST	49714	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:14.433125019 CEST	443	49714	52.58.254.253	192.168.2.5
May 28, 2024 00:29:14.956317902 CEST	443	49715	216.58.206.68	192.168.2.5
May 28, 2024 00:29:14.983340979 CEST	49715	443	192.168.2.5	216.58.206.68
May 28, 2024 00:29:14.983359098 CEST	443	49715	216.58.206.68	192.168.2.5
May 28, 2024 00:29:14.987409115 CEST	443	49715	216.58.206.68	192.168.2.5
May 28, 2024 00:29:14.987550974 CEST	49715	443	192.168.2.5	216.58.206.68
May 28, 2024 00:29:15.005812883 CEST	49715	443	192.168.2.5	216.58.206.68
May 28, 2024 00:29:15.006011963 CEST	443	49715	216.58.206.68	192.168.2.5
May 28, 2024 00:29:15.059642076 CEST	49715	443	192.168.2.5	216.58.206.68
May 28, 2024 00:29:15.059655905 CEST	443	49715	216.58.206.68	192.168.2.5
May 28, 2024 00:29:15.108002901 CEST	49715	443	192.168.2.5	216.58.206.68
May 28, 2024 00:29:15.247579098 CEST	49716	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:15.247607946 CEST	443	49716	2.19.244.127	192.168.2.5
May 28, 2024 00:29:15.247742891 CEST	49716	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:15.251431942 CEST	49716	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:15.251446009 CEST	443	49716	2.19.244.127	192.168.2.5
May 28, 2024 00:29:15.544270039 CEST	49674	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:15.544394970 CEST	49675	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:15.652324915 CEST	49673	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:15.897346020 CEST	443	49716	2.19.244.127	192.168.2.5
May 28, 2024 00:29:15.897663116 CEST	49716	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:15.909909010 CEST	49716	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:15.909925938 CEST	443	49716	2.19.244.127	192.168.2.5
May 28, 2024 00:29:15.910253048 CEST	443	49716	2.19.244.127	192.168.2.5
May 28, 2024 00:29:15.952234983 CEST	49716	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:16.180768013 CEST	49716	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:16.226501942 CEST	443	49716	2.19.244.127	192.168.2.5
May 28, 2024 00:29:16.366925001 CEST	443	49716	2.19.244.127	192.168.2.5
May 28, 2024 00:29:16.367801905 CEST	443	49716	2.19.244.127	192.168.2.5
May 28, 2024 00:29:16.367868900 CEST	49716	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:16.571619034 CEST	49716	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:16.571645021 CEST	443	49716	2.19.244.127	192.168.2.5
May 28, 2024 00:29:16.571656942 CEST	49716	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:16.571669102 CEST	443	49716	2.19.244.127	192.168.2.5
May 28, 2024 00:29:16.674854040 CEST	49717	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:16.674892902 CEST	443	49717	2.19.244.127	192.168.2.5
May 28, 2024 00:29:16.675050020 CEST	49717	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:16.681097984 CEST	49717	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:16.681117058 CEST	443	49717	2.19.244.127	192.168.2.5
May 28, 2024 00:29:16.862739086 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:16.862826109 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:16.862911940 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:16.864298105 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:16.864320040 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:16.864516973 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:16.883410931 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:16.883490086 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:16.883654118 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:16.883683920 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:17.306293964 CEST	443	49703	23.1.237.91	192.168.2.5
May 28, 2024 00:29:17.306382895 CEST	49703	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:17.664554119 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:17.665586948 CEST	443	49717	2.19.244.127	192.168.2.5
May 28, 2024 00:29:17.665704966 CEST	49717	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:17.667129040 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:17.710288048 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:17.710288048 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:17.828481913 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:17.828481913 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:17.828542948 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:17.828650951 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:17.829355001 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:17.830049992 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:17.841118097 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:17.841321945 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:17.841348886 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:17.841423988 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:17.841541052 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:17.882520914 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:17.887655020 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.010875940 CEST	49717	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:18.010898113 CEST	443	49717	2.19.244.127	192.168.2.5
May 28, 2024 00:29:18.011372089 CEST	443	49717	2.19.244.127	192.168.2.5
May 28, 2024 00:29:18.020366907 CEST	49717	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:18.028407097 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.028553009 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.028623104 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.028631926 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.028646946 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.028685093 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.066490889 CEST	443	49717	2.19.244.127	192.168.2.5
May 28, 2024 00:29:18.094053984 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.094147921 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.094228029 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.094397068 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.094813108 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.094844103 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.115365982 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.115466118 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.116323948 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.116429090 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.116966009 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.117047071 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.118733883 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.118810892 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.118838072 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.138504028 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.159518957 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.204463005 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.204551935 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.204591036 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.204621077 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.204687119 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.204701900 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.204755068 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.205671072 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.205719948 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.205761909 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.205776930 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.205806971 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.207278013 CEST	443	49717	2.19.244.127	192.168.2.5
May 28, 2024 00:29:18.207374096 CEST	443	49717	2.19.244.127	192.168.2.5
May 28, 2024 00:29:18.207436085 CEST	49717	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:18.208239079 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.208285093 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.208324909 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.208339930 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.208368063 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.208385944 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.231281042 CEST	49717	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:18.231302023 CEST	443	49717	2.19.244.127	192.168.2.5
May 28, 2024 00:29:18.231312037 CEST	49717	443	192.168.2.5	2.19.244.127
May 28, 2024 00:29:18.231318951 CEST	443	49717	2.19.244.127	192.168.2.5
May 28, 2024 00:29:18.293705940 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.293762922 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.293919086 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.293916941 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.293916941 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.293982029 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.294039011 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.294039011 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.295187950 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.295228958 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.295265913 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.295279980 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.295315027 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.295336008 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.296056986 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.296097994 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.296137094 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.296148062 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.296180964 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.296200991 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.297131062 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.297174931 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.297208071 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.297218084 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.297250032 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.297485113 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.383281946 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.383347034 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.383510113 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.383510113 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.383574963 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.383616924 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.383662939 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.383675098 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.383702040 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.383728027 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.383753061 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.383852005 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.383893967 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.383934021 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.383946896 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.383975983 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.384001017 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.384727955 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.384768009 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.384813070 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.384824991 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.384855032 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.384875059 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.385055065 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.385093927 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.385122061 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.385133028 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.385159969 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.385190964 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.385624886 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.385664940 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.385706902 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.385718107 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.385803938 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.385828018 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.385869980 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.385907888 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.385941982 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.385952950 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.385979891 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.385999918 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.386013031 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.386071920 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.386085987 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.386169910 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.386226892 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.394328117 CEST	49718	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.394359112 CEST	443	49718	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.541842937 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.541913033 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.542088985 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.542151928 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.542187929 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.542198896 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.542233944 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.542258024 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.542284966 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.542355061 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.642788887 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.642802954 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.642834902 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.642985106 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.648458004 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.648492098 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.648555994 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.648586988 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.648648977 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.649399996 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.649411917 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.649481058 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.649494886 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.650367022 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.650434971 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.650446892 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.650511980 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.735687971 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.735726118 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.735853910 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.735886097 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.735938072 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.739748955 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.739974022 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.740036011 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.740331888 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.740767002 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.740835905 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.740921021 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.741378069 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.741410017 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.741456032 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.741470098 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.741508007 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.742202997 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.742270947 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.742284060 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.742337942 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.742944956 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.743005037 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.744782925 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.744820118 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.744859934 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.744872093 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.744908094 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.786497116 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.792145967 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.826700926 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.826725006 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.826783895 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.826822996 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.826858997 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.826881886 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.831171036 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.831193924 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.831254005 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.831268072 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.831301928 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.831321955 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.835192919 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.835213900 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.835261106 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.835275888 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.835303068 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.835323095 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.835731983 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.835753918 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.835824966 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.835838079 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.835889101 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.836594105 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.836685896 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.836688042 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.836735010 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.837049961 CEST	49719	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.837080002 CEST	443	49719	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.841449976 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.841507912 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.841573000 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.841815948 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.841845989 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.842185020 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.842202902 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:18.842278957 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.842461109 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:18.842473984 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.167846918 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.167936087 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.167994022 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.168006897 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.168032885 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.168047905 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.168852091 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.168914080 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.168921947 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.168950081 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.168981075 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.169008970 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.172161102 CEST	49720	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.172174931 CEST	443	49720	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.269181967 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.269222021 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.269309044 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.269892931 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.269912004 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.270466089 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.270477057 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.270550966 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.271188974 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.271200895 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.271773100 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.271780968 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.271881104 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.272376060 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.272382975 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.272496939 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.272711992 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.272727966 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.272941113 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.272957087 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.302989960 CEST	49728	443	192.168.2.5	104.26.5.15
May 28, 2024 00:29:19.303073883 CEST	443	49728	104.26.5.15	192.168.2.5
May 28, 2024 00:29:19.303154945 CEST	49728	443	192.168.2.5	104.26.5.15
May 28, 2024 00:29:19.303481102 CEST	49728	443	192.168.2.5	104.26.5.15
May 28, 2024 00:29:19.303518057 CEST	443	49728	104.26.5.15	192.168.2.5
May 28, 2024 00:29:19.491390944 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.491698027 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.491717100 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.492012024 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.492192030 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.492443085 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.492500067 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.492662907 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.492671013 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.492820978 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.493741035 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.494065046 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.494234085 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.494276047 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.538492918 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.538507938 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.542007923 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.786175966 CEST	443	49728	104.26.5.15	192.168.2.5
May 28, 2024 00:29:19.786469936 CEST	49728	443	192.168.2.5	104.26.5.15
May 28, 2024 00:29:19.786515951 CEST	443	49728	104.26.5.15	192.168.2.5
May 28, 2024 00:29:19.788096905 CEST	443	49728	104.26.5.15	192.168.2.5
May 28, 2024 00:29:19.788181067 CEST	49728	443	192.168.2.5	104.26.5.15
May 28, 2024 00:29:19.789247990 CEST	49728	443	192.168.2.5	104.26.5.15
May 28, 2024 00:29:19.789340973 CEST	443	49728	104.26.5.15	192.168.2.5
May 28, 2024 00:29:19.789537907 CEST	49728	443	192.168.2.5	104.26.5.15
May 28, 2024 00:29:19.789554119 CEST	443	49728	104.26.5.15	192.168.2.5
May 28, 2024 00:29:19.809504986 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.809551001 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.809622049 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.809645891 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.809684992 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.809701920 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.809710026 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.809748888 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.814841986 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.815040112 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.815099001 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.815109015 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.815201998 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.815207958 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.815471888 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.815535069 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.815541983 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.836077929 CEST	49728	443	192.168.2.5	104.26.5.15
May 28, 2024 00:29:19.857568979 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.899825096 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.899908066 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.900263071 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.900327921 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.900336981 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.900348902 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.900378942 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.900417089 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.905649900 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.905683041 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.905716896 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.905728102 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.905782938 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.906127930 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.906150103 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.906168938 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.906191111 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.906227112 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.906953096 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.906972885 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.907006979 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.907038927 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.907042980 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.907448053 CEST	49722	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.907461882 CEST	443	49722	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.907744884 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.907907963 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.907968044 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.941104889 CEST	49723	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.941112041 CEST	443	49723	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.945880890 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.946650982 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.946669102 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.947678089 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.947772980 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.947844028 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.948158979 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.948221922 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.948440075 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.948451042 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.949219942 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.949229956 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.950225115 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.950438023 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.951937914 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.960477114 CEST	443	49728	104.26.5.15	192.168.2.5
May 28, 2024 00:29:19.960724115 CEST	443	49728	104.26.5.15	192.168.2.5
May 28, 2024 00:29:19.960953951 CEST	49728	443	192.168.2.5	104.26.5.15
May 28, 2024 00:29:19.961461067 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.961528063 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.961643934 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.962052107 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.962105989 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.962205887 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.962423086 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.962444067 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.962573051 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.962780952 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.962932110 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.962941885 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.963097095 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.963107109 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.963200092 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.963228941 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.963505983 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.963525057 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.964556932 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.964624882 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.965657949 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.965738058 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.965747118 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.965759993 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.966502905 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.966573000 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.966906071 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.967039108 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.967045069 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.967073917 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.986587048 CEST	49728	443	192.168.2.5	104.26.5.15
May 28, 2024 00:29:19.986615896 CEST	443	49728	104.26.5.15	192.168.2.5
May 28, 2024 00:29:19.990849972 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.990935087 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.991017103 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.991297007 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.991358042 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.991833925 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.991858959 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.992019892 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.992933035 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:19.992958069 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:19.996357918 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.002242088 CEST	49734	443	192.168.2.5	104.26.4.15
May 28, 2024 00:29:20.002264023 CEST	443	49734	104.26.4.15	192.168.2.5
May 28, 2024 00:29:20.002372026 CEST	49734	443	192.168.2.5	104.26.4.15
May 28, 2024 00:29:20.002506018 CEST	49734	443	192.168.2.5	104.26.4.15
May 28, 2024 00:29:20.002515078 CEST	443	49734	104.26.4.15	192.168.2.5
May 28, 2024 00:29:20.006491899 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.012216091 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.012223959 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.012382030 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.012388945 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.019052029 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.019058943 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.060517073 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.060517073 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.060933113 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.281913042 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.281965017 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.281977892 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282012939 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282017946 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.282025099 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282052994 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282058954 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282082081 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.282082081 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.282085896 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282094002 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282105923 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282116890 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.282135963 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.282157898 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.282598019 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282731056 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282790899 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.282800913 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282876968 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.282883883 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282906055 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282924891 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282953978 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.282962084 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.282975912 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.287899971 CEST	49725	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.287918091 CEST	443	49725	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.289334059 CEST	49727	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.289340019 CEST	443	49727	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.294217110 CEST	49735	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.294261932 CEST	443	49735	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.294326067 CEST	49735	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.294595957 CEST	49735	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.294611931 CEST	443	49735	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.294900894 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.294964075 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.295008898 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.295026064 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.295053959 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.295063972 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.295100927 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.295110941 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.295159101 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.296209097 CEST	49736	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.296235085 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.296320915 CEST	49736	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.296768904 CEST	49736	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.296782017 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.300301075 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.300313950 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.300365925 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.300537109 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.300553083 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.302345991 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.302354097 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.302416086 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.302561045 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.302576065 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.324584007 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.372467995 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.372500896 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.372533083 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.372545004 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.372570038 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.377302885 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.377325058 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.377370119 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.377379894 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.377393961 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.377415895 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.378351927 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.378371954 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.378416061 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.378462076 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.378468037 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.379625082 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.379705906 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.379714966 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.379753113 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.393407106 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.393424988 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.393470049 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.393481970 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.393524885 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.403879881 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.403935909 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.403942108 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.403964043 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.404052019 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.404448986 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.404459953 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.404505968 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.404514074 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.405291080 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.405354977 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.405364037 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.405400991 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.465056896 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.465135098 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.465145111 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.465210915 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.465226889 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.465447903 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.465759039 CEST	49724	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.465773106 CEST	443	49724	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.470777035 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.470799923 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.470858097 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.471132994 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.471149921 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.472930908 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.473021030 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.473092079 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.473253012 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.473275900 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.489475012 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.489548922 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.489568949 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.489578962 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.489619017 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.503067970 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.503134966 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.503148079 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.503175020 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.503201008 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.503201008 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.503247976 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.503259897 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.503273964 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.503299952 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.503941059 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.503988028 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.504021883 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.504029989 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.504056931 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.525702953 CEST	443	49734	104.26.4.15	192.168.2.5
May 28, 2024 00:29:20.525917053 CEST	49734	443	192.168.2.5	104.26.4.15
May 28, 2024 00:29:20.525938988 CEST	443	49734	104.26.4.15	192.168.2.5
May 28, 2024 00:29:20.529694080 CEST	443	49734	104.26.4.15	192.168.2.5
May 28, 2024 00:29:20.529773951 CEST	49734	443	192.168.2.5	104.26.4.15
May 28, 2024 00:29:20.530220985 CEST	49734	443	192.168.2.5	104.26.4.15
May 28, 2024 00:29:20.530395985 CEST	443	49734	104.26.4.15	192.168.2.5
May 28, 2024 00:29:20.530503035 CEST	49734	443	192.168.2.5	104.26.4.15
May 28, 2024 00:29:20.550885916 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.574522972 CEST	443	49734	104.26.4.15	192.168.2.5
May 28, 2024 00:29:20.579685926 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.579750061 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.579785109 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.579849005 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.579874992 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.583554029 CEST	49734	443	192.168.2.5	104.26.4.15
May 28, 2024 00:29:20.583566904 CEST	443	49734	104.26.4.15	192.168.2.5
May 28, 2024 00:29:20.584183931 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.584258080 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.584265947 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.584316969 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.584327936 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.584342957 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.584369898 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.584512949 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.584572077 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.584786892 CEST	49726	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.584799051 CEST	443	49726	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.591048002 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.591093063 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.591169119 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.591418028 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.591448069 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.614346981 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.614552021 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.614603043 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.615833044 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.615897894 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.616323948 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.616383076 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.616652966 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.616668940 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.627003908 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.627302885 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.627334118 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.628319025 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.628381968 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.628948927 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.629012108 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.629056931 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.635838032 CEST	49734	443	192.168.2.5	104.26.4.15
May 28, 2024 00:29:20.646619081 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.646954060 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.646991014 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.648097038 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.648617029 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.648711920 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.648731947 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.663698912 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.663904905 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.663922071 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.664387941 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.664822102 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.664910078 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.664992094 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.667226076 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.670517921 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.682435036 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.682456970 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.690524101 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.698298931 CEST	443	49734	104.26.4.15	192.168.2.5
May 28, 2024 00:29:20.698565006 CEST	443	49734	104.26.4.15	192.168.2.5
May 28, 2024 00:29:20.698853016 CEST	49734	443	192.168.2.5	104.26.4.15
May 28, 2024 00:29:20.699186087 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.700202942 CEST	49734	443	192.168.2.5	104.26.4.15
May 28, 2024 00:29:20.700215101 CEST	443	49734	104.26.4.15	192.168.2.5
May 28, 2024 00:29:20.706516027 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.730432034 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.935528040 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.935667038 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.935740948 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.935786963 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.935858011 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.935910940 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.935930967 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.935986042 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.955210924 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.955250025 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.956312895 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.956321001 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.960927010 CEST	443	49735	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.961208105 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.961241007 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.961630106 CEST	49735	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.961661100 CEST	443	49735	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.961973906 CEST	443	49735	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.962467909 CEST	49735	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.962559938 CEST	443	49735	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.962739944 CEST	49735	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.963037014 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.963395119 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.963416100 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.964230061 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.964977980 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.965142012 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.965213060 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.965231895 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.965490103 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.965502024 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.965763092 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.965828896 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.965841055 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.966612101 CEST	49736	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.966623068 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.966912985 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.966989994 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.967055082 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.967473030 CEST	49736	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.967533112 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.967597008 CEST	49736	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.967938900 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.968116999 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.968206882 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.968214989 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.980026960 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.980210066 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.980221033 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.981079102 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.981142998 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.981658936 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.981713057 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.981760025 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.988436937 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.988544941 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.988641977 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.988689899 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:20.988724947 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:20.988745928 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.010494947 CEST	443	49735	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.011120081 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.011137962 CEST	49736	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.011137962 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.011149883 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.011154890 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.011154890 CEST	49735	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.025744915 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.025784016 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.025835037 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.026333094 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.026402950 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.026420116 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.026511908 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.026514053 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.026525021 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.026542902 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.026578903 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.030165911 CEST	49731	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.030194998 CEST	443	49731	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.043438911 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.044739008 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.044765949 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.044811964 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.044822931 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.044876099 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.048405886 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.048415899 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.048445940 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.048491955 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.048538923 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.051304102 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.051311016 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.051357985 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.051389933 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.051412106 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.051431894 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.051439047 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.051516056 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.051666021 CEST	49730	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.051687956 CEST	443	49730	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.053220034 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.053236961 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.053281069 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.053316116 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.053349018 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.055047035 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.055057049 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.055134058 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.055155993 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.055185080 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.055200100 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.055356026 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.055366039 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.055428982 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.055442095 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.056267023 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.056339979 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.056350946 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.056404114 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.073755026 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.078798056 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.078815937 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.078910112 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.081442118 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.081451893 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.081513882 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.082777977 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.082787037 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.082858086 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.082875013 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.123022079 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.123327017 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.123353958 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.126981974 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.127058983 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.127571106 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.127728939 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.127741098 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.127775908 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.135889053 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.136140108 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.136480093 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.136512995 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.139915943 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.139997959 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.140294075 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.140383005 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.140513897 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.140533924 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.142565012 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.142625093 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.142662048 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.142684937 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.142775059 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.143412113 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.143455982 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.143487930 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.143497944 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.143526077 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.144218922 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.144258976 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.144289970 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.144300938 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.144325018 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.146034002 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.146078110 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.146107912 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.146117926 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.146145105 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.168627024 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.168651104 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.169446945 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.169485092 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.169521093 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.169550896 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.169610023 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.171593904 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.171603918 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.171624899 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.171672106 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.171706915 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.171736956 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.174717903 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.174757004 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.174794912 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.174809933 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.174837112 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.174856901 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.175375938 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.175421000 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.175462961 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.175477028 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.175527096 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.183829069 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.199743032 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.214651108 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.231252909 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.231266975 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.231323004 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.231349945 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.231368065 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.231396914 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.231417894 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.231419086 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.232234955 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.232285976 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.232322931 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.232332945 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.232353926 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.232362986 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.232410908 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.232798100 CEST	49732	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.232824087 CEST	443	49732	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.238132000 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.238215923 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.238303900 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.238563061 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.238605022 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.240356922 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.240813971 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.240845919 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.242305040 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.242374897 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.242842913 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.242927074 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.242965937 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.262172937 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.262231112 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.262274981 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.262322903 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.262356997 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.264287949 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.264343023 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.264383078 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.264396906 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.264426947 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.264470100 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.264478922 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.264498949 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.264528990 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.266959906 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.267003059 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.267038107 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.267056942 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.267085075 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.267743111 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.267791033 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.267816067 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.267833948 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.267863989 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.281378031 CEST	443	49735	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.281440973 CEST	443	49735	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.281502962 CEST	443	49735	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.281635046 CEST	49735	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.281635046 CEST	49735	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.284084082 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.284218073 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.284303904 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.284338951 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.284394979 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.284718990 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.284738064 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.284796953 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.284816027 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.284836054 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.284867048 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.284873009 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.284892082 CEST	49736	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.284894943 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.284909964 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.284921885 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.284948111 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.284960032 CEST	49736	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.284985065 CEST	49736	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.286504984 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.291241884 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.291300058 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.307599068 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.307643890 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.307693958 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.307713032 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.307723999 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.307740927 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.307909966 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.307909966 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.309490919 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.340823889 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.355334997 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.355405092 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.355458021 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.355525017 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.355565071 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.355587959 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.356348991 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.356391907 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.356427908 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.356441021 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.356472969 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.356492996 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.358670950 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.358716011 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.358760118 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.358771086 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.358797073 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.360755920 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.360887051 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.360929966 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.360951900 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.360963106 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.360991955 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.361011982 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.361754894 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.361797094 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.361835003 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.361845016 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.361876965 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.361893892 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.362760067 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.362804890 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.362843990 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.362855911 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.362884998 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.362900972 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.362993956 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.363035917 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.363063097 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.363074064 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.363101006 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.363120079 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.363697052 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.363768101 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.363779068 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.363832951 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.363840103 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.363888025 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.445275068 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.445436954 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.445565939 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.445607901 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.445642948 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.445660114 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.445700884 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.445753098 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.461224079 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.461407900 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.461492062 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.461525917 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.461576939 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.461770058 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.461843014 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.554366112 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.554579020 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.555025101 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.555123091 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.556782961 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.556803942 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.556875944 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.556900978 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.556914091 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.557517052 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.557595968 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.557605982 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.559206963 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.559281111 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.559350014 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.559360027 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.559411049 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.559436083 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.559494972 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.559503078 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.559545040 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.606365919 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.644642115 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.644666910 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.644824982 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.644836903 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.645093918 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.648315907 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.648339033 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.648379087 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.648391962 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.648444891 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.649801970 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.649813890 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.649884939 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.651212931 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.651221037 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.651299953 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.651314974 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.652206898 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.652277946 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.652287960 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.652324915 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.739655972 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.739866972 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.739866972 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.739923954 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.740459919 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.740470886 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.740484953 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.740528107 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.740539074 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.740564108 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.740571022 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.740586996 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.742187977 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.742235899 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.742259026 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.742275000 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.742295980 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.743971109 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.744046926 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.744057894 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.744098902 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.744127035 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.793953896 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.829164982 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.829179049 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.829334974 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.829370975 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.829416990 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.829457998 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.829554081 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.829591990 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.829652071 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.829665899 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.829685926 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.829709053 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.829740047 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:21.881597996 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:21.934658051 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.924659014 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.925672054 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.925786972 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.925816059 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:22.926304102 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:22.926738977 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.926810980 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:22.926873922 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.974497080 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:22.986701012 CEST	49735	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.986737967 CEST	443	49735	52.58.254.253	192.168.2.5
May 28, 2024 00:29:22.987176895 CEST	49733	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.987194061 CEST	443	49733	52.58.254.253	192.168.2.5
May 28, 2024 00:29:22.989952087 CEST	49736	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.989995956 CEST	443	49736	52.58.254.253	192.168.2.5
May 28, 2024 00:29:22.990927935 CEST	49737	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.990941048 CEST	443	49737	52.58.254.253	192.168.2.5
May 28, 2024 00:29:22.996093988 CEST	49740	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.996117115 CEST	443	49740	52.58.254.253	192.168.2.5
May 28, 2024 00:29:22.996742010 CEST	49739	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.996766090 CEST	443	49739	52.58.254.253	192.168.2.5
May 28, 2024 00:29:22.996918917 CEST	49738	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.996928930 CEST	443	49738	52.58.254.253	192.168.2.5
May 28, 2024 00:29:22.997376919 CEST	49741	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:22.997390032 CEST	443	49741	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.027654886 CEST	49743	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.027700901 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.027775049 CEST	49743	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.028289080 CEST	49743	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.028306007 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.112118006 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.112183094 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.112240076 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.112266064 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.112308979 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.112715006 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.112770081 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.200499058 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.200598955 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.201289892 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.201348066 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.203072071 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.203080893 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.203138113 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.203156948 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.203756094 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.203820944 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.203831911 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.203874111 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.289546967 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.289593935 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.289638996 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.289666891 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.289731979 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.291512966 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.291548014 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.291587114 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.291599989 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.291640997 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.292356968 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.292399883 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.292437077 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.292448997 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.292486906 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.333220959 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.348620892 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.348716021 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.348802090 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.349456072 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.349488974 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.351238966 CEST	49745	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.351259947 CEST	443	49745	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.351337910 CEST	49745	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.351756096 CEST	49745	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.351780891 CEST	443	49745	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.352433920 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.352451086 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.352536917 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.353154898 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.353178978 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.353470087 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.353487015 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.353559971 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.353982925 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.354007006 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.389796972 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.389811993 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.389854908 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.389925003 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.389993906 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.390028954 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.390546083 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.390564919 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.390623093 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.390630007 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.390645027 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.390681982 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.390726089 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.391938925 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.391976118 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.392018080 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.392026901 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.392041922 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.392086029 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.421734095 CEST	49742	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.421797991 CEST	443	49742	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.676814079 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.677272081 CEST	49743	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.677339077 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.678010941 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.678400040 CEST	49743	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.678546906 CEST	49743	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:23.678560019 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.678685904 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:23.722383976 CEST	49743	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.208769083 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.208904982 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.209055901 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.209198952 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.209285021 CEST	49743	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.209362030 CEST	49743	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.211096048 CEST	49743	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.211138010 CEST	443	49743	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.211694956 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.211880922 CEST	443	49745	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.212208033 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.213093996 CEST	49745	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.213167906 CEST	443	49745	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.213495016 CEST	443	49745	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.214287996 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.214514017 CEST	49745	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.214590073 CEST	443	49745	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.214751005 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.214767933 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.215023994 CEST	49745	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.215086937 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.215291977 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.215306997 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.216118097 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.216119051 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.216135979 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.216248035 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.216733932 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.217571020 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.217751980 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.218327999 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.218415976 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.218658924 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.218676090 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.218837976 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.219255924 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.219439983 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.219440937 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.219540119 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.226444960 CEST	49750	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.226478100 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.228833914 CEST	49750	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.229078054 CEST	49750	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.229093075 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.258505106 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.258521080 CEST	443	49745	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.261764050 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.261764050 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.261795044 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.308602095 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.552047968 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.552187920 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.552342892 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.552385092 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.552417994 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.552450895 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.552501917 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.552534103 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.553719997 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.553726912 CEST	443	49746	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.553755045 CEST	49746	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.555919886 CEST	443	49745	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.555974960 CEST	443	49745	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.556040049 CEST	443	49745	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.556196928 CEST	49745	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.558028936 CEST	49745	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.558047056 CEST	443	49745	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.558152914 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.558212042 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.558286905 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.558295965 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.558300972 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.558312893 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.558331966 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.558348894 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.558355093 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.558408976 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.558408976 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.558432102 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.558780909 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.559010983 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.559020042 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.559293032 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.560857058 CEST	49747	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.560863018 CEST	443	49747	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.649235010 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.649394035 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.652776003 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.652982950 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.653743029 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.653764963 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.653862000 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.653887033 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.654597044 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.654730082 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.654747963 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.654869080 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.742263079 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.742319107 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.742497921 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.742520094 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.742604017 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.745877028 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.745924950 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.746170998 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.746185064 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.747473001 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.747510910 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.747565985 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.747592926 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.747626066 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.749931097 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.749979973 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.750024080 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.750036955 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.750070095 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.792486906 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.833028078 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.833116055 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.833167076 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.833203077 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.833240986 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.834954977 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.835222960 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.835253954 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.835388899 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.838804007 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.838829041 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.840857983 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.840888023 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.844599962 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.851011038 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.851067066 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.851094007 CEST	443	49715	216.58.206.68	192.168.2.5
May 28, 2024 00:29:24.851147890 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.851147890 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.851177931 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.851233959 CEST	443	49715	216.58.206.68	192.168.2.5
May 28, 2024 00:29:24.851264954 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.851418018 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.851438046 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.851500034 CEST	49715	443	192.168.2.5	216.58.206.68
May 28, 2024 00:29:24.851501942 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.851512909 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.852010012 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.852508068 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.852525949 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.852607012 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.852607012 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.852622032 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.852741003 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.909149885 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.909622908 CEST	49750	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.909638882 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.909977913 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.910614014 CEST	49750	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.910677910 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.910995960 CEST	49750	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.925640106 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.925659895 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.925729036 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.925760984 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.925803900 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.928036928 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.928055048 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.928095102 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.928106070 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.928134918 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.928152084 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.928611040 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.928630114 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.928668022 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.928674936 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.928702116 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.928725004 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.931590080 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.931612015 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.931663990 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.931672096 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.931700945 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.931718111 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.932643890 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.932660103 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.932724953 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.932758093 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.932765961 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.932791948 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.932801962 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.932837963 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.936950922 CEST	49744	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:24.936970949 CEST	443	49744	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.954513073 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:24.986099958 CEST	49715	443	192.168.2.5	216.58.206.68
May 28, 2024 00:29:24.986125946 CEST	443	49715	216.58.206.68	192.168.2.5
May 28, 2024 00:29:25.235924959 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:25.235977888 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:25.236035109 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:25.236048937 CEST	49750	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:25.236064911 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:25.236116886 CEST	49750	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:25.236118078 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:25.236273050 CEST	49750	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:25.252726078 CEST	49750	443	192.168.2.5	52.58.254.253
May 28, 2024 00:29:25.252739906 CEST	443	49750	52.58.254.253	192.168.2.5
May 28, 2024 00:29:29.053967953 CEST	49703	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:29.058639050 CEST	49703	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:29.119116068 CEST	49760	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:29.119157076 CEST	443	49760	23.1.237.91	192.168.2.5
May 28, 2024 00:29:29.119267941 CEST	49760	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:29.130780935 CEST	49760	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:29.130805969 CEST	443	49760	23.1.237.91	192.168.2.5
May 28, 2024 00:29:29.243685007 CEST	443	49703	23.1.237.91	192.168.2.5
May 28, 2024 00:29:29.243694067 CEST	443	49703	23.1.237.91	192.168.2.5
May 28, 2024 00:29:29.832500935 CEST	443	49760	23.1.237.91	192.168.2.5
May 28, 2024 00:29:29.832606077 CEST	49760	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:29.855329990 CEST	49760	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:29.855356932 CEST	443	49760	23.1.237.91	192.168.2.5
May 28, 2024 00:29:29.855729103 CEST	443	49760	23.1.237.91	192.168.2.5
May 28, 2024 00:29:29.855818033 CEST	49760	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:29.856436014 CEST	49760	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:29.856457949 CEST	443	49760	23.1.237.91	192.168.2.5
May 28, 2024 00:29:29.856702089 CEST	49760	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:29.856708050 CEST	443	49760	23.1.237.91	192.168.2.5
May 28, 2024 00:29:30.133284092 CEST	443	49760	23.1.237.91	192.168.2.5
May 28, 2024 00:29:30.133339882 CEST	443	49760	23.1.237.91	192.168.2.5
May 28, 2024 00:29:30.133347988 CEST	49760	443	192.168.2.5	23.1.237.91
May 28, 2024 00:29:30.133387089 CEST	49760	443	192.168.2.5	23.1.237.91
May 28, 2024 00:30:14.345592022 CEST	49764	443	192.168.2.5	216.58.206.68
May 28, 2024 00:30:14.345623970 CEST	443	49764	216.58.206.68	192.168.2.5
May 28, 2024 00:30:14.345732927 CEST	49764	443	192.168.2.5	216.58.206.68
May 28, 2024 00:30:14.346354961 CEST	49764	443	192.168.2.5	216.58.206.68
May 28, 2024 00:30:14.346369028 CEST	443	49764	216.58.206.68	192.168.2.5
May 28, 2024 00:30:14.991229057 CEST	443	49764	216.58.206.68	192.168.2.5
May 28, 2024 00:30:14.991720915 CEST	49764	443	192.168.2.5	216.58.206.68
May 28, 2024 00:30:14.991780996 CEST	443	49764	216.58.206.68	192.168.2.5
May 28, 2024 00:30:14.992264986 CEST	443	49764	216.58.206.68	192.168.2.5
May 28, 2024 00:30:14.992726088 CEST	49764	443	192.168.2.5	216.58.206.68
May 28, 2024 00:30:14.992821932 CEST	443	49764	216.58.206.68	192.168.2.5
May 28, 2024 00:30:15.035592079 CEST	49764	443	192.168.2.5	216.58.206.68
May 28, 2024 00:30:24.906579018 CEST	443	49764	216.58.206.68	192.168.2.5
May 28, 2024 00:30:24.906733036 CEST	443	49764	216.58.206.68	192.168.2.5
May 28, 2024 00:30:24.906811953 CEST	49764	443	192.168.2.5	216.58.206.68
May 28, 2024 00:30:26.222990036 CEST	49764	443	192.168.2.5	216.58.206.68
May 28, 2024 00:30:26.223068953 CEST	443	49764	216.58.206.68	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 28, 2024 00:29:10.051116943 CEST	53	56456	1.1.1.1	192.168.2.5
May 28, 2024 00:29:10.062540054 CEST	53	56169	1.1.1.1	192.168.2.5
May 28, 2024 00:29:10.063330889 CEST	53	59184	1.1.1.1	192.168.2.5
May 28, 2024 00:29:11.201003075 CEST	53	62806	1.1.1.1	192.168.2.5
May 28, 2024 00:29:11.746416092 CEST	61637	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:11.747107029 CEST	52782	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:11.756999016 CEST	53	52782	1.1.1.1	192.168.2.5
May 28, 2024 00:29:11.757664919 CEST	53	61637	1.1.1.1	192.168.2.5
May 28, 2024 00:29:14.284018993 CEST	52063	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:14.284600973 CEST	62281	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:14.294526100 CEST	53	62281	1.1.1.1	192.168.2.5
May 28, 2024 00:29:14.294574976 CEST	53	52063	1.1.1.1	192.168.2.5
May 28, 2024 00:29:18.104593992 CEST	53	57584	1.1.1.1	192.168.2.5
May 28, 2024 00:29:19.293175936 CEST	59116	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:19.293354034 CEST	57712	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:19.302227974 CEST	53	59116	1.1.1.1	192.168.2.5
May 28, 2024 00:29:19.302532911 CEST	53	57712	1.1.1.1	192.168.2.5
May 28, 2024 00:29:19.384078026 CEST	53	61383	1.1.1.1	192.168.2.5
May 28, 2024 00:29:19.946228027 CEST	53533	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:19.946453094 CEST	49887	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:19.957305908 CEST	53	53533	1.1.1.1	192.168.2.5
May 28, 2024 00:29:19.960906029 CEST	53	49887	1.1.1.1	192.168.2.5
May 28, 2024 00:29:19.992597103 CEST	54053	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:19.992796898 CEST	62306	53	192.168.2.5	1.1.1.1
May 28, 2024 00:29:20.001090050 CEST	53	54053	1.1.1.1	192.168.2.5
May 28, 2024 00:29:20.001888037 CEST	53	62306	1.1.1.1	192.168.2.5
May 28, 2024 00:29:28.831012964 CEST	53	64355	1.1.1.1	192.168.2.5
May 28, 2024 00:29:47.723366022 CEST	53	50509	1.1.1.1	192.168.2.5
May 28, 2024 00:30:09.646234035 CEST	53	62778	1.1.1.1	192.168.2.5
May 28, 2024 00:30:10.583945990 CEST	53	56396	1.1.1.1	192.168.2.5
May 28, 2024 00:30:37.585788012 CEST	53	57034	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 28, 2024 00:29:11.746416092 CEST	192.168.2.5	1.1.1.1	0x86c0	Standard query (0)	facilitator-of-company-case-2605792.netlify.app	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:11.747107029 CEST	192.168.2.5	1.1.1.1	0x49ea	Standard query (0)	facilitator-of-company-case-2605792.netlify.app	65	IN (0x0001)	false
May 28, 2024 00:29:14.284018993 CEST	192.168.2.5	1.1.1.1	0x7036	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:14.284600973 CEST	192.168.2.5	1.1.1.1	0xf145	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 28, 2024 00:29:19.293175936 CEST	192.168.2.5	1.1.1.1	0x3e5f	Standard query (0)	api.db-ip.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:19.293354034 CEST	192.168.2.5	1.1.1.1	0x34df	Standard query (0)	api.db-ip.com	65	IN (0x0001)	false
May 28, 2024 00:29:19.946228027 CEST	192.168.2.5	1.1.1.1	0x9f71	Standard query (0)	facilitator-of-company-case-2605792.netlify.app	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:19.946453094 CEST	192.168.2.5	1.1.1.1	0x7036	Standard query (0)	facilitator-of-company-case-2605792.netlify.app	65	IN (0x0001)	false
May 28, 2024 00:29:19.992597103 CEST	192.168.2.5	1.1.1.1	0xe4bd	Standard query (0)	api.db-ip.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:19.992796898 CEST	192.168.2.5	1.1.1.1	0x5dd8	Standard query (0)	api.db-ip.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 28, 2024 00:29:11.757664919 CEST	1.1.1.1	192.168.2.5	0x86c0	No error (0)	facilitator-of-company-case-2605792.netlify.app		52.58.254.253	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:11.757664919 CEST	1.1.1.1	192.168.2.5	0x86c0	No error (0)	facilitator-of-company-case-2605792.netlify.app		3.72.140.173	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:14.294526100 CEST	1.1.1.1	192.168.2.5	0xf145	No error (0)	www.google.com			65	IN (0x0001)	false
May 28, 2024 00:29:14.294574976 CEST	1.1.1.1	192.168.2.5	0x7036	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:19.302227974 CEST	1.1.1.1	192.168.2.5	0x3e5f	No error (0)	api.db-ip.com		104.26.5.15	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:19.302227974 CEST	1.1.1.1	192.168.2.5	0x3e5f	No error (0)	api.db-ip.com		172.67.75.166	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:19.302227974 CEST	1.1.1.1	192.168.2.5	0x3e5f	No error (0)	api.db-ip.com		104.26.4.15	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:19.302532911 CEST	1.1.1.1	192.168.2.5	0x34df	No error (0)	api.db-ip.com			65	IN (0x0001)	false
May 28, 2024 00:29:19.957305908 CEST	1.1.1.1	192.168.2.5	0x9f71	No error (0)	facilitator-of-company-case-2605792.netlify.app		52.58.254.253	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:19.957305908 CEST	1.1.1.1	192.168.2.5	0x9f71	No error (0)	facilitator-of-company-case-2605792.netlify.app		18.192.231.252	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:20.001090050 CEST	1.1.1.1	192.168.2.5	0xe4bd	No error (0)	api.db-ip.com		104.26.4.15	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:20.001090050 CEST	1.1.1.1	192.168.2.5	0xe4bd	No error (0)	api.db-ip.com		104.26.5.15	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:20.001090050 CEST	1.1.1.1	192.168.2.5	0xe4bd	No error (0)	api.db-ip.com		172.67.75.166	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:20.001888037 CEST	1.1.1.1	192.168.2.5	0x5dd8	No error (0)	api.db-ip.com			65	IN (0x0001)	false
May 28, 2024 00:29:26.723666906 CEST	1.1.1.1	192.168.2.5	0xe172	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:26.723666906 CEST	1.1.1.1	192.168.2.5	0xe172	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:27.392241955 CEST	1.1.1.1	192.168.2.5	0x49fd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:29:27.392241955 CEST	1.1.1.1	192.168.2.5	0x49fd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 00:29:41.312566042 CEST	1.1.1.1	192.168.2.5	0xafa6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:29:41.312566042 CEST	1.1.1.1	192.168.2.5	0xafa6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 00:30:02.804383993 CEST	1.1.1.1	192.168.2.5	0x2fb3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:30:02.804383993 CEST	1.1.1.1	192.168.2.5	0x2fb3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 00:30:22.717694998 CEST	1.1.1.1	192.168.2.5	0x88ef	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:30:22.717694998 CEST	1.1.1.1	192.168.2.5	0x88ef	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

facilitator-of-company-case-2605792.netlify.app

https:

api.db-ip.com

www.bing.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:12 UTC	698	OUT	GET /id.html/ HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:12 UTC	435	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 61746 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 947 Content-Type: text/html; charset=UTF-8 Date: Mon, 27 May 2024 22:29:12 GMT Etag: "123e3cb8ff665a4c94363efe7fc2fc6d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R1A8MJA0WDQ6RKWMSN07 Connection: close
2024-05-27 22:29:12 UTC	751	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 72 61 6e 67 20 63 68 e1 bb a7 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 23 6d 79 56 69 64 65 6f 20 7b 0d 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Trang ch</title> ... <style> #myVideo { width: 100%; height: auto;
2024-05-27 22:29:12 UTC	196	IN	Data Raw: 20 20 20 3c 2f 76 69 64 65 6f 3e 0d 0a 20 20 20 20 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 20 2b 20 22 2f 66 6f 72 6d 2e 68 74 6d 6c 22 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 7d 2c 20 34 30 30 30 29 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 0d 0a 3c 2f 68 74 6d 6c 3e Data Ascii: </video> <script> setTimeout(function () { window.location.href = window.location.origin + "/form.html"; }, 4000); </script></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49711	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:12 UTC	617	OUT	GET /img/Mate.mp4 HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://facilitator-of-company-case-2605792.netlify.app/id.html/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-05-27 22:29:12 UTC	474	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Age: 38925 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 292266 Content-Range: bytes 0-292265/292266 Content-Type: video/mp4 Date: Mon, 27 May 2024 22:29:12 GMT Etag: "78c55917a141adf1c4c866ca415a8bc9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R1J8RAA3PNHWTA20DY6F Connection: close
2024-05-27 22:29:12 UTC	712	IN	Data Raw: 00 00 00 20 66 74 79 70 69 73 6f 6d 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 09 92 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 e8 00 00 12 1e 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 08 bc 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 12 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 07 80 00 00 04 38 00 00 00 00 00 24 65 64 74 Data Ascii: ftypisomisomiso2avc1mp41moovlmvhd@trak\tkhd@8$edt
2024-05-27 22:29:12 UTC	2372	IN	Data Raw: 00 00 00 02 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 0f a4 00 00 00 02 00 00 03 e9 00 00 00 01 00 00 0f a4 00 00 00 02 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 00 00 00 00 01 00 00 03 e9 00 00 00 01 00 00 13 8d 00 00 00 01 00 00 07 d2 00 00 00 01 00 00 00 Data Ascii:
2024-05-27 22:29:12 UTC	538	IN	Data Raw: 63 3d 63 72 66 20 6d 62 74 72 65 65 3d 30 20 63 72 66 3d 32 30 2e 30 20 71 63 6f 6d 70 3d 30 2e 36 30 20 71 70 6d 69 6e 3d 30 20 71 70 6d 61 78 3d 36 39 20 71 70 73 74 65 70 3d 34 20 69 70 5f 72 61 74 69 6f 3d 31 2e 34 30 20 70 62 5f 72 61 74 69 6f 3d 31 2e 33 30 20 61 71 3d 31 3a 31 2e 30 30 00 80 00 00 19 9b 65 88 84 00 12 ff ea ff c2 55 3f bd b3 74 45 66 7f df 7c 31 e6 ee 65 89 44 d7 b7 f4 f4 cc 76 b5 24 ec 7f a0 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 02 83 f0 f1 c4 39 71 1c 38 7f a0 f0 00 00 03 00 00 03 00 07 70 00 00 03 03 08 00 00 03 01 77 00 00 03 01 28 00 00 03 00 ee 00 00 03 01 08 00 00 03 01 64 00 00 03 02 38 00 00 03 02 f8 00 00 05 e0 00 00 08 80 00 00 11 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 00 03 00 Data Ascii: c=crf mbtree=0 crf=20.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 pb_ratio=1.30 aq=1:1.00eU?tEf\|1eDv$9q8pw(d8
2024-05-27 22:29:12 UTC	4744	IN	Data Raw: 45 54 c4 10 5d cb 8a b6 26 a2 8b e2 00 13 cf 22 13 63 5f 78 2e 91 45 70 a1 29 d8 29 8a b2 8c ef d9 46 86 a5 2e 61 88 73 80 cd c3 31 37 59 d1 3e ea 44 cb 4d f6 f0 bd 72 d1 a1 e8 46 2c d5 a0 fc ed 5f 23 b2 c9 d0 0f 12 92 a1 14 71 25 c3 2a 6d 5e 35 b8 98 7d be 8b 00 42 e5 ff 25 eb ee 13 b6 d4 23 e2 13 1e ab b1 12 67 54 40 dc 62 ce 5c ae b4 dc 5e 02 11 6d ff 13 67 4b 1e a4 0d 6a 2b 97 03 50 9e 49 ea f6 94 a3 39 32 96 5e e2 d8 18 19 e5 a3 a3 8c f1 df 3a d1 57 2f 91 9c 45 14 56 28 42 d4 e6 a9 bc cd 1c 8f 38 b9 c9 5e 4f b2 6d 40 75 a8 3b 99 b1 6f 00 8a 61 c3 a2 22 31 4a 3b 2e 48 54 9b 50 52 31 1d 4a af 97 ab 6a 4b 8b e1 aa c7 f5 2a 40 57 96 55 da 57 09 1e 31 e2 5c 34 8f 2c 45 af cf 96 a2 72 78 ed 3a 08 ca 0a 14 37 73 79 5f d9 9c 22 33 9e d0 e6 7d 9b 41 fb 21 af Data Ascii: ET]&"c_x.Ep))F.as17Y>DMrF,_#q%m^5}B%#gT@b\^mgKj+PI92^:W/EV(B8^Om@u;oa"1J;.HTPR1JjK@WUW1\4,Erx:7sy_"3}A!
