Edit tour

Windows Analysis Report
https://mail.fnbo-in.selfip.com/x/otp.html

Overview

General Information

Sample URL:	https://mail.fnbo-in.selfip.com/x/otp.html
Analysis ID:	1448779
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Multi AV Scanner detection for submitted file

Detected non-DNS traffic on DNS port

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2020,i,13229865567807096612,8486665967359162013,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.fnbo-in.selfip.com/x/otp.html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://mail.fnbo-in.selfip.com/x/otp.html	Avira URL Cloud: detection malicious, Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/otp.html	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://mail.fnbo-in.selfip.com/x/img/BANGOR.png	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/opensans.css	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/angular.css	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css	Avira URL Cloud: Label: phishing
Source: https://mail.fnbo-in.selfip.com/x/css/material-icons.css	Avira URL Cloud: Label: phishing

Multi AV Scanner detection for submitted file

Source: https://mail.fnbo-in.selfip.com/x/otp.html

Virustotal: Detection: 16%

Perma Link

Phishing

AI detected phishing page

Source: https://mail.fnbo-in.selfip.com/x/otp.html

LLM: Score: 9 brands: FNBO Reasons: The URL 'mail.fnbo-in.selfip.com' is highly suspicious as it does not match the legitimate domain 'fnbo.com' associated with the brand FNBO. The use of 'selfip.com' is a common tactic in phishing attacks to create subdomains that appear legitimate. The page contains a login form, which is a common element in phishing sites. The overall design mimics a legitimate FNBO page, which is a social engineering technique to deceive users. DOM: 0.0.pages.csv

Source: https://mail.fnbo-in.selfip.com/x/otp.html	HTTP Parser: No favicon
Source: https://mail.fnbo-in.selfip.com/OnlineBanking/	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49757 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49727 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.9:49735 -> 1.1.1.1:53

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49757 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /x/otp.html HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/opensans.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/otp.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aperture/aperture.js HTTP/1.1Host: cdn.perfdrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8hj-QO5R4_ig_UM_6BTEvsUm0pVZPSI45Qh8HhMXpcfZ0-H_jz5gjdjFcqhl8Q2uekFcLFceEEhLFJKexQwJQYE-YZPPmEfmF2tz8ibp1V0Knp5fHHCZZeU1&t=637356698800000000 HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js HTTP/1.1Host: cdn.appdynamics.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mail.fnbo-in.selfip.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/material-icons.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/otp.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/angular.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/otp.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/css/RadDockableObject.css HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mail.fnbo-in.selfip.com/x/otp.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /x/img/BANGOR.png HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.fnbo-in.selfip.com/x/otp.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.fnbo-in.selfip.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://mail.fnbo-in.selfip.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
Source: global traffic	HTTP traffic detected: GET /x/img/BANGOR.png HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mail.fnbo-in.selfip.com/x/otp.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1Host: olb.sccu.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mail.fnbo-in.selfip.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1Host: mpsnare.iesnare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://mail.fnbo-in.selfip.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1Host: olb.sccu.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8; __uzmb=1716977544; __uzmd=1716977544; __uzma=50147c69-0a62-49eb-9458-b8b72f833e41; __uzme=2633; __uzmc=672591034577; __uzmf=7f60005d36fe59-a3e9-4876-a0b6-baf3b9c1541d17169775448300-c363b53d369801e010; uzmx=7f9000b884d52e-1f2e-4556-9ce2-958eb8518fab1-17169775448300-d4013ce995787a8110; ADRUM_BTa=R:0\|g:a691adb1-2988-4805-abb7-24ab13e0da54\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; SameSite=None; ADRUM_BT1=R:0\|i:371912\|e:6
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/ HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
Source: global traffic	HTTP traffic detected: GET /OnlineBanking/ HTTP/1.1Host: mail.fnbo-in.selfip.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e

Source: global traffic	DNS traffic detected: DNS query: mail.fnbo-in.selfip.com
Source: global traffic	DNS traffic detected: DNS query: cdn.appdynamics.com
Source: global traffic	DNS traffic detected: DNS query: cdn.perfdrive.com
Source: global traffic	DNS traffic detected: DNS query: olb.sccu.com
Source: global traffic	DNS traffic detected: DNS query: mpsnare.iesnare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 29 May 2024 10:12:26 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 29 May 2024 10:12:33 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 29 May 2024 10:12:44 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: chromecache_84.4.dr	String found in binary or memory: http://code.google.com/p/episodes/
Source: chromecache_84.4.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_85.4.dr	String found in binary or memory: https://cas.avalon.perfdrive.com/jsdata
Source: chromecache_86.4.dr	String found in binary or memory: https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js
Source: chromecache_86.4.dr	String found in binary or memory: https://cdn.perfdrive.com/aperture/aperture.js
Source: chromecache_80.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/59ZRklaO5bWGqF5A9baEERJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_80.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/K88pR3goAWT7BTt32Z01mxJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_80.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/LWCjsQkB6EMdfHrEVqA1KRJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_80.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/RjgO7rYTmqiVp7vzi-Q5URJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_80.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/cJZKeOuBrn4kERxqtaUH3VtXRa8TVwTICgirnJhmVJw.woff2)
Source: chromecache_80.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/u-WUoqrET9fUeobQW7jkRRJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_80.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v13/xozscpT2726on7jbcb_pAhJtnKITppOI_IvcXXDNrsc.woff2)
Source: chromecache_86.4.dr	String found in binary or memory: https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js
Source: chromecache_86.4.dr	String found in binary or memory: https://mpsnare.iesnare.com/time.mp3?nocache=0.22714454500364867
Source: chromecache_86.4.dr	String found in binary or memory: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7
Source: chromecache_86.4.dr	String found in binary or memory: https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2N
Source: chromecache_76.4.dr, chromecache_87.4.dr, chromecache_73.4.dr, chromecache_93.4.dr	String found in binary or memory: https://sketch.com

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49727 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@19/47@16/9

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2020,i,13229865567807096612,8486665967359162013,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.fnbo-in.selfip.com/x/otp.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2020,i,13229865567807096612,8486665967359162013,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.2.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://mail.fnbo-in.selfip.com/x/otp.html	100%	Avira URL Cloud	phishing
https://mail.fnbo-in.selfip.com/x/otp.html	17%	Virustotal		Browse
https://mail.fnbo-in.selfip.com/x/otp.html	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://www.apache.org/licenses/LICENSE-2.0	0%	URL Reputation	safe
http://www.apache.org/licenses/LICENSE-2.0	0%	URL Reputation	safe
https://sketch.com	0%	URL Reputation	safe
http://code.google.com/p/episodes/	0%	URL Reputation	safe
https://ipinfo.io/	0%	URL Reputation	safe
https://mail.fnbo-in.selfip.com/x/img/BANGOR.png	100%	Avira URL Cloud	phishing
https://mail.fnbo-in.selfip.com/x/css/opensans.css	100%	Avira URL Cloud	phishing
https://cdn.perfdrive.com/aperture/aperture.js	0%	Avira URL Cloud	safe
https://mail.fnbo-in.selfip.com/favicon.ico	100%	Avira URL Cloud	phishing
https://cas.avalon.perfdrive.com/jsdata	0%	Avira URL Cloud	safe
https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7	0%	Avira URL Cloud	safe
https://mail.fnbo-in.selfip.com/x/css/angular.css	100%	Avira URL Cloud	phishing
https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css	100%	Avira URL Cloud	phishing
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7	0%	Virustotal		Browse
https://cas.avalon.perfdrive.com/jsdata	0%	Virustotal		Browse
https://cdn.perfdrive.com/aperture/aperture.js	0%	Virustotal		Browse
https://mail.fnbo-in.selfip.com/x/css/material-icons.css	100%	Avira URL Cloud	phishing
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg	0%	Avira URL Cloud	safe
https://mpsnare.iesnare.com/time.mp3?nocache=0.22714454500364867	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2N	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg	0%	Avira URL Cloud	safe
https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js	0%	Virustotal		Browse
https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js	0%	Avira URL Cloud	safe
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cdn.perfdrive.com	130.211.29.114	true	false	unknown
fnbo-in.selfip.com	152.42.220.64	true	true	unknown
cdn.appdynamics.com	13.227.219.85	true	false	unknown
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false	unknown
wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com	54.228.71.178	true	false	unknown
72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net	66.22.0.11	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
mail.fnbo-in.selfip.com	unknown	unknown	true	unknown
mpsnare.iesnare.com	unknown	unknown	false	unknown
olb.sccu.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://mail.fnbo-in.selfip.com/x/img/BANGOR.png	false	Avira URL Cloud: phishing	unknown
https://mail.fnbo-in.selfip.com/OnlineBanking/	false		unknown
https://mail.fnbo-in.selfip.com/x/css/opensans.css	false	Avira URL Cloud: phishing	unknown
https://cdn.perfdrive.com/aperture/aperture.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://mail.fnbo-in.selfip.com/x/otp.html#mainContent	false		unknown
https://mail.fnbo-in.selfip.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js	false	Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ipinfo.io/	false	URL Reputation: safe	unknown
https://mail.fnbo-in.selfip.com/x/otp.html	true		unknown
https://mail.fnbo-in.selfip.com/x/css/angular.css	false	Avira URL Cloud: phishing	unknown
https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css	false	Avira URL Cloud: phishing	unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg	false	Avira URL Cloud: safe	unknown
https://mail.fnbo-in.selfip.com/x/css/material-icons.css	false	Avira URL Cloud: phishing	unknown
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg	false	Avira URL Cloud: safe	unknown
https://mpsnare.iesnare.com/time.mp3?nocache=0.22714454500364867	false	Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff	false	Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg	false	Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg	false	Avira URL Cloud: safe	unknown
https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.apache.org/licenses/LICENSE-2.0	chromecache_84.4.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://sketch.com	chromecache_76.4.dr, chromecache_87.4.dr, chromecache_73.4.dr, chromecache_93.4.dr	false	URL Reputation: safe	unknown
https://cas.avalon.perfdrive.com/jsdata	chromecache_85.4.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://code.google.com/p/episodes/	chromecache_84.4.dr	false	URL Reputation: safe	unknown
https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2N	chromecache_86.4.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
130.211.29.114	cdn.perfdrive.com	United States	15169	GOOGLEUS	false
54.228.71.178	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com	United States	16509	AMAZON-02US	false
152.42.220.64	fnbo-in.selfip.com	United States	81	NCRENUS	true
13.227.219.85	cdn.appdynamics.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
66.22.0.11	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net	United States	48851	RADWAREIL	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.9
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1448779
Start date and time:	2024-05-29 12:11:24 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mail.fnbo-in.selfip.com/x/otp.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@19/47@16/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://mail.fnbo-in.selfip.com/x/otp.html#mainContent Browse: https://mail.fnbo-in.selfip.com/OnlineBanking/ Browse: https://mail.fnbo-in.selfip.com/OnlineBanking/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 217.20.57.18, 142.250.186.163, 172.217.23.110, 108.177.15.84, 34.104.35.123, 142.250.80.42, 142.251.40.170, 142.250.64.74, 142.250.65.170, 172.217.165.138, 142.250.64.106, 142.250.65.234, 142.250.81.234, 142.250.72.106, 142.251.40.138, 142.251.32.106, 142.251.41.10, 142.251.35.170, 142.250.65.202, 142.251.40.234, 142.251.40.106, 13.85.23.86, 192.229.221.95, 52.165.164.15, 13.95.31.18, 216.58.206.67
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://mail.fnbo-in.selfip.com/x/otp.html Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": true, "reasons": [ "The text contains the phrase 'Confirm your Identity'", "The text contains the phrase 'Verification Code'", "The text contains the phrase 'Submit'" ] }
G) fnbo Confirm your Identity For security reason, One-time authentication cMe has been sent to your phone number on file. Verification Enter Code Submit O fnbo AO 2024 FNBO Equal Housing Lender Federally Insured
URL: https://mail.fnbo-in.selfip.com/x/otp.html Model: gpt-4o	```json { "phishing_score": 9, "brands": "FNBO", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "legitmate_domain": "fnbo.com", "reasons": "The URL 'mail.fnbo-in.selfip.com' is highly suspicious as it does not match the legitimate domain 'fnbo.com' associated with the brand FNBO. The use of 'selfip.com' is a common tactic in phishing attacks to create subdomains that appear legitimate. The page contains a login form, which is a common element in phishing sites. The overall design mimics a legitimate FNBO page, which is a social engineering technique to deceive users." }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 09:12:17 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.985784955889857
Encrypted:	false
SSDEEP:	48:8uddToFH5idAKZdA1P4ehwiZUklqehTy+3:8U0JOsy
MD5:	88F8B28B27F3B0A32AC878D5940FF937
SHA1:	265554EC4E9616580E0B35DF1986FBD7C162E82C
SHA-256:	D0F0E272F3CEAA3AD121D1DC85701344055D2904EBCF3FCF5E89582661D8B4CB
SHA-512:	DE555EEF6F266804F80C5C439A56A8D5DB89E84DC1D63C6BEDC012FD729DB6950019157EA6C0C0DFEC5F0F13D0550B9911570B090729EF59535E640960F792B7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....qb........v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.Q....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.Q....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.Q.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.Q...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 09:12:17 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.005001790638463
Encrypted:	false
SSDEEP:	48:8kQddToFH5idAKZdA1+4eh/iZUkAQkqehcy+2:8km04F9Qxy
MD5:	9E412F495F3B71917C094B81244BC60C
SHA1:	DC9E694E1F67D0F396E8129B5AFB14B49129B986
SHA-256:	CD8E9281A34BE5EA377CF627782040A6F2DE91A2548B030DC7AF92A0A8F34D44
SHA-512:	FA95073DDB94A02B138F6E9140E1036696C4C880C17C602DC7F59E1048ACC61E544A35EFED258628B916AAC32E6658D3C8B725C403EA9E69681D3787AE24123D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......{.......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.Q....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.Q....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.Q.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.Q...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.009417457085956
Encrypted:	false
SSDEEP:	48:8TddToVH5idAKZdA1404eh7sFiZUkmgqeh7s6y+BX:8r01Inoy
MD5:	87E0C2D38BBEDEA0205599A9DF30D5F7
SHA1:	33ADBAD44C8190B8C3F9EE91E390B9F16C3DEEB5
SHA-256:	A381A97AA69D5A1342573FF8D3F0A6AB208E6D7284BD57D14BD936605BF65731
SHA-512:	DACDA96FDF953EA5E141CEF91E3FDBEDE991EEEA2C78DFFE65A49BE929B507B26EF13BE5ECCD3ED1DCB0F62D4307D1C12544EB03A2451352C0BDD39DEC37C81F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.Q....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.Q....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.Q.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 09:12:17 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.002600124669377
Encrypted:	false
SSDEEP:	48:8kddToFH5idAKZdA1p4ehDiZUkwqehQy+R:8C0P5iy
MD5:	EC50048DBBC055BD2EF632F809F6D4EE
SHA1:	0E179AE006ACBDD0203A5236AFD3F0FD57F89AB2
SHA-256:	9A4E773974B2F5B75511D8EEFB077D58399BBC5B36F97BCE289359E3B9912D9B
SHA-512:	067EF2725AC949E83146A0616A47288113DA2E5664641B9B9407F206A2E725E9C45FB1E694D217921574EFD9253C5FD041BA22D9A4F221C9687832E8550FDF49
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......u.......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.Q....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.Q....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.Q.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.Q...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 09:12:17 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.990721984216711
Encrypted:	false
SSDEEP:	48:80ddToFH5idAKZdA1X4ehBiZUk1W1qehWy+C:8y0Rb92y
MD5:	0415D88CAC654CC2FF45B78D959554C1
SHA1:	E9543E51C7B1B70C61AEC889124B8677695E78BD
SHA-256:	DC7BFFCB10AFA23B6101B8A8B870488AD8F2D85B85D4E6A3B79A52EC71FDF876
SHA-512:	9B59EE9C5A12F7D0DBDAC4C8719E3134D1341481944C637D3E59A41E114A50BDB3BB30D25CB51C2B0BA8D4650967E69476A386E3259D7DCE752373306EE037CD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..............v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.Q....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.Q....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.Q.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.Q...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 29 09:12:17 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.999899386798065
Encrypted:	false
SSDEEP:	48:8wddToFH5idAKZdA1duTc4ehOuTbbiZUk5OjqehOuTboy+yT+:8G0STcJTbxWOvTboy7T
MD5:	5281DABDD1F5601846E62C5F38CC141C
SHA1:	6C8AAEFAD1FA5F2EC7FD7F05B509E428BB74A758
SHA-256:	E0F24411D18479F9BF68382E4BDC647422937B326E91976F08FDDFB671F56B22
SHA-512:	C46940EDDDE8A0F417DD38057D1A1093FFEF07690AE11027F0D39B5112E1F9ED64D53CD73CE91133473DEB3BE30B14CC51717C1470634AF171E1D24230E23F35
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......l.......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.X.Q....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.Q....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.X.Q....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.X.Q.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.X.Q...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............H8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1612
Entropy (8bit):	5.136846962796849
Encrypted:	false
SSDEEP:	48:cELPKdlm5+LkaSWlt1HV7XLOviiZs5Ae9hL+VO:xPKdkrhWdHV/OviVAKn
MD5:	A87D3850028E2890D5D51853F9BE8EF3
SHA1:	AA4749C12034332819CACBB83E08F4A7F2D9B660
SHA-256:	060AE789E740B1971A4AF9FC229F09C20B571FF070ADFF7A8CD21F70D44CE137
SHA-512:	37F67A32AC679DC6A81A9329CC6DD5F6FC78C5C3C2B4A9FCC95BBED0D4BD1F0A2993548F7230AF14F37AABEC1D1ED5C6A34C0E1FC15080D4407CDAC483C17C8F
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com -->...<title>Wires White</title>...<desc>Created with Sketch.</desc>...<defs>....<path fill="#000000" d="M12,7.86369594 L15,4.93184797 L12,2 L12,3.94888598 C7.58,3.94888598 4,7.46788991 4,11.8125819 C4,13.3558322 4.46,14.7909567 5.24,16 L6.7,14.5648755 C6.25,13.749017 6,12.8053735 6,11.8125819 C6,8.55897772 8.69,5.91480996 12,5.91480996 L12,7.86369594 Z M17.3,9.43512451 C17.74,10.2608126 18,11.1946265 18,12.1874181 C18,15.4410223 15.31,18.08519 12,18.08519 L12,16.1363041 L9,19.068152 L12,22 L12,20.051114 C16.42,20.051114 20,16.5321101 20,12.1874181 C20,10.6441678 19.54,9.20904325 18.76,8 L17.3,9.43512451 Z" id="path-1"></path>...</defs>...<g id="Wires-White" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">....<mask id="mask-2" fill="

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5436
Entropy (8bit):	5.04698143697545
Encrypted:	false
SSDEEP:	96:2aOJvVliYJdxTscd6GegqQpHVO9vS3rVOH/ZVO1PrVnPoEO5C:UJzscEGPHVEv0VIVqpQEO5C
MD5:	1CD135A10368424EE961E4E190265DA4
SHA1:	D9DBA2925D2C69E2B3BA6209526D85A77049B83F
SHA-256:	01D576ECEC7BA742FE2D660D95CF62AD1A05138D1633E7615267DB9DF314565B
SHA-512:	F321B2CF23B53B885A9C1A1DD97FBCD6515CF957631FADE2F5040D8BB292A4D7E12926AAF95D11D1BE186171AAC5243483D42F5EB8CC649B0923881AA61715F4
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/angular.css
Preview:	input[type="text"] {...width: 100%;..}....table {...border: 0;..}....ul {...list-style-type: none;..}.....bulleted-list {...padding-left: 0px;..}.....bulleted-list li {...display: inline-block;...width: 100%;...overflow: visible;...margin: 0;...padding: 0;...list-style: none;...padding-bottom: .7em;..}.....text-left {...text-align: left !important;..}.....accordion-pane-title {...margin-bottom: 12px;...font-size: 16px;..}.....account-header {...font-size: 16px;...margin-bottom: 24px;...padding-left: 30px;..}.....account-summary {...margin-left: -30px;...margin-right: -30px;..}.....account-summary-header {...margin-left: -30px;...background-color: #f5f5f5;...margin-right: -30px;...padding-bottom: 24px;...padding-top: 12px;...padding-left: 15px;...padding-right: 15px;...border-bottom: 1px solid #e5e5e5;...border-top: 1px solid #e5e5e5;..}.....account-summary radio-button-list-item li.laguna-radio-button-list {...border-bottom: 1px solid #E4E4E4; ...text-align: left !important;...padding-

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377)
Category:	downloaded
Size (bytes):	505
Entropy (8bit):	5.954138855714886
Encrypted:	false
SSDEEP:	12:UsMh9D1ksr8QQgUhKAB37TAaX7rDQT2hgbUNA4I:BMN/bQBx7nTQpbUNA4I
MD5:	039DD115AAFF5BAA2F30B688E247AB88
SHA1:	1CD7176BEDF8CF5495DB350984844F0DE71D5D92
SHA-256:	D36B0355AC8B55432CACF86D50B41DF82F76B61805D8EF20941F2DDE04193FB9
SHA-512:	A043D0B2B1F4179B50E55F56F41427C394B18AB76C77A32FFC46D53CA2E6C908968E033D0210C5B9DEED4784BBF665509215C22A9C60FB6FEF6E4C03AA46D46F
Malicious:	false
Reputation:	low
URL:	https://mpsnare.iesnare.com/5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js
Preview:	/. Copyright(c) 2022 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c./.(function(){.(function c(){var a=window,b=a.io_global_object_name\|\|"IGLOO";a=a[b]=a[b]\|\|{};a=a.io=a.io\|\|{};b=a.io_ddp;if(a.logoMain)return!1;a.logoMain=c;a.logoVer="5.5.0";b&&b._if_ubb&&(b._CTOKEN="KrQ0aKeqeQj5nsFGxbUQHxQbplBsLrSTWIsQXRZouvk=",b._if_ubb());try{a.api.io_bb.add("LID","T5u1QbvHMWf86bjXSWbodShOtkN/KjHXQ5VJ074J3LBlEhPRlOOFZw1f+V8UeLISOmBTzbqN4En4+uI7IfNDTw==")}catch(d){}})();.}).call(this);.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	12107
Entropy (8bit):	4.118290925600839
Encrypted:	false
SSDEEP:	192:ych6/pumchwJayuAXQHavGzUIBRHHa2UGUmRUG:1h6/YphwJN8QUUvLG
MD5:	C7B060B7604197D6A0B12648830D9EE8
SHA1:	106494AAA57A809C485AEFF1DCF43421250F17BE
SHA-256:	88978628E57207E83A74D047CA5AA90B9435741822FBEFFF1F1B9475FA1CBDB3
SHA-512:	6684BF8AF528ED534786D6463C981B56C0A995DFE1B6A6E5C5D8B5A6631DA39632563615EDB27F15B195D68D86AFD955F0A3D5CDA1D3F525AC7D3C47DFF92135
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: Sketch 64 (93537) - https://sketch.com -->.. <title>Logo</title>.. <desc>Created with Sketch.</desc>.. <g id="Logo" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <path fill="#000000" d="M22.1176284,5 L22.1176284,8.89997282 L10.7924229,8.89997282 L10.7924229,15.5724382 L22.1176284,15.5724382 L22.1176284,19.5093775 L10.7924229,19.5093775 L10.7924229,30.8211471 L5.53846154,30.8211471 L5.53846154,5 L22.1176284,5 Z M28.8504825,5.57298179 C29.5899326,5.57298179 30.2255907,5.82558414 30.7574759,6.33079641 C31.289361,6.83600869 31.5552996,7.43978991 31.5552996,8.1421582 C31.5552996,8.81988198 31.2926042,9.42058269 30.7672054,9.94427834 C30.2418067,10.467974 29.6029054,10.7298179 28.8504825,10.7298179 C28.1240052,10.7298179 27.4915903,10.467974 26.9532187

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1281
Entropy (8bit):	4.947635174118396
Encrypted:	false
SSDEEP:	24:2dX9bqDLtpWeaxMxpm3R1tXAVbGldQxYMWkkOBx/UpTacTdz:c9qft23Xd9lOP/UpTacTN
MD5:	5E4CB0126E52C254C52AB70905AA9EC2
SHA1:	ED921EBDEA59577D56DCA16B1380BE213A3B8C3D
SHA-256:	4A8EEB17A4D3F72A3A9BB52BEBEEC37BEAD3CC60CA4F475FACBDA9135A782F33
SHA-512:	6D9BE634004D8378119D623603FF4F4507E4BC8CECE87E8006ECEB09B82167678D2E5FE229EECBE382039B14FFF38BBD28FF4254643D2804F19C6BE3E828EA5C
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>Equal Opportunity Logo</title>.. <g id="Components" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Footer" transform="translate(-309.000000, -207.000000)" fill="#424242">.. <g id="Footer/Narrow-Logged-Out" transform="translate(50.000000, 92.000000)">.. <g id="Group" transform="translate(127.000000, 112.000000)">.. <g id="Equal-Opportunity-Logo" transform="translate(132.000000, 3.000000)">.. <path d="M7.58457,0 L0,4.2243719 L0,5.7509541 L1.16194576,5.7509541 L1.16194576,11 L13.816923,11 L13.816923,5.7509541 L15,5.7509541 L15,4.26617549 L7.58457,0 Z M2.70380181,4.39300033 L7.58402817,1.59074584 L12.3586888,4.39300033 L12.3586888,9.66290383 L2.70380181,9.66290383 L2.70380181,4.39300033 Z" id="

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1281
Entropy (8bit):	4.947635174118396
Encrypted:	false
SSDEEP:	24:2dX9bqDLtpWeaxMxpm3R1tXAVbGldQxYMWkkOBx/UpTacTdz:c9qft23Xd9lOP/UpTacTN
MD5:	5E4CB0126E52C254C52AB70905AA9EC2
SHA1:	ED921EBDEA59577D56DCA16B1380BE213A3B8C3D
SHA-256:	4A8EEB17A4D3F72A3A9BB52BEBEEC37BEAD3CC60CA4F475FACBDA9135A782F33
SHA-512:	6D9BE634004D8378119D623603FF4F4507E4BC8CECE87E8006ECEB09B82167678D2E5FE229EECBE382039B14FFF38BBD28FF4254643D2804F19C6BE3E828EA5C
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>Equal Opportunity Logo</title>.. <g id="Components" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <g id="Footer" transform="translate(-309.000000, -207.000000)" fill="#424242">.. <g id="Footer/Narrow-Logged-Out" transform="translate(50.000000, 92.000000)">.. <g id="Group" transform="translate(127.000000, 112.000000)">.. <g id="Equal-Opportunity-Logo" transform="translate(132.000000, 3.000000)">.. <path d="M7.58457,0 L0,4.2243719 L0,5.7509541 L1.16194576,5.7509541 L1.16194576,11 L13.816923,11 L13.816923,5.7509541 L15,5.7509541 L15,4.26617549 L7.58457,0 Z M2.70380181,4.39300033 L7.58402817,1.59074584 L12.3586888,4.39300033 L12.3586888,9.66290383 L2.70380181,9.66290383 L2.70380181,4.39300033 Z" id="

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HWLCR:22R
MD5:	FD35AB64EFE1EBEC29F1A3C1BDF88139
SHA1:	E4C1D2C9F50695702F7F0C3DBD532A502BACA676
SHA-256:	FFB5FD48CE054E44461ADD13CC7B80B3DF15CA24385217E20E6F1BB5967B3C24
SHA-512:	F8809FD64C4856BE2E08B23052DBFC42E777424A7B97751885501DF3673E6562431B1A2E0182C562D765F797AC983A6B8874680CB55366E138DBA71049E090F9
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAnrWOqmtXf9yRIFDduoMGA=?alt=proto
Preview:	CgkKBw3bqDBgGgA=

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2431
Entropy (8bit):	5.514002134371641
Encrypted:	false
SSDEEP:	48:S8QW1di8qLuZS87q8wR+N8alX8oMf5s8ulNOs:r/+uZp6R+DlT258Nb
MD5:	5BD7923FBD0B1D6DB1C31394334F4510
SHA1:	2D24C3756BAD6DC5B70B199766AEBBD6923EF488
SHA-256:	4E7588FE9002B8DFA03AA04E34AA12A908180CDCD40C7971204783BB207B1D2D
SHA-512:	396BCEA7CC02D3FE2917B2DA2554B3A1354438AAB4BBAB512FB5085164A201DEED6622A6ECB96475BEE73FE903253E6AE9942C0E31ACF95E72262DF5FC3AAACD
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/opensans.css
Preview:	/* cyrillic-ext /..@font-face {.. font-family: 'Open Sans';.. font-style: normal;.. font-weight: 400;.. src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/K88pR3goAWT7BTt32Z01mxJtnKITppOI_IvcXXDNrsc.woff2) format('woff2');.. unicode-range: U+0460-052F, U+20B4, U+2DE0-2DFF, U+A640-A69F;..}..../ cyrillic /..@font-face {.. font-family: 'Open Sans';.. font-style: normal;.. font-weight: 400;.. src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/RjgO7rYTmqiVp7vzi-Q5URJtnKITppOI_IvcXXDNrsc.woff2) format('woff2');.. unicode-range: U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;..}..../ greek-ext */..@font-face {.. font-family: 'Open Sans';.. font-style: normal;.. font-weight: 400;.. src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/LWCjsQkB6EMdfHrEVqA1KRJtnKITppOI_IvcXXDNrsc.woff2) format('woff2');.. unicode-range: U+1F00-1FFF;..}....

