Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
http://comarcal.net/verify/

Overview

General Information

Sample URL:	http://comarcal.net/verify/
Analysis ID:	1448164
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Phishing site detected (based on favicon image match)

HTML body contains low number of good links

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Suspicious form URL found

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 7012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2080,i,2805311417984072978,158218972349156477,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://comarcal.net/verify/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://comarcal.net/verify/	Avira URL Cloud: detection malicious, Label: phishing
Source: http://comarcal.net/verify/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Antivirus detection for URL or domain

Source: http://comarcal.net/verify/img/favicon.ico	Avira URL Cloud: Label: phishing
Source: http://comarcal.net/verify/img/bg1.png	Avira URL Cloud: Label: phishing

Phishing

Phishing site detected (based on favicon image match)

Source: http://comarcal.net	Matcher: Template: apple matched with high similarity
Source: http://comarcal.net/verify/	Matcher: Template: apple matched with high similarity

Source: http://comarcal.net/verify/

HTTP Parser: Number of links: 0

Source: http://comarcal.net/verify/

HTTP Parser: Title: iunes Cnnect does not match URL

Source: http://comarcal.net/verify/

HTTP Parser: Has password / email / username input fields

Source: http://comarcal.net/verify/

HTTP Parser: Form action: ./res/log1.php

Source: http://comarcal.net/verify/

HTTP Parser: <input type="password" .../> found

Source: http://comarcal.net/verify/

HTTP Parser: No <meta name="author".. found

Source: http://comarcal.net/verify/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49713 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /verify/ HTTP/1.1Host: comarcal.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /verify/img/bg1.png HTTP/1.1Host: comarcal.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://comarcal.net/verify/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=4aecbc47a59987620c2b092501546f81
Source: global traffic	HTTP traffic detected: GET /verify/img/favicon.ico HTTP/1.1Host: comarcal.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://comarcal.net/verify/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=4aecbc47a59987620c2b092501546f81
Source: global traffic	HTTP traffic detected: GET /verify/img/bg1.png HTTP/1.1Host: comarcal.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=4aecbc47a59987620c2b092501546f81
Source: global traffic	HTTP traffic detected: GET /verify/img/favicon.ico HTTP/1.1Host: comarcal.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=4aecbc47a59987620c2b092501546f81

Source: global traffic	DNS traffic detected: DNS query: comarcal.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49713 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@16/8@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2080,i,2805311417984072978,158218972349156477,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://comarcal.net/verify/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2080,i,2805311417984072978,158218972349156477,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://comarcal.net/verify/	100%	Avira URL Cloud	phishing
http://comarcal.net/verify/	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://comarcal.net/verify/img/favicon.ico	100%	Avira URL Cloud	phishing
http://comarcal.net/verify/img/bg1.png	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
comarcal.net	217.160.0.148	true	false		unknown
www.google.com	142.250.186.100	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://comarcal.net/verify/	true		unknown
http://comarcal.net/verify/img/bg1.png	false	Avira URL Cloud: phishing	unknown
http://comarcal.net/verify/img/favicon.ico	false	Avira URL Cloud: phishing	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved		unknown	unknown	false
217.160.0.148	comarcal.net	Germany		8560	ONEANDONE-ASBrauerstrasse48DE	false
142.250.186.100	www.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1448164
Start date and time:	2024-05-28 00:33:24 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://comarcal.net/verify/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@16/8@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.206, 142.251.168.84, 142.250.184.195, 34.104.35.123, 142.250.186.138, 142.250.181.234, 142.250.186.42, 172.217.16.138, 142.250.186.170, 142.250.185.202, 142.250.184.234, 142.250.185.234, 142.250.184.202, 142.250.186.74, 172.217.16.202, 216.58.206.74, 142.250.186.106, 172.217.18.10, 142.250.185.170, 142.250.74.202, 20.114.59.183, 93.184.221.240, 192.229.221.95, 20.3.187.198, 13.85.23.206, 216.58.206.67
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://comarcal.net/verify/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 41

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1361 x 744, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	190918
Entropy (8bit):	7.955954628323332
Encrypted:	false
SSDEEP:	3072:FcOot6fQtk32hBAKbbn73XJ7VTwiCRgXoCbL5NCVdrjSvU9195Gm981PTdxJP22H:wtyQ22hNzoim4HodrjSvU919YmAL5PXH
MD5:	CE99037FB05E945085AE0D295B8EBD2A
SHA1:	8673DFA2FB45F79B447A3DE30FB9E06350C48B69
SHA-256:	61D5F576E64416AEFCB4215F65FDB53FF9959F2F92B0D5CFF197B5B8BF5BAD82
SHA-512:	4DED28B6613E92B8DA24D4EBBD0DBB41FE1D40BB6C4E3007A50F887379D0A3E201CE03E0F20FC6518FF5DB947AA57692E63C8C309B170EA7E4B058F8CB6A4FBB
Malicious:	false
Reputation:	low
URL:	http://comarcal.net/verify/img/bg1.png
Preview:	.PNG........IHDR...Q.........q.......sRGB.........gAMA......a.....pHYs..........+......IDATx^..`T.....2..-.&Z...m.Z.m...l.lA[..~.....Z.[.V.P.Z.[...B..Up..B.........%,I .,3.e..{..'.$.d.L..;M..{.9.s.;.}..Zf..... .. .. .. .. .. .. .. .. .. ......H..H..H..H..H..H..H..H..H..H.m..Q9;H..H..H..H..H..H..H..H..H..H....Q9=H..H..H..H..H..H..H..H..H..H."...............................F.N..q/. .. .. .. .. .. .. .. .. .>B."j..hv..H..H..H..H..H..H..H..H..H 4..QC..H..H..H..H..H..H..H..H..H.......}d..M. .. .. .. .. .. .. .. .. ...PD....".. .. .. .. .. .. .. .. ...#.(....f7.#0x.`...,.M.l.nE.$@.$@.$@.$@.$@.$@.$@.$...PD..C...J..s....W^)555....H..H..H..H..H..H..H..H..z9....\|....$$$...E.jy.7..[.........................z..Q{..........E..k....(......mH..H..H..H..H..H..H..H.......}`..E..t).AA..\...T...........................)...3f..T...>M@.._}...S-....7.\|...N.+...xO.W7.....YH..H..H..H..H..H..H ....^.n{..\|..{.......[....Qd.{"...=qT.N!.nS.{j.... ......M.....&n.[jkk..C.b.v.H@.xJJ.1..n.

Chrome Cache Entry: 42

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 43

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1361 x 744, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	190918
Entropy (8bit):	7.955954628323332
Encrypted:	false
SSDEEP:	3072:FcOot6fQtk32hBAKbbn73XJ7VTwiCRgXoCbL5NCVdrjSvU9195Gm981PTdxJP22H:wtyQ22hNzoim4HodrjSvU919YmAL5PXH
MD5:	CE99037FB05E945085AE0D295B8EBD2A
SHA1:	8673DFA2FB45F79B447A3DE30FB9E06350C48B69
SHA-256:	61D5F576E64416AEFCB4215F65FDB53FF9959F2F92B0D5CFF197B5B8BF5BAD82
SHA-512:	4DED28B6613E92B8DA24D4EBBD0DBB41FE1D40BB6C4E3007A50F887379D0A3E201CE03E0F20FC6518FF5DB947AA57692E63C8C309B170EA7E4B058F8CB6A4FBB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Q.........q.......sRGB.........gAMA......a.....pHYs..........+......IDATx^..`T.....2..-.&Z...m.Z.m...l.lA[..~.....Z.[.V.P.Z.[...B..Up..B.........%,I .,3.e..{..'.$.d.L..;M..{.9.s.;.}..Zf..... .. .. .. .. .. .. .. .. .. ......H..H..H..H..H..H..H..H..H..H.m..Q9;H..H..H..H..H..H..H..H..H..H....Q9=H..H..H..H..H..H..H..H..H..H."...............................F.N..q/. .. .. .. .. .. .. .. .. .>B."j..hv..H..H..H..H..H..H..H..H..H 4..QC..H..H..H..H..H..H..H..H..H.......}d..M. .. .. .. .. .. .. .. .. ...PD....".. .. .. .. .. .. .. .. ...#.(....f7.#0x.`...,.M.l.nE.$@.$@.$@.$@.$@.$@.$@.$...PD..C...J..s....W^)555....H..H..H..H..H..H..H..H..z9....\|....$$$...E.jy.7..[.........................z..Q{..........E..k....(......mH..H..H..H..H..H..H..H.......}`..E..t).AA..\...T...........................)...3f..T...>M@.._}...S-....7.\|...N.+...xO.W7.....YH..H..H..H..H..H..H ....^.n{..\|..{.......[....Qd.{"...=qT.N!.nS.{j.... ......M.....&n.[jkk..C.b.v.H@.xJJ.1..n.