2024-05-27 22:29:13 UTC	5930	IN	Data Raw: 01 29 c3 9f f5 28 57 b0 ac 1a 06 d5 a8 b0 f0 0b 1f 63 0b 75 13 b4 3d 96 fd fb fa e4 5f 5c e8 a0 1a 24 e5 90 90 8c c2 9b 51 80 c3 11 04 93 9f 04 14 9f b2 d9 93 b2 f6 08 50 cb 4f f9 d8 ae 30 97 cc 3a 5d d9 99 67 47 53 d6 b1 91 50 05 67 6f ae 82 c5 b8 8c 31 d0 43 13 5a c3 75 f0 0c 02 96 4f eb c0 de 42 04 6f 08 c6 0d 19 22 50 ea 72 63 d3 f3 b3 1d 28 41 35 f0 32 12 db e7 11 3f 67 08 c6 5e 0b 8a ab 84 81 73 80 30 2b 7b 6d 01 25 7a 16 23 31 ae 71 81 58 42 a9 24 24 2f 13 06 9d a1 ae cd a0 93 07 a5 e9 90 dc c0 20 3f 58 74 3a 5d 45 7d 64 98 4c dc 9b c1 be d4 a4 f7 0e 38 45 cb 5b 21 61 b1 4d e8 34 77 9c c8 cc 25 e4 b8 bb 9b ea e3 dc 38 51 a4 6a 67 34 c4 55 6b de 57 e2 83 40 10 10 45 37 06 01 56 fa 73 6a 4f 72 77 f9 92 af be 4c d3 63 62 37 aa 96 26 46 4f aa 3d 73 79 Data Ascii: )(Wcu=_\$QPO0:]gGSPgo1CZuOBo"Prc(A52?g^s0+{m%z#1qXB$$/ ?Xt:]E}dL8E[!aM4w%8Qjg4UkW@E7VsjOrwLcb7&FO=sy
2024-05-27 22:29:13 UTC	7116	IN	Data Raw: 47 b6 04 fb 51 1b be c4 01 65 39 fc dd f3 3b 80 a7 37 b4 b3 2b 5b fa cb ee 86 d8 c9 b3 2a 20 1e f3 8a 9c d9 ed f0 b9 62 d3 bd 40 81 36 11 7e ae 51 fd 10 30 8e 5f 36 40 77 1d 8f 4f 98 4b 33 da 4f 81 9f da 66 22 79 c9 d7 e0 da 4d 47 df d6 e6 84 f8 02 e4 38 ac ae 10 e2 5e 20 42 c7 ba af ce 45 3a 93 f7 67 be 66 5d 7c e3 03 e6 35 05 4a df 03 7c 56 7c fd 01 92 7d ea d7 69 29 6b de c9 af fa 8a b2 15 dd 72 2e dd 16 9b 06 1f 43 0e 19 cd 1e d3 97 91 a6 50 3e d0 cb 43 be ea 5a 06 88 fe 1c ce 31 d8 da a1 a8 e6 ac 3b 19 95 7c 65 c0 13 0c cd ad 6c f2 ff 72 da fd 22 ae 15 25 ba 19 01 9e eb 29 22 92 8d 53 45 8a 08 f0 5d b5 73 6b 75 25 2e c8 79 eb 02 e4 67 89 d7 79 8a 2e bf 24 8c 68 f5 97 c1 8b 91 16 0f 7f 72 2f 8a 50 5c d2 b1 44 aa 29 40 43 76 35 f3 cb ee a5 28 d7 fa 13 Data Ascii: GQe9;7+[* b@6~Q0_6@wOK3Of"yMG8^ BE:gf]\|5J\|V\|}i)kr.CP>CZ1;\|elr"%)"SE]sku%.ygy.$hr/P\D)@Cv5(
2024-05-27 22:29:13 UTC	8302	IN	Data Raw: 51 41 c9 ce b6 c1 52 ac a9 52 38 61 5f a4 27 83 59 78 1d 44 f4 7f 21 24 37 79 f6 f3 81 21 9b ae 55 46 cf df 83 a1 72 32 ad 5e 4d 30 3b 00 1f 39 4b ee 54 29 6f 4e 8e 53 b6 42 06 dc e3 64 ab b6 3a 59 7a d0 65 e6 c9 09 92 f1 bb dd f1 7e b2 9b 98 2e 48 1f d8 8c 80 d2 10 05 d0 6e c9 26 88 c0 ef 2c 89 74 35 e0 e4 03 76 47 1d 19 d9 bd 13 d1 de 0a 1b c6 20 c5 ca 4e e1 9f ac 20 02 95 32 e6 21 24 38 39 49 b8 07 f8 19 2a 29 22 ea 17 9e 59 6b 23 f9 a7 de 9a 9b 6a 7b 28 64 64 b5 2b 90 fe 81 c2 fc 0d f7 1b d7 8b de ab bc a6 f7 ef b6 3e 19 5b 29 f3 ea c9 fc c5 c6 a7 41 9e 1f 2f 62 89 ad df 1d b0 60 f2 52 76 d8 d1 b3 f1 5e 82 c1 ed a3 ea bf 2c 12 9f 11 9f 0d b3 af 67 19 72 d5 90 c9 fd ac 93 da 52 49 9c 61 05 11 5b 04 48 37 a1 8e 24 6f 8f c2 d9 99 91 df 83 f8 cf 5b 6b 49 Data Ascii: QARR8a_'YxD!$7y!UFr2^M0;9KT)oNSBd:Yze~.Hn&,t5vG N 2!$89I*)"Yk#j{(dd+>[)A/b`Rv^,grRIa[H7$o[kI
2024-05-27 22:29:13 UTC	6154	IN	Data Raw: 56 f6 c6 8d c6 05 9a 33 87 4b 16 4b 60 bf 34 81 c6 fd 43 bb 78 12 e3 66 1e 9b 1e 5e 30 b6 de c2 26 c0 fd bb 84 31 15 7b af 1f bf 45 d4 dd 29 ee ed 5f a0 0e 8d 8c 4f 73 c8 a8 8f 4b ad d4 96 1c 4d f0 c1 c9 f2 f7 ce f7 64 54 63 03 ba 9d f9 04 15 d2 6d 0d 39 52 4a e4 9d 87 d4 67 47 28 44 f1 e1 37 74 18 ab ee 57 f3 d0 5d 7a 06 c5 2e 00 dd 5f e4 71 62 3c 22 3f 5c de 89 f2 ea ad 9e c7 d4 3e aa 9f 5a 58 e5 a0 25 64 29 0f ae 4a 73 63 95 b3 a9 d0 2f eb 14 93 2c 49 2c 08 fe d4 3b 55 ba 7a 75 60 0b 90 30 52 b9 ee b5 6d d4 65 e4 32 b9 bf b5 f1 2b 99 55 da c5 e6 de c6 26 07 1d 4c 3e 12 d4 ee a5 6f ae 4e 66 94 b9 51 f7 e6 42 f6 08 59 3b d2 f7 81 f0 62 90 91 14 75 79 d2 0a cc d6 eb 6f ef e6 92 1a 47 ab 45 7b 38 5c b5 ee f2 4c a7 b8 3d 1f 76 df a9 c7 43 8a 01 c7 0b 99 9f Data Ascii: V3KK`4Cxf^0&1{E)_OsKMdTcm9RJgG(D7tW]z._qb<"?\>ZX%d)Jsc/,I,;Uzu`0Rme2+U&L>oNfQBY;buyoGE{8\L=vC
2024-05-27 22:29:13 UTC	10674	IN	Data Raw: bb 7b 73 a7 32 0c 75 20 e6 60 cf ca 34 4b a2 0e 82 21 81 18 4c ae 15 71 c0 ae 1a 51 fa f8 92 f6 3f 5e 29 9d 4f 8a f0 1e 69 05 3c 62 e1 75 fc fa a0 eb c7 6f ad 3d 6a 8c ea ec 52 72 bf 0b 9a 86 80 cd 89 86 c4 ad bf 59 cf fa 31 1b 70 ae f9 5c b4 91 3c dd ef 90 8a 30 71 7b 0e 1c 70 75 4f 82 e2 32 a6 71 e7 86 c1 a9 51 ab e9 08 5c 96 4c 9c c8 68 09 d1 4c ef d5 a8 d3 d8 bf cb 99 b9 2c ef 86 8f 07 ce e4 70 ed 3f a6 40 ac 19 24 a6 ab b9 5f ef ae 62 2b 0f ce ef e6 13 3e 98 84 2a 88 90 da 4d 5f da c0 87 77 8b d3 04 ad fa d1 b3 3e 9d 75 91 de 62 f6 eb d1 2e 2e ab 46 bd ff 9e 56 27 60 11 54 9f 6c 35 2c c3 32 dc 27 b0 9f 6d 04 ed ce 73 2e f0 89 e0 6a 36 86 6b 0e f2 f2 fb 0c 41 30 a0 c8 0e 21 65 fd a7 06 28 7e 61 ce 23 2b db 29 61 cd d0 74 15 dc 37 8a f2 78 f4 3c b3 fa Data Ascii: {s2u `4K!LqQ?^)Oi<buo=jRrY1p\<0q{puO2qQ\LhL,p?@$_b+>*M_w>ub..FV'`Tl5,2'ms.j6kA0!e(~a#+)at7x<
2024-05-27 22:29:13 UTC	11860	IN	Data Raw: 48 80 96 81 6d f9 93 91 d3 83 24 c9 1e ca 53 f2 7b cf cb ad 33 14 e5 52 64 85 98 ed 7c 3d c2 b5 4a 1b dd bf 53 ee 09 7d 69 13 00 13 c9 75 2b 24 ae 4d ac ef bd 96 4b 20 2b 34 42 5e f7 50 33 39 2e 01 9d 74 46 ef 6f 0f 3a bb 71 84 5f c8 c3 e1 a8 a2 fe 7b ad f1 8d 7d 74 0b 9e ce 19 3e c8 6a cf c5 77 c9 4d bc 10 70 ed b4 f0 51 95 74 6a 6d f8 99 c5 00 3e 31 97 0e 95 76 c0 20 bc 89 64 37 26 f7 b2 af 6c e9 4b 35 5b a5 17 fb 2d f1 a9 54 15 e2 7a 62 0c eb 57 40 cf 2c a7 54 d2 21 05 34 1b d8 24 82 2b 61 d4 d3 57 9b c5 ba c2 74 74 54 8b ea d0 9f ab d4 dc 4b 5d 9b 57 07 00 45 f8 7a a1 cf b0 db 12 d1 53 6d 1b bc 8b 93 4f 2f a5 e2 99 44 f0 73 c2 ae d7 63 9f e5 fa cf 8f 76 c6 5f b2 0b cb e3 d0 44 96 d1 47 2b 02 80 52 b3 f1 4d 4d e9 16 b6 84 b3 b0 52 84 d4 af 61 9a e7 22 Data Ascii: Hm$S{3Rd\|=JS}iu+$MK +4B^P39.tFo:q_{}t>jwMpQtjm>1v d7&lK5[-TzbW@,T!4$+aWttTK]WEzSmO/Dscv_DG+RMMRa"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49714	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:14 UTC	658	OUT	GET /favicon.ico HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/id.html/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:14 UTC	397	IN	HTTP/1.1 404 Not Found Age: 16882 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 3082 Content-Type: text/html; charset=utf-8 Date: Mon, 27 May 2024 22:29:14 GMT Etag: 1716781308-ssl Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R2X4VS5WKM41KAE3BFPH Connection: close
2024-05-27 22:29:14 UTC	789	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 0a 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no"> <title>Page Not Found</title> <link href='https://fonts.googleapis.com/css?
2024-05-27 22:29:14 UTC	2293	IN	Data Raw: 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 76 77 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 63 61 72 64 20 7b 0a 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 77 69 64 74 68 3a 20 37 35 25 3b 0a 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 36 34 Data Ascii: ex-direction: column; align-items: center; justify-content: center; height: 100vh; width: 100vw; } .card { position: relative; display: flex; flex-direction: column; width: 75%; max-width: 364

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-27 22:29:16 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=150021 Date: Mon, 27 May 2024 22:29:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:17 UTC	761	OUT	GET /form.html HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://facilitator-of-company-case-2605792.netlify.app/id.html/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:18 UTC	438	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 11762 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 260969 Content-Type: text/html; charset=UTF-8 Date: Mon, 27 May 2024 22:29:17 GMT Etag: "28b15ce0c514052c706c1211424be8ce-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R6FG28W19QDZTXSMSRMG Connection: close
2024-05-27 22:29:18 UTC	748	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 69 64 3d 22 68 74 6d 6c 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 20 66 6f 72 20 42 75 73 69 6e 65 73 73 20 2d 20 50 61 67 65 20 41 70 70 65 61 6c 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2e 2f 73 74 79 6c 65 73 2f 62 Data Ascii: <!DOCTYPE html><html lang="en" id="html"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Meta for Business - Page Appeal</title> <link rel="stylesheet" href="../styles/b
2024-05-27 22:29:18 UTC	2372	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 20 3f 20 67 6c 6f 62 61 6c 54 68 69 73 20 3a 20 74 20 7c 7c 20 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 20 3d 20 65 28 29 0d 0a 20 20 20 20 20 20 20 20 7d 28 74 68 69 73 2c 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 74 20 3d 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6e 64 3a 20 28 74 2c 20 65 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 20 3d 3e 20 5b 5d 2e 63 6f 6e 63 61 74 28 2e 2e 2e 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 2e 63 61 6c 6c 28 Data Ascii: peof globalThis ? globalThis : t \|\| self).bootstrap = e() }(this, (function () { "use strict"; const t = { find: (t, e = document.documentElement) => [].concat(...Element.prototype.querySelectorAll.call(
2024-05-27 22:29:18 UTC	538	IN	Data Raw: 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 20 3d 20 74 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 45 76 65 6e 74 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 20 3d 20 74 20 3d 3e 20 21 28 21 74 20 7c 7c 20 22 6f 62 6a 65 63 74 22 20 21 3d 20 74 79 70 65 6f 66 20 74 29 20 26 26 20 28 76 6f 69 64 20 30 20 21 3d 3d 20 74 2e 6a 71 75 65 72 79 20 26 26 20 28 74 20 3d 20 74 5b 30 5d 29 2c 20 76 6f 69 64 20 30 20 21 3d 3d 20 74 2e 6e 6f 64 65 54 79 70 65 29 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: }, o = t => { t.dispatchEvent(new Event("transitionend")) }, r = t => !(!t \|\| "object" != typeof t) && (void 0 !== t.jquery && (t = t[0]), void 0 !== t.nodeType),
2024-05-27 22:29:18 UTC	4744	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 6f 20 26 26 20 72 28 6f 29 20 3f 20 22 65 6c 65 6d 65 6e 74 22 20 3a 20 6e 75 6c 6c 20 3d 3d 20 28 6c 20 3d 20 6f 29 20 3f 20 22 22 20 2b 20 6c 20 3a 20 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6c 29 2e 6d 61 74 63 68 28 2f 5c 73 28 5b 61 2d 7a 5d 2b 29 2f 69 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 65 77 20 52 65 67 45 78 70 28 73 29 2e 74 65 73 74 28 61 29 29 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 60 24 7b 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3a 20 4f 70 74 Data Ascii: a = o && r(o) ? "element" : null == (l = o) ? "" + l : {}.toString.call(l).match(/\s([a-z]+)/i)[1].toLowerCase(); var l; if (!new RegExp(s).test(a)) throw new TypeError(`${t.toUpperCase()}: Opt
2024-05-27 22:29:18 UTC	5930	IN	Data Raw: 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 44 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 65 20 3d 20 78 28 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 2e 75 69 64 45 76 65 6e 74 20 3d 20 65 2c 20 54 5b 65 5d 20 3d 20 54 5b 65 5d 20 7c 7c 20 7b 7d 2c 20 54 5b 65 5d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 53 28 74 2c 20 65 2c 20 69 20 3d 20 6e 75 6c 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6e 20 3d 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 6c 65 74 20 73 20 3d 20 30 2c 20 Data Ascii: function D(t) { const e = x(t); return t.uidEvent = e, T[e] = T[e] \|\| {}, T[e] } function S(t, e, i = null) { const n = Object.keys(t); for (let s = 0,
2024-05-27 22:29:18 UTC	7116	IN	Data Raw: 65 28 74 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 20 42 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 74 20 3d 20 61 28 74 29 29 20 26 26 20 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 20 3d 20 74 2c 20 52 2e 73 65 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 44 41 54 41 5f 4b 45 59 2c 20 74 68 69 73 29 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6f 73 65 28 29 20 7b 0d Data Ascii: e(t) } }; class B { constructor(t) { (t = a(t)) && (this._element = t, R.set(this._element, this.constructor.DATA_KEY, this)) } dispose() {
2024-05-27 22:29:18 UTC	4586	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 75 73 65 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 7c 7c 20 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 20 3d 20 21 30 29 2c 20 74 2e 66 69 6e 64 4f 6e 65 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 2c 20 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 20 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 20 26 26 20 28 6f 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 20 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 20 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 20 3d 20 6e 75 6c 6c 0d 0a 20 20 Data Ascii: } pause(e) { e \|\| (this._isPaused = !0), t.findOne(".carousel-item-next, .carousel-item-prev", this._element) && (o(this._element), this.cycle(!0)), clearInterval(this._interval), this._interval = null
2024-05-27 22:29:18 UTC	9488	IN	Data Raw: 72 67 65 74 3a 20 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 72 65 63 74 69 6f 6e 3a 20 69 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 72 6f 6d 3a 20 73 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 3a 20 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 73 65 74 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 45 6c 65 6d 65 6e 74 28 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 20 Data Ascii: rget: e, direction: i, from: s, to: n }) } _setActiveIndicatorElement(e) { if (this._indicatorsElement)
2024-05-27 22:29:18 UTC	10674	IN	Data Raw: 75 65 43 61 6c 6c 62 61 63 6b 28 28 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 63 6f 6c 6c 61 70 73 69 6e 67 22 29 2c 20 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 63 6f 6c 6c 61 70 73 65 22 2c 20 22 73 68 6f 77 22 29 2c 20 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 73 5d 20 3d 20 22 22 2c 20 74 68 69 73 2e 73 65 74 54 72 61 6e 73 69 74 69 6f 6e 69 6e 67 28 21 31 29 2c 20 50 2e 74 72 69 67 67 65 72 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 20 22 73 68 6f 77 6e 2e 62 73 2e 63 6f 6c 6c 61 70 73 65 22 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ueCallback(() => { this._element.classList.remove("collapsing"), this._element.classList.add("collapse", "show"), this._element.style[s] = "", this.setTransitioning(!1), P.trigger(this._element, "shown.bs.collapse")
2024-05-27 22:29:18 UTC	11860	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 41 74 28 74 29 3b 20 66 74 28 69 29 20 26 26 20 5b 22 68 74 6d 6c 22 2c 20 22 62 6f 64 79 22 5d 2e 69 6e 64 65 78 4f 66 28 68 74 28 69 29 29 20 3c 20 30 3b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 20 3d 20 79 74 28 69 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 22 6e 6f 6e 65 22 20 21 3d 3d 20 6e 2e 74 72 61 6e 73 66 6f 72 6d 20 7c 7c 20 22 6e 6f 6e 65 22 20 21 3d 3d 20 6e 2e 70 65 72 73 70 65 63 74 69 76 65 20 7c 7c 20 22 70 61 69 6e 74 22 20 3d 3d 3d 20 6e 2e 63 6f 6e 74 61 69 6e 20 7c 7c 20 2d 31 20 21 3d 3d 20 5b 22 74 72 61 6e 73 66 6f 72 6d 22 2c 20 22 70 65 72 73 70 Data Ascii: for (var i = At(t); ft(i) && ["html", "body"].indexOf(ht(i)) < 0;) { var n = yt(i); if ("none" !== n.transform \|\| "none" !== n.perspective \|\| "paint" === n.contain \|\| -1 !== ["transform", "persp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49717	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-27 22:29:18 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=150068 Date: Mon, 27 May 2024 22:29:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-27 22:29:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49719	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:18 UTC	626	OUT	GET /styles/bootstrap.min.css HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:18 UTC	438	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 155803 Content-Type: text/css; charset=UTF-8 Date: Mon, 27 May 2024 22:29:18 GMT Etag: "2bd2a1329a70d2c7ab52dc1941350fa5-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R6QM5EY76PST1KE9TAYZ Connection: close
2024-05-27 22:29:18 UTC	748	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 30 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 31 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.0.2 (https://getbootstrap.com/) * Copyright 2011-2021 The Bootstrap Authors * Copyright 2011-2021 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--bs-blue:#0d6
2024-05-27 22:29:18 UTC	2372	IN	Data Raw: 62 65 72 61 74 69 6f 6e 20 53 61 6e 73 22 2c 73 61 6e 73 2d 73 65 72 69 66 2c 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 3b 2d 2d 62 73 2d 67 72 61 64 69 65 6e 74 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 Data Ascii: beration Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--bs-font-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace;--bs-gradient:linear-gradient(180deg, rgba(255, 255, 255
2024-05-27 22:29:18 UTC	538	IN	Data Raw: 33 38 34 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 69 6d 67 2c 73 76 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 74 61 62 6c 65 7b 63 61 70 74 69 Data Ascii: 384;word-wrap:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:.875em;color:#fff;background-color:#212529;border-radius:.2rem}kbd kbd{padding:0;font-size:1em;font-weight:700}figure{margin:0 0 1rem}img,svg{vertical-align:middle}table{capti
2024-05-27 22:29:18 UTC	4744	IN	Data Raw: 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 6f 75 74 6c 69 6e 65 3a 30 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d Data Ascii: ton{border-radius:0}button:focus:not(:focus-visible){outline:0}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,select{text-transform:none}[role=button]{cursor:pointer}select{word-wrap:normal}
2024-05-27 22:29:18 UTC	5930	IN	Data Raw: 6c 73 2d 73 6d 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 73 6d 2d 36 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 66 6c 65 78 3a 31 20 30 20 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 61 75 74 6f 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 Data Ascii: ls-sm-5>{flex:0 0 auto;width:20%}.row-cols-sm-6>{flex:0 0 auto;width:16.6666666667%}}@media (min-width:768px){.col-md{flex:1 0 0%}.row-cols-md-auto>{flex:0 0 auto;width:auto}.row-cols-md-1>{flex:0 0 auto;width:100%}.row-cols-md-2>*{flex:0 0 auto;width
2024-05-27 22:29:18 UTC	7116	IN	Data Raw: 74 68 3a 36 36 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 39 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 30 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 31 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 32 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6c 67 2d 32 7b 6d 61 72 67 Data Ascii: th:66.66666667%}.col-lg-9{flex:0 0 auto;width:75%}.col-lg-10{flex:0 0 auto;width:83.33333333%}.col-lg-11{flex:0 0 auto;width:91.66666667%}.col-lg-12{flex:0 0 auto;width:100%}.offset-lg-0{margin-left:0}.offset-lg-1{margin-left:8.33333333%}.offset-lg-2{marg
2024-05-27 22:29:18 UTC	8302	IN	Data Raw: 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 37 35 2e 39 38 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2d 73 6d 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 37 2e 39 38 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 2d 6d 64 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 39 31 2e 39 38 70 78 29 7b Data Ascii: kit-overflow-scrolling:touch}@media (max-width:575.98px){.table-responsive-sm{overflow-x:auto;-webkit-overflow-scrolling:touch}}@media (max-width:767.98px){.table-responsive-md{overflow-x:auto;-webkit-overflow-scrolling:touch}}@media (max-width:991.98px){
2024-05-27 22:29:18 UTC	6188	IN	Data Raw: 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 2d 34 20 2d 34 20 38 20 38 27 25 33 65 25 33 63 63 69 72 63 6c 65 20 72 3d 27 33 27 20 66 69 6c 6c 3d 27 25 32 33 38 36 62 37 66 65 27 2f 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 7d 2e 66 6f 72 6d 2d 73 77 69 74 63 68 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 72 69 67 68 74 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 Data Ascii: rl("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='-4 -4 8 8'%3e%3ccircle r='3' fill='%2386b7fe'/%3e%3c/svg%3e")}.form-switch .form-check-input:checked{background-position:right center;background-image:url("data:image/svg+xml,%3csvg
2024-05-27 22:29:18 UTC	10674	IN	Data Raw: 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 2e 37 35 72 65 6d 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 2c 25 33 63 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 38 20 38 27 25 33 65 25 33 63 70 61 74 68 20 66 69 6c 6c 3d 27 25 32 33 31 39 38 37 35 34 27 20 64 3d 27 4d 32 2e 33 20 36 2e 37 33 4c 2e 36 20 34 2e 35 33 63 2d 2e 34 2d 31 2e 30 34 2e 34 36 2d 31 2e 34 20 31 2e 31 2d 2e 38 6c 31 2e 31 20 31 2e 34 20 33 2e 34 2d 33 2e 38 63 2e 36 2d 2e 36 33 20 31 2e 36 2d 2e 32 37 20 31 2e 32 2e 37 6c 2d 34 20 34 2e 36 63 2d 2e 34 33 2e Data Ascii: adding-right:calc(1.5em + .75rem);background-image:url("data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 8 8'%3e%3cpath fill='%23198754' d='M2.3 6.73L.6 4.53c-.4-1.04.46-1.4 1.1-.8l1.1 1.4 3.4-3.8c.6-.63 1.6-.27 1.2.7l-4 4.6c-.43.