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (808), with no line terminators
Category:	downloaded
Size (bytes):	811
Entropy (8bit):	4.930257130040709
Encrypted:	false
SSDEEP:	12:b2q58MOK62utTxg5dV5ZkV8fqJTqsTRYsTizVHEVq1n1hP85C:b2ypOptT65dVMV8iThTRYsTuHiy1x85C
MD5:	1387B0BAFAFDDC8665426BC74F724A2E
SHA1:	28421FF20F47516133DAC59C89A252FDBB2ED9E5
SHA-256:	A2EF0492EC474D0F031D121E4C02A0492454B3C55FB7FF6315A5B472BC1CFE49
SHA-512:	560160AEE02F02A29C2060C48506659D34FBABC28B4B851E5C1FCC8CF5FDF55AF6FBA09025B59626E54594AD082257FB22ECE3A820D4918EE4F9B27F3BFB37C9
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8hj-QO5R4_ig_UM_6BTEvsUm0pVZPSI45Qh8HhMXpcfZ0-H_jz5gjdjFcqhl8Q2uekFcLFceEEhLFJKexQwJQYE-YZPPmEfmF2tz8ibp1V0Knp5fHHCZZeU1&t=637356698800000000
Preview:	..RadAjax .raDiv,.RadAjax .raColor{width:100%;height:100%;margin:0;padding:0}.RadAjax .raDiv{position:relative;z-index:2;background-color:transparent;background-position:center center;background-repeat:no-repeat}.RadAjax .raColor{position:absolute;top:0;left:0;z-index:1;background-image:none}.RadAjax .raTransp{zoom:1;filter:alpha(opacity=70);opacity:.7}.RadAjax .raTop{background-position:center top}.RadAjax .raTopLeft{background-position:left top}.RadAjax .raTopRight{background-position:right top}.RadAjax .raLeft{background-position:left center}.RadAjax .raRight{background-position:right center}.RadAjax .raBottom{background-position:center bottom}.RadAjax .raBottomLeft{background-position:left bottom}.RadAjax .raBottomRight{background-position:right bottom}.RadAjax div.raNone{background-image:none}

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1105
Entropy (8bit):	4.982009692563923
Encrypted:	false
SSDEEP:	24:houJYuDWJOuJdB39cT0Rel5wBoxaFhBsDOqJP:jnqFcHltMBsDOql
MD5:	8C089AD2990BD0125DD3B8B4C690A9F3
SHA1:	3A41E3E8313C80ACBB8A1415BC593CBDD04FDBCD
SHA-256:	8D2B3B3F10CA6C187D1743874258809EDABC2E3ACBD05AA810E68DB6C63DADA0
SHA-512:	2E325A5BAA0FC1B873B0CC199458CBBB989B4F011C8C62EA68E64627D99A60535CA3D9DFD345E1E473B1D5E2729E6B42E378FEF6C74BF5E8F1E71F31DE768C38
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/material-icons.css
Preview:	@font-face {.. font-family: 'Material Icons';.. font-style: normal;.. font-weight: 400;.. src: url(MaterialIcons-Regular.eot); /* For IE6-8 /.. src: local('Material Icons'),.. local('MaterialIcons-Regular'),.. url(MaterialIcons-Regular.ttf) format('truetype');..}.....material-icons {.. font-family: 'Material Icons';.. font-weight: normal;.. font-style: normal;.. font-size: 24px; / Preferred icon size /.. display: inline-block;.. line-height: 1;.. text-transform: none;.. letter-spacing: normal;.. word-wrap: normal;.. white-space: nowrap;.. direction: ltr;.... / Support for all WebKit browsers. /.. -webkit-font-smoothing: antialiased;.. / Support for Safari and Chrome. /.. text-rendering: optimizeLegibility;.... / Support for Firefox. /.. -moz-osx-font-smoothing: grayscale;.... / Support for IE. /.. font-feature-settings: 'liga';..}..../ Icon sizing */...material-icons.md-18 {...font-size: 18px;..}.....material-icons.md-24 {...font-size: 2

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (651)
Category:	downloaded
Size (bytes):	52854
Entropy (8bit):	5.393694093026409
Encrypted:	false
SSDEEP:	768:9TxvQ/fUi/wlspzKIopx43JclwPQw7MQrZOxBsC6T8vo7J4T6yLbTMt:BxvQ/fUi/5mlwoQMQrykQC
MD5:	EE4398C8C426D971EA29CBAA42D79F51
SHA1:	773EF3843708FFB4F357C5425820FFF4BE564128
SHA-256:	EC18F578C88849B492D2199102714284F50CB3EBA8C81F95DA3876F82FB0438E
SHA-512:	A428A643794DE8ABA3C36FD0B0FE1670549DC13FB9586D267FAB65C2B564F3B60314C8A465626231DD8923501D4E2164763E41AFBAF0CF427C6B73587E8B7902
Malicious:	false
Reputation:	low
URL:	https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js
Preview:	;/* Version ebf1620b3b847dfbf76f6e109dcacd8e v:22.4.0.3721, c:b473f94ba4c6cdf50fa092395b9896b98d086627, b:22.4.0.3721 /(function(){/... Copyright (c) 2013, AppDynamics, Inc. All rights reserved... Derivative of Google Episodes:.. Copyright 2010 Google Inc... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... See the source code here:. http://code.google.com/p/episodes/.*/.new function(){var k=window.ADRUM;if(k&&k.q&&!0!==window["adrum-disable"]){var y=window.console,A=y&&"function"==typeof y.log?y:{log:function(){

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (697)
Category:	downloaded
Size (bytes):	26692
Entropy (8bit):	5.4347253351042655
Encrypted:	false
SSDEEP:	384:jzw4KZaW9x9daEOEjCpNOmK4BmvPMk5ZZKLqYk4ZZ4+:jKdOqCemK4aMsaqY7j
MD5:	9A0A70D7C47ECD0D29B3B7F6C8FB9E9F
SHA1:	6338505E77E570BC12ECC9AC13C9DFFAF79B38F8
SHA-256:	9FB91FF0E8C179AEA40DBE6842B36FD201654F5647C21DCEC41FD18BE535D506
SHA-512:	C9EB1D3CE8C847FCA6B27BBD8441D6F1820A266B56BA29367F604EFF555EF62D40DA0DBEB82DD7C70503C9401C8B4F3C11C22AF19D0D71B3A64DDEEAAE2ECC8C
Malicious:	false
Reputation:	low
URL:	https://cdn.perfdrive.com/aperture/aperture.js
Preview:	try{(function(a,g){function D(b,c){var f=null;if("undefined"!==typeof c\|\|!0===c\|\|"true"===c){K=g.cookie.split(";");var e=new RegExp("^\\s"+b+"=\\s(.?)\\s$")}else if("undefined"===typeof c\|\|0==c\|\|"false"==c\|\|0==c\|\|null==c)e=new RegExp("^\\s"+b+h+"=\\s(.?)\\s$");for(var d=0;d<K.length&&(f=K[d].match(e),null===f);d++);return f}function U(b,c,f){try{g.cookie=b+"="+c+"; expires="+Y+"; path=/; domain="+f+";";var e=D(b,!0);if("undefined"!==typeof e&&null!==e&&!1!==e)e=e[1];else return!1;return e}catch(d){return!1}}. function L(){var b=a.location.hostname.split("."),c=[],f="_"+Math.floor(1E10*Math.random());if(0<b.length)if("www"==b[0]&&b.splice(0,1),1<b.length){for(var e=b.length-2;0<=e;e--)c.push(b.slice(e).join("."));for(e=0;e<c.length;e++){b=U("__sstester",f,c[e]);try{g.cookie="__sstester= 0; expires= Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain="+c[e]+";"}catch(d){}if("undefined"!==typeof b&&!1!==b&&null!==b&&b==f)return U("__ssds",e+2,c[e]),e+2}}else return!1;else return!1}va

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1282), with CRLF line terminators
Category:	downloaded
Size (bytes):	9977
Entropy (8bit):	4.809101457827711
Encrypted:	false
SSDEEP:	96:TsHiiXiVO0uLE9na7lJ+tYB6L42zxbrZnRkOkBNPxhG/5uSx/YdbgBgqJ8k2K:TsHiiXiVruPlAqB6L42JZPsxhG/5dyix
MD5:	5ECEDF1737CDFD9CADEB20363BE37E8D
SHA1:	8C7576BF76D6425617F024F3B988EC8CA1C551BF
SHA-256:	6CFC78DB757EC9D800255CA3522D51DB475BBF86CFEEF73946F18CA20E7C8E38
SHA-512:	F0B2CFF5EAA94F1F142447F082B8D098DEE9B4922CD514FAF9B14B336A0FCA253DD98A46BB110B3DA794FD4A32705B5F143F87C8A77354089BA2CD6991900586
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/otp.html
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml" lang="en-us" xml:lang="en-us" class="t-chrome t-chrome104" style="--vh:570px;">..<head id="M_head">.. <script type="text/javascript" async="" src="https://cdn.appdynamics.com/adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js"></script>.. <script async="" src="https://cdn.perfdrive.com/aperture/aperture.js"></script>.. <link href="css/opensans.css" type="text/css" rel="stylesheet">.. <link href="css/material-icons.css" type="text/css" rel="stylesheet">.. <link href="css/angular.css" type="text/css" rel="stylesheet">.. <link href="css/opensans.css" type="text/css" rel="stylesheet">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <title>.. Retail Registration - FNBO.. </title> .. <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">.. <link href="https://olb.sccu.com/OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8h

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1612
Entropy (8bit):	5.136846962796849
Encrypted:	false
SSDEEP:	48:cELPKdlm5+LkaSWlt1HV7XLOviiZs5Ae9hL+VO:xPKdkrhWdHV/OviVAKn
MD5:	A87D3850028E2890D5D51853F9BE8EF3
SHA1:	AA4749C12034332819CACBB83E08F4A7F2D9B660
SHA-256:	060AE789E740B1971A4AF9FC229F09C20B571FF070ADFF7A8CD21F70D44CE137
SHA-512:	37F67A32AC679DC6A81A9329CC6DD5F6FC78C5C3C2B4A9FCC95BBED0D4BD1F0A2993548F7230AF14F37AABEC1D1ED5C6A34C0E1FC15080D4407CDAC483C17C8F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com -->...<title>Wires White</title>...<desc>Created with Sketch.</desc>...<defs>....<path fill="#000000" d="M12,7.86369594 L15,4.93184797 L12,2 L12,3.94888598 C7.58,3.94888598 4,7.46788991 4,11.8125819 C4,13.3558322 4.46,14.7909567 5.24,16 L6.7,14.5648755 C6.25,13.749017 6,12.8053735 6,11.8125819 C6,8.55897772 8.69,5.91480996 12,5.91480996 L12,7.86369594 Z M17.3,9.43512451 C17.74,10.2608126 18,11.1946265 18,12.1874181 C18,15.4410223 15.31,18.08519 12,18.08519 L12,16.1363041 L9,19.068152 L12,22 L12,20.051114 C16.42,20.051114 20,16.5321101 20,12.1874181 C20,10.6441678 19.54,9.20904325 18.76,8 L17.3,9.43512451 Z" id="path-1"></path>...</defs>...<g id="Wires-White" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">....<mask id="mask-2" fill="

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 385 x 131, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	45863
Entropy (8bit):	7.984570984166679
Encrypted:	false
SSDEEP:	768:svA+w22YBZRb1dxzT2VMI+K1D/IgAhY6FEoZfYssT2B0h+9W0ReBxjN7lUVxK+cz:oAkVhPxzTQXbZzAhFnZf+T/PGetlUVxw
MD5:	1BDFA66F99ABA2E3DC0FFE0469703976
SHA1:	B7571F7176A5EFFA80046CBEB40852DF4DB0D4C1
SHA-256:	9BBA384D345CBE7105E505DAC5D8FDAC128841BA097FE104856C8CF51647AC3C
SHA-512:	1846D396C72CEDD448B18D5D2A036E1D4BB550DFE6EC23788452470F2B17FB04F8CCD3C0D779DE93DCDB6192A3CB47348D4651C02C89503A7AF549FD5D08FF43
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/img/BANGOR.png
Preview:	.PNG........IHDR..............0.....gAMA......a.....pHYs...t...t..f.x....IDATx^...%..6\|Wf.m.......;w...e..@.C..#@.....1B.B. ..\.Ya}gw.z..sN.;..d.........].]u........G4.BH6^.p...0&...B$.'[..h..X.z8f.@!.I....z.~.....T...>./. ...>........%....QH..[4....!x.\..s.p... .m..2.A#U.R..G..u...#....(. .^......q....>.7.;...z.~.v.4..3B....y...N)M...p..\9...\8.p.1H[....Q..~..3<~.a.......u{&.'\..%..?......owy.\|.I.1.d3.4/F"^..r.l.....S<k.j...\..s... m.j.....d.[..#...V.I-...wd..B. ..4.......6...X...g%.-..^F.Sh.R..f.a+...5/.b-..sa..v8....4.Q.../.Y...)......8.~...9....8..F`.......7..c...#....@.......qO.].zC.1..=.k..h......r"q...sa.......<..LQ......fi.@.I.....p.h2f....c...?...On...-.........].~...s.#...................?.o\|.5.f`l...k.CB..c.0.Y.H..4g@..FP6.E!.X.d.\..s.........P.R.2.q.....ixv..h.al3.O.n..Gn..]UW..yn.'.K...H,JJ(N./M.+M..L..L..O.K.)M.-KN(O]\..X......K...../..._n~.)c.f....F...}.....x.d$.E8.(x."-.....0.f....4..N.g.T.......Se.a.i..Ol..?~.z.U....W..V.2.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 385 x 131, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	45863
Entropy (8bit):	7.984570984166679
Encrypted:	false
SSDEEP:	768:svA+w22YBZRb1dxzT2VMI+K1D/IgAhY6FEoZfYssT2B0h+9W0ReBxjN7lUVxK+cz:oAkVhPxzTQXbZzAhFnZf+T/PGetlUVxw
MD5:	1BDFA66F99ABA2E3DC0FFE0469703976
SHA1:	B7571F7176A5EFFA80046CBEB40852DF4DB0D4C1
SHA-256:	9BBA384D345CBE7105E505DAC5D8FDAC128841BA097FE104856C8CF51647AC3C
SHA-512:	1846D396C72CEDD448B18D5D2A036E1D4BB550DFE6EC23788452470F2B17FB04F8CCD3C0D779DE93DCDB6192A3CB47348D4651C02C89503A7AF549FD5D08FF43
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............0.....gAMA......a.....pHYs...t...t..f.x....IDATx^...%..6\|Wf.m.......;w...e..@.C..#@.....1B.B. ..\.Ya}gw.z..sN.;..d.........].]u........G4.BH6^.p...0&...B$.'[..h..X.z8f.@!.I....z.~.....T...>./. ...>........%....QH..[4....!x.\..s.p... .m..2.A#U.R..G..u...#....(. .^......q....>.7.;...z.~.v.4..3B....y...N)M...p..\9...\8.p.1H[....Q..~..3<~.a.......u{&.'\..%..?......owy.\|.I.1.d3.4/F"^..r.l.....S<k.j...\..s... m.j.....d.[..#...V.I-...wd..B. ..4.......6...X...g%.-..^F.Sh.R..f.a+...5/.b-..sa..v8....4.Q.../.Y...)......8.~...9....8..F`.......7..c...#....@.......qO.].zC.1..=.k..h......r"q...sa.......<..LQ......fi.@.I.....p.h2f....c...?...On...-.........].~...s.#...................?.o\|.5.f`l...k.CB..c.0.Y.H..4g@..FP6.E!.X.d.\..s.........P.R.2.q.....ixv..h.al3.O.n..Gn..]UW..yn.'.K...H,JJ(N./M.+M..L..L..O.K.)M.-KN(O]\..X......K...../..._n~.)c.f....F...}.....x.d$.E8.(x."-.....0.f....4..N.g.T.......Se.a.i..Ol..?~.z.U....W..V.2.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	1023385
Entropy (8bit):	5.082513692965873
Encrypted:	false
SSDEEP:	6144:1oMUd0PQNk6hNO6mXiF2GidCyiuY0VtoGu:VXPGidCyiuY0VtG
MD5:	81BFE7B6BAE354B95E0A8C71AD15EA4E
SHA1:	ECC2D54B0AEE76892D2870987EE26B6D8A1E7272
SHA-256:	01B42BAAC83AC076D2CC35EBC2FE8C1C9E3A39BC59896F62B14AC1EBDB6C6B08
SHA-512:	BE2720783007DFFA287AC793893B2A2E6238377B3CE6A83DA562A91213CAE5F09ED0FE51A4D7BFD0A8E16D9EF9917EF8030D90FE514F3F82BB956A205EFFE94F
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7
Preview:	..RdcModule .mainmodule button.rdc-camera,.action-textbox-container>button{background-position-x:center !important;background-position-y:center !important}.icon-right-arrow>span,.icon-left-arrow>span,.icon-zoom-out>span,.icon-zoom-in>span,.icon-right-chevron>span,.icon-left-chevron>span,.icon-tooltip>span,.icon-close>span,.module_confirmation_close_imagebutton>span,.simple-list-view-delete-icon li a:nth-of-type(2)>span,.ui-dialog .ui-dialog-titlebar .ui-dialog-titlebar-close>span,.ui-helper-hidden+message-overlay .overlay-close-icon>span,.content-viewer-container .zoom-container .icon-download>span,.calendar-icon>span{position:fixed;right:-10000px}.dropdown-selector .icon-collapse>div{position:fixed;right:-10000px}@font-face{font-family:'Montserrat';font-style:normal;font-weight:400;src:url(App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff) format("woff")}@font-face{font-family:'Montserrat';font-style:normal;font-weight:600;src:url(App_Themes/Theme5/spacecoast/fon

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2105
Entropy (8bit):	5.22080252988827
Encrypted:	false
SSDEEP:	48:hD/Ci0MiGNNrCrCryPOrtEErgioBzuyOk/EJd:bSGHrCrCrymriErPoBD7EJd
MD5:	1A8244850EB3AE5A94862C4363F549B8
SHA1:	FD3F90FCB32E1AE287DA38E9133C94BF423BC29E
SHA-256:	926172C6F78BAD8D437E449A3309EA0DE03199F2BC0D2101899F3CE99DF04F4B
SHA-512:	893A49E2B594883525354F8FF642DD2C396C197583D118CEEC5CBDEEA76568C2390281DA291259FF4425892AFEBD7E74A2A774FCC50C98164DD542D3027B25C3
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/x/css/RadDockableObject.css
Preview:	/* r.a.d.dock default skin /.....RadDockingZone..{...background: white;...border: 0;...padding: 0px;..}.....RadDockableObjectFixed..{...border-top: solid 1px #e5e5e5;...border-left: solid 1px #e5e5e5;...border-right: solid 1px #b7b7b7;...border-bottom: solid 1px #b7b7b7;...background-color: white;..}.....RadDockableObjectDisabled .RadDockableObjectTitleBar..{...display: block;..}.....RadDockableObjectDisabled..{...border: solid 0px white;...padding: 0px;...margin: 0px;...background-color: white;..}.....RadDockableObjectResizeable..{...border: solid 1px #868b8f;...background-color: #fbfbfb;..}..../ titlebar start /.....RadDockableObjectTitleBarLeft..{...width: 4px;...height: 24px;...background: white url('Img/titleBarBg.gif') no-repeat;..}.....RadDockableObjectTitleBarRight..{...width: 1px;...height: 24px;...background: white url('Img/titleBarBg.gif') repeat-x;..}.....RadDockableObjectTitle..{...background: white url('Img/titleBarBg.gif') repeat-x;..}..../ titlebar text */.....RadDo

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	271563
Entropy (8bit):	7.921493226308478
Encrypted:	false
SSDEEP:	6144:daqNCuuRrLWkOriz6XDXfi/fKZcJiTV+2FOSaIY:daqkuuRrL+9XTZWAta3
MD5:	F0C6F78E040226C7D10695933B9A25A7
SHA1:	FC56918D6DA9A1810DCF64BEFCC9F7082971C5E0
SHA-256:	B4F957811A348BA78BF5B02DB3AA00E26E37C9E69987F5D459247DD0A1A70E61
SHA-512:	39F71EDB4E7DE88023D1BD4E0DF0E472AA6B9FB16B384557201DA81E74F559EBE4C1BD0640CEB38336C93E9A05846A5332B5D628D27F53962E6F9445B7D4D32E
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg
Preview:	.....@Exif..MM.*...........................8...........................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 22.1 (Macintosh).2021:02:01 14:50:27..............0231...................................8...............................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................Z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..Z...4.=.r\..%V...'.9..I..;...z#\.......X..........:..A...b.....=.a-..G.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	12107
Entropy (8bit):	4.118290925600839
Encrypted:	false
SSDEEP:	192:ych6/pumchwJayuAXQHavGzUIBRHHa2UGUmRUG:1h6/YphwJN8QUUvLG
MD5:	C7B060B7604197D6A0B12648830D9EE8
SHA1:	106494AAA57A809C485AEFF1DCF43421250F17BE
SHA-256:	88978628E57207E83A74D047CA5AA90B9435741822FBEFFF1F1B9475FA1CBDB3
SHA-512:	6684BF8AF528ED534786D6463C981B56C0A995DFE1B6A6E5C5D8B5A6631DA39632563615EDB27F15B195D68D86AFD955F0A3D5CDA1D3F525AC7D3C47DFF92135
Malicious:	false
Reputation:	low
URL:	https://olb.sccu.com/OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. Generator: Sketch 64 (93537) - https://sketch.com -->.. <title>Logo</title>.. <desc>Created with Sketch.</desc>.. <g id="Logo" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">.. <path fill="#000000" d="M22.1176284,5 L22.1176284,8.89997282 L10.7924229,8.89997282 L10.7924229,15.5724382 L22.1176284,15.5724382 L22.1176284,19.5093775 L10.7924229,19.5093775 L10.7924229,30.8211471 L5.53846154,30.8211471 L5.53846154,5 L22.1176284,5 Z M28.8504825,5.57298179 C29.5899326,5.57298179 30.2255907,5.82558414 30.7574759,6.33079641 C31.289361,6.83600869 31.5552996,7.43978991 31.5552996,8.1421582 C31.5552996,8.81988198 31.2926042,9.42058269 30.7672054,9.94427834 C30.2418067,10.467974 29.6029054,10.7298179 28.8504825,10.7298179 C28.1240052,10.7298179 27.4915903,10.467974 26.9532187