Chrome Cache Entry: 44

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	9062
Entropy (8bit):	3.284224550667547
Encrypted:	false
SSDEEP:	48:z87CC6NTQ8Om4F/POAVpSVyvFElSfwa89A4:ACC6NTEmAGAVcLSfwa8N
MD5:	28EC4EABA5AE210B98A11257CAF5BADE
SHA1:	6164148A39D6A27286641896FCE3B76F439AEAB1
SHA-256:	3F5086612AAE9363C9FB02949219CEF19854C18FE5AD4EDA78AA1AEFCC79CC71
SHA-512:	4EFB48689296863D6E05B3CF32F8F98AC57A2BDEAE09209735170DD7F1C70E22A9BD2FBE93FCCB7181B8C1B6DFE555AF548129EF7B8705ED50486A972815868E
Malicious:	false
Reputation:	low
URL:	http://comarcal.net/verify/img/favicon.ico
Preview:	...... ..........F...........h....... .... .....V......... .h.......(... ...@...............................BBB.....rrr.....ZZZ.............NNN.~~~.fff.................JJJ.....zzz.bbb.VVV.....nnn.........FFF.....vvv.....^^^.............RRR.....jjj...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 45

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:rE8kYn:r8Y
MD5:	90EA600A62A4BF69CB529122EEE079E1
SHA1:	783E8C485C1A08932E00E7738C3DA2A25B5358EB
SHA-256:	80A4191EFD047A716B5784EEBC35F6D42C775843B9C8D8CB153136C721E5E04C
SHA-512:	C6AC6A94DEECD8A5C286101E41F0FF791F0427BB2596AF8FFF9561A2C746AA159E7EF2888C227EE92FCD31886D79541BF0D765D9421CC96402B78A4C1DA9F84E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkUEPckhmAgChIFDSCXGhwSBQ27QIcn?alt=proto
Preview:	ChIKBw0glxocGgAKBw27QIcnGgA=