2024-05-27 22:29:18 UTC	11860	IN	Data Raw: 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 35 72 65 6d 20 72 67 62 61 28 32 31 37 2c 31 36 34 2c 36 2c 2e 35 29 7d 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 63 31 30 37 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 63 31 30 37 7d 2e 62 74 6e 2d 64 61 6e 67 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 64 63 33 35 34 35 7d 2e 62 74 6e 2d 64 61 Data Ascii: .btn-warning.dropdown-toggle:focus{box-shadow:0 0 0 .25rem rgba(217,164,6,.5)}.btn-warning.disabled,.btn-warning:disabled{color:#000;background-color:#ffc107;border-color:#ffc107}.btn-danger{color:#fff;background-color:#dc3545;border-color:#dc3545}.btn-da

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49720	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:18 UTC	618	OUT	GET /styles/style.css HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:19 UTC	437	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 12295 Content-Type: text/css; charset=UTF-8 Date: Mon, 27 May 2024 22:29:19 GMT Etag: "a9fe8588417ea54916d0a4fa268ff223-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R7FYAP197B0SSQE292G5 Connection: close
2024-05-27 22:29:19 UTC	749	IN	Data Raw: 23 68 74 6d 6c 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 32 34 39 2c 20 32 34 31 2c 20 32 34 39 29 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 72 67 62 61 28 32 34 39 2c 20 32 34 31 2c 20 32 34 39 2c 20 31 29 20 30 25 2c 20 72 67 62 61 28 32 33 34 2c 20 32 34 33 2c 20 32 35 33 2c 20 31 29 20 33 35 25 2c 20 72 67 62 61 28 32 33 37 2c 20 32 35 31 2c 20 32 34 32 2c 20 31 29 20 31 30 30 25 29 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 Data Ascii: #html { background: rgb(249, 241, 249); background: linear-gradient(90deg, rgba(249, 241, 249, 1) 0%, rgba(234, 243, 253, 1) 35%, rgba(237, 251, 242, 1) 100%);}body { background: inherit; height: 100vh; overflow: hidden;
2024-05-27 22:29:19 UTC	2372	IN	Data Raw: 31 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 68 6f 77 2d 68 69 64 65 2d 70 61 73 73 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 38 70 78 3b 0d 0a 20 20 20 20 72 69 67 68 74 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 58 28 2d 31 29 3b 0d 0a 7d 0d 0a 0d 0a 68 31 2c 0d 0a 68 32 20 7b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 38 2c 20 33 30 2c 20 33 33 29 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4f 70 74 69 6d 69 73 74 69 63 20 44 69 73 70 6c 61 79 20 42 6f 6c 64 2c 20 48 65 Data Ascii: 15px;}#show-hide-pass { width: 28px; right: 30px; position: absolute; cursor: pointer; transform: scaleX(-1);}h1,h2 { line-height: 30px; color: rgb(28, 30, 33); font-family: Optimistic Display Bold, He
2024-05-27 22:29:19 UTC	538	IN	Data Raw: 69 6f 6e 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 45 33 45 38 45 46 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 2d 6c 69 73 74 20 2e 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2e 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 2d 69 6d 67 20 7b 7d 0d 0a 0d 0a 2e 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 2d 69 6d 67 20 73 76 67 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0d 0a 7d 0d 0a 0d Data Ascii: ion-button { border-radius: 0; border-bottom: 1px solid #E3E8EF;}.action-button-list .action-button:last-child { border-bottom: none;}.action-button-img {}.action-button-img svg { width: 24px; height: 24px;}
2024-05-27 22:29:19 UTC	4744	IN	Data Raw: 63 6b 3b 0d 0a 20 20 20 20 72 6f 74 61 74 65 3a 20 30 64 65 67 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 63 74 69 6f 6e 2d 62 75 74 74 6f 6e 20 2e 41 52 52 4f 57 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 72 6f 74 61 74 65 3a 20 31 38 30 64 65 67 3b 0d 0a 7d 0d 0a 0d 0a 23 6d 61 69 6e 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 31 30 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 43 41 52 44 20 2a 2f 0d 0a 23 63 61 72 64 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: ck; rotate: 0deg;}.action-button .ARROW { display: block; rotate: 180deg;}#main { max-width: 1100px;}/* CARD */#card { display: flex; flex-direction: column; border-radius: 20px; background-color
2024-05-27 22:29:19 UTC	3892	IN	Data Raw: 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 70 61 73 73 77 6f 72 64 2d 69 6e 70 75 74 2e 64 69 73 61 62 6c 65 64 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 33 45 33 45 33 3b 0d 0a 7d 0d 0a 2e 70 61 73 73 77 6f 72 64 2d 69 6e 70 75 74 20 2e 66 6f 72 6d 2d 6c 61 62 65 6c 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 2e 37 35 72 65 6d 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 2e 70 61 73 73 77 6f 72 64 2d 69 6e 70 75 74 20 69 Data Ascii: flex-direction: column; justify-content: center;}.password-input.disabled{ background-color: #E3E3E3;}.password-input .form-label{ color:#5e5e5e; padding: 0 .75rem; margin-bottom: 0; width: 100%;}.password-input i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49722	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:19 UTC	663	OUT	GET /img/block_2.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:19 UTC	422	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64185 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 18787 Content-Type: image/png Date: Mon, 27 May 2024 22:29:19 GMT Etag: "d20dab5033cc4210f9d65985e651a104-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R878HZMSRG3D954WX5D8 Connection: close
2024-05-27 22:29:19 UTC	764	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 65 08 06 00 00 00 bb be 46 f1 00 00 24 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ad 9c 6b 96 9c 37 0e 64 ff 73 15 b3 04 be 1f cb e1 03 3c 67 76 30 cb 9f 1b cc 92 6c 49 6e bb ed b6 64 a9 4a 99 59 fc 48 02 08 44 80 a0 9d fd bf ff 7b dd ff e1 d7 c8 a1 ba 5c 5a af a3 56 cf af 3c f2 88 93 6f ba ff fc 9a ef ef e0 f3 fb fb fd aa f9 eb bd f0 e3 eb ae 96 af 37 22 2f 25 be a6 cf 3f 7b fd fa fc b7 d7 c3 f7 01 3e 5f 26 df 95 df 0d d4 f7 d7 1b eb c7 37 c6 d7 93 63 ff 69 a0 f8 f9 92 34 23 7d 7f be 06 1a 5f 03 a5 f8 79 23 7c 0d 30 e7 d7 52 46 6f bf 5f c2 b2 cf d7 af 9f ff 6c 03 7f 9c fe ca fd c7 69 ff f2 ef c6 ee 9d c2 73 52 8c 96 42 f2 fc 9d d2 d7 04 92 Data Ascii: PNGIHDRdeF$zTXtRaw profile type exifxk7ds<gv0lIndJYHD{\ZV<o7"/%?{>_&7ci4#}_y#\|0RFo_lisRB
2024-05-27 22:29:19 UTC	2372	IN	Data Raw: e7 28 cb c9 66 9e e8 4e a9 44 26 59 64 b3 13 64 31 2c 98 2d c4 72 c3 37 db b9 f8 b1 a8 2c f7 3f d9 cd b5 fc 83 dd e2 3f b5 9c 93 e9 fe a6 e5 7e b5 db 1f 59 ed 28 0d ed 67 b1 4f 14 6a 53 7d 22 fa 78 df fa 8c 7d 2a d9 fd f2 d5 c5 69 95 a9 64 63 ae fb ec 54 96 b1 c4 76 ce b9 bc d6 cb 99 69 b1 2f b3 54 6c cb b6 46 e2 2a 31 57 9f 92 19 d9 33 8e 13 8a ad e6 cc 9f db f9 36 86 53 ca ca f3 b0 9f b9 1b 2b 61 20 16 5c ea 9a 2b ac 55 07 56 ec 37 8e 9a 77 9a a3 9c b1 03 3c c1 d2 90 69 5b 74 71 9d 7d 73 b9 9d a9 f8 7d bd b1 64 5f e7 62 0a e0 36 49 a2 ad 03 6c 62 89 c8 b2 67 6d 67 2d cc 38 2c 8c dd 13 83 a5 49 a2 6f db 1d 7e 7e de 9e cf bc ad df 94 59 67 c9 27 9a dd 7c 20 12 9d a8 98 e7 8c 6a 13 f3 d6 b8 c1 82 15 53 25 89 ee 1a 76 6b b7 cc 9b d7 f5 8e 9d df 96 ea b8 67 Data Ascii: (fND&Ydd1,-r7,??~Y(gOjS}"x}idcTvi/TlF1W36S+a \+UV7w<i[tq}s}d_b6Ilbgmg-8,Io~~Yg'\| jS%vkg
2024-05-27 22:29:19 UTC	538	IN	Data Raw: 80 15 db 11 09 bc ce 46 57 dc 82 04 87 b3 82 f5 98 ab 64 65 ad 4e 82 51 35 23 7a 48 e5 16 38 c3 29 eb 81 aa 0d a9 6c 23 d6 d9 3c 32 b1 eb 19 50 1d 07 bf d8 69 4b c7 d5 44 9a 5e 64 e9 86 bf 2a 5e 50 fc 56 21 c5 78 6b f0 91 24 10 c8 f1 a7 8d 43 5e 08 d6 49 93 99 89 40 b4 e6 55 40 02 b3 42 97 a6 6f 78 2c 89 24 05 1e de 45 7a 12 16 0d 04 c4 42 cc e1 1b 91 c7 10 0c d2 09 16 7a 9e 71 3e 2d d2 fe 1e 5c fc 97 30 12 26 38 6d e8 5c 74 e2 3c 4a ae 1d f6 51 e1 01 a5 0b 7e b7 aa 60 87 dd 13 0d 2e 2a 87 04 a1 3f 49 1f b9 be 58 1b 2b 60 37 16 be b2 bd d0 dc 57 96 03 25 23 49 93 11 90 e0 1e fc 47 1f c3 92 10 3d 2a 2c 29 34 d0 21 10 c5 ad a5 4d 37 17 d0 04 f5 db 72 d2 24 52 6a db 4a 6d 2b 10 63 30 49 a8 1c cc c6 5a 47 07 a3 e4 78 b9 23 53 2e 91 06 00 4f 62 90 d4 84 b9 cc Data Ascii: FWdeNQ5#zH8)l#<2PiKD^d^PV!xk$C^I@U@Box,$EzBzq>-\0&8m\t<JQ~`.?IX+`7W%#IG=*,)4!M7r$RjJm+c0IZGx#S.Ob
2024-05-27 22:29:19 UTC	4744	IN	Data Raw: ca 32 47 9b 4a 9a 81 75 6e f0 08 6d 96 d1 c0 18 1c 57 2e eb e3 e3 50 6c 1c f8 ef 04 8a fb 3b 11 15 c0 23 80 af 6d d5 dc 49 f8 17 57 47 78 0d d2 bc 39 e0 35 b0 39 93 40 2e e4 51 f8 2b a6 f1 1e 76 be c4 45 03 a4 ac 8b c2 b2 80 33 bd c4 29 a4 72 2d a0 14 49 29 5d c7 5e 57 70 de bd ca 51 63 87 00 4e fc f0 60 56 38 10 b2 10 b8 c7 b2 0b 7e af e2 23 71 07 d7 80 af 47 e9 7b 3c 57 45 2b d5 3e 5f c1 31 02 6c 64 67 22 02 3f 55 f5 35 64 70 1b 01 e7 07 a9 9d a4 44 4e 5a d8 2d 16 b6 97 f4 09 c8 a2 4c b0 26 b8 7c 2b 70 8e 44 25 c5 ad 08 5f 76 f8 14 1e 0b 95 52 b1 96 d1 86 62 bd c3 81 54 23 59 38 eb 47 da 42 ee 48 09 aa 98 02 28 03 14 1f 4b c5 95 6f f2 36 90 fb 79 87 4c 5a e0 6a db e0 b7 d0 4b 48 2a 0e ba 4c d0 5b 94 43 f0 55 a4 2e d9 39 48 2e 1e 84 32 9e 35 41 82 4a 6a Data Ascii: 2GJunmW.Pl;#mIWGx959@.Q+vE3)r-I)]^WpQcN`V8~#qG{<WE+>_1ldg"?U5dpDNZ-L&\|+pD%_vRbT#Y8GBH(Ko6yLZjKH*L[CU.9H.25AJj
2024-05-27 22:29:19 UTC	5930	IN	Data Raw: 51 22 88 12 d5 fd f2 6e 27 29 56 4a 9e 53 40 e6 31 1b 24 7e 3e 98 63 3a ea ef 51 a1 17 38 e9 45 45 cd dc 96 2e 23 23 45 75 49 53 57 70 87 4e a5 50 e7 00 28 d6 82 ad 01 8d 70 e9 db 42 ac 19 26 ba c1 83 cc 06 7d ee 3f a8 17 6a a8 fe cf 3e e9 a6 48 70 ea f3 0a 11 c3 46 1d e7 f2 22 4c 1f 42 a9 be fa 77 c0 5d 9f c3 90 ca 72 02 3f 97 ee c5 f8 fe 74 68 0f 92 d8 eb e8 32 24 b9 ff 56 5d 0d 59 2a 7e a8 30 76 50 09 f1 e2 a5 ef 9e 92 d7 e5 b8 2c 1e fe c4 3a 14 7f c2 b9 74 35 7a 13 a1 4f d0 fa ad ff b1 48 d0 15 06 0f ab 4a f3 5d 33 18 ba 5f 8a a2 3a fa ff 61 9c 78 4b 5e d2 02 85 39 98 a4 80 ee e0 8d b8 aa ba b6 f7 91 82 dd a8 31 64 31 0e 99 31 36 b4 2c e8 e2 e5 bb 94 a3 7e a2 a6 9e 3d 21 2d 32 c8 14 5a 26 f2 87 a3 c0 bd 10 7f f0 2b dd f1 42 f0 4b a5 40 0b 48 e7 0e 72 Data Ascii: Q"n')VJS@1$~>c:Q8EE.##EuISWpNP(pB&}?j>HpF"LBw]r?th2$V]Y*~0vP,:t5zOHJ]3_:axK^91d116,~=!-2Z&+BK@Hr
2024-05-27 22:29:19 UTC	4439	IN	Data Raw: 07 24 98 5d 8e d9 7c 8c 24 c5 18 78 65 19 2f 5f fd 45 92 05 df c7 05 63 77 23 09 82 22 74 ed 35 cc b8 f4 32 5c 4b 33 11 0e f0 6b 83 e7 83 71 12 3f ba 43 00 31 33 67 66 57 62 5c 1b 44 14 2c d0 bd f8 09 5e f9 df 97 d2 bc 78 31 9e dd 97 24 e1 25 fc 05 1f 61 e6 f5 d7 93 9b 3a 15 39 90 a9 cb cc 3e 1c 45 d1 03 db 15 90 de de 01 d5 d7 e5 ae 96 d3 97 cc 4c 16 3c 6f 2e fa 35 6b 2f fc 18 f1 ea 37 90 f9 72 50 c3 76 4f 40 50 d9 01 8d 48 4f 79 2f 6d ff ef ef 19 37 73 56 65 77 4f 08 e1 03 71 1c 2f da 6e 80 84 60 5f 00 ae c5 cc 79 ef 79 63 e1 cf e9 b8 e0 42 a2 ee ae c1 f0 86 ed ce 12 32 c4 64 86 81 d9 b3 d9 ff ae db a9 9f 75 08 71 16 4d eb 34 f3 ef 8f a3 e4 bf b6 39 20 a9 f7 17 38 e9 db 01 22 59 ca eb f7 ff 82 75 e7 9d 47 43 4f 3f 25 d9 50 ff 62 0f a0 88 08 af 40 69 f6 Data Ascii: $]\|$xe/_Ecw#"t52\K3kq?C13gfWb\D,^x1$%a:9>EL<o.5k/7rPvO@PHOy/m7sVewOq/n`_yycB2duqM49 8"YuGCO?%Pb@i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:19 UTC	661	OUT	GET /img/shild.jpg HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:19 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 65013 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 32608 Content-Type: image/jpeg Date: Mon, 27 May 2024 22:29:19 GMT Etag: "552369786bdfe476e86028e81f029a3e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R87FYT0NBBESK1ETWPHN Connection: close
2024-05-27 22:29:19 UTC	763	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2024-05-27 22:29:19 UTC	2372	IN	Data Raw: d6 17 2b c3 e7 58 49 8e 29 78 1e 80 00 00 00 00 00 00 00 00 00 00 00 26 b5 af 43 dd cc fc fe 7c a7 bd 6b 2d f2 9d 81 09 00 00 0e 6b 6d c6 46 58 54 29 5a 08 c8 00 00 93 61 ab 74 87 d3 b2 e1 7b 8b 35 f2 1d 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 2a 77 75 76 b8 e7 8f 8e d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 33 b9 41 1f 7a 07 9e d1 b0 00 1c cf 33 d1 73 35 6c 26 da 7d 02 8d ce 33 98 fb 0f cc a3 ee ac 59 e0 00 00 37 7a 44 bc fa 83 45 bd bb 4c 25 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 3d 5e d3 57 6f 80 75 88 00 00 00 00 00 00 00 12 dc 84 b5 cd ac 1e 7b 45 ef 9d 20 00 00 00 00 00 00 00 00 6f fd f3 dc fb 20 01 c4 c3 27 71 97 a3 7b 33 32 fb 9c e8 fc 97 9f 1f Data Ascii: +XI)x&C\|k-kmFXT)Zat{5 *wuv3Az3s5l&}3Y7zDEL%=^Wou{E o 'q{32
2024-05-27 22:29:19 UTC	538	IN	Data Raw: a1 95 a2 00 00 79 14 de 7b e4 2f 7c 94 5a ed 8a 71 f9 e2 78 37 b2 83 d0 00 00 e8 79 ee 86 bf 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb Data Ascii: y{/\|Zqx7y^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^
2024-05-27 22:29:19 UTC	4744	IN	Data Raw: 98 00 00 04 93 d4 bb 38 d2 67 84 24 00 00 00 00 19 db a3 9c a3 e6 37 a9 98 88 c8 00 00 00 00 00 00 00 00 7d 1b 4f d9 54 ef 22 35 6e f2 23 12 23 12 23 12 23 12 31 cb cf 40 00 05 5b 55 65 1e 7c 69 d0 00 00 00 00 0e a8 65 68 80 06 31 67 84 a2 1e f8 00 00 2b d8 7b e7 03 17 67 c6 ed 67 78 3b f2 00 00 00 00 00 00 00 00 00 00 00 05 cf 3d b1 d7 e1 9e 2e 88 70 ea d7 ec 20 f7 cf 94 bc f7 46 a0 00 00 03 3c 05 ea 52 49 38 56 10 98 00 00 00 03 c2 b6 54 bc a7 63 6c ad 66 d7 00 97 80 00 00 00 00 00 00 3a 18 fb fa fd 7d 15 7b 80 00 00 00 92 3c 89 44 26 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 0c 23 9e 39 47 07 af 7c f1 e8 f1 e8 f1 e8 f1 e8 f3 55 b6 4e 3f 3c f3 b0 e4 76 73 b1 1d b9 80 00 00 00 00 00 00 00 00 00 2e 79 ee 3d 9f b3 63 e8 78 f5 5b b7 8f 47 8f 7d Data Ascii: 8g$7}OT"5n####1@[Ue\|ieh1g+{ggx;=.p F<RI8VTclf:}{<D&<P#9G\|UN?<vs.y=cx[G}
2024-05-27 22:29:19 UTC	5930	IN	Data Raw: 42 d0 a6 d7 bd 4f a5 63 ca 91 e0 fc 47 59 43 c8 93 0d 71 f9 3d c4 5a 76 dc cf bb c9 a5 45 d3 c5 eb 99 05 a9 68 93 15 d8 8b db 4a 4d 4a a7 d2 c9 8e 5c 8f 07 e2 f7 12 69 b8 83 23 49 f1 59 8e e4 85 46 86 dc 7d c9 9f 77 91 4d 8b a9 95 b2 e3 48 79 13 29 2b 67 69 96 1c 90 e4 2a 7b 71 13 cb 91 e0 e2 e2 2e 17 0b 85 c2 e1 70 b8 5c 2e 17 0b 85 c2 e1 70 b8 5c 2e 0f b0 dc 82 7e 1b 8c 70 c8 b1 38 f4 e3 30 9c 10 9b 85 c2 e1 70 b8 5c 2e 17 0b 85 c2 e1 88 92 78 ca e4 53 e3 e9 63 5c 2e 17 0b 85 c2 e1 70 b8 5c 2e 17 09 74 e6 65 09 10 5f 8c 7d 51 20 bb 2d 51 d8 6e 2b 77 0b 85 c2 e1 70 b8 5c 2e 17 0b 85 c2 e1 70 b8 5c 2e 17 0b 85 c3 1d 99 1e 0e 21 f1 5f a7 a1 c0 e3 4b 65 5b ec 43 71 e0 cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b Data Ascii: BOcGYCq=ZvEhJMJ\i#IYF}wMHy)+gi*{q.p\.p\.~p80p\.xSc\.p\.te_}Q -Qn+wp\.p\.!_Ke[Cqf-}b?23+)#I tK
2024-05-27 22:29:19 UTC	7116	IN	Data Raw: 6e 99 68 ad 5c a4 17 7d ab b3 8d 89 da 16 91 3c 2c a1 ba 13 69 7c 33 58 08 47 7c 37 31 8c 07 10 94 ec e0 fa da 1e e4 05 94 f3 7d e1 50 7f 58 39 d9 eb 3b 5b b2 17 ed b4 34 77 d6 b5 a3 3b ee ab 71 3e ba 1a f1 b4 74 b8 05 55 b3 b3 87 8b 6b b4 89 e1 96 83 eb 66 4a 27 73 87 b0 c9 c1 52 18 86 21 60 5c e3 20 15 08 1a ad ed 2e 27 a1 52 f8 71 0f ed 9e 5d 0e 19 17 67 5c ce 06 ce 27 86 5a 0f ad 9c e1 43 2e 13 ae 4a 8b da 5a ee 05 1b 23 9d 11 19 ea 38 a0 f6 5d d2 a4 f3 e9 c5 6b 54 cd 8d 55 74 e5 89 9c 0a d6 0e 6a a3 02 63 fb 28 4f 37 96 e4 5d 9d 6c 51 e0 6c e2 78 65 a0 fa d9 b5 bb 76 a8 be 3b a3 b9 4c 56 c3 78 41 ec 33 69 e8 4b 14 4e ca a7 11 d3 3d 3a 95 7a 43 45 64 dc 99 0f b2 25 91 76 75 cc 3b 51 06 f1 65 13 c3 2d 07 d6 c8 4f 0b 6b 3a 23 79 ac ce 7a 5b 14 9d 5c 23 Data Ascii: nh\}<,i\|3XG\|71}PX9;[4w;q>tUkfJ'sR!`\ .'Rq]g\'ZC.JZ#8]kTUtjc(O7]lQlxev;LVxA3iKN=:zCEd%vu;Qe-Ok:#yz[\#
2024-05-27 22:29:19 UTC	8302	IN	Data Raw: 04 10 41 48 7e 3d 00 10 42 01 07 fc f3 cf 3c f3 ca bc f3 cf 3c f3 cf 3c f3 cf 3c f2 b0 02 08 21 bb c7 1c 71 c7 1c 71 d6 f0 c2 08 23 aa 04 10 41 04 30 41 04 10 41 04 10 41 04 10 41 45 b4 41 04 10 53 53 cf 3c f3 cf 3c f2 af 3c f3 cf 3c f3 cf 3c f3 4f 3c f0 b0 82 08 28 81 04 10 41 04 10 41 d4 30 82 47 ee 01 04 10 41 88 a0 41 04 10 41 ce b0 41 04 10 41 04 10 41 04 11 7c f3 cf 3c db cf 3c ab cf 3c f3 cf 3c f3 cf 36 fb ef be b8 40 82 08 20 82 08 20 82 08 20 82 08 20 25 fb e2 41 04 10 40 1c 10 41 04 10 45 8c 10 41 04 10 41 04 10 41 29 ef be fb ef b9 f3 cf 2a f3 cf 3c f3 cf 3c f3 cf 7e fb ef be f4 d0 82 08 20 82 08 20 82 08 20 82 10 4f be aa b0 41 04 10 41 04 10 41 04 15 d1 fc 60 41 04 10 41 04 10 fe fb ef be fb e8 3c f3 ca bc f3 cf 3c f3 cf 3c f3 cf 3c f3 cf 3c Data Ascii: AH~=B<<<<!qq#A0AAAAEASS<<<<<O<(AA0GAAAAAA\|<<<<6@ %A@AEAAA)*<<~ OAAA`AA<<<<<
2024-05-27 22:29:19 UTC	2843	IN	Data Raw: d6 f7 7e bc a9 5c cd 8f 48 52 94 ea ec 79 c2 bd 8f 8d 68 1b ac 4f 9a 70 98 c1 36 1a 9b ca 8f 2a 1e 7d c4 d2 01 2c c3 7e 82 96 f2 58 60 0d 06 45 47 30 70 ee 8a d9 0d eb c9 db 42 af 00 fb 50 66 b1 4c ce 14 d9 8a 1a 62 2a 54 b0 15 2f 44 c3 35 0b f3 f0 3c b7 b1 b6 31 38 9b 54 08 49 a4 62 8a 8c c4 71 69 88 7d 69 13 24 6e 49 b2 e9 ba be 1b 07 17 b2 b8 1c 1d 8d fd 31 42 cb 93 d7 db b1 b2 4e c8 50 1d f4 2c b4 9f 1d 7c 6e e5 52 d8 8b 17 97 54 99 d1 c6 22 d2 07 06 94 05 58 0c 56 86 de 89 7c e6 fc 38 d3 4e 62 49 13 55 a9 3b 3a 19 1b 03 1a 91 8d 88 6f 53 c0 48 3c fe a8 8a 13 35 c3 d7 7b c1 72 de c6 d8 c4 e2 78 01 84 f0 9c 01 9f 99 ed b2 70 08 12 e4 6e 7a dc f3 f0 c4 79 21 8e 11 49 e8 15 81 c1 d8 65 50 6c f1 17 27 03 c8 f9 ec 44 2c cd cb 67 69 c1 a6 cc 6d 95 6d 03 15 Data Ascii: ~\HRyhOp6},~X`EG0pBPfLbT/D5<18TIbqi}i$nI1BNP,\|nRT"XV\|8NbIU;:oSH<5{rxpnzy!IePl'D,gimm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49728	104.26.5.15	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:19 UTC	618	OUT	GET /v2/free/self/ HTTP/1.1 Host: api.db-ip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://facilitator-of-company-case-2605792.netlify.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://facilitator-of-company-case-2605792.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:19 UTC	765	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 22:29:19 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: max-age=1800 x-iplb-request-id: A29E9FD2:738E_93878F2E:0050_6655093F_FD2B5DD:7B63 x-iplb-instance: 59128 CF-Cache-Status: EXPIRED Last-Modified: Mon, 27 May 2024 22:13:44 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6mcdX%2FnWfoThAWhaKsnHbBC%2FKWpw4inxQlqxpn9uk5pEVBmOhqLlTODbpkeydqizre%2F2T240cn6cJZIrk35uBj7N1SPU82OBMXD1zmZSR33I%2FRzEW7ZB5KoNRuejxf0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a9716f3f5143e6-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 22:29:19 UTC	247	IN	Data Raw: 66 31 0d 0a 7b 0a 20 20 20 20 22 69 70 41 64 64 72 65 73 73 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 0a 20 20 20 20 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 20 22 4e 41 22 2c 0a 20 20 20 20 22 63 6f 6e 74 69 6e 65 6e 74 4e 61 6d 65 22 3a 20 22 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 73 74 61 74 65 50 72 6f 76 43 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 73 74 61 74 65 50 72 6f 76 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 0a 7d 0d 0a Data Ascii: f1{ "ipAddress": "8.46.123.175", "continentCode": "NA", "continentName": "North America", "countryCode": "US", "countryName": "United States", "stateProvCode": "NY", "stateProv": "New York", "city": "New York"}
2024-05-27 22:29:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49725	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:19 UTC	664	OUT	GET /img/save_img.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:20 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 38933 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 7550 Content-Type: image/png Date: Mon, 27 May 2024 22:29:20 GMT Etag: "1d1b4906bd89108d25460df3f3addef7-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R8NNCVQ6TEYP7EATCG2T Connection: close
2024-05-27 22:29:20 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 02 fa 50 4c 54 45 c3 e2 c9 b5 dc bb b0 da b8 a9 d6 b2 a6 d4 ae a2 d2 aa 9d d0 a6 9a cf a4 98 ce a3 c3 e1 c9 99 cf a2 ef bc 57 fc f2 df fc f4 e3 fc f2 e1 fb ec d0 ac 4d 00 fc f1 dc ff f5 df ff f9 e4 fa e6 bf ff ff ef ff ff f7 ff fd ea f8 e2 b7 eb dc c6 c3 af 9a 96 7c 6b 7e 60 50 a8 8f 7b ce c0 aa fd f1 dd e1 d3 be 8c 6d 57 4e 27 15 37 0f 03 3e 16 07 55 2e 18 5f 39 26 fc f1 da 48 20 10 2d 07 00 43 1b 0a 6c 49 34 ff f4 da 24 01 00 4a 23 12 f8 c9 54 d9 ca b3 45 1f 0f af 99 87 f7 ed da a0 75 4b ea b9 47 7f 56 35 f2 c1 7f eb bb 7b ac 87 54 91 67 42 de ae 73 e3 b4 77 de af 73 de b0 75 d9 ab 71 de ad 6e be e0 c4 e2 ac 68 b2 f0 d9 bb de c1 b8 dd bf b2 60 16 b6 Data Ascii: PNGIHDRxxPLTEWM\|k~`P{mWN'7>U._9&H -ClI4$J#TEuKGV5{TgBswsuqnh`
2024-05-27 22:29:20 UTC	2372	IN	Data Raw: b0 3c ff ff fe f1 c0 66 fc ee d6 f7 e6 cb dc 6a 00 c6 f0 dd aa 49 00 f7 c9 83 bf 95 5e f9 ae 00 f5 b6 1f fc ef d9 2b b3 10 1d 00 00 00 0b 74 52 4e 53 e5 f2 f2 f2 f2 f2 f2 f2 f2 f2 e5 23 07 71 10 00 00 1a 28 49 44 41 54 78 5e ec d6 45 8f 23 57 14 05 e0 de f6 ff 97 5e a1 8b 99 cc cc 0c cd cc 3c 8c 61 8e 94 f3 5e 5b 9a ee 59 d9 d1 4c 5a 89 72 5c 5e 79 f1 d5 b9 f7 2e bc b2 b2 fa 24 59 59 d9 7e a2 ac ac 3e 8d bb fa af 84 0d c3 f8 6f c3 ff ef d8 b6 9f 00 ce a5 93 b5 a4 9b cc 66 93 74 2e 67 ff 33 b0 51 ee ae ad a5 d7 eb ad 8d 8d ab a3 56 fd a2 9c ee ce ba c0 bf 2a 6c 53 74 bb 7f 73 b5 f5 72 70 8e fc 34 1c f1 ef 37 4b 3b fd ee 64 36 29 db 5f 07 36 72 dd b5 c4 e8 b7 ae de ed 9e 9f 0f 76 6f 53 88 32 54 df 36 ae 1b 0d 7e b3 54 aa db 54 4f db 5f 16 ce 75 93 b5 f4 45 Data Ascii: <fjI^+tRNS#q(IDATx^E#W^<a^[YLZr\^y.$YY~>oft.g3QV*lStsrp47K;d6)_6rvoS2T6~TTO_uE
2024-05-27 22:29:20 UTC	538	IN	Data Raw: 13 56 63 72 cd cd 43 f1 d1 a1 a1 c1 41 42 0f 42 ee ea ea 47 ab 43 c3 7b 1f fe 60 fe 14 83 ad cd 44 60 09 92 e1 b5 bc d3 a6 07 06 82 91 23 fd 0c 66 bd 95 e8 b9 ab 7a f5 96 a2 20 89 92 64 cd ae 38 b7 d3 d9 f9 5b 1f 7f 7a 74 10 31 c4 e8 55 40 47 46 c7 46 f7 ee 5a d5 00 13 39 57 c3 27 4b a0 35 09 d5 e5 eb d4 bb ca 15 60 88 f1 95 28 1f d6 bd ea 3e 6e 27 9e 20 e2 e7 59 06 cf d1 00 39 3a 3c 3c 32 84 00 7e 64 74 74 6c 6c 74 64 e4 a1 e0 5f 9e 7f ba 62 75 c2 c8 d5 e4 6d c0 12 1b e0 7d 3e b7 de 5d 06 f7 c1 00 98 6a 4b 06 13 39 a1 1c af a5 13 9c 63 58 fd e9 38 50 43 83 43 43 a0 8e 12 15 92 1f 0a 7e fb 8b a7 9f f9 2f f8 9f 05 b2 9a eb 4b 93 77 00 3e bc 61 29 b6 da a9 12 a1 b2 55 5b 74 0a 25 c5 85 db 78 88 35 0c 28 26 ab c7 47 87 87 86 87 01 24 b1 a0 ef 0a fe ec 59 80 Data Ascii: VcrCABBGC{`D`#fz d8[zt1U@GFFZ9W'K5`(>n' Y9:<<2~dttlltd_bum}>]jK9cX8PCCC~/Kw>a)U[t%x5(&G$Y
2024-05-27 22:29:20 UTC	3875	IN	Data Raw: 38 a0 d1 b1 68 74 02 5c a2 22 c7 df d8 4d 31 e7 18 93 2b 91 3b 94 11 b9 47 4c 98 68 ca c5 66 5d f5 84 83 5f 4e 30 2f 65 dd af ec 2b 9a 74 50 21 a7 0b 35 39 83 4e 99 0c fe c7 c4 71 40 e1 33 02 60 a0 27 26 a2 04 de 5d 31 b6 d3 02 55 17 17 17 95 8d a4 c9 ce a6 76 bf 8f b6 c4 fd e8 eb e9 f6 07 9a 0f 38 31 62 34 ce 71 3e bf 96 5b 60 ab 19 1c 3d 0e 24 e4 c2 6e e4 1a 99 c6 6b 77 30 b7 13 c0 31 a3 ae c0 56 c3 6b 7c 9a b2 dc 78 f0 e0 00 c0 f7 3b 2a d2 d7 d2 d4 e0 74 b6 d2 c3 13 a7 b8 50 9f c8 2e 90 d5 4b ef 5c 05 78 94 c1 93 d1 d1 b1 91 21 08 8e 4e 4e 8e 8d ed 62 f5 cd 13 00 27 92 54 98 b1 58 39 6f 63 b0 24 b4 82 2f d5 3a 8b c5 86 93 a1 2f 39 7d b2 a1 58 74 3a 24 18 0d cd ff 71 9a 83 c0 77 7e c7 4e 8f 45 51 cb c3 23 a8 b2 28 b8 93 df 7c b8 e2 df 9e f8 d7 f2 95 05 Data Ascii: 8ht\"M1+;GLhf]_N0/e+tP!59Nq@3`'&]1Uv81b4q>[`=$nkw01Vk\|x;*tP.K\x!NNb'TX9oc$/:/9}Xt:$qw~NEQ#(\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49727	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:19 UTC	659	OUT	GET /img/doc.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:20 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64181 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 5723 Content-Type: image/png Date: Mon, 27 May 2024 22:29:20 GMT Etag: "8270521d3d689b807b0b038f11a97a2a-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R8NMRKGK0TSY6ZS933JQ Connection: close
2024-05-27 22:29:20 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 16 22 49 44 41 54 78 5e c5 9b 6b ac a5 57 79 df 7f cf 5a 6b ef 7d f6 99 73 9d 61 2e 1e cf d8 78 3c b6 42 cc a5 83 12 15 4c 88 1c 6a 0a 84 02 09 90 96 24 25 55 3f 44 91 7a 51 0b 91 10 97 24 6d 2a 12 a2 88 24 52 a9 d2 2a 10 68 55 11 28 a9 d3 a2 60 e3 d4 2d c1 34 24 84 5b a8 cd 4d b1 0d b6 c7 e3 f1 dc 2f e7 cc 39 67 bf ef bb d6 13 b1 9f 47 6b e9 c8 42 11 02 d4 25 ed 79 df f3 ee f7 dd 7b fd 9f eb ff 79 9e 3d 32 dc f7 f6 53 e4 7e 19 14 44 40 22 48 00 cd 10 46 88 08 5a 7a 44 22 00 84 04 65 80 b4 00 25 a3 b9 03 01 10 44 02 a8 a2 5a 90 38 46 f3 0c b4 80 2a c4 91 9d 4b b0 f7 fa 2d bb 2e c1 5e 28 e4 01 42 b4 fb 8a 9f 2b 10 42 fb ce 3c 80 66 7c b5 fb 11 3b cf bd Data Ascii: PNGIHDR<<:r"IDATx^kWyZk}sa.x<BLj$%U?DzQ$m$RhU(`-4$[M/9gGkB%y{y=2S~D@"HFZzD"e%DZ8F*K-.^(B+B<f\|;
2024-05-27 22:29:20 UTC	2372	IN	Data Raw: 3e 87 98 04 85 e6 7f c5 c1 0f 3b 68 b7 69 f7 cf ae f2 fd 58 09 58 95 0d fe 7a f5 4e 1e 5f 7f 25 5c 7b 82 b8 73 16 2d c5 d2 5c ee d1 dc db 7e 3d b0 b5 54 94 ed 3d 4f 6b da 5d 33 5c 25 db 51 33 c9 fd 15 c1 7d b4 14 a0 98 54 9a 49 7b 80 52 c4 05 40 e9 f9 7e ad 44 cf 74 d8 e2 9b 6b 3f 46 56 b8 e9 ec 7f 27 22 e4 b0 e8 d6 e6 f9 b6 e5 f8 a6 14 01 72 e7 99 a6 c0 d0 a1 22 35 a0 25 cc 04 0c 5c 70 b3 05 93 5a c9 10 fd 9a 47 39 9d 9b cd 08 19 ed e1 7b b9 4a b1 00 17 04 52 1a 11 4a c7 a4 3f c7 e3 7b 5f 42 09 63 6e 3e fd 41 22 d7 18 26 fb 90 7c 0d b4 b4 20 58 3a 53 54 4c 55 08 0a 2e 18 0f c4 9e a7 53 65 27 28 e0 d1 56 b0 87 42 42 0c a8 a7 0d 45 74 b0 0f 19 66 7c 2f 96 aa 52 54 2b d1 03 21 88 a0 08 41 07 16 bb 33 3c b1 fe 62 32 81 5b 9f fc af a4 d9 39 7a 59 24 44 4f 81 Data Ascii: >;hiXXzN_%\{s-\~=T=Ok]3\%Q3}TI{R@~Dtk?FV'"r"5%\pZG9{JRJ?{_Bcn>A"&\| X:STLU.Se'(VBBEtf\|/RT+!A3<b2[9zY$DO
2024-05-27 22:29:20 UTC	538	IN	Data Raw: 00 da d4 a4 28 10 08 92 26 6e ef 54 66 e2 7e e0 f8 46 20 20 5a 1a 29 29 c5 fe f6 3c 9c 62 20 ab 32 9d 8c e7 60 01 8a b6 54 33 4a 11 54 e6 4d 82 f1 28 92 82 15 01 ff eb 11 e5 97 3e 25 1c 5d 1b d8 3f b5 28 3b 89 d0 65 cf 24 02 4f 5e 81 9f fa 3b c2 47 5f 17 e7 60 67 1d fc d2 8f 07 96 a7 c2 b9 cd c2 f1 49 e6 81 9d 75 fe f9 93 6f 82 98 08 b1 db c5 f7 bd b6 af 93 93 a4 f8 f0 58 06 64 b4 e0 b5 70 06 92 db 7d b1 ba 13 85 42 5d 6e a2 60 05 82 fb e5 ee f7 85 7a c1 8b 82 b6 ce 6e 0c fc fc 3d c2 fe 45 61 29 c1 43 e7 60 65 11 86 01 46 23 50 8f de 47 d6 e0 3d 9f 2c cc 7a f8 c7 cf 11 ba 09 fc e8 2d c2 7b 3f 6d 56 10 a5 70 6c 8f f0 fe 2b 37 f2 8a 85 97 f0 ba b5 bb 90 e1 3a 54 87 5a 3c a8 8f 5f da f4 10 20 8d 51 a8 ed 57 ab 91 3d 63 d2 ca 41 b2 8d 5c 24 26 02 90 55 4d c3 Data Ascii: (&nTf~F Z))<b 2`T3JTM(>%]?(;e$O^;G_`gIuoXdp}B]n`zn=Ea)C`eF#PG=,z-{?mVpl+7:TZ<_ QW=cA\$&UM