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=1080, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	271563
Entropy (8bit):	7.921493226308478
Encrypted:	false
SSDEEP:	6144:daqNCuuRrLWkOriz6XDXfi/fKZcJiTV+2FOSaIY:daqkuuRrL+9XTZWAta3
MD5:	F0C6F78E040226C7D10695933B9A25A7
SHA1:	FC56918D6DA9A1810DCF64BEFCC9F7082971C5E0
SHA-256:	B4F957811A348BA78BF5B02DB3AA00E26E37C9E69987F5D459247DD0A1A70E61
SHA-512:	39F71EDB4E7DE88023D1BD4E0DF0E472AA6B9FB16B384557201DA81E74F559EBE4C1BD0640CEB38336C93E9A05846A5332B5D628D27F53962E6F9445B7D4D32E
Malicious:	false
Reputation:	low
Preview:	.....@Exif..MM.*...........................8...........................................................................(...........1.....!.....2..........i.............$............'.......'.Adobe Photoshop 22.1 (Macintosh).2021:02:01 14:50:27..............0231...................................8...............................r...........z.(.........................................H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................Z...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..Z...4.=.r\..%V...'.9..I..;...z#\.......X..........:..A...b.....=.a-..G.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	5.0572271090563765
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoFEHcLgabzjsKtgsg93wzRbKqD:J0+oxBeRmR9etdzRxGezZfCzjsKtgizR
MD5:	A34AC19F4AFAE63ADC5D2F7BC970C07F
SHA1:	A82190FC530C265AA40A045C21770D967F4767B8
SHA-256:	D5A89E26BEAE0BC03AD18A0B0D1D3D75F87C32047879D25DA11970CB5C4662A3
SHA-512:	42E53D96E5961E95B7A984D9C9778A1D3BD8EE0C87B8B3B515FA31F67C2D073C8565AFC2F4B962C43668C4EFA1E478DA9BB0ECFFA79479C7E880731BC4C55765
Malicious:	false
Reputation:	low
URL:	https://mail.fnbo-in.selfip.com/OnlineBanking/
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<p>Additionally, a 404 Not Found.error was encountered while trying to use an ErrorDocument to handle the request.</p>.</body></html>.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 29, 2024 12:12:08.603235006 CEST	49677	443	192.168.2.9	20.189.173.11
May 29, 2024 12:12:08.774724960 CEST	49676	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:08.774749994 CEST	49675	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:08.915391922 CEST	49677	443	192.168.2.9	20.189.173.11
May 29, 2024 12:12:09.071625948 CEST	49674	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:09.524745941 CEST	49677	443	192.168.2.9	20.189.173.11
May 29, 2024 12:12:09.540394068 CEST	49673	443	192.168.2.9	204.79.197.203
May 29, 2024 12:12:10.727940083 CEST	49677	443	192.168.2.9	20.189.173.11
May 29, 2024 12:12:13.134169102 CEST	49677	443	192.168.2.9	20.189.173.11
May 29, 2024 12:12:17.937531948 CEST	49677	443	192.168.2.9	20.189.173.11
May 29, 2024 12:12:18.191004038 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:18.191037893 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:18.191093922 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:18.191770077 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:18.191829920 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:18.191879988 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:18.197506905 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:18.197556973 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:18.209084988 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:18.209100008 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:18.386451960 CEST	49676	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:18.386471987 CEST	49675	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:18.684232950 CEST	49674	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:19.141935110 CEST	49673	443	192.168.2.9	204.79.197.203
May 29, 2024 12:12:19.309659958 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:19.313071966 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:19.313086987 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:19.313270092 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:19.314016104 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:19.314332008 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:19.314399958 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:19.314599991 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:19.315377951 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:19.315751076 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:19.316323996 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:19.316395998 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:19.316503048 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:19.316571951 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:19.316678047 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:19.356271029 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:19.356297970 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:19.364497900 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:19.372353077 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:19.372375011 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:19.403635025 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:19.417406082 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.038672924 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.038701057 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.038710117 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.038737059 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.038774014 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.038775921 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.038788080 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.038822889 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.038836956 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.038841963 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.038870096 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.038908005 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.117621899 CEST	49712	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.117641926 CEST	443	49712	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.222009897 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.223315001 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.223341942 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.223403931 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.224446058 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.224477053 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.224531889 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.228373051 CEST	49718	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.228391886 CEST	443	49718	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.228447914 CEST	49718	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.232809067 CEST	49719	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.232830048 CEST	443	49719	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.232882023 CEST	49719	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.236289024 CEST	49719	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.236303091 CEST	443	49719	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.236886024 CEST	49718	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.236901045 CEST	443	49718	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.237728119 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.237741947 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.243407011 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.243422985 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.245999098 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.246012926 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.246081114 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.247510910 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:20.247534037 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:20.247596979 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:20.247992039 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.248001099 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.251801014 CEST	49722	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:20.251827955 CEST	443	49722	54.228.71.178	192.168.2.9
May 29, 2024 12:12:20.251887083 CEST	49722	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:20.252151966 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.252162933 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.252202988 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.252511024 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.252535105 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.252578020 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.253341913 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.253354073 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.254378080 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.254386902 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.255312920 CEST	49722	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:20.255327940 CEST	443	49722	54.228.71.178	192.168.2.9
May 29, 2024 12:12:20.256333113 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:20.256350040 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:20.264494896 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.370098114 CEST	49725	443	192.168.2.9	142.250.186.164
May 29, 2024 12:12:20.370122910 CEST	443	49725	142.250.186.164	192.168.2.9
May 29, 2024 12:12:20.370173931 CEST	49725	443	192.168.2.9	142.250.186.164
May 29, 2024 12:12:20.374084949 CEST	49725	443	192.168.2.9	142.250.186.164
May 29, 2024 12:12:20.374095917 CEST	443	49725	142.250.186.164	192.168.2.9
May 29, 2024 12:12:20.377813101 CEST	443	49704	23.206.229.209	192.168.2.9
May 29, 2024 12:12:20.377898932 CEST	49704	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:20.618948936 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.618973970 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.619045019 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.619071007 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.620882988 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.622756004 CEST	49713	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:20.622790098 CEST	443	49713	152.42.220.64	192.168.2.9
May 29, 2024 12:12:20.721868992 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.722316980 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.722328901 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.723983049 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.724131107 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.725296974 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.725393057 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.725486994 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.768502951 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.774933100 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.775305986 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.775326014 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.776388884 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.776508093 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.777772903 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.777818918 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.783672094 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.783672094 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.783706903 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.783777952 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.793410063 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.795027971 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.795054913 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.795984030 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.796503067 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.796503067 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.796585083 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.797292948 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.823964119 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.824019909 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.824055910 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.824127913 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.824172020 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.824174881 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.824183941 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.824213982 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.824222088 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.824537992 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.824850082 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.824858904 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.824863911 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.824884892 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.824960947 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.824960947 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.824975967 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.825231075 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.825623989 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.829428911 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.839236975 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.839251995 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.876522064 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.887379885 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.912650108 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.912885904 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.912985086 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.913022995 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.913038969 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.913127899 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.913191080 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.913209915 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.913218021 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.913286924 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.913638115 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.913717985 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.934014082 CEST	49720	443	192.168.2.9	130.211.29.114
May 29, 2024 12:12:20.934057951 CEST	443	49720	130.211.29.114	192.168.2.9
May 29, 2024 12:12:20.962776899 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.962863922 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.963176012 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.963190079 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.963274956 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.970725060 CEST	49724	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:20.970752001 CEST	443	49724	66.22.0.11	192.168.2.9
May 29, 2024 12:12:20.987216949 CEST	443	49722	54.228.71.178	192.168.2.9
May 29, 2024 12:12:20.988535881 CEST	49722	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:20.988573074 CEST	443	49722	54.228.71.178	192.168.2.9
May 29, 2024 12:12:20.990082979 CEST	443	49722	54.228.71.178	192.168.2.9
May 29, 2024 12:12:20.990572929 CEST	49722	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:20.991453886 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:20.991586924 CEST	49722	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:20.991677999 CEST	443	49722	54.228.71.178	192.168.2.9
May 29, 2024 12:12:20.992305994 CEST	49722	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:20.992307901 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:20.992316961 CEST	443	49722	54.228.71.178	192.168.2.9
May 29, 2024 12:12:20.992337942 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:20.993360996 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:20.993637085 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:20.994591951 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:20.994592905 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:20.994617939 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:20.994664907 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.016647100 CEST	443	49725	142.250.186.164	192.168.2.9
May 29, 2024 12:12:21.017307043 CEST	49725	443	192.168.2.9	142.250.186.164
May 29, 2024 12:12:21.017345905 CEST	443	49725	142.250.186.164	192.168.2.9
May 29, 2024 12:12:21.018522024 CEST	443	49725	142.250.186.164	192.168.2.9
May 29, 2024 12:12:21.018676996 CEST	49725	443	192.168.2.9	142.250.186.164
May 29, 2024 12:12:21.020494938 CEST	49725	443	192.168.2.9	142.250.186.164
May 29, 2024 12:12:21.020584106 CEST	443	49725	142.250.186.164	192.168.2.9
May 29, 2024 12:12:21.044744015 CEST	49722	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:21.044745922 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.044771910 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.081293106 CEST	49725	443	192.168.2.9	142.250.186.164
May 29, 2024 12:12:21.081317902 CEST	443	49725	142.250.186.164	192.168.2.9
May 29, 2024 12:12:21.099754095 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.132169008 CEST	49725	443	192.168.2.9	142.250.186.164
May 29, 2024 12:12:21.193273067 CEST	49726	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:21.193310022 CEST	443	49726	184.28.90.27	192.168.2.9
May 29, 2024 12:12:21.199970961 CEST	49726	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:21.199970961 CEST	49726	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:21.200006008 CEST	443	49726	184.28.90.27	192.168.2.9
May 29, 2024 12:12:21.245131016 CEST	443	49722	54.228.71.178	192.168.2.9
May 29, 2024 12:12:21.245470047 CEST	443	49722	54.228.71.178	192.168.2.9
May 29, 2024 12:12:21.245711088 CEST	49722	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:21.247143984 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.248887062 CEST	49722	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:21.248904943 CEST	443	49722	54.228.71.178	192.168.2.9
May 29, 2024 12:12:21.289624929 CEST	443	49718	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.291162014 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.292598963 CEST	49718	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:21.292610884 CEST	443	49718	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.293000937 CEST	443	49718	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.293817043 CEST	49718	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:21.294073105 CEST	443	49718	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.299139023 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.299175978 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.299190998 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.299238920 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.299256086 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.299283028 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.299319029 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.299338102 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.299346924 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.299356937 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.301290035 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.317843914 CEST	49718	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:21.340646982 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.340672016 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.340687037 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.340730906 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.340749025 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.340768099 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.340766907 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.341306925 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.341322899 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.342408895 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.343508959 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.343517065 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.345285892 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.364491940 CEST	443	49718	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.373817921 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.376030922 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:21.376055002 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.377021074 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.377413988 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:21.377974033 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:21.377974033 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:21.377986908 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.378041983 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.391927958 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.391951084 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.391992092 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.392009974 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.392043114 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.392055988 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.392082930 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.392169952 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.392184019 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.392246008 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.392246008 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.434731007 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:21.434757948 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.482614040 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:21.637768984 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.637798071 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.637804985 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.637851000 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.637871981 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.637881994 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.637888908 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.637964010 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.638005018 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.638005972 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.638005972 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.638046026 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.700381994 CEST	49721	443	192.168.2.9	13.227.219.85
May 29, 2024 12:12:21.700424910 CEST	443	49721	13.227.219.85	192.168.2.9
May 29, 2024 12:12:21.709052086 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.709075928 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.709155083 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.709234953 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.709294081 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.729351044 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.729370117 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.729427099 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.729445934 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.729480982 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.801769018 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.801798105 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.801845074 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.801868916 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.801887035 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.801907063 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.803742886 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.803761959 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.803801060 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.803808928 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.803860903 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.804759026 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.804775953 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.804835081 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.804841995 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.804876089 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.824867964 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.824887991 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.824939966 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.824954033 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.824990034 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.850636959 CEST	443	49726	184.28.90.27	192.168.2.9
May 29, 2024 12:12:21.850656033 CEST	443	49726	184.28.90.27	192.168.2.9
May 29, 2024 12:12:21.850725889 CEST	49726	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:21.896364927 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.896389961 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.896469116 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.896502018 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.896532059 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.896553040 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.897156954 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.897172928 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.897249937 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.897267103 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.897324085 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.897783041 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.897798061 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.897865057 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.897877932 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.897924900 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.899744987 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.899759054 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.899813890 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.899827003 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.899856091 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.899955988 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.901612997 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.901628971 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.901832104 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.901849031 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.901904106 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.902188063 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.902204037 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.902241945 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.902254105 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.902281046 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.902302027 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.912679911 CEST	49726	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:21.912714005 CEST	443	49726	184.28.90.27	192.168.2.9
May 29, 2024 12:12:21.913064003 CEST	443	49726	184.28.90.27	192.168.2.9
May 29, 2024 12:12:21.920319080 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.920337915 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.920373917 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.920387030 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.920411110 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.920433998 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.925720930 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.964031935 CEST	49726	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:21.981081009 CEST	443	49718	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.981168032 CEST	443	49718	152.42.220.64	192.168.2.9
May 29, 2024 12:12:21.981226921 CEST	49718	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:21.991887093 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.991908073 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.991941929 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.991955042 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.992008924 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.992712021 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.992727041 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.992775917 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.992780924 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.992816925 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.992979050 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.992994070 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993020058 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993025064 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993052959 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993068933 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993133068 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993150949 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993180037 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993185043 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993232012 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993243933 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993259907 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993287086 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993294954 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993341923 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993341923 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993740082 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993755102 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993782043 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993788004 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993825912 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993830919 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993846893 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993848085 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993860006 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:21.993879080 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:21.993918896 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.001394987 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.010521889 CEST	443	49719	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.014504910 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.014522076 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.014566898 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.014573097 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.014616013 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.037261963 CEST	49719	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.037270069 CEST	443	49719	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.037827015 CEST	443	49719	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.040349960 CEST	49719	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.040431023 CEST	443	49719	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.041146994 CEST	49719	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.075246096 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.082015038 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.082020998 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.083055019 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.083108902 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.084491014 CEST	443	49719	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.086586952 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.086611986 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.086649895 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.086656094 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.086673975 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.086697102 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.086999893 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.087014914 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.087080002 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.087086916 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.087116957 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.087250948 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.087266922 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.087296963 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.087306023 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.087330103 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.087354898 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.087711096 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.087726116 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.087752104 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.087758064 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.087781906 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.087812901 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.088033915 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.088048935 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.088085890 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.088092089 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.088121891 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.088342905 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.088356972 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.088383913 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.088388920 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.088414907 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.088813066 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.088826895 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.088857889 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.088865042 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.088892937 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.088916063 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.109482050 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.109509945 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.109543085 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.109548092 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.109606981 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.121170044 CEST	49726	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:22.127568960 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.127670050 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.127717972 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.128714085 CEST	49718	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.128737926 CEST	443	49718	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.131309986 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.131316900 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.140832901 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.140856981 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.140865088 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.140899897 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.140916109 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.140928030 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.140955925 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.140976906 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.143518925 CEST	49717	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.143534899 CEST	443	49717	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.164494038 CEST	443	49726	184.28.90.27	192.168.2.9
May 29, 2024 12:12:22.178179026 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.182322979 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.182348013 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.182388067 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.182394981 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.182429075 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.182789087 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.182806969 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.182854891 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.182859898 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.182894945 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.183599949 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.183618069 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.183653116 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.183657885 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.183690071 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.183993101 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.184009075 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.184042931 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.184047937 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.184072971 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.184087038 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.184516907 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.184535027 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.184564114 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.184568882 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.184593916 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.184611082 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.185188055 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.185204029 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.185235977 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.185241938 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.185272932 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.185287952 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.185568094 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.185585022 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.185615063 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.185621023 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.185646057 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.185668945 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.205529928 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.205553055 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.205604076 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.205610037 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.205646038 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.275537968 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.275564909 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.275608063 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.275619984 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.275651932 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.275669098 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.276012897 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.276037931 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.276070118 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.276077032 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.276108027 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.276177883 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.276304007 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.276320934 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.276350021 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.276355028 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.276381969 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.276396036 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.276597977 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.276617050 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.276645899 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.276654005 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.276679993 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.276698112 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.277204990 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.277232885 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.277266026 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.277271032 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.277307034 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.277323008 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.277359962 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.277376890 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.277401924 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.277407885 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.277434111 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.277446985 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.277786016 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.277805090 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.277846098 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.277853966 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.277883053 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.277896881 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.284317017 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.298424006 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.298443079 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.298479080 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.298486948 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.298515081 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.298537016 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.308279991 CEST	443	49726	184.28.90.27	192.168.2.9
May 29, 2024 12:12:22.308682919 CEST	49726	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:22.308696032 CEST	443	49726	184.28.90.27	192.168.2.9
May 29, 2024 12:12:22.308804989 CEST	49726	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:22.308828115 CEST	443	49726	184.28.90.27	192.168.2.9
May 29, 2024 12:12:22.308852911 CEST	443	49726	184.28.90.27	192.168.2.9
May 29, 2024 12:12:22.308881998 CEST	49726	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:22.369235039 CEST	49727	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:22.369276047 CEST	443	49727	184.28.90.27	192.168.2.9
May 29, 2024 12:12:22.369374990 CEST	49727	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:22.370161057 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.370187998 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.370229006 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.370248079 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.370286942 CEST	49727	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:22.370306969 CEST	443	49727	184.28.90.27	192.168.2.9
May 29, 2024 12:12:22.370331049 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.370490074 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.370505095 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.370543003 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.370551109 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.370573044 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.370589018 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.370898962 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.370913982 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.370943069 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.370950937 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.370980024 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.370995998 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.371294975 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.371310949 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.371342897 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.371350050 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.371377945 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.371396065 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.371588945 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.371603012 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.371650934 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.371659040 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.371690989 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.371834040 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.371850014 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.371908903 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.371915102 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.371942043 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.371948957 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.371964931 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.371998072 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.372004986 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.372041941 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.392966986 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.392985106 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.393054008 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.393117905 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.393181086 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.464860916 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.464879990 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.465123892 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.465157032 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.465301037 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.465328932 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.465341091 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.465348959 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.465363026 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.465420008 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.465646029 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.465662003 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.465747118 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.465747118 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.465764046 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.465842962 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.465863943 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.465873957 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.465893030 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.465926886 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.465926886 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.466029882 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.466218948 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.466233015 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.466505051 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.466542006 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.466546059 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.466563940 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.466595888 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.466816902 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.466965914 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.466980934 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.467061043 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.467061043 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.467080116 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.468533039 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.487570047 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.487597942 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.487736940 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.487771988 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.487809896 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.528250933 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.559168100 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.559240103 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.559333086 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.559345007 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.561501026 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.589257956 CEST	49723	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.589329004 CEST	443	49723	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.741457939 CEST	443	49719	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.741482973 CEST	443	49719	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.741553068 CEST	443	49719	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.741605997 CEST	49719	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.741857052 CEST	49719	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.744539976 CEST	49719	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.744585037 CEST	443	49719	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.782207966 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.782303095 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.782470942 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.782679081 CEST	49729	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.782710075 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.782721043 CEST	443	49729	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.782733917 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.783057928 CEST	49729	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.783057928 CEST	49729	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.783101082 CEST	443	49729	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.786386013 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.786411047 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.786721945 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.786721945 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.786750078 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.787964106 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.788032055 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.789279938 CEST	49732	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.789298058 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.789366961 CEST	49732	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.789381027 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.789731979 CEST	49732	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.789748907 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.790361881 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:22.790405989 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:22.845633030 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.845712900 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.845742941 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.845763922 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.845905066 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.845906019 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:22.845989943 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:22.893455982 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.049048901 CEST	443	49727	184.28.90.27	192.168.2.9
May 29, 2024 12:12:23.049168110 CEST	49727	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:23.050560951 CEST	49727	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:23.050573111 CEST	443	49727	184.28.90.27	192.168.2.9
May 29, 2024 12:12:23.051357985 CEST	443	49727	184.28.90.27	192.168.2.9
May 29, 2024 12:12:23.052603006 CEST	49727	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:23.100502014 CEST	443	49727	184.28.90.27	192.168.2.9
May 29, 2024 12:12:23.181668997 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.181689978 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.181721926 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.181824923 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.181826115 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.182447910 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.182457924 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.184539080 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.219933987 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.219958067 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.220089912 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.220089912 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.220305920 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.220326900 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.220391035 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.220391035 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.221179962 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.221287012 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.221293926 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.221601009 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.244894028 CEST	49733	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:23.244945049 CEST	443	49733	54.228.71.178	192.168.2.9
May 29, 2024 12:12:23.245277882 CEST	49733	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:23.245595932 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.245614052 CEST	49716	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.245630026 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.245688915 CEST	443	49716	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.246093988 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.246097088 CEST	49733	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:23.246112108 CEST	443	49733	54.228.71.178	192.168.2.9
May 29, 2024 12:12:23.246594906 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.246617079 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.252609968 CEST	49735	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:23.257610083 CEST	53	49735	1.1.1.1	192.168.2.9
May 29, 2024 12:12:23.259707928 CEST	49735	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:23.282840014 CEST	49735	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:23.282881021 CEST	49735	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:23.287796974 CEST	53	49735	1.1.1.1	192.168.2.9
May 29, 2024 12:12:23.287823915 CEST	53	49735	1.1.1.1	192.168.2.9
May 29, 2024 12:12:23.296086073 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.296922922 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.296987057 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.297357082 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.301631927 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.301753044 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.301810980 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.307558060 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.307698011 CEST	443	49729	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.309402943 CEST	49729	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.309403896 CEST	49732	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.309434891 CEST	443	49729	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.309458971 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.310625076 CEST	443	49729	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.312660933 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.312791109 CEST	49732	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.313302040 CEST	49732	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.313399076 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.313649893 CEST	49729	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.313760042 CEST	443	49729	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.313848972 CEST	49732	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.313848972 CEST	49729	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.313874006 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.316556931 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.316905022 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.316920996 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.320590019 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.320772886 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.321203947 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.321204901 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.321223021 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.321372986 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.328955889 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.329579115 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.329627991 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.331113100 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.331382036 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.331496954 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.331587076 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.331624031 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.348505974 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.355197906 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.355197906 CEST	49729	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.355238914 CEST	443	49729	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.361113071 CEST	49732	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.374053955 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.374062061 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.374080896 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.374089003 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.376590014 CEST	443	49727	184.28.90.27	192.168.2.9
May 29, 2024 12:12:23.382503033 CEST	443	49727	184.28.90.27	192.168.2.9
May 29, 2024 12:12:23.382673025 CEST	49727	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:23.382673025 CEST	49727	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:23.382966995 CEST	49727	443	192.168.2.9	184.28.90.27
May 29, 2024 12:12:23.382986069 CEST	443	49727	184.28.90.27	192.168.2.9
May 29, 2024 12:12:23.420312881 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.420315027 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.519548893 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.519618034 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.519690990 CEST	49732	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.519782066 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.519821882 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.519881010 CEST	49732	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.521635056 CEST	443	49729	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.521723986 CEST	443	49729	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.521776915 CEST	49729	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.528852940 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.528879881 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.528888941 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.528907061 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.528914928 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.528945923 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.528961897 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.528971910 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.529001951 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.551506996 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.551578999 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.551652908 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.551724911 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.551760912 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.551825047 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.693006992 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.693084002 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.693106890 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.693129063 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.693166018 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.693167925 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.693191051 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.693202019 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.693221092 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.693226099 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.693234921 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.693278074 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.714184046 CEST	53	49735	1.1.1.1	192.168.2.9
May 29, 2024 12:12:23.761750937 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.761821985 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.761881113 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.761909962 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.761940956 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.761955976 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.764769077 CEST	49735	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:23.781518936 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.781564951 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.781620979 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.781651974 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.781687021 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.781716108 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.792809963 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.842432022 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.849419117 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.849440098 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.849484921 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.849512100 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.849541903 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.849560976 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.850559950 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.850574017 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.850617886 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.850632906 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.850670099 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.870357037 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.870384932 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.870424986 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.870452881 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.870471954 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.870492935 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.913676977 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.913693905 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.914568901 CEST	49735	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:23.915304899 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.917145014 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.917177916 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.917252064 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.917779922 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.917820930 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.917884111 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.920044899 CEST	53	49735	1.1.1.1	192.168.2.9
May 29, 2024 12:12:23.920115948 CEST	49735	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:23.937577009 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.937618017 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.937789917 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.937832117 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.937876940 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.938604116 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.938633919 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.938762903 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.938800097 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.938844919 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.938875914 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.938905001 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.938977003 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.938987017 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.939033985 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.940253973 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.940316916 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.940368891 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.940392017 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.940421104 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.940444946 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.941761971 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.941783905 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.941874981 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.941900015 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.941941977 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.959753990 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.959779978 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.959897995 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.959912062 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.959928036 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.959949970 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.959978104 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.959991932 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.960007906 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.960036039 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.972327948 CEST	443	49733	54.228.71.178	192.168.2.9
May 29, 2024 12:12:23.973861933 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:23.973902941 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:23.974534988 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.974698067 CEST	49733	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:23.974725962 CEST	443	49733	54.228.71.178	192.168.2.9
May 29, 2024 12:12:23.975018978 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.975028038 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:23.975850105 CEST	443	49733	54.228.71.178	192.168.2.9
May 29, 2024 12:12:23.981703997 CEST	49733	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:23.981903076 CEST	443	49733	54.228.71.178	192.168.2.9
May 29, 2024 12:12:23.982156992 CEST	49733	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:23.998687029 CEST	49729	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:23.998723984 CEST	443	49729	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.010423899 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.010535002 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.011226892 CEST	49730	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.011266947 CEST	443	49730	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.013871908 CEST	49732	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.013890028 CEST	443	49732	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.015511036 CEST	49731	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.015543938 CEST	443	49731	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.016500950 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.023477077 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.023497105 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.026514053 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.026570082 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.026582003 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.026601076 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.026628017 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.026644945 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.027048111 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.027076006 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.027120113 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.027129889 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.027154922 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.027175903 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.027712107 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.027740002 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.027781963 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.027791977 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.027823925 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.027848005 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.028016090 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.028059006 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.028100967 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.028110981 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.028147936 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.028167009 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.028204918 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.028516054 CEST	443	49733	54.228.71.178	192.168.2.9
May 29, 2024 12:12:24.047193050 CEST	49728	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.047230005 CEST	443	49728	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.075805902 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.221224070 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.221255064 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.221326113 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.221647978 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.221676111 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.221720934 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.221868992 CEST	49741	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.221879005 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.221941948 CEST	49741	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.222086906 CEST	49742	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.222094059 CEST	443	49742	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.222146034 CEST	49742	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.222325087 CEST	49743	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.222337008 CEST	443	49743	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.222383976 CEST	49743	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.222588062 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.222605944 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.222894907 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.222918034 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.223161936 CEST	49741	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.223174095 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.223501921 CEST	49742	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.223515987 CEST	443	49742	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.223861933 CEST	49743	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.223876953 CEST	443	49743	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.236212969 CEST	443	49733	54.228.71.178	192.168.2.9
May 29, 2024 12:12:24.236308098 CEST	443	49733	54.228.71.178	192.168.2.9
May 29, 2024 12:12:24.236371994 CEST	49733	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:24.238097906 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.238163948 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.238188028 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.238205910 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.238229990 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.238251925 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.238269091 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.238270044 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.238296986 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.238316059 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.238327026 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.238348961 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.238374949 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.242377996 CEST	49733	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:24.242409945 CEST	443	49733	54.228.71.178	192.168.2.9
May 29, 2024 12:12:24.256093025 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.256422043 CEST	443	49734	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.256545067 CEST	49734	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.363394976 CEST	49744	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:24.363459110 CEST	443	49744	152.42.220.64	192.168.2.9
May 29, 2024 12:12:24.363605022 CEST	49744	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:24.364132881 CEST	49744	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:24.364151001 CEST	443	49744	152.42.220.64	192.168.2.9
May 29, 2024 12:12:24.737904072 CEST	443	49742	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.738152027 CEST	49742	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.738192081 CEST	443	49742	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.739255905 CEST	443	49742	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.739316940 CEST	49742	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.739809990 CEST	49742	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.739878893 CEST	443	49742	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.740068913 CEST	49742	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.740081072 CEST	443	49742	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.741858006 CEST	443	49743	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.742166042 CEST	49743	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.742187023 CEST	443	49743	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.742974997 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.743170023 CEST	49741	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.743182898 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.743489981 CEST	443	49743	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.743563890 CEST	49743	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.744095087 CEST	49743	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.744168997 CEST	443	49743	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.744195938 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.744240999 CEST	49741	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.744431973 CEST	49743	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.744445086 CEST	443	49743	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.744770050 CEST	49741	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.744839907 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.745038986 CEST	49741	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.745048046 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.749790907 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.750181913 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.750200033 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.751223087 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.751291037 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.751780033 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.751832962 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.752039909 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.752046108 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.755923033 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.756124020 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.756135941 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.757169008 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.757246971 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.757710934 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.757766008 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.757988930 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.757996082 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:24.792412043 CEST	49742	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.792429924 CEST	49741	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.792438984 CEST	49743	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.792474985 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:24.808026075 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.057497978 CEST	443	49742	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.057579041 CEST	443	49742	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.057590008 CEST	443	49743	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.057616949 CEST	443	49743	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.057643890 CEST	49742	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.057666063 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.057670116 CEST	443	49743	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.057694912 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.057693958 CEST	49743	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.057718039 CEST	49743	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.057729959 CEST	49741	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.057745934 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.057760954 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.057804108 CEST	49741	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.058054924 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.058087111 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.058111906 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.058126926 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.058130026 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.058144093 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.058154106 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.058176041 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.058185101 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.058191061 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.058202028 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.058244944 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.107793093 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.152107954 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:25.159821987 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.159851074 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.159859896 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.159869909 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.159917116 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.160053015 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.160053968 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.160077095 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.160130978 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.229593039 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.229629040 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.229736090 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.229759932 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.229804993 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.251266956 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.251296997 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.251503944 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.251535892 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.251590967 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.322149038 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.322187901 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.322235107 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.322272062 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.322288036 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.322583914 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.323813915 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.323847055 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.323887110 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.323904991 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.323945999 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.323973894 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.324810982 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.324835062 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.324872017 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.324882030 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.324903965 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.324918985 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.344258070 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.344296932 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.344341993 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.344374895 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.344389915 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.344413996 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.355220079 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.355665922 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:25.355685949 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.357316017 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.357409954 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:25.358714104 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:25.358800888 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.359041929 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:25.359051943 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.365377903 CEST	49742	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.365411043 CEST	443	49742	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.383394003 CEST	49741	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.383420944 CEST	443	49741	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.383960009 CEST	49743	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.383980989 CEST	443	49743	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.386806965 CEST	49740	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.386814117 CEST	443	49740	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.402103901 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:25.415205002 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.415239096 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.415292978 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.415326118 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.415344954 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.415369987 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.415853977 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.415880919 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.415925980 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.415940046 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.415962934 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.415975094 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.416842937 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.416861057 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.416898966 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.416907072 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.416937113 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.416989088 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.417779922 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.417810917 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.417840958 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.417853117 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.417874098 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.417905092 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.418800116 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.418818951 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.418873072 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.418889046 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.418919086 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.418932915 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.436894894 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.436913013 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.436995029 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.437021017 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.437231064 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.437410116 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.437427044 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.437474012 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.437488079 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.437511921 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.437545061 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.481863022 CEST	443	49744	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.482238054 CEST	49744	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:25.482254982 CEST	443	49744	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.482604980 CEST	443	49744	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.483580112 CEST	49744	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:25.483650923 CEST	443	49744	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.483803034 CEST	49744	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:25.507558107 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.507601023 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.507771969 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.507771969 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.507802963 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.507855892 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.507944107 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.507960081 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.508008003 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.508016109 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.508032084 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.508053064 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.508179903 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.508210897 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.508238077 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.508244991 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.508268118 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.508282900 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.508318901 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.509887934 CEST	49739	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:25.509921074 CEST	443	49739	66.22.0.11	192.168.2.9
May 29, 2024 12:12:25.528501987 CEST	443	49744	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.878124952 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.878153086 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.878161907 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.878196955 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.878266096 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:25.878282070 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:25.878305912 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:25.933368921 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:26.218920946 CEST	443	49744	152.42.220.64	192.168.2.9
May 29, 2024 12:12:26.219099045 CEST	443	49744	152.42.220.64	192.168.2.9
May 29, 2024 12:12:26.219187975 CEST	49744	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.105417967 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.105429888 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.105472088 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.105530024 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.105590105 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.105793953 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.105802059 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.105819941 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.105844021 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.105874062 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.106703043 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.106713057 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.106761932 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.108333111 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.108340979 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.108413935 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.417419910 CEST	49744	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.417449951 CEST	443	49744	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.442701101 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.442714930 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.442774057 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.442797899 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.442814112 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.442840099 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.442872047 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.443324089 CEST	49737	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:27.443339109 CEST	443	49737	152.42.220.64	192.168.2.9
May 29, 2024 12:12:27.558357954 CEST	49677	443	192.168.2.9	20.189.173.11
May 29, 2024 12:12:29.646513939 CEST	49750	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:29.646545887 CEST	443	49750	152.42.220.64	192.168.2.9
May 29, 2024 12:12:29.646697044 CEST	49750	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:29.647507906 CEST	49751	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:29.647540092 CEST	443	49751	152.42.220.64	192.168.2.9
May 29, 2024 12:12:29.648507118 CEST	49751	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:29.651268959 CEST	49750	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:29.651295900 CEST	443	49750	152.42.220.64	192.168.2.9
May 29, 2024 12:12:29.651437044 CEST	49751	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:29.651448965 CEST	443	49751	152.42.220.64	192.168.2.9
May 29, 2024 12:12:29.946376085 CEST	49752	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:29.946425915 CEST	443	49752	66.22.0.11	192.168.2.9
May 29, 2024 12:12:29.946556091 CEST	49752	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:29.947395086 CEST	49752	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:29.947412968 CEST	443	49752	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.041219950 CEST	49753	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:30.041263103 CEST	443	49753	54.228.71.178	192.168.2.9
May 29, 2024 12:12:30.041429996 CEST	49753	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:30.041629076 CEST	49753	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:30.041652918 CEST	443	49753	54.228.71.178	192.168.2.9
May 29, 2024 12:12:30.042109013 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.042145967 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.042215109 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.042773962 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.042794943 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.470634937 CEST	443	49752	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.472524881 CEST	49752	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.472551107 CEST	443	49752	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.472944975 CEST	443	49752	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.473510027 CEST	49752	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.473582029 CEST	443	49752	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.474102974 CEST	49752	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.516504049 CEST	443	49752	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.576759100 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.583056927 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.583072901 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.584247112 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.584315062 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.585736990 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.585808992 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.586431980 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.586441040 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.689780951 CEST	443	49752	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.689860106 CEST	443	49752	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.689898014 CEST	49752	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.692111969 CEST	49752	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.692132950 CEST	443	49752	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.699732065 CEST	49756	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.699779034 CEST	443	49756	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.699848890 CEST	49756	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.700639963 CEST	49756	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.700654984 CEST	443	49756	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.729654074 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.783451080 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.783479929 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.783487082 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.783519030 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.783528090 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.783545971 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.783555984 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.783572912 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.783587933 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.783587933 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.783613920 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.784534931 CEST	443	49753	54.228.71.178	192.168.2.9
May 29, 2024 12:12:30.784737110 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.784763098 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.784764051 CEST	443	49754	66.22.0.11	192.168.2.9
May 29, 2024 12:12:30.784854889 CEST	49754	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:30.785310984 CEST	49753	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:30.785331011 CEST	443	49753	54.228.71.178	192.168.2.9
May 29, 2024 12:12:30.785650969 CEST	443	49753	54.228.71.178	192.168.2.9
May 29, 2024 12:12:30.788593054 CEST	443	49750	152.42.220.64	192.168.2.9
May 29, 2024 12:12:30.789128065 CEST	49753	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:30.789186001 CEST	443	49753	54.228.71.178	192.168.2.9
May 29, 2024 12:12:30.789371014 CEST	49750	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:30.789387941 CEST	443	49750	152.42.220.64	192.168.2.9
May 29, 2024 12:12:30.789482117 CEST	49753	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:30.789695978 CEST	443	49750	152.42.220.64	192.168.2.9
May 29, 2024 12:12:30.794153929 CEST	49750	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:30.794258118 CEST	443	49750	152.42.220.64	192.168.2.9
May 29, 2024 12:12:30.836496115 CEST	443	49753	54.228.71.178	192.168.2.9
May 29, 2024 12:12:30.929105043 CEST	443	49725	142.250.186.164	192.168.2.9
May 29, 2024 12:12:30.929163933 CEST	443	49725	142.250.186.164	192.168.2.9
May 29, 2024 12:12:30.929231882 CEST	49725	443	192.168.2.9	142.250.186.164
May 29, 2024 12:12:30.949505091 CEST	49750	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:31.051372051 CEST	443	49753	54.228.71.178	192.168.2.9
May 29, 2024 12:12:31.051457882 CEST	443	49753	54.228.71.178	192.168.2.9
May 29, 2024 12:12:31.051543951 CEST	49753	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:31.052400112 CEST	49753	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:31.052421093 CEST	443	49753	54.228.71.178	192.168.2.9
May 29, 2024 12:12:31.219702959 CEST	443	49756	66.22.0.11	192.168.2.9
May 29, 2024 12:12:31.219968081 CEST	49756	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:31.220001936 CEST	443	49756	66.22.0.11	192.168.2.9
May 29, 2024 12:12:31.220307112 CEST	443	49756	66.22.0.11	192.168.2.9
May 29, 2024 12:12:31.220633030 CEST	49756	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:31.220691919 CEST	443	49756	66.22.0.11	192.168.2.9
May 29, 2024 12:12:31.220760107 CEST	49756	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:31.267246008 CEST	49725	443	192.168.2.9	142.250.186.164
May 29, 2024 12:12:31.267282009 CEST	443	49725	142.250.186.164	192.168.2.9
May 29, 2024 12:12:31.268513918 CEST	443	49756	66.22.0.11	192.168.2.9
May 29, 2024 12:12:31.535024881 CEST	443	49756	66.22.0.11	192.168.2.9
May 29, 2024 12:12:31.535092115 CEST	443	49756	66.22.0.11	192.168.2.9
May 29, 2024 12:12:31.535398960 CEST	49756	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:31.631059885 CEST	443	49751	152.42.220.64	192.168.2.9
May 29, 2024 12:12:31.634671926 CEST	49751	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:31.634685993 CEST	443	49751	152.42.220.64	192.168.2.9
May 29, 2024 12:12:31.635062933 CEST	443	49751	152.42.220.64	192.168.2.9
May 29, 2024 12:12:31.635487080 CEST	49751	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:31.635545969 CEST	443	49751	152.42.220.64	192.168.2.9
May 29, 2024 12:12:31.640052080 CEST	49756	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:31.640093088 CEST	443	49756	66.22.0.11	192.168.2.9
May 29, 2024 12:12:31.761261940 CEST	49751	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:32.483330965 CEST	49704	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:32.483330965 CEST	49704	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:32.483983040 CEST	49757	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:32.484026909 CEST	443	49757	23.206.229.209	192.168.2.9
May 29, 2024 12:12:32.484102011 CEST	49757	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:32.484364986 CEST	49757	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:32.484380960 CEST	443	49757	23.206.229.209	192.168.2.9
May 29, 2024 12:12:32.488574982 CEST	443	49704	23.206.229.209	192.168.2.9
May 29, 2024 12:12:32.488589048 CEST	443	49704	23.206.229.209	192.168.2.9
May 29, 2024 12:12:32.916024923 CEST	49758	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:32.916075945 CEST	443	49758	66.22.0.11	192.168.2.9
May 29, 2024 12:12:32.916209936 CEST	49758	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:32.920095921 CEST	49758	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:32.920120001 CEST	443	49758	66.22.0.11	192.168.2.9
May 29, 2024 12:12:32.920176983 CEST	49759	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:32.920226097 CEST	443	49759	54.228.71.178	192.168.2.9
May 29, 2024 12:12:32.920327902 CEST	49759	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:32.924510956 CEST	49759	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:32.924546003 CEST	443	49759	54.228.71.178	192.168.2.9
May 29, 2024 12:12:32.969866991 CEST	49750	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:33.016503096 CEST	443	49750	152.42.220.64	192.168.2.9
May 29, 2024 12:12:33.085949898 CEST	443	49757	23.206.229.209	192.168.2.9
May 29, 2024 12:12:33.086119890 CEST	49757	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:33.403225899 CEST	443	49750	152.42.220.64	192.168.2.9
May 29, 2024 12:12:33.403322935 CEST	443	49750	152.42.220.64	192.168.2.9
May 29, 2024 12:12:33.403374910 CEST	49750	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:33.432704926 CEST	443	49758	66.22.0.11	192.168.2.9
May 29, 2024 12:12:33.451066017 CEST	49758	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:33.451083899 CEST	443	49758	66.22.0.11	192.168.2.9
May 29, 2024 12:12:33.451926947 CEST	443	49758	66.22.0.11	192.168.2.9
May 29, 2024 12:12:33.453713894 CEST	49758	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:33.453826904 CEST	443	49758	66.22.0.11	192.168.2.9
May 29, 2024 12:12:33.454380035 CEST	49750	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:33.454401016 CEST	443	49750	152.42.220.64	192.168.2.9
May 29, 2024 12:12:33.528234005 CEST	49758	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:33.641567945 CEST	443	49759	54.228.71.178	192.168.2.9
May 29, 2024 12:12:33.655901909 CEST	49759	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:33.655916929 CEST	443	49759	54.228.71.178	192.168.2.9
May 29, 2024 12:12:33.657211065 CEST	443	49759	54.228.71.178	192.168.2.9
May 29, 2024 12:12:33.657632113 CEST	49759	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:33.657795906 CEST	443	49759	54.228.71.178	192.168.2.9
May 29, 2024 12:12:33.731472969 CEST	49759	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:43.332175016 CEST	443	49758	66.22.0.11	192.168.2.9
May 29, 2024 12:12:43.332273960 CEST	443	49758	66.22.0.11	192.168.2.9
May 29, 2024 12:12:43.332319021 CEST	49758	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:43.702795982 CEST	49760	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:43.702840090 CEST	443	49760	152.42.220.64	192.168.2.9
May 29, 2024 12:12:43.702929974 CEST	49760	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:43.703691959 CEST	49760	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:43.703704119 CEST	443	49760	152.42.220.64	192.168.2.9
May 29, 2024 12:12:43.803088903 CEST	49758	443	192.168.2.9	66.22.0.11
May 29, 2024 12:12:43.803118944 CEST	443	49758	66.22.0.11	192.168.2.9
May 29, 2024 12:12:43.805095911 CEST	49751	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:43.852503061 CEST	443	49751	152.42.220.64	192.168.2.9
May 29, 2024 12:12:44.243136883 CEST	443	49751	152.42.220.64	192.168.2.9
May 29, 2024 12:12:44.243223906 CEST	443	49751	152.42.220.64	192.168.2.9
May 29, 2024 12:12:44.243282080 CEST	49751	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:44.244376898 CEST	49751	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:44.244395018 CEST	443	49751	152.42.220.64	192.168.2.9
May 29, 2024 12:12:44.894640923 CEST	443	49760	152.42.220.64	192.168.2.9
May 29, 2024 12:12:44.894932985 CEST	49760	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:44.894954920 CEST	443	49760	152.42.220.64	192.168.2.9
May 29, 2024 12:12:44.895303011 CEST	443	49760	152.42.220.64	192.168.2.9
May 29, 2024 12:12:44.895804882 CEST	49760	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:44.895860910 CEST	443	49760	152.42.220.64	192.168.2.9
May 29, 2024 12:12:44.948436022 CEST	49760	443	192.168.2.9	152.42.220.64
May 29, 2024 12:12:52.239273071 CEST	443	49757	23.206.229.209	192.168.2.9
May 29, 2024 12:12:52.239370108 CEST	49757	443	192.168.2.9	23.206.229.209
May 29, 2024 12:12:56.606288910 CEST	443	49759	54.228.71.178	192.168.2.9
May 29, 2024 12:12:56.606360912 CEST	443	49759	54.228.71.178	192.168.2.9
May 29, 2024 12:12:56.606692076 CEST	49759	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:58.514569044 CEST	49759	443	192.168.2.9	54.228.71.178
May 29, 2024 12:12:58.514605045 CEST	443	49759	54.228.71.178	192.168.2.9
May 29, 2024 12:13:20.421369076 CEST	49763	443	192.168.2.9	142.250.186.164
May 29, 2024 12:13:20.421396017 CEST	443	49763	142.250.186.164	192.168.2.9
May 29, 2024 12:13:20.424468040 CEST	49763	443	192.168.2.9	142.250.186.164
May 29, 2024 12:13:20.424710035 CEST	49763	443	192.168.2.9	142.250.186.164
May 29, 2024 12:13:20.424724102 CEST	443	49763	142.250.186.164	192.168.2.9
May 29, 2024 12:13:21.077634096 CEST	443	49763	142.250.186.164	192.168.2.9
May 29, 2024 12:13:21.078026056 CEST	49763	443	192.168.2.9	142.250.186.164
May 29, 2024 12:13:21.078046083 CEST	443	49763	142.250.186.164	192.168.2.9
May 29, 2024 12:13:21.078466892 CEST	443	49763	142.250.186.164	192.168.2.9
May 29, 2024 12:13:21.078983068 CEST	49763	443	192.168.2.9	142.250.186.164
May 29, 2024 12:13:21.079051971 CEST	443	49763	142.250.186.164	192.168.2.9
May 29, 2024 12:13:21.121500015 CEST	49763	443	192.168.2.9	142.250.186.164
May 29, 2024 12:13:29.902769089 CEST	49760	443	192.168.2.9	152.42.220.64
May 29, 2024 12:13:29.902801991 CEST	443	49760	152.42.220.64	192.168.2.9
May 29, 2024 12:13:30.978574991 CEST	443	49763	142.250.186.164	192.168.2.9
May 29, 2024 12:13:30.978643894 CEST	443	49763	142.250.186.164	192.168.2.9
May 29, 2024 12:13:30.978764057 CEST	49763	443	192.168.2.9	142.250.186.164
May 29, 2024 12:13:32.529165030 CEST	49763	443	192.168.2.9	142.250.186.164
May 29, 2024 12:13:32.529196024 CEST	443	49763	142.250.186.164	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 29, 2024 12:12:16.283344984 CEST	53	49159	1.1.1.1	192.168.2.9
May 29, 2024 12:12:16.285007954 CEST	53	59932	1.1.1.1	192.168.2.9
May 29, 2024 12:12:17.301064968 CEST	53	59096	1.1.1.1	192.168.2.9
May 29, 2024 12:12:17.951374054 CEST	51094	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:17.951955080 CEST	52904	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:18.112884045 CEST	53	51094	1.1.1.1	192.168.2.9
May 29, 2024 12:12:18.190448999 CEST	53	52904	1.1.1.1	192.168.2.9
May 29, 2024 12:12:20.210825920 CEST	63713	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:20.211751938 CEST	61464	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:20.213666916 CEST	49691	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:20.216332912 CEST	52773	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:20.219436884 CEST	53	63713	1.1.1.1	192.168.2.9
May 29, 2024 12:12:20.220310926 CEST	53	61464	1.1.1.1	192.168.2.9
May 29, 2024 12:12:20.221432924 CEST	53	49691	1.1.1.1	192.168.2.9
May 29, 2024 12:12:20.223522902 CEST	53	52773	1.1.1.1	192.168.2.9
May 29, 2024 12:12:20.225946903 CEST	61275	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:20.226522923 CEST	61091	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:20.230695009 CEST	60638	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:20.231302023 CEST	62878	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:20.234416962 CEST	53	61091	1.1.1.1	192.168.2.9
May 29, 2024 12:12:20.237814903 CEST	53	60638	1.1.1.1	192.168.2.9
May 29, 2024 12:12:20.238390923 CEST	53	61275	1.1.1.1	192.168.2.9
May 29, 2024 12:12:20.239207029 CEST	53	62878	1.1.1.1	192.168.2.9
May 29, 2024 12:12:20.357487917 CEST	53491	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:20.360711098 CEST	62812	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:20.364500046 CEST	53	53491	1.1.1.1	192.168.2.9
May 29, 2024 12:12:20.367711067 CEST	53	62812	1.1.1.1	192.168.2.9
May 29, 2024 12:12:23.252013922 CEST	53	59583	1.1.1.1	192.168.2.9
May 29, 2024 12:12:23.252175093 CEST	53	52450	1.1.1.1	192.168.2.9
May 29, 2024 12:12:23.329324961 CEST	55768	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:23.329566956 CEST	64489	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:23.482175112 CEST	53	55768	1.1.1.1	192.168.2.9
May 29, 2024 12:12:23.561547995 CEST	53	64489	1.1.1.1	192.168.2.9
May 29, 2024 12:12:24.208029032 CEST	63859	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:24.208317995 CEST	51768	53	192.168.2.9	1.1.1.1
May 29, 2024 12:12:24.219978094 CEST	53	63859	1.1.1.1	192.168.2.9
May 29, 2024 12:12:24.220658064 CEST	53	51768	1.1.1.1	192.168.2.9
May 29, 2024 12:12:34.832712889 CEST	53	65343	1.1.1.1	192.168.2.9
May 29, 2024 12:12:53.832298994 CEST	53	49182	1.1.1.1	192.168.2.9
May 29, 2024 12:13:08.042273998 CEST	138	138	192.168.2.9	192.168.2.255
May 29, 2024 12:13:15.942591906 CEST	53	63267	1.1.1.1	192.168.2.9
May 29, 2024 12:13:16.811815023 CEST	53	60384	1.1.1.1	192.168.2.9