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 28, 2024 00:34:08.957370996 CEST	49673	443	192.168.2.6	173.222.162.64
May 28, 2024 00:34:08.962348938 CEST	49674	443	192.168.2.6	173.222.162.64
May 28, 2024 00:34:09.160481930 CEST	49672	443	192.168.2.6	173.222.162.64
May 28, 2024 00:34:15.650693893 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:15.655579090 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:15.655714989 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:15.655906916 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:15.660762072 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:15.679507017 CEST	49705	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:15.684480906 CEST	80	49705	217.160.0.148	192.168.2.6
May 28, 2024 00:34:15.686875105 CEST	49705	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.486511946 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.486558914 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.486752033 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.519567013 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.524571896 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724005938 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724040985 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724091053 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.724097013 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724148035 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724191904 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.724199057 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724248886 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724283934 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724303007 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.724324942 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724359035 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724371910 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.724391937 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724425077 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724438906 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.724461079 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.724508047 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.729342937 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.731195927 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.731230021 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.731250048 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.771611929 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.822027922 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.822065115 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.822115898 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.822118044 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.825508118 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.825561047 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.825570107 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.825593948 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.825679064 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.832572937 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.832607031 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.832642078 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.832676888 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.839449883 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.839498043 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.839519024 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.839531898 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.839581013 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.846355915 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.846385002 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.846438885 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.846440077 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.846468925 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.846524954 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.853218079 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.853246927 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.853296995 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.853301048 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.853329897 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.853372097 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.860282898 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.860311985 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.860362053 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.860363007 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.860390902 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.860439062 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.866941929 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.866995096 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.867027044 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.867053032 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.873881102 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.873914003 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.873940945 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.873948097 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.873992920 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.881211042 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.881243944 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.881278038 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.881299973 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.922384024 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.922449112 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.922456980 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.922497988 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.922535896 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.922569036 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.922614098 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.922667980 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.923228025 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.923260927 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.923295021 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.923312902 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.930102110 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.930130005 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.930157900 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.930164099 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.930207968 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.930213928 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.937005997 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.937033892 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.937062979 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.937086105 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.937113047 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.937144995 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.944236040 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.944264889 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.944297075 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.944310904 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.944355011 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.944361925 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.950800896 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.950851917 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.950886011 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.950932980 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.952558994 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.957736015 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.957781076 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.957817078 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.957849026 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.963083029 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.964416981 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.964469910 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.964472055 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.964524031 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.964550972 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.964571953 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.971402884 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.971431971 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.971462965 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.971483946 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.971512079 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.971538067 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.978074074 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.978123903 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.978136063 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.981427908 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.981478930 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.981492996 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.981529951 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.981559038 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.981576920 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.989595890 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.989660978 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.990045071 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.990355968 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.990410089 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.990536928 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.995785952 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.995815992 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.995836973 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:16.995930910 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.995959044 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:16.995980024 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.000998020 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.001030922 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.001064062 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.001068115 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.001121044 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.003962040 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.003992081 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.004025936 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.004057884 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.004074097 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.004112959 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.008794069 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.008840084 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.008873940 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.008892059 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.017071009 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.017164946 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.017220974 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.017252922 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.017302990 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.021219969 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.021380901 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.021410942 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.021431923 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.021442890 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.021492958 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.026180029 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.026211023 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.026262045 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.026262045 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.026325941 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.026374102 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.030164957 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.030194044 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.030226946 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.030246019 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.030260086 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.030302048 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.031922102 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.031975985 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.032006025 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.032023907 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.032038927 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.032082081 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.035789013 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.035821915 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.035856009 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.035871983 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.039365053 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.039397955 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.039423943 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.039431095 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.039482117 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.040767908 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.040822029 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.040854931 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.040884018 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.043662071 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.043710947 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.043740988 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.043764114 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.043811083 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.043814898 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.048937082 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.048964977 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.048998117 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.049014091 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.049030066 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.049056053 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.052035093 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.052067995 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.052100897 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.052105904 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.052167892 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.052966118 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.052994967 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.053025961 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.053045988 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.053059101 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.053102970 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.055423975 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.055452108 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.055488110 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.055501938 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.055536985 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.055582047 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.058398962 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.058518887 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.058549881 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.058569908 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.061409950 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.061441898 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.061464071 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.061476946 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.061523914 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.064539909 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.064572096 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.064604044 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.064636946 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.067349911 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.067378998 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.067406893 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.067470074 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.067498922 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.067516088 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.070332050 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.070383072 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.070384979 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.070420980 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.070460081 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.073487043 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.074332952 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.074383020 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.074493885 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.074826956 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.074876070 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.078269005 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.078296900 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.078346968 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.078613043 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.078640938 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.078684092 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.081604958 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.081633091 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.081681967 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.081762075 