2024-05-27 22:29:20 UTC	2048	IN	Data Raw: b9 30 8b ac 8d 33 a3 04 af 79 6e e0 1a 70 12 e5 d8 32 1c 59 17 fe f7 03 85 97 9f 08 fc 87 57 04 7e e7 b3 85 0f 7e 56 d9 ee 61 3a 02 15 78 dd 09 e1 5d af 0c dc 92 84 d3 bd b0 10 33 5b 12 f8 d0 c5 e7 f1 aa a5 7b 08 79 9b 5c 80 d0 38 36 08 a9 96 7a b9 40 f4 b2 b0 74 48 9c 9a c6 1d 28 68 1d a2 59 8a 12 06 40 3d ef 06 11 a6 d3 85 4a 3a 8c 5e 2a 08 4e 3f a9 d3 c1 b3 3d 5c dd 1e 58 1f 5b 46 bc e7 c1 c2 b3 5f 10 b9 15 b8 eb 31 e5 0b 8f 29 2b 4b f0 96 97 06 6e de 23 fc cc 0f 07 fe e4 6b 99 4b 5b 70 75 07 6e 39 00 1f 7e 4d 44 81 33 c0 76 67 c2 5c 0c 70 b6 5f 82 bc 00 74 a0 c9 70 81 61 d3 4c 70 bf 34 d0 a5 cd 82 b5 58 5e 10 04 42 b4 24 1e 92 99 79 1c 5b 55 d5 aa 20 00 92 83 2d 0a 43 f6 5a 37 48 a5 8f c9 59 d7 c5 ad 4c c2 98 d4 33 96 e1 df df af fc ec 5d 99 b7 7f 22 Data Ascii: 03ynp2YW~~Va:x]3[{y\86z@tH(hY@=J:^*N?=\X[F_1)+Kn#kK[pun9~MD3vg\p_tpaLp4X^B$y[U -CZ7HYL3]"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49726	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:19 UTC	670	OUT	GET /img/meta-logo-grey.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:20 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64180 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 105511 Content-Type: image/png Date: Mon, 27 May 2024 22:29:20 GMT Etag: "db33657ce611b9f2d0bb4754b3b18618-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R8PBP7ASN93842CX7HTM Connection: close
2024-05-27 22:29:20 UTC	763	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 00 f0 08 06 00 00 00 58 15 aa 71 00 00 14 a9 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da a5 9a 69 96 1b b9 95 85 ff 63 15 5e 02 e6 61 39 00 1e 70 4e ef c0 cb f7 77 41 4a 2e a9 ca c7 5d dd 4c 25 49 91 11 08 e0 0d 77 40 a4 3b ff fc 9f eb fe c1 23 0f 5f 5d 2e ad d7 51 ab e7 91 47 1e 71 f2 a6 fb cf 63 be e7 e0 f3 7b 7e 8f 9e 7d fa 7e fa cb e7 ee 7e cf f1 91 8f 74 48 fa 9e 50 3f af e1 c7 e7 df 13 7e bc 86 c9 bb f2 87 81 fa fe 7e b1 7e fd 62 e4 ef f8 fd b7 81 e2 e7 25 69 46 7a 6f df 81 c6 77 a0 14 3f 5f 84 ef 00 f3 b3 2c 5f 47 6f 7f 5c c2 3a 9f 57 fb b1 92 fe f9 75 7a ca fd d7 69 ff e9 ff 8d e8 59 e1 3a 29 c6 93 42 f2 3c a7 f4 9d 40 d2 6f 72 69 f2 45 e4 Data Ascii: PNGIHDRXqzTXtRaw profile type exifxic^a9pNwAJ.]L%Iw@;#_].QGqc{~}~~tHP?~~~b%iFzow?_,_Go\:WuziY:)B<@oriE
2024-05-27 22:29:20 UTC	2372	IN	Data Raw: 28 63 64 30 9f 10 cb 0d 3f 72 e7 e2 27 a3 ca dc ff 2b 6f ae e5 5f f2 16 ff af 99 73 4a dd df cc dc 9f f3 f6 57 59 33 d1 d0 7e 19 fb 74 a1 82 ea 13 dd c7 f7 a7 cf 38 c8 c7 64 19 2c 3d ee bd 9b 08 6c 8f e8 9a 89 02 63 9f 37 73 f4 e5 84 1e a3 9d d0 47 3c 8d a0 dc 34 1b f0 d8 17 57 5f 61 dc 5b 57 b8 ad df 7c f8 a2 9c 55 40 2a 8b 2b bb 55 7a de 35 e5 69 89 89 cd b1 32 2b ba fb d6 53 a7 11 fe dd 5b ca fd 86 32 e3 32 d2 d7 ae cf 67 58 5b 01 9d 50 ba 4e 58 aa 1e 17 e7 1c d7 6c 85 c0 62 fd cd fb 86 4d c0 c3 19 e5 10 7e f5 66 23 84 c7 2a d0 e8 cf 6a 79 ee 90 f6 dc 20 79 6c a4 2f 18 08 1a ba db ad 6c cb 84 ba 2c 92 33 c9 a9 2e 1d 2e 18 eb b3 91 9b ed 47 3a b3 f7 48 90 47 af 8d 78 b4 c3 1c cf ba 76 d2 9d cd da 34 9a d6 52 ed 54 5a b4 e1 99 23 2f 33 67 db 93 a3 fa 60 Data Ascii: (cd0?r'+o_sJWY3~t8d,=lc7sG<4W_a[W\|U@+Uz5i2+S[22gX[PNXlbM~f#jy yl/l,3..G:HGxv4RTZ#/3g`
2024-05-27 22:29:20 UTC	538	IN	Data Raw: a1 dd 49 91 c7 69 5d b5 48 e6 94 c2 fc f6 86 b3 92 82 08 0f 62 2b 88 9e 91 35 a8 0f 0e 3c da 2e 2b 9b e2 1b 1e 69 30 0a 20 0d 95 88 51 3a e8 1a 85 49 1d 45 48 c1 a2 d8 00 b1 00 10 88 37 22 67 63 49 1d c4 40 59 c9 77 5f d0 db e3 a3 39 8b 56 93 0c 2c 88 b6 a7 5a 80 7d 60 13 8f 33 25 66 07 eb 5d 90 05 33 e2 9a a9 22 cb 1a ca bf 63 28 71 81 99 3a 16 f8 e3 41 bd 7d 64 1d e6 84 49 a2 c6 44 0b b0 3a 42 f9 04 69 54 e2 b7 bc 50 20 49 56 f3 8c ff 76 39 da 5e 4d 2e 8a f4 dd a5 2d 09 59 7e 74 1d 99 42 c7 14 a1 05 8b c1 c6 02 55 37 11 6a e4 42 87 71 89 76 ee 1a dc 60 a1 e8 ce e8 91 93 41 17 70 45 52 05 c5 ee 93 e8 47 c4 7a 33 c1 ef 15 67 4f 0e c0 08 d2 81 e2 bb cf 3a 26 f5 2f f6 0e 39 8c 11 73 b0 11 05 ab 12 ed f4 8a f0 21 b1 30 9f f1 2c 25 2d 08 1f 01 65 dd a8 16 94 Data Ascii: Ii]Hb+5<.+i0 Q:IEH7"gcI@Yw_9V,Z}`3%f]3"c(q:A}dID:BiTP IVv9^M.-Y~tBU7jBqv`ApERGz3gO:&/9s!0,%-e
2024-05-27 22:29:20 UTC	4744	IN	Data Raw: 63 cc 73 86 5a 51 d7 f7 4c c8 de 07 09 8a 80 88 be f9 80 de 48 37 1c a9 0b e2 c5 57 f4 52 11 c8 37 2e b2 a5 f7 93 97 c1 df bd 69 8e 84 16 16 04 1a 98 cc eb e3 82 13 f5 50 70 d0 8e 91 76 3a 9c f6 86 e8 d1 b7 10 44 38 f1 a7 4f d0 d7 74 70 08 4c 07 29 03 6e e8 de d3 4e 63 12 2d 02 d3 1b c4 33 d0 42 f7 6c 6a 95 84 fa e2 10 78 97 10 78 62 9e 29 d7 c4 20 eb 1c dd af f0 1b 21 23 52 d8 08 7e 90 4c ec 00 94 8a 20 2b 0b db 3b 66 a4 87 66 a5 5d 24 f4 11 29 a0 72 26 43 81 0b 6d 96 37 37 c4 3d 6f 26 fa ab 00 2b 15 34 c6 f8 56 c2 4b cf 95 45 65 d0 83 5c 9b 5a 7a 3d 68 de 65 98 99 ca a5 5b e9 30 e2 07 2f 83 ab f2 7d 90 7e 9e da 8f 81 c9 30 29 a0 91 14 2c 73 27 50 34 e7 b0 6c 30 2a c0 61 86 f1 74 0c 83 53 40 39 ac 84 fb 43 c5 18 ed 85 ad 83 93 b5 b9 47 93 46 c9 96 2c 46 Data Ascii: csZQLH7WR7.iPpv:D8OtpL)nNc-3Bljxxb) !#R~L +;ff]$)r&Cm77=o&+4VKEe\Zz=he[0/}~0),s'P4l0*atS@9CGF,F
2024-05-27 22:29:20 UTC	5930	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-27 22:29:20 UTC	7116	IN	Data Raw: d3 93 34 9b fb fc f6 5d ef 5b b7 e1 91 7b 99 79 bf 18 cc cc 88 f3 23 f8 af 7f f3 8f e7 97 bb 2a 67 d7 1b 49 4f 12 fb e8 a0 36 06 60 07 a3 f2 8d 25 f6 f3 bf 86 9e dc 0f 6c 9f 34 ee 25 fe c6 91 3f 77 99 bf 07 11 41 1b d2 21 33 2b 39 37 84 19 7b cd 94 4a 05 44 a5 c5 05 52 4b 9c e2 a2 09 f2 fb ab 63 68 ed db 40 c1 90 77 d3 cd 37 73 95 d1 20 56 79 bf 5f 05 4d 0e 0a 1a 86 80 d4 5a e8 30 84 51 1a 20 1a 50 05 35 5a 6f 34 ee 11 41 28 08 87 59 73 bc 95 df fc 8d 37 af 3e f9 67 f7 df f2 fb a3 c3 63 9f 29 97 cb 67 c5 69 5a ac 4e d4 11 04 11 82 20 f0 7a 8f a7 46 e0 5e 5e 5d d9 4b dc 7b c9 4d 4d 19 ed 14 88 87 5f 68 1c f5 5f ef fc 57 b9 e3 ff e7 fc 79 a2 56 43 bd d9 f4 29 95 ca f7 4e 84 d6 20 4d 45 a3 82 73 d6 6d dc fa 85 db 57 fc e8 f3 ab 9e de b8 74 26 8e df da 6d db Data Ascii: 4][{y#*gIO6`%l4%?wA!3+97{JDRKch@w7s Vy_MZ0Q P5Zo4A(Ys7>gc)giZN zF^^]K{MM_h_WyVC)N MEsmWt&m
2024-05-27 22:29:20 UTC	8302	IN	Data Raw: 83 f4 77 44 e7 7d d6 1c c3 28 0d 9b 66 80 d2 08 0b 45 c4 49 0a 6b 2d fa fb 66 f5 0d ee dd f5 ee db 6e 5b f1 b9 f1 f1 f1 bf ed ee 7e f9 e7 e7 5b 19 ca 57 f4 de 09 f6 c5 0b 95 57 fd fa 2f 72 8f ed d8 8c 62 1f 33 06 69 58 07 28 d3 12 87 04 e7 fc 75 5d 4f 9b e8 ed e9 c6 c1 d1 21 cc ea eb 5a b0 6d f3 f6 4f 3c fc e4 86 d5 47 bb 49 23 1c 9a d1 51 ee fb bb bf ff 9b cf cc 9d 37 ff d4 e1 83 c3 41 b9 ab 0f 19 08 cd 38 43 18 45 88 33 9b a7 ab b9 76 f0 7e ea 40 aa a9 42 91 8f ed 79 33 ed fe d1 da 58 14 f5 29 cc 68 92 7c 49 da 4a fb f4 f5 f0 47 73 8e bb 8e 6b ab 55 43 38 bd 20 d7 c9 75 20 08 6f 05 41 f8 a3 bb ef 5e 72 fb 1d 2b 7f bb 54 28 9f 13 a7 b6 52 2e 77 a1 56 ab a3 50 28 41 29 35 25 ea d5 fa dc cf 0b 87 ba 03 ab 8e 35 97 45 14 05 be 0e cb 71 3b 4a d5 6a 62 1e 45 Data Ascii: wD}(fEIk-fn[~[WW/rb3iX(u]O!ZmO<GI#Q7A8CE3v~@By3X)h\|IJGskUC8 u oA^r+T(R.wVP(A)5%5Eq;JjbE
2024-05-27 22:29:20 UTC	6154	IN	Data Raw: 89 72 71 2e 9a 3c 79 e0 ee 47 1e 79 f0 97 4b 57 cc b4 c6 74 02 34 1b 82 61 b4 a3 e4 02 4e 75 d5 d1 6b eb 78 37 34 0a 64 2a 90 c2 82 e0 f9 02 2c 78 e7 84 8e b6 c7 2e fd e0 65 cb 8f e5 d2 1f 87 bb 5d 77 e5 95 5b fe f2 6f bf f7 8b 2d 5b b7 9e 3d a1 73 d2 c5 9b b7 ee 14 13 27 4f 42 92 24 ae fc 47 6a e1 30 0f 36 54 47 07 83 00 88 a0 b5 46 a9 54 86 8e 63 78 52 4d da bc f1 cd 0f 3d b9 72 e5 63 00 b6 8c 8f 3a 00 12 21 49 3e 62 ec 01 d6 06 c5 96 62 b5 0f f0 01 e0 a3 37 7c e6 a1 c5 b7 ff f0 fc a9 53 27 cf eb ed af 77 80 24 98 68 3f a9 d2 23 9f 7b c4 0d 5a 76 26 4e 63 ad 86 f4 54 59 d7 ec b9 6b 5e 5b fb c5 55 db b7 7f 7d fe f4 e9 27 94 a7 95 99 d5 b7 6f fe c9 55 b5 5a ed 92 b6 f6 62 8b 35 16 0e 56 49 80 29 75 ac 38 40 3d d8 99 22 46 05 de 44 8e fa 6b 8c 8b 24 87 61 Data Ascii: rq.<yGyKWt4aNukx74d*,x.e]w[o-[=s'OB$Gj06TGFTcxRM=rc:!I>bb7\|S'w$h?#{Zv&NcTYk^[U}'oUZb5VI)u8@="FDk$a
2024-05-27 22:29:20 UTC	10674	IN	Data Raw: 10 47 2c 87 d0 90 e1 d0 6a ff e4 b6 b6 11 8d f9 eb 17 5d ba 79 f6 8c e9 8b 01 fd 26 89 cc b8 4c 60 ad ce f3 33 80 cc 3b 3a d4 00 b6 0d 4f 78 d3 b9 d9 ac ce 6c 2d c0 10 13 8d d5 0b 56 fc f2 a9 b3 8f b7 f9 5b b5 6a fb c4 f5 6b 36 7c 5e 6b f3 3e 72 8a f1 4d 54 e9 86 f1 3f 9a 81 9a 45 06 b3 73 2b 73 5a 3a af 30 43 c7 a1 09 6b b5 75 e7 9e 75 ce 0f cf 9a 3d 7b c4 1a 73 b6 50 65 71 84 f2 50 b3 ef 2c 84 60 73 8c e6 10 2e 59 b2 ea 8c fb 1f bb ef cf 36 6e 7e eb 0f 2d d1 e5 52 7a 1d 20 01 e9 05 b9 a1 cd 4c a9 68 cb 60 1a 67 9e c7 95 45 99 9c f4 12 86 86 9e f2 e7 b3 39 69 70 d3 f2 d7 06 f5 fc 9f ee 3f c2 91 d1 b8 47 eb 59 04 b1 39 8a 98 fd ee ec 15 0d 2f 28 42 33 a3 6f 60 80 0a 41 69 fa c4 ce c9 57 6f dd bd fb bf dd 77 d7 6d 5f 78 64 d9 6b d3 df cd b9 d8 d7 53 b4 82 Data Ascii: G,j]y&L`3;:Oxl-V[jk6\|^k>rMT?Es+sZ:0Ckuu={sPeqP,`s.Y6n~-Rz Lh`gE9ip?GY9/(B3o`AiWowm_xdkS
2024-05-27 22:29:20 UTC	11860	IN	Data Raw: 77 96 7d 33 49 3a 0a 6c 2c 32 99 3a 58 26 b8 ae 8b 72 b9 8c a4 af 86 28 76 9c 2a 06 29 e9 21 8c 26 28 d1 f8 8b fa 83 24 82 20 80 b1 21 1a 73 f5 28 16 0b 50 52 c2 95 02 be 5f ee 34 02 af 4c 6e 9f f4 d0 e2 6b e6 bd 7a e7 9d 37 ed 26 a2 33 9a 8f 5f b2 64 c9 3e 00 fb 7e fa ab 97 b7 6f 5c b7 fa a5 ce de ee 8f c2 8a 1b dd 54 7a b2 1f 94 1d 88 a8 df c9 58 8b 94 97 46 10 04 b0 4c 50 ca ad 70 20 54 44 c0 39 4a 76 5b 54 e1 91 4a b9 95 9e a8 54 2a 03 0b 40 5b 20 93 ce 4e b2 3a bc 67 e5 33 6b d7 03 58 3d ae ed 1d eb be be be 1e cd 4c 20 31 7a c0 e2 60 3f b0 42 04 12 27 76 1c 47 c2 1a 46 b1 d8 2b fc c3 7d 0d e7 c3 d9 d1 d9 d9 59 f7 17 ff f3 3b 1f f7 bc f4 c2 7c b1 58 47 24 91 4e 67 51 2e f9 51 91 04 84 c0 d7 23 04 d3 35 61 35 1d 3b b0 11 42 40 20 ee ab 8b d7 65 94 9c Data Ascii: w}3I:l,2:X&r(v)!&($ !s(PR_4Lnkz7&3_d>~o\TzXFLPp TD9Jv[TJT@[ N:g3kX=L 1z`?B'vGF+}Y;\|XG$NgQ.Q#5a5;B@ e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49724	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:19 UTC	669	OUT	GET /img/fb_round_logo.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:20 UTC	422	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 65013 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 42676 Content-Type: image/png Date: Mon, 27 May 2024 22:29:20 GMT Etag: "627bb060090f6f956bcac85bc2b7c9ec-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R8NX95SKEGX6GBJ9W1M0 Connection: close
2024-05-27 22:29:20 UTC	764	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 50 14 85 4f 53 b5 22 15 07 3b 88 08 66 a8 4e 16 44 45 04 17 ad 42 11 2a 84 5a a1 55 07 93 97 fe 08 4d 1a 92 14 17 47 c1 b5 e0 e0 cf 62 d5 c1 c5 59 57 07 57 41 10 fc 01 71 75 71 52 74 91 12 ef 4b 0a 2d 62 7c 70 79 1f e7 bd 73 b8 ef 3e 40 a8 95 98 66 b5 8d 02 9a 6e 9b a9 44 5c cc 64 57 c4 d0 2b c2 e8 a0 9a c6 a0 cc 2c 63 56 92 92 f0 5d 5f f7 08 f0 fd 2e c6 b3 fc ef fd b9 ba d5 9c c5 80 80 48 3c c3 0c d3 26 5e 27 9e dc b4 0d ce fb c4 11 56 94 55 e2 73 e2 11 93 1a 24 7e e4 ba e2 f1 1b e7 82 cb 02 cf 8c 98 e9 d4 1c 71 84 58 2c b4 b0 d2 c2 ac 68 6a c4 13 c4 51 55 d3 29 5f c8 78 ac Data Ascii: PNGIHDR!iCCPICC profile(}=HPOS";fNDEB*ZUMGbYWWAquqRtK-b\|pys>@fnD\dW+,cV]_.H<&^'VUs$~qX,hjQU)_x
2024-05-27 22:29:20 UTC	2372	IN	Data Raw: 26 81 cd 9d df 7f d8 e9 9f 89 80 3b 80 31 a0 05 dc 4a 59 86 6d ed 7c bc 09 dc 06 4c 74 7e 8d a9 5d 3c 4f e5 8d 24 f8 59 27 49 92 ba 91 05 96 24 49 9a 33 f7 2a a4 a6 9f 87 81 e5 c0 62 60 29 65 c9 34 da f9 d8 02 ca 02 6a 41 e7 e7 a6 0b a9 a1 ce cf 57 3a bf 46 44 59 32 55 3a 3f ae 0e f0 75 4e a0 2c ac c2 bd 7e dc 02 da c0 26 ca a9 ae 82 b2 f0 da d4 79 de dc 79 be 03 d8 c2 8e 42 ec f6 ce 8f b7 77 7e ad a9 e9 e7 bc 91 b4 fd ac 96 24 49 73 c1 02 4b 92 24 ed b3 4e 31 15 b3 a3 44 5a 4c 59 30 2d a3 9c 60 5a d6 f9 fb e5 94 d3 51 4b 80 55 9d 8f 27 94 85 d4 10 65 a9 35 fd 1c 7b ad 32 2f 5a 94 05 d5 64 e7 79 7a 6a 6b 3b e5 14 d7 9d 9d e7 5b 80 bb 28 0b ae bb 76 7a dc 41 59 8a 35 3b bf 56 db c9 2e 49 92 b4 af bc 28 94 24 49 bb 2d cd 8a e9 49 a8 e9 69 a9 25 40 0a ac 05 Data Ascii: &;1JYm\|Lt~]<O$Y'I$I3*b`)e4jAW:FDY2U:?uN,~&yyBw~$IsK$N1DZLY0-`ZQKU'e5{2/Zdyzjk;[(vzAY5;V.I($I-Ii%@
2024-05-27 22:29:20 UTC	538	IN	Data Raw: 51 ee cb ba 21 6f 24 2d 63 91 a4 de 60 81 25 49 3d 20 cd 8a 3a 70 28 e5 6e ab 0b 80 63 80 21 93 91 24 69 8f b5 80 eb 81 2f 52 4e 65 fd 28 6f 24 db 8d 45 92 ba 9b 05 96 24 75 b1 34 2b 46 81 93 80 27 03 67 53 2e 65 af 9a 8c 24 49 fb 2c 00 b7 b2 e3 78 e1 3f 03 77 e5 8d 24 18 8d 24 75 1f 0b 2c 49 ea 42 69 56 ac 02 1e 05 5c d8 79 5e 66 2a 92 24 cd 9a 02 f8 2e f0 19 e0 ef 81 1b 2d b2 24 a9 bb 58 60 49 52 97 e8 dc 4d f0 60 e0 89 c0 1f 00 c7 02 0b 4c 46 92 a4 39 33 05 fc 0c f8 5b ca 5d 59 3f f3 ee 85 92 d4 1d 2c b0 24 69 9e a5 59 31 02 1c 45 b9 db ea 49 94 bb ae 2a 26 23 49 d2 bc fa 2d f0 65 e0 d3 c0 f7 f2 46 32 66 24 92 34 7f 2c b0 24 69 9e a4 59 b1 88 72 bf d5 33 80 33 81 35 be 2e 4b 92 d4 75 ee 00 be 4e 59 64 7d 2d 6f 24 77 1a 89 24 cd 3d df 28 49 d2 1c 4b b3 Data Ascii: Q!o$-c`%I= :p(nc!$i/RNe(o$E$u4+F'gS.e$I,x?w$$u,IBiV\y^f$.-$X`IRM`LF93[]Y?,$iY1EI&#I-eF2f$4,$iYr335.KuNYd}-o$w$=(IK
2024-05-27 22:29:20 UTC	4744	IN	Data Raw: ee c3 66 e0 2b 94 45 d6 b7 f2 46 b2 c5 48 24 69 cf 58 60 49 d2 1e 48 b3 62 98 72 e2 ea 62 e0 09 58 5c 49 92 a4 dd 37 5d 64 7d 9c 72 22 6b cc 48 24 69 f7 58 60 49 d2 6e d8 e9 a8 e0 73 28 8f 0a 5a 5c 49 92 a4 bd b5 89 b2 c8 fa 18 f0 cd bc 91 6c 35 12 49 ba 7f 16 58 92 74 3f d2 ac 18 02 4e a6 2c ae 9e 00 ac f2 b5 53 92 24 cd 90 bb 80 7f a4 9c c8 fa 67 77 64 49 d2 7d f3 4d 98 24 ed 42 67 e2 ea 44 e0 12 76 14 57 92 24 49 b3 61 13 65 91 f5 51 9c c8 92 a4 5d b2 c0 92 a4 9d a4 59 51 03 8e 05 5e 08 9c 8b 47 05 25 49 d2 dc 99 de 91 f5 31 ca 1d 59 16 59 92 d4 61 81 25 49 dc 5d 5c 1d 4d 79 54 f0 c9 c0 fe a6 22 49 92 e6 c9 66 e0 ff 02 1f 06 ae cb 1b c9 b8 91 48 1a 74 16 58 92 06 5a 9a 15 15 e0 50 ca bb 0a 3e 1d 58 0b c4 26 23 49 92 ba c0 ad c0 e7 29 77 64 5d 97 37 92 Data Ascii: f+EFH$iX`IHbrbX\I7]d}r"kH$iX`Ins(Z\Il5IXt?N,S$gwdI}M$BgDvW$IaeQ]YQ^G%I1YYa%I]\MyT"IfHtXZP>X&#I)wd]7
2024-05-27 22:29:20 UTC	5930	IN	Data Raw: 01 78 67 9a 15 07 18 85 f6 95 05 96 f6 49 e7 ee 12 57 01 17 fb f9 24 49 92 24 49 ba 97 33 80 37 a7 59 b1 c2 28 b4 2f 2c 1c b4 d7 3a 77 95 78 2e f0 52 c0 db a4 4a 92 24 49 92 ee 2d 06 2e 02 ae 49 b3 62 c4 38 b4 2f 9f 48 d2 de 3a 17 78 1d e5 5d 26 24 49 92 24 49 da 95 2a 70 05 f0 82 34 2b aa c6 a1 bd 61 81 a5 bd 92 66 c5 46 e0 4d 40 6a 1a 92 24 49 92 a4 07 30 0a bc 0a 38 cf 28 b4 37 22 23 d0 9e 4a b3 62 3d f0 51 e0 51 a6 21 49 92 24 49 da 03 d7 03 cf cd 1b c9 b7 8c 42 7b c2 09 2c ed 91 ce e2 bd b7 61 79 25 49 92 24 49 da 73 1b 80 46 9a 15 1b 8c 42 7b c2 02 4b bb 2d cd 8a 85 40 06 9c 6f 1a 92 24 49 92 a4 bd f4 30 e0 6d 69 56 ac 32 0a ed 2e 0b 2c ed 96 ce a2 bd 4b 81 cb 80 9a 89 48 92 24 49 92 f6 c1 79 c0 2b d3 ac 58 60 14 da 1d 16 58 da 5d 67 03 af a0 5c bc Data Ascii: xgIW$I$I37Y(/,:wx.RJ$I-.Ib8/H:x]&$I$I*p4+afFM@j$I08(7"#Jb=QQ!I$IB{,ay%I$IsFB{K-@o$I0miV2.,KH$Iy+X`X]g\
2024-05-27 22:29:20 UTC	7116	IN	Data Raw: d6 da 7c 6f 92 1f 52 06 00 18 9f ba 24 8f 75 5b c3 7f ef f9 1d 39 b4 bb ea a8 08 00 b0 05 7d 24 c9 0f 28 c3 ea 09 b0 56 69 79 7d ea 2f 26 39 ac 1a 00 30 1e a5 24 87 77 57 f5 7f f0 99 1d 83 c7 bb 2d e1 15 00 b0 55 ed 48 f2 a7 ba bd fe 3d 4a b1 3a 02 ac d5 fb a3 49 3e ad 0c 00 30 1e 25 c9 4c 27 f9 85 8f cc 96 4f 3e da 99 8d a1 ed 00 c0 d6 f6 74 92 9f ee f6 fa b2 99 55 50 a4 55 e8 f6 fa 47 32 ea be da ab 1a 00 30 26 25 f9 dc 13 33 4b 7f f2 43 33 a5 d3 12 5e 01 00 5b 5e 27 c9 cf 24 79 54 29 6e 4c 80 b5 3a 5f c8 68 7d 2a 00 30 06 75 49 de 7d 47 ab fe 73 9f 9c 6d ef 9b 33 f7 0a 00 d8 36 1e 4e f2 33 dd 5e df a6 35 37 20 c0 ba 81 6e af 7f 67 92 9f cf 68 7d 2a 00 d0 b0 52 92 83 bb aa fa df fd e4 8e a5 87 6f 6d e9 bc 02 00 b6 93 2a c9 4f 26 79 4a 29 ae 4f 80 75 63 Data Ascii: \|oR$u[9}$(Viy}/&90$wW-UH=J:I>0%L'O>tUPUG20&%3KC3^[^'$yT)nL:_h}0uI}Gsm36N3^57 ngh}Rom*O&yJ)Ouc
2024-05-27 22:29:20 UTC	8302	IN	Data Raw: 01 00 53 e9 9e 8c 66 61 ad db cd 06 58 f7 66 34 03 0b 00 00 26 66 7e a9 0c cf cd 97 81 65 01 00 30 95 ba 19 65 48 eb 76 b3 01 d6 fd 11 60 01 00 30 61 17 16 53 9d 9d 2f 55 25 c1 02 80 69 b4 33 c9 e3 37 f3 00 37 1b 60 bd 3b c9 ac e3 00 00 c0 24 f5 2f 95 99 fe a5 cc a9 04 00 4c ad f7 74 7b fd 99 f5 de 79 dd 01 56 b7 d7 9f 4d f2 94 fa 03 00 30 69 97 96 d2 ba b0 58 5a 1a b0 00 60 6a bd 3b c9 de f5 de f9 66 3a b0 f6 24 79 44 fd 01 00 98 b4 8b 8b 25 fd f9 12 4b 08 01 60 6a dd 96 e4 be f5 de f9 66 02 ac 07 93 dc aa fe 00 00 4c da a0 4e 5d d7 ea 00 00 53 ec 96 24 0f ad f7 ce 37 13 60 3d 90 e4 a0 fa 03 00 30 61 a5 3f 5f 2e d4 25 45 29 00 60 6a ed 4c f2 d8 7a ef 7c 33 01 d6 23 cb 4f 0e 00 00 13 35 ac a3 ff 0a 00 a6 df 23 dd 5e 7f 5d 59 d2 ba 02 ac 6e af bf 3b c9 93 Data Ascii: SfaXf4&f~e0eHv`0aS/U%i377`;$/Lt{yVM0iXZ`j;f:$yD%K`jfLN]S$7`=0a?_.%E)`jLz\|3#O5#^]Yn;
2024-05-27 22:29:20 UTC	6154	IN	Data Raw: 1f f0 bc 00 00 00 00 ec b9 8b aa af 2c db 45 1d 58 d2 b0 3e 58 4d 9e 19 00 00 00 80 3d f3 60 f5 fe 69 1c 1e 5c b6 0b 5b d6 02 eb aa ea d3 9e 1b 00 00 00 80 3d f3 95 ea a3 cb 78 61 4b 59 60 cd 07 85 bd b7 da f1 ec 00 00 00 00 ec 89 f3 ab 5b 97 f1 c2 0e 2c 71 68 17 b4 84 7b 2e 01 00 00 00 d6 d0 56 75 fe 34 0e 27 97 f1 e2 96 b9 c0 fa 42 f5 09 cf 0f 00 00 00 c0 ae fb 7c 75 e9 b2 5e dc d2 16 58 f3 c6 ef 1d d5 71 cf 10 00 00 00 c0 ae 7a df 34 0e 77 2d eb c5 1d 58 f2 f0 2e 69 d6 00 02 00 00 00 b0 3b 6e ab de bf cc 17 b8 d4 05 d6 34 0e 37 56 1f f2 1c 01 00 00 00 ec 9a 4b ab ab 96 f9 02 0f ac 40 88 ef aa ee f3 2c 01 00 00 00 2c dc c9 ea 5d d3 38 1c 59 e6 8b 5c 85 02 eb ca 96 78 88 18 00 00 00 c0 0a fb 72 f5 91 65 bf c8 a5 2f b0 a6 71 b8 a7 3a af 3a e5 99 02 00 00 Data Ascii: ,EX>XM=`i\[=xaKY`[,qh{.Vu4'B\|u^Xqz4w-X.i;n47VK@,,]8Y\xre/q::
2024-05-27 22:29:20 UTC	6756	IN	Data Raw: af 3e 58 ed 48 04 00 00 58 90 2b aa 7f 57 bd 6d be 0b 04 78 08 0a 2c 38 0d d3 38 5c 39 ff c5 f2 a6 6a 5b 22 00 00 c0 59 d8 a9 2e aa 1e 3f 8d c3 87 a6 71 f0 45 39 7c 0f 0a 2c 38 4d d3 38 7c a9 fa 85 ea 05 d5 71 89 00 00 00 67 e0 54 f5 ce 66 e5 d5 a7 c4 01 a7 47 81 05 8f c0 34 0e b7 55 bf 51 3d bb 72 32 08 00 00 f0 48 1c af 5e 51 fd ec 34 0e 5f 10 07 9c 3e 05 16 3c 42 f3 23 6d 9f 53 fd 7a 75 9b 44 00 00 80 d3 70 b8 fa a3 ea 29 d3 38 dc 2a 0e 78 64 14 58 70 06 e6 47 db be a4 d9 69 21 5f 91 08 00 00 f0 30 ee ac 9e 5e 3d 73 1a 87 fb c4 01 8f 9c 02 0b ce d0 fc 94 90 b7 56 8f ad 3e 95 13 0a 01 00 80 ef 74 43 f5 8b d5 f3 e7 5f 84 03 67 40 81 05 67 61 1a 87 ed 69 1c 2e 6c 56 62 bd bf d9 40 46 00 00 80 aa cf 54 8f ab de 30 ff 02 1c 38 43 0a 2c 58 80 69 1c ae ae 1e Data Ascii: >XHX+Wmx,88\9j["Y.?qE9\|,8M8\|qgTfG4UQ=r2H^Q4_><B#mSzuDp)8*xdXpGi!_0^=sV>tC_g@gai.lVb@FT08C,Xi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49734	104.26.4.15	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:20 UTC	350	OUT	GET /v2/free/self/ HTTP/1.1 Host: api.db-ip.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:20 UTC	743	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 22:29:20 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: max-age=1800 x-iplb-request-id: A29E9FD2:738E_93878F2E:0050_66550940_FD2B60A:7B63 x-iplb-instance: 59128 CF-Cache-Status: EXPIRED Last-Modified: Mon, 27 May 2024 22:23:22 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZjLHsZ10Fr%2FAsl8%2Bo389rzNL2%2BlEuOt8tHlMfbDSLkqvLuvYO%2FAVitMfMC263B%2BJ3nVL0%2Bbuh7%2BQ%2FWTTP4lRwMoo5cptSwQN5tTMgQLhwEuIrcxflBFg1gAr11zP%2BEY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a97173ef6342ef-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 22:29:20 UTC	247	IN	Data Raw: 66 31 0d 0a 7b 0a 20 20 20 20 22 69 70 41 64 64 72 65 73 73 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 0a 20 20 20 20 22 63 6f 6e 74 69 6e 65 6e 74 43 6f 64 65 22 3a 20 22 4e 41 22 2c 0a 20 20 20 20 22 63 6f 6e 74 69 6e 65 6e 74 4e 61 6d 65 22 3a 20 22 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 73 74 61 74 65 50 72 6f 76 43 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 73 74 61 74 65 50 72 6f 76 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 0a 7d 0d 0a Data Ascii: f1{ "ipAddress": "8.46.123.175", "continentCode": "NA", "continentName": "North America", "countryCode": "US", "countryName": "United States", "stateProvCode": "NY", "stateProv": "New York", "city": "New York"}
2024-05-27 22:29:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49731	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:20 UTC	386	OUT	GET /img/block_2.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:20 UTC	422	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64186 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 18787 Content-Type: image/png Date: Mon, 27 May 2024 22:29:20 GMT Etag: "d20dab5033cc4210f9d65985e651a104-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R9AGJ8G91AXNVH187Y09 Connection: close
2024-05-27 22:29:20 UTC	764	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 65 08 06 00 00 00 bb be 46 f1 00 00 24 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da ad 9c 6b 96 9c 37 0e 64 ff 73 15 b3 04 be 1f cb e1 03 3c 67 76 30 cb 9f 1b cc 92 6c 49 6e bb ed b6 64 a9 4a 99 59 fc 48 02 08 44 80 a0 9d fd bf ff 7b dd ff e1 d7 c8 a1 ba 5c 5a af a3 56 cf af 3c f2 88 93 6f ba ff fc 9a ef ef e0 f3 fb fb fd aa f9 eb bd f0 e3 eb ae 96 af 37 22 2f 25 be a6 cf 3f 7b fd fa fc b7 d7 c3 f7 01 3e 5f 26 df 95 df 0d d4 f7 d7 1b eb c7 37 c6 d7 93 63 ff 69 a0 f8 f9 92 34 23 7d 7f be 06 1a 5f 03 a5 f8 79 23 7c 0d 30 e7 d7 52 46 6f bf 5f c2 b2 cf d7 af 9f ff 6c 03 7f 9c fe ca fd c7 69 ff f2 ef c6 ee 9d c2 73 52 8c 96 42 f2 fc 9d d2 d7 04 92 Data Ascii: PNGIHDRdeF$zTXtRaw profile type exifxk7ds<gv0lIndJYHD{\ZV<o7"/%?{>_&7ci4#}_y#\|0RFo_lisRB
2024-05-27 22:29:20 UTC	2372	IN	Data Raw: e7 28 cb c9 66 9e e8 4e a9 44 26 59 64 b3 13 64 31 2c 98 2d c4 72 c3 37 db b9 f8 b1 a8 2c f7 3f d9 cd b5 fc 83 dd e2 3f b5 9c 93 e9 fe a6 e5 7e b5 db 1f 59 ed 28 0d ed 67 b1 4f 14 6a 53 7d 22 fa 78 df fa 8c 7d 2a d9 fd f2 d5 c5 69 95 a9 64 63 ae fb ec 54 96 b1 c4 76 ce b9 bc d6 cb 99 69 b1 2f b3 54 6c cb b6 46 e2 2a 31 57 9f 92 19 d9 33 8e 13 8a ad e6 cc 9f db f9 36 86 53 ca ca f3 b0 9f b9 1b 2b 61 20 16 5c ea 9a 2b ac 55 07 56 ec 37 8e 9a 77 9a a3 9c b1 03 3c c1 d2 90 69 5b 74 71 9d 7d 73 b9 9d a9 f8 7d bd b1 64 5f e7 62 0a e0 36 49 a2 ad 03 6c 62 89 c8 b2 67 6d 67 2d cc 38 2c 8c dd 13 83 a5 49 a2 6f db 1d 7e 7e de 9e cf bc ad df 94 59 67 c9 27 9a dd 7c 20 12 9d a8 98 e7 8c 6a 13 f3 d6 b8 c1 82 15 53 25 89 ee 1a 76 6b b7 cc 9b d7 f5 8e 9d df 96 ea b8 67 Data Ascii: (fND&Ydd1,-r7,??~Y(gOjS}"x}idcTvi/TlF1W36S+a \+UV7w<i[tq}s}d_b6Ilbgmg-8,Io~~Yg'\| jS%vkg
2024-05-27 22:29:20 UTC	538	IN	Data Raw: 80 15 db 11 09 bc ce 46 57 dc 82 04 87 b3 82 f5 98 ab 64 65 ad 4e 82 51 35 23 7a 48 e5 16 38 c3 29 eb 81 aa 0d a9 6c 23 d6 d9 3c 32 b1 eb 19 50 1d 07 bf d8 69 4b c7 d5 44 9a 5e 64 e9 86 bf 2a 5e 50 fc 56 21 c5 78 6b f0 91 24 10 c8 f1 a7 8d 43 5e 08 d6 49 93 99 89 40 b4 e6 55 40 02 b3 42 97 a6 6f 78 2c 89 24 05 1e de 45 7a 12 16 0d 04 c4 42 cc e1 1b 91 c7 10 0c d2 09 16 7a 9e 71 3e 2d d2 fe 1e 5c fc 97 30 12 26 38 6d e8 5c 74 e2 3c 4a ae 1d f6 51 e1 01 a5 0b 7e b7 aa 60 87 dd 13 0d 2e 2a 87 04 a1 3f 49 1f b9 be 58 1b 2b 60 37 16 be b2 bd d0 dc 57 96 03 25 23 49 93 11 90 e0 1e fc 47 1f c3 92 10 3d 2a 2c 29 34 d0 21 10 c5 ad a5 4d 37 17 d0 04 f5 db 72 d2 24 52 6a db 4a 6d 2b 10 63 30 49 a8 1c cc c6 5a 47 07 a3 e4 78 b9 23 53 2e 91 06 00 4f 62 90 d4 84 b9 cc Data Ascii: FWdeNQ5#zH8)l#<2PiKD^d^PV!xk$C^I@U@Box,$EzBzq>-\0&8m\t<JQ~`.?IX+`7W%#IG=*,)4!M7r$RjJm+c0IZGx#S.Ob
2024-05-27 22:29:20 UTC	4744	IN	Data Raw: ca 32 47 9b 4a 9a 81 75 6e f0 08 6d 96 d1 c0 18 1c 57 2e eb e3 e3 50 6c 1c f8 ef 04 8a fb 3b 11 15 c0 23 80 af 6d d5 dc 49 f8 17 57 47 78 0d d2 bc 39 e0 35 b0 39 93 40 2e e4 51 f8 2b a6 f1 1e 76 be c4 45 03 a4 ac 8b c2 b2 80 33 bd c4 29 a4 72 2d a0 14 49 29 5d c7 5e 57 70 de bd ca 51 63 87 00 4e fc f0 60 56 38 10 b2 10 b8 c7 b2 0b 7e af e2 23 71 07 d7 80 af 47 e9 7b 3c 57 45 2b d5 3e 5f c1 31 02 6c 64 67 22 02 3f 55 f5 35 64 70 1b 01 e7 07 a9 9d a4 44 4e 5a d8 2d 16 b6 97 f4 09 c8 a2 4c b0 26 b8 7c 2b 70 8e 44 25 c5 ad 08 5f 76 f8 14 1e 0b 95 52 b1 96 d1 86 62 bd c3 81 54 23 59 38 eb 47 da 42 ee 48 09 aa 98 02 28 03 14 1f 4b c5 95 6f f2 36 90 fb 79 87 4c 5a e0 6a db e0 b7 d0 4b 48 2a 0e ba 4c d0 5b 94 43 f0 55 a4 2e d9 39 48 2e 1e 84 32 9e 35 41 82 4a 6a Data Ascii: 2GJunmW.Pl;#mIWGx959@.Q+vE3)r-I)]^WpQcN`V8~#qG{<WE+>_1ldg"?U5dpDNZ-L&\|+pD%_vRbT#Y8GBH(Ko6yLZjKH*L[CU.9H.25AJj
2024-05-27 22:29:21 UTC	5930	IN	Data Raw: 51 22 88 12 d5 fd f2 6e 27 29 56 4a 9e 53 40 e6 31 1b 24 7e 3e 98 63 3a ea ef 51 a1 17 38 e9 45 45 cd dc 96 2e 23 23 45 75 49 53 57 70 87 4e a5 50 e7 00 28 d6 82 ad 01 8d 70 e9 db 42 ac 19 26 ba c1 83 cc 06 7d ee 3f a8 17 6a a8 fe cf 3e e9 a6 48 70 ea f3 0a 11 c3 46 1d e7 f2 22 4c 1f 42 a9 be fa 77 c0 5d 9f c3 90 ca 72 02 3f 97 ee c5 f8 fe 74 68 0f 92 d8 eb e8 32 24 b9 ff 56 5d 0d 59 2a 7e a8 30 76 50 09 f1 e2 a5 ef 9e 92 d7 e5 b8 2c 1e fe c4 3a 14 7f c2 b9 74 35 7a 13 a1 4f d0 fa ad ff b1 48 d0 15 06 0f ab 4a f3 5d 33 18 ba 5f 8a a2 3a fa ff 61 9c 78 4b 5e d2 02 85 39 98 a4 80 ee e0 8d b8 aa ba b6 f7 91 82 dd a8 31 64 31 0e 99 31 36 b4 2c e8 e2 e5 bb 94 a3 7e a2 a6 9e 3d 21 2d 32 c8 14 5a 26 f2 87 a3 c0 bd 10 7f f0 2b dd f1 42 f0 4b a5 40 0b 48 e7 0e 72 Data Ascii: Q"n')VJS@1$~>c:Q8EE.##EuISWpNP(pB&}?j>HpF"LBw]r?th2$V]Y*~0vP,:t5zOHJ]3_:axK^91d116,~=!-2Z&+BK@Hr
2024-05-27 22:29:21 UTC	4439	IN	Data Raw: 07 24 98 5d 8e d9 7c 8c 24 c5 18 78 65 19 2f 5f fd 45 92 05 df c7 05 63 77 23 09 82 22 74 ed 35 cc b8 f4 32 5c 4b 33 11 0e f0 6b 83 e7 83 71 12 3f ba 43 00 31 33 67 66 57 62 5c 1b 44 14 2c d0 bd f8 09 5e f9 df 97 d2 bc 78 31 9e dd 97 24 e1 25 fc 05 1f 61 e6 f5 d7 93 9b 3a 15 39 90 a9 cb cc 3e 1c 45 d1 03 db 15 90 de de 01 d5 d7 e5 ae 96 d3 97 cc 4c 16 3c 6f 2e fa 35 6b 2f fc 18 f1 ea 37 90 f9 72 50 c3 76 4f 40 50 d9 01 8d 48 4f 79 2f 6d ff ef ef 19 37 73 56 65 77 4f 08 e1 03 71 1c 2f da 6e 80 84 60 5f 00 ae c5 cc 79 ef 79 63 e1 cf e9 b8 e0 42 a2 ee ae c1 f0 86 ed ce 12 32 c4 64 86 81 d9 b3 d9 ff ae db a9 9f 75 08 71 16 4d eb 34 f3 ef 8f a3 e4 bf b6 39 20 a9 f7 17 38 e9 db 01 22 59 ca eb f7 ff 82 75 e7 9d 47 43 4f 3f 25 d9 50 ff 62 0f a0 88 08 af 40 69 f6 Data Ascii: $]\|$xe/_Ecw#"t52\K3kq?C13gfWb\D,^x1$%a:9>EL<o.5k/7rPvO@PHOy/m7sVewOq/n`_yycB2duqM49 8"YuGCO?%Pb@i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49730	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:20 UTC	384	OUT	GET /img/shild.jpg HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:20 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64186 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 32608 Content-Type: image/jpeg Date: Mon, 27 May 2024 22:29:20 GMT Etag: "552369786bdfe476e86028e81f029a3e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R9AZWPX4BG8V6400HZ44 Connection: close