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 29, 2024 12:12:18.190537930 CEST	192.168.2.9	1.1.1.1	c244	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 29, 2024 12:12:17.951374054 CEST	192.168.2.9	1.1.1.1	0x1f23	Standard query (0)	mail.fnbo-in.selfip.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:17.951955080 CEST	192.168.2.9	1.1.1.1	0xd5f9	Standard query (0)	mail.fnbo-in.selfip.com	65	IN (0x0001)	false
May 29, 2024 12:12:20.210825920 CEST	192.168.2.9	1.1.1.1	0xdd02	Standard query (0)	cdn.appdynamics.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.211751938 CEST	192.168.2.9	1.1.1.1	0x7da3	Standard query (0)	cdn.appdynamics.com	65	IN (0x0001)	false
May 29, 2024 12:12:20.213666916 CEST	192.168.2.9	1.1.1.1	0x4c91	Standard query (0)	cdn.perfdrive.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.216332912 CEST	192.168.2.9	1.1.1.1	0x2951	Standard query (0)	cdn.perfdrive.com	65	IN (0x0001)	false
May 29, 2024 12:12:20.225946903 CEST	192.168.2.9	1.1.1.1	0xa658	Standard query (0)	olb.sccu.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.226522923 CEST	192.168.2.9	1.1.1.1	0xbb3f	Standard query (0)	olb.sccu.com	65	IN (0x0001)	false
May 29, 2024 12:12:20.230695009 CEST	192.168.2.9	1.1.1.1	0x146a	Standard query (0)	mpsnare.iesnare.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.231302023 CEST	192.168.2.9	1.1.1.1	0x10f0	Standard query (0)	mpsnare.iesnare.com	65	IN (0x0001)	false
May 29, 2024 12:12:20.357487917 CEST	192.168.2.9	1.1.1.1	0xa16f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.360711098 CEST	192.168.2.9	1.1.1.1	0x63e9	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 29, 2024 12:12:23.329324961 CEST	192.168.2.9	1.1.1.1	0xb8ca	Standard query (0)	mail.fnbo-in.selfip.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:23.329566956 CEST	192.168.2.9	1.1.1.1	0x599d	Standard query (0)	mail.fnbo-in.selfip.com	65	IN (0x0001)	false
May 29, 2024 12:12:24.208029032 CEST	192.168.2.9	1.1.1.1	0x7539	Standard query (0)	olb.sccu.com	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:24.208317995 CEST	192.168.2.9	1.1.1.1	0x4ea5	Standard query (0)	olb.sccu.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 29, 2024 12:12:07.249895096 CEST	1.1.1.1	192.168.2.9	0x63c2	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:07.249895096 CEST	1.1.1.1	192.168.2.9	0x63c2	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:18.112884045 CEST	1.1.1.1	192.168.2.9	0x1f23	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:18.112884045 CEST	1.1.1.1	192.168.2.9	0x1f23	No error (0)	fnbo-in.selfip.com		152.42.220.64	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:18.190448999 CEST	1.1.1.1	192.168.2.9	0xd5f9	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:20.219436884 CEST	1.1.1.1	192.168.2.9	0xdd02	No error (0)	cdn.appdynamics.com		13.227.219.85	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.219436884 CEST	1.1.1.1	192.168.2.9	0xdd02	No error (0)	cdn.appdynamics.com		13.227.219.2	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.219436884 CEST	1.1.1.1	192.168.2.9	0xdd02	No error (0)	cdn.appdynamics.com		13.227.219.49	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.219436884 CEST	1.1.1.1	192.168.2.9	0xdd02	No error (0)	cdn.appdynamics.com		13.227.219.115	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.221432924 CEST	1.1.1.1	192.168.2.9	0x4c91	No error (0)	cdn.perfdrive.com		130.211.29.114	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.234416962 CEST	1.1.1.1	192.168.2.9	0xbb3f	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:20.237814903 CEST	1.1.1.1	192.168.2.9	0x146a	No error (0)	mpsnare.iesnare.com	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:20.237814903 CEST	1.1.1.1	192.168.2.9	0x146a	No error (0)	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		54.228.71.178	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.237814903 CEST	1.1.1.1	192.168.2.9	0x146a	No error (0)	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		54.195.39.4	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.238390923 CEST	1.1.1.1	192.168.2.9	0xa658	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:20.238390923 CEST	1.1.1.1	192.168.2.9	0xa658	No error (0)	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		66.22.0.11	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.239207029 CEST	1.1.1.1	192.168.2.9	0x10f0	No error (0)	mpsnare.iesnare.com	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:20.364500046 CEST	1.1.1.1	192.168.2.9	0xa16f	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:20.367711067 CEST	1.1.1.1	192.168.2.9	0x63e9	No error (0)	www.google.com			65	IN (0x0001)	false
May 29, 2024 12:12:23.482175112 CEST	1.1.1.1	192.168.2.9	0xb8ca	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:23.482175112 CEST	1.1.1.1	192.168.2.9	0xb8ca	No error (0)	fnbo-in.selfip.com		152.42.220.64	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:23.561547995 CEST	1.1.1.1	192.168.2.9	0x599d	No error (0)	mail.fnbo-in.selfip.com	fnbo-in.selfip.com		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:24.219978094 CEST	1.1.1.1	192.168.2.9	0x7539	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:24.219978094 CEST	1.1.1.1	192.168.2.9	0x7539	No error (0)	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		66.22.0.11	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:24.220658064 CEST	1.1.1.1	192.168.2.9	0x4ea5	No error (0)	olb.sccu.com	72afd150f9924dccba2ff8c37a8104b1.v1.radwarecloud.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:29.633594036 CEST	1.1.1.1	192.168.2.9	0xc523	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:29.633594036 CEST	1.1.1.1	192.168.2.9	0xc523	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 29, 2024 12:12:43.824518919 CEST	1.1.1.1	192.168.2.9	0x6f97	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:12:43.824518919 CEST	1.1.1.1	192.168.2.9	0x6f97	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:08.964188099 CEST	1.1.1.1	192.168.2.9	0x26bf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:08.964188099 CEST	1.1.1.1	192.168.2.9	0x26bf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 29, 2024 12:13:29.082288980 CEST	1.1.1.1	192.168.2.9	0x4c63	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 29, 2024 12:13:29.082288980 CEST	1.1.1.1	192.168.2.9	0x4c63	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ipinfo.io

mail.fnbo-in.selfip.com

https:

cdn.perfdrive.com

olb.sccu.com

mpsnare.iesnare.com

cdn.appdynamics.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.9	49705	34.117.186.192	443

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:05 UTC	59	OUT	GET / HTTP/1.1 Host: ipinfo.io Connection: Keep-Alive
2024-05-29 10:12:05 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Wed, 29 May 2024 10:12:05 GMT content-type: application/json; charset=utf-8 Content-Length: 321 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-29 10:12:05 UTC	321	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 73 74 61 74 69 63 2d 63 70 65 2d 38 2d 34 36 2d 31 32 33 2d 31 37 35 2e 63 65 6e 74 75 72 79 6c 69 6e 6b 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 30 2e 37 31 34 33 2c 2d 37 34 2e 30 30 36 30 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 33 33 35 36 20 4c 65 76 65 6c 20 33 20 50 61 72 65 6e 74 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 31 30 30 30 31 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a Data Ascii: { "ip": "8.46.123.175", "hostname": "static-cpe-8-46-123-175.centurylink.com", "city": "New York City", "region": "New York", "country": "US", "loc": "40.7143,-74.0060", "org": "AS3356 Level 3 Parent, LLC", "postal": "10001", "timezone":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49712	152.42.220.64	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:19 UTC	676	OUT	GET /x/otp.html HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:20 UTC	206	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:12:19 GMT Server: Apache Last-Modified: Sat, 13 Jan 2024 11:48:36 GMT Accept-Ranges: bytes Content-Length: 9977 Connection: close Content-Type: text/html
2024-05-29 10:12:20 UTC	7986	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 74 2d 63 68 72 6f 6d 65 20 74 2d 63 68 72 6f 6d 65 31 30 34 22 20 73 74 79 6c 65 3d 22 2d 2d 76 68 3a 35 37 30 70 78 3b 22 3e 0d 0a 3c 68 65 61 64 20 69 64 3d 22 4d 5f 68 65 61 64 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 61 73 79 6e 63 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 61 70 70 64 79 6e 61 6d 69 63 73 2e 63 6f 6d 2f 61 64 72 75 6d 2d 65 78 74 2e 65 62 66 31 36 32 30 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-us" xml:lang="en-us" class="t-chrome t-chrome104" style="--vh:570px;"><head id="M_head"> <script type="text/javascript" async="" src="https://cdn.appdynamics.com/adrum-ext.ebf1620
2024-05-29 10:12:20 UTC	1991	IN	Data Raw: 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6d 61 69 6e 2d 62 6f 74 74 6f 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 49 44 53 2d 4d 43 4d 42 61 6e 6e 65 72 20 49 44 53 2d 4d 43 4d 42 61 6e 6e 65 72 2d 62 6f 74 74 6f 6d 20 62 61 6e 6e 65 72 2d 62 6f 74 74 6f 6d 22 20 64 61 74 61 2d 63 6f 6e 74 65 6e 74 6c 6f 63 61 74 69 6f 6e 3d 22 42 6f 74 74 Data Ascii: </div> <div id="main-bottom"> <div class="IDS-MCMBanner IDS-MCMBanner-bottom banner-bottom" data-contentlocation="Bott