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.081790924 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.081830978 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.084619999 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.084649086 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.084681988 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.084692001 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.084758997 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.084801912 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.087369919 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.087399006 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.087433100 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.087440014 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.087493896 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.087531090 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.090305090 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.090333939 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.090383053 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.090409040 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.090447903 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.090497017 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.093266010 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.093298912 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.093331099 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.093347073 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.096318960 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.096349001 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.096365929 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.096379995 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.096414089 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.096422911 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.099004030 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.099035978 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.099056959 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.099067926 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.099107981 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.102077961 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.102109909 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.102142096 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.102160931 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.104821920 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.104969025 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.104984999 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.105022907 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.105063915 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.107897043 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.107929945 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.107963085 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.107974052 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.110819101 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.110855103 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.110877037 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.110887051 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.110935926 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.113635063 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.113668919 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.113702059 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.113712072 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.116478920 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.116507053 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.116533041 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.116625071 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.116652966 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.116669893 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.119092941 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.119148970 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.119221926 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.165294886 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.172713041 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.179131985 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.205797911 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.212344885 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.212560892 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.212584972 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.219260931 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.376245022 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.376306057 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.376337051 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.376358986 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.376372099 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.376415968 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.376760960 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.376796961 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.376830101 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.376842976 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.377893925 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.377927065 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.377948999 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.377974987 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.378026009 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.469046116 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.512825012 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.808798075 CEST	49710	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.813776970 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.813854933 CEST	49710	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.838699102 CEST	49710	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.843681097 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.848167896 CEST	49711	443	192.168.2.6	142.250.186.100
May 28, 2024 00:34:17.848254919 CEST	443	49711	142.250.186.100	192.168.2.6
May 28, 2024 00:34:17.848330021 CEST	49711	443	192.168.2.6	142.250.186.100
May 28, 2024 00:34:17.848545074 CEST	49711	443	192.168.2.6	142.250.186.100
May 28, 2024 00:34:17.848577023 CEST	443	49711	142.250.186.100	192.168.2.6
May 28, 2024 00:34:17.870016098 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.870038986 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.870057106 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.870075941 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.870085955 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.870091915 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.870110989 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.870117903 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.870126963 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.870145082 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.870151997 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.870162010 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.870181084 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.870186090 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.870222092 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.875099897 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.875142097 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.875158072 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.875175953 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.875190020 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.875224113 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.967734098 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.967780113 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.967818022 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.967827082 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.970992088 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.971055031 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.971072912 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.971091032 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.971134901 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.978110075 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.978147984 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.978182077 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.978202105 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.984870911 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.984916925 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.984926939 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.984954119 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.984999895 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.991514921 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.991552114 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.991594076 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.991600037 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.998471022 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.998528957 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.998533964 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:17.998563051 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:17.998608112 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.005285978 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.005325079 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.005357027 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.005374908 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.012130022 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.012167931 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.012202978 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.012206078 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.012248993 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.019026041 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.019084930 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.019118071 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.019135952 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.025866032 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.025906086 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.025916100 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.025940895 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.025988102 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.065736055 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.065781116 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.065818071 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.065870047 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.068842888 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.068897963 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.068953037 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.068967104 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.068983078 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.069009066 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.075947046 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.075980902 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.076014996 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.076047897 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.076086044 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.082676888 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.082710981 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.082743883 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.082767010 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.089416981 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.089452028 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.089482069 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.089483976 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.089600086 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.096285105 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.096319914 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.096353054 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.096429110 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.103133917 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.103167057 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.103202105 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.103228092 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.103260040 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.109910965 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.109966040 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.109997988 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.110049009 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.117047071 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.117082119 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.117116928 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.117126942 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.117165089 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.123522997 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.123759985 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.123792887 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.123811960 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.129762888 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.129796982 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.129828930 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.129853010 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.129935980 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.135895967 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.135919094 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.135935068 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.135972023 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.141464949 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.141520977 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.141554117 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.141577959 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.141611099 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.147092104 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.147145033 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.147176981 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.147207975 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.152581930 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.152615070 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.152645111 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.152648926 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.153069019 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.157793045 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.157825947 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.157859087 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.157882929 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.163315058 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.163367033 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.163374901 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.163399935 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.163726091 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.168771982 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.168828011 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.168879032 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.168909073 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.168910980 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.168962002 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.174160957 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.174212933 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.174243927 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.174272060 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.177611113 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.177644968 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.177676916 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.177680016 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.177728891 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.180722952 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.180757046 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.180789948 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.180814028 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.184185982 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.184236050 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.184268951 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.184286118 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.184333086 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.187231064 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.187263012 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.187297106 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.187329054 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.190538883 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.190587997 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.190618992 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.190637112 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.190700054 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.193703890 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.193736076 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.193769932 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.193820953 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.196892023 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.196924925 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.196958065 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.196983099 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.197030067 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.200247049 