2024-05-27 22:29:20 UTC	763	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff ed 00 84 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 67 1c 02 28 00 62 46 42 4d 44 30 31 30 30 30 61 38 63 30 31 30 30 30 30 33 66 31 35 30 30 30 30 39 62 32 34 30 30 30 30 33 63 32 61 30 30 30 30 31 38 33 31 30 30 30 30 34 64 33 64 30 30 30 30 30 35 34 66 30 30 30 30 39 62 35 37 30 30 30 30 31 30 35 64 30 30 30 30 38 34 36 33 30 30 30 30 36 30 37 66 30 30 30 30 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: JFIFPhotoshop 3.08BIMg(bFBMD01000a8c0100003f1500009b2400003c2a0000183100004d3d0000054f00009b570000105d000084630000607f0000C $.' ",#(7),01444'9=82<.342C2!!2222222222222
2024-05-27 22:29:20 UTC	2372	IN	Data Raw: d6 17 2b c3 e7 58 49 8e 29 78 1e 80 00 00 00 00 00 00 00 00 00 00 00 26 b5 af 43 dd cc fc fe 7c a7 bd 6b 2d f2 9d 81 09 00 00 0e 6b 6d c6 46 58 54 29 5a 08 c8 00 00 93 61 ab 74 87 d3 b2 e1 7b 8b 35 f2 1d 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 2a 77 75 76 b8 e7 8f 8e d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 33 b9 41 1f 7a 07 9e d1 b0 00 1c cf 33 d1 73 35 6c 26 da 7d 02 8d ce 33 98 fb 0f cc a3 ee ac 59 e0 00 00 37 7a 44 bc fa 83 45 bd bb 4c 25 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 3d 5e d3 57 6f 80 75 88 00 00 00 00 00 00 00 12 dc 84 b5 cd ac 1e 7b 45 ef 9d 20 00 00 00 00 00 00 00 00 6f fd f3 dc fb 20 01 c4 c3 27 71 97 a3 7b 33 32 fb 9c e8 fc 97 9f 1f Data Ascii: +XI)x&C\|k-kmFXT)Zat{5 *wuv3Az3s5l&}3Y7zDEL%=^Wou{E o 'q{32
2024-05-27 22:29:20 UTC	538	IN	Data Raw: a1 95 a2 00 00 79 14 de 7b e4 2f 7c 94 5a ed 8a 71 f9 e2 78 37 b2 83 d0 00 00 e8 79 ee 86 bf 5e a4 61 6a 80 00 00 00 00 00 00 e5 ba 9e 5b bf 2e 62 68 66 db cb 09 f8 00 00 61 47 63 52 bf 6a b1 65 8d 7e a0 00 00 17 a8 dd a5 38 84 24 00 00 00 00 00 00 00 00 3d f0 6c fe 85 f2 cd bf 9e fd 2d 5e c6 65 d0 f3 d0 18 43 c2 f7 e5 b3 e6 21 82 fd 49 11 c8 58 8a 3c a5 e6 db b0 f9 e5 ac db bd cb 49 47 3e e7 61 72 2b 7d b9 07 48 00 00 00 00 02 ad aa b2 8f 3e 34 e8 00 00 00 00 07 54 32 b4 40 00 00 18 66 79 0f 93 e1 2f 39 9e 7b bf e0 75 f3 fc 17 2b 80 00 0e 87 9e e8 6b f5 ea 46 16 a8 00 00 00 00 00 00 0e 5b a9 e5 bb f2 e6 26 86 6d bc b0 9f 80 00 36 91 f7 aa e2 7e 85 f3 9c 9b fa 11 63 90 00 00 f7 c1 76 95 da 53 88 42 40 00 00 00 00 00 00 00 00 09 23 1d 0f 7f f2 5e 87 9c bb Data Ascii: y{/\|Zqx7y^aj[.bhfaGcRje~8$=l-^eC!IX<IG>ar+}H>4T2@fy/9{u+kF[&m6~cvSB@#^
2024-05-27 22:29:20 UTC	4744	IN	Data Raw: 98 00 00 04 93 d4 bb 38 d2 67 84 24 00 00 00 00 19 db a3 9c a3 e6 37 a9 98 88 c8 00 00 00 00 00 00 00 00 7d 1b 4f d9 54 ef 22 35 6e f2 23 12 23 12 23 12 23 12 31 cb cf 40 00 05 5b 55 65 1e 7c 69 d0 00 00 00 00 0e a8 65 68 80 06 31 67 84 a2 1e f8 00 00 2b d8 7b e7 03 17 67 c6 ed 67 78 3b f2 00 00 00 00 00 00 00 00 00 00 00 05 cf 3d b1 d7 e1 9e 2e 88 70 ea d7 ec 20 f7 cf 94 bc f7 46 a0 00 00 03 3c 05 ea 52 49 38 56 10 98 00 00 00 03 c2 b6 54 bc a7 63 6c ad 66 d7 00 97 80 00 00 00 00 00 00 3a 18 fb fa fd 7d 15 7b 80 00 00 00 92 3c 89 44 26 00 0a b6 aa ca 3c f8 d3 a0 00 00 00 00 1d 50 ca d1 00 0c 23 9e 39 47 07 af 7c f1 e8 f1 e8 f1 e8 f1 e8 f3 55 b6 4e 3f 3c f3 b0 e4 76 73 b1 1d b9 80 00 00 00 00 00 00 00 00 00 2e 79 ee 3d 9f b3 63 e8 78 f5 5b b7 8f 47 8f 7d Data Ascii: 8g$7}OT"5n####1@[Ue\|ieh1g+{ggx;=.p F<RI8VTclf:}{<D&<P#9G\|UN?<vs.y=cx[G}
2024-05-27 22:29:21 UTC	5930	IN	Data Raw: 42 d0 a6 d7 bd 4f a5 63 ca 91 e0 fc 47 59 43 c8 93 0d 71 f9 3d c4 5a 76 dc cf bb c9 a5 45 d3 c5 eb 99 05 a9 68 93 15 d8 8b db 4a 4d 4a a7 d2 c9 8e 5c 8f 07 e2 f7 12 69 b8 83 23 49 f1 59 8e e4 85 46 86 dc 7d c9 9f 77 91 4d 8b a9 95 b2 e3 48 79 13 29 2b 67 69 96 1c 90 e4 2a 7b 71 13 cb 91 e0 e2 e2 2e 17 0b 85 c2 e1 70 b8 5c 2e 17 0b 85 c2 e1 70 b8 5c 2e 0f b0 dc 82 7e 1b 8c 70 c8 b1 38 f4 e3 30 9c 10 9b 85 c2 e1 70 b8 5c 2e 17 0b 85 c2 e1 88 92 78 ca e4 53 e3 e9 63 5c 2e 17 0b 85 c2 e1 70 b8 5c 2e 17 09 74 e6 65 09 10 5f 8c 7d 51 20 bb 2d 51 d8 6e 2b 77 0b 85 c2 e1 70 b8 5c 2e 17 0b 85 c2 e1 70 b8 5c 2e 17 0b 85 c3 1d 99 1e 0e 21 f1 5f a7 a1 c0 e3 4b 65 5b ec 43 71 e0 cc 66 d8 2d e7 7d de e3 d2 62 e7 3f bc fd 32 33 e1 ca 2b c9 0a 81 29 23 49 20 c3 74 a9 4b Data Ascii: BOcGYCq=ZvEhJMJ\i#IYF}wMHy)+gi*{q.p\.p\.~p80p\.xSc\.p\.te_}Q -Qn+wp\.p\.!_Ke[Cqf-}b?23+)#I tK
2024-05-27 22:29:21 UTC	7116	IN	Data Raw: 6e 99 68 ad 5c a4 17 7d ab b3 8d 89 da 16 91 3c 2c a1 ba 13 69 7c 33 58 08 47 7c 37 31 8c 07 10 94 ec e0 fa da 1e e4 05 94 f3 7d e1 50 7f 58 39 d9 eb 3b 5b b2 17 ed b4 34 77 d6 b5 a3 3b ee ab 71 3e ba 1a f1 b4 74 b8 05 55 b3 b3 87 8b 6b b4 89 e1 96 83 eb 66 4a 27 73 87 b0 c9 c1 52 18 86 21 60 5c e3 20 15 08 1a ad ed 2e 27 a1 52 f8 71 0f ed 9e 5d 0e 19 17 67 5c ce 06 ce 27 86 5a 0f ad 9c e1 43 2e 13 ae 4a 8b da 5a ee 05 1b 23 9d 11 19 ea 38 a0 f6 5d d2 a4 f3 e9 c5 6b 54 cd 8d 55 74 e5 89 9c 0a d6 0e 6a a3 02 63 fb 28 4f 37 96 e4 5d 9d 6c 51 e0 6c e2 78 65 a0 fa d9 b5 bb 76 a8 be 3b a3 b9 4c 56 c3 78 41 ec 33 69 e8 4b 14 4e ca a7 11 d3 3d 3a 95 7a 43 45 64 dc 99 0f b2 25 91 76 75 cc 3b 51 06 f1 65 13 c3 2d 07 d6 c8 4f 0b 6b 3a 23 79 ac ce 7a 5b 14 9d 5c 23 Data Ascii: nh\}<,i\|3XG\|71}PX9;[4w;q>tUkfJ'sR!`\ .'Rq]g\'ZC.JZ#8]kTUtjc(O7]lQlxev;LVxA3iKN=:zCEd%vu;Qe-Ok:#yz[\#
2024-05-27 22:29:21 UTC	8302	IN	Data Raw: 04 10 41 48 7e 3d 00 10 42 01 07 fc f3 cf 3c f3 ca bc f3 cf 3c f3 cf 3c f3 cf 3c f2 b0 02 08 21 bb c7 1c 71 c7 1c 71 d6 f0 c2 08 23 aa 04 10 41 04 30 41 04 10 41 04 10 41 04 10 41 45 b4 41 04 10 53 53 cf 3c f3 cf 3c f2 af 3c f3 cf 3c f3 cf 3c f3 4f 3c f0 b0 82 08 28 81 04 10 41 04 10 41 d4 30 82 47 ee 01 04 10 41 88 a0 41 04 10 41 ce b0 41 04 10 41 04 10 41 04 11 7c f3 cf 3c db cf 3c ab cf 3c f3 cf 3c f3 cf 36 fb ef be b8 40 82 08 20 82 08 20 82 08 20 82 08 20 25 fb e2 41 04 10 40 1c 10 41 04 10 45 8c 10 41 04 10 41 04 10 41 29 ef be fb ef b9 f3 cf 2a f3 cf 3c f3 cf 3c f3 cf 7e fb ef be f4 d0 82 08 20 82 08 20 82 08 20 82 10 4f be aa b0 41 04 10 41 04 10 41 04 15 d1 fc 60 41 04 10 41 04 10 fe fb ef be fb e8 3c f3 ca bc f3 cf 3c f3 cf 3c f3 cf 3c f3 cf 3c Data Ascii: AH~=B<<<<!qq#A0AAAAEASS<<<<<O<(AA0GAAAAAA\|<<<<6@ %A@AEAAA)*<<~ OAAA`AA<<<<<
2024-05-27 22:29:21 UTC	2843	IN	Data Raw: d6 f7 7e bc a9 5c cd 8f 48 52 94 ea ec 79 c2 bd 8f 8d 68 1b ac 4f 9a 70 98 c1 36 1a 9b ca 8f 2a 1e 7d c4 d2 01 2c c3 7e 82 96 f2 58 60 0d 06 45 47 30 70 ee 8a d9 0d eb c9 db 42 af 00 fb 50 66 b1 4c ce 14 d9 8a 1a 62 2a 54 b0 15 2f 44 c3 35 0b f3 f0 3c b7 b1 b6 31 38 9b 54 08 49 a4 62 8a 8c c4 71 69 88 7d 69 13 24 6e 49 b2 e9 ba be 1b 07 17 b2 b8 1c 1d 8d fd 31 42 cb 93 d7 db b1 b2 4e c8 50 1d f4 2c b4 9f 1d 7c 6e e5 52 d8 8b 17 97 54 99 d1 c6 22 d2 07 06 94 05 58 0c 56 86 de 89 7c e6 fc 38 d3 4e 62 49 13 55 a9 3b 3a 19 1b 03 1a 91 8d 88 6f 53 c0 48 3c fe a8 8a 13 35 c3 d7 7b c1 72 de c6 d8 c4 e2 78 01 84 f0 9c 01 9f 99 ed b2 70 08 12 e4 6e 7a dc f3 f0 c4 79 21 8e 11 49 e8 15 81 c1 d8 65 50 6c f1 17 27 03 c8 f9 ec 44 2c cd cb 67 69 c1 a6 cc 6d 95 6d 03 15 Data Ascii: ~\HRyhOp6},~X`EG0pBPfLbT/D5<18TIbqi}i$nI1BNP,\|nRT"XV\|8NbIU;:oSH<5{rxpnzy!IePl'D,gimm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49732	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:20 UTC	659	OUT	GET /img/2FA.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:20 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 38956 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 114767 Content-Type: image/png Date: Mon, 27 May 2024 22:29:20 GMT Etag: "a085ada9775e112bb8d77cf1fab12cfa-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R9BA2F736XDDRXEREVH7 Connection: close
2024-05-27 22:29:20 UTC	763	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1d 00 00 00 fc 08 06 00 00 00 d3 e7 16 e9 00 00 01 83 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 22 15 07 33 48 71 c8 50 9d 5a 10 15 71 d4 2a 14 a1 42 a8 15 5a 75 30 b9 f4 0b 9a 34 24 29 2e 8e 82 6b c1 c1 8f c5 aa 83 8b b3 ae 0e ae 82 20 f8 01 e2 ea e2 a4 e8 22 25 fe af 29 b4 88 f1 e0 b8 1f ef ee 3d ee de 01 42 a3 c2 74 bb 67 1c d0 0d c7 4a 27 13 52 36 b7 2a 85 5e 11 46 08 22 62 88 28 cc 36 e7 64 39 05 df f1 75 8f 00 5f ef e2 3c cb ff dc 9f 63 40 cb db 0c 08 48 c4 b3 cc b4 1c e2 0d e2 e9 4d c7 e4 bc 4f 2c b2 92 a2 11 9f 13 c7 2c ba 20 f1 23 d7 55 8f df 38 17 5b 2c f0 4c d1 ca a4 e7 89 45 62 a9 d8 c5 6a 17 b3 92 a5 13 4f 11 47 35 dd a0 7c 21 eb b1 c6 79 Data Ascii: PNGIHDRiCCPICC profile(}=H@_S"3HqPZqBZu04$).k "%)=BtgJ'R6^F"b(6d9u_<c@HMO,, #U8[,LEbjOG5\|!y
2024-05-27 22:29:20 UTC	2372	IN	Data Raw: 0b 31 dc a7 d1 be 69 fc 7e b8 8c fc 76 53 72 2e 73 7f f9 be 00 00 66 fa 37 e1 fc 6a 7f 9a e7 8f 29 04 20 c8 9d a3 b5 e3 f7 8c 7d bb e3 db ec 3e 1c 9c 9f e1 83 31 90 be e4 99 f3 57 62 fc bc f3 7b cd 95 fd 10 1d b7 7f 41 33 d7 37 f7 60 67 3e 4f af 35 fc f7 78 7c eb c9 df 37 8d 7a ab f3 9b 99 7e e3 f3 2b 8c 6b c3 77 db 5f be 1f 9e f9 fc 2e fb aa 8d af b7 f9 6b 24 1d fd 78 b9 70 4e e9 f1 87 75 6c b8 57 33 d3 07 86 8f 5b 33 f2 fd c6 df cf ec 40 cd 5c df dc fc 6f 04 bc dd 3a 7c 2e e4 d7 9f 70 8e 61 7d 4d 6d 80 94 e2 a8 f9 47 d9 5a 9a ce 75 9a 78 36 fc 76 8f ff ad e7 8f f5 3b 08 5f 23 bf 3f c1 ee 3d 6b 2d 14 09 48 a2 38 16 88 fd ef 2c 43 91 a8 5e 9f aa 5d 74 d3 2e a1 41 d0 60 f4 5a 63 af 7b ec fa 0e 3b dd 43 1b c6 cb f3 57 d0 6c 61 ad 85 61 1b 07 a7 20 09 48 81 Data Ascii: 1i~vSr.sf7j) }>1Wb{A37`g>O5x\|7z~+kw_.k$xpNulW3[3@\o:\|.pa}MmGZux6v;_#?=k-H8,C^]t.A`Zc{;CWlaa H
2024-05-27 22:29:20 UTC	538	IN	Data Raw: 86 d5 b2 e3 1f 58 87 ae 08 d4 1d a9 7c 52 d6 50 92 39 74 21 1d f8 25 de 4b f1 9a 2a c6 7d 2a 1a 8c a5 21 85 6d 8d ab 30 ba 4f 05 28 3b bf ee 92 37 ce cc b0 de 4b a6 2c c2 18 26 83 88 21 69 d1 71 ac 38 b4 e3 0a 9f 71 6a 2c 7c 3e 45 92 cd 8d 6e 2d 4a 72 a9 85 3a 1f a3 16 09 97 9c f1 3b 2f 2e 04 58 ab 41 64 33 e3 3e 8c ef 59 03 94 39 6f 22 f1 c0 c7 fb 14 07 51 a3 10 38 e0 50 84 b1 10 fe 35 4d 53 bc de b8 a6 78 42 6d cd a9 2a 46 e7 c9 7e 94 90 30 6c 0f 10 c2 74 3f 35 c7 34 f0 d3 a6 d2 a3 77 8d ec e7 f8 30 07 28 2a a6 89 ca a5 f3 1b ef 5b c0 16 9c a6 9a 13 95 3f 07 fb 47 32 7c 6f 4a ae 4d 8d f2 1c 2a 55 fc bd 4f 5b ce 05 0d 53 6b 63 be 56 d4 d2 e0 25 a7 22 0f b0 f3 7d 97 ae ef 2e 88 c8 dc fa 1e d3 bc 13 68 d1 e4 6b 6b 1d 97 29 bf 47 ec 6c b0 b6 d6 65 04 fc 7a Data Ascii: X\|RP9t!%K}!m0O(;7K,&!iq8qj,\|>En-Jr:;/.XAd3>Y9o"Q8P5MSxBmF~0lt?54w0([?G2\|oJM*UO[SkcV%"}.hkk)Glez
2024-05-27 22:29:20 UTC	4744	IN	Data Raw: 4a 38 1e 0e f1 e0 04 41 04 1a 19 72 e0 de e1 60 eb 2e d1 97 d4 09 50 d1 31 71 e3 8e 0f e6 68 8e c4 31 a6 d9 fb 44 04 c1 04 46 82 f4 8d 8c 82 a8 2f f0 44 50 62 9a 38 6b ff 48 95 2a 55 03 63 eb c6 71 2e 55 61 c1 10 42 42 54 8c 5a 29 b2 cf 83 16 f3 96 25 bb 25 67 6d 3c 7c a6 ef 9f 12 72 98 d7 74 e8 0c 4c 12 f1 c3 f3 9f 19 de b3 e9 15 94 9d 3c eb c7 6e 58 33 c8 23 f3 24 12 6e 13 89 78 de 25 67 22 5c df 54 8a e3 4e 76 13 34 ba fe 90 ca a8 a7 53 b2 31 98 a2 5c 7e 4d 1d 95 9a 87 12 5a 1e 0f 51 29 dc 9a 2e 6c 52 d8 60 19 cf cf 5f 41 9f 3a de d7 d9 d9 29 5a 05 90 21 b0 05 94 91 84 9b 6e 8b 17 37 97 78 b5 bb 41 07 0b d5 b4 80 94 de e2 32 b4 b5 b0 a3 e8 97 0f 48 59 01 ae 0f 4e 01 c4 34 51 69 0a c2 24 a2 e8 e0 e8 ec 3b c6 ff b7 09 c7 f7 37 27 98 78 93 2d 92 35 ef 73 Data Ascii: J8Ar`.P1qh1DF/DPb8kH*Ucq.UaBBTZ)%%gm<\|rtL<nX3#$nx%g"\TNv4S1\~MZQ).lR`_A:)Z!n7xA2HYN4Qi$;7'x-5s
2024-05-27 22:29:21 UTC	5930	IN	Data Raw: ea ab a7 e8 f6 1a 4d b3 c0 7e df 81 a4 c4 d9 fd fb f8 e0 c3 0f f1 f1 8f 7f 8c fb f7 ef 47 28 48 4a 89 ef 5e be c0 b3 e7 df e2 d3 df fd 16 42 c9 28 cb 9f 36 78 cb bb 48 86 ad b1 61 72 0f 4e 07 25 e9 81 32 a1 6c 4c bc cb ab 4f 4a 06 72 2a 62 8b 65 97 e0 44 e2 5f 46 74 4f 10 a0 94 3b 8e 43 78 b6 31 ba 10 8d 82 05 f0 ec db 6f f0 2f ff f2 2f 78 fe f2 05 fe e2 af fe 12 7f f7 77 7f 87 47 8f 1e 61 b5 5a e1 fc fc 1c 17 57 97 b8 be be c6 d9 d9 19 1e 3d 7a 84 fb 67 67 8e f3 21 1b 08 21 b0 dd ed 70 71 79 89 de 32 4e 1e 3e 44 db 2a 5c 5e 5c e0 f5 f5 0d 2c 01 bf fb dd 67 58 2e 16 38 59 ad f1 f8 de 03 58 ad 61 b4 c6 d2 73 67 6a a4 d8 94 29 5f 32 7c ae 4a ce a9 20 e7 64 d3 29 62 e1 5d 91 8e 29 12 60 9a df 4e 1b 7a a5 11 e6 1c 01 b8 e4 60 4c 71 29 b2 04 c1 e4 3c c9 75 7e Data Ascii: M~G(HJ^B(6xHarN%2lLOJrbeD_FtO;Cx1o//xwGaZW=zgg!!pqy2N>D\^\,gX.8YXasgj)_2\|J d)b])`Nz`Lq)<u~
2024-05-27 22:29:21 UTC	7116	IN	Data Raw: 04 83 40 96 7d ba 85 61 25 80 de c0 88 0e 2f af 3b a0 d3 b8 bd bd 45 d7 f7 b8 dc dc e0 76 bb 41 a7 b5 93 c8 67 86 82 72 d2 f8 ec 88 2c d2 23 20 4d d3 60 45 02 24 18 b6 eb d1 ca 16 4a 69 68 cb 30 30 b0 ac b1 df ef 7d 0a 50 02 2c 60 0c a3 d7 06 2c dc b3 92 3c a8 b2 86 e8 dd a1 00 00 b3 88 44 bb d0 b0 db 11 6b 9d 71 76 a5 8c d2 97 cb 7a a4 83 02 82 e1 10 03 52 13 48 03 59 2f e3 ed 74 56 dc 7c 13 11 79 70 86 99 7c 5a 45 46 e5 d9 11 92 01 19 8f 4b be d5 bb 3b 3e 8d 91 8e fc fc c2 7e 18 10 52 41 90 f4 ce 11 c1 b2 81 35 ec 95 c1 dd 7d d2 bd 49 08 3f f0 64 67 0d 09 27 76 67 ad 85 36 5d 44 3b 0e 45 d5 44 a6 2f e2 9c 10 29 1b 58 38 42 76 e9 2e a5 ef c7 52 d4 ca e7 a5 ad f2 69 79 f2 15 1f f9 e7 6c cc e4 ef c3 96 7c c5 49 28 c9 4d df 2f 9d 47 5a c2 3b b5 95 be 7f 4b Data Ascii: @}a%/;EvAgr,# M`E$Jih00}P,`,<DkqvzRHY/tV\|yp\|ZEFK;>~RA5}I?dg'vg6]D;ED/)X8Bv.Riyl\|I(M/GZ;K
2024-05-27 22:29:21 UTC	8302	IN	Data Raw: c2 2f 2a 93 c9 04 65 59 5a 69 73 89 f9 7c 8e d3 d3 53 dc bf 7f df a8 61 32 81 4f 3e fd 08 b2 6e b0 b3 b3 83 c9 64 82 d9 d9 39 b4 54 98 8c c6 60 24 70 e7 d6 3b f8 97 ff fc 7f 00 53 35 a0 1a a3 64 da 02 60 7c c9 cf c1 9d d3 a1 cb f3 2a 22 60 6a 1f af 0b 4f ff 58 f8 f9 75 e0 f7 c1 e7 d7 e4 8c 84 f7 4e f1 16 70 06 64 6e 81 e6 20 32 a2 64 0b d9 e0 8b 2f ff 01 7f fe 57 ff 11 c4 19 b8 d4 d8 28 47 a8 cf 2e c1 84 c0 7c b1 f0 e7 95 8b 41 ee 77 73 ce 51 d7 75 76 2a 2d bc 46 cb d2 20 2b ee 7a 8f 63 4f ca a7 ca b5 d1 d6 29 1a 63 2d 0f af 33 d1 34 bd 04 c7 d9 16 b8 ed 4f 5d 8f e1 fb c3 f1 70 97 4c 3b 79 6f b7 f6 84 05 84 10 22 8a af c3 ad e4 58 67 2a 77 7e c6 53 22 e1 3e 8c d5 b2 c3 df e1 d4 68 c3 c7 dd 63 f1 74 51 8a 43 16 3e ef f6 6f 18 6b dc fe 4d b5 82 dc 3a 15 26 Data Ascii: /eYZis\|Sa2O>nd9T`$p;S5d`\|"`jOXuNpdn 2d/W(G.\|AwsQuv-F +zcO)c-34O]pL;yo"Xgw~S">hctQC>okM:&
2024-05-27 22:29:21 UTC	6178	IN	Data Raw: 46 49 ca c3 20 d5 96 89 5b 4a a9 a4 33 0c 8c b2 ad a1 54 1b 24 89 ca f6 fa bb 75 90 96 c0 f1 00 56 0d 0a 57 17 80 cb b2 c4 c1 c1 01 ee dd bb 87 97 af ce f1 d5 b7 df e2 e4 e4 c4 9c 27 a2 c2 f3 e7 cf 41 e0 d0 ed 02 6d ab 50 95 63 8c 46 13 1c 1e 1e e2 c6 8d 1b f8 f5 57 bf c1 cb d3 57 60 45 e9 65 ce ef df bf ef 95 67 39 e7 38 3a 3a c2 f3 17 a7 28 46 23 34 97 0b 7c f7 dd f7 e0 45 85 17 2f 5e 60 5c 15 78 f2 e4 09 36 c6 63 6c 6f 6f 43 08 81 2b d7 ae e3 f6 9d 77 f1 dd 83 07 38 3d bb 84 26 86 c5 62 01 c1 08 bf fb dd ef 30 3b 7f 85 bb 77 6e 63 63 63 03 d3 e9 14 57 af 5e c5 74 3a c5 d3 e7 2f f0 f8 e9 33 70 ce f1 f2 e5 4b 94 82 e1 ec e5 29 b6 37 8d bc f9 68 34 42 55 55 b8 7d fb 36 be fa f6 3b 94 c7 c7 f8 f5 af 7f 8d 62 34 42 ab 81 66 be c0 f3 e3 63 a8 a6 c1 ce fe 1e Data Ascii: FI [J3T$uVW'AmPcFWW`Eeg98::(F#4\|E/^`\x6clooC+w8=&b0;wncccW^t:/3pK)7h4BUU}6;b4Bfc
2024-05-27 22:29:21 UTC	10674	IN	Data Raw: e4 10 f9 f8 73 42 02 ad b2 ad df 78 7b e2 cf 8f 11 f3 9e 1c 3a 96 f7 6f c8 83 88 7d c0 e2 a4 27 96 39 4f 5d 7f eb ac 9d 4b 9e 30 99 e9 20 af bb c4 28 48 d8 d3 ff 72 92 14 31 67 33 5c 03 c2 ed e8 25 1d 7d c3 b2 e8 82 cf 25 02 03 9a 0c 0a e9 09 13 83 96 74 a8 49 ef 42 b0 cf a9 5e b3 2a 71 22 05 d7 54 a8 a6 e6 1f b6 64 27 0a 34 e6 c3 1f 24 13 23 5d 08 19 cf 8e 79 ed d5 e8 fa c9 8c 4a 55 19 e1 ce 65 d4 93 6f d6 e8 5f dc 4a da b1 28 db 07 8c 75 38 dc fe 21 a2 a5 c5 56 87 2a 7e d0 3d 52 91 e7 57 5a 55 16 af d4 1a a0 48 3a da 3e 84 8f 53 02 b2 0c 3e df 93 cb 9c 8e 88 85 68 dd f2 e2 7e 07 b7 27 b1 6b a7 f8 8b 8f 19 17 48 1d 1d 7b b7 7f 9c 49 9b 5e 91 f8 be f9 b7 4e dd d0 f5 b2 1d ff cf 2d b6 0c 35 d0 be c2 fc ec 19 e6 af 9e a3 22 60 dc 5e 82 97 63 bb a0 bd b9 73 Data Ascii: sBx{:o}'9O]K0 (Hr1g3\%}%tIB^q"Td'4$#]yJUeo_J(u8!V~=RWZUH:>S>h~'kH{I^N-5"`^cs
2024-05-27 22:29:21 UTC	11860	IN	Data Raw: 7e c9 72 4e 56 33 d1 e5 d2 a4 7a 27 62 f2 41 c6 d9 66 eb 91 24 6b 61 7a 93 ee 29 6f 39 e1 33 73 51 af cf 21 02 10 04 04 3d 40 85 4b 6d 88 76 79 88 66 a5 c0 45 74 b8 52 92 73 a9 ad 7d 2a f5 68 f8 4f 74 92 68 50 e4 41 a2 26 3d 92 98 e9 47 02 71 9c df bc 08 ac 5f be f2 df f3 bf 2b ad e7 24 71 0e d3 fc 39 3f ae 4c 91 57 42 4d 39 5f 2f f2 79 3f ff de da fe c6 f7 cf d6 19 64 8a bf 4c d9 ba 34 ad 4f ef 82 fc d6 5c 7e 6b 48 45 2e 1d 11 03 93 52 5c ac 86 18 e6 01 62 75 2c 85 92 e7 18 83 1e 05 5c 08 c2 ed 38 0c 18 19 fe 86 33 0c 61 ff 01 55 5f 1f cd bf 3c 1f b4 b5 68 28 ff bd 46 64 c9 0f be d4 86 3f b8 e8 1c 5a ed 42 6b 57 74 3f 74 2a 10 a7 60 c3 c8 18 b0 b3 05 2b 12 11 46 71 87 83 21 c1 73 94 06 7c ce b6 35 c4 00 f9 9b 46 c3 0d 27 b1 c2 4a 5e 29 14 04 ec c7 61 26 Data Ascii: ~rNV3z'bAf$kaz)o93sQ!=@KmvyfEtRs}hOthPA&=Gq_+$q9?LWBM9_/y?dL4O\~kHE.R\bu,\83aU_<h(Fd?ZBkWt?t`+Fq!s\|5F'J^)a&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49733	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:20 UTC	661	OUT	GET /img/phone.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:20 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64186 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 255341 Content-Type: image/png Date: Mon, 27 May 2024 22:29:20 GMT Etag: "edad7e5937b07671567ae92fa7f8554f-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R9C0VPNAPKRSS4W0VND0 Connection: close
2024-05-27 22:29:20 UTC	763	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 18 08 06 00 00 00 cc 10 47 90 00 03 e5 34 49 44 41 54 78 da ac 7d d9 8e 65 59 92 d5 b2 33 dc d9 c3 23 23 22 b3 32 aa ba 26 c8 ae 12 ad a6 5b aa 06 1a 21 90 78 84 1f e0 03 e0 0f 80 97 7c e3 5b 78 e5 43 e0 a5 25 ba 2a bb 86 cc ca b1 72 8c c9 c3 c3 fd fa 9d ce 39 86 db 36 5b b2 ad 2b 51 8c 37 e2 e8 de 33 ec 7d f6 60 db 6c d9 b4 5d f4 cb 7f f7 15 80 0b fc 3f 7f 24 be 27 00 0a a0 89 73 fe 6e 01 51 60 3a 01 cd c2 af e9 3e ca f1 19 f5 f2 ac 4f fa f8 d9 fa b9 1e e3 99 0e 50 ab 67 e5 75 8d 37 80 0e 51 56 80 66 e9 65 d4 eb f2 67 ae bd ac 2a 20 12 ed e9 01 3d 00 cd 06 90 0e 98 b6 d1 8e c9 ef 63 8a ba 7a 40 e6 5e e7 74 0b ff 58 db 46 7f 87 74 5e 0f e0 cf 4f 7b 40 ed de de db d9 3e 04 30 d8 b3 76 ee Data Ascii: PNGIHDRG4IDATx}eY3##"2&[!x\|[xC%r96[+Q73}`l]?$'snQ`:>OPgu7QVfeg =cz@^tXFt^O{@>0v
2024-05-27 22:29:20 UTC	2372	IN	Data Raw: bd dd 4e 27 7e a0 f5 76 0e af 00 48 f0 31 8d ba fa a8 5b 83 07 0e 41 2b 62 f5 97 be 93 87 29 ec 79 e7 11 32 5d fb 38 0d 2f ab 35 ee fd 77 de bd f4 31 e7 3a 24 df 40 d0 1e db c4 43 d5 c7 8b b4 48 fe 32 7b ea 7d 19 b7 7e cf e6 ab 7f 17 82 11 da 5c b8 4c 3c 7e 09 81 40 67 3f f0 75 79 f8 cc 68 29 e4 50 03 ca 2b 39 7c 01 5d ff 15 70 7a e6 34 bd 78 0f b2 fd 15 70 79 c2 eb df fe 2b dc 7e f8 1e f6 eb c6 bb a5 1d e6 b2 87 51 fa 43 bd 82 aa e0 0f cd 8f b1 d4 3b 3c c1 73 3c 97 77 b0 c5 06 8f f5 39 3a 8c b8 96 4b 6c b1 46 8b 09 0b ec 70 98 d6 68 64 87 3f fb c5 7f be 67 09 23 74 ff 08 30 5a ec ef bf 9b 4b 00 70 5e af 77 b1 8e 82 3f b5 1b 9f a7 fb 3e c2 e8 f2 f4 75 ca fe d3 8b 58 5f f6 cc 8b e0 7b 4d 8d 41 ca 58 09 d4 fe 59 f9 98 83 c9 d6 8b f7 1b f6 fb 22 79 91 d8 fc Data Ascii: N'~vH1[A+b)y2]8/5w1:$@CH2{}~\L<~@g?uyh)P+9\|]pz4xpy+~QC;<s<w9:KlFphd?g#t0ZKp^w?>uX_{MAXY"y
2024-05-27 22:29:20 UTC	538	IN	Data Raw: b5 8c 19 b5 05 18 4a 6f 65 8e 90 f5 13 a0 5b 72 dd 05 ed b8 a0 97 a4 95 60 70 fb 70 25 76 d0 70 dd 49 e9 cb 31 dd 77 cd 8a 20 8b ae 44 bf 47 1a 6e 57 64 4e a9 c4 4d 37 65 6d 11 d4 cb 74 70 f7 a4 48 ad 78 15 e1 25 42 fe d3 90 c6 b8 76 bd cd 7a 72 97 a5 f8 3c 88 0e 0e b8 1a ae 47 ae 53 6b a3 d7 9b d6 7b 32 fb 86 21 0c e9 e2 6b 16 6e 69 69 d6 06 90 bc ef 7a a2 fb de db 45 60 00 50 b9 0b 77 b2 f5 67 1e ee 5d 35 8b 90 f7 8b 16 a8 b0 00 c8 f4 a6 58 71 94 d6 af 04 d4 a9 78 8e db 98 df 91 75 7b 9b 9a 85 83 d8 c1 dd 56 b4 b0 db 3b c9 cb 84 b4 39 1d 7c ae fb 77 6c 1e c2 1a a9 41 87 ad f7 55 c4 59 ab cc bc 1c 41 1d e9 64 78 6d e3 e0 e5 75 97 e3 26 ce b3 a5 28 5e a6 20 90 4f 0a 95 5c b6 2f 85 29 aa f5 2b be 9e d2 32 21 54 b8 aa 75 43 de 23 b5 e2 c9 75 99 e5 f9 d1 63 Data Ascii: Joe[r`pp%vpI1w DGnWdNM7emtpHx%Bvzr<GSk{2!kniizE`Pwg]5Xqxu{V;9\|wlAUYAdxmu&(^ O\/)+2!TuC#uc
2024-05-27 22:29:20 UTC	4744	IN	Data Raw: ee d3 f8 d0 d0 43 47 63 91 12 1f 45 1f 6a 79 86 90 87 53 5c 97 e3 3d 00 fc 87 ef 43 64 9e 48 75 22 d3 fc 23 ae 32 7e ce cf 87 4a 93 13 6a 9b d1 79 0a d1 07 a1 91 85 9b 54 77 d1 81 c1 89 12 39 80 34 a1 bb 25 c6 07 97 8c 84 ef 49 2d fd 10 cf 6e 92 18 30 54 ed 0e d0 c4 38 39 96 ad 27 1f 53 10 cd 9a 60 8b a0 2e 09 6a 7c 1d e5 bc 8d 6a 8b 47 87 64 40 50 02 c7 70 87 1d 3d ce 01 9a b1 3b 69 65 a2 20 ab c0 1b d2 e5 2a 61 3d 6d 1f 64 1f a1 d5 d8 93 d9 ce 82 79 4c 74 5d 53 b0 51 d0 90 e0 93 01 c9 9c ae 77 32 ea ca ed ce c5 51 c5 bf 31 1e 08 f5 f8 67 9c 1f b5 fb 04 ce 5a 11 5a 93 f7 10 0b 90 ef 4a 90 58 91 d4 48 17 4f 05 90 c1 f7 91 69 7b 5d 60 1b 5b ce af 97 ef 1e d8 6f 5a 08 a9 24 fc 31 eb 36 e9 84 8a 0b 69 9a d6 16 3f 48 87 e3 6b 67 48 cd a2 68 ed 49 7f 51 8e a0 Data Ascii: CGcEjyS\=CdHu"#2~JjyTw94%I-n0T89'S`.j\|jGd@Pp=;ie *a=mdyLt]SQw2Q1gZZJXHOi{]`[oZ$16i?HkgHhIQ
2024-05-27 22:29:21 UTC	5930	IN	Data Raw: 19 1f 98 56 c0 54 62 e3 5c e2 40 2a cb b9 83 40 6e 1a dd b8 10 65 bc a2 8f d5 3e 64 4a 1f a1 3b 03 15 97 32 6f 42 a0 08 04 08 74 25 23 81 c3 5b 55 c2 c0 26 65 ca f1 ab 00 5e 52 01 da 55 f2 a2 d3 77 be 89 f9 fc 3d c8 e1 63 82 03 4b 02 a1 e7 c6 04 b6 df 6b 97 3e 47 45 ce 5c 7a fb 4e 57 45 c9 c2 38 83 1c bf 00 e5 af c2 f8 53 00 19 8a ff 02 1e 9f 78 e8 c0 fe 83 d8 3e 6d 9d 4a a0 85 13 84 85 f0 f5 8b 5f 60 3f 6c b0 98 bd b0 7d ff 0c b8 95 d8 bf 0e c7 32 ea 47 5b af 40 01 71 af f1 10 6f e1 0a 4f f4 45 71 07 db e7 00 97 1d 5a 7a da 16 f0 77 a1 37 50 11 ec 65 81 a3 ce 70 2b 6b b4 3a e0 4e d7 58 cf de e0 d5 f5 13 dc bc be 07 84 6f 19 b8 fd 99 2b 7f fb 5f 3b 9d 4a c7 6d db d2 f5 3b de 26 7f 29 74 39 26 b0 07 ad c8 e0 f6 65 61 44 49 6b 20 77 1c c9 44 b4 07 f4 a6 25 Data Ascii: VTb\@*@ne>dJ;2oBt%#[U&e^RUw=cKk>GE\zNWE8Sx>mJ_`?l}2G[@qoOEqZzw7Pep+k:NXo+_;Jm;&)t9&eaDIk wD%
2024-05-27 22:29:21 UTC	7116	IN	Data Raw: 07 2b 3b 49 82 13 78 ce 5d 38 41 4c 07 e0 e0 e1 c8 87 13 ca 53 16 56 14 8e 7c 10 98 1e e4 67 a1 94 dc d5 bb 68 ae 7e 80 f5 d9 4f 31 bf ba 01 83 fb 68 db 7d e4 94 c1 95 e7 40 b1 02 d8 7c f2 6c b5 17 4b 99 b6 fa 4d 6e 6a 80 ea 14 b8 01 c4 a9 10 d3 5a ff 3b 43 f1 12 83 23 ac 96 da 51 98 c0 ba 57 f6 c2 0d 34 00 59 22 48 4e 04 97 d0 1c 54 fb a1 9d 5a aa 00 ca 88 c5 cf 9c 1a 18 5b f3 40 64 3e e5 6f 64 d7 78 e0 76 0f 0b 8c 4f 5c c5 c9 3c 92 62 ba 47 9a e1 0b f5 0d f4 9d ad ba ad 4c 32 2c e3 28 9b 19 9f 8b 9f 65 30 60 db 31 ec 82 20 d2 8b c2 44 b4 e6 b1 b4 15 21 b2 32 ae d1 26 c6 58 d0 44 57 67 9d cd 2e 49 22 31 80 81 0e 4c 23 ed 9a 53 c3 50 e6 a4 41 04 89 bd 4c 9d 32 c9 69 00 76 92 b1 dc 18 0b 10 4b 63 e4 ec bd 22 c3 a9 dd 81 b1 51 a4 4e 27 2b 93 28 18 c3 65 9f Data Ascii: +;Ix]8ALSV\|gh~O1h}@\|lKMnjZ;C#QW4Y"HNTZ[@d>odxvO\<bGL2,(e0`1 D!2&XDWg.I"1L#SPAL2ivKc"QN'+(e
2024-05-27 22:29:21 UTC	8302	IN	Data Raw: 16 73 eb b0 25 bf 5c e4 b9 63 a8 cc eb 9c 4e 85 bd 3b e1 a7 20 92 63 f8 e2 5d 8e d6 59 b7 2f eb 63 7b 85 e1 cc 5f 42 10 20 77 80 ad 34 8a 24 10 6a b4 46 18 c9 bc 2e db 8d 50 20 da f0 56 d8 ca 2d 35 06 36 83 31 85 95 3c be c4 11 12 48 fa 09 3a cc 84 34 1a a8 94 63 f4 c2 4e 06 c1 19 4c 24 36 36 92 4e c2 67 42 2c 95 e5 06 4d 71 8d f5 b3 57 71 f5 7f 7f 0e ef 7e 82 b8 b8 04 fa d5 34 6c c1 c6 ee f9 14 cc e9 5d d6 ec 4d 18 bc 71 cf 3b 77 07 bf e5 39 ba 98 18 df 47 b7 83 d1 fd 26 72 26 9a ad c0 9b 4b f0 c7 3f 46 7a f8 14 e1 a8 46 58 05 a0 b5 14 27 f5 76 35 a7 07 f3 02 0c d9 3b 38 d4 83 81 c8 51 3a 7f c9 65 44 bd 91 09 29 c8 0f 6f 2b d5 89 cf 06 60 67 80 72 d9 ea 3c 33 46 db 8e 3a fa 6f ff e9 ec 8a b7 cb 65 13 d7 60 40 74 7b 1d 4a 54 50 2a b9 c6 ce 72 fe 7a f1 f4 Data Ascii: s%\cN; c]Y/c{_B w4$jF.P V-561<H:4cNL$66NgB,MqWq~4l]Mq;w9G&r&K?FzFX'v5;8Q:eD)o+`gr<3F:oe`@t{JTP*rz
2024-05-27 22:29:21 UTC	6178	IN	Data Raw: 8d 1e 95 dc 47 1e a5 04 cc 20 dc c1 13 00 70 cd 9f 35 6e 0c 20 52 d0 75 49 27 70 90 46 48 70 6b b6 d6 e6 c5 86 b7 fa 9c 46 c2 c9 dc db a3 94 32 71 44 c2 15 1d c2 49 a2 5e 83 5c 45 3f b8 85 82 31 07 70 25 6b 43 07 01 a6 db 9f 81 b4 1c ac c9 23 34 b7 d0 08 65 1d 17 2c 8d 21 1e 38 21 78 63 d0 38 3a 79 be d2 ca a3 f9 11 d6 5a 3d 94 45 3b 04 6f 18 d0 94 ca 22 88 70 13 16 38 df dc 47 b5 b8 c6 1b 7f e3 3f 22 84 0e 3c 7a dc 69 96 26 64 f0 57 4d 3a cd 9d 60 e9 7d 11 a3 ee 16 dc 3b f9 b0 97 e4 45 f6 9d 2d 95 31 5f 9f 81 bf fe 10 34 0e a0 83 90 13 9b 6a d3 6d 17 29 33 79 c9 0c ff 63 52 a0 07 80 b7 a5 81 43 06 b9 17 6c 22 95 f1 a8 b6 5b 8f 05 48 d5 47 8e 63 25 65 2f f9 6a 39 b3 02 02 b2 cf ec 20 a0 d3 8e 59 82 37 55 17 ff c9 fb 7f f0 41 8d b6 5e f2 5a a2 60 6c 77 61 Data Ascii: G p5n RuI'pFHpkF2qDI^\E?1p%kC#4e,!8!xc8:yZ=E;o"p8G?"<zi&dWM:`};E-1_4jm)3ycRCl"[HGc%e/j9 Y7UA^Z`lwa
2024-05-27 22:29:21 UTC	10674	IN	Data Raw: 77 4a 4b 3d 36 f6 6c 05 a0 57 46 ad be a5 6c 7e f7 40 7f f3 e5 75 b5 8f ea 9f 83 ab 5b 32 de 90 35 00 78 da 07 79 15 81 07 90 00 c5 87 26 ba 3f 53 f0 97 56 3e f9 5b 92 47 92 c5 25 b5 5f 82 1c 1c 0e 2b 6b 2e 33 a6 91 4a 29 f1 12 15 20 63 fd 79 fe 13 05 8e 2e b7 69 ef db eb 5c d7 85 71 f7 54 de 93 cc 2d d5 a9 2d 48 4b 50 7b 4f 5d 02 f8 3a 68 f3 0d a8 7a 8e d9 d9 2b 1c 9d 3c 40 3c f9 1c e9 b8 c0 a6 9b a2 1c 06 60 33 57 77 8e 38 41 41 9d cc 73 e7 74 24 73 e0 02 2b a9 f8 31 91 96 70 99 91 54 cf 6f f2 af b9 30 77 2f e9 50 40 5c 45 1d 0a f4 c2 d4 35 90 66 14 91 62 25 14 32 97 4e 69 2b fb bd a4 63 01 73 89 82 e5 0a 5f 0a c1 d3 a0 96 2e e3 52 a2 d3 58 a8 98 80 24 d7 4c 24 38 40 49 a1 42 31 02 ab fd 4b 2f 80 1f 58 b7 87 b8 dc 5d c7 f4 e8 21 de 7f e7 3f e1 fa fb 7f Data Ascii: wJK=6lWFl~@u[25xy&?SV>[G%_+k.3J) cy.i\qT--HKP{O]:hz+<@<`3Ww8AAst$s+1pTo0w/P@\E5fb%2Ni+cs_.RX$L$8@IB1K/X]!?