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49713	152.42.220.64	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:20 UTC	573	OUT	GET /x/css/opensans.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/otp.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:20 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:12:20 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 2431 Connection: close Content-Type: text/css
2024-05-29 10:12:20 UTC	2431	IN	Data Raw: 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4f 70 65 6e 20 53 61 6e 73 27 29 2c 20 6c 6f 63 61 6c 28 27 4f 70 65 6e 53 61 6e 73 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 6f 70 65 6e 73 61 6e 73 2f 76 31 33 2f 4b 38 38 70 52 33 67 6f 41 57 54 37 42 54 74 33 32 5a 30 31 6d 78 4a 74 6e 4b 49 54 70 70 4f 49 5f 49 76 63 58 58 44 4e 72 73 63 2e 77 6f 66 66 32 Data Ascii: /* cyrillic-ext */@font-face { font-family: 'Open Sans'; font-style: normal; font-weight: 400; src: local('Open Sans'), local('OpenSans'), url(https://fonts.gstatic.com/s/opensans/v13/K88pR3goAWT7BTt32Z01mxJtnKITppOI_IvcXXDNrsc.woff2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49720	130.211.29.114	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:20 UTC	544	OUT	GET /aperture/aperture.js HTTP/1.1 Host: cdn.perfdrive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:20 UTC	424	IN	HTTP/1.1 200 OK Server: nginx/1.10.1 Content-Length: 26692 Access-Control-Allow-Origin: * Accept-Ranges: bytes Via: 1.1 google Date: Wed, 29 May 2024 10:02:57 GMT Cache-Control: max-age=3600,public Last-Modified: Mon, 13 May 2024 04:56:42 GMT ETag: "66419d8a-6844" Content-Type: application/javascript Vary: Accept-Encoding Age: 563 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-29 10:12:20 UTC	966	IN	Data Raw: 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 67 29 7b 66 75 6e 63 74 69 6f 6e 20 44 28 62 2c 63 29 7b 76 61 72 20 66 3d 6e 75 6c 6c 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 63 7c 7c 21 30 3d 3d 3d 63 7c 7c 22 74 72 75 65 22 3d 3d 3d 63 29 7b 4b 3d 67 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 76 61 72 20 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 73 2a 22 2b 62 2b 22 3d 5c 5c 73 2a 28 2e 2a 3f 29 5c 5c 73 2a 24 22 29 7d 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 63 7c 7c 30 3d 3d 63 7c 7c 22 66 61 6c 73 65 22 3d 3d 63 7c 7c 30 3d 3d 63 7c 7c 6e 75 6c 6c 3d 3d 63 29 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 73 2a 22 2b 62 2b 68 2b 22 3d 5c 5c 73 Data Ascii: try{(function(a,g){function D(b,c){var f=null;if("undefined"!==typeof c\|\|!0===c\|\|"true"===c){K=g.cookie.split(";");var e=new RegExp("^\\s"+b+"=\\s(.?)\\s$")}else if("undefined"===typeof c\|\|0==c\|\|"false"==c\|\|0==c\|\|null==c)e=new RegExp("^\\s*"+b+h+"=\\s
2024-05-29 10:12:20 UTC	1390	IN	Data Raw: 2b 32 7d 7d 65 6c 73 65 20 72 65 74 75 72 6e 21 31 3b 65 6c 73 65 20 72 65 74 75 72 6e 21 31 7d 76 61 72 20 42 3d 7b 22 38 34 61 61 22 3a 22 73 65 6e 64 22 2c 74 65 73 74 61 65 66 64 3a 22 73 65 6e 64 22 2c 0a 20 20 20 20 20 20 20 20 22 39 35 35 66 22 3a 22 73 65 6e 64 22 2c 62 66 62 65 3a 22 73 65 6e 64 22 2c 39 39 31 36 3a 22 73 65 6e 64 22 2c 63 38 63 32 3a 22 73 65 6e 64 22 2c 22 39 30 64 64 22 3a 22 73 65 6e 64 22 2c 61 32 63 38 3a 22 73 65 6e 64 22 2c 38 30 38 33 3a 22 73 65 6e 64 22 2c 22 38 65 62 63 22 3a 22 73 65 6e 64 22 2c 62 37 61 61 3a 22 73 65 6e 64 22 2c 22 38 64 33 39 22 3a 22 73 65 6e 64 22 2c 62 62 62 38 3a 22 73 65 6e 64 22 2c 61 35 64 66 3a 22 73 65 6e 64 22 2c 22 38 61 61 65 22 3a 22 73 65 6e 64 22 2c 62 30 63 61 3a 22 73 65 6e 64 22 Data Ascii: +2}}else return!1;else return!1}var B={"84aa":"send",testaefd:"send", "955f":"send",bfbe:"send",9916:"send",c8c2:"send","90dd":"send",a2c8:"send",8083:"send","8ebc":"send",b7aa:"send","8d39":"send",bbb8:"send",a5df:"send","8aae":"send",b0ca:"send"
2024-05-29 10:12:20 UTC	1390	IN	Data Raw: 79 54 65 73 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 66 29 7b 76 61 72 20 65 3d 30 2c 64 3d 30 2c 6c 3d 30 2c 6b 3d 30 2c 71 3d 30 2c 70 3d 30 2c 6d 3d 30 2c 72 3d 30 2c 76 3d 30 2c 48 3d 30 2c 49 3d 30 2c 4d 3d 2d 31 2c 4e 3d 30 2c 4f 3d 30 2c 50 3d 30 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 73 73 50 65 72 66 6f 72 6d 61 6e 63 65 4d 65 74 72 69 63 53 65 6e 74 26 26 30 3d 3d 77 69 6e 64 6f 77 2e 73 73 50 65 72 66 6f 72 6d 61 6e 63 65 4d 65 74 72 69 63 53 65 6e 74 29 7b 77 69 6e 64 6f 77 2e 73 73 50 65 72 66 6f 72 6d 61 6e 63 65 4d 65 74 72 69 63 53 65 6e 74 3d 21 30 3b 74 72 79 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 Data Ascii: yTester=function(b,c,f){var e=0,d=0,l=0,k=0,q=0,p=0,m=0,r=0,v=0,H=0,I=0,M=-1,N=0,O=0,P=0;if("undefined"!==typeof window.ssPerformanceMetricSent&&0==window.ssPerformanceMetricSent){window.ssPerformanceMetricSent=!0;try{"undefined"!==typeof window.ssTimeLog
2024-05-29 10:12:20 UTC	1390	IN	Data Raw: 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 2b 22 3d 5c 5c 73 2a 28 2e 2a 3f 29 5c 5c 73 2a 24 22 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 56 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 56 5b 63 5d 2e 6d 61 74 63 68 28 5a 29 2c 6e 75 6c 6c 21 3d 3d 62 29 7b 4d 3d 62 5b 31 5d 2e 73 75 62 73 74 72 28 34 2c 31 29 3b 62 72 65 61 6b 7d 4e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 66 3f 66 3a 22 75 6e 64 22 3b 4f 3d 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 73 2e 69 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 3b 50 3d 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 73 2e 73 73 41 6e 61 6c 79 74 69 63 73 46 6c 61 67 7d 63 61 74 63 68 28 51 29 7b 50 3d 4f 3d 4e 3d 4d 3d 49 3d 48 3d 76 3d 72 3d 6d Data Ascii: .SSJSConnectorObj.domain_info+"=\\s(.?)\\s*$");for(c=0;c<V.length;c++)if(b=V[c].match(Z),null!==b){M=b[1].substr(4,1);break}N="undefined"!==typeof f?f:"und";O=window.ssTimeLogs.initialCookie;P=window.ssTimeLogs.ssAnalyticsFlag}catch(Q){P=O=N=M=I=H=v=r=m
2024-05-29 10:12:20 UTC	1390	IN	Data Raw: 66 20 65 2e 63 61 6e 50 6c 61 79 54 79 70 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 65 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 22 61 75 64 69 6f 2f 6d 70 65 67 22 29 26 26 0a 20 20 20 20 28 64 3d 65 2e 63 61 6e 50 6c 61 79 54 79 70 65 28 6c 5b 30 5d 29 29 3b 76 61 72 20 6b 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 32 3c 64 2e 6c 65 6e 67 74 68 3f 21 30 3a 21 31 7d 63 61 74 63 68 28 71 29 7b 6b 3d 21 31 7d 65 3d 7b 69 65 3a 22 54 72 69 64 65 6e 74 22 2c 65 64 67 65 3a 22 45 64 67 65 48 54 4d 4c 22 2c 77 65 62 6b 69 74 3a 22 57 65 62 6b 69 74 22 2c 6d 6f 7a 3a 22 47 65 63 6b 6f 22 2c 6b 68 74 6d 6c 3a 22 4b 68 74 6d 6c 22 7d 3b 64 3d 7b 65 64 67 65 3a 22 45 64 67 65 22 2c 69 65 3a 22 49 45 22 2c 6b 68 74 6d 6c 3a Data Ascii: f e.canPlayType&&"string"===typeof e.canPlayType("audio/mpeg")&& (d=e.canPlayType(l[0]));var k="string"===typeof d&&2<d.length?!0:!1}catch(q){k=!1}e={ie:"Trident",edge:"EdgeHTML",webkit:"Webkit",moz:"Gecko",khtml:"Khtml"};d={edge:"Edge",ie:"IE",khtml:
2024-05-29 10:12:20 UTC	1390	IN	Data Raw: 5b 31 5d 3a 22 6e 75 6c 6c 22 3a 22 6e 75 6c 6c 22 29 3a 22 74 72 69 64 65 6e 74 22 3d 3d 3d 66 3f 28 62 3d 7b 6c 61 79 6f 75 74 65 6e 67 69 6e 65 3a 65 2e 69 65 2c 62 72 6f 77 73 65 72 3a 64 2e 69 65 7d 2c 62 2e 76 65 72 73 69 6f 6e 3d 22 6d 73 49 6d 65 41 6c 69 67 6e 22 69 6e 20 42 72 6f 77 73 65 72 53 74 79 6c 65 3f 64 2e 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 2e 49 45 5b 34 5d 3a 22 6d 73 55 73 65 72 53 65 6c 65 63 74 22 69 6e 20 42 72 6f 77 73 65 72 53 74 79 6c 65 3f 64 2e 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 2e 49 45 5b 33 5d 3a 22 66 69 6c 6c 22 69 6e 20 42 72 6f 77 73 65 72 53 74 79 6c 65 3f 64 2e 62 72 6f 77 73 65 72 5f 76 65 72 73 69 6f 6e 2e 49 45 5b 32 5d 3a 0a 20 20 20 20 20 20 20 20 22 77 69 64 6f 77 73 22 69 6e 20 42 72 6f 77 Data Ascii: [1]:"null":"null"):"trident"===f?(b={layoutengine:e.ie,browser:d.ie},b.version="msImeAlign"in BrowserStyle?d.browser_version.IE[4]:"msUserSelect"in BrowserStyle?d.browser_version.IE[3]:"fill"in BrowserStyle?d.browser_version.IE[2]: "widows"in Brow
2024-05-29 10:12:20 UTC	1390	IN	Data Raw: 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 26 26 22 61 75 74 6f 22 3d 3d 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 3f 28 68 3d 32 2c 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 3d 32 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 26 26 28 68 3d 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 3f 70 61 72 73 65 49 6e 74 28 61 2e 53 53 4a 53 43 6f 6e 6e 65 63 74 6f 72 4f 62 6a 2e 64 6f 6d 61 69 6e 5f 69 6e 66 6f 29 3a 32 29 3b 65 6c 73 65 22 75 6e 64 65 66 69 6e 65 64 Data Ascii: a.SSJSConnectorObj.domain_info&&"auto"==a.SSJSConnectorObj.domain_info?(h=2,a.SSJSConnectorObj.domain_info=2):"undefined"!==typeof a.SSJSConnectorObj.domain_info&&(h=a.SSJSConnectorObj.domain_info?parseInt(a.SSJSConnectorObj.domain_info):2);else"undefined
2024-05-29 10:12:20 UTC	1390	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 73 73 54 69 6d 65 4c 6f 67 73 2e 69 6e 69 74 69 61 6c 43 6f 6f 6b 69 65 3d 0a 20 20 20 20 20 20 20 20 75 5b 31 5d 2c 77 69 6e 64 6f 77 2e 73 73 4a 53 41 63 74 69 6f 6e 54 61 6b 65 72 28 75 5b 31 5d 5b 34 5d 29 29 3b 76 61 72 20 77 3d 21 31 2c 53 3d 5b 22 5f 5f 75 7a 6d 61 6a 22 2c 22 5f 5f 75 7a 6d 62 6a 22 2c 22 5f 5f 75 7a 6d 63 6a 22 2c 22 5f 5f 75 7a 6d 64 6a 22 5d 2c 7a 3d 21 31 2c 43 3d 6e 75 6c 6c 3b 7a 3d 21 30 3b 79 2b 3d 22 3f 22 3b 75 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 29 7b 76 61 72 20 63 3d 6e 65 77 20 58 44 6f 6d 61 69 6e 52 65 71 75 65 73 74 3b 63 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 62 29 7d 72 65 Data Ascii: (window.ssTimeLogs.initialCookie= u[1],window.ssJSActionTaker(u[1][4]));var w=!1,S=["__uzmaj","__uzmbj","__uzmcj","__uzmdj"],z=!1,C=null;z=!0;y+="?";u=function(b){if("undefined"!==typeof XDomainRequest){var c=new XDomainRequest;c.open("POST",b)}re
2024-05-29 10:12:20 UTC	1390	IN	Data Raw: 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 36 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 37 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 0a 20 20 20 20 20 20 20 20 74 79 70 65 6f 66 20 61 2e 73 63 72 65 65 6e 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 73 63 72 65 65 6e 2e 63 6f Data Ascii: gator.webdriver?a.navigator.webdriver:"":"")+'","j6":"'+("undefined"!==typeof a.navigator?"undefined"!==typeof a.navigator.maxTouchPoints?a.navigator.maxTouchPoints:"":"")+'","j7":"'+("undefined"!== typeof a.screen?"undefined"!==typeof a.screen.co
2024-05-29 10:12:20 UTC	1390	IN	Data Raw: 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 2e 62 75 69 6c 64 49 44 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 62 75 69 6c 64 49 44 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 32 30 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 3f 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 4d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3f 61 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 4d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3a 22 22 3a 22 22 29 2b 27 22 2c 22 6a 32 31 22 3a 22 27 2b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 61 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 3f 22 74 22 3a 22 66 22 29 2b Data Ascii: ndefined"!==typeof a.navigator.buildID?a.navigator.buildID:"":"")+'","j20":"'+("undefined"!==typeof a.navigator?"undefined"!==typeof a.navigator.msMaxTouchPoints?a.navigator.msMaxTouchPoints:"":"")+'","j21":"'+("undefined"!==typeof a.callPhantom?"t":"f")+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49724	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:20 UTC	758	OUT	GET /OnlineBanking/WebResource.axd?d=urCACUaUZeT6oPoIZXShbu_1mg_N_l4jShKx1J9bVPsVr2NBR6js8hj-QO5R4_ig_UM_6BTEvsUm0pVZPSI45Qh8HhMXpcfZ0-H_jz5gjdjFcqhl8Q2uekFcLFceEEhLFJKexQwJQYE-YZPPmEfmF2tz8ibp1V0Knp5fHHCZZeU1&t=637356698800000000 HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:20 UTC	1527	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 811 Connection: close Set-Cookie: __uzma=27e009cf-0c7a-4e8a-8d63-9e9c212e36c5; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977540; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=7823; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=545191012102; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977540; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f600074c451cd-9821-47c1-83bf-0f7d8e90497217169775408570-ea9dce54d0863c8c10; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f90002121be05-a007-4372-ab19-ea8fda6fdddc1-17169775408570-46080e903a82a7a910; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Expires: Thu, 29 May 2025 05:16:04 GMT Last-Modified: Mon, 14 Sep 2020 12:44:40 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:20 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4dzepuaXCka73WwAJ_2cGUOk-mYNMBu4NNb6GQUTO3H5ZlzmusqvhSpz4B6OA74NkaiFw; path=/; SameSite=None; Secure
2024-05-29 10:12:20 UTC	811	IN	Data Raw: ef bb bf 2e 52 61 64 41 6a 61 78 20 2e 72 61 44 69 76 2c 2e 52 61 64 41 6a 61 78 20 2e 72 61 43 6f 6c 6f 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 52 61 64 41 6a 61 78 20 2e 72 61 44 69 76 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 7d 2e 52 61 64 41 6a 61 78 20 2e 72 61 43 6f 6c 6f 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 Data Ascii: .RadAjax .raDiv,.RadAjax .raColor{width:100%;height:100%;margin:0;padding:0}.RadAjax .raDiv{position:relative;z-index:2;background-color:transparent;background-position:center center;background-repeat:no-repeat}.RadAjax .raColor{position:absolute;top:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49723	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:20 UTC	596	OUT	GET /OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:21 UTC	2076	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 1023385 Connection: close Set-Cookie: __uzma=05536068-06df-4041-bffd-5063e9b6ff76; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977540; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=1101; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=332271088877; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977540; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60004136d0a6-7749-490e-b268-a3da44a6861717169775408840-b9ae5fb8eed71fc810; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000e6896969-7b86-409f-b239-91dba149af9c1-17169775408840-adb185b2903027ad10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:20 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public, no-cache="Set-Cookie" Expires: Thu, 29 May 2025 10:12:20 GMT Last-Modified: Wed, 29 May 2024 10:12:20 GMT Set-Cookie: ASP.NET_SessionId=cxfxj2u2guhcbsylyyxfctpw; path=/; HttpOnly; SameSite=Lax Set-Cookie: PortalLanguage_2173=en-US; expires=Tue, 29-May-2074 10:12:20 GMT; path=/; HttpOnly Set-Cookie: ADRUM_BTa=R:32\|g:22cff3cc-8b7e-448d-a37c-f34e0d1e7b6a\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:12:50 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:12:50 GMT; path=/ Set-Cookie: ADRUM_BT1=R:32\|i:1168032\|e:3; expires=Wed, 29-May-2024 10:12:50 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:20 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8; path=/; SameSite=None; Secure
2024-05-29 10:12:21 UTC	14308	IN	Data Raw: ef bb bf 2e 52 64 63 4d 6f 64 75 6c 65 20 2e 6d 61 69 6e 6d 6f 64 75 6c 65 20 62 75 74 74 6f 6e 2e 72 64 63 2d 63 61 6d 65 72 61 2c 2e 61 63 74 69 6f 6e 2d 74 65 78 74 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 78 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 79 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 69 63 6f 6e 2d 72 69 67 68 74 2d 61 72 72 6f 77 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 6c 65 66 74 2d 61 72 72 6f 77 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3e 73 70 61 6e 2c 2e 69 63 6f 6e 2d 72 69 67 68 74 2d 63 68 Data Ascii: .RdcModule .mainmodule button.rdc-camera,.action-textbox-container>button{background-position-x:center !important;background-position-y:center !important}.icon-right-arrow>span,.icon-left-arrow>span,.icon-zoom-out>span,.icon-zoom-in>span,.icon-right-ch
2024-05-29 10:12:21 UTC	16384	IN	Data Raw: 73 74 61 72 74 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 65 6e 64 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 62 61 73 65 6c 69 6e 65 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 62 61 73 65 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 6c 67 2d 73 74 72 65 74 63 68 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 73 74 72 65 74 63 68 20 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 Data Ascii: start{align-self:flex-start !important}.align-self-lg-end{align-self:flex-end !important}.align-self-lg-center{align-self:center !important}.align-self-lg-baseline{align-self:baseline !important}.align-self-lg-stretch{align-self:stretch !important}}@media
2024-05-29 10:12:21 UTC	16384	IN	Data Raw: 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 78 6c 2d 34 2c 2e 6d 79 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 78 6c 2d 34 2c 2e 6d 78 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 78 6c 2d 34 2c 2e 6d 79 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 78 6c 2d 34 2c 2e 6d 78 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 78 6c 2d 35 7b 6d 61 72 67 69 6e 3a 33 72 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 78 6c 2d 35 2c 2e 6d 79 2d 78 6c 2d 35 7b 6d 61 72 67 Data Ascii: portant}.mt-xl-4,.my-xl-4{margin-top:1.5rem !important}.mr-xl-4,.mx-xl-4{margin-right:1.5rem !important}.mb-xl-4,.my-xl-4{margin-bottom:1.5rem !important}.ml-xl-4,.mx-xl-4{margin-left:1.5rem !important}.m-xl-5{margin:3rem !important}.mt-xl-5,.my-xl-5{marg
2024-05-29 10:12:21 UTC	16384	IN	Data Raw: 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b Data Ascii: t[type="submit"].causesValidation:focus,.btn-group-vertical>input[type="submit"].button:focus,.btn-group-vertical>input[type="button"].message_reply_button:focus,.btn-group-vertical>input[type="button"].message_send_button:focus,.btn-group-vertical>input[
2024-05-29 10:12:21 UTC	16384	IN	Data Raw: 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 75 74 74 6f 6e 5f 63 6c 65 61 72 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d Data Ascii: utton,.btn-group input[type="button"].message_send_button+input[type="submit"].message_reply_button,.btn-group input[type="button"].CommandButton+input[type="submit"].message_reply_button,.btn-group input[type="button"].button_clear+input[type="submit"].m
2024-05-29 10:12:21 UTC	16384	IN	Data Raw: 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 63 61 75 73 65 73 56 61 6c 69 64 61 74 69 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 75 74 74 6f Data Ascii: utton+input[type="button"].causesValidation,.btn-group input[type="submit"].message_send_button+input[type="button"].causesValidation,.btn-group input[type="submit"].CommandButton+input[type="button"].causesValidation,.btn-group input[type="submit"].butto
2024-05-29 10:12:21 UTC	16384	IN	Data Raw: 6c 70 2d 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 75 74 74 6f 6e 5f 63 6c 65 61 72 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 2e 64 65 66 61 75 6c 74 2d 64 69 61 6c 6f 67 3e 2e 6d 6f 64 75 6c 65 2d 73 69 6e 67 6c 65 20 2e 6d 6f 64 61 6c 2d 68 65 6c 70 2d 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 20 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 75 74 74 6f 6e 5f 63 6c 65 61 72 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 2e 64 65 66 61 75 6c 74 2d 64 69 61 6c 6f 67 3e 2e 6d 6f 64 75 6c 65 2d 73 69 6e 67 6c 65 20 Data Ascii: lp-submit_button input[type="button"].button_clear+input[type="button"],.default-dialog>.module-single .modal-help-submit_button .btn-group-vertical input[type="button"].button_clear+input[type="button"],.btn-group-vertical .default-dialog>.module-single
2024-05-29 10:12:21 UTC	16384	IN	Data Raw: 56 61 6c 69 64 61 74 69 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d Data Ascii: Validation+input[type="button"].message_send_button,.btn-group-vertical input[type="submit"].button+input[type="button"].message_send_button,.btn-group-vertical input[type="button"].message_reply_button+input[type="button"].message_send_button,.btn-group-
2024-05-29 10:12:21 UTC	16384	IN	Data Raw: 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 72 65 70 6c 79 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 Data Ascii: [type="submit"].message_reply_button,.btn-group>.btn-group:not(:first-child)>input[type="submit"].message_send_button,.btn-group>.btn-group:not(:first-child)>input[type="submit"].CommandButton,.btn-group>.btn-group:not(:first-child)>input[type="submit"].b
2024-05-29 10:12:21 UTC	16384	IN	Data Raw: 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 74 69 63 61 6c 3e 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 43 6f 6d 6d 61 6e 64 42 75 74 74 6f 6e 2b 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 6d 65 73 73 61 67 65 5f 73 65 6e 64 5f 62 75 74 74 6f 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2d 76 65 72 Data Ascii: n+input[type="submit"].message_send_button,.btn-group-vertical>input[type="button"].message_send_button+input[type="submit"].message_send_button,.btn-group-vertical>input[type="button"].CommandButton+input[type="submit"].message_send_button,.btn-group-ver