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.200278997 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.200310946 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.200365067 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.203282118 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.203334093 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.203352928 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.203366041 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.203418970 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.206628084 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.206661940 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.206692934 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.206723928 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.209882021 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.209914923 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.209947109 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.209949017 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.209997892 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.213030100 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.213057041 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.213072062 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.213103056 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.216289997 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.216305017 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.216319084 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.216336966 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.216355085 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.219726086 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.219741106 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.219755888 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.219829082 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.222738028 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.222753048 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.222767115 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.222784996 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.222815990 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.226504087 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.226517916 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.226531982 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.226564884 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.229079008 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.229109049 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.229125977 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.229135036 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.229157925 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.232392073 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.232429028 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.232455015 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.232501030 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.235543013 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.235559940 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.235577106 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.235600948 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.235625029 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.238714933 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.238732100 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.238746881 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.238790989 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.241971016 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.241987944 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.242002010 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.242022991 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.242043018 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.245170116 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.245187044 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.245202065 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.245264053 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.248347998 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.248374939 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.248389959 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.248415947 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.248437881 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.251416922 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.251431942 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.251466990 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.251472950 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.251491070 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.251871109 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.254472017 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.254514933 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.254529953 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.254547119 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.254585028 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.254622936 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.257467031 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.257483006 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.257498026 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.257565975 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.260402918 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.260430098 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.260445118 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.260477066 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.260499954 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.263456106 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.263472080 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.263487101 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.263529062 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.266263008 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.266288042 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.266302109 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.266330957 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.266357899 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.269316912 CEST	49712	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:18.269349098 CEST	443	49712	184.28.90.27	192.168.2.6
May 28, 2024 00:34:18.269423962 CEST	49712	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:18.271123886 CEST	49712	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:18.271137953 CEST	443	49712	184.28.90.27	192.168.2.6
May 28, 2024 00:34:18.273967028 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.274013996 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.274049044 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.274081945 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.274095058 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.274115086 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.274125099 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.274152040 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.274331093 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.275971889 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.276004076 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.276141882 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.469217062 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.469285011 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.469320059 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.469353914 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.469377995 CEST	49710	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.469387054 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.469415903 CEST	49710	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.469422102 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.469460011 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.469465971 CEST	49710	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.506459951 CEST	443	49711	142.250.186.100	192.168.2.6
May 28, 2024 00:34:18.506728888 CEST	49711	443	192.168.2.6	142.250.186.100
May 28, 2024 00:34:18.506791115 CEST	443	49711	142.250.186.100	192.168.2.6
May 28, 2024 00:34:18.508234978 CEST	443	49711	142.250.186.100	192.168.2.6
May 28, 2024 00:34:18.508304119 CEST	49711	443	192.168.2.6	142.250.186.100
May 28, 2024 00:34:18.520093918 CEST	49710	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.541138887 CEST	49711	443	192.168.2.6	142.250.186.100
May 28, 2024 00:34:18.541326046 CEST	443	49711	142.250.186.100	192.168.2.6
May 28, 2024 00:34:18.557912111 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:34:18.567065954 CEST	49674	443	192.168.2.6	173.222.162.64
May 28, 2024 00:34:18.567065954 CEST	49673	443	192.168.2.6	173.222.162.64
May 28, 2024 00:34:18.582597017 CEST	49711	443	192.168.2.6	142.250.186.100
May 28, 2024 00:34:18.582636118 CEST	443	49711	142.250.186.100	192.168.2.6
May 28, 2024 00:34:18.598231077 CEST	49710	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:18.629483938 CEST	49711	443	192.168.2.6	142.250.186.100
May 28, 2024 00:34:18.770176888 CEST	49672	443	192.168.2.6	173.222.162.64
May 28, 2024 00:34:18.946263075 CEST	443	49712	184.28.90.27	192.168.2.6
May 28, 2024 00:34:18.946355104 CEST	49712	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:18.967878103 CEST	49712	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:18.967892885 CEST	443	49712	184.28.90.27	192.168.2.6
May 28, 2024 00:34:18.968352079 CEST	443	49712	184.28.90.27	192.168.2.6
May 28, 2024 00:34:19.020093918 CEST	49712	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:19.061671972 CEST	49712	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:19.102534056 CEST	443	49712	184.28.90.27	192.168.2.6
May 28, 2024 00:34:19.254265070 CEST	443	49712	184.28.90.27	192.168.2.6
May 28, 2024 00:34:19.254434109 CEST	443	49712	184.28.90.27	192.168.2.6
May 28, 2024 00:34:19.254578114 CEST	49712	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:19.254714012 CEST	49712	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:19.254728079 CEST	443	49712	184.28.90.27	192.168.2.6
May 28, 2024 00:34:19.254779100 CEST	49712	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:19.254785061 CEST	443	49712	184.28.90.27	192.168.2.6
May 28, 2024 00:34:19.309437037 CEST	49713	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:19.309452057 CEST	443	49713	184.28.90.27	192.168.2.6
May 28, 2024 00:34:19.309693098 CEST	49713	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:19.310208082 CEST	49713	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:19.310218096 CEST	443	49713	184.28.90.27	192.168.2.6
May 28, 2024 00:34:19.962519884 CEST	443	49713	184.28.90.27	192.168.2.6
May 28, 2024 00:34:19.962601900 CEST	49713	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:19.964066982 CEST	49713	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:19.964073896 CEST	443	49713	184.28.90.27	192.168.2.6
May 28, 2024 00:34:19.964392900 CEST	443	49713	184.28.90.27	192.168.2.6
May 28, 2024 00:34:19.965996981 CEST	49713	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:20.010498047 CEST	443	49713	184.28.90.27	192.168.2.6
May 28, 2024 00:34:20.241496086 CEST	443	49713	184.28.90.27	192.168.2.6
May 28, 2024 00:34:20.241559029 CEST	443	49713	184.28.90.27	192.168.2.6
May 28, 2024 00:34:20.241693020 CEST	49713	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:20.245748997 CEST	49713	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:20.245759010 CEST	443	49713	184.28.90.27	192.168.2.6
May 28, 2024 00:34:20.245871067 CEST	49713	443	192.168.2.6	184.28.90.27
May 28, 2024 00:34:20.245877028 CEST	443	49713	184.28.90.27	192.168.2.6
May 28, 2024 00:34:20.441428900 CEST	443	49698	173.222.162.64	192.168.2.6
May 28, 2024 00:34:20.441534042 CEST	49698	443	192.168.2.6	173.222.162.64
May 28, 2024 00:34:26.257014990 CEST	80	49705	217.160.0.148	192.168.2.6
May 28, 2024 00:34:26.257277966 CEST	49705	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:27.974838972 CEST	49705	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:27.982350111 CEST	80	49705	217.160.0.148	192.168.2.6
May 28, 2024 00:34:28.457968950 CEST	443	49711	142.250.186.100	192.168.2.6
May 28, 2024 00:34:28.458138943 CEST	443	49711	142.250.186.100	192.168.2.6
May 28, 2024 00:34:28.458213091 CEST	49711	443	192.168.2.6	142.250.186.100
May 28, 2024 00:34:29.998693943 CEST	49711	443	192.168.2.6	142.250.186.100
May 28, 2024 00:34:29.998724937 CEST	443	49711	142.250.186.100	192.168.2.6
May 28, 2024 00:34:32.376022100 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:32.378783941 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:32.867505074 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:32.867682934 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:32.988459110 CEST	49709	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:32.988735914 CEST	49704	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:32.993522882 CEST	80	49709	217.160.0.148	192.168.2.6
May 28, 2024 00:34:32.993655920 CEST	80	49704	217.160.0.148	192.168.2.6
May 28, 2024 00:34:33.467848063 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:34:33.467914104 CEST	49710	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:33.995399952 CEST	49710	80	192.168.2.6	217.160.0.148
May 28, 2024 00:34:34.000376940 CEST	80	49710	217.160.0.148	192.168.2.6
May 28, 2024 00:35:17.879373074 CEST	49723	443	192.168.2.6	142.250.186.100
May 28, 2024 00:35:17.879443884 CEST	443	49723	142.250.186.100	192.168.2.6
May 28, 2024 00:35:17.879549980 CEST	49723	443	192.168.2.6	142.250.186.100
May 28, 2024 00:35:17.879899979 CEST	49723	443	192.168.2.6	142.250.186.100
May 28, 2024 00:35:17.879914999 CEST	443	49723	142.250.186.100	192.168.2.6
May 28, 2024 00:35:18.650964975 CEST	443	49723	142.250.186.100	192.168.2.6
May 28, 2024 00:35:18.654664993 CEST	49723	443	192.168.2.6	142.250.186.100
May 28, 2024 00:35:18.654685020 CEST	443	49723	142.250.186.100	192.168.2.6
May 28, 2024 00:35:18.655158997 CEST	443	49723	142.250.186.100	192.168.2.6
May 28, 2024 00:35:18.656137943 CEST	49723	443	192.168.2.6	142.250.186.100
May 28, 2024 00:35:18.656229019 CEST	443	49723	142.250.186.100	192.168.2.6
May 28, 2024 00:35:18.705813885 CEST	49723	443	192.168.2.6	142.250.186.100
May 28, 2024 00:35:28.460077047 CEST	443	49723	142.250.186.100	192.168.2.6
May 28, 2024 00:35:28.460230112 CEST	443	49723	142.250.186.100	192.168.2.6
May 28, 2024 00:35:28.460360050 CEST	49723	443	192.168.2.6	142.250.186.100
May 28, 2024 00:35:29.978959084 CEST	49723	443	192.168.2.6	142.250.186.100
May 28, 2024 00:35:29.978987932 CEST	443	49723	142.250.186.100	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 28, 2024 00:34:13.723529100 CEST	53	58247	1.1.1.1	192.168.2.6
May 28, 2024 00:34:13.748013020 CEST	53	52223	1.1.1.1	192.168.2.6
May 28, 2024 00:34:15.529988050 CEST	60739	53	192.168.2.6	1.1.1.1
May 28, 2024 00:34:15.532193899 CEST	62935	53	192.168.2.6	1.1.1.1
May 28, 2024 00:34:15.637260914 CEST	53	60739	1.1.1.1	192.168.2.6
May 28, 2024 00:34:15.650027990 CEST	53	62935	1.1.1.1	192.168.2.6
May 28, 2024 00:34:16.004091024 CEST	53	49627	1.1.1.1	192.168.2.6
May 28, 2024 00:34:16.563196898 CEST	53	49375	1.1.1.1	192.168.2.6
May 28, 2024 00:34:17.182430983 CEST	54190	53	192.168.2.6	1.1.1.1
May 28, 2024 00:34:17.182980061 CEST	59960	53	192.168.2.6	1.1.1.1
May 28, 2024 00:34:17.204297066 CEST	53	59960	1.1.1.1	192.168.2.6
May 28, 2024 00:34:17.205116987 CEST	53	54190	1.1.1.1	192.168.2.6
May 28, 2024 00:34:17.839595079 CEST	54957	53	192.168.2.6	1.1.1.1
May 28, 2024 00:34:17.839894056 CEST	50986	53	192.168.2.6	1.1.1.1
May 28, 2024 00:34:17.846316099 CEST	53	54957	1.1.1.1	192.168.2.6
May 28, 2024 00:34:17.847130060 CEST	53	50986	1.1.1.1	192.168.2.6
May 28, 2024 00:34:32.996541977 CEST	53	55922	1.1.1.1	192.168.2.6
May 28, 2024 00:34:51.985797882 CEST	53	56853	1.1.1.1	192.168.2.6
May 28, 2024 00:35:13.367527008 CEST	53	50829	1.1.1.1	192.168.2.6
May 28, 2024 00:35:14.605786085 CEST	53	65140	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 28, 2024 00:34:15.529988050 CEST	192.168.2.6	1.1.1.1	0xb5b9	Standard query (0)	comarcal.net	A (IP address)	IN (0x0001)	false
May 28, 2024 00:34:15.532193899 CEST	192.168.2.6	1.1.1.1	0x6c92	Standard query (0)	comarcal.net	65	IN (0x0001)	false
May 28, 2024 00:34:17.182430983 CEST	192.168.2.6	1.1.1.1	0x213f	Standard query (0)	comarcal.net	A (IP address)	IN (0x0001)	false
May 28, 2024 00:34:17.182980061 CEST	192.168.2.6	1.1.1.1	0xa2a7	Standard query (0)	comarcal.net	65	IN (0x0001)	false
May 28, 2024 00:34:17.839595079 CEST	192.168.2.6	1.1.1.1	0x1c2b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 28, 2024 00:34:17.839894056 CEST	192.168.2.6	1.1.1.1	0xbca4	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 28, 2024 00:34:15.637260914 CEST	1.1.1.1	192.168.2.6	0xb5b9	No error (0)	comarcal.net		217.160.0.148	A (IP address)	IN (0x0001)	false
May 28, 2024 00:34:17.205116987 CEST	1.1.1.1	192.168.2.6	0x213f	No error (0)	comarcal.net		217.160.0.148	A (IP address)	IN (0x0001)	false
May 28, 2024 00:34:17.846316099 CEST	1.1.1.1	192.168.2.6	0x1c2b	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
May 28, 2024 00:34:17.847130060 CEST	1.1.1.1	192.168.2.6	0xbca4	No error (0)	www.google.com			65	IN (0x0001)	false
May 28, 2024 00:34:30.385684013 CEST	1.1.1.1	192.168.2.6	0xda2a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:34:30.385684013 CEST	1.1.1.1	192.168.2.6	0xda2a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 00:34:44.531711102 CEST	1.1.1.1	192.168.2.6	0x2a97	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:34:44.531711102 CEST	1.1.1.1	192.168.2.6	0x2a97	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 00:35:07.060370922 CEST	1.1.1.1	192.168.2.6	0x6421	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:35:07.060370922 CEST	1.1.1.1	192.168.2.6	0x6421	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 28, 2024 00:35:26.636049032 CEST	1.1.1.1	192.168.2.6	0xd81b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 28, 2024 00:35:26.636049032 CEST	1.1.1.1	192.168.2.6	0xd81b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