2024-05-27 22:29:21 UTC	11860	IN	Data Raw: 40 a6 d0 63 6c fd ea 8b a0 bd 0a f3 e7 3e 62 a9 1d fc fe b3 7f cb 06 ff fa 2b 6f e0 3f 7c f5 87 38 ba 59 e3 ab bf fc 4b b8 71 7c 6c c7 7b 0c a6 01 06 c7 e0 8d f5 1e a0 ce cc b8 29 1a 37 52 29 f7 38 97 8a 6b 1d 7a 14 f9 d2 9c e3 42 10 b9 ae ba 9d b8 10 28 f0 e3 3e 34 b1 29 f9 f2 d7 22 19 8b 78 0c 00 1a 5d 82 31 b1 32 10 8f 71 2a 87 ed 7f ad cc 75 56 96 91 8a 06 44 ac ef 17 b5 45 9a 6d e5 f9 9f 7d ee 39 7c e7 bb df c5 0b df ff 0e de bc 7f 88 4f 3f 41 78 fa 33 00 2e 62 d2 a9 0d 5a ce ce f5 a1 0d 36 3f 50 37 7d f7 f3 86 28 45 97 2f 8f 4b 6e de 4c 86 91 17 5d fc 5e e6 f9 e9 2c 63 bc 57 16 c0 ba c5 d5 ff da a2 6e a6 98 1e cc c0 5d 1b 13 de a1 35 90 db 0a fb a7 7f af 40 3a da 43 7a fc 96 ea f8 50 5b f3 05 0b d8 31 dd 9d 4f da e4 4e bc 06 b5 6f 88 96 57 73 b9 ef Data Ascii: @cl>b+o?\|8YKq\|l{)7R)8kzB(>4)"x]12q*uVDEm}9\|O?Ax3.bZ6?P7}(E/KnL]^,cWn]5@:CzP[1ONoWs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49735	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:20 UTC	660	OUT	GET /img/star.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:21 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 65014 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 1980 Content-Type: image/png Date: Mon, 27 May 2024 22:29:21 GMT Etag: "2356b4d4119b02fa4c2857e8c12da0d0-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R9N6S3YYW6AB58F84VM8 Connection: close
2024-05-27 22:29:21 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 00 29 08 03 00 00 00 9f be f0 c4 00 00 02 f7 50 4c 54 45 47 70 4c ab dd f8 cb e8 fa c9 e6 f9 c9 e7 fa b6 e1 f9 c8 e8 fb c8 e7 fa cd e8 fa cc e8 fa bc e3 fa ae de f8 c3 e5 fa ca e8 fa c1 f1 ff a9 dc f8 bb e3 f9 a5 db f7 f3 ad 00 f2 ab 00 aa dd f8 a8 dc f8 a6 db f8 a1 d9 f6 ac de f8 c8 e8 fd a6 db f7 ad dd f7 c9 e8 fa bf e4 fa c5 e6 fa b0 df f8 a7 dc f8 c7 e9 ff c7 e7 fa b4 e0 f9 b8 e1 f9 f1 a9 00 bf f4 ff a3 d9 f6 c4 ed ff cc e9 fb c2 ef ff b3 df f8 c7 ea fc fa a3 00 c8 e7 f9 c6 eb ff a9 dd f8 ba e2 f9 f3 af 00 c0 f3 ff cb e9 fb f4 b0 00 b2 df f8 af df f8 a7 db f8 c6 ea ff c8 e7 fb c0 e5 f9 bd e3 f9 be e4 fa f6 a4 00 c5 ec ff a3 da f7 aa dc f7 f3 ac 00 b8 e2 f9 b8 e1 f8 b1 df f9 c2 e5 f9 b3 Data Ascii: PNGIHDR))PLTEGpL
2024-05-27 22:29:21 UTC	1215	IN	Data Raw: de d2 e9 ba 39 eb bb 30 eb b9 2a f0 b4 19 db cf 8b c9 e7 df fe 9a 00 da cd 8c fa b0 00 f0 b0 00 ff 91 00 a4 e8 31 1c 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 04 73 49 44 41 54 78 5e 8d 94 75 74 e2 48 1c 80 93 90 92 96 40 48 13 a0 b8 16 59 b4 c0 56 28 15 a8 77 db ab db 76 2b 5b 95 ad 77 bb 7a ab ee 72 eb 6e b7 7e ee ee ee ee ee ee 2e 7f dc 24 d0 83 6e f7 de bb ef c1 9b c9 cb 97 99 9f cc 1b 68 66 dc 54 62 63 fd 06 5c a1 e8 e8 90 a6 e2 1d 03 0a 5c 81 e3 31 10 84 cc 9f 16 66 3a 40 c0 4d e7 72 b9 02 5e 75 c0 9c 50 93 50 13 30 03 de 37 9b 6b cc 01 08 c2 ae e2 47 a1 c6 94 18 86 62 05 19 b6 a0 3c 90 90 00 ec 30 41 08 32 48 a5 b0 14 86 17 e0 52 4d 7e 2a 6e e3 e9 51 0c c3 90 58 75 a2 21 25 05 07 1b 2b 7a 14 00 3c 0f 82 0a 61 91 10 96 e2 a9 1a 8d 21 91 24 49 3e Data Ascii: 901tRNS@fsIDATx^utH@HYV(wv+[wzrn~.$nhfTbc\\1f:@Mr^uPP07kGb<0A2HRM~nQXu!%+z<a!$I>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49736	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:20 UTC	659	OUT	GET /img/dir.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:21 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 38934 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 5071 Content-Type: image/png Date: Mon, 27 May 2024 22:29:21 GMT Etag: "654e57d817ca6795c13e7e805799d7ce-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R9NEDCSR2WBG2SYM49B2 Connection: close
2024-05-27 22:29:21 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 fa 50 4c 54 45 9a 68 aa 9a 69 a9 9b 69 aa 9c 6a aa 96 62 aa 94 60 a9 8e 58 a9 90 5a a9 92 5d a9 8d 56 a9 99 66 aa 8b 54 a8 8a 52 a8 98 64 aa 9e 6c aa ad 80 ac a9 7b ac a5 75 ab b2 87 ac a1 70 ab b5 8b ad bb 93 ad b8 8e ad c1 9b ae b0 84 ac be 96 ae c6 a0 ae 9a 68 aa e1 c4 b1 f7 ec b5 ff ec b4 fd ea b4 ff ee b4 ff f1 b3 ff f4 b5 f5 e2 b3 e5 c9 b2 ef d5 b2 ff f9 b5 fb e5 b4 ff fb b5 ff f6 b5 fd e9 b4 ff ff b6 ff ea b4 ff f1 b6 fe ec b4 ff fe b6 ff ef b4 ff f7 b5 f1 e1 b1 d2 b1 b0 ff f2 b6 ff f0 b3 ff eb b4 ff fd b5 ca a7 af 88 50 a8 9b 6a aa f7 e6 b4 84 49 a8 e9 ce Data Ascii: PNGIHDRxxgAMAasRGBPLTEhiijb`XZ]VfTRdl{uphPjI
2024-05-27 22:29:21 UTC	2372	IN	Data Raw: 79 aa 8e 6b f2 a7 6b 4a a8 db 9d 89 6c 2c 5f 6a 33 8f c0 31 5c 62 13 46 54 ff ff c1 6e 91 8f 15 4e 61 69 76 6c ff ff bf 62 81 7b 17 4d 5d 0f 4a 5f a1 ad 94 98 a6 90 a9 b2 96 85 99 89 7d 94 86 8b 9e 8b 9c 24 5f bb 00 00 00 02 74 52 4e 53 e5 f2 06 29 59 a1 00 00 10 65 49 44 41 54 78 01 ec cd 07 01 c0 40 08 03 40 7e 00 49 83 7f bd 75 d1 c9 19 38 b3 71 0b b3 79 13 1b f7 bc a3 e3 8e 3b ee f8 8d 71 c7 6b 7b 24 32 88 63 07 05 8a 60 65 46 96 7c 8b 14 50 a5 93 56 ba d0 72 14 86 c2 00 7c ce 62 c5 1d aa 77 93 74 a1 29 17 b6 61 07 32 ee 33 ef ff 4a 9b e9 f1 71 fd 71 49 be 98 e5 ba ea ad a1 7d 1b ac f9 4e 10 46 71 98 24 e9 c4 0f b3 3c 2e f2 2c 4e ca 28 9c 86 e5 2c f6 b3 2c 29 a2 b4 9c cf d4 53 5e 86 81 bd d0 be 07 d6 0c 6f b9 02 f8 4d 28 5b ff a9 80 d5 1b c6 b7 0d c3 Data Ascii: ykkJl,_j31\bFTnNaivlb{M]J_}$_tRNS)YeIDATx@@~Iu8qy;qk{$2c`eF\|PVr\|bwt)a23JqqI}NFq$<.,N(,,)S^oM([
2024-05-27 22:29:21 UTC	538	IN	Data Raw: f0 a6 2f e3 28 12 15 a0 bc b8 c9 e0 38 3c ec 91 cf 98 69 8b 3b 04 e9 67 91 52 b7 9e ef 9a 04 ee c3 7d 42 51 20 e5 13 43 8d 1c 8d e3 f1 58 4b 09 60 de cb 33 89 ca c5 34 89 35 9b 22 d5 84 c1 93 3d 1e 38 d5 a1 66 c0 78 4d 4d c2 46 87 38 9c 10 68 25 12 6a 2e 1d 47 d3 30 00 50 20 de 31 01 5f fc ee 13 84 fd f8 9f ef 31 53 e6 a7 db b6 a4 c1 d2 72 29 1f 4d 1f 8d 87 7b 7b 27 70 8f 76 41 6e 01 38 43 06 b3 c0 96 75 28 ab d9 b4 5e cf a1 69 0e 8f 4e e0 85 78 54 92 4e 1f e2 f2 42 7a 34 95 a0 29 5b cb 66 47 b6 c5 e5 4f 13 fb f1 87 c9 e3 13 88 f8 ab cb 00 06 f2 a1 81 f6 58 e1 42 91 c6 fd 49 2c 04 c9 dc f1 19 48 26 eb 0d ab c7 57 eb f3 b9 7d b5 b5 3e bf cf 1f 18 ac f5 b8 3d 83 9e 80 77 30 18 6c b2 f0 0a 59 ec c8 b6 f8 14 29 b9 a6 33 92 f9 29 02 43 56 5f 50 a2 ee df 71 ec Data Ascii: /(8<i;gR}BQ CXK`345"=8fxMMF8h%j.G0P 1_1Sr)M{{'pvAn8Cu(^iNxTNBz4)[fGOXBI,H&W}>=w0lY)3)CV_Pq
2024-05-27 22:29:21 UTC	1396	IN	Data Raw: ea 18 c6 5b be 50 5c 10 f1 d8 14 5d 51 00 3e 86 c1 38 ab 45 53 1d 6f 17 2e 78 72 1a 39 d4 e3 e5 24 cb 69 41 e0 96 16 28 e5 9e 68 8f 61 08 60 c0 59 32 e1 54 6f 7d de 8c d4 31 79 10 f8 e4 f3 2d 02 58 9b ae c8 4d 18 ac 69 3d 06 aa 19 ed b1 0d 93 71 39 31 c9 15 6d f1 7f 78 dd b4 e8 b9 e9 bf 2b 99 73 de 46 e3 2d 5f 92 05 d5 84 01 5f 7f f3 6d 94 6a 7e f7 fd 0f 36 55 54 1d 7f 09 75 8c 0c e5 14 9c 2b 7c 28 0a be 51 21 34 e2 d2 93 2e d8 5e 79 8c b4 c2 7c 88 25 f3 e3 95 5b f0 1c a0 c0 c9 a5 6a f9 f1 a7 6f a3 aa e9 db 9f 7f b9 a2 42 3e ab f2 2f 8d 96 13 24 ad ce a8 d3 73 93 20 b7 39 7a 98 71 43 4b b5 20 dd 30 e2 c2 80 cb 89 64 74 24 ab 49 4b db 2c a6 1f e3 cb 17 a1 ec 2c 06 6b 54 57 7e 29 f8 f6 db d1 7a 6a ff ee d7 df ae 5e bb a2 02 9f 95 38 b9 d2 36 5f ff 04 5d 45 Data Ascii: [P\]Q>8ESo.xr9$iA(ha`Y2To}1y-XMi=q91mx+sF-__mj~6UTu+\|(Q!4.^y\|%[joB>/$s 9zqCK 0dt$IK,,kTW~)zj^86_]E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49737	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:20 UTC	387	OUT	GET /img/save_img.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:21 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64182 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 7550 Content-Type: image/png Date: Mon, 27 May 2024 22:29:21 GMT Etag: "1d1b4906bd89108d25460df3f3addef7-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R9NDFCZ81KVTN615KJMY Connection: close
2024-05-27 22:29:21 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 02 fa 50 4c 54 45 c3 e2 c9 b5 dc bb b0 da b8 a9 d6 b2 a6 d4 ae a2 d2 aa 9d d0 a6 9a cf a4 98 ce a3 c3 e1 c9 99 cf a2 ef bc 57 fc f2 df fc f4 e3 fc f2 e1 fb ec d0 ac 4d 00 fc f1 dc ff f5 df ff f9 e4 fa e6 bf ff ff ef ff ff f7 ff fd ea f8 e2 b7 eb dc c6 c3 af 9a 96 7c 6b 7e 60 50 a8 8f 7b ce c0 aa fd f1 dd e1 d3 be 8c 6d 57 4e 27 15 37 0f 03 3e 16 07 55 2e 18 5f 39 26 fc f1 da 48 20 10 2d 07 00 43 1b 0a 6c 49 34 ff f4 da 24 01 00 4a 23 12 f8 c9 54 d9 ca b3 45 1f 0f af 99 87 f7 ed da a0 75 4b ea b9 47 7f 56 35 f2 c1 7f eb bb 7b ac 87 54 91 67 42 de ae 73 e3 b4 77 de af 73 de b0 75 d9 ab 71 de ad 6e be e0 c4 e2 ac 68 b2 f0 d9 bb de c1 b8 dd bf b2 60 16 b6 Data Ascii: PNGIHDRxxPLTEWM\|k~`P{mWN'7>U._9&H -ClI4$J#TEuKGV5{TgBswsuqnh`
2024-05-27 22:29:21 UTC	2372	IN	Data Raw: b0 3c ff ff fe f1 c0 66 fc ee d6 f7 e6 cb dc 6a 00 c6 f0 dd aa 49 00 f7 c9 83 bf 95 5e f9 ae 00 f5 b6 1f fc ef d9 2b b3 10 1d 00 00 00 0b 74 52 4e 53 e5 f2 f2 f2 f2 f2 f2 f2 f2 f2 e5 23 07 71 10 00 00 1a 28 49 44 41 54 78 5e ec d6 45 8f 23 57 14 05 e0 de f6 ff 97 5e a1 8b 99 cc cc 0c cd cc 3c 8c 61 8e 94 f3 5e 5b 9a ee 59 d9 d1 4c 5a 89 72 5c 5e 79 f1 d5 b9 f7 2e bc b2 b2 fa 24 59 59 d9 7e a2 ac ac 3e 8d bb fa af 84 0d c3 f8 6f c3 ff ef d8 b6 9f 00 ce a5 93 b5 a4 9b cc 66 93 74 2e 67 ff 33 b0 51 ee ae ad a5 d7 eb ad 8d 8d ab a3 56 fd a2 9c ee ce ba c0 bf 2a 6c 53 74 bb 7f 73 b5 f5 72 70 8e fc 34 1c f1 ef 37 4b 3b fd ee 64 36 29 db 5f 07 36 72 dd b5 c4 e8 b7 ae de ed 9e 9f 0f 76 6f 53 88 32 54 df 36 ae 1b 0d 7e b3 54 aa db 54 4f db 5f 16 ce 75 93 b5 f4 45 Data Ascii: <fjI^+tRNS#q(IDATx^E#W^<a^[YLZr\^y.$YY~>oft.g3QV*lStsrp47K;d6)_6rvoS2T6~TTO_uE
2024-05-27 22:29:21 UTC	538	IN	Data Raw: 13 56 63 72 cd cd 43 f1 d1 a1 a1 c1 41 42 0f 42 ee ea ea 47 ab 43 c3 7b 1f fe 60 fe 14 83 ad cd 44 60 09 92 e1 b5 bc d3 a6 07 06 82 91 23 fd 0c 66 bd 95 e8 b9 ab 7a f5 96 a2 20 89 92 64 cd ae 38 b7 d3 d9 f9 5b 1f 7f 7a 74 10 31 c4 e8 55 40 47 46 c7 46 f7 ee 5a d5 00 13 39 57 c3 27 4b a0 35 09 d5 e5 eb d4 bb ca 15 60 88 f1 95 28 1f d6 bd ea 3e 6e 27 9e 20 e2 e7 59 06 cf d1 00 39 3a 3c 3c 32 84 00 7e 64 74 74 6c 6c 74 64 e4 a1 e0 5f 9e 7f ba 62 75 c2 c8 d5 e4 6d c0 12 1b e0 7d 3e b7 de 5d 06 f7 c1 00 98 6a 4b 06 13 39 a1 1c af a5 13 9c 63 58 fd e9 38 50 43 83 43 43 a0 8e 12 15 92 1f 0a 7e fb 8b a7 9f f9 2f f8 9f 05 b2 9a eb 4b 93 77 00 3e bc 61 29 b6 da a9 12 a1 b2 55 5b 74 0a 25 c5 85 db 78 88 35 0c 28 26 ab c7 47 87 87 86 87 01 24 b1 a0 ef 0a fe ec 59 80 Data Ascii: VcrCABBGC{`D`#fz d8[zt1U@GFFZ9W'K5`(>n' Y9:<<2~dttlltd_bum}>]jK9cX8PCCC~/Kw>a)U[t%x5(&G$Y
2024-05-27 22:29:21 UTC	3875	IN	Data Raw: 38 a0 d1 b1 68 74 02 5c a2 22 c7 df d8 4d 31 e7 18 93 2b 91 3b 94 11 b9 47 4c 98 68 ca c5 66 5d f5 84 83 5f 4e 30 2f 65 dd af ec 2b 9a 74 50 21 a7 0b 35 39 83 4e 99 0c fe c7 c4 71 40 e1 33 02 60 a0 27 26 a2 04 de 5d 31 b6 d3 02 55 17 17 17 95 8d a4 c9 ce a6 76 bf 8f b6 c4 fd e8 eb e9 f6 07 9a 0f 38 31 62 34 ce 71 3e bf 96 5b 60 ab 19 1c 3d 0e 24 e4 c2 6e e4 1a 99 c6 6b 77 30 b7 13 c0 31 a3 ae c0 56 c3 6b 7c 9a b2 dc 78 f0 e0 00 c0 f7 3b 2a d2 d7 d2 d4 e0 74 b6 d2 c3 13 a7 b8 50 9f c8 2e 90 d5 4b ef 5c 05 78 94 c1 93 d1 d1 b1 91 21 08 8e 4e 4e 8e 8d ed 62 f5 cd 13 00 27 92 54 98 b1 58 39 6f 63 b0 24 b4 82 2f d5 3a 8b c5 86 93 a1 2f 39 7d b2 a1 58 74 3a 24 18 0d cd ff 71 9a 83 c0 77 7e c7 4e 8f 45 51 cb c3 23 a8 b2 28 b8 93 df 7c b8 e2 df 9e f8 d7 f2 95 05 Data Ascii: 8ht\"M1+;GLhf]_N0/e+tP!59Nq@3`'&]1Uv81b4q>[`=$nkw01Vk\|x;*tP.K\x!NNb'TX9oc$/:/9}Xt:$qw~NEQ#(\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49738	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:20 UTC	382	OUT	GET /img/doc.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:21 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64182 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 5723 Content-Type: image/png Date: Mon, 27 May 2024 22:29:21 GMT Etag: "8270521d3d689b807b0b038f11a97a2a-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R9NZ1E4W2T1CBT0VWZZ3 Connection: close
2024-05-27 22:29:21 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 16 22 49 44 41 54 78 5e c5 9b 6b ac a5 57 79 df 7f cf 5a 6b ef 7d f6 99 73 9d 61 2e 1e cf d8 78 3c b6 42 cc a5 83 12 15 4c 88 1c 6a 0a 84 02 09 90 96 24 25 55 3f 44 91 7a 51 0b 91 10 97 24 6d 2a 12 a2 88 24 52 a9 d2 2a 10 68 55 11 28 a9 d3 a2 60 e3 d4 2d c1 34 24 84 5b a8 cd 4d b1 0d b6 c7 e3 f1 dc 2f e7 cc 39 67 bf ef bb d6 13 b1 9f 47 6b e9 c8 42 11 02 d4 25 ed 79 df f3 ee f7 dd 7b fd 9f eb ff 79 9e 3d 32 dc f7 f6 53 e4 7e 19 14 44 40 22 48 00 cd 10 46 88 08 5a 7a 44 22 00 84 04 65 80 b4 00 25 a3 b9 03 01 10 44 02 a8 a2 5a 90 38 46 f3 0c b4 80 2a c4 91 9d 4b b0 f7 fa 2d bb 2e c1 5e 28 e4 01 42 b4 fb 8a 9f 2b 10 42 fb ce 3c 80 66 7c b5 fb 11 3b cf bd Data Ascii: PNGIHDR<<:r"IDATx^kWyZk}sa.x<BLj$%U?DzQ$m$RhU(`-4$[M/9gGkB%y{y=2S~D@"HFZzD"e%DZ8F*K-.^(B+B<f\|;
2024-05-27 22:29:21 UTC	2372	IN	Data Raw: 3e 87 98 04 85 e6 7f c5 c1 0f 3b 68 b7 69 f7 cf ae f2 fd 58 09 58 95 0d fe 7a f5 4e 1e 5f 7f 25 5c 7b 82 b8 73 16 2d c5 d2 5c ee d1 dc db 7e 3d b0 b5 54 94 ed 3d 4f 6b da 5d 33 5c 25 db 51 33 c9 fd 15 c1 7d b4 14 a0 98 54 9a 49 7b 80 52 c4 05 40 e9 f9 7e ad 44 cf 74 d8 e2 9b 6b 3f 46 56 b8 e9 ec 7f 27 22 e4 b0 e8 d6 e6 f9 b6 e5 f8 a6 14 01 72 e7 99 a6 c0 d0 a1 22 35 a0 25 cc 04 0c 5c 70 b3 05 93 5a c9 10 fd 9a 47 39 9d 9b cd 08 19 ed e1 7b b9 4a b1 00 17 04 52 1a 11 4a c7 a4 3f c7 e3 7b 5f 42 09 63 6e 3e fd 41 22 d7 18 26 fb 90 7c 0d b4 b4 20 58 3a 53 54 4c 55 08 0a 2e 18 0f c4 9e a7 53 65 27 28 e0 d1 56 b0 87 42 42 0c a8 a7 0d 45 74 b0 0f 19 66 7c 2f 96 aa 52 54 2b d1 03 21 88 a0 08 41 07 16 bb 33 3c b1 fe 62 32 81 5b 9f fc af a4 d9 39 7a 59 24 44 4f 81 Data Ascii: >;hiXXzN_%\{s-\~=T=Ok]3\%Q3}TI{R@~Dtk?FV'"r"5%\pZG9{JRJ?{_Bcn>A"&\| X:STLU.Se'(VBBEtf\|/RT+!A3<b2[9zY$DO
2024-05-27 22:29:21 UTC	538	IN	Data Raw: 00 da d4 a4 28 10 08 92 26 6e ef 54 66 e2 7e e0 f8 46 20 20 5a 1a 29 29 c5 fe f6 3c 9c 62 20 ab 32 9d 8c e7 60 01 8a b6 54 33 4a 11 54 e6 4d 82 f1 28 92 82 15 01 ff eb 11 e5 97 3e 25 1c 5d 1b d8 3f b5 28 3b 89 d0 65 cf 24 02 4f 5e 81 9f fa 3b c2 47 5f 17 e7 60 67 1d fc d2 8f 07 96 a7 c2 b9 cd c2 f1 49 e6 81 9d 75 fe f9 93 6f 82 98 08 b1 db c5 f7 bd b6 af 93 93 a4 f8 f0 58 06 64 b4 e0 b5 70 06 92 db 7d b1 ba 13 85 42 5d 6e a2 60 05 82 fb e5 ee f7 85 7a c1 8b 82 b6 ce 6e 0c fc fc 3d c2 fe 45 61 29 c1 43 e7 60 65 11 86 01 46 23 50 8f de 47 d6 e0 3d 9f 2c cc 7a f8 c7 cf 11 ba 09 fc e8 2d c2 7b 3f 6d 56 10 a5 70 6c 8f f0 fe 2b 37 f2 8a 85 97 f0 ba b5 bb 90 e1 3a 54 87 5a 3c a8 8f 5f da f4 10 20 8d 51 a8 ed 57 ab 91 3d 63 d2 ca 41 b2 8d 5c 24 26 02 90 55 4d c3 Data Ascii: (&nTf~F Z))<b 2`T3JTM(>%]?(;e$O^;G_`gIuoXdp}B]n`zn=Ea)C`eF#PG=,z-{?mVpl+7:TZ<_ QW=cA\$&UM
2024-05-27 22:29:21 UTC	2048	IN	Data Raw: b9 30 8b ac 8d 33 a3 04 af 79 6e e0 1a 70 12 e5 d8 32 1c 59 17 fe f7 03 85 97 9f 08 fc 87 57 04 7e e7 b3 85 0f 7e 56 d9 ee 61 3a 02 15 78 dd 09 e1 5d af 0c dc 92 84 d3 bd b0 10 33 5b 12 f8 d0 c5 e7 f1 aa a5 7b 08 79 9b 5c 80 d0 38 36 08 a9 96 7a b9 40 f4 b2 b0 74 48 9c 9a c6 1d 28 68 1d a2 59 8a 12 06 40 3d ef 06 11 a6 d3 85 4a 3a 8c 5e 2a 08 4e 3f a9 d3 c1 b3 3d 5c dd 1e 58 1f 5b 46 bc e7 c1 c2 b3 5f 10 b9 15 b8 eb 31 e5 0b 8f 29 2b 4b f0 96 97 06 6e de 23 fc cc 0f 07 fe e4 6b 99 4b 5b 70 75 07 6e 39 00 1f 7e 4d 44 81 33 c0 76 67 c2 5c 0c 70 b6 5f 82 bc 00 74 a0 c9 70 81 61 d3 4c 70 bf 34 d0 a5 cd 82 b5 58 5e 10 04 42 b4 24 1e 92 99 79 1c 5b 55 d5 aa 20 00 92 83 2d 0a 43 f6 5a 37 48 a5 8f c9 59 d7 c5 ad 4c c2 98 d4 33 96 e1 df df af fc ec 5d 99 b7 7f 22 Data Ascii: 03ynp2YW~~Va:x]3[{y\86z@tH(hY@=J:^*N?=\X[F_1)+Kn#kK[pun9~MD3vg\p_tpaLp4X^B$y[U -CZ7HYL3]"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49739	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:21 UTC	665	OUT	GET /img/no_avatar.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:21 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64181 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 6043 Content-Type: image/png Date: Mon, 27 May 2024 22:29:21 GMT Etag: "63d88964a3d4cd62c81b4073bdf75745-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R9TGXPV1DCDDMMB6DZ4B Connection: close
2024-05-27 22:29:21 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 17 50 49 44 41 54 78 da ed 9d 09 70 5d e5 75 c7 1f fb 12 c2 16 68 c2 52 96 04 32 a4 50 d6 50 36 43 ca 60 37 2c 21 6d 26 90 4e 9a 96 4e 98 4c 09 4d 0a 4d 27 40 67 5a 1a 87 a4 10 28 29 81 34 03 b4 10 62 ed 92 65 c9 5a 2c c9 92 b5 59 b2 b1 6c 61 d9 f2 6e 55 28 89 58 52 08 18 03 66 33 f6 eb ff 48 0f e9 c9 7a 7a 7a cb bd f7 dd e5 77 66 7e 63 0c c6 7a ef dc 73 ce fd be f3 9d 73 be 58 0c 41 10 04 09 87 0c 0c 0c 1c bd 79 f3 e6 33 c5 a5 e2 06 71 8b f8 9e b8 c7 d8 b4 69 d3 03 fa f5 27 fa f5 61 f1 e4 96 2d 5b 9e b0 df 27 b8 ef a3 3f a7 7f ff 5d f1 75 fd f3 3c fd b9 0b 36 6c d8 f0 87 fd fd fd 87 a3 61 04 29 a0 Data Ascii: PNGIHDR\rfbKGDPIDATxp]uhR2PP6C`7,!m&NNLMM'@gZ()4beZ,YlanU(XRf3Hzzzwf~czssXAy3qi'a-['?]u<6la)
2024-05-27 22:29:21 UTC	2372	IN	Data Raw: b2 e4 77 e2 7a bc 28 a0 62 d3 73 f5 00 bb 30 64 c8 a7 9a d0 72 03 0c 35 0d 9e f3 df a4 87 f7 1a 06 0c 0e b1 d1 b6 91 78 96 cf c5 86 4b 26 0a 7a 30 5a 70 fc 3e 04 bd 58 6e c3 cb fc fb d6 3f 23 31 69 16 63 05 37 13 84 25 dc 90 e4 33 49 5c 81 f5 3a 06 0a 1e 31 b0 7d fb f6 4f e3 79 fe c8 f2 df 93 98 33 8f 61 82 97 bc a6 d5 c0 17 f1 c2 c2 2d f9 8f d0 43 68 c4 10 a1 80 7c 28 ee c2 1b bd 5f f2 9f 90 b8 5c 03 23 04 3f f0 94 f2 02 07 e1 99 de 38 ff 39 e2 37 18 1d f8 8c 56 d5 0b 1c 89 87 ba eb fc f3 c4 1b 18 1b f8 94 41 2b 40 c3 53 dd 71 fe 5b 98 c6 0b 7e 47 01 60 54 7d 04 67 e1 b1 ce 26 fc 6e 23 d3 0f 01 aa 15 f8 3f d9 ec f9 78 ae 03 22 65 7e 97 51 5d 10 40 76 c8 76 2f c3 83 f3 5b f6 df 83 21 41 80 79 5b 2b 81 6b f0 e4 dc 96 fd 0f 60 40 10 92 21 a4 73 f1 e8 ec 96 Data Ascii: wz(bs0dr5xK&z0Zp>Xn?#1ic7%3I\:1}Oy3a-Ch\|(_\#?897VA+@Sq[~G`T}g&n#?x"e~Q]@vv/[!Ay[+k`@!s
2024-05-27 22:29:21 UTC	538	IN	Data Raw: 35 d8 eb 28 67 f6 23 c1 8a f2 72 1c cd a7 d8 69 0d 76 9a 11 0b 52 05 80 ad 28 86 55 40 90 f7 fe bc fd 33 5e 01 fc 47 aa bb 01 3b 50 4e 06 27 02 ca 05 2c 52 8f 39 4e e7 b3 b6 5f 4d 70 c2 3e 33 0e 00 ff 94 6a 05 f0 df 28 27 33 fa 34 62 0a a7 f3 0f 96 9c e5 dc 3f ab 00 70 63 aa 00 40 3f 40 16 2c a1 3a d0 37 f4 f6 f6 62 93 d9 e5 b2 3e 37 2d 00 28 2a 7c 15 e5 64 55 4a 49 42 d0 07 d4 2d 5e 8c 3d 66 c7 9e 91 91 91 43 a7 05 00 d5 02 9c 8b 72 b2 1c 18 c2 e0 d0 82 97 fc 0e 50 f4 93 2d 23 b1 54 a2 5a 80 c3 a9 05 c8 1e 2b 3c c1 19 59 fa 07 88 b6 d8 4c a2 ff f8 22 0a ca be 42 90 53 01 ef 59 da d2 82 fd e5 c6 e3 e9 02 40 1b 0a ca ed 32 51 5b 8e e2 98 de 8d fa e2 b6 df 9c 1b db ee 48 17 00 b8 20 84 7c 80 af b1 c4 2b cd 3e 0e cd 02 4c 51 0c f4 35 94 94 3b cb 96 2d c3 49 Data Ascii: 5(g#rivR(U@3^G;PN',R9N_Mp>3j('34b?pc@?@,:7b>7-(*\|dUJIB-^=fCrP-#TZ+<YL"BSY@2Q[H \|+>LQ5;-I
2024-05-27 22:29:21 UTC	2368	IN	Data Raw: c2 16 5c e7 ee 5c 02 c0 dd 28 ce 9b ca c1 5e 5d 64 19 a5 4b 47 ac 9b 8f 44 9f 77 6c db b6 ed ac ac 03 80 5d 1f 8c f2 bc cd 0d a4 ec 23 f0 f9 de 3d db 4e 3e bb 62 8d e7 ed 29 db 62 b9 8a fe e7 8d 28 d0 1b 2c fb 6d 47 85 61 be 84 d4 b6 3b 96 fb 60 d9 ef e9 0a f3 fe 7c 02 c0 7d 28 d1 d5 e9 ac 63 cb ff fa ba ba c8 15 fa 34 36 34 8c 75 f7 91 f9 77 bd 24 fd e2 9c 03 80 1e ce 05 28 d1 79 d6 ac 59 33 d6 31 48 61 d0 f8 29 80 cd 51 e0 fc df 15 5e b0 0e df 58 3e a2 bf e4 79 14 e9 4c b2 ef d9 67 9f 8d dc db 3e 9b 55 81 05 45 0b 8e d8 8b 63 36 f7 f3 58 be 62 f7 88 a1 cc fc ba 02 6d df 5b bd 70 21 8e 9e 21 16 24 2d 58 62 3f 79 97 ff 7e 21 ef 00 a0 28 72 36 ca cc ed 8d 6f dd 6c 95 94 fe e6 4c ad 92 86 56 3e 8d 3d e5 c4 f3 79 2f ff 93 56 01 ab 51 68 e6 58 72 8b 37 be b3 Data Ascii: \\(^]dKGDwl]#=N>b)b(,mGa;`\|}(c464uw$(yY31Ha)Q^X>yLg>UEc6Xbm[p!!$-Xb?y~!(r6olLV>=y/VQhXr7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49740	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:21 UTC	392	OUT	GET /img/fb_round_logo.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:21 UTC	422	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 65014 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 42676 Content-Type: image/png Date: Mon, 27 May 2024 22:29:21 GMT Etag: "627bb060090f6f956bcac85bc2b7c9ec-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R9TW8K8RSNDCH0YM4Z7E Connection: close
2024-05-27 22:29:21 UTC	764	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 b0 00 00 04 b0 08 06 00 00 00 eb 21 b3 cf 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 50 14 85 4f 53 b5 22 15 07 3b 88 08 66 a8 4e 16 44 45 04 17 ad 42 11 2a 84 5a a1 55 07 93 97 fe 08 4d 1a 92 14 17 47 c1 b5 e0 e0 cf 62 d5 c1 c5 59 57 07 57 41 10 fc 01 71 75 71 52 74 91 12 ef 4b 0a 2d 62 7c 70 79 1f e7 bd 73 b8 ef 3e 40 a8 95 98 66 b5 8d 02 9a 6e 9b a9 44 5c cc 64 57 c4 d0 2b c2 e8 a0 9a c6 a0 cc 2c 63 56 92 92 f0 5d 5f f7 08 f0 fd 2e c6 b3 fc ef fd b9 ba d5 9c c5 80 80 48 3c c3 0c d3 26 5e 27 9e dc b4 0d ce fb c4 11 56 94 55 e2 73 e2 11 93 1a 24 7e e4 ba e2 f1 1b e7 82 cb 02 cf 8c 98 e9 d4 1c 71 84 58 2c b4 b0 d2 c2 ac 68 6a c4 13 c4 51 55 d3 29 5f c8 78 ac Data Ascii: PNGIHDR!iCCPICC profile(}=HPOS";fNDEB*ZUMGbYWWAquqRtK-b\|pys>@fnD\dW+,cV]_.H<&^'VUs$~qX,hjQU)_x
2024-05-27 22:29:21 UTC	2372	IN	Data Raw: 26 81 cd 9d df 7f d8 e9 9f 89 80 3b 80 31 a0 05 dc 4a 59 86 6d ed 7c bc 09 dc 06 4c 74 7e 8d a9 5d 3c 4f e5 8d 24 f8 59 27 49 92 ba 91 05 96 24 49 9a 33 f7 2a a4 a6 9f 87 81 e5 c0 62 60 29 65 c9 34 da f9 d8 02 ca 02 6a 41 e7 e7 a6 0b a9 a1 ce cf 57 3a bf 46 44 59 32 55 3a 3f ae 0e f0 75 4e a0 2c ac c2 bd 7e dc 02 da c0 26 ca a9 ae 82 b2 f0 da d4 79 de dc 79 be 03 d8 c2 8e 42 ec f6 ce 8f b7 77 7e ad a9 e9 e7 bc 91 b4 fd ac 96 24 49 73 c1 02 4b 92 24 ed b3 4e 31 15 b3 a3 44 5a 4c 59 30 2d a3 9c 60 5a d6 f9 fb e5 94 d3 51 4b 80 55 9d 8f 27 94 85 d4 10 65 a9 35 fd 1c 7b ad 32 2f 5a 94 05 d5 64 e7 79 7a 6a 6b 3b e5 14 d7 9d 9d e7 5b 80 bb 28 0b ae bb 76 7a dc 41 59 8a 35 3b bf 56 db c9 2e 49 92 b4 af bc 28 94 24 49 bb 2d cd 8a e9 49 a8 e9 69 a9 25 40 0a ac 05 Data Ascii: &;1JYm\|Lt~]<O$Y'I$I3*b`)e4jAW:FDY2U:?uN,~&yyBw~$IsK$N1DZLY0-`ZQKU'e5{2/Zdyzjk;[(vzAY5;V.I($I-Ii%@
2024-05-27 22:29:21 UTC	538	IN	Data Raw: 51 ee cb ba 21 6f 24 2d 63 91 a4 de 60 81 25 49 3d 20 cd 8a 3a 70 28 e5 6e ab 0b 80 63 80 21 93 91 24 69 8f b5 80 eb 81 2f 52 4e 65 fd 28 6f 24 db 8d 45 92 ba 9b 05 96 24 75 b1 34 2b 46 81 93 80 27 03 67 53 2e 65 af 9a 8c 24 49 fb 2c 00 b7 b2 e3 78 e1 3f 03 77 e5 8d 24 18 8d 24 75 1f 0b 2c 49 ea 42 69 56 ac 02 1e 05 5c d8 79 5e 66 2a 92 24 cd 9a 02 f8 2e f0 19 e0 ef 81 1b 2d b2 24 a9 bb 58 60 49 52 97 e8 dc 4d f0 60 e0 89 c0 1f 00 c7 02 0b 4c 46 92 a4 39 33 05 fc 0c f8 5b ca 5d 59 3f f3 ee 85 92 d4 1d 2c b0 24 69 9e a5 59 31 02 1c 45 b9 db ea 49 94 bb ae 2a 26 23 49 d2 bc fa 2d f0 65 e0 d3 c0 f7 f2 46 32 66 24 92 34 7f 2c b0 24 69 9e a4 59 b1 88 72 bf d5 33 80 33 81 35 be 2e 4b 92 d4 75 ee 00 be 4e 59 64 7d 2d 6f 24 77 1a 89 24 cd 3d df 28 49 d2 1c 4b b3 Data Ascii: Q!o$-c`%I= :p(nc!$i/RNe(o$E$u4+F'gS.e$I,x?w$$u,IBiV\y^f$.-$X`IRM`LF93[]Y?,$iY1EI&#I-eF2f$4,$iYr335.KuNYd}-o$w$=(IK
2024-05-27 22:29:21 UTC	4744	IN	Data Raw: ee c3 66 e0 2b 94 45 d6 b7 f2 46 b2 c5 48 24 69 cf 58 60 49 d2 1e 48 b3 62 98 72 e2 ea 62 e0 09 58 5c 49 92 a4 dd 37 5d 64 7d 9c 72 22 6b cc 48 24 69 f7 58 60 49 d2 6e d8 e9 a8 e0 73 28 8f 0a 5a 5c 49 92 a4 bd b5 89 b2 c8 fa 18 f0 cd bc 91 6c 35 12 49 ba 7f 16 58 92 74 3f d2 ac 18 02 4e a6 2c ae 9e 00 ac f2 b5 53 92 24 cd 90 bb 80 7f a4 9c c8 fa 67 77 64 49 d2 7d f3 4d 98 24 ed 42 67 e2 ea 44 e0 12 76 14 57 92 24 49 b3 61 13 65 91 f5 51 9c c8 92 a4 5d b2 c0 92 a4 9d a4 59 51 03 8e 05 5e 08 9c 8b 47 05 25 49 d2 dc 99 de 91 f5 31 ca 1d 59 16 59 92 d4 61 81 25 49 dc 5d 5c 1d 4d 79 54 f0 c9 c0 fe a6 22 49 92 e6 c9 66 e0 ff 02 1f 06 ae cb 1b c9 b8 91 48 1a 74 16 58 92 06 5a 9a 15 15 e0 50 ca bb 0a 3e 1d 58 0b c4 26 23 49 92 ba c0 ad c0 e7 29 77 64 5d 97 37 92 Data Ascii: f+EFH$iX`IHbrbX\I7]d}r"kH$iX`Ins(Z\Il5IXt?N,S$gwdI}M$BgDvW$IaeQ]YQ^G%I1YYa%I]\MyT"IfHtXZP>X&#I)wd]7
2024-05-27 22:29:21 UTC	5930	IN	Data Raw: 01 78 67 9a 15 07 18 85 f6 95 05 96 f6 49 e7 ee 12 57 01 17 fb f9 24 49 92 24 49 ba 97 33 80 37 a7 59 b1 c2 28 b4 2f 2c 1c b4 d7 3a 77 95 78 2e f0 52 c0 db a4 4a 92 24 49 92 ee 2d 06 2e 02 ae 49 b3 62 c4 38 b4 2f 9f 48 d2 de 3a 17 78 1d e5 5d 26 24 49 92 24 49 da 95 2a 70 05 f0 82 34 2b aa c6 a1 bd 61 81 a5 bd 92 66 c5 46 e0 4d 40 6a 1a 92 24 49 92 a4 07 30 0a bc 0a 38 cf 28 b4 37 22 23 d0 9e 4a b3 62 3d f0 51 e0 51 a6 21 49 92 24 49 da 03 d7 03 cf cd 1b c9 b7 8c 42 7b c2 09 2c ed 91 ce e2 bd b7 61 79 25 49 92 24 49 da 73 1b 80 46 9a 15 1b 8c 42 7b c2 02 4b bb 2d cd 8a 85 40 06 9c 6f 1a 92 24 49 92 a4 bd f4 30 e0 6d 69 56 ac 32 0a ed 2e 0b 2c ed 96 ce a2 bd 4b 81 cb 80 9a 89 48 92 24 49 92 f6 c1 79 c0 2b d3 ac 58 60 14 da 1d 16 58 da 5d 67 03 af a0 5c bc Data Ascii: xgIW$I$I37Y(/,:wx.RJ$I-.Ib8/H:x]&$I$I*p4+afFM@j$I08(7"#Jb=QQ!I$IB{,ay%I$IsFB{K-@o$I0miV2.,KH$Iy+X`X]g\
2024-05-27 22:29:21 UTC	7116	IN	Data Raw: d6 da 7c 6f 92 1f 52 06 00 18 9f ba 24 8f 75 5b c3 7f ef f9 1d 39 b4 bb ea a8 08 00 b0 05 7d 24 c9 0f 28 c3 ea 09 b0 56 69 79 7d ea 2f 26 39 ac 1a 00 30 1e a5 24 87 77 57 f5 7f f0 99 1d 83 c7 bb 2d e1 15 00 b0 55 ed 48 f2 a7 ba bd fe 3d 4a b1 3a 02 ac d5 fb a3 49 3e ad 0c 00 30 1e 25 c9 4c 27 f9 85 8f cc 96 4f 3e da 99 8d a1 ed 00 c0 d6 f6 74 92 9f ee f6 fa b2 99 55 50 a4 55 e8 f6 fa 47 32 ea be da ab 1a 00 30 26 25 f9 dc 13 33 4b 7f f2 43 33 a5 d3 12 5e 01 00 5b 5e 27 c9 cf 24 79 54 29 6e 4c 80 b5 3a 5f c8 68 7d 2a 00 30 06 75 49 de 7d 47 ab fe 73 9f 9c 6d ef 9b 33 f7 0a 00 d8 36 1e 4e f2 33 dd 5e df a6 35 37 20 c0 ba 81 6e af 7f 67 92 9f cf 68 7d 2a 00 d0 b0 52 92 83 bb aa fa df fd e4 8e a5 87 6f 6d e9 bc 02 00 b6 93 2a c9 4f 26 79 4a 29 ae 4f 80 75 63 Data Ascii: \|oR$u[9}$(Viy}/&90$wW-UH=J:I>0%L'O>tUPUG20&%3KC3^[^'$yT)nL:_h}0uI}Gsm36N3^57 ngh}Rom*O&yJ)Ouc