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49722	54.228.71.178	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:20 UTC	583	OUT	GET /5.5.0/azRxT4-7XyHOYmkJGPhq0-6XHdnuZbWpf3OdFqwKqRU/logo.js HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:21 UTC	654	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 29 May 2024 10:12:21 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 505 Connection: close Last-Modified: Tue, 06 May 2014 00:01:40 GMT Expires: Thu, 29 May 2025 10:12:21 GMT Cache-Control: private p3p: CP="NON DSP COR CURa" Accept-CH: Sec-CH-UA-Full-Version, Sec-CH-UA-Arch, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Bitness, Sec-CH-UA-WoW64, ua, ua-arch, ua-platform, ua-model, ua-mobile, ua-full-version, ua-platform-version Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-29 10:12:21 UTC	505	IN	Data Raw: 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 28 63 29 20 32 30 32 32 20 54 72 61 6e 73 55 6e 69 6f 6e 20 4c 4c 43 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 38 30 38 30 38 62 61 65 2d 64 34 63 33 2d 34 37 61 63 2d 39 39 32 39 2d 35 64 37 37 32 36 34 64 38 32 33 63 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 28 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2c 62 3d 61 2e 69 6f 5f 67 6c 6f 62 61 6c 5f 6f 62 6a 65 63 74 5f 6e 61 6d 65 7c 7c 22 49 47 4c 4f 4f 22 3b 61 3d 61 5b 62 5d 3d 61 5b 62 5d 7c 7c 7b 7d 3b 61 3d 61 2e 69 6f 3d 61 2e 69 6f 7c 7c 7b 7d 3b 62 3d 61 2e 69 6f 5f 64 64 70 3b 69 66 28 61 2e 6c 6f 67 6f 4d 61 69 6e 29 72 65 74 75 72 6e 21 31 3b 61 2e 6c 6f 67 6f 4d 61 69 6e 3d 63 3b 61 2e Data Ascii: /* Copyright(c) 2022 TransUnion LLC. All Rights Reserved. 80808bae-d4c3-47ac-9929-5d77264d823c*/(function(){(function c(){var a=window,b=a.io_global_object_name\|\|"IGLOO";a=a[b]=a[b]\|\|{};a=a.io=a.io\|\|{};b=a.io_ddp;if(a.logoMain)return!1;a.logoMain=c;a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49721	13.227.219.85	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:20 UTC	571	OUT	GET /adrum-ext.ebf1620b3b847dfbf76f6e109dcacd8e.js HTTP/1.1 Host: cdn.appdynamics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mail.fnbo-in.selfip.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:21 UTC	775	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 52854 Connection: close Date: Wed, 29 May 2024 10:02:57 GMT Server: nginx/1.16.1 Last-Modified: Fri, 15 Apr 2022 21:40:35 GMT ETag: "6259e653-ce76" access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Cache-Control: public, max-age=2678400, s-max-age=14400 timing-allow-origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5e95d2e6aebe43cabd9dcdad89ad0a42.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS54-C1 X-Amz-Cf-Id: 065YBBkLQto6GHY0KX3BCYQ7lM2nbLp7VPsZme0G5bQthLwc7fTxmg== Age: 564
2024-05-29 10:12:21 UTC	16384	IN	Data Raw: 3b 2f 2a 20 56 65 72 73 69 6f 6e 20 65 62 66 31 36 32 30 62 33 62 38 34 37 64 66 62 66 37 36 66 36 65 31 30 39 64 63 61 63 64 38 65 20 76 3a 32 32 2e 34 2e 30 2e 33 37 32 31 2c 20 63 3a 62 34 37 33 66 39 34 62 61 34 63 36 63 64 66 35 30 66 61 30 39 32 33 39 35 62 39 38 39 36 62 39 38 64 30 38 36 36 32 37 2c 20 62 3a 32 32 2e 34 2e 30 2e 33 37 32 31 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2c 20 41 70 70 44 79 6e 61 6d 69 63 73 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 0a 20 44 65 72 69 76 61 74 69 76 65 20 6f 66 20 47 6f 6f 67 6c 65 20 45 70 69 73 6f 64 65 73 3a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 20 47 6f 6f 67 6c 65 20 49 Data Ascii: ;/* Version ebf1620b3b847dfbf76f6e109dcacd8e v:22.4.0.3721, c:b473f94ba4c6cdf50fa092395b9896b98d086627, b:22.4.0.3721 /(function(){/ Copyright (c) 2013, AppDynamics, Inc. All rights reserved. Derivative of Google Episodes: Copyright 2010 Google I
2024-05-29 10:12:21 UTC	16384	IN	Data Raw: 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 28 6e 29 26 26 6e 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 63 3d 22 3c 3c 3c 22 2b 6c 2e 42 62 28 64 29 2b 22 3e 3e 3e 22 3b 73 3d 73 2e 72 65 70 6c 61 63 65 28 64 2c 63 29 7d 29 3b 6b 3d 73 7d 65 6c 73 65 20 6b 3d 65 2e 4f 63 28 6b 2c 64 2e 63 6f 6e 66 2e 58 69 29 3b 65 2e 51 6c 28 63 29 26 26 28 6b 3d 68 2e 55 63 2e 74 6b 28 6b 2c 6d 29 29 3b 72 65 74 75 72 6e 20 6b 7d 2c 65 2e 71 6d 29 3b 63 5b 65 2e 45 64 28 22 67 75 69 64 73 22 29 5d 3d 6d 2e 65 63 3b 63 5b 65 2e 45 64 28 22 75 72 6c 50 61 72 74 73 22 29 5d 3d 6c 2e 65 63 3b 72 65 74 75 72 6e 20 63 7d 3b 65 2e 63 6d 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 22 65 76 65 6e 74 55 72 6c 22 3d 3d 64 7c 7c 22 Data Ascii: .utils.isDefined(n)&&n.forEach(function(d){var c="<<<"+l.Bb(d)+">>>";s=s.replace(d,c)});k=s}else k=e.Oc(k,d.conf.Xi);e.Ql(c)&&(k=h.Uc.tk(k,m));return k},e.qm);c[e.Ed("guids")]=m.ec;c[e.Ed("urlParts")]=l.ec;return c};e.cm=function(d){return"eventUrl"==d\|\|"
2024-05-29 10:12:21 UTC	4360	IN	Data Raw: 70 65 3d 3d 3d 64 2e 45 76 65 6e 74 54 79 70 65 2e 50 61 67 65 56 69 65 77 7c 7c 71 2e 65 76 65 6e 74 54 79 70 65 3d 3d 3d 64 2e 45 76 65 6e 74 54 79 70 65 2e 49 46 52 41 4d 45 29 6e 3d 71 3b 73 2e 70 75 73 68 28 71 29 7d 7d 63 3d 73 3b 69 66 28 30 3c 6b 2e 6c 65 6e 67 74 68 29 66 6f 72 28 6e 26 26 28 6e 2e 65 72 72 6f 72 73 3d 6b 2e 73 70 6c 69 63 65 28 30 2c 64 2e 63 6f 6e 66 2e 55 69 29 29 3b 30 3c 6b 2e 6c 65 6e 67 74 68 3b 29 71 3d 6b 2e 73 70 6c 69 63 65 28 30 2c 64 2e 63 6f 6e 66 2e 54 69 29 2c 6e 3d 65 2e 48 6d 2e 48 28 29 2c 6e 2e 65 72 72 6f 72 73 3d 71 2c 6e 2e 69 73 45 72 72 6f 72 45 76 65 6e 74 3d 21 30 2c 6e 2e 63 6f 6f 6b 69 65 4d 65 74 72 69 63 73 3d 6e 75 6c 6c 2c 6e 2e 6d 65 74 72 69 63 73 3d 6e 75 6c 6c 2c 6e 2e 72 65 73 6f 75 72 63 65 Data Ascii: pe===d.EventType.PageView\|\|q.eventType===d.EventType.IFRAME)n=q;s.push(q)}}c=s;if(0<k.length)for(n&&(n.errors=k.splice(0,d.conf.Ui));0<k.length;)q=k.splice(0,d.conf.Ti),n=e.Hm.H(),n.errors=q,n.isErrorEvent=!0,n.cookieMetrics=null,n.metrics=null,n.resource
2024-05-29 10:12:21 UTC	15726	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 64 28 29 26 26 64 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 28 64 2e 63 6f 6e 66 2e 75 73 65 72 43 6f 6e 66 2e 67 65 6f 2e 6c 6f 63 61 6c 49 50 29 26 26 64 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 28 64 2e 63 6f 6e 66 2e 75 73 65 72 43 6f 6e 66 2e 67 65 6f 2e 63 69 74 79 29 26 26 64 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 28 64 2e 63 6f 6e 66 2e 75 73 65 72 43 6f 6e 66 2e 67 65 6f 2e 72 65 67 69 6f 6e 29 26 26 64 2e 75 74 69 6c 73 2e 69 73 44 65 66 69 6e 65 64 28 64 2e 63 6f 6e 66 2e 75 73 65 72 43 6f 6e 66 2e 67 65 6f 2e 63 6f 75 6e 74 72 79 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 50 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 75 Data Ascii: =function(){return this.md()&&d.utils.isDefined(d.conf.userConf.geo.localIP)&&d.utils.isDefined(d.conf.userConf.geo.city)&&d.utils.isDefined(d.conf.userConf.geo.region)&&d.utils.isDefined(d.conf.userConf.geo.country)};b.prototype.Pf=function(){return d.u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.9	49718	152.42.220.64	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:21 UTC	579	OUT	GET /x/css/material-icons.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/otp.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:21 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:12:21 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 1105 Connection: close Content-Type: text/css
2024-05-29 10:12:21 UTC	1105	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 61 74 65 72 69 61 6c 20 49 63 6f 6e 73 27 3b 0d 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 4d 61 74 65 72 69 61 6c 49 63 6f 6e 73 2d 52 65 67 75 6c 61 72 2e 65 6f 74 29 3b 20 2f 2a 20 46 6f 72 20 49 45 36 2d 38 20 2a 2f 0d 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4d 61 74 65 72 69 61 6c 20 49 63 6f 6e 73 27 29 2c 0d 0a 20 20 20 20 20 20 20 6c 6f 63 61 6c 28 27 4d 61 74 65 72 69 61 6c 49 63 6f 6e 73 2d 52 65 67 75 6c 61 72 27 29 2c 0d 0a 20 20 20 20 20 20 20 75 72 6c 28 4d 61 74 65 72 69 61 6c 49 63 6f 6e 73 2d 52 65 67 75 6c 61 72 2e 74 Data Ascii: @font-face { font-family: 'Material Icons'; font-style: normal; font-weight: 400; src: url(MaterialIcons-Regular.eot); /* For IE6-8 */ src: local('Material Icons'), local('MaterialIcons-Regular'), url(MaterialIcons-Regular.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.9	49717	152.42.220.64	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:21 UTC	572	OUT	GET /x/css/angular.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/otp.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:22 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:12:21 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 5436 Connection: close Content-Type: text/css
2024-05-29 10:12:22 UTC	5436	IN	Data Raw: 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 20 7b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 74 61 62 6c 65 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 75 6c 20 7b 0d 0a 09 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 75 6c 6c 65 74 65 64 2d 6c 69 73 74 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 75 6c 6c 65 74 65 64 2d 6c 69 73 74 20 6c 69 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 Data Ascii: input[type="text"] {width: 100%;}table {border: 0;}ul {list-style-type: none;}.bulleted-list {padding-left: 0px;}.bulleted-list li {display: inline-block;width: 100%;overflow: visible;margin: 0;padding: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.9	49719	152.42.220.64	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:22 UTC	582	OUT	GET /x/css/RadDockableObject.css HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mail.fnbo-in.selfip.com/x/otp.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:22 UTC	205	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:12:22 GMT Server: Apache Last-Modified: Sat, 23 Dec 2023 10:00:40 GMT Accept-Ranges: bytes Content-Length: 2105 Connection: close Content-Type: text/css
2024-05-29 10:12:22 UTC	2105	IN	Data Raw: 2f 2a 20 72 2e 61 2e 64 2e 64 6f 63 6b 20 64 65 66 61 75 6c 74 20 73 6b 69 6e 20 2a 2f 0d 0a 0d 0a 2e 52 61 64 44 6f 63 6b 69 6e 67 5a 6f 6e 65 0d 0a 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 52 61 64 44 6f 63 6b 61 62 6c 65 4f 62 6a 65 63 74 46 69 78 65 64 0d 0a 7b 0d 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 65 35 65 35 65 35 3b 0d 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 65 35 65 35 65 35 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 62 37 62 37 62 37 3b 0d 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 73 Data Ascii: /* r.a.d.dock default skin */.RadDockingZone{background: white;border: 0;padding: 0px;}.RadDockableObjectFixed{border-top: solid 1px #e5e5e5;border-left: solid 1px #e5e5e5;border-right: solid 1px #b7b7b7;border-bottom: s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.9	49726	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-29 10:12:22 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=21429 Date: Wed, 29 May 2024 10:12:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.9	49716	152.42.220.64	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:22 UTC	617	OUT	GET /x/img/BANGOR.png HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.fnbo-in.selfip.com/x/otp.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:22 UTC	207	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:12:22 GMT Server: Apache Last-Modified: Sat, 13 Jan 2024 12:05:46 GMT Accept-Ranges: bytes Content-Length: 45863 Connection: close Content-Type: image/png
2024-05-29 10:12:22 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 81 00 00 00 83 08 02 00 00 00 e4 84 30 cc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 b2 c9 49 44 41 54 78 5e ed bd 05 80 25 c5 d5 36 7c 57 66 c7 6d 15 0d f1 84 c8 8b ac 8c df 3b 77 dc dd dd 65 05 d7 40 82 43 84 10 23 40 9c 84 10 81 18 31 42 12 42 d0 20 81 10 5c 16 59 61 7d 67 77 fc 7a ff cf 73 4e df 9e 3b b3 bb 64 87 b0 bc fb bd ff d4 9c e9 db 5d dd 5d 75 ea d4 a9 a7 ce a9 ae ae b6 19 47 34 04 42 48 36 5e c3 70 1b 86 cb 30 26 85 b0 03 42 24 c8 27 5b eb 14 68 c2 08 58 fb 7a 38 66 f8 40 21 f1 81 49 bf d7 e5 f3 7a 02 7e af 11 98 9e db 54 f0 fb fd 3e 9f 2f 80 20 b9 b8 02 3e 97 c7 ed 0b f8 a7 ae 0e 25 09 f8 c5 95 e6 51 48 a4 c6 5b Data Ascii: PNGIHDR0gAMAapHYsttfxIDATx^%6\|Wfm;we@C#@1BB \Ya}gwzsN;d]]uG4BH6^p0&B$'[hXz8f@!Iz~T>/ >%QH[
2024-05-29 10:12:23 UTC	8000	IN	Data Raw: 91 1d f3 c2 7f 28 01 14 40 41 17 43 31 08 fb 88 19 1f 0e 4e 4a 72 0f ff 6e e3 53 c7 94 a7 1f d3 96 17 dd 9c 29 b3 78 84 3a 33 d1 90 60 9e 84 b5 f1 c1 56 44 67 76 5c 4d fa 8d 7f bf 0b e9 70 50 83 ce 17 d5 6b 4a 93 b0 a7 18 e4 31 46 77 01 15 39 cf 18 bc bd 6a 8c ad 19 6c f8 40 4b 41 4c 53 26 87 ba d0 6e fb 73 12 36 94 c1 4f 59 58 93 12 df 95 37 bf 99 eb 3a 52 8f a1 cd 41 85 06 00 a1 fd 87 75 38 63 3a 73 3e d0 5b f6 2f 63 78 97 f0 3f 0c 77 53 73 0d ca 57 73 46 b6 5a 2e fe 04 31 48 36 8c 50 d2 43 33 04 cf c1 97 d4 6b 34 06 3b a8 97 e6 9b ae 04 6f 00 cd c8 9e dc b0 a6 8c a5 83 25 b6 96 74 8e be 75 f1 a5 5f b3 e1 59 96 29 7a 8e e6 f4 65 03 25 c7 f7 96 2c 6f cb 8b ac 4e 8d 6b ca 5c d2 57 64 2b 39 3d aa 70 d5 49 55 ce 93 8a d3 b7 1a 3e ed 27 c0 ea 14 78 07 99 47 Data Ascii: (@AC1NJrnS)x:3`VDgv\MpPkJ1Fw9jl@KALS&ns6OYX7:RAu8c:s>[/cx?wSsWsFZ.1H6PC3k4;o%tu_Y)ze%,oNk\Wd+9=pIU>'xG
2024-05-29 10:12:23 UTC	8000	IN	Data Raw: 7b 6b 7f f7 e2 13 68 c9 bb 03 7c 29 51 67 f0 a2 33 06 e7 1c 27 52 ee 95 82 bf b8 c0 ed e5 f3 38 10 87 32 82 ee bc 1c 73 0b b5 51 00 ba fc e7 df 59 56 94 7c 52 47 51 44 4d 2a ac ce 98 de 7c ce 1a 6b cd e0 64 ba 3e 0e a1 92 ff ff 48 0a a0 82 a1 ac b5 da d5 f3 9b 33 96 f7 14 45 16 ad 8a 72 7c ba ef 2b 57 bc e1 19 86 9d c8 99 e2 7e ea b0 35 5c cd 79 5b 16 63 12 ac a3 43 11 c2 c1 30 48 9a 2a 5a 0b 5a 6f 64 7d 06 31 68 20 87 6f a5 8b fe 29 73 d8 41 8d 86 62 10 fa 2b 34 12 38 53 cf 8f ef 82 64 91 02 6d 87 e9 be 58 f0 97 81 93 f4 e4 00 e2 23 ac c2 0e 7a f4 6f c7 17 a7 45 f3 f9 ce c1 08 96 51 47 06 3f 77 d1 96 3e af c3 ce af 23 f4 65 85 f5 c9 5a 39 a8 ec f7 00 83 50 14 9f 9f ab 18 f1 99 94 ff e3 ed 25 8b 2a 92 22 bb 72 60 1b f2 99 37 aa aa 33 93 da 26 1a 69 ca 0a Data Ascii: {kh\|)Qg3'R82sQYV\|RGQDM\|kd>H3Er\|+W~5\y[cC0HZZod}1h o)sAb+48SdmX#zoEQG?w>#eZ9P%*"r`73&i
2024-05-29 10:12:23 UTC	8000	IN	Data Raw: 07 56 99 29 aa 80 f9 a2 af 4a 68 72 7e b8 31 ff 6f 6f 3c 07 c9 8f 7b dd 5a c4 d0 77 74 55 11 cd 8c 45 9e 10 ef 88 df fc b8 eb 5f 9e 79 fc 84 72 79 c0 04 47 52 32 32 75 1d 5a 1e cc 1a c5 61 2d a3 bd a1 03 68 b7 c7 34 d8 ef 79 e5 5f b8 57 f5 1b 74 98 18 c4 95 cb d7 16 71 52 12 df 2c a5 ed 00 87 28 bc e0 f4 f3 7f 7c e3 c3 6f be c8 9a 42 e0 53 7f 88 09 24 2a 74 88 a0 08 eb 93 d5 97 b1 33 31 31 f1 9b 07 ef 3d a1 36 4b 5e 82 3d 8d 23 f4 ed 69 50 5a 3e 51 6a 49 d5 dc a7 94 c4 aa a9 1e 67 5c 7d fa df 36 3e 0d 9d 97 2f dc 7a 50 df e8 ac 76 19 ee e6 af 5e 4a 8b a3 8f af 4c a2 f7 0d 83 fc d1 bb 40 f8 d0 40 6b 5e 05 d2 01 1e c1 45 e8 ca 46 45 2f ab cb 6c fd f2 67 61 19 ec 1a 87 3c 0c cf 30 f4 45 78 3d 58 e0 7c 11 09 e3 44 0f 86 d7 f7 ed fc c2 3d 3f 07 0e 00 cb e6 d5 Data Ascii: V)Jhr~1oo<{ZwtUE_yryGR22uZa-h4y_WtqR,(\|oBS$*t311=6K^=#iPZ>QjIg\}6>/zPv^JL@@k^EFE/lga<0Ex=X\|D=?
2024-05-29 10:12:23 UTC	8000	IN	Data Raw: 5b 97 04 21 10 b0 25 23 bb 66 ea 6f 43 12 f0 8b 06 bf df f0 ff 6a d3 d3 31 55 a9 c7 f6 97 f2 59 6a 53 2a 9d 26 14 a1 8b f3 bf 95 01 93 25 d6 9a 70 d5 96 11 df 68 ef bc e9 ca 1d 1c 96 f2 7b 3d 90 22 f4 df f7 f0 a6 e7 4f 6e 29 8c ad 4f b7 35 25 c3 5f b3 75 a4 d0 1b e8 e6 9b 59 11 bd 79 e0 5f 2a 3d 93 8b 0a e9 fa ee 6d b9 4b 4a 52 fe be f3 d5 2d 81 71 88 65 5c 5e 23 77 05 64 0d 0d 8b 55 25 4b f3 95 42 4e a1 ec 6f 19 13 af 1a 93 6b 36 34 2d 6f c9 a1 1d d7 26 18 0a 6b 23 58 11 28 82 96 c2 d4 b7 f6 74 f8 9b 11 0d 19 a7 6c 68 d8 28 03 d2 90 9c b9 94 35 08 c9 ca 2f 52 d6 66 88 08 db 0c 96 f8 0f 3e 70 95 7c 2b 15 87 e0 1b 65 80 5f d7 f5 a5 cf 2e af cc 80 a7 a7 e2 53 c2 be 99 b7 ea 07 08 8d b0 2d 35 ea bc 0a 5b 4b 32 98 8b ab 49 3f be c2 fe dd 47 ef d1 65 25 51 a9 Data Ascii: [!%#foCj1UYjS&%ph{="On)O5%_uYy_=mKJR-qe\^#wdU%KBNok64-o&k#X(tlh(5/Rf>p\|+e_.S-5[K2I?Ge%Q
2024-05-29 10:12:23 UTC	5878	IN	Data Raw: 5c 30 b4 22 7e 68 4e 84 e0 de 3f 7a 10 00 02 49 00 06 e9 91 ee a0 76 60 13 e9 49 c4 40 ef 86 0c f7 0e 59 74 f8 eb 0f ff 3e aa 60 e5 e2 e0 5c 13 08 50 39 01 81 b7 50 b2 0a 62 11 22 95 73 10 6e d4 7b c3 5b f9 dc 06 9d 5c 6c 49 d2 29 3d 55 5f fd f3 2f d0 ef ee 32 5c 50 8f a1 91 61 be 55 0a b6 75 61 ac 77 e4 07 cc 7e 4c 3a 34 a8 54 44 69 f6 bb 27 00 ea 4f ec d9 f4 f1 e6 a2 d8 ea 34 3e 29 a3 7e c8 fc 2e 4e 8b 80 f3 92 8e fa 06 70 00 7d d0 18 ac 62 a3 e6 4c fd b0 f4 4c f4 1b f1 90 88 8a 03 72 99 79 a5 e8 13 08 d7 30 fe f0 30 08 52 db 68 b8 4e 1e a8 46 f7 18 db 91 43 53 1f 4c 02 01 65 21 5e e6 2b df 2c 04 93 e8 b5 98 2c 72 e9 4a 83 11 be f0 9c 52 18 11 e8 6f 17 54 27 bf af ab f8 f8 2a c7 37 ee fd f5 73 63 fc aa 37 5a 1a 9c 73 4a 5e a5 71 24 83 e6 80 ce d0 e7 a3 Data Ascii: \0"~hN?zIv`I@Yt>`\P9Pb"sn{[\lI)=U_/2\PaUuaw~L:4TDi'O4>)~.Np}bLLry00RhNFCSLe!^+,,rJRoT'*7sc7ZsJ^q$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.9	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:23 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-29 10:12:23 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=21456 Date: Wed, 29 May 2024 10:12:23 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-29 10:12:23 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.9	49728	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:23 UTC	801	OUT	GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
2024-05-29 10:12:23 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 271563 Connection: close Last-Modified: Tue, 27 Apr 2021 13:46:46 GMT Accept-Ranges: bytes ETag: "0679bc36b3bd71:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:23 GMT
2024-05-29 10:12:23 UTC	16009	IN	Data Raw: ff d8 ff e1 13 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 07 80 00 00 01 01 00 03 00 00 00 01 04 38 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 31 3a 30 32 3a 30 31 20 31 34 3a 35 30 3a 32 37 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: @ExifMM*8(1!2i$''Adobe Photoshop 22.1 (Macintosh)2021:02:01 14:50:27
2024-05-29 10:12:23 UTC	16384	IN	Data Raw: 16 04 a6 28 b8 da e3 c6 2c 83 74 cb ca c6 96 c0 c9 52 b9 8b 62 25 f2 b9 63 4b 6a a5 f1 17 73 94 4e 31 8d 30 d3 12 5c 65 a6 37 d4 38 d7 6c 4f 7c 34 d6 64 51 01 b3 7a 94 e9 89 03 8f 1b 6e 71 a4 da a2 ca 7b e2 aa 6b 81 8b 63 95 f8 e0 a6 42 5d e8 9c bc 4d 5e b8 a0 df 03 60 6c 63 a9 94 36 c7 0c 09 70 cb cd 9b 14 b7 95 4c bc ac 52 d1 db 28 1c 7d 31 a4 62 ae cb cc 06 62 31 43 ab 9b ae 56 62 71 4a d6 18 91 14 c5 c0 ae 31 c6 28 21 48 91 4c c9 b9 c6 b8 a0 c6 a9 a1 c2 c2 f7 44 95 a8 c4 1c 11 8a 09 3c 72 e9 cb 03 23 ba 16 b4 c6 93 5c 5d e2 3d 46 25 c0 8c 93 02 0a cc ac 71 19 5d 31 62 d6 5e 6c ba 62 96 b2 c1 c6 e5 e2 ad 96 cc 0d 32 b3 60 55 50 f5 ca 23 1a 3a e2 9d 71 65 cd 4f 1c 32 c8 a6 36 b4 c5 57 9a 53 7c 66 62 72 b0 2b 79 63 2b 2f 15 5c b8 a2 ed 89 ae 3c 60 64 17 Data Ascii: (,tRb%cKjsN10\e78lO\|4dQznq{kcB]M^`lc6pLR(}1bb1CVbqJ1(!HLD<r#\]=F%q]1b^lb2`UP#:qeO26WS\|fbr+yc+/\<`d
2024-05-29 10:12:23 UTC	16384	IN	Data Raw: 95 cc 13 2e 7d 1c a8 d4 68 0e 48 33 54 35 fa 46 69 05 56 a3 f6 4d 3e 83 f6 71 47 5f 83 dc 6e 3e 47 fe 69 6c 4e 26 0a dc 5f ec b0 e2 7e 9f f9 a7 31 88 a3 c2 79 49 b8 1b df b9 48 a8 0c 2a 68 0d 3f 1f f9 a7 0c bd 43 19 4b 93 f6 64 01 64 f9 fd 95 7c 2f 78 c8 56 46 fb 51 9f c0 fd ac 74 17 2d 0c 4d 13 8e 48 ea 78 8c 71 cc 63 91 bd af d5 7f cd 9c 7f 1c 0b 38 f1 80 46 fd 2b be 3f 8f 5a 95 ea a4 72 b2 c7 40 06 d8 15 e4 5e fb e2 8c 17 a7 5f a4 62 32 2a 81 d3 ae 60 e4 24 93 20 00 bd e9 c9 80 a0 01 df cd 4d a5 43 db 12 de 4a 95 04 d0 12 69 d8 0c 11 2c be a1 56 90 29 e2 29 4a 52 a3 fc ac 40 aa 84 01 43 7a b5 ea 3a 11 f2 cc 6c 82 c9 df 6f 93 74 79 72 dd a5 b5 9a 5e 3c 14 9e 4a 59 7d c0 fb 58 85 2a 36 26 9d f1 78 e7 96 dc 2f 06 fb 2d cc 53 b1 e9 ff 00 0d 82 62 bd 68 e6 Data Ascii: .}hH3T5FiVM>qG_n>GilN&_~1yIHh?CKdd\|/xVFQt-MHxqc8F+?Zr@^_b2`$ MCJi,V))JR@Cz:lotyr^<JY}X*6&x/-Sbh
2024-05-29 10:12:23 UTC	16384	IN	Data Raw: c6 29 0a 83 35 31 a0 e5 d7 03 26 c8 ca e3 9a b8 a0 c5 35 6a 24 1c d4 c5 a9 96 29 8d a7 85 40 8c d8 bb 01 8c a6 2b c2 a7 97 8f e3 95 c7 15 a5 a4 63 71 52 b8 c2 b8 ad 2d a6 60 31 d4 cd 4c 55 c3 1e 31 b4 a6 38 02 70 32 0d e3 d4 57 30 4c 78 14 c0 cc 05 ca a3 2f e5 94 31 e0 57 03 36 d4 63 a9 94 06 38 0a e0 4b 59 44 63 e9 9a 94 c5 56 ae d9 79 67 19 5c 52 bb 8d 72 f8 65 03 8e ae 05 5a 45 33 05 c7 93 95 4c 52 da 83 8e 39 43 2e b8 15 a2 73 63 1b 30 63 8a b6 c3 12 23 16 ad 71 8e 08 c0 a5 44 9c 61 38 e7 18 cc 58 36 32 f3 66 c5 2d e6 cd 5c d8 15 d9 86 6c d8 a5 bc d9 59 ab 8a b7 97 95 5c bc 09 76 5e 56 5e 2a de 6c d9 b0 25 d8 e1 8d cb c0 95 d9 78 d1 97 8a 5b cb ca cd 81 57 0c bc 6e 6a e0 4a ec bc 6e 5e 29 5d 9b 2a b9 b0 2a ec bc 6e 5e 29 5d 97 8d cb c5 5b cb c6 d7 2c Data Ascii: )51&5j$)@+cqR-`1LU18p2W0Lx/1W6c8KYDcVyg\RreZE3LR9C.sc0c#qDa8X62f-\lY\v^V^l%x[WnjJn^)]*n^)][,
2024-05-29 10:12:23 UTC	16384	IN	Data Raw: d9 b3 65 e0 57 0c ba 66 03 2f 14 bb 36 5e 6c 55 d9 79 b3 62 ad e5 e5 65 e2 96 f2 c6 56 5e 2a de 5e 56 5e 14 b6 33 65 65 e2 ad e6 cd 9b 15 6f 36 56 5e 04 b7 9b 2b 36 2a de 6c ac bc 55 bc d9 59 b0 a1 bc d9 b3 62 ad d7 35 72 b3 62 ad e6 ca ae 5e 28 6f 36 56 5e 15 76 5e 56 6c 50 de 6c ac ba e1 57 66 ca ae 5d 71 57 66 cd 5c d5 c5 5b cd 95 97 8a bb 2f 2b 2c 61 43 b2 f2 b2 f0 a1 bc bc ac d8 55 bc d9 59 75 c2 87 65 d7 2a b9 b1 56 eb 9b 2b 36 2a de 6c ac ba e1 57 66 ae 6c d8 a1 d9 b3 66 c5 2e cd 9b 2b 02 bb 36 6c d8 15 d8 d7 de 83 c4 e5 e5 77 18 0a ad 93 7d bc 7f ae 26 3a 7d 27 f0 18 a9 fb 43 18 ab f0 b7 d3 95 c8 59 66 39 35 4f b3 fe a1 c4 e9 41 5f 0e 07 17 a6 e3 e4 46 27 4a a9 f7 41 f8 64 24 3f 1f e6 a4 15 09 47 15 07 ba 92 3f e3 65 c7 76 db fc e9 ff 00 36 e3 a6 Data Ascii: eWf/6^lUybeV^^V^3eeo6V^+6lUYb5rb^(o6V^v^VlPlWf]qWf\[/+,aCUYueV+6lWflf.+6lw}&:}'CYf95OA_F'JAd$?G?ev6
2024-05-29 10:12:23 UTC	16384	IN	Data Raw: 8a e3 cb 63 49 c5 05 67 1a 63 4e d8 e6 38 c3 d3 0b 12 b5 9b 11 23 1c 6a 0d 31 a4 61 6b 3b ad 22 99 58 f2 b8 d2 30 a2 9d 9a 99 86 5e 04 86 b3 53 2f 35 71 4b 54 c5 14 e3 6b 8e 5c 0c 82 a0 c7 8a 62 75 cd cb 03 30 bc b6 34 65 63 97 14 bb 2c 1c d9 b6 c0 ad d7 36 55 72 c6 29 6a 99 b2 ce 30 9c 55 d9 b3 57 2b 14 37 9b 36 6c 55 bc d9 59 78 ab b1 d8 dc ba e0 4a ec d9 43 2f 14 b7 9b 28 65 e2 96 f2 c6 56 58 c0 ad e5 e5 65 e2 c9 bc bc ac bc 0a de 6c d9 78 19 3b 36 6c bc 55 d9 79 59 b0 25 bc dd 33 65 d3 15 5b 95 8e a6 55 31 56 b3 65 d3 35 31 57 66 cd 9b 02 b5 97 d3 36 6c 0a de 5e 56 6c 52 de 5e 37 2e b8 ab 79 78 da e6 ae 29 5d 95 5c aa e6 ae 05 6e b9 ab 8d ae 6a e3 4b 6b eb 95 5c 6d 73 57 1a 5b 5d 5c d5 c6 d7 2a b8 d2 da fa e6 ae 32 b9 ab 86 96 d7 57 31 38 ca e5 d7 0d Data Ascii: cIgcN8#j1ak;"X0^S/5qKTk\bu04ec,6Ur)j0UW+76lUYxJC/(eVXelx;6lUyY%3e[U1Ve51Wf6l^VlR^7.yx)]\njKk\msW[]\*2W18
2024-05-29 10:12:23 UTC	16384	IN	Data Raw: 61 cb 51 39 cf 83 18 df ac 8f d3 07 69 0d 2e 2c 58 c4 f3 6e 3f 86 23 ea c9 2f e8 fe 3f d2 7f 11 be 98 97 3a a9 33 73 21 5f 66 9b a6 df ef 9b 44 fd 88 ff 00 9a 4f da c3 4b ad 52 d3 45 45 b5 8c 72 97 a2 44 9d 77 fe 76 fd 9f f6 58 49 77 e6 19 af 80 83 4b 5f 46 02 78 2c 94 f8 9b fc 8b 68 bf e3 6c 33 d2 74 08 ec 87 ab 70 39 ce 77 25 b7 a1 ff 00 8d 9f 04 67 2e 2e 0c 5e b3 fc 79 67 f4 c7 fa ab 96 31 10 f1 35 15 8e 1f e4 f4 f8 fe a9 7f 5d 31 82 27 97 8c d7 3b c8 3a 2f ec af fa ab fb 5f eb b6 0b c6 f4 1b f4 c0 b2 ea 96 d0 37 a6 5f 9c 87 a2 46 39 b1 ff 00 62 9f f1 b6 66 92 23 cc ba d0 27 94 fa 45 fb bf 85 19 5c b0 70 1c 37 2f 3e ec 8d 0f 80 75 df fe 17 e0 5c 52 6b a8 ac c5 6e 24 54 ff 00 58 d3 fe 05 70 71 c6 b8 8e c3 cf d2 c8 e2 98 97 00 1c 52 ee 8f af fd ca 2c 1c Data Ascii: aQ9i.,Xn?#/?:3s!_fDOKREErDwvXIwK_Fx,hl3tp9w%g..^yg15]1';:/_7_F9bf#'E\p7/>u\Rkn$TXpqR,
2024-05-29 10:12:23 UTC	16384	IN	Data Raw: fe ee 2f f8 c7 73 f1 e0 9b 34 41 fe 93 73 f1 33 1a 16 71 49 1d be cb 2c 67 e1 93 fd 7e 12 3f 1f b1 1f ed e4 5e da e6 49 1c df 5f 7e ff 00 99 00 ef 46 6a 7f ba e2 6f 8b 82 a7 ed fc 2b c3 fd 7c 37 83 50 25 c4 af 53 30 14 58 86 ca 8b fb 29 13 b7 fb cf 1f fc 5f cb d6 7f f7 52 27 f7 98 63 2b e6 c6 78 f8 45 44 7b cb 2e 8e 69 24 24 49 f0 84 fd 9a ec bf e4 c8 df 6b 92 ff 00 27 db ff 00 53 04 c7 70 08 aa 6e a3 ab 9d 97 fd 8e 47 60 bd 11 00 6e 9d 05 06 cb 4a 22 0f f8 ae 1f b4 ff 00 f1 92 e1 e1 4f f8 c9 86 29 a9 c7 21 0d 1a b3 90 36 2d db fd 56 6f 81 3f e7 9c 7c 7f e2 cc b8 17 06 70 3d db 27 0a 6a 2b fd 98 ea e0 28 26 92 6d e9 51 e2 2a df f0 df 63 fe 1b 05 8a f7 c9 34 11 45 ba e5 d7 1b 9b 14 2e cb ae 37 2e b8 a5 75 72 eb 8c e5 9a b8 aa fa e6 ae 32 b9 ab 81 2b eb 9b Data Ascii: /s4As3qI,g~?^I_~Fjo+\|7P%S0X)_R'c+xED{.i$$Ik'SpnG`nJ"O)!6-Vo?\|p='j+(&mQ*c4E.7.ur2+
2024-05-29 10:12:23 UTC	16384	IN	Data Raw: 6a ec 7d 81 ff 00 25 7e 05 f8 9b fd 86 08 e6 23 3c 2e be 2d be c9 20 ee 77 e4 1a 36 e0 af fe 57 c4 c9 80 10 2a 6e eb cb c0 56 83 fe 17 e2 ff 00 88 63 6a 7e 43 c3 2a 3b ee e4 01 5b 74 08 e4 91 a3 25 a3 aa a3 7e c8 6e 42 9f f1 2c 69 64 7f 83 75 7a d6 a7 a1 fa 31 04 5f 1d 8f 8f 86 28 d7 44 0e 2a 7b 00 4d 07 6c 81 1d dc db 3d ea a1 f8 28 46 e2 69 53 d3 7d ff 00 63 7f 87 11 67 24 d3 f0 c4 be 26 eb 8a 80 28 7a d4 63 5d eb 6b 69 d8 f5 c5 43 19 54 2d 14 70 24 d6 9f 17 fb 26 f8 b9 2a e3 5e 9c 43 af c9 8d 36 1f cb 86 7a 76 9f 6f 74 a1 96 71 15 c0 3f 65 c5 14 7f be e4 0d fe ec 8b fd f9 fb 71 fd af 8d 32 71 16 c2 72 11 16 50 ab 34 96 d0 95 f4 d4 a3 d5 79 b2 1a 82 7e 2f 81 db f6 d3 19 08 92 45 32 22 ef 08 05 a9 4f b3 fc ec bf f1 b2 e1 e6 a1 6f 1c 70 cd 24 2e 16 47 21 Data Ascii: j}%~#<.- w6WnVcj~C;[t%~nB,iduz1_(D{Ml=(FiS}cg$&(zc]kiCT-p$&^C6zvotq?eq2qrP4y~/E2"Oop$.G!
2024-05-29 10:12:23 UTC	16384	IN	Data Raw: 98 ab 59 b2 ce 56 28 75 73 65 66 c5 5b ca cd 9b 0a 1d 95 97 95 8a ba b9 79 59 b1 43 75 cb c6 e5 8c 52 dd 31 45 51 8d 03 1e 05 30 24 05 c0 63 c2 d7 28 2e 29 4a 60 6c 01 c0 01 91 ff 00 3c 59 1b bd 21 d9 45 5a 06 59 7e 81 f0 bf fc 2b 64 82 b8 85 e4 1f 5b b7 96 df fd f8 8c bf 78 c0 45 8a 6c c7 2e 09 89 77 17 86 34 9c cf c0 29 4e f8 89 ad 6b 8a 33 70 62 bd c1 a7 ca 98 a9 52 16 84 d4 d2 b4 1e 19 8a ef 39 20 dd 0f 72 30 5a 49 0b 46 aa 3f bd 1b 12 29 42 3e 9c 48 9e 26 94 d8 f8 e3 40 de aa 01 c1 4b 6f 42 fc bb d4 40 f5 b4 d7 3d fd 58 ab dc 74 99 53 fe 4e 64 ea 99 c5 f4 0d 49 74 dd 4a de e6 45 d9 24 15 a6 db 37 ee db fe 25 cb 3b 61 1b e6 4e 33 71 ae e7 53 ab c7 c3 93 88 72 96 ff 00 15 80 63 80 cb cd 96 38 ae cb 19 80 ae 58 18 15 ba 66 a6 06 bf ba 7b 28 4c e9 19 94 Data Ascii: YV(usef[yYCuR1EQ0$c(.)J`l<Y!EZY~+d[xEl.w4)Nk3pbR9 r0ZIF?)B>H&@KoB@=XtSNdItJE$7%;aN3qSrc8Xf{(L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.9	49732	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:23 UTC	837	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
2024-05-29 10:12:23 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1281 Connection: close Set-Cookie: __uzma=8e0e80da-5895-4440-94e5-8559c3b7c6c2; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977543; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=0319; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=168291044975; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977543; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000d504a95a-1cd4-42a0-8629-3a49bae0760a17169775433960-3e2d43917d92f32310; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000b6e933df-81ae-486b-bde0-54075db304ff1-17169775433960-4012052a0aaccd4010; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:23 GMT
2024-05-29 10:12:23 UTC	1281	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 70 78 22 20 68 65 69 67 68 74 3d 22 31 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 20 31 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 71 75 61 6c 20 4f 70 70 6f 72 74 75 6e 69 74 79 20 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 43 6f 6d 70 6f 6e 65 6e 74 73 22 20 73 74 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Equal Opportunity Logo</title> <g id="Components" str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.9	49729	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:23 UTC	827	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
2024-05-29 10:12:23 UTC	1614	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzma=864addac-a2c7-461c-9587-280ff8dc0c04; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977543; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=3359; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=295331023154; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977543; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f600031f48a1c-e78f-4190-b401-2934b042584617169775433970-42b05b7c4ff74ac010; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f900013143e64-6343-4451-88df-024058c03f031-17169775433980-0347607444e57c3510; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:84\|g:1548a87c-59c8-4bdb-b5bb-429dd6ba6ce6\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:12:53 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:12:53 GMT; path=/ Set-Cookie: ADRUM_BT1=R:84\|i:371912\|e:6; expires=Wed, 29-May-2024 10:12:53 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:23 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.9	49731	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:23 UTC	823	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
2024-05-29 10:12:23 UTC	1355	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 12107 Connection: close Set-Cookie: __uzma=2f03683e-4e45-4914-94a8-14c3bc0e567f; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977543; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=0462; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=299571033466; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977543; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000601851cb-2bc4-4b56-adc5-4f710d4fff0a17169775434060-37c3f8105990f9d110; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000bf29cbe3-8551-4105-aeef-fd01673ad45f1-17169775434060-8e4010f7ac65cf0b10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:23 GMT
2024-05-29 10:12:23 UTC	12107	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 31 70 78 22 20 68 65 69 67 68 74 3d 22 37 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 31 20 37 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 36 34 20 28 39 33 35 33 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 64 (93537) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.9	49730	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:23 UTC	807	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
2024-05-29 10:12:23 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1612 Connection: close Set-Cookie: __uzma=62ae2f8c-3cc2-4d2b-a2ee-8cff3b0aac66; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977543; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=5470; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=876651030575; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977543; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000c2a9079b-612e-4f73-8919-52018d169b1f17169775434210-8360a76dd8c3aea510; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f900043a3d9ab-e9c1-4381-9e02-a656748a82351-17169775434210-ddaaf9011755867910; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:23 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:23 GMT
2024-05-29 10:12:23 UTC	1612	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 09 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 38 20 28 38 34 36 36 33 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 09 3c 74 69 74 6c 65 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com --><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.9	49734	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:23 UTC	690	OUT	GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.fnbo-in.selfip.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:24 UTC	514	IN	HTTP/1.1 200 OK Content-Type: font/x-woff Content-Length: 24388 Connection: close Last-Modified: Tue, 17 Nov 2020 15:59:52 GMT Accept-Ranges: bytes ETag: "08c20affabcd61:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:23 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4dLVBvN1H3ds0DqHOqQs9qfS7Dvr6dI0vOZxOY7cFuwe3gNethAfn_wpH0Uxjy7xdUqsI; path=/; SameSite=None; Secure
2024-05-29 10:12:24 UTC	15870	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 5f 44 00 12 00 00 00 00 b3 dc 00 07 00 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 5f 28 00 00 00 1c 00 00 00 1c 80 42 54 5c 47 44 45 46 00 00 48 40 00 00 00 32 00 00 00 36 03 b6 04 85 47 50 4f 53 00 00 4a 34 00 00 14 f3 00 00 32 4e f0 59 0d 67 47 53 55 42 00 00 48 74 00 00 01 c0 00 00 03 be cb 34 ff 55 4f 53 2f 32 00 00 02 0c 00 00 00 4e 00 00 00 60 53 a9 aa 1a 63 6d 61 70 00 00 04 c4 00 00 01 81 00 00 01 da 1f de 17 36 63 76 74 20 00 00 0d 74 00 00 00 5d 00 00 00 e4 2f 52 15 48 66 70 67 6d 00 00 06 48 00 00 06 70 00 00 0d 6d 4d 24 8e 7c 67 61 73 70 00 00 48 38 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0f ec 00 00 33 a6 00 00 5c 54 2c e1 59 b0 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFF_DFFTM_(BT\GDEFH@26GPOSJ42NYgGSUBHt4UOS/2N`Scmap6cvt t]/RHfpgmHpmM$\|gaspH8glyf3\T,Yhead