comarcal.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49704	217.160.0.148	80	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 00:34:15.655906916 CEST	434	OUT	GET /verify/ HTTP/1.1 Host: comarcal.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 28, 2024 00:34:16.486511946 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=15 Date: Mon, 27 May 2024 22:34:16 GMT Server: Apache Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Set-Cookie: PHPSESSID=4aecbc47a59987620c2b092501546f81; path=/ Content-Encoding: gzip Data Raw: 34 31 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 a5 56 eb 6f db 36 10 ff ec 00 f9 1f 2e 0c 96 a6 40 25 f9 91 87 a7 58 06 ba 38 43 03 74 6d b0 79 d8 fa 91 92 28 89 88 44 6a 14 15 27 2d fa bf ef 4e af 24 5d 12 18 8b 6d 59 e2 f1 5e bc fb dd 9d 76 77 16 7b ab cf e7 eb 2f 57 17 90 d9 22 87 ab 3f 7f f9 78 79 0e cc f1 bc bf 66 e7 9e b7 5a af e0 c3 fa b7 8f 70 e4 8e 27 b0 36 5c 55 d2 4a ad 78 ee 79 17 9f 18 b0 cc da d2 f7 bc cd 66 e3 6e 66 ae 36 a9 b7 fe dd 23 55 47 5e ae 75 25 dc d8 c6 6c b9 bb b3 20 1a dd 0b 61 39 da b2 a5 23 fe a9 e5 4d c0 22 ad ac 50 d6 b1 77 a5 60 d0 ad 02 66 c5 ad 6d 14 9d 45 19 37 95 b0 41 6d 13 67 ce c0 6b b4 09 1e e3 1d 60 61 a5 cd c5 52 1e ac 79 7d 56 2b 51 c1 f9 81 2e 64 64 b4 3a 53 4a 44 76 e1 b5 1c 00 68 3c 97 ea 1a 8c c8 03 26 d1 10 83 cc 88 24 60 ae 27 8b d4 4b f8 0d 11 5d fc 23 87 91 bb b2 77 a8 7a 77 c7 0d ad 82 6f 64 2d e4 d1 75 6a 74 ad 62 1f f6 67 21 17 e2 f4 ec 31 dd 91 05 4f 85 0f ce 46 84 d7 d2 3a 68 51 70 e3 a4 86 c7 12 4f 79 68 75 f9 ae 17 c5 87 f1 3c 7a fb 9c 86 42 7f [TRUNCATED] Data Ascii: 418Vo6.@%X8Ctmy(Dj'-N$]mY^vw{/W"?xyfZp'6\UJxyfnf6#UG^u%l a9#M"Pw`fmE7Amgk`aRy}V+Q.dd:SJDvh<&$`'K]#wzwod-ujtbg!1OF:hQpOyhu<zB}xiBm.<yPXUW>u(OH,o8l0)ok0%9'\|xo$rsm0IW3Q8ENoxjZ\|t.c$'y6"S%0GP3}#Sq& nF<,T,\|Ox!n5%bQ&dYMG'&L0 jMYO~:[qE@w62O\|'PkRaF3icBQ]J_"#^p9k;"7C=h}[A#{GK+(UAK{6ZH?%]V2/ybD\JBhM"B Q(e#`e.r/w"Lg143.`W
May 28, 2024 00:34:16.486558914 CEST	222	IN	Data Raw: 9c a8 06 be e8 da c0 45 63 e8 a1 13 8d 4b 2f b8 56 62 5c 36 d8 8b 7b ef ee d7 8f 1c bc 1a d8 3a ff 88 0f e7 77 1b d6 6d dd 1b b4 a0 87 e8 93 d7 38 47 39 a7 28 8e ba 80 b5 06 aa 3a 2c a4 75 31 0d 6d d4 da 35 83 1b 9e d7 18 9f 3f 64 aa e0 12 67 7a Data Ascii: EcK/Vb\6{:wm8G9(:,u1m5?dgz6RxZhhU+\{fm@ZRSuQ-D-["dN)R+TX@m?<pL<m.s8Di_0
May 28, 2024 00:34:16.519567013 CEST	434	OUT	GET /verify/img/bg1.png HTTP/1.1 Host: comarcal.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://comarcal.net/verify/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4aecbc47a59987620c2b092501546f81
May 28, 2024 00:34:16.724005938 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 190918 Connection: keep-alive Keep-Alive: timeout=15 Date: Mon, 27 May 2024 22:34:16 GMT Server: Apache Last-Modified: Thu, 05 May 2016 10:20:06 GMT ETag: "2e9c6-53215afa3c180" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 51 00 00 02 e8 08 06 00 00 00 71 82 b5 e0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 ff a5 49 44 41 54 78 5e ec 9d 09 60 54 d5 d9 fe df c9 32 93 95 2d a0 26 5a 89 d5 06 6d c1 5a a3 6d 83 f6 03 6c 05 6c 41 5b d0 af 80 7e 05 ec a7 f8 ff 14 5a 01 5b c4 56 c4 aa 50 15 5a 01 5b d1 96 a5 15 42 ab a1 55 70 8b ad 42 ab e0 16 ab 06 95 04 81 b0 25 2c 49 20 99 2c 33 93 65 fe cf 7b 93 1b 27 c3 24 b3 64 b2 4c f2 1c 3b 4d c8 dc 7b ee 39 bf 73 ee 9d 3b cf 7d ce fb 5a 66 cc 98 e1 16 16 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 9f 04 a2 c8 85 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 a0 6d 02 14 51 39 3b 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 a0 1d 02 14 51 39 3d 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 [TRUNCATED] Data Ascii: PNGIHDRQqsRGBgAMAapHYs+IDATx^`T2-&ZmZmllA[~Z[VPZ[BUpB%,I ,3e{'$dL;M{9s;}Zf HHHHHHHHHHmQ9;HHHHHHHHHHQ9=HHHHHHHHHH"FNq/ >B"jhvHHHHHHHHH 4QCHHHHHHHHH}dM PD" #(f7#0x`,MlnE$@$@$@$@$@$@$@$PDCJsW^)555HHHHHHHHz9\|$$$Ejy7[zQ{Ek(mHHHHHHHH}`Et)AA\.T)3fT>M@_}S-7\|N+xOW7.YHHHHHHH ^n{\|{[Qd{"=qTN!nS{j. M
May 28, 2024 00:34:16.724040985 CEST	224	IN	Data Raw: 0d 1b 26 6e b7 5b 6a 6b 6b e5 d0 a1 43 81 62 e5 76 9d 48 40 e7 78 4a 4a 8a 31 1e be 6e 90 cc f7 cb ca ca 18 ba a2 13 c7 21 d8 aa cd 07 39 7a 63 cb 90 22 c1 d2 eb fc ed f5 cb c8 17 be f0 05 f1 75 de e8 c3 37 1d 33 ef 71 6b eb ef e1 68 ed 82 05 0b Data Ascii: &n[jkkCbvH@xJJ1n!9zc"u73qkh}CTj<t%Y1)+EN*Cs<=FE=8^gQgJ{?\|Z}}k~kbg/zc'$`&JMMLeeS
May 28, 2024 00:34:16.724097013 CEST	1236	IN	Data Raw: 8a 8a a0 f7 ed cd 3b e8 07 f0 2f 7e f1 0b 19 33 66 8c e8 97 45 fd a9 9c 77 ed da d5 9b bb 1d 11 7d 9b 33 67 8e 7c ff fb df 17 9d bb 7b f7 ee 3d ad cd ff fb bf ff 2b 37 dc 70 83 21 7c eb dc 66 09 3f 01 7d ea ff d0 43 0f 19 37 ae 7a ed d0 9b d6 db Data Ascii: ;/~3fEw}3g\|{=+7p!\|f?}C7znMMfW@_BncPDt:yGO;oT^x2D~P~uv=?s88z5u]gz1~v<XQN>:vZ~1=T/~Z;1=
May 28, 2024 00:34:16.724148035 CEST	1236	IN	Data Raw: d7 03 d6 4c 02 3d 9f 00 45 d4 9e 3f 46 6c 61 18 08 a8 38 c7 12 3e 02 ba 8c 5f dd 8c 2a bc 5c 7b ed b5 a2 e2 a8 59 cc 44 5c fa 6f 75 67 e9 f2 48 33 26 9c de fc 0c 1d 3a d4 f8 db ed b7 df 6e 38 4c f4 4b bf 29 88 9a 4e 56 bd 01 53 41 62 e5 ca 95 46 Data Ascii: L=E?Fla8>_*\{YD\ougH3&:n8LK)NVSAbFz7`oau[N@szs7/".c%{:6[elh"cTf<nmL`M9f.=r~yUyy\|."nn~zS
May 28, 2024 00:34:16.724199057 CEST	1236	IN	Data Raw: f7 f4 c1 94 f7 36 8c f5 19 da 58 84 63 2f cf 6b 94 8e 83 a7 a9 c1 bc bf d3 73 49 cf 2b f3 a5 e7 97 39 de fa d9 a6 f7 9b ba aa 82 61 9c 02 1b 11 e5 ac 82 a7 3a b1 f5 a1 ac de 9f 07 bb 42 41 c7 cd d7 43 77 1d 0f ef b8 e0 de f7 93 e6 bf cd 84 9a e6 Data Ascii: 6Xc/ksI+9a:BACwjy)I3sZHwO4%OSLU!s^-6%G\|!wL32.)r)\~Qq\_E_D;~hfcu<O3f_c?
May 28, 2024 00:34:16.724248886 CEST	1236	IN	Data Raw: 4b 6b 02 ca 51 39 99 fc bc ff ed 8b 57 5b db e8 f9 a6 e7 83 7e d9 d0 f1 ab a8 a8 30 c6 41 c7 27 36 36 d6 18 07 3d d6 9f fe f4 a7 96 b1 d0 2f b7 fa f2 0e cb e0 59 97 3a 0f 74 4c cd 84 54 7a fc 11 23 46 18 f5 bd f3 ce 3b 1c d2 76 08 98 e7 cf b6 6d Data Ascii: KkQ9W[~0A'66=/Y:tLTz#F;vmZg~ezsQ@uQ[iKm;s3_,=sBqm333sO/MG*n{yAkk(k=O:8`!cE?.bC o>3_z