2024-05-27 22:29:21 UTC	8302	IN	Data Raw: 01 00 53 e9 9e 8c 66 61 ad db cd 06 58 f7 66 34 03 0b 00 00 26 66 7e a9 0c cf cd 97 81 65 01 00 30 95 ba 19 65 48 eb 76 b3 01 d6 fd 11 60 01 00 30 61 17 16 53 9d 9d 2f 55 25 c1 02 80 69 b4 33 c9 e3 37 f3 00 37 1b 60 bd 3b c9 ac e3 00 00 c0 24 f5 2f 95 99 fe a5 cc a9 04 00 4c ad f7 74 7b fd 99 f5 de 79 dd 01 56 b7 d7 9f 4d f2 94 fa 03 00 30 69 97 96 d2 ba b0 58 5a 1a b0 00 60 6a bd 3b c9 de f5 de f9 66 3a b0 f6 24 79 44 fd 01 00 98 b4 8b 8b 25 fd f9 12 4b 08 01 60 6a dd 96 e4 be f5 de f9 66 02 ac 07 93 dc aa fe 00 00 4c da a0 4e 5d d7 ea 00 00 53 ec 96 24 0f ad f7 ce 37 13 60 3d 90 e4 a0 fa 03 00 30 61 a5 3f 5f 2e d4 25 45 29 00 60 6a ed 4c f2 d8 7a ef 7c 33 01 d6 23 cb 4f 0e 00 00 13 35 ac a3 ff 0a 00 a6 df 23 dd 5e 7f 5d 59 d2 ba 02 ac 6e af bf 3b c9 93 Data Ascii: SfaXf4&f~e0eHv`0aS/U%i377`;$/Lt{yVM0iXZ`j;f:$yD%K`jfLN]S$7`=0a?_.%E)`jLz\|3#O5#^]Yn;
2024-05-27 22:29:21 UTC	4538	IN	Data Raw: 1f f0 bc 00 00 00 00 ec b9 8b aa af 2c db 45 1d 58 d2 b0 3e 58 4d 9e 19 00 00 00 80 3d f3 60 f5 fe 69 1c 1e 5c b6 0b 5b d6 02 eb aa ea d3 9e 1b 00 00 00 80 3d f3 95 ea a3 cb 78 61 4b 59 60 cd 07 85 bd b7 da f1 ec 00 00 00 00 ec 89 f3 ab 5b 97 f1 c2 0e 2c 71 68 17 b4 84 7b 2e 01 00 00 00 d6 d0 56 75 fe 34 0e 27 97 f1 e2 96 b9 c0 fa 42 f5 09 cf 0f 00 00 00 c0 ae fb 7c 75 e9 b2 5e dc d2 16 58 f3 c6 ef 1d d5 71 cf 10 00 00 00 c0 ae 7a df 34 0e 77 2d eb c5 1d 58 f2 f0 2e 69 d6 00 02 00 00 00 b0 3b 6e ab de bf cc 17 b8 d4 05 d6 34 0e 37 56 1f f2 1c 01 00 00 00 ec 9a 4b ab ab 96 f9 02 0f ac 40 88 ef aa ee f3 2c 01 00 00 00 2c dc c9 ea 5d d3 38 1c 59 e6 8b 5c 85 02 eb ca 96 78 88 18 00 00 00 c0 0a fb 72 f5 91 65 bf c8 a5 2f b0 a6 71 b8 a7 3a af 3a e5 99 02 00 00 Data Ascii: ,EX>XM=`i\[=xaKY`[,qh{.Vu4'B\|u^Xqz4w-X.i;n47VK@,,]8Y\xre/q::
2024-05-27 22:29:21 UTC	8372	IN	Data Raw: 02 8b b3 32 8d c3 dd d5 6f 55 ef 95 06 00 00 00 df e6 d3 d5 93 a7 71 f8 aa 28 38 1b 0a 2c ce da 34 0e b7 54 87 aa 4b a5 01 00 00 c0 dc 0d d5 53 a6 71 b8 52 14 9c 2d 05 16 0b 31 8d c3 e7 ab 27 57 d7 4b 03 00 00 60 e3 dd 51 3d ad ba 40 14 2c 82 02 8b 45 ba b8 7a 4a 75 ab 28 00 00 00 36 d6 e1 ea 39 d5 b9 d3 38 ec 88 83 45 50 60 b1 30 f3 0f a6 77 37 9b 89 75 8f 44 00 00 00 36 ce f1 ea 79 d5 0b a6 71 38 29 0e 16 45 81 c5 42 cd 3f a0 5e 5d fd 41 75 44 22 00 00 00 1b e3 54 b3 53 ea 9f 33 8d c3 83 e2 60 91 14 58 2c dc 34 0e c7 aa e7 57 7f 5e 69 dc 01 00 00 36 c3 bb ab df 9a c6 e1 5e 51 b0 68 0a 2c 76 c5 34 0e f7 57 bf 57 9d 5b d9 f3 0c 00 00 b0 de 2e aa 7e 75 1a 07 33 91 d9 15 0a 2c 76 cd 34 0e b7 57 bf 5e bd 3f 25 16 00 00 c0 ba ba a2 fa 95 69 1c be 20 0a 76 8b Data Ascii: 2oUq(8,4TKSqR-1'WK`Q=@,EzJu(698EP`0w7uD6yq8)EB?^]AuD"TS3`X,4W^i6^Qh,v4WW[.~u3,v4W^?%i v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49741	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:21 UTC	393	OUT	GET /img/meta-logo-grey.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:21 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 38957 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 105511 Content-Type: image/png Date: Mon, 27 May 2024 22:29:21 GMT Etag: "db33657ce611b9f2d0bb4754b3b18618-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2R9XVXE5JBWD2Q1CRXJ4N Connection: close
2024-05-27 22:29:21 UTC	763	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 84 00 00 00 f0 08 06 00 00 00 58 15 aa 71 00 00 14 a9 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da a5 9a 69 96 1b b9 95 85 ff 63 15 5e 02 e6 61 39 00 1e 70 4e ef c0 cb f7 77 41 4a 2e a9 ca c7 5d dd 4c 25 49 91 11 08 e0 0d 77 40 a4 3b ff fc 9f eb fe c1 23 0f 5f 5d 2e ad d7 51 ab e7 91 47 1e 71 f2 a6 fb cf 63 be e7 e0 f3 7b 7e 8f 9e 7d fa 7e fa cb e7 ee 7e cf f1 91 8f 74 48 fa 9e 50 3f af e1 c7 e7 df 13 7e bc 86 c9 bb f2 87 81 fa fe 7e b1 7e fd 62 e4 ef f8 fd b7 81 e2 e7 25 69 46 7a 6f df 81 c6 77 a0 14 3f 5f 84 ef 00 f3 b3 2c 5f 47 6f 7f 5c c2 3a 9f 57 fb b1 92 fe f9 75 7a ca fd d7 69 ff e9 ff 8d e8 59 e1 3a 29 c6 93 42 f2 3c a7 f4 9d 40 d2 6f 72 69 f2 45 e4 Data Ascii: PNGIHDRXqzTXtRaw profile type exifxic^a9pNwAJ.]L%Iw@;#_].QGqc{~}~~tHP?~~~b%iFzow?_,_Go\:WuziY:)B<@oriE
2024-05-27 22:29:21 UTC	2372	IN	Data Raw: 28 63 64 30 9f 10 cb 0d 3f 72 e7 e2 27 a3 ca dc ff 2b 6f ae e5 5f f2 16 ff af 99 73 4a dd df cc dc 9f f3 f6 57 59 33 d1 d0 7e 19 fb 74 a1 82 ea 13 dd c7 f7 a7 cf 38 c8 c7 64 19 2c 3d ee bd 9b 08 6c 8f e8 9a 89 02 63 9f 37 73 f4 e5 84 1e a3 9d d0 47 3c 8d a0 dc 34 1b f0 d8 17 57 5f 61 dc 5b 57 b8 ad df 7c f8 a2 9c 55 40 2a 8b 2b bb 55 7a de 35 e5 69 89 89 cd b1 32 2b ba fb d6 53 a7 11 fe dd 5b ca fd 86 32 e3 32 d2 d7 ae cf 67 58 5b 01 9d 50 ba 4e 58 aa 1e 17 e7 1c d7 6c 85 c0 62 fd cd fb 86 4d c0 c3 19 e5 10 7e f5 66 23 84 c7 2a d0 e8 cf 6a 79 ee 90 f6 dc 20 79 6c a4 2f 18 08 1a ba db ad 6c cb 84 ba 2c 92 33 c9 a9 2e 1d 2e 18 eb b3 91 9b ed 47 3a b3 f7 48 90 47 af 8d 78 b4 c3 1c cf ba 76 d2 9d cd da 34 9a d6 52 ed 54 5a b4 e1 99 23 2f 33 67 db 93 a3 fa 60 Data Ascii: (cd0?r'+o_sJWY3~t8d,=lc7sG<4W_a[W\|U@+Uz5i2+S[22gX[PNXlbM~f#jy yl/l,3..G:HGxv4RTZ#/3g`
2024-05-27 22:29:21 UTC	538	IN	Data Raw: a1 dd 49 91 c7 69 5d b5 48 e6 94 c2 fc f6 86 b3 92 82 08 0f 62 2b 88 9e 91 35 a8 0f 0e 3c da 2e 2b 9b e2 1b 1e 69 30 0a 20 0d 95 88 51 3a e8 1a 85 49 1d 45 48 c1 a2 d8 00 b1 00 10 88 37 22 67 63 49 1d c4 40 59 c9 77 5f d0 db e3 a3 39 8b 56 93 0c 2c 88 b6 a7 5a 80 7d 60 13 8f 33 25 66 07 eb 5d 90 05 33 e2 9a a9 22 cb 1a ca bf 63 28 71 81 99 3a 16 f8 e3 41 bd 7d 64 1d e6 84 49 a2 c6 44 0b b0 3a 42 f9 04 69 54 e2 b7 bc 50 20 49 56 f3 8c ff 76 39 da 5e 4d 2e 8a f4 dd a5 2d 09 59 7e 74 1d 99 42 c7 14 a1 05 8b c1 c6 02 55 37 11 6a e4 42 87 71 89 76 ee 1a dc 60 a1 e8 ce e8 91 93 41 17 70 45 52 05 c5 ee 93 e8 47 c4 7a 33 c1 ef 15 67 4f 0e c0 08 d2 81 e2 bb cf 3a 26 f5 2f f6 0e 39 8c 11 73 b0 11 05 ab 12 ed f4 8a f0 21 b1 30 9f f1 2c 25 2d 08 1f 01 65 dd a8 16 94 Data Ascii: Ii]Hb+5<.+i0 Q:IEH7"gcI@Yw_9V,Z}`3%f]3"c(q:A}dID:BiTP IVv9^M.-Y~tBU7jBqv`ApERGz3gO:&/9s!0,%-e
2024-05-27 22:29:21 UTC	4744	IN	Data Raw: 63 cc 73 86 5a 51 d7 f7 4c c8 de 07 09 8a 80 88 be f9 80 de 48 37 1c a9 0b e2 c5 57 f4 52 11 c8 37 2e b2 a5 f7 93 97 c1 df bd 69 8e 84 16 16 04 1a 98 cc eb e3 82 13 f5 50 70 d0 8e 91 76 3a 9c f6 86 e8 d1 b7 10 44 38 f1 a7 4f d0 d7 74 70 08 4c 07 29 03 6e e8 de d3 4e 63 12 2d 02 d3 1b c4 33 d0 42 f7 6c 6a 95 84 fa e2 10 78 97 10 78 62 9e 29 d7 c4 20 eb 1c dd af f0 1b 21 23 52 d8 08 7e 90 4c ec 00 94 8a 20 2b 0b db 3b 66 a4 87 66 a5 5d 24 f4 11 29 a0 72 26 43 81 0b 6d 96 37 37 c4 3d 6f 26 fa ab 00 2b 15 34 c6 f8 56 c2 4b cf 95 45 65 d0 83 5c 9b 5a 7a 3d 68 de 65 98 99 ca a5 5b e9 30 e2 07 2f 83 ab f2 7d 90 7e 9e da 8f 81 c9 30 29 a0 91 14 2c 73 27 50 34 e7 b0 6c 30 2a c0 61 86 f1 74 0c 83 53 40 39 ac 84 fb 43 c5 18 ed 85 ad 83 93 b5 b9 47 93 46 c9 96 2c 46 Data Ascii: csZQLH7WR7.iPpv:D8OtpL)nNc-3Bljxxb) !#R~L +;ff]$)r&Cm77=o&+4VKEe\Zz=he[0/}~0),s'P4l0*atS@9CGF,F
2024-05-27 22:29:21 UTC	5930	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2024-05-27 22:29:21 UTC	7116	IN	Data Raw: d3 93 34 9b fb fc f6 5d ef 5b b7 e1 91 7b 99 79 bf 18 cc cc 88 f3 23 f8 af 7f f3 8f e7 97 bb 2a 67 d7 1b 49 4f 12 fb e8 a0 36 06 60 07 a3 f2 8d 25 f6 f3 bf 86 9e dc 0f 6c 9f 34 ee 25 fe c6 91 3f 77 99 bf 07 11 41 1b d2 21 33 2b 39 37 84 19 7b cd 94 4a 05 44 a5 c5 05 52 4b 9c e2 a2 09 f2 fb ab 63 68 ed db 40 c1 90 77 d3 cd 37 73 95 d1 20 56 79 bf 5f 05 4d 0e 0a 1a 86 80 d4 5a e8 30 84 51 1a 20 1a 50 05 35 5a 6f 34 ee 11 41 28 08 87 59 73 bc 95 df fc 8d 37 af 3e f9 67 f7 df f2 fb a3 c3 63 9f 29 97 cb 67 c5 69 5a ac 4e d4 11 04 11 82 20 f0 7a 8f a7 46 e0 5e 5e 5d d9 4b dc 7b c9 4d 4d 19 ed 14 88 87 5f 68 1c f5 5f ef fc 57 b9 e3 ff e7 fc 79 a2 56 43 bd d9 f4 29 95 ca f7 4e 84 d6 20 4d 45 a3 82 73 d6 6d dc fa 85 db 57 fc e8 f3 ab 9e de b8 74 26 8e df da 6d db Data Ascii: 4][{y#*gIO6`%l4%?wA!3+97{JDRKch@w7s Vy_MZ0Q P5Zo4A(Ys7>gc)giZN zF^^]K{MM_h_WyVC)N MEsmWt&m
2024-05-27 22:29:21 UTC	8302	IN	Data Raw: 83 f4 77 44 e7 7d d6 1c c3 28 0d 9b 66 80 d2 08 0b 45 c4 49 0a 6b 2d fa fb 66 f5 0d ee dd f5 ee db 6e 5b f1 b9 f1 f1 f1 bf ed ee 7e f9 e7 e7 5b 19 ca 57 f4 de 09 f6 c5 0b 95 57 fd fa 2f 72 8f ed d8 8c 62 1f 33 06 69 58 07 28 d3 12 87 04 e7 fc 75 5d 4f 9b e8 ed e9 c6 c1 d1 21 cc ea eb 5a b0 6d f3 f6 4f 3c fc e4 86 d5 47 bb 49 23 1c 9a d1 51 ee fb bb bf ff 9b cf cc 9d 37 ff d4 e1 83 c3 41 b9 ab 0f 19 08 cd 38 43 18 45 88 33 9b a7 ab b9 76 f0 7e ea 40 aa a9 42 91 8f ed 79 33 ed fe d1 da 58 14 f5 29 cc 68 92 7c 49 da 4a fb f4 f5 f0 47 73 8e bb 8e 6b ab 55 43 38 bd 20 d7 c9 75 20 08 6f 05 41 f8 a3 bb ef 5e 72 fb 1d 2b 7f bb 54 28 9f 13 a7 b6 52 2e 77 a1 56 ab a3 50 28 41 29 35 25 ea d5 fa dc cf 0b 87 ba 03 ab 8e 35 97 45 14 05 be 0e cb 71 3b 4a d5 6a 62 1e 45 Data Ascii: wD}(fEIk-fn[~[WW/rb3iX(u]O!ZmO<GI#Q7A8CE3v~@By3X)h\|IJGskUC8 u oA^r+T(R.wVP(A)5%5Eq;JjbE
2024-05-27 22:29:21 UTC	6178	IN	Data Raw: 89 72 71 2e 9a 3c 79 e0 ee 47 1e 79 f0 97 4b 57 cc b4 c6 74 02 34 1b 82 61 b4 a3 e4 02 4e 75 d5 d1 6b eb 78 37 34 0a 64 2a 90 c2 82 e0 f9 02 2c 78 e7 84 8e b6 c7 2e fd e0 65 cb 8f e5 d2 1f 87 bb 5d 77 e5 95 5b fe f2 6f bf f7 8b 2d 5b b7 9e 3d a1 73 d2 c5 9b b7 ee 14 13 27 4f 42 92 24 ae fc 47 6a e1 30 0f 36 54 47 07 83 00 88 a0 b5 46 a9 54 86 8e 63 78 52 4d da bc f1 cd 0f 3d b9 72 e5 63 00 b6 8c 8f 3a 00 12 21 49 3e 62 ec 01 d6 06 c5 96 62 b5 0f f0 01 e0 a3 37 7c e6 a1 c5 b7 ff f0 fc a9 53 27 cf eb ed af 77 80 24 98 68 3f a9 d2 23 9f 7b c4 0d 5a 76 26 4e 63 ad 86 f4 54 59 d7 ec b9 6b 5e 5b fb c5 55 db b7 7f 7d fe f4 e9 27 94 a7 95 99 d5 b7 6f fe c9 55 b5 5a ed 92 b6 f6 62 8b 35 16 0e 56 49 80 29 75 ac 38 40 3d d8 99 22 46 05 de 44 8e fa 6b 8c 8b 24 87 61 Data Ascii: rq.<yGyKWt4aNukx74d*,x.e]w[o-[=s'OB$Gj06TGFTcxRM=rc:!I>bb7\|S'w$h?#{Zv&NcTYk^[U}'oUZb5VI)u8@="FDk$a
2024-05-27 22:29:21 UTC	10674	IN	Data Raw: 8b 01 fd 26 89 cc b8 4c 60 ad ce f3 33 80 cc 3b 3a d4 00 b6 0d 4f 78 d3 b9 d9 ac ce 6c 2d c0 10 13 8d d5 0b 56 fc f2 a9 b3 8f b7 f9 5b b5 6a fb c4 f5 6b 36 7c 5e 6b f3 3e 72 8a f1 4d 54 e9 86 f1 3f 9a 81 9a 45 06 b3 73 2b 73 5a 3a af 30 43 c7 a1 09 6b b5 75 e7 9e 75 ce 0f cf 9a 3d 7b c4 1a 73 b6 50 65 71 84 f2 50 b3 ef 2c 84 60 73 8c e6 10 2e 59 b2 ea 8c fb 1f bb ef cf 36 6e 7e eb 0f 2d d1 e5 52 7a 1d 20 01 e9 05 b9 a1 cd 4c a9 68 cb 60 1a 67 9e c7 95 45 99 9c f4 12 86 86 9e f2 e7 b3 39 69 70 d3 f2 d7 06 f5 fc 9f ee 3f c2 91 d1 b8 47 eb 59 04 b1 39 8a 98 fd ee ec 15 0d 2f 28 42 33 a3 6f 60 80 0a 41 69 fa c4 ce c9 57 6f dd bd fb bf dd 77 d7 6d 5f 78 64 d9 6b d3 df cd b9 d8 d7 53 b4 82 38 61 66 9b 8f b3 e0 26 40 d5 44 c3 15 c3 7f e7 a1 3d 8d d8 66 e7 4f f6 Data Ascii: &L`3;:Oxl-V[jk6\|^k>rMT?Es+sZ:0Ckuu={sPeqP,`s.Y6n~-Rz Lh`gE9ip?GY9/(B3o`AiWowm_xdkS8af&@D=fO
2024-05-27 22:29:21 UTC	11860	IN	Data Raw: 76 9c 2a 06 29 e9 21 8c 26 28 d1 f8 8b fa 83 24 82 20 80 b1 21 1a 73 f5 28 16 0b 50 52 c2 95 02 be 5f ee 34 02 af 4c 6e 9f f4 d0 e2 6b e6 bd 7a e7 9d 37 ed 26 a2 33 9a 8f 5f b2 64 c9 3e 00 fb 7e fa ab 97 b7 6f 5c b7 fa a5 ce de ee 8f c2 8a 1b dd 54 7a b2 1f 94 1d 88 a8 df c9 58 8b 94 97 46 10 04 b0 4c 50 ca ad 70 20 54 44 c0 39 4a 76 5b 54 e1 91 4a b9 95 9e a8 54 2a 03 0b 40 5b 20 93 ce 4e b2 3a bc 67 e5 33 6b d7 03 58 3d ae ed 1d eb be be be 1e cd 4c 20 31 7a c0 e2 60 3f b0 42 04 12 27 76 1c 47 c2 1a 46 b1 d8 2b fc c3 7d 0d e7 c3 d9 d1 d9 d9 59 f7 17 ff f3 3b 1f f7 bc f4 c2 7c b1 58 47 24 91 4e 67 51 2e f9 51 91 04 84 c0 d7 23 04 d3 35 61 35 1d 3b b0 11 42 40 20 ee ab 8b d7 65 94 9c 50 bd e5 a0 ff 9d 30 a0 17 5a 9a 5b 57 5d 79 dd fc 0d f7 df 7e 7b c7 99 Data Ascii: v)!&($ !s(PR_4Lnkz7&3_d>~o\TzXFLPp TD9Jv[TJT@[ N:g3kX=L 1z`?B'vGF+}Y;\|XG$NgQ.Q#5a5;B@ eP0Z[W]y~{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49742	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:22 UTC	382	OUT	GET /img/2FA.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:23 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64189 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 114767 Content-Type: image/png Date: Mon, 27 May 2024 22:29:23 GMT Etag: "a085ada9775e112bb8d77cf1fab12cfa-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2RBEGFJM8V9DQ0VZWB208 Connection: close
2024-05-27 22:29:23 UTC	763	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1d 00 00 00 fc 08 06 00 00 00 d3 e7 16 e9 00 00 01 83 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 22 15 07 33 48 71 c8 50 9d 5a 10 15 71 d4 2a 14 a1 42 a8 15 5a 75 30 b9 f4 0b 9a 34 24 29 2e 8e 82 6b c1 c1 8f c5 aa 83 8b b3 ae 0e ae 82 20 f8 01 e2 ea e2 a4 e8 22 25 fe af 29 b4 88 f1 e0 b8 1f ef ee 3d ee de 01 42 a3 c2 74 bb 67 1c d0 0d c7 4a 27 13 52 36 b7 2a 85 5e 11 46 08 22 62 88 28 cc 36 e7 64 39 05 df f1 75 8f 00 5f ef e2 3c cb ff dc 9f 63 40 cb db 0c 08 48 c4 b3 cc b4 1c e2 0d e2 e9 4d c7 e4 bc 4f 2c b2 92 a2 11 9f 13 c7 2c ba 20 f1 23 d7 55 8f df 38 17 5b 2c f0 4c d1 ca a4 e7 89 45 62 a9 d8 c5 6a 17 b3 92 a5 13 4f 11 47 35 dd a0 7c 21 eb b1 c6 79 Data Ascii: PNGIHDRiCCPICC profile(}=H@_S"3HqPZqBZu04$).k "%)=BtgJ'R6^F"b(6d9u_<c@HMO,, #U8[,LEbjOG5\|!y
2024-05-27 22:29:23 UTC	2372	IN	Data Raw: 0b 31 dc a7 d1 be 69 fc 7e b8 8c fc 76 53 72 2e 73 7f f9 be 00 00 66 fa 37 e1 fc 6a 7f 9a e7 8f 29 04 20 c8 9d a3 b5 e3 f7 8c 7d bb e3 db ec 3e 1c 9c 9f e1 83 31 90 be e4 99 f3 57 62 fc bc f3 7b cd 95 fd 10 1d b7 7f 41 33 d7 37 f7 60 67 3e 4f af 35 fc f7 78 7c eb c9 df 37 8d 7a ab f3 9b 99 7e e3 f3 2b 8c 6b c3 77 db 5f be 1f 9e f9 fc 2e fb aa 8d af b7 f9 6b 24 1d fd 78 b9 70 4e e9 f1 87 75 6c b8 57 33 d3 07 86 8f 5b 33 f2 fd c6 df cf ec 40 cd 5c df dc fc 6f 04 bc dd 3a 7c 2e e4 d7 9f 70 8e 61 7d 4d 6d 80 94 e2 a8 f9 47 d9 5a 9a ce 75 9a 78 36 fc 76 8f ff ad e7 8f f5 3b 08 5f 23 bf 3f c1 ee 3d 6b 2d 14 09 48 a2 38 16 88 fd ef 2c 43 91 a8 5e 9f aa 5d 74 d3 2e a1 41 d0 60 f4 5a 63 af 7b ec fa 0e 3b dd 43 1b c6 cb f3 57 d0 6c 61 ad 85 61 1b 07 a7 20 09 48 81 Data Ascii: 1i~vSr.sf7j) }>1Wb{A37`g>O5x\|7z~+kw_.k$xpNulW3[3@\o:\|.pa}MmGZux6v;_#?=k-H8,C^]t.A`Zc{;CWlaa H
2024-05-27 22:29:23 UTC	538	IN	Data Raw: 86 d5 b2 e3 1f 58 87 ae 08 d4 1d a9 7c 52 d6 50 92 39 74 21 1d f8 25 de 4b f1 9a 2a c6 7d 2a 1a 8c a5 21 85 6d 8d ab 30 ba 4f 05 28 3b bf ee 92 37 ce cc b0 de 4b a6 2c c2 18 26 83 88 21 69 d1 71 ac 38 b4 e3 0a 9f 71 6a 2c 7c 3e 45 92 cd 8d 6e 2d 4a 72 a9 85 3a 1f a3 16 09 97 9c f1 3b 2f 2e 04 58 ab 41 64 33 e3 3e 8c ef 59 03 94 39 6f 22 f1 c0 c7 fb 14 07 51 a3 10 38 e0 50 84 b1 10 fe 35 4d 53 bc de b8 a6 78 42 6d cd a9 2a 46 e7 c9 7e 94 90 30 6c 0f 10 c2 74 3f 35 c7 34 f0 d3 a6 d2 a3 77 8d ec e7 f8 30 07 28 2a a6 89 ca a5 f3 1b ef 5b c0 16 9c a6 9a 13 95 3f 07 fb 47 32 7c 6f 4a ae 4d 8d f2 1c 2a 55 fc bd 4f 5b ce 05 0d 53 6b 63 be 56 d4 d2 e0 25 a7 22 0f b0 f3 7d 97 ae ef 2e 88 c8 dc fa 1e d3 bc 13 68 d1 e4 6b 6b 1d 97 29 bf 47 ec 6c b0 b6 d6 65 04 fc 7a Data Ascii: X\|RP9t!%K}!m0O(;7K,&!iq8qj,\|>En-Jr:;/.XAd3>Y9o"Q8P5MSxBmF~0lt?54w0([?G2\|oJM*UO[SkcV%"}.hkk)Glez
2024-05-27 22:29:23 UTC	4744	IN	Data Raw: 4a 38 1e 0e f1 e0 04 41 04 1a 19 72 e0 de e1 60 eb 2e d1 97 d4 09 50 d1 31 71 e3 8e 0f e6 68 8e c4 31 a6 d9 fb 44 04 c1 04 46 82 f4 8d 8c 82 a8 2f f0 44 50 62 9a 38 6b ff 48 95 2a 55 03 63 eb c6 71 2e 55 61 c1 10 42 42 54 8c 5a 29 b2 cf 83 16 f3 96 25 bb 25 67 6d 3c 7c a6 ef 9f 12 72 98 d7 74 e8 0c 4c 12 f1 c3 f3 9f 19 de b3 e9 15 94 9d 3c eb c7 6e 58 33 c8 23 f3 24 12 6e 13 89 78 de 25 67 22 5c df 54 8a e3 4e 76 13 34 ba fe 90 ca a8 a7 53 b2 31 98 a2 5c 7e 4d 1d 95 9a 87 12 5a 1e 0f 51 29 dc 9a 2e 6c 52 d8 60 19 cf cf 5f 41 9f 3a de d7 d9 d9 29 5a 05 90 21 b0 05 94 91 84 9b 6e 8b 17 37 97 78 b5 bb 41 07 0b d5 b4 80 94 de e2 32 b4 b5 b0 a3 e8 97 0f 48 59 01 ae 0f 4e 01 c4 34 51 69 0a c2 24 a2 e8 e0 e8 ec 3b c6 ff b7 09 c7 f7 37 27 98 78 93 2d 92 35 ef 73 Data Ascii: J8Ar`.P1qh1DF/DPb8kH*Ucq.UaBBTZ)%%gm<\|rtL<nX3#$nx%g"\TNv4S1\~MZQ).lR`_A:)Z!n7xA2HYN4Qi$;7'x-5s
2024-05-27 22:29:23 UTC	5930	IN	Data Raw: ea ab a7 e8 f6 1a 4d b3 c0 7e df 81 a4 c4 d9 fd fb f8 e0 c3 0f f1 f1 8f 7f 8c fb f7 ef 47 28 48 4a 89 ef 5e be c0 b3 e7 df e2 d3 df fd 16 42 c9 28 cb 9f 36 78 cb bb 48 86 ad b1 61 72 0f 4e 07 25 e9 81 32 a1 6c 4c bc cb ab 4f 4a 06 72 2a 62 8b 65 97 e0 44 e2 5f 46 74 4f 10 a0 94 3b 8e 43 78 b6 31 ba 10 8d 82 05 f0 ec db 6f f0 2f ff f2 2f 78 fe f2 05 fe e2 af fe 12 7f f7 77 7f 87 47 8f 1e 61 b5 5a e1 fc fc 1c 17 57 97 b8 be be c6 d9 d9 19 1e 3d 7a 84 fb 67 67 8e f3 21 1b 08 21 b0 dd ed 70 71 79 89 de 32 4e 1e 3e 44 db 2a 5c 5e 5c e0 f5 f5 0d 2c 01 bf fb dd 67 58 2e 16 38 59 ad f1 f8 de 03 58 ad 61 b4 c6 d2 73 67 6a a4 d8 94 29 5f 32 7c ae 4a ce a9 20 e7 64 d3 29 62 e1 5d 91 8e 29 12 60 9a df 4e 1b 7a a5 11 e6 1c 01 b8 e4 60 4c 71 29 b2 04 c1 e4 3c c9 75 7e Data Ascii: M~G(HJ^B(6xHarN%2lLOJrbeD_FtO;Cx1o//xwGaZW=zgg!!pqy2N>D\^\,gX.8YXasgj)_2\|J d)b])`Nz`Lq)<u~
2024-05-27 22:29:23 UTC	7116	IN	Data Raw: 04 83 40 96 7d ba 85 61 25 80 de c0 88 0e 2f af 3b a0 d3 b8 bd bd 45 d7 f7 b8 dc dc e0 76 bb 41 a7 b5 93 c8 67 86 82 72 d2 f8 ec 88 2c d2 23 20 4d d3 60 45 02 24 18 b6 eb d1 ca 16 4a 69 68 cb 30 30 b0 ac b1 df ef 7d 0a 50 02 2c 60 0c a3 d7 06 2c dc b3 92 3c a8 b2 86 e8 dd a1 00 00 b3 88 44 bb d0 b0 db 11 6b 9d 71 76 a5 8c d2 97 cb 7a a4 83 02 82 e1 10 03 52 13 48 03 59 2f e3 ed 74 56 dc 7c 13 11 79 70 86 99 7c 5a 45 46 e5 d9 11 92 01 19 8f 4b be d5 bb 3b 3e 8d 91 8e fc fc c2 7e 18 10 52 41 90 f4 ce 11 c1 b2 81 35 ec 95 c1 dd 7d d2 bd 49 08 3f f0 64 67 0d 09 27 76 67 ad 85 36 5d 44 3b 0e 45 d5 44 a6 2f e2 9c 10 29 1b 58 38 42 76 e9 2e a5 ef c7 52 d4 ca e7 a5 ad f2 69 79 f2 15 1f f9 e7 6c cc e4 ef c3 96 7c c5 49 28 c9 4d df 2f 9d 47 5a c2 3b b5 95 be 7f 4b Data Ascii: @}a%/;EvAgr,# M`E$Jih00}P,`,<DkqvzRHY/tV\|yp\|ZEFK;>~RA5}I?dg'vg6]D;ED/)X8Bv.Riyl\|I(M/GZ;K
2024-05-27 22:29:23 UTC	8302	IN	Data Raw: c2 2f 2a 93 c9 04 65 59 5a 69 73 89 f9 7c 8e d3 d3 53 dc bf 7f df a8 61 32 81 4f 3e fd 08 b2 6e b0 b3 b3 83 c9 64 82 d9 d9 39 b4 54 98 8c c6 60 24 70 e7 d6 3b f8 97 ff fc 7f 00 53 35 a0 1a a3 64 da 02 60 7c c9 cf c1 9d d3 a1 cb f3 2a 22 60 6a 1f af 0b 4f ff 58 f8 f9 75 e0 f7 c1 e7 d7 e4 8c 84 f7 4e f1 16 70 06 64 6e 81 e6 20 32 a2 64 0b d9 e0 8b 2f ff 01 7f fe 57 ff 11 c4 19 b8 d4 d8 28 47 a8 cf 2e c1 84 c0 7c b1 f0 e7 95 8b 41 ee 77 73 ce 51 d7 75 76 2a 2d bc 46 cb d2 20 2b ee 7a 8f 63 4f ca a7 ca b5 d1 d6 29 1a 63 2d 0f af 33 d1 34 bd 04 c7 d9 16 b8 ed 4f 5d 8f e1 fb c3 f1 70 97 4c 3b 79 6f b7 f6 84 05 84 10 22 8a af c3 ad e4 58 67 2a 77 7e c6 53 22 e1 3e 8c d5 b2 c3 df e1 d4 68 c3 c7 dd 63 f1 74 51 8a 43 16 3e ef f6 6f 18 6b dc fe 4d b5 82 dc 3a 15 26 Data Ascii: /eYZis\|Sa2O>nd9T`$p;S5d`\|"`jOXuNpdn 2d/W(G.\|AwsQuv-F +zcO)c-34O]pL;yo"Xgw~S">hctQC>okM:&
2024-05-27 22:29:23 UTC	6178	IN	Data Raw: 46 49 ca c3 20 d5 96 89 5b 4a a9 a4 33 0c 8c b2 ad a1 54 1b 24 89 ca f6 fa bb 75 90 96 c0 f1 00 56 0d 0a 57 17 80 cb b2 c4 c1 c1 01 ee dd bb 87 97 af ce f1 d5 b7 df e2 e4 e4 c4 9c 27 a2 c2 f3 e7 cf 41 e0 d0 ed 02 6d ab 50 95 63 8c 46 13 1c 1e 1e e2 c6 8d 1b f8 f5 57 bf c1 cb d3 57 60 45 e9 65 ce ef df bf ef 95 67 39 e7 38 3a 3a c2 f3 17 a7 28 46 23 34 97 0b 7c f7 dd f7 e0 45 85 17 2f 5e 60 5c 15 78 f2 e4 09 36 c6 63 6c 6f 6f 43 08 81 2b d7 ae e3 f6 9d 77 f1 dd 83 07 38 3d bb 84 26 86 c5 62 01 c1 08 bf fb dd ef 30 3b 7f 85 bb 77 6e 63 63 63 03 d3 e9 14 57 af 5e c5 74 3a c5 d3 e7 2f f0 f8 e9 33 70 ce f1 f2 e5 4b 94 82 e1 ec e5 29 b6 37 8d bc f9 68 34 42 55 55 b8 7d fb 36 be fa f6 3b 94 c7 c7 f8 f5 af 7f 8d 62 34 42 ab 81 66 be c0 f3 e3 63 a8 a6 c1 ce fe 1e Data Ascii: FI [J3T$uVW'AmPcFWW`Eeg98::(F#4\|E/^`\x6clooC+w8=&b0;wncccW^t:/3pK)7h4BUU}6;b4Bfc
2024-05-27 22:29:23 UTC	10674	IN	Data Raw: e4 10 f9 f8 73 42 02 ad b2 ad df 78 7b e2 cf 8f 11 f3 9e 1c 3a 96 f7 6f c8 83 88 7d c0 e2 a4 27 96 39 4f 5d 7f eb ac 9d 4b 9e 30 99 e9 20 af bb c4 28 48 d8 d3 ff 72 92 14 31 67 33 5c 03 c2 ed e8 25 1d 7d c3 b2 e8 82 cf 25 02 03 9a 0c 0a e9 09 13 83 96 74 a8 49 ef 42 b0 cf a9 5e b3 2a 71 22 05 d7 54 a8 a6 e6 1f b6 64 27 0a 34 e6 c3 1f 24 13 23 5d 08 19 cf 8e 79 ed d5 e8 fa c9 8c 4a 55 19 e1 ce 65 d4 93 6f d6 e8 5f dc 4a da b1 28 db 07 8c 75 38 dc fe 21 a2 a5 c5 56 87 2a 7e d0 3d 52 91 e7 57 5a 55 16 af d4 1a a0 48 3a da 3e 84 8f 53 02 b2 0c 3e df 93 cb 9c 8e 88 85 68 dd f2 e2 7e 07 b7 27 b1 6b a7 f8 8b 8f 19 17 48 1d 1d 7b b7 7f 9c 49 9b 5e 91 f8 be f9 b7 4e dd d0 f5 b2 1d ff cf 2d b6 0c 35 d0 be c2 fc ec 19 e6 af 9e a3 22 60 dc 5e 82 97 63 bb a0 bd b9 73 Data Ascii: sBx{:o}'9O]K0 (Hr1g3\%}%tIB^q"Td'4$#]yJUeo_J(u8!V~=RWZUH:>S>h~'kH{I^N-5"`^cs
2024-05-27 22:29:23 UTC	11860	IN	Data Raw: 7e c9 72 4e 56 33 d1 e5 d2 a4 7a 27 62 f2 41 c6 d9 66 eb 91 24 6b 61 7a 93 ee 29 6f 39 e1 33 73 51 af cf 21 02 10 04 04 3d 40 85 4b 6d 88 76 79 88 66 a5 c0 45 74 b8 52 92 73 a9 ad 7d 2a f5 68 f8 4f 74 92 68 50 e4 41 a2 26 3d 92 98 e9 47 02 71 9c df bc 08 ac 5f be f2 df f3 bf 2b ad e7 24 71 0e d3 fc 39 3f ae 4c 91 57 42 4d 39 5f 2f f2 79 3f ff de da fe c6 f7 cf d6 19 64 8a bf 4c d9 ba 34 ad 4f ef 82 fc d6 5c 7e 6b 48 45 2e 1d 11 03 93 52 5c ac 86 18 e6 01 62 75 2c 85 92 e7 18 83 1e 05 5c 08 c2 ed 38 0c 18 19 fe 86 33 0c 61 ff 01 55 5f 1f cd bf 3c 1f b4 b5 68 28 ff bd 46 64 c9 0f be d4 86 3f b8 e8 1c 5a ed 42 6b 57 74 3f 74 2a 10 a7 60 c3 c8 18 b0 b3 05 2b 12 11 46 71 87 83 21 c1 73 94 06 7c ce b6 35 c4 00 f9 9b 46 c3 0d 27 b1 c2 4a 5e 29 14 04 ec c7 61 26 Data Ascii: ~rNV3z'bAf$kaz)o93sQ!=@KmvyfEtRs}hOthPA&=Gq_+$q9?LWBM9_/y?dL4O\~kHE.R\bu,\83aU_<h(Fd?ZBkWt?t`+Fq!s\|5F'J^)a&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49743	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:23 UTC	655	OUT	GET /ico.ico HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://facilitator-of-company-case-2605792.netlify.app/form.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:24 UTC	436	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64189 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 5430 Content-Type: image/vnd.microsoft.icon Date: Mon, 27 May 2024 22:29:23 GMT Etag: "3d9234c66586716a2d2669a9ef24f199-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2RCA885B2FEPPNKA0PM6K Connection: close
2024-05-27 22:29:24 UTC	750	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: h& ( h ffgd@`efffffep`fffffff
2024-05-27 22:29:24 UTC	2372	IN	Data Raw: ff ff ff ff ff cf b1 ff ff 9f 64 ff ff 96 55 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 68 08 20 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 9f 64 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d8 c1 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 68 08 40 00 00 00 00 ff 66 07 8f ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff a9 74 ff ff ec e0 ff ff ff ff ff ff ff ff ff ff cf b2 ff ff 66 08 ff ff 66 08 ff ff 66 07 8f 00 00 00 00 00 00 00 00 ff 70 10 10 ff 66 09 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 09 cf ff 60 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 70 10 10 ff 66 07 8f ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 Data Ascii: dUfffeh fffffdfffh@fffffftfffpffffffffffff`pfffff
2024-05-27 22:29:24 UTC	538	IN	Data Raw: ff 66 07 ef ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 79 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 70 18 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 Data Ascii: fffffffffy'pfffffffffffffffffffffffffffffffff
2024-05-27 22:29:24 UTC	1770	IN	Data Raw: 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff e3 d0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 83 37 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 67 08 9f ff 65 08 60 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff cf b2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 d1 ff ff 70 18 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 08 60 ff 60 00 10 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: ffffff7ffffffffffffge`fffffffffffpfffffffffffe``ffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49745	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:24 UTC	383	OUT	GET /img/star.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:24 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 64184 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 1980 Content-Type: image/png Date: Mon, 27 May 2024 22:29:24 GMT Etag: "2356b4d4119b02fa4c2857e8c12da0d0-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2RCVJVP6ZMM1WEA2ASSTT Connection: close
2024-05-27 22:29:24 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 00 29 08 03 00 00 00 9f be f0 c4 00 00 02 f7 50 4c 54 45 47 70 4c ab dd f8 cb e8 fa c9 e6 f9 c9 e7 fa b6 e1 f9 c8 e8 fb c8 e7 fa cd e8 fa cc e8 fa bc e3 fa ae de f8 c3 e5 fa ca e8 fa c1 f1 ff a9 dc f8 bb e3 f9 a5 db f7 f3 ad 00 f2 ab 00 aa dd f8 a8 dc f8 a6 db f8 a1 d9 f6 ac de f8 c8 e8 fd a6 db f7 ad dd f7 c9 e8 fa bf e4 fa c5 e6 fa b0 df f8 a7 dc f8 c7 e9 ff c7 e7 fa b4 e0 f9 b8 e1 f9 f1 a9 00 bf f4 ff a3 d9 f6 c4 ed ff cc e9 fb c2 ef ff b3 df f8 c7 ea fc fa a3 00 c8 e7 f9 c6 eb ff a9 dd f8 ba e2 f9 f3 af 00 c0 f3 ff cb e9 fb f4 b0 00 b2 df f8 af df f8 a7 db f8 c6 ea ff c8 e7 fb c0 e5 f9 bd e3 f9 be e4 fa f6 a4 00 c5 ec ff a3 da f7 aa dc f7 f3 ac 00 b8 e2 f9 b8 e1 f8 b1 df f9 c2 e5 f9 b3 Data Ascii: PNGIHDR))PLTEGpL
2024-05-27 22:29:24 UTC	1215	IN	Data Raw: de d2 e9 ba 39 eb bb 30 eb b9 2a f0 b4 19 db cf 8b c9 e7 df fe 9a 00 da cd 8c fa b0 00 f0 b0 00 ff 91 00 a4 e8 31 1c 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 04 73 49 44 41 54 78 5e 8d 94 75 74 e2 48 1c 80 93 90 92 96 40 48 13 a0 b8 16 59 b4 c0 56 28 15 a8 77 db ab db 76 2b 5b 95 ad 77 bb 7a ab ee 72 eb 6e b7 7e ee ee ee ee ee ee 2e 7f dc 24 d0 83 6e f7 de bb ef c1 9b c9 cb 97 99 9f cc 1b 68 66 dc 54 62 63 fd 06 5c a1 e8 e8 90 a6 e2 1d 03 0a 5c 81 e3 31 10 84 cc 9f 16 66 3a 40 c0 4d e7 72 b9 02 5e 75 c0 9c 50 93 50 13 30 03 de 37 9b 6b cc 01 08 c2 ae e2 47 a1 c6 94 18 86 62 05 19 b6 a0 3c 90 90 00 ec 30 41 08 32 48 a5 b0 14 86 17 e0 52 4d 7e 2a 6e e3 e9 51 0c c3 90 58 75 a2 21 25 05 07 1b 2b 7a 14 00 3c 0f 82 0a 61 91 10 96 e2 a9 1a 8d 21 91 24 49 3e Data Ascii: 901tRNS@fsIDATx^utH@HYV(wv+[wzrn~.$nhfTbc\\1f:@Mr^uPP07kGb<0A2HRM~nQXu!%+z<a!$I>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49744	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:24 UTC	384	OUT	GET /img/phone.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:24 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 65017 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 255341 Content-Type: image/png Date: Mon, 27 May 2024 22:29:24 GMT Etag: "edad7e5937b07671567ae92fa7f8554f-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2RCVJMQYB9ZT2BFVM24DC Connection: close
2024-05-27 22:29:24 UTC	763	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 80 00 00 01 18 08 06 00 00 00 cc 10 47 90 00 03 e5 34 49 44 41 54 78 da ac 7d d9 8e 65 59 92 d5 b2 33 dc d9 c3 23 23 22 b3 32 aa ba 26 c8 ae 12 ad a6 5b aa 06 1a 21 90 78 84 1f e0 03 e0 0f 80 97 7c e3 5b 78 e5 43 e0 a5 25 ba 2a bb 86 cc ca b1 72 8c c9 c3 c3 fd fa 9d ce 39 86 db 36 5b b2 ad 2b 51 8c 37 e2 e8 de 33 ec 7d f6 60 db 6c d9 b4 5d f4 cb 7f f7 15 80 0b fc 3f 7f 24 be 27 00 0a a0 89 73 fe 6e 01 51 60 3a 01 cd c2 af e9 3e ca f1 19 f5 f2 ac 4f fa f8 d9 fa b9 1e e3 99 0e 50 ab 67 e5 75 8d 37 80 0e 51 56 80 66 e9 65 d4 eb f2 67 ae bd ac 2a 20 12 ed e9 01 3d 00 cd 06 90 0e 98 b6 d1 8e c9 ef 63 8a ba 7a 40 e6 5e e7 74 0b ff 58 db 46 7f 87 74 5e 0f e0 cf 4f 7b 40 ed de de db d9 3e 04 30 d8 b3 76 ee Data Ascii: PNGIHDRG4IDATx}eY3##"2&[!x\|[xC%r96[+Q73}`l]?$'snQ`:>OPgu7QVfeg =cz@^tXFt^O{@>0v
2024-05-27 22:29:24 UTC	2372	IN	Data Raw: bd dd 4e 27 7e a0 f5 76 0e af 00 48 f0 31 8d ba fa a8 5b 83 07 0e 41 2b 62 f5 97 be 93 87 29 ec 79 e7 11 32 5d fb 38 0d 2f ab 35 ee fd 77 de bd f4 31 e7 3a 24 df 40 d0 1e db c4 43 d5 c7 8b b4 48 fe 32 7b ea 7d 19 b7 7e cf e6 ab 7f 17 82 11 da 5c b8 4c 3c 7e 09 81 40 67 3f f0 75 79 f8 cc 68 29 e4 50 03 ca 2b 39 7c 01 5d ff 15 70 7a e6 34 bd 78 0f b2 fd 15 70 79 c2 eb df fe 2b dc 7e f8 1e f6 eb c6 bb a5 1d e6 b2 87 51 fa 43 bd 82 aa e0 0f cd 8f b1 d4 3b 3c c1 73 3c 97 77 b0 c5 06 8f f5 39 3a 8c b8 96 4b 6c b1 46 8b 09 0b ec 70 98 d6 68 64 87 3f fb c5 7f be 67 09 23 74 ff 08 30 5a ec ef bf 9b 4b 00 70 5e af 77 b1 8e 82 3f b5 1b 9f a7 fb 3e c2 e8 f2 f4 75 ca fe d3 8b 58 5f f6 cc 8b e0 7b 4d 8d 41 ca 58 09 d4 fe 59 f9 98 83 c9 d6 8b f7 1b f6 fb 22 79 91 d8 fc Data Ascii: N'~vH1[A+b)y2]8/5w1:$@CH2{}~\L<~@g?uyh)P+9\|]pz4xpy+~QC;<s<w9:KlFphd?g#t0ZKp^w?>uX_{MAXY"y
2024-05-27 22:29:24 UTC	538	IN	Data Raw: b5 8c 19 b5 05 18 4a 6f 65 8e 90 f5 13 a0 5b 72 dd 05 ed b8 a0 97 a4 95 60 70 fb 70 25 76 d0 70 dd 49 e9 cb 31 dd 77 cd 8a 20 8b ae 44 bf 47 1a 6e 57 64 4e a9 c4 4d 37 65 6d 11 d4 cb 74 70 f7 a4 48 ad 78 15 e1 25 42 fe d3 90 c6 b8 76 bd cd 7a 72 97 a5 f8 3c 88 0e 0e b8 1a ae 47 ae 53 6b a3 d7 9b d6 7b 32 fb 86 21 0c e9 e2 6b 16 6e 69 69 d6 06 90 bc ef 7a a2 fb de db 45 60 00 50 b9 0b 77 b2 f5 67 1e ee 5d 35 8b 90 f7 8b 16 a8 b0 00 c8 f4 a6 58 71 94 d6 af 04 d4 a9 78 8e db 98 df 91 75 7b 9b 9a 85 83 d8 c1 dd 56 b4 b0 db 3b c9 cb 84 b4 39 1d 7c ae fb 77 6c 1e c2 1a a9 41 87 ad f7 55 c4 59 ab cc bc 1c 41 1d e9 64 78 6d e3 e0 e5 75 97 e3 26 ce b3 a5 28 5e a6 20 90 4f 0a 95 5c b6 2f 85 29 aa f5 2b be 9e d2 32 21 54 b8 aa 75 43 de 23 b5 e2 c9 75 99 e5 f9 d1 63 Data Ascii: Joe[r`pp%vpI1w DGnWdNM7emtpHx%Bvzr<GSk{2!kniizE`Pwg]5Xqxu{V;9\|wlAUYAdxmu&(^ O\/)+2!TuC#uc
2024-05-27 22:29:24 UTC	4744	IN	Data Raw: ee d3 f8 d0 d0 43 47 63 91 12 1f 45 1f 6a 79 86 90 87 53 5c 97 e3 3d 00 fc 87 ef 43 64 9e 48 75 22 d3 fc 23 ae 32 7e ce cf 87 4a 93 13 6a 9b d1 79 0a d1 07 a1 91 85 9b 54 77 d1 81 c1 89 12 39 80 34 a1 bb 25 c6 07 97 8c 84 ef 49 2d fd 10 cf 6e 92 18 30 54 ed 0e d0 c4 38 39 96 ad 27 1f 53 10 cd 9a 60 8b a0 2e 09 6a 7c 1d e5 bc 8d 6a 8b 47 87 64 40 50 02 c7 70 87 1d 3d ce 01 9a b1 3b 69 65 a2 20 ab c0 1b d2 e5 2a 61 3d 6d 1f 64 1f a1 d5 d8 93 d9 ce 82 79 4c 74 5d 53 b0 51 d0 90 e0 93 01 c9 9c ae 77 32 ea ca ed ce c5 51 c5 bf 31 1e 08 f5 f8 67 9c 1f b5 fb 04 ce 5a 11 5a 93 f7 10 0b 90 ef 4a 90 58 91 d4 48 17 4f 05 90 c1 f7 91 69 7b 5d 60 1b 5b ce af 97 ef 1e d8 6f 5a 08 a9 24 fc 31 eb 36 e9 84 8a 0b 69 9a d6 16 3f 48 87 e3 6b 67 48 cd a2 68 ed 49 7f 51 8e a0 Data Ascii: CGcEjyS\=CdHu"#2~JjyTw94%I-n0T89'S`.j\|jGd@Pp=;ie *a=mdyLt]SQw2Q1gZZJXHOi{]`[oZ$16i?HkgHhIQ
2024-05-27 22:29:24 UTC	5930	IN	Data Raw: 19 1f 98 56 c0 54 62 e3 5c e2 40 2a cb b9 83 40 6e 1a dd b8 10 65 bc a2 8f d5 3e 64 4a 1f a1 3b 03 15 97 32 6f 42 a0 08 04 08 74 25 23 81 c3 5b 55 c2 c0 26 65 ca f1 ab 00 5e 52 01 da 55 f2 a2 d3 77 be 89 f9 fc 3d c8 e1 63 82 03 4b 02 a1 e7 c6 04 b6 df 6b 97 3e 47 45 ce 5c 7a fb 4e 57 45 c9 c2 38 83 1c bf 00 e5 af c2 f8 53 00 19 8a ff 02 1e 9f 78 e8 c0 fe 83 d8 3e 6d 9d 4a a0 85 13 84 85 f0 f5 8b 5f 60 3f 6c b0 98 bd b0 7d ff 0c b8 95 d8 bf 0e c7 32 ea 47 5b af 40 01 71 af f1 10 6f e1 0a 4f f4 45 71 07 db e7 00 97 1d 5a 7a da 16 f0 77 a1 37 50 11 ec 65 81 a3 ce 70 2b 6b b4 3a e0 4e d7 58 cf de e0 d5 f5 13 dc bc be 07 84 6f 19 b8 fd 99 2b 7f fb 5f 3b 9d 4a c7 6d db d2 f5 3b de 26 7f 29 74 39 26 b0 07 ad c8 e0 f6 65 61 44 49 6b 20 77 1c c9 44 b4 07 f4 a6 25 Data Ascii: VTb\@*@ne>dJ;2oBt%#[U&e^RUw=cKk>GE\zNWE8Sx>mJ_`?l}2G[@qoOEqZzw7Pep+k:NXo+_;Jm;&)t9&eaDIk wD%
2024-05-27 22:29:24 UTC	7116	IN	Data Raw: 07 2b 3b 49 82 13 78 ce 5d 38 41 4c 07 e0 e0 e1 c8 87 13 ca 53 16 56 14 8e 7c 10 98 1e e4 67 a1 94 dc d5 bb 68 ae 7e 80 f5 d9 4f 31 bf ba 01 83 fb 68 db 7d e4 94 c1 95 e7 40 b1 02 d8 7c f2 6c b5 17 4b 99 b6 fa 4d 6e 6a 80 ea 14 b8 01 c4 a9 10 d3 5a ff 3b 43 f1 12 83 23 ac 96 da 51 98 c0 ba 57 f6 c2 0d 34 00 59 22 48 4e 04 97 d0 1c 54 fb a1 9d 5a aa 00 ca 88 c5 cf 9c 1a 18 5b f3 40 64 3e e5 6f 64 d7 78 e0 76 0f 0b 8c 4f 5c c5 c9 3c 92 62 ba 47 9a e1 0b f5 0d f4 9d ad ba ad 4c 32 2c e3 28 9b 19 9f 8b 9f 65 30 60 db 31 ec 82 20 d2 8b c2 44 b4 e6 b1 b4 15 21 b2 32 ae d1 26 c6 58 d0 44 57 67 9d cd 2e 49 22 31 80 81 0e 4c 23 ed 9a 53 c3 50 e6 a4 41 04 89 bd 4c 9d 32 c9 69 00 76 92 b1 dc 18 0b 10 4b 63 e4 ec bd 22 c3 a9 dd 81 b1 51 a4 4e 27 2b 93 28 18 c3 65 9f Data Ascii: +;Ix]8ALSV\|gh~O1h}@\|lKMnjZ;C#QW4Y"HNTZ[@d>odxvO\<bGL2,(e0`1 D!2&XDWg.I"1L#SPAL2ivKc"QN'+(e
2024-05-27 22:29:24 UTC	8302	IN	Data Raw: 16 73 eb b0 25 bf 5c e4 b9 63 a8 cc eb 9c 4e 85 bd 3b e1 a7 20 92 63 f8 e2 5d 8e d6 59 b7 2f eb 63 7b 85 e1 cc 5f 42 10 20 77 80 ad 34 8a 24 10 6a b4 46 18 c9 bc 2e db 8d 50 20 da f0 56 d8 ca 2d 35 06 36 83 31 85 95 3c be c4 11 12 48 fa 09 3a cc 84 34 1a a8 94 63 f4 c2 4e 06 c1 19 4c 24 36 36 92 4e c2 67 42 2c 95 e5 06 4d 71 8d f5 b3 57 71 f5 7f 7f 0e ef 7e 82 b8 b8 04 fa d5 34 6c c1 c6 ee f9 14 cc e9 5d d6 ec 4d 18 bc 71 cf 3b 77 07 bf e5 39 ba 98 18 df 47 b7 83 d1 fd 26 72 26 9a ad c0 9b 4b f0 c7 3f 46 7a f8 14 e1 a8 46 58 05 a0 b5 14 27 f5 76 35 a7 07 f3 02 0c d9 3b 38 d4 83 81 c8 51 3a 7f c9 65 44 bd 91 09 29 c8 0f 6f 2b d5 89 cf 06 60 67 80 72 d9 ea 3c 33 46 db 8e 3a fa 6f ff e9 ec 8a b7 cb 65 13 d7 60 40 74 7b 1d 4a 54 50 2a b9 c6 ce 72 fe 7a f1 f4 Data Ascii: s%\cN; c]Y/c{_B w4$jF.P V-561<H:4cNL$66NgB,MqWq~4l]Mq;w9G&r&K?FzFX'v5;8Q:eD)o+`gr<3F:oe`@t{JTP*rz
2024-05-27 22:29:24 UTC	6178	IN	Data Raw: 8d 1e 95 dc 47 1e a5 04 cc 20 dc c1 13 00 70 cd 9f 35 6e 0c 20 52 d0 75 49 27 70 90 46 48 70 6b b6 d6 e6 c5 86 b7 fa 9c 46 c2 c9 dc db a3 94 32 71 44 c2 15 1d c2 49 a2 5e 83 5c 45 3f b8 85 82 31 07 70 25 6b 43 07 01 a6 db 9f 81 b4 1c ac c9 23 34 b7 d0 08 65 1d 17 2c 8d 21 1e 38 21 78 63 d0 38 3a 79 be d2 ca a3 f9 11 d6 5a 3d 94 45 3b 04 6f 18 d0 94 ca 22 88 70 13 16 38 df dc 47 b5 b8 c6 1b 7f e3 3f 22 84 0e 3c 7a dc 69 96 26 64 f0 57 4d 3a cd 9d 60 e9 7d 11 a3 ee 16 dc 3b f9 b0 97 e4 45 f6 9d 2d 95 31 5f 9f 81 bf fe 10 34 0e a0 83 90 13 9b 6a d3 6d 17 29 33 79 c9 0c ff 63 52 a0 07 80 b7 a5 81 43 06 b9 17 6c 22 95 f1 a8 b6 5b 8f 05 48 d5 47 8e 63 25 65 2f f9 6a 39 b3 02 02 b2 cf ec 20 a0 d3 8e 59 82 37 55 17 ff c9 fb 7f f0 41 8d b6 5e f2 5a a2 60 6c 77 61 Data Ascii: G p5n RuI'pFHpkF2qDI^\E?1p%kC#4e,!8!xc8:yZ=E;o"p8G?"<zi&dWM:`};E-1_4jm)3ycRCl"[HGc%e/j9 Y7UA^Z`lwa
2024-05-27 22:29:24 UTC	10674	IN	Data Raw: 77 4a 4b 3d 36 f6 6c 05 a0 57 46 ad be a5 6c 7e f7 40 7f f3 e5 75 b5 8f ea 9f 83 ab 5b 32 de 90 35 00 78 da 07 79 15 81 07 90 00 c5 87 26 ba 3f 53 f0 97 56 3e f9 5b 92 47 92 c5 25 b5 5f 82 1c 1c 0e 2b 6b 2e 33 a6 91 4a 29 f1 12 15 20 63 fd 79 fe 13 05 8e 2e b7 69 ef db eb 5c d7 85 71 f7 54 de 93 cc 2d d5 a9 2d 48 4b 50 7b 4f 5d 02 f8 3a 68 f3 0d a8 7a 8e d9 d9 2b 1c 9d 3c 40 3c f9 1c e9 b8 c0 a6 9b a2 1c 06 60 33 57 77 8e 38 41 41 9d cc 73 e7 74 24 73 e0 02 2b a9 f8 31 91 96 70 99 91 54 cf 6f f2 af b9 30 77 2f e9 50 40 5c 45 1d 0a f4 c2 d4 35 90 66 14 91 62 25 14 32 97 4e 69 2b fb bd a4 63 01 73 89 82 e5 0a 5f 0a c1 d3 a0 96 2e e3 52 a2 d3 58 a8 98 80 24 d7 4c 24 38 40 49 a1 42 31 02 ab fd 4b 2f 80 1f 58 b7 87 b8 dc 5d c7 f4 e8 21 de 7f e7 3f e1 fa fb 7f Data Ascii: wJK=6lWFl~@u[25xy&?SV>[G%_+k.3J) cy.i\qT--HKP{O]:hz+<@<`3Ww8AAst$s+1pTo0w/P@\E5fb%2Ni+cs_.RX$L$8@IB1K/X]!?
2024-05-27 22:29:24 UTC	11860	IN	Data Raw: 40 a6 d0 63 6c fd ea 8b a0 bd 0a f3 e7 3e 62 a9 1d fc fe b3 7f cb 06 ff fa 2b 6f e0 3f 7c f5 87 38 ba 59 e3 ab bf fc 4b b8 71 7c 6c c7 7b 0c a6 01 06 c7 e0 8d f5 1e a0 ce cc b8 29 1a 37 52 29 f7 38 97 8a 6b 1d 7a 14 f9 d2 9c e3 42 10 b9 ae ba 9d b8 10 28 f0 e3 3e 34 b1 29 f9 f2 d7 22 19 8b 78 0c 00 1a 5d 82 31 b1 32 10 8f 71 2a 87 ed 7f ad cc 75 56 96 91 8a 06 44 ac ef 17 b5 45 9a 6d e5 f9 9f 7d ee 39 7c e7 bb df c5 0b df ff 0e de bc 7f 88 4f 3f 41 78 fa 33 00 2e 62 d2 a9 0d 5a ce ce f5 a1 0d 36 3f 50 37 7d f7 f3 86 28 45 97 2f 8f 4b 6e de 4c 86 91 17 5d fc 5e e6 f9 e9 2c 63 bc 57 16 c0 ba c5 d5 ff da a2 6e a6 98 1e cc c0 5d 1b 13 de a1 35 90 db 0a fb a7 7f af 40 3a da 43 7a fc 96 ea f8 50 5b f3 05 0b d8 31 dd 9d 4f da e4 4e bc 06 b5 6f 88 96 57 73 b9 ef Data Ascii: @cl>b+o?\|8YKq\|l{)7R)8kzB(>4)"x]12q*uVDEm}9\|O?Ax3.bZ6?P7}(E/KnL]^,cWn]5@:CzP[1ONoWs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49747	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:24 UTC	382	OUT	GET /img/dir.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:24 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 65017 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 5071 Content-Type: image/png Date: Mon, 27 May 2024 22:29:24 GMT Etag: "654e57d817ca6795c13e7e805799d7ce-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2RCVQJCJNCD800G76XR14 Connection: close
2024-05-27 22:29:24 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 78 08 03 00 00 00 0e ba c6 e0 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 02 fa 50 4c 54 45 9a 68 aa 9a 69 a9 9b 69 aa 9c 6a aa 96 62 aa 94 60 a9 8e 58 a9 90 5a a9 92 5d a9 8d 56 a9 99 66 aa 8b 54 a8 8a 52 a8 98 64 aa 9e 6c aa ad 80 ac a9 7b ac a5 75 ab b2 87 ac a1 70 ab b5 8b ad bb 93 ad b8 8e ad c1 9b ae b0 84 ac be 96 ae c6 a0 ae 9a 68 aa e1 c4 b1 f7 ec b5 ff ec b4 fd ea b4 ff ee b4 ff f1 b3 ff f4 b5 f5 e2 b3 e5 c9 b2 ef d5 b2 ff f9 b5 fb e5 b4 ff fb b5 ff f6 b5 fd e9 b4 ff ff b6 ff ea b4 ff f1 b6 fe ec b4 ff fe b6 ff ef b4 ff f7 b5 f1 e1 b1 d2 b1 b0 ff f2 b6 ff f0 b3 ff eb b4 ff fd b5 ca a7 af 88 50 a8 9b 6a aa f7 e6 b4 84 49 a8 e9 ce Data Ascii: PNGIHDRxxgAMAasRGBPLTEhiijb`XZ]VfTRdl{uphPjI
2024-05-27 22:29:24 UTC	2372	IN	Data Raw: 79 aa 8e 6b f2 a7 6b 4a a8 db 9d 89 6c 2c 5f 6a 33 8f c0 31 5c 62 13 46 54 ff ff c1 6e 91 8f 15 4e 61 69 76 6c ff ff bf 62 81 7b 17 4d 5d 0f 4a 5f a1 ad 94 98 a6 90 a9 b2 96 85 99 89 7d 94 86 8b 9e 8b 9c 24 5f bb 00 00 00 02 74 52 4e 53 e5 f2 06 29 59 a1 00 00 10 65 49 44 41 54 78 01 ec cd 07 01 c0 40 08 03 40 7e 00 49 83 7f bd 75 d1 c9 19 38 b3 71 0b b3 79 13 1b f7 bc a3 e3 8e 3b ee f8 8d 71 c7 6b 7b 24 32 88 63 07 05 8a 60 65 46 96 7c 8b 14 50 a5 93 56 ba d0 72 14 86 c2 00 7c ce 62 c5 1d aa 77 93 74 a1 29 17 b6 61 07 32 ee 33 ef ff 4a 9b e9 f1 71 fd 71 49 be 98 e5 ba ea ad a1 7d 1b ac f9 4e 10 46 71 98 24 e9 c4 0f b3 3c 2e f2 2c 4e ca 28 9c 86 e5 2c f6 b3 2c 29 a2 b4 9c cf d4 53 5e 86 81 bd d0 be 07 d6 0c 6f b9 02 f8 4d 28 5b ff a9 80 d5 1b c6 b7 0d c3 Data Ascii: ykkJl,_j31\bFTnNaivlb{M]J_}$_tRNS)YeIDATx@@~Iu8qy;qk{$2c`eF\|PVr\|bwt)a23JqqI}NFq$<.,N(,,)S^oM([
2024-05-27 22:29:24 UTC	538	IN	Data Raw: f0 a6 2f e3 28 12 15 a0 bc b8 c9 e0 38 3c ec 91 cf 98 69 8b 3b 04 e9 67 91 52 b7 9e ef 9a 04 ee c3 7d 42 51 20 e5 13 43 8d 1c 8d e3 f1 58 4b 09 60 de cb 33 89 ca c5 34 89 35 9b 22 d5 84 c1 93 3d 1e 38 d5 a1 66 c0 78 4d 4d c2 46 87 38 9c 10 68 25 12 6a 2e 1d 47 d3 30 00 50 20 de 31 01 5f fc ee 13 84 fd f8 9f ef 31 53 e6 a7 db b6 a4 c1 d2 72 29 1f 4d 1f 8d 87 7b 7b 27 70 8f 76 41 6e 01 38 43 06 b3 c0 96 75 28 ab d9 b4 5e cf a1 69 0e 8f 4e e0 85 78 54 92 4e 1f e2 f2 42 7a 34 95 a0 29 5b cb 66 47 b6 c5 e5 4f 13 fb f1 87 c9 e3 13 88 f8 ab cb 00 06 f2 a1 81 f6 58 e1 42 91 c6 fd 49 2c 04 c9 dc f1 19 48 26 eb 0d ab c7 57 eb f3 b9 7d b5 b5 3e bf cf 1f 18 ac f5 b8 3d 83 9e 80 77 30 18 6c b2 f0 0a 59 ec c8 b6 f8 14 29 b9 a6 33 92 f9 29 02 43 56 5f 50 a2 ee df 71 ec Data Ascii: /(8<i;gR}BQ CXK`345"=8fxMMF8h%j.G0P 1_1Sr)M{{'pvAn8Cu(^iNxTNBz4)[fGOXBI,H&W}>=w0lY)3)CV_Pq
2024-05-27 22:29:24 UTC	1396	IN	Data Raw: ea 18 c6 5b be 50 5c 10 f1 d8 14 5d 51 00 3e 86 c1 38 ab 45 53 1d 6f 17 2e 78 72 1a 39 d4 e3 e5 24 cb 69 41 e0 96 16 28 e5 9e 68 8f 61 08 60 c0 59 32 e1 54 6f 7d de 8c d4 31 79 10 f8 e4 f3 2d 02 58 9b ae c8 4d 18 ac 69 3d 06 aa 19 ed b1 0d 93 71 39 31 c9 15 6d f1 7f 78 dd b4 e8 b9 e9 bf 2b 99 73 de 46 e3 2d 5f 92 05 d5 84 01 5f 7f f3 6d 94 6a 7e f7 fd 0f 36 55 54 1d 7f 09 75 8c 0c e5 14 9c 2b 7c 28 0a be 51 21 34 e2 d2 93 2e d8 5e 79 8c b4 c2 7c 88 25 f3 e3 95 5b f0 1c a0 c0 c9 a5 6a f9 f1 a7 6f a3 aa e9 db 9f 7f b9 a2 42 3e ab f2 2f 8d 96 13 24 ad ce a8 d3 73 93 20 b7 39 7a 98 71 43 4b b5 20 dd 30 e2 c2 80 cb 89 64 74 24 ab 49 4b db 2c a6 1f e3 cb 17 a1 ec 2c 06 6b 54 57 7e 29 f8 f6 db d1 7a 6a ff ee d7 df ae 5e bb a2 02 9f 95 38 b9 d2 36 5f ff 04 5d 45 Data Ascii: [P\]Q>8ESo.xr9$iA(ha`Y2To}1y-XMi=q91mx+sF-__mj~6UTu+\|(Q!4.^y\|%[joB>/$s 9zqCK 0dt$IK,,kTW~)zj^86_]E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49746	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:24 UTC	388	OUT	GET /img/no_avatar.png HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:24 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 38960 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 6043 Content-Type: image/png Date: Mon, 27 May 2024 22:29:24 GMT Etag: "63d88964a3d4cd62c81b4073bdf75745-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2RCV9NZ2RTB06M08SHDT1 Connection: close
2024-05-27 22:29:24 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 17 50 49 44 41 54 78 da ed 9d 09 70 5d e5 75 c7 1f fb 12 c2 16 68 c2 52 96 04 32 a4 50 d6 50 36 43 ca 60 37 2c 21 6d 26 90 4e 9a 96 4e 98 4c 09 4d 0a 4d 27 40 67 5a 1a 87 a4 10 28 29 81 34 03 b4 10 62 ed 92 65 c9 5a 2c c9 92 b5 59 b2 b1 6c 61 d9 f2 6e 55 28 89 58 52 08 18 03 66 33 f6 eb ff 48 0f e9 c9 7a 7a 7a cb bd f7 dd e5 77 66 7e 63 0c c6 7a ef dc 73 ce fd be f3 9d 73 be 58 0c 41 10 04 09 87 0c 0c 0c 1c bd 79 f3 e6 33 c5 a5 e2 06 71 8b f8 9e b8 c7 d8 b4 69 d3 03 fa f5 27 fa f5 61 f1 e4 96 2d 5b 9e b0 df 27 b8 ef a3 3f a7 7f ff 5d f1 75 fd f3 3c fd b9 0b 36 6c d8 f0 87 fd fd fd 87 a3 61 04 29 a0 Data Ascii: PNGIHDR\rfbKGDPIDATxp]uhR2PP6C`7,!m&NNLMM'@gZ()4beZ,YlanU(XRf3Hzzzwf~czssXAy3qi'a-['?]u<6la)
2024-05-27 22:29:24 UTC	2372	IN	Data Raw: b2 e4 77 e2 7a bc 28 a0 62 d3 73 f5 00 bb 30 64 c8 a7 9a d0 72 03 0c 35 0d 9e f3 df a4 87 f7 1a 06 0c 0e b1 d1 b6 91 78 96 cf c5 86 4b 26 0a 7a 30 5a 70 fc 3e 04 bd 58 6e c3 cb fc fb d6 3f 23 31 69 16 63 05 37 13 84 25 dc 90 e4 33 49 5c 81 f5 3a 06 0a 1e 31 b0 7d fb f6 4f e3 79 fe c8 f2 df 93 98 33 8f 61 82 97 bc a6 d5 c0 17 f1 c2 c2 2d f9 8f d0 43 68 c4 10 a1 80 7c 28 ee c2 1b bd 5f f2 9f 90 b8 5c 03 23 04 3f f0 94 f2 02 07 e1 99 de 38 ff 39 e2 37 18 1d f8 8c 56 d5 0b 1c 89 87 ba eb fc f3 c4 1b 18 1b f8 94 41 2b 40 c3 53 dd 71 fe 5b 98 c6 0b 7e 47 01 60 54 7d 04 67 e1 b1 ce 26 fc 6e 23 d3 0f 01 aa 15 f8 3f d9 ec f9 78 ae 03 22 65 7e 97 51 5d 10 40 76 c8 76 2f c3 83 f3 5b f6 df 83 21 41 80 79 5b 2b 81 6b f0 e4 dc 96 fd 0f 60 40 10 92 21 a4 73 f1 e8 ec 96 Data Ascii: wz(bs0dr5xK&z0Zp>Xn?#1ic7%3I\:1}Oy3a-Ch\|(_\#?897VA+@Sq[~G`T}g&n#?x"e~Q]@vv/[!Ay[+k`@!s
2024-05-27 22:29:24 UTC	538	IN	Data Raw: 35 d8 eb 28 67 f6 23 c1 8a f2 72 1c cd a7 d8 69 0d 76 9a 11 0b 52 05 80 ad 28 86 55 40 90 f7 fe bc fd 33 5e 01 fc 47 aa bb 01 3b 50 4e 06 27 02 ca 05 2c 52 8f 39 4e e7 b3 b6 5f 4d 70 c2 3e 33 0e 00 ff 94 6a 05 f0 df 28 27 33 fa 34 62 0a a7 f3 0f 96 9c e5 dc 3f ab 00 70 63 aa 00 40 3f 40 16 2c a1 3a d0 37 f4 f6 f6 62 93 d9 e5 b2 3e 37 2d 00 28 2a 7c 15 e5 64 55 4a 49 42 d0 07 d4 2d 5e 8c 3d 66 c7 9e 91 91 91 43 a7 05 00 d5 02 9c 8b 72 b2 1c 18 c2 e0 d0 82 97 fc 0e 50 f4 93 2d 23 b1 54 a2 5a 80 c3 a9 05 c8 1e 2b 3c c1 19 59 fa 07 88 b6 d8 4c a2 ff f8 22 0a ca be 42 90 53 01 ef 59 da d2 82 fd e5 c6 e3 e9 02 40 1b 0a ca ed 32 51 5b 8e e2 98 de 8d fa e2 b6 df 9c 1b db ee 48 17 00 b8 20 84 7c 80 af b1 c4 2b cd 3e 0e cd 02 4c 51 0c f4 35 94 94 3b cb 96 2d c3 49 Data Ascii: 5(g#rivR(U@3^G;PN',R9N_Mp>3j('34b?pc@?@,:7b>7-(*\|dUJIB-^=fCrP-#TZ+<YL"BSY@2Q[H \|+>LQ5;-I
2024-05-27 22:29:24 UTC	2368	IN	Data Raw: c2 16 5c e7 ee 5c 02 c0 dd 28 ce 9b ca c1 5e 5d 64 19 a5 4b 47 ac 9b 8f 44 9f 77 6c db b6 ed ac ac 03 80 5d 1f 8c f2 bc cd 0d a4 ec 23 f0 f9 de 3d db 4e 3e bb 62 8d e7 ed 29 db 62 b9 8a fe e7 8d 28 d0 1b 2c fb 6d 47 85 61 be 84 d4 b6 3b 96 fb 60 d9 ef e9 0a f3 fe 7c 02 c0 7d 28 d1 d5 e9 ac 63 cb ff fa ba ba c8 15 fa 34 36 34 8c 75 f7 91 f9 77 bd 24 fd e2 9c 03 80 1e ce 05 28 d1 79 d6 ac 59 33 d6 31 48 61 d0 f8 29 80 cd 51 e0 fc df 15 5e b0 0e df 58 3e a2 bf e4 79 14 e9 4c b2 ef d9 67 9f 8d dc db 3e 9b 55 81 05 45 0b 8e d8 8b 63 36 f7 f3 58 be 62 f7 88 a1 cc fc ba 02 6d df 5b bd 70 21 8e 9e 21 16 24 2d 58 62 3f 79 97 ff 7e 21 ef 00 a0 28 72 36 ca cc ed 8d 6f dd 6c 95 94 fe e6 4c ad 92 86 56 3e 8d 3d e5 c4 f3 79 2f ff 93 56 01 ab 51 68 e6 58 72 8b 37 be b3 Data Ascii: \\(^]dKGDwl]#=N>b)b(,mGa;`\|}(c464uw$(yY31Ha)Q^X>yLg>UEc6Xbm[p!!$-Xb?y~!(r6olLV>=y/VQhXr7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49750	52.58.254.253	443	764	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:24 UTC	378	OUT	GET /ico.ico HTTP/1.1 Host: facilitator-of-company-case-2605792.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 22:29:25 UTC	436	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 32084 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 5430 Content-Type: image/vnd.microsoft.icon Date: Mon, 27 May 2024 22:29:25 GMT Etag: "3d9234c66586716a2d2669a9ef24f199-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01HYY2RDGXNQXVDK0BMZAE1BSH Connection: close
2024-05-27 22:29:25 UTC	750	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: h& ( h ffgd@`efffffep`fffffff
2024-05-27 22:29:25 UTC	2372	IN	Data Raw: ff ff ff ff ff cf b1 ff ff 9f 64 ff ff 96 55 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 68 08 20 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 9f 64 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d8 c1 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 68 08 40 00 00 00 00 ff 66 07 8f ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff a9 74 ff ff ec e0 ff ff ff ff ff ff ff ff ff ff cf b2 ff ff 66 08 ff ff 66 08 ff ff 66 07 8f 00 00 00 00 00 00 00 00 ff 70 10 10 ff 66 09 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 09 cf ff 60 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 70 10 10 ff 66 07 8f ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 Data Ascii: dUfffeh fffffdfffh@fffffftfffpffffffffffff`pfffff
2024-05-27 22:29:25 UTC	538	IN	Data Raw: ff 66 07 ef ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 79 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 70 18 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 Data Ascii: fffffffffy'pfffffffffffffffffffffffffffffffff
2024-05-27 22:29:25 UTC	1770	IN	Data Raw: 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff e3 d0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 83 37 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 67 08 9f ff 65 08 60 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff cf b2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e3 d1 ff ff 70 18 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 08 60 ff 60 00 10 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: ffffff7ffffffffffffge`fffffffffffpfffffffffffe``ffff

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49760	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:29:29 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1716848936038&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-05-27 22:29:29 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-05-27 22:29:29 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-05-27 22:29:30 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: F43282D9868D433C9837FCADD1714260 Ref B: LAX311000115033 Ref C: 2024-05-27T22:29:29Z Date: Mon, 27 May 2024 22:29:30 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1716848969.167079d2

Target ID:	0
Start time:	18:29:05
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:29:08
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2000 --field-trial-handle=1920,i,16783255069544066462,15836163413115638597,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:29:11
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://facilitator-of-company-case-2605792.netlify.app/id.html/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://facilitator-of-company-case-2605792.netlify.app/id.html/	Avira URL Cloud: detection malicious, Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/id.html/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://facilitator-of-company-case-2605792.netlify.app/img/meta-logo-grey.png	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/img/phone.png	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/ico.ico	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/img/save_img.png	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/img/Mate.mp4	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/img/shild.jpg	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/styles/bootstrap.min.css	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/styles/style.css	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/img/star.png	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/img/dir.png	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/img/doc.png	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/img/fb_round_logo.png	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/img/no_avatar.png	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/img/block_2.png	Avira URL Cloud: Label: phishing
Source: https://facilitator-of-company-case-2605792.netlify.app/img/2FA.png	Avira URL Cloud: Label: phishing

Source: https://facilitator-of-company-case-2605792.netlify.app/form.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://facilitator-of-company-case-2605792.netlify.app/form.html	HTTP Parser: Invalid link: Terms of use
Source: https://facilitator-of-company-case-2605792.netlify.app/form.html	HTTP Parser: Invalid link: Privacy Policy
Source: https://facilitator-of-company-case-2605792.netlify.app/form.html	HTTP Parser: Invalid link: Community Payment Terms
Source: https://facilitator-of-company-case-2605792.netlify.app/form.html	HTTP Parser: Invalid link: Commercial terms

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /id.html/ HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/Mate.mp4 HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://facilitator-of-company-case-2605792.netlify.app/id.html/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/id.html/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /form.html HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://facilitator-of-company-case-2605792.netlify.app/id.html/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /styles/bootstrap.min.css HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles/style.css HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/block_2.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/shild.jpg HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/free/self/ HTTP/1.1Host: api.db-ip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://facilitator-of-company-case-2605792.netlify.appSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://facilitator-of-company-case-2605792.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/save_img.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/doc.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/meta-logo-grey.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/fb_round_logo.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/free/self/ HTTP/1.1Host: api.db-ip.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/block_2.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/shild.jpg HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/2FA.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/phone.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/star.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/dir.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/save_img.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/doc.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/no_avatar.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/fb_round_logo.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/meta-logo-grey.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/2FA.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ico.ico HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://facilitator-of-company-case-2605792.netlify.app/form.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/star.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/phone.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/dir.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/no_avatar.png HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ico.ico HTTP/1.1Host: facilitator-of-company-case-2605792.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: facilitator-of-company-case-2605792.netlify.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: api.db-ip.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://facilitator-of-company-case-2605792.netlify.app/id.html/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Windows Analysis Report
https://facilitator-of-company-case-2605792.netlify.app/id.html/