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.9	49733	54.228.71.178	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:23 UTC	580	OUT	GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://mail.fnbo-in.selfip.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-05-29 10:12:24 UTC	372	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Wed, 29 May 2024 10:12:24 GMT Content-Type: audio/mpeg Content-Length: 504 Connection: close Content-Disposition: inline; filename=time.mp3 Content-Range: bytes 0-503/504 Accept-Ranges: bytes Pragma: public Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-29 10:12:24 UTC	504	IN	Data Raw: ff e3 48 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 69 6e 67 00 00 00 0f 08 2e 7b af 00 00 02 40 00 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 0a 4c 41 4d 45 33 2e 39 38 72 04 28 00 00 00 00 00 00 00 00 14 08 24 06 c0 2d 00 01 9a 00 00 02 40 c6 6c f8 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: HdXing.{@@@@@@@@@@@@@@@@@@@@@@@@@LAME3.98r($-@l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.9	49742	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:24 UTC	532	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
2024-05-29 10:12:25 UTC	1612	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzma=50147c69-0a62-49eb-9458-b8b72f833e41; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977544; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=2633; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=672591034577; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977544; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60005d36fe59-a3e9-4876-a0b6-baf3b9c1541d17169775448300-c363b53d369801e010; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000b884d52e-1f2e-4556-9ce2-958eb8518fab1-17169775448300-d4013ce995787a8110; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:0\|g:a691adb1-2988-4805-abb7-24ab13e0da54\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:12:54 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:12:54 GMT; path=/ Set-Cookie: ADRUM_BT1=R:0\|i:371912\|e:6; expires=Wed, 29-May-2024 10:12:54 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:24 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.9	49743	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:24 UTC	512	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&image=Wires.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
2024-05-29 10:12:25 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1612 Connection: close Set-Cookie: __uzma=bab42e33-1adb-439d-9a59-99b150407225; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977544; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=7419; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=499851050419; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977544; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60005d9a9de2-cd40-41c9-8c50-fd269319df8b17169775448330-0a0b8a619ab364b610; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000bd6c26f0-07fd-42a9-8f22-60e6910ffbc51-17169775448330-9cbc37603ba51c3410; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:24 GMT
2024-05-29 10:12:25 UTC	1612	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 32 34 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 09 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 38 20 28 38 34 36 36 33 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 09 3c 74 69 74 6c 65 3e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="24px" height="24px" viewBox="0 0 24 24" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">... Generator: Sketch 58 (84663) - https://sketch.com --><title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.9	49741	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:24 UTC	542	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=EqualHousingLender.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
2024-05-29 10:12:25 UTC	1354	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1281 Connection: close Set-Cookie: __uzma=8a1dbe7a-e9c9-4177-a417-f962cbc24e63; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977544; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=5119; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=603251072999; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977544; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f6000c17fea0d-1ce6-4099-aa63-631c2e5f0d9a17169775448350-a9be03d8cdd8917310; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f90007ac81627-b031-4d42-9bfb-103cbe6188681-17169775448350-ee99c1974e1ae0ba10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:24 GMT
2024-05-29 10:12:25 UTC	1281	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 70 78 22 20 68 65 69 67 68 74 3d 22 31 31 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 20 31 31 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 45 71 75 61 6c 20 4f 70 70 6f 72 74 75 6e 69 74 79 20 4c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 67 20 69 64 3d 22 43 6f 6d 70 6f 6e 65 6e 74 73 22 20 73 74 72 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="15px" height="11px" viewBox="0 0 15 11" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>Equal Opportunity Logo</title> <g id="Components" str