May 28, 2024 00:34:16.724283934 CEST	1236	IN	Data Raw: 00 09 90 00 09 90 00 09 90 00 09 74 39 01 8a a8 5d 8e 9c 07 24 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 88 24 02 14 51 23 69 b4 d8 56 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 Data Ascii: t9]$ $Q#iV .'@$@$@$@$@$@$@$@$@$@D"j$J$@$@$@$@$@$@$@$@$(v9rHHHHHHHHH PDb[IHHHHHHHHE.G
May 28, 2024 00:34:16.724324942 CEST	1236	IN	Data Raw: 01 12 20 01 12 20 01 12 20 01 12 20 01 12 e8 1e 02 14 51 bb 87 3b 8f 4a 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 10 21 04 28 a2 46 c8 40 b1 99 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 Data Ascii: Q;J$@$@$@$@$@$@$@$@$!(F@$@$@$@$@$@$@$@$@$@C"jpQIHHHHHHHH"E(6HHHHHHHHH{PD<*@!ftG%
May 28, 2024 00:34:16.724359035 CEST	1236	IN	Data Raw: 48 80 04 48 80 04 48 80 04 48 80 04 3a 4c 80 22 6a 87 11 b2 82 de 44 40 c5 0b 4d ea a2 45 c5 3b 75 89 76 66 51 01 64 fb f6 ed c6 d2 74 3d b6 26 92 61 f9 9c 80 c6 89 7c ff fd f7 8d 3f e8 b8 7c f5 ab 5f 6d 11 99 75 7c 28 20 71 b6 f4 76 02 ea c0 be Data Ascii: HHHH:L"jD@ME;uvfQdt=&a\|?\|_mu\|( qv~+IKK3Mc1~ro@ @GE_Z45H`R#F:wd]_#Wh.h*@_ rJ;vlK_\|E#Y>
May 28, 2024 00:34:16.724391937 CEST	1236	IN	Data Raw: be a7 ac 9f 7f fe 79 a9 ad ad 0d 77 13 7a 4d 7d ba 9c ff f2 cb 2f 37 fa a3 02 7e 5e 5e 5e 97 0b f9 bd 06 26 3b 42 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 6d 10 a0 88 ca a9 d1 e7 09 98 8e 47 15 22 06 0e 1c d8 c2 43 05 bc 2f 7f f9 cb c6 bf Data Ascii: ywzM}/7~^^^&;B$@$@$@$@$@mG"C/UPyuE\p1>p_Ty".73>lWLutz[EnuRmkuA>7w\K/7,W6W4@vv!\RmFv==Aw2Q6_(eYMv
May 28, 2024 00:34:17.172713041 CEST	438	OUT	GET /verify/img/favicon.ico HTTP/1.1 Host: comarcal.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://comarcal.net/verify/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4aecbc47a59987620c2b092501546f81
May 28, 2024 00:34:17.376245022 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 9062 Connection: keep-alive Keep-Alive: timeout=15 Date: Mon, 27 May 2024 22:34:17 GMT Server: Apache Last-Modified: Mon, 19 Jan 2015 04:27:26 GMT ETag: "2366-50cf9bd4ec780" Accept-Ranges: bytes Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de de de 00 c6 c6 c6 00 f6 f6 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49709	217.160.0.148	80	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 00:34:17.212584972 CEST	335	OUT	GET /verify/img/bg1.png HTTP/1.1 Host: comarcal.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4aecbc47a59987620c2b092501546f81
May 28, 2024 00:34:17.870016098 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 190918 Connection: keep-alive Keep-Alive: timeout=15 Date: Mon, 27 May 2024 22:34:17 GMT Server: Apache Last-Modified: Thu, 05 May 2016 10:20:06 GMT ETag: "2e9c6-53215afa3c180" Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 51 00 00 02 e8 08 06 00 00 00 71 82 b5 e0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 ff a5 49 44 41 54 78 5e ec 9d 09 60 54 d5 d9 fe df c9 32 93 95 2d a0 26 5a 89 d5 06 6d c1 5a a3 6d 83 f6 03 6c 05 6c 41 5b d0 af 80 7e 05 ec a7 f8 ff 14 5a 01 5b c4 56 c4 aa 50 15 5a 01 5b d1 96 a5 15 42 ab a1 55 70 8b ad 42 ab e0 16 ab 06 95 04 81 b0 25 2c 49 20 99 2c 33 93 65 fe cf 7b 93 1b 27 c3 24 b3 64 b2 4c f2 1c 3b 4d c8 dc 7b ee 39 bf 73 ee 9d 3b cf 7d ce fb 5a 66 cc 98 e1 16 16 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 12 20 01 9f 04 a2 c8 85 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 a0 6d 02 14 51 39 3b 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 a0 1d 02 14 51 39 3d 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 [TRUNCATED] Data Ascii: PNGIHDRQqsRGBgAMAapHYs+IDATx^`T2-&ZmZmllA[~Z[VPZ[BUpB%,I ,3e{'$dL;M{9s;}Zf HHHHHHHHHHmQ9;HHHHHHHHHHQ9=HHHHHHHHHH"FNq/ >B"jhvHHHHHHHHH 4QCHHHHHHHHH}dM PD" #(f7#0x`,MlnE$@$@$@$@$@$@$@$PDCJsW^)555HHHHHHHHz9\|$$$Ejy7[zQ{Ek(mHHHHHHHH}`Et)AA\.T)3fT>M@_}S-7\|N+xOW7.YHHHHHHH ^n{\|{[Qd{"=qTN!nS{j. M
May 28, 2024 00:34:17.870038986 CEST	224	IN	Data Raw: 0d 1b 26 6e b7 5b 6a 6b 6b e5 d0 a1 43 81 62 e5 76 9d 48 40 e7 78 4a 4a 8a 31 1e be 6e 90 cc f7 cb ca ca 18 ba a2 13 c7 21 d8 aa cd 07 39 7a 63 cb 90 22 c1 d2 eb fc ed f5 cb c8 17 be f0 05 f1 75 de e8 c3 37 1d 33 ef 71 6b eb ef e1 68 ed 82 05 0b Data Ascii: &n[jkkCbvH@xJJ1n!9zc"u73qkh}CTj<t%Y1)+EN*Cs<=FE=8^gQgJ{?\|Z}}k~kbg/zc'$`&JMMLeeS
May 28, 2024 00:34:17.870057106 CEST	1236	IN	Data Raw: 8a 8a a0 f7 ed cd 3b e8 07 f0 2f 7e f1 0b 19 33 66 8c e8 97 45 fd a9 9c 77 ed da d5 9b bb 1d 11 7d 9b 33 67 8e 7c ff fb df 17 9d bb 7b f7 ee 3d ad cd ff fb bf ff 2b 37 dc 70 83 21 7c eb dc 66 09 3f 01 7d ea ff d0 43 0f 19 37 ae 7a ed d0 9b d6 db Data Ascii: ;/~3fEw}3g\|{=+7p!\|f?}C7znMMfW@_BncPDt:yGO;oT^x2D~P~uv=?s88z5u]gz1~v<XQN>:vZ~1=T/~Z;1=
May 28, 2024 00:34:17.870075941 CEST	1236	IN	Data Raw: d7 03 d6 4c 02 3d 9f 00 45 d4 9e 3f 46 6c 61 18 08 a8 38 c7 12 3e 02 ba 8c 5f dd 8c 2a bc 5c 7b ed b5 a2 e2 a8 59 cc 44 5c fa 6f 75 67 e9 f2 48 33 26 9c de fc 0c 1d 3a d4 f8 db ed b7 df 6e 38 4c f4 4b bf 29 88 9a 4e 56 bd 01 53 41 62 e5 ca 95 46 Data Ascii: L=E?Fla8>_*\{YD\ougH3&:n8LK)NVSAbFz7`oau[N@szs7/".c%{:6[elh"cTf<nmL`M9f.=r~yUyy\|."nn~zS
May 28, 2024 00:34:17.870091915 CEST	448	IN	Data Raw: f7 f4 c1 94 f7 36 8c f5 19 da 58 84 63 2f cf 6b 94 8e 83 a7 a9 c1 bc bf d3 73 49 cf 2b f3 a5 e7 97 39 de fa d9 a6 f7 9b ba aa 82 61 9c 02 1b 11 e5 ac 82 a7 3a b1 f5 a1 ac de 9f 07 bb 42 41 c7 cd d7 43 77 1d 0f ef b8 e0 de f7 93 e6 bf cd 84 9a e6 Data Ascii: 6Xc/ksI+9a:BACwjy)I3sZHwO4%OSLU!s^-6%G\|!wL32.)r)\~Qq\_E_D;~hfcu<O3f_c?
May 28, 2024 00:34:17.870110989 CEST	1236	IN	Data Raw: b2 79 d3 e4 29 cc 79 b6 40 6f 8c f4 e9 b5 f7 fb e6 17 a3 b6 42 2e 98 37 71 2a 50 98 e2 83 f9 d3 8c 23 d8 b5 3d 8d ac a3 e9 dc 37 33 6f ea 97 10 cf 2f 30 9e 82 9b de 48 29 57 73 69 b0 f7 8d ac fe 5b dd 22 fe 6e 9e 23 8b 4e e4 b5 d6 3c 1f bc 43 8d Data Ascii: y)y@oB.7q*P#=73o/0H)Wsi["n#N<Cc#s.XX?6::]sg:0UViN>zFzG+$O:wwP_yyUg`V+{7_wM=xgT4{(s
May 28, 2024 00:34:17.870126963 CEST	1236	IN	Data Raw: 80 04 2c 33 66 cc 70 13 03 09 f4 15 02 7a 63 16 ec d3 72 fd 90 f1 4e e2 d2 57 78 b5 d7 4f 75 91 9a 89 69 cc 0f 6a ef ed cd 8c b9 2a 26 e8 93 6f 2d ea 60 d5 fd cc 6c 90 de 4e 2e 7d 52 aa 37 d8 de cb fb cd 44 52 ba af de 08 ea 31 cd 3a 39 1e ad 05 Data Ascii: ,3fpzcrNWxOuij*&o-`lN.}R7DR1:9ecO3vz77})ksmNQ7eCzmk_l<_X2q^Q.,m<&`?wg:[H=<?s:txG>9:\|{)k31