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.9	49740	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:24 UTC	528	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23000000&color2=%23000000&image=Logo.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
2024-05-29 10:12:25 UTC	1355	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 12107 Connection: close Set-Cookie: __uzma=d93a1d71-f5ca-48e1-82cf-13e5e22f2780; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977544; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=7919; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=335291097685; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977544; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60001707143f-641e-469d-9a43-349a4d5c66ca17169775448410-e82b452c4297c15310; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f90006a34972b-b316-4763-999c-840ec52708fd1-17169775448410-eb1eaf9cb90dfea010; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:24 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: public Last-Modified: Mon, 01 Jan 0001 05:00:00 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:24 GMT
2024-05-29 10:12:25 UTC	12107	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 33 31 70 78 22 20 68 65 69 67 68 74 3d 22 37 30 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 31 20 37 30 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 36 34 20 28 39 33 35 33 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="131px" height="70px" viewBox="0 0 131 70" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 64 (93537) - https://sketch.com -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.9	49739	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:24 UTC	506	OUT	GET /OnlineBanking/App_Themes/Theme5/images/spacecoast/1920x1080-04.jpg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
2024-05-29 10:12:25 UTC	375	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 271563 Connection: close Last-Modified: Tue, 27 Apr 2021 13:46:46 GMT Accept-Ranges: bytes ETag: "0679bc36b3bd71:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:24 GMT
2024-05-29 10:12:25 UTC	16009	IN	Data Raw: ff d8 ff e1 13 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 07 80 00 00 01 01 00 03 00 00 00 01 04 38 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 21 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d5 87 69 00 04 00 00 00 01 00 00 00 ec 00 00 01 24 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 31 3a 30 32 3a 30 31 20 31 34 3a 35 30 3a 32 37 00 00 00 00 00 04 90 00 00 07 00 Data Ascii: @ExifMM*8(1!2i$''Adobe Photoshop 22.1 (Macintosh)2021:02:01 14:50:27
2024-05-29 10:12:25 UTC	16384	IN	Data Raw: 16 04 a6 28 b8 da e3 c6 2c 83 74 cb ca c6 96 c0 c9 52 b9 8b 62 25 f2 b9 63 4b 6a a5 f1 17 73 94 4e 31 8d 30 d3 12 5c 65 a6 37 d4 38 d7 6c 4f 7c 34 d6 64 51 01 b3 7a 94 e9 89 03 8f 1b 6e 71 a4 da a2 ca 7b e2 aa 6b 81 8b 63 95 f8 e0 a6 42 5d e8 9c bc 4d 5e b8 a0 df 03 60 6c 63 a9 94 36 c7 0c 09 70 cb cd 9b 14 b7 95 4c bc ac 52 d1 db 28 1c 7d 31 a4 62 ae cb cc 06 62 31 43 ab 9b ae 56 62 71 4a d6 18 91 14 c5 c0 ae 31 c6 28 21 48 91 4c c9 b9 c6 b8 a0 c6 a9 a1 c2 c2 f7 44 95 a8 c4 1c 11 8a 09 3c 72 e9 cb 03 23 ba 16 b4 c6 93 5c 5d e2 3d 46 25 c0 8c 93 02 0a cc ac 71 19 5d 31 62 d6 5e 6c ba 62 96 b2 c1 c6 e5 e2 ad 96 cc 0d 32 b3 60 55 50 f5 ca 23 1a 3a e2 9d 71 65 cd 4f 1c 32 c8 a6 36 b4 c5 57 9a 53 7c 66 62 72 b0 2b 79 63 2b 2f 15 5c b8 a2 ed 89 ae 3c 60 64 17 Data Ascii: (,tRb%cKjsN10\e78lO\|4dQznq{kcB]M^`lc6pLR(}1bb1CVbqJ1(!HLD<r#\]=F%q]1b^lb2`UP#:qeO26WS\|fbr+yc+/\<`d
2024-05-29 10:12:25 UTC	16384	IN	Data Raw: 95 cc 13 2e 7d 1c a8 d4 68 0e 48 33 54 35 fa 46 69 05 56 a3 f6 4d 3e 83 f6 71 47 5f 83 dc 6e 3e 47 fe 69 6c 4e 26 0a dc 5f ec b0 e2 7e 9f f9 a7 31 88 a3 c2 79 49 b8 1b df b9 48 a8 0c 2a 68 0d 3f 1f f9 a7 0c bd 43 19 4b 93 f6 64 01 64 f9 fd 95 7c 2f 78 c8 56 46 fb 51 9f c0 fd ac 74 17 2d 0c 4d 13 8e 48 ea 78 8c 71 cc 63 91 bd af d5 7f cd 9c 7f 1c 0b 38 f1 80 46 fd 2b be 3f 8f 5a 95 ea a4 72 b2 c7 40 06 d8 15 e4 5e fb e2 8c 17 a7 5f a4 62 32 2a 81 d3 ae 60 e4 24 93 20 00 bd e9 c9 80 a0 01 df cd 4d a5 43 db 12 de 4a 95 04 d0 12 69 d8 0c 11 2c be a1 56 90 29 e2 29 4a 52 a3 fc ac 40 aa 84 01 43 7a b5 ea 3a 11 f2 cc 6c 82 c9 df 6f 93 74 79 72 dd a5 b5 9a 5e 3c 14 9e 4a 59 7d c0 fb 58 85 2a 36 26 9d f1 78 e7 96 dc 2f 06 fb 2d cc 53 b1 e9 ff 00 0d 82 62 bd 68 e6 Data Ascii: .}hH3T5FiVM>qG_n>GilN&_~1yIHh?CKdd\|/xVFQt-MHxqc8F+?Zr@^_b2`$ MCJi,V))JR@Cz:lotyr^<JY}X*6&x/-Sbh
2024-05-29 10:12:25 UTC	16384	IN	Data Raw: c6 29 0a 83 35 31 a0 e5 d7 03 26 c8 ca e3 9a b8 a0 c5 35 6a 24 1c d4 c5 a9 96 29 8d a7 85 40 8c d8 bb 01 8c a6 2b c2 a7 97 8f e3 95 c7 15 a5 a4 63 71 52 b8 c2 b8 ad 2d a6 60 31 d4 cd 4c 55 c3 1e 31 b4 a6 38 02 70 32 0d e3 d4 57 30 4c 78 14 c0 cc 05 ca a3 2f e5 94 31 e0 57 03 36 d4 63 a9 94 06 38 0a e0 4b 59 44 63 e9 9a 94 c5 56 ae d9 79 67 19 5c 52 bb 8d 72 f8 65 03 8e ae 05 5a 45 33 05 c7 93 95 4c 52 da 83 8e 39 43 2e b8 15 a2 73 63 1b 30 63 8a b6 c3 12 23 16 ad 71 8e 08 c0 a5 44 9c 61 38 e7 18 cc 58 36 32 f3 66 c5 2d e6 cd 5c d8 15 d9 86 6c d8 a5 bc d9 59 ab 8a b7 97 95 5c bc 09 76 5e 56 5e 2a de 6c d9 b0 25 d8 e1 8d cb c0 95 d9 78 d1 97 8a 5b cb ca cd 81 57 0c bc 6e 6a e0 4a ec bc 6e 5e 29 5d 9b 2a b9 b0 2a ec bc 6e 5e 29 5d 97 8d cb c5 5b cb c6 d7 2c Data Ascii: )51&5j$)@+cqR-`1LU18p2W0Lx/1W6c8KYDcVyg\RreZE3LR9C.sc0c#qDa8X62f-\lY\v^V^l%x[WnjJn^)]*n^)][,
2024-05-29 10:12:25 UTC	16384	IN	Data Raw: d9 b3 65 e0 57 0c ba 66 03 2f 14 bb 36 5e 6c 55 d9 79 b3 62 ad e5 e5 65 e2 96 f2 c6 56 5e 2a de 5e 56 5e 14 b6 33 65 65 e2 ad e6 cd 9b 15 6f 36 56 5e 04 b7 9b 2b 36 2a de 6c ac bc 55 bc d9 59 b0 a1 bc d9 b3 62 ad d7 35 72 b3 62 ad e6 ca ae 5e 28 6f 36 56 5e 15 76 5e 56 6c 50 de 6c ac ba e1 57 66 ca ae 5d 71 57 66 cd 5c d5 c5 5b cd 95 97 8a bb 2f 2b 2c 61 43 b2 f2 b2 f0 a1 bc bc ac d8 55 bc d9 59 75 c2 87 65 d7 2a b9 b1 56 eb 9b 2b 36 2a de 6c ac ba e1 57 66 ae 6c d8 a1 d9 b3 66 c5 2e cd 9b 2b 02 bb 36 6c d8 15 d8 d7 de 83 c4 e5 e5 77 18 0a ad 93 7d bc 7f ae 26 3a 7d 27 f0 18 a9 fb 43 18 ab f0 b7 d3 95 c8 59 66 39 35 4f b3 fe a1 c4 e9 41 5f 0e 07 17 a6 e3 e4 46 27 4a a9 f7 41 f8 64 24 3f 1f e6 a4 15 09 47 15 07 ba 92 3f e3 65 c7 76 db fc e9 ff 00 36 e3 a6 Data Ascii: eWf/6^lUybeV^^V^3eeo6V^+6lUYb5rb^(o6V^v^VlPlWf]qWf\[/+,aCUYueV+6lWflf.+6lw}&:}'CYf95OA_F'JAd$?G?ev6
2024-05-29 10:12:25 UTC	16384	IN	Data Raw: 8a e3 cb 63 49 c5 05 67 1a 63 4e d8 e6 38 c3 d3 0b 12 b5 9b 11 23 1c 6a 0d 31 a4 61 6b 3b ad 22 99 58 f2 b8 d2 30 a2 9d 9a 99 86 5e 04 86 b3 53 2f 35 71 4b 54 c5 14 e3 6b 8e 5c 0c 82 a0 c7 8a 62 75 cd cb 03 30 bc b6 34 65 63 97 14 bb 2c 1c d9 b6 c0 ad d7 36 55 72 c6 29 6a 99 b2 ce 30 9c 55 d9 b3 57 2b 14 37 9b 36 6c 55 bc d9 59 78 ab b1 d8 dc ba e0 4a ec d9 43 2f 14 b7 9b 28 65 e2 96 f2 c6 56 58 c0 ad e5 e5 65 e2 c9 bc bc ac bc 0a de 6c d9 78 19 3b 36 6c bc 55 d9 79 59 b0 25 bc dd 33 65 d3 15 5b 95 8e a6 55 31 56 b3 65 d3 35 31 57 66 cd 9b 02 b5 97 d3 36 6c 0a de 5e 56 6c 52 de 5e 37 2e b8 ab 79 78 da e6 ae 29 5d 95 5c aa e6 ae 05 6e b9 ab 8d ae 6a e3 4b 6b eb 95 5c 6d 73 57 1a 5b 5d 5c d5 c6 d7 2a b8 d2 da fa e6 ae 32 b9 ab 86 96 d7 57 31 38 ca e5 d7 0d Data Ascii: cIgcN8#j1ak;"X0^S/5qKTk\bu04ec,6Ur)j0UW+76lUYxJC/(eVXelx;6lUyY%3e[U1Ve51Wf6l^VlR^7.yx)]\njKk\msW[]\*2W18
2024-05-29 10:12:25 UTC	16384	IN	Data Raw: 61 cb 51 39 cf 83 18 df ac 8f d3 07 69 0d 2e 2c 58 c4 f3 6e 3f 86 23 ea c9 2f e8 fe 3f d2 7f 11 be 98 97 3a a9 33 73 21 5f 66 9b a6 df ef 9b 44 fd 88 ff 00 9a 4f da c3 4b ad 52 d3 45 45 b5 8c 72 97 a2 44 9d 77 fe 76 fd 9f f6 58 49 77 e6 19 af 80 83 4b 5f 46 02 78 2c 94 f8 9b fc 8b 68 bf e3 6c 33 d2 74 08 ec 87 ab 70 39 ce 77 25 b7 a1 ff 00 8d 9f 04 67 2e 2e 0c 5e b3 fc 79 67 f4 c7 fa ab 96 31 10 f1 35 15 8e 1f e4 f4 f8 fe a9 7f 5d 31 82 27 97 8c d7 3b c8 3a 2f ec af fa ab fb 5f eb b6 0b c6 f4 1b f4 c0 b2 ea 96 d0 37 a6 5f 9c 87 a2 46 39 b1 ff 00 62 9f f1 b6 66 92 23 cc ba d0 27 94 fa 45 fb bf 85 19 5c b0 70 1c 37 2f 3e ec 8d 0f 80 75 df fe 17 e0 5c 52 6b a8 ac c5 6e 24 54 ff 00 58 d3 fe 05 70 71 c6 b8 8e c3 cf d2 c8 e2 98 97 00 1c 52 ee 8f af fd ca 2c 1c Data Ascii: aQ9i.,Xn?#/?:3s!_fDOKREErDwvXIwK_Fx,hl3tp9w%g..^yg15]1';:/_7_F9bf#'E\p7/>u\Rkn$TXpqR,
2024-05-29 10:12:25 UTC	16384	IN	Data Raw: fe ee 2f f8 c7 73 f1 e0 9b 34 41 fe 93 73 f1 33 1a 16 71 49 1d be cb 2c 67 e1 93 fd 7e 12 3f 1f b1 1f ed e4 5e da e6 49 1c df 5f 7e ff 00 99 00 ef 46 6a 7f ba e2 6f 8b 82 a7 ed fc 2b c3 fd 7c 37 83 50 25 c4 af 53 30 14 58 86 ca 8b fb 29 13 b7 fb cf 1f fc 5f cb d6 7f f7 52 27 f7 98 63 2b e6 c6 78 f8 45 44 7b cb 2e 8e 69 24 24 49 f0 84 fd 9a ec bf e4 c8 df 6b 92 ff 00 27 db ff 00 53 04 c7 70 08 aa 6e a3 ab 9d 97 fd 8e 47 60 bd 11 00 6e 9d 05 06 cb 4a 22 0f f8 ae 1f b4 ff 00 f1 92 e1 e1 4f f8 c9 86 29 a9 c7 21 0d 1a b3 90 36 2d db fd 56 6f 81 3f e7 9c 7c 7f e2 cc b8 17 06 70 3d db 27 0a 6a 2b fd 98 ea e0 28 26 92 6d e9 51 e2 2a df f0 df 63 fe 1b 05 8a f7 c9 34 11 45 ba e5 d7 1b 9b 14 2e cb ae 37 2e b8 a5 75 72 eb 8c e5 9a b8 aa fa e6 ae 32 b9 ab 81 2b eb 9b Data Ascii: /s4As3qI,g~?^I_~Fjo+\|7P%S0X)_R'c+xED{.i$$Ik'SpnG`nJ"O)!6-Vo?\|p='j+(&mQ*c4E.7.ur2+
2024-05-29 10:12:25 UTC	16384	IN	Data Raw: 6a ec 7d 81 ff 00 25 7e 05 f8 9b fd 86 08 e6 23 3c 2e be 2d be c9 20 ee 77 e4 1a 36 e0 af fe 57 c4 c9 80 10 2a 6e eb cb c0 56 83 fe 17 e2 ff 00 88 63 6a 7e 43 c3 2a 3b ee e4 01 5b 74 08 e4 91 a3 25 a3 aa a3 7e c8 6e 42 9f f1 2c 69 64 7f 83 75 7a d6 a7 a1 fa 31 04 5f 1d 8f 8f 86 28 d7 44 0e 2a 7b 00 4d 07 6c 81 1d dc db 3d ea a1 f8 28 46 e2 69 53 d3 7d ff 00 63 7f 87 11 67 24 d3 f0 c4 be 26 eb 8a 80 28 7a d4 63 5d eb 6b 69 d8 f5 c5 43 19 54 2d 14 70 24 d6 9f 17 fb 26 f8 b9 2a e3 5e 9c 43 af c9 8d 36 1f cb 86 7a 76 9f 6f 74 a1 96 71 15 c0 3f 65 c5 14 7f be e4 0d fe ec 8b fd f9 fb 71 fd af 8d 32 71 16 c2 72 11 16 50 ab 34 96 d0 95 f4 d4 a3 d5 79 b2 1a 82 7e 2f 81 db f6 d3 19 08 92 45 32 22 ef 08 05 a9 4f b3 fc ec bf f1 b2 e1 e6 a1 6f 1c 70 cd 24 2e 16 47 21 Data Ascii: j}%~#<.- w6WnVcj~C;[t%~nB,iduz1_(D{Ml=(FiS}cg$&(zc]kiCT-p$&^C6zvotq?eq2qrP4y~/E2"Oop$.G!
2024-05-29 10:12:25 UTC	16384	IN	Data Raw: 98 ab 59 b2 ce 56 28 75 73 65 66 c5 5b ca cd 9b 0a 1d 95 97 95 8a ba b9 79 59 b1 43 75 cb c6 e5 8c 52 dd 31 45 51 8d 03 1e 05 30 24 05 c0 63 c2 d7 28 2e 29 4a 60 6c 01 c0 01 91 ff 00 3c 59 1b bd 21 d9 45 5a 06 59 7e 81 f0 bf fc 2b 64 82 b8 85 e4 1f 5b b7 96 df fd f8 8c bf 78 c0 45 8a 6c c7 2e 09 89 77 17 86 34 9c cf c0 29 4e f8 89 ad 6b 8a 33 70 62 bd c1 a7 ca 98 a9 52 16 84 d4 d2 b4 1e 19 8a ef 39 20 dd 0f 72 30 5a 49 0b 46 aa 3f bd 1b 12 29 42 3e 9c 48 9e 26 94 d8 f8 e3 40 de aa 01 c1 4b 6f 42 fc bb d4 40 f5 b4 d7 3d fd 58 ab dc 74 99 53 fe 4e 64 ea 99 c5 f4 0d 49 74 dd 4a de e6 45 d9 24 15 a6 db 37 ee db fe 25 cb 3b 61 1b e6 4e 33 71 ae e7 53 ab c7 c3 93 88 72 96 ff 00 15 80 63 80 cb cd 96 38 ae cb 19 80 ae 58 18 15 ba 66 a6 06 bf ba 7b 28 4c e9 19 94 Data Ascii: YV(usef[yYCuR1EQ0$c(.)J`l<Y!EZY~+d[xEl.w4)Nk3pbR9 r0ZIF?)B>H&@KoB@=XtSNdItJE$7%;aN3qSrc8Xf{(L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.9	49737	152.42.220.64	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:25 UTC	403	OUT	GET /x/img/BANGOR.png HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:12:25 UTC	207	IN	HTTP/1.1 200 OK Date: Wed, 29 May 2024 10:12:25 GMT Server: Apache Last-Modified: Sat, 13 Jan 2024 12:05:46 GMT Accept-Ranges: bytes Content-Length: 45863 Connection: close Content-Type: image/png
2024-05-29 10:12:25 UTC	7985	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 81 00 00 00 83 08 02 00 00 00 e4 84 30 cc 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 b2 c9 49 44 41 54 78 5e ed bd 05 80 25 c5 d5 36 7c 57 66 c7 6d 15 0d f1 84 c8 8b ac 8c df 3b 77 dc dd dd 65 05 d7 40 82 43 84 10 23 40 9c 84 10 81 18 31 42 12 42 d0 20 81 10 5c 16 59 61 7d 67 77 fc 7a ff cf 73 4e df 9e 3b b3 bb 64 87 b0 bc fb bd ff d4 9c e9 db 5d dd 5d 75 ea d4 a9 a7 ce a9 ae ae b6 19 47 34 04 42 48 36 5e c3 70 1b 86 cb 30 26 85 b0 03 42 24 c8 27 5b eb 14 68 c2 08 58 fb 7a 38 66 f8 40 21 f1 81 49 bf d7 e5 f3 7a 02 7e af 11 98 9e db 54 f0 fb fd 3e 9f 2f 80 20 b9 b8 02 3e 97 c7 ed 0b f8 a7 ae 0e 25 09 f8 c5 95 e6 51 48 a4 c6 5b Data Ascii: PNGIHDR0gAMAapHYsttfxIDATx^%6\|Wfm;we@C#@1BB \Ya}gwzsN;d]]uG4BH6^p0&B$'[hXz8f@!Iz~T>/ >%QH[
2024-05-29 10:12:27 UTC	8000	IN	Data Raw: 91 1d f3 c2 7f 28 01 14 40 41 17 43 31 08 fb 88 19 1f 0e 4e 4a 72 0f ff 6e e3 53 c7 94 a7 1f d3 96 17 dd 9c 29 b3 78 84 3a 33 d1 90 60 9e 84 b5 f1 c1 56 44 67 76 5c 4d fa 8d 7f bf 0b e9 70 50 83 ce 17 d5 6b 4a 93 b0 a7 18 e4 31 46 77 01 15 39 cf 18 bc bd 6a 8c ad 19 6c f8 40 4b 41 4c 53 26 87 ba d0 6e fb 73 12 36 94 c1 4f 59 58 93 12 df 95 37 bf 99 eb 3a 52 8f a1 cd 41 85 06 00 a1 fd 87 75 38 63 3a 73 3e d0 5b f6 2f 63 78 97 f0 3f 0c 77 53 73 0d ca 57 73 46 b6 5a 2e fe 04 31 48 36 8c 50 d2 43 33 04 cf c1 97 d4 6b 34 06 3b a8 97 e6 9b ae 04 6f 00 cd c8 9e dc b0 a6 8c a5 83 25 b6 96 74 8e be 75 f1 a5 5f b3 e1 59 96 29 7a 8e e6 f4 65 03 25 c7 f7 96 2c 6f cb 8b ac 4e 8d 6b ca 5c d2 57 64 2b 39 3d aa 70 d5 49 55 ce 93 8a d3 b7 1a 3e ed 27 c0 ea 14 78 07 99 47 Data Ascii: (@AC1NJrnS)x:3`VDgv\MpPkJ1Fw9jl@KALS&ns6OYX7:RAu8c:s>[/cx?wSsWsFZ.1H6PC3k4;o%tu_Y)ze%,oNk\Wd+9=pIU>'xG
2024-05-29 10:12:27 UTC	8000	IN	Data Raw: 7b 6b 7f f7 e2 13 68 c9 bb 03 7c 29 51 67 f0 a2 33 06 e7 1c 27 52 ee 95 82 bf b8 c0 ed e5 f3 38 10 87 32 82 ee bc 1c 73 0b b5 51 00 ba fc e7 df 59 56 94 7c 52 47 51 44 4d 2a ac ce 98 de 7c ce 1a 6b cd e0 64 ba 3e 0e a1 92 ff ff 48 0a a0 82 a1 ac b5 da d5 f3 9b 33 96 f7 14 45 16 ad 8a 72 7c ba ef 2b 57 bc e1 19 86 9d c8 99 e2 7e ea b0 35 5c cd 79 5b 16 63 12 ac a3 43 11 c2 c1 30 48 9a 2a 5a 0b 5a 6f 64 7d 06 31 68 20 87 6f a5 8b fe 29 73 d8 41 8d 86 62 10 fa 2b 34 12 38 53 cf 8f ef 82 64 91 02 6d 87 e9 be 58 f0 97 81 93 f4 e4 00 e2 23 ac c2 0e 7a f4 6f c7 17 a7 45 f3 f9 ce c1 08 96 51 47 06 3f 77 d1 96 3e af c3 ce af 23 f4 65 85 f5 c9 5a 39 a8 ec f7 00 83 50 14 9f 9f ab 18 f1 99 94 ff e3 ed 25 8b 2a 92 22 bb 72 60 1b f2 99 37 aa aa 33 93 da 26 1a 69 ca 0a Data Ascii: {kh\|)Qg3'R82sQYV\|RGQDM\|kd>H3Er\|+W~5\y[cC0HZZod}1h o)sAb+48SdmX#zoEQG?w>#eZ9P%*"r`73&i
2024-05-29 10:12:27 UTC	8000	IN	Data Raw: 07 56 99 29 aa 80 f9 a2 af 4a 68 72 7e b8 31 ff 6f 6f 3c 07 c9 8f 7b dd 5a c4 d0 77 74 55 11 cd 8c 45 9e 10 ef 88 df fc b8 eb 5f 9e 79 fc 84 72 79 c0 04 47 52 32 32 75 1d 5a 1e cc 1a c5 61 2d a3 bd a1 03 68 b7 c7 34 d8 ef 79 e5 5f b8 57 f5 1b 74 98 18 c4 95 cb d7 16 71 52 12 df 2c a5 ed 00 87 28 bc e0 f4 f3 7f 7c e3 c3 6f be c8 9a 42 e0 53 7f 88 09 24 2a 74 88 a0 08 eb 93 d5 97 b1 33 31 31 f1 9b 07 ef 3d a1 36 4b 5e 82 3d 8d 23 f4 ed 69 50 5a 3e 51 6a 49 d5 dc a7 94 c4 aa a9 1e 67 5c 7d fa df 36 3e 0d 9d 97 2f dc 7a 50 df e8 ac 76 19 ee e6 af 5e 4a 8b a3 8f af 4c a2 f7 0d 83 fc d1 bb 40 f8 d0 40 6b 5e 05 d2 01 1e c1 45 e8 ca 46 45 2f ab cb 6c fd f2 67 61 19 ec 1a 87 3c 0c cf 30 f4 45 78 3d 58 e0 7c 11 09 e3 44 0f 86 d7 f7 ed fc c2 3d 3f 07 0e 00 cb e6 d5 Data Ascii: V)Jhr~1oo<{ZwtUE_yryGR22uZa-h4y_WtqR,(\|oBS$*t311=6K^=#iPZ>QjIg\}6>/zPv^JL@@k^EFE/lga<0Ex=X\|D=?
2024-05-29 10:12:27 UTC	8000	IN	Data Raw: 5b 97 04 21 10 b0 25 23 bb 66 ea 6f 43 12 f0 8b 06 bf df f0 ff 6a d3 d3 31 55 a9 c7 f6 97 f2 59 6a 53 2a 9d 26 14 a1 8b f3 bf 95 01 93 25 d6 9a 70 d5 96 11 df 68 ef bc e9 ca 1d 1c 96 f2 7b 3d 90 22 f4 df f7 f0 a6 e7 4f 6e 29 8c ad 4f b7 35 25 c3 5f b3 75 a4 d0 1b e8 e6 9b 59 11 bd 79 e0 5f 2a 3d 93 8b 0a e9 fa ee 6d b9 4b 4a 52 fe be f3 d5 2d 81 71 88 65 5c 5e 23 77 05 64 0d 0d 8b 55 25 4b f3 95 42 4e a1 ec 6f 19 13 af 1a 93 6b 36 34 2d 6f c9 a1 1d d7 26 18 0a 6b 23 58 11 28 82 96 c2 d4 b7 f6 74 f8 9b 11 0d 19 a7 6c 68 d8 28 03 d2 90 9c b9 94 35 08 c9 ca 2f 52 d6 66 88 08 db 0c 96 f8 0f 3e 70 95 7c 2b 15 87 e0 1b 65 80 5f d7 f5 a5 cf 2e af cc 80 a7 a7 e2 53 c2 be 99 b7 ea 07 08 8d b0 2d 35 ea bc 0a 5b 4b 32 98 8b ab 49 3f be c2 fe dd 47 ef d1 65 25 51 a9 Data Ascii: [!%#foCj1UYjS&%ph{="On)O5%_uYy_=mKJR-qe\^#wdU%KBNok64-o&k#X(tlh(5/Rf>p\|+e_.S-5[K2I?Ge%Q
2024-05-29 10:12:27 UTC	5878	IN	Data Raw: 5c 30 b4 22 7e 68 4e 84 e0 de 3f 7a 10 00 02 49 00 06 e9 91 ee a0 76 60 13 e9 49 c4 40 ef 86 0c f7 0e 59 74 f8 eb 0f ff 3e aa 60 e5 e2 e0 5c 13 08 50 39 01 81 b7 50 b2 0a 62 11 22 95 73 10 6e d4 7b c3 5b f9 dc 06 9d 5c 6c 49 d2 29 3d 55 5f fd f3 2f d0 ef ee 32 5c 50 8f a1 91 61 be 55 0a b6 75 61 ac 77 e4 07 cc 7e 4c 3a 34 a8 54 44 69 f6 bb 27 00 ea 4f ec d9 f4 f1 e6 a2 d8 ea 34 3e 29 a3 7e c8 fc 2e 4e 8b 80 f3 92 8e fa 06 70 00 7d d0 18 ac 62 a3 e6 4c fd b0 f4 4c f4 1b f1 90 88 8a 03 72 99 79 a5 e8 13 08 d7 30 fe f0 30 08 52 db 68 b8 4e 1e a8 46 f7 18 db 91 43 53 1f 4c 02 01 65 21 5e e6 2b df 2c 04 93 e8 b5 98 2c 72 e9 4a 83 11 be f0 9c 52 18 11 e8 6f 17 54 27 bf af ab f8 f8 2a c7 37 ee fd f5 73 63 fc aa 37 5a 1a 9c 73 4a 5e a5 71 24 83 e6 80 ce d0 e7 a3 Data Ascii: \0"~hN?zIv`I@Yt>`\P9Pb"sn{[\lI)=U_/2\PaUuaw~L:4TDi'O4>)~.Np}bLLry00RhNFCSLe!^+,,rJRoT'*7sc7ZsJ^q$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.9	49744	152.42.220.64	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:25 UTC	652	OUT	GET /favicon.ico HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mail.fnbo-in.selfip.com/x/otp.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:12:26 UTC	164	IN	HTTP/1.1 404 Not Found Date: Wed, 29 May 2024 10:12:26 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-05-29 10:12:26 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.9	49752	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:30 UTC	827	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8
2024-05-29 10:12:30 UTC	1614	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzma=60ac8c76-9231-4943-a8b1-7b1610fac6ce; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:30 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmb=1716977550; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:30 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzme=9207; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:30 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmc=665021076184; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:30 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977550; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:30 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60004a7e7f59-81c4-469a-b570-5c954bdc458c17169775505610-6f9e29728760d7cf10; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:30 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000bf3061b5-a79c-4b78-8abc-63f384a3b0221-17169775505620-035d6396c6e5a2ba10; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:30 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:84\|g:fd2ea187-7270-474b-b0d6-e9069547d991\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:13:00 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:13:00 GMT; path=/ Set-Cookie: ADRUM_BT1=R:84\|i:371912\|e:6; expires=Wed, 29-May-2024 10:13:00 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:29 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.9	49754	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:30 UTC	690	OUT	GET /OnlineBanking/App_Themes/Theme5/spacecoast/fonts/montserrat/montserrat-regular.woff HTTP/1.1 Host: olb.sccu.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mail.fnbo-in.selfip.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://olb.sccu.com/OnlineBanking/Theme5Css.aspx?h=7CC200ED151C8E95B54A8AB8314619D7 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-29 10:12:30 UTC	514	IN	HTTP/1.1 200 OK Content-Type: font/x-woff Content-Length: 24388 Connection: close Last-Modified: Tue, 17 Nov 2020 15:59:52 GMT Accept-Ranges: bytes ETag: "08c20affabcd61:0" X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:29 GMT Set-Cookie: ZJULCVVF=0285387f83-142a-4dZjm6clOfudHXBT7t3vIqeCEPTQfjlDutcV9O7FDEAzx_zqWEoj6jSdBu_4BW4xRezgQ; path=/; SameSite=None; Secure
2024-05-29 10:12:30 UTC	15870	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 5f 44 00 12 00 00 00 00 b3 dc 00 07 00 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 5f 28 00 00 00 1c 00 00 00 1c 80 42 54 5c 47 44 45 46 00 00 48 40 00 00 00 32 00 00 00 36 03 b6 04 85 47 50 4f 53 00 00 4a 34 00 00 14 f3 00 00 32 4e f0 59 0d 67 47 53 55 42 00 00 48 74 00 00 01 c0 00 00 03 be cb 34 ff 55 4f 53 2f 32 00 00 02 0c 00 00 00 4e 00 00 00 60 53 a9 aa 1a 63 6d 61 70 00 00 04 c4 00 00 01 81 00 00 01 da 1f de 17 36 63 76 74 20 00 00 0d 74 00 00 00 5d 00 00 00 e4 2f 52 15 48 66 70 67 6d 00 00 06 48 00 00 06 70 00 00 0d 6d 4d 24 8e 7c 67 61 73 70 00 00 48 38 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 0f ec 00 00 33 a6 00 00 5c 54 2c e1 59 b0 68 65 61 64 00 00 01 94 00 00 00 Data Ascii: wOFF_DFFTM_(BT\GDEFH@26GPOSJ42NYgGSUBHt4UOS/2N`Scmap6cvt t]/RHfpgmHpmM$\|gaspH8glyf3\T,Yhead

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.9	49753	54.228.71.178	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:30 UTC	580	OUT	GET /time.mp3?nocache=0.22714454500364867 HTTP/1.1 Host: mpsnare.iesnare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://mail.fnbo-in.selfip.com/ Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-05-29 10:12:31 UTC	372	IN	HTTP/1.1 206 Partial Content Server: nginx Date: Wed, 29 May 2024 10:12:30 GMT Content-Type: audio/mpeg Content-Length: 504 Connection: close Content-Disposition: inline; filename=time.mp3 Content-Range: bytes 0-503/504 Accept-Ranges: bytes Pragma: public Expires: Thu, 01 Jan 1970 00:00:00 GMT Strict-Transport-Security: max-age=15552000; includeSubDomains
2024-05-29 10:12:31 UTC	504	IN	Data Raw: ff e3 48 64 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 69 6e 67 00 00 00 0f 08 2e 7b af 00 00 02 40 00 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 c0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 0a 4c 41 4d 45 33 2e 39 38 72 04 28 00 00 00 00 00 00 00 00 14 08 24 06 c0 2d 00 01 9a 00 00 02 40 c6 6c f8 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: HdXing.{@@@@@@@@@@@@@@@@@@@@@@@@@LAME3.98r($-@l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.9	49756	66.22.0.11	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:31 UTC	975	OUT	GET /OnlineBanking/content.aspx?theme=Theme5&color1=%23424242&color2=%23F5F5F5&image=svg/ncua.svg HTTP/1.1 Host: olb.sccu.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ZJULCVVF=0285387f83-142a-4dhQhhPGJ0x94n0Ow-D2wwB2VnBaONvwkXVw6wrqji8KoKJZOltZxmOOJcj1a9IxMYPn8; __uzmb=1716977544; __uzmd=1716977544; __uzma=50147c69-0a62-49eb-9458-b8b72f833e41; __uzme=2633; __uzmc=672591034577; __uzmf=7f60005d36fe59-a3e9-4876-a0b6-baf3b9c1541d17169775448300-c363b53d369801e010; uzmx=7f9000b884d52e-1f2e-4556-9ce2-958eb8518fab1-17169775448300-d4013ce995787a8110; ADRUM_BTa=R:0\|g:a691adb1-2988-4805-abb7-24ab13e0da54\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; SameSite=None; ADRUM_BT1=R:0\|i:371912\|e:6
2024-05-29 10:12:31 UTC	1241	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Set-Cookie: __uzmc=787461382239; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:31 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmd=1716977551; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:31 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: __uzmf=7f60005d36fe59-a3e9-4876-a0b6-baf3b9c1541d17169775448306482-218be8eef3bd622813; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:31 GMT ; Max-Age=15724800; SameSite=Lax Set-Cookie: uzmx=7f9000b884d52e-1f2e-4556-9ce2-958eb8518fab1-17169775448306482-80225b0bf381037e13; Domain=.sccu.com; HttpOnly; path=/; Expires=Wed, 27-Nov-24 10:12:31 GMT ; Max-Age=15724800; SameSite=Lax Cache-Control: private Set-Cookie: ADRUM_BTa=R:0\|g:605d56f5-fc1e-4f61-9045-f661c4eb032d\|n:spacecoastcreditunion_803322c3-bfcf-4bc3-b47a-bbd31c4c5806; expires=Wed, 29-May-2024 10:13:01 GMT; path=/ Set-Cookie: ADRUM_BT1=R:0\|i:371912\|e:6; expires=Wed, 29-May-2024 10:13:01 GMT; path=/ Set-Cookie: SameSite=None; expires=Wed, 29-May-2024 10:13:01 GMT; path=/ X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains X-UA-Compatible: IE=Edge Date: Wed, 29 May 2024 10:12:30 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.9	49750	152.42.220.64	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:32 UTC	700	OUT	GET /OnlineBanking/ HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:12:33 UTC	164	IN	HTTP/1.1 404 Not Found Date: Wed, 29 May 2024 10:12:33 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-05-29 10:12:33 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.9	49751	152.42.220.64	443	3148	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-29 10:12:43 UTC	700	OUT	GET /OnlineBanking/ HTTP/1.1 Host: mail.fnbo-in.selfip.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __ssds=3; __ssuzjsr3=a9be0cd8e
2024-05-29 10:12:44 UTC	164	IN	HTTP/1.1 404 Not Found Date: Wed, 29 May 2024 10:12:44 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-05-29 10:12:44 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 6856, Parent PID: 5800

General

Target ID:	2
Start time:	06:12:10
Start date:	29/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3148, Parent PID: 6856

General

Target ID:	4
Start time:	06:12:14
Start date:	29/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2020,i,13229865567807096612,8486665967359162013,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5640, Parent PID: 5800

General

Target ID:	5
Start time:	06:12:17
Start date:	29/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mail.fnbo-in.selfip.com/x/otp.html"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mail.fnbo-in.selfip.com/x/otp.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Windows Analysis Report
https://mail.fnbo-in.selfip.com/x/otp.html