May 28, 2024 00:34:17.870145082 CEST	1236	IN	Data Raw: 40 02 24 d0 3d 04 28 a2 76 0f 77 1e 95 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 20 42 08 50 44 8d 90 81 62 33 49 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 48 80 04 ba 87 00 45 d4 ee Data Ascii: @$=(vwHHHHHHHHH BPDb3IHHHHHHHHED2Pl&@=yT !@5B$ Q;J$@$@$@$@
May 28, 2024 00:34:17.870162010 CEST	1236	IN	Data Raw: 40 e0 c9 27 9f 94 ec ec 6c a3 2b 67 9e 79 a6 fc fa d7 bf 96 a1 43 87 76 59 d7 6a 6a 6a 64 e9 d2 a5 f2 ef 7f ff bb db da d0 65 9d 0d e1 40 6f bf fd b6 fc e2 17 bf 90 fa fa 7a 19 36 6c 98 3c f0 c0 03 32 78 f0 e0 10 6a e2 2e a1 12 d0 e5 fc cb 96 2d Data Ascii: @'l+gyCvYjjjde@oz6l<2xj.-FoK.+;v~;yI\\v>WCRRR"G'ry]RSS2d0%oq@s v?]
May 28, 2024 00:34:17.870181084 CEST	1236	IN	Data Raw: 59 fb ba d8 dc 19 73 93 75 f6 6c 02 ea 4a bd e9 a6 9b 8c 18 ca 66 59 bf 7e bd 7c f8 e1 87 3d bb e1 6c 1d 09 90 00 09 90 00 09 90 00 09 90 00 09 90 00 09 44 30 01 8a a8 11 3c 78 6c 7a 78 08 54 54 54 b4 ca f4 9e 9c 9c 6c c4 de d4 a2 2e 51 75 8b 76 Data Ascii: YsulJfY~\|=lD0<xlzxTTTl.QuvF9p@HKUH2^Zt9&>hI.]s?]EV.3o[U?lYe6n(z=c! ?g#K.MkiR`(o:F$[oett
May 28, 2024 00:34:17.875099897 CEST	1236	IN	Data Raw: 7b 5a 7b 82 e9 94 8e 91 b2 50 26 ca 46 e7 af 3a 8a 95 9b f2 f3 66 a9 ef 99 73 5c 97 a8 eb be 6f bc f1 06 97 f8 fb 80 7e ee b9 e7 8a be b4 68 9c 67 0d 91 c0 42 02 24 40 02 24 40 02 24 40 02 24 40 02 24 40 02 24 10 3e 02 14 51 c3 c7 92 35 45 20 01 Data Ascii: {Z{P&F:fs\o~hgB$@$@$@$@$@$>Q5E "jeqL;L2++KUiL,=%mKK8 zz=sj;E;v}~'FU,=\|{MugUW]%<lX).ZH:'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49710	217.160.0.148	80	5944	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 28, 2024 00:34:17.838699102 CEST	339	OUT	GET /verify/img/favicon.ico HTTP/1.1 Host: comarcal.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=4aecbc47a59987620c2b092501546f81
May 28, 2024 00:34:18.469217062 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/vnd.microsoft.icon Content-Length: 9062 Connection: keep-alive Keep-Alive: timeout=15 Date: Mon, 27 May 2024 22:34:18 GMT Server: Apache Last-Modified: Mon, 19 Jan 2015 04:27:26 GMT ETag: "2366-50cf9bd4ec780" Accept-Ranges: bytes Data Raw: 00 00 01 00 04 00 20 20 00 00 01 00 08 00 a8 08 00 00 46 00 00 00 10 10 00 00 01 00 08 00 68 05 00 00 ee 08 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 56 0e 00 00 10 10 00 00 01 00 20 00 68 04 00 00 fe 1e 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 42 42 42 00 9e 9e 9e 00 72 72 72 00 ce ce ce 00 5a 5a 5a 00 b6 b6 b6 00 e6 e6 e6 00 92 92 92 00 4e 4e 4e 00 7e 7e 7e 00 66 66 66 00 aa aa aa 00 da da da 00 c2 c2 c2 00 f2 f2 f2 00 4a 4a 4a 00 a6 a6 a6 00 7a 7a 7a 00 62 62 62 00 56 56 56 00 86 86 86 00 6e 6e 6e 00 e2 e2 e2 00 ca ca ca 00 46 46 46 00 a2 a2 a2 00 76 76 76 00 d2 d2 d2 00 5e 5e 5e 00 ba ba ba 00 ea ea ea 00 9a 9a 9a 00 52 52 52 00 82 82 82 00 6a 6a 6a 00 ae ae ae 00 de de de 00 c6 c6 c6 00 f6 f6 f6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: Fh V h( @BBBrrrZZZNNN~~~fffJJJzzzbbbVVVnnnFFFvvv^^^RRRjjj
May 28, 2024 00:34:18.469285011 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''
May 28, 2024 00:34:18.469320059 CEST	1236	IN	Data Raw: fe 00 00 3f fe 00 00 3f fe 00 00 3f fc 00 00 7f fc 00 00 ff fc 00 01 ff fc 00 01 ff fc 00 01 ff fc 00 00 ff fc 00 00 ff fe 00 00 7f fe 00 00 3f ff 00 00 7f ff c1 c0 ff ff ff 1f ff ff ff 0f ff ff ff 07 ff ff ff 87 ff ff ff 87 ff ff ff e3 ff ff ff Data Ascii: ????( FFFrrr^^^RRRjjjNNNzzzfffZZZJJJvvvbbb
May 28, 2024 00:34:18.469353914 CEST	1236	IN	Data Raw: 21 21 07 00 04 12 12 12 12 12 12 12 04 1a 21 21 21 21 1f 0e 19 0a 0a 0a 0a 0a 0a 12 03 21 21 21 21 21 20 0e 12 0a 0a 0a 0a 0a 0a 06 21 21 21 21 21 21 01 15 19 1e 1e 1e 1e 1e 1e 13 21 21 21 21 21 21 18 00 14 0a 02 02 1e 1e 1e 02 09 21 21 21 21 21 Data Ascii: !!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!{??(
May 28, 2024 00:34:18.469387054 CEST	1236	IN	Data Raw: 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 61 61 61 ff 60 60 60 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: aaaaaaaaaaaaaaaaaaaaaaaaaaa```pBBBWWWaaabbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb``` :::0LLL^^^cccccc
May 28, 2024 00:34:18.469422102 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 3c 3c 3c 80 4b 4b 4b ff 63 63 63 ff 6f 6f 6f ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 70 70 70 ff 6a 6a 6a 30 00 00 Data Ascii: <<<KKKcccooopppppppppppppppppppppppppppppppppppppppjjj0:::0DDD[[[mmmrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrr
May 28, 2024 00:34:18.469460011 CEST	776	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @@@0DDDMMMYYYxxx1@@@`DDDEEE
May 28, 2024 00:34:18.557912111 CEST	1148	IN	Data Raw: ff ff 83 ff ff ff e3 ff ff ff ff ff ff ff ff ff ff ff ff ff 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( 3[[[8PPP0===PPPP[[[\\\\\\\\\]]]\\\

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49712	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:34:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-27 22:34:19 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=149695 Date: Mon, 27 May 2024 22:34:19 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49713	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 22:34:19 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-27 22:34:20 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=149777 Date: Mon, 27 May 2024 22:34:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-27 22:34:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 7012, Parent PID: 5996

General

Target ID:	0
Start time:	18:34:09
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5944, Parent PID: 7012

General

Target ID:	2
Start time:	18:34:12
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2080,i,2805311417984072978,158218972349156477,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4148, Parent PID: 5996

General

Target ID:	3
Start time:	18:34:14
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://comarcal.net/verify/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly