Edit tour

Windows Analysis Report
http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html

Overview

General Information

Sample URL:	http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html
Analysis ID:	1467904
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Phishing site detected (based on favicon image match)

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5896 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1896,i,14678065025971338511,13714765998862464718,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	Avira URL Cloud: detection malicious, Label: phishing
Source: http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Antivirus detection for URL or domain

Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/FontManifest.json	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/manifest.json	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/main.dart.js	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.bin	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/icons/Icon-192.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/cupertino_icons/assets/CupertinoIcons.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter.js	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/bg.jpg	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/fbv2.jpg	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.json	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/fonts/MaterialIcons-Regular.otf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/avatar.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/metav2.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/favicon.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/meta.png	Avira URL Cloud: Label: phishing
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464	Avira URL Cloud: Label: phishing

Phishing

Phishing site detected (based on favicon image match)

Source: https://amplifyapp.com	Matcher: Template: facebook matched with high similarity
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	Matcher: Template: facebook matched with high similarity
Source: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/#/	Matcher: Template: facebook matched with high similarity

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49760 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49778 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49760 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flutter.js HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /flutter_service_worker.js?v=1157178464 HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /icons/Icon-192.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.dart.js HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/AssetManifest.json HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/FontManifest.json HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/Icon-192.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main.dart.js HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "8311e439dc154163771ac561c8cfcddd"If-Modified-Since: Mon, 01 Jul 2024 18:55:45 GMT
Source: global traffic	HTTP traffic detected: GET /assets/fonts/MaterialIcons-Regular.otf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/cupertino_icons/assets/CupertinoIcons.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/AssetManifest.bin HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/metav2.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipapi.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/meta.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/fbv2.jpg HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/avatar.png HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/assets/images/bg.jpg HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_98.2.dr

String found in binary or memory: else if(b===8)window.location.href="https://www.facebook.com/business/help" equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ipapi.co

Source: chromecache_91.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_98.2.dr	String found in binary or memory: https://api.flutter.dev/flutter/material/Scaffold/of.html
Source: chromecache_105.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base
Source: chromecache_99.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts
Source: chromecache_99.2.dr	String found in binary or memory: https://developers.google.com/web/fundamentals/primers/service-workers
Source: chromecache_98.2.dr, chromecache_99.2.dr	String found in binary or memory: https://docs.flutter.dev/development/platform-integration/web/initialization
Source: chromecache_98.2.dr	String found in binary or memory: https://flutter.dev/docs/cookbook/design/fonts
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/a/
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v24/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFab5s79iz64w.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notoemoji/v34/bMrnmSyK7YY-MEu6aWjPDs-ar6uWaGWuob-r0jwvS-FGJCMY.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosans/v27/o-0IIpQlx3QUlC5A4PNb4j5Ba_2c7A.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansadlam/v21/neIczCCpqp0s5pPusPamd81eMfjPonvqdbYxxpgufnv0TGnBZLwhuv
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansanatolianhieroglyphs/v14/ijw9s4roRME5LLRxjsRb8A0gKPSWq4BbDmHHu6j
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansarabic/v18/nwpxtLGrOAZMl5nJ_wfgRg3DrWFZWsnVBJ_sS6tlqHHFlhQ5l3sQW
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansarmenian/v42/ZgN0jOZKPa7CHqq0h37c7ReDUubm2SEdFXp7ig73qtTY5idb74R
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansavestan/v20/bWti7ejKfBziStx7lIzKOLQZKhIJkyu9SASLji8U.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbalinese/v23/NaPwcYvSBuhTirw6IaFn6UrRDaqje-lpbbRtYf-Fwu2Ov7fdhE5
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbamum/v26/uk-0EGK3o6EruUbnwovcbBTkkklK_Ya_PBHfNGTPEddO-_gLykxEkx
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbassavah/v17/PN_bRee-r3f7LnqsD5sax12gjZn7mBpL5YwUpA2MBdcFn4MaAc6
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbatak/v16/gok2H6TwAEdtF9N8-mdTCQvT-Zdgo4_PHuk74A.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbengali/v20/Cn-SJsCGWQxOjaGwMQ6fIiMywrNJIky6nvd8BjzVMvJx2mcSPVFp
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbhaiksuki/v15/UcC63EosKniBH4iELXATsSBWdvUHXxhj8rLUdU4wh9U.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbrahmi/v15/vEFK2-VODB8RrNDvZSUmQQIIByV18tK1W77HtMo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbuginese/v17/esDM30ldNv-KYGGJpKGk18phe_7Da6_gtfuEXLmNtw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansbuhid/v17/Dxxy8jiXMW75w3OmoDXVWJD7YwzAe6tgnaFoGA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscanadianaboriginal/v21/4C_TLjTuEqPj-8J01CwaGkiZ9os0iGVkezM1mUT-j
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscarian/v15/LDIpaoiONgYwA9Yc6f0gUILeMIOgs7ob9yGLmfI.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscaucasianalbanian/v16/nKKA-HM_FYFRJvXzVXaANsU0VzsAc46QGOkWytlTs-
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanschakma/v17/Y4GQYbJ8VTEp4t3MKJSMjg5OIzhi4JjTQhYBeYo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscham/v27/pe06MIySN5pO62Z5YkFyQb_bbuRhe6D4yip43qfcERwcv7GykboaLg.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscherokee/v19/KFOPCm6Yu8uF-29fiz9vQF9YWK6Z8O10cHNA0cSkZCHYWi5PDkm
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscoptic/v17/iJWfBWmUZi_OHPqn4wq6kgqumOEd78u_VG0xR4Y.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscuneiform/v15/bMrrmTWK7YY-MF22aHGGd7H8PhJtvBDWgb9JlRQueeQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanscypriot/v15/8AtzGta9PYqQDjyp79a6f8Cj-3a3cxIsK5MPpahF.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansdeseret/v15/MwQsbgPp1eKH6QsAVuFb9AZM6MMr2Vq9ZnJSZtQG.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansdevanagari/v24/TuGoUUFzXI5FBtUq5a8bjKYTZjtRU6Sgv3NaV_SNmI0b8QQCQ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansduployan/v16/gokzH7nwAEdtF9N8-mdTDx_X9JM5wsvrFsIn6WYDvA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansegyptianhieroglyphs/v26/vEF42-tODB8RrNDvZSUmRhcQHzx1s7y_F9-j3qSz
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanselbasan/v15/-F6rfiZqLzI2JPCgQBnw400qp1trvHdlre4dFcFh.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanselymaic/v15/UqyKK9YTJW5liNMhTMqe9vUFP65ZD4AjWOT0zi2V.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgeorgian/v41/PlIaFke5O6RzLfvNNVSitxkr76PRHBC4Ytyq-Gof7PUs4S7zWn-
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansglagolitic/v15/1q2ZY4-BBFBst88SU_tOj4J-4yuNF_HI4ERK4Amu7nM1.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgothic/v15/TuGKUUVzXI5FBtUq5a8bj6wRbzxTFMX40kFQRx0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgrantha/v17/3y976akwcCjmsU8NDyrKo3IQfQ4o-r8cFeulHc6N.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgujarati/v22/wlpWgx_HC1ti5ViekvcxnhMlCVo3f5pv17ivlzsUB14gg1TMR2G
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgunjalagondi/v15/bWto7e7KfBziStx7lIzKPrcSMwcEnCv6DW7n5hcVXYMTK4q
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansgurmukhi/v25/w8g9H3EvQP81sInb43inmyN9zZ7hb7ATbSWo4q8dJ74a3cVrYFQ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanshanunoo/v17/f0Xs0fCv8dxkDWlZSoXOj6CphMloFsEsEpgL_ix2.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanshatran/v15/A2BBn4Ne0RgnVF3Lnko-0sOBIfL_mM83r1nwzDs.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanshebrew/v42/or3HQ7v33eiDljA1IufXTtVf7V6RvEEdhQlk0LlGxCyaeNKYZC0sq
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansimperialaramaic/v15/a8IMNpjwKmHXpgXbMIsbTc_kvks91LlLetBr5itQrtdm
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansindicsiyaqnumbers/v15/6xK5dTJFKcWIu4bpRBjRZRpsIYHabOeZ8UZLubTzpX
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansinscriptionalpahlavi/v15/ll8UK3GaVDuxR-TEqFPIbsR79Xxz9WEKbwsjpz7
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansinscriptionalparthian/v15/k3k7o-IMPvpLmixcA63oYi-yStDkgXuXncL7dz
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansjavanese/v21/2V01KJkDAIA6Hp4zoSScDjV0Y-eoHAHT-Z3MngEefiidxJnkFFl
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskaithi/v16/buEtppS9f8_vkXadMBJJu0tWjLwjQi0KdoZIKlo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskannada/v21/8vIs7xs32H97qzQKnzfeXycxXZyUmySvZWItmf1fe6TVmgop9ndp
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskayahli/v20/B50nF61OpWTRcGrhOVJJwOMXdca6Yecki3E06x2jVTX3WCc3CZH4
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskharoshthi/v15/Fh4qPiLjKS30-P4-pGMMXCCfvkc5Vd7KE5z4rFyx5mR1.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskhmer/v23/ijw3s5roRME5LLRxjsRb-gssOenAyendxrgV2c-Zw-9vbVUti_Z_dW
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskhojki/v16/-nFnOHM29Oofr2wohFbTuPPKVWpmK_d709jy92k.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanskhudawadi/v16/fdNi9t6ZsWBZ2k5ltHN73zZ5hc8HANlHIjRnVVXz9MY.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslao/v24/bx6lNx2Ol_ixgdYWLm9BwxM3NW6BOkuf763Clj73CiQ_J1Djx9pidOt4
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslepcha/v16/0QI7MWlB_JWgA166SKhu05TekNS32AJstqBXgd4.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslimbu/v22/3JnlSDv90Gmq2mrzckOBBRRoNJVj0MF3OHRDnA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslineara/v16/oPWS_l16kP4jCuhpgEGmwJOiA18FZj22zmHQAGQicw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslinearb/v15/HhyJU4wt9vSgfHoORYOiXOckKNB737IV3BkFTq4EPw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslisu/v25/uk-3EGO3o6EruUbnwovcYhz6kh57_nqbcTdjJnHP2Vwt29IlxkVdig.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslycian/v15/QldVNSNMqAsHtsJ7UmqxBQA9r8wA5_naCJwn00E.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanslydian/v15/c4m71mVzGN7s8FmIukZJ1v4ZlcPReUPXMoIjEQI.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmahajani/v15/-F6sfiVqLzI2JPCgQBnw60Agp0JrvD5Fh8ARHNh4zg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmalayalam/v21/sJoi3K5XjsSdcnzn071rL37lpAOsUThnDZIfPdbeSNzVakglNM
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmandaic/v15/cIfnMbdWt1w_HgCcilqhKQBo_OsMI5_A_gMk0izH.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmanichaean/v15/taiVGntiC4--qtsfi4Jp9-_GkPZZCcrfekqCNTtFCtdX.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmarchen/v17/aFTO7OZ_Y282EP-WyG6QTOX_C8WZMHhPk652ZaHk.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmasaramgondi/v17/6xK_dThFKcWIu4bpRBjRYRV7KZCbUq6n_1kPnuGe7RI9WSW
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmath/v15/7Aump_cpkSecTWaHRlH2hyV5UHkG-V048PW0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmayannumerals/v15/PlIuFk25O6RzLfvNNVSivR09_KqYMwvvDKYjfIiE68oo6e
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmedefaidrin/v21/WwkzxOq6Dk-wranENynkfeVsNbRZtbOIdLb1exeM4ZeuabBf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmeeteimayek/v14/HTxAL3QyKieByqY9eZPFweO0be7M21uSphSdhqILnmrRfJ8t
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmeroitic/v16/IFS5HfRJndhE3P4b5jnZ3ITPvC6i00UDgDhTiKY9KQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmiao/v17/Dxxz8jmXMW75w3OmoDXVV4zyZUjgUYVslLhx.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmodi/v20/pe03MIySN5pO62Z5YkFyT7jeav5qWVAgVol-.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmongolian/v17/VdGCAYADGIwE0EopZx8xQfHlgEAMsrToxLsg6-av1x0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmro/v18/qWcsB6--pZv9TqnUQMhe9b39WDzRtjkho4M.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmultani/v20/9Bty3ClF38_RfOpe1gCaZ8p30BOFO1A0pfCs5Kos.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansmyanmar/v20/AlZq_y1ZtY3ymOryg38hOCSdOnFq0En23OU4o1AC.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnabataean/v15/IFS4HfVJndhE3P4b5jnZ34DfsjO330dNoBJ9hK8kMK4.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnewa/v16/7r3fqXp6utEsO9pI4f8ok8sWg8n_qN4R5lNU.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnewtailue/v19/H4cKBW-Pl9DZ0Xe_nHUapt7PovLXAhAnY7wqaLy-OJgU3p_pde
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnko/v2/esDX31ZdNv-KYGGJpKGk2_RpMpCMHMLBrdA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansnushu/v18/rnCw-xRQ3B7652emAbAe_Ai1IYaFWFAMArZKqQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansogham/v15/kmKlZqk1GBDGN0mY6k5lmEmww4hrt5laQxcoCA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansolchiki/v20/N0b92TJNOPt-eHmFZCdQbrL32r-4CvhzDzRwlxOQYuVALWk267I6
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldhungarian/v15/E213_cD6hP3GwCJPEUssHEM0KqLaHJXg2PiIgRfjbg5nCYX
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansolditalic/v15/TuGOUUFzXI5FBtUq5a8bh68BJxxEVam7tWlRdRhtCC4d.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldnortharabian/v15/esDF30BdNv-KYGGJpKGk2tNiMt7Jar6olZDyNdr81zBQ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldpermic/v16/snf1s1q1-dF8pli1TesqcbUY4Mr-ElrwKLdXgv_dKYB5.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldpersian/v15/wEOjEAbNnc5caQTFG18FHrZr9Bp6-8CmIJ_tqOlQfx9CjA.tt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldsogdian/v15/3JnjSCH90Gmq2mrzckOBBhFhdrMst48aURt7neIqM-9uyg.tt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldsoutharabian/v15/3qT5oiOhnSyU8TNFIdhZTice3hB_HWKsEnF--0XCHiKx
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoldturkic/v15/yMJNMJVya43H0SUF_WmcGEQVqoEMKDKbsE2RjEw-Vyws.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansoriya/v26/AYCppXfzfccDCstK_hrjDyADv5e9748vhj3CJBLHIARtgD6TJQS0dJ
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansosage/v18/oPWX_kB6kP4jCuhpgEGmw4mtAVtXRlaSxkrMCQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansosmanya/v18/8vIS7xs32H97qzQKnzfeWzUyUpOJmz6kR47NCV5Z.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspahawhhmong/v17/bWtp7e_KfBziStx7lIzKKaMUOBEA3UPQDW7krzc_c48aMpM.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspalmyrene/v15/ZgNPjOdKPa7CHqq0h37c_ASCWvH93SFCPnK5ZpdNtcA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspaucinhau/v19/x3d-cl3IZKmUqiMg_9wBLLtzl22EayN7ehIdjEWqKMxsKw.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansphagspa/v15/pxiZyoo6v8ZYyWh5WuPeJzMkd4SrGChkqkSsrvNXiA.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansphoenician/v15/jizFRF9Ksm4Bt9PvcTaEkIHiTVtxmFtS5X7Jot-p5561.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanspsalterpahlavi/v15/rP2Vp3K65FkAtHfwd-eISGznYihzggmsicPfud3w1G3Ks
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansrejang/v18/Ktk2AKuMeZjqPnXgyqrib7DIogqwN4O3WYZB_sU.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansrunic/v15/H4c_BXWPl9DZ0Xe_nHUaus7W68WWaxpvHtgIYg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssaurashtra/v18/ea8GacQ0Wfz_XKWXe6OtoA8w8zvmYwTef9ndjhPTSIx9.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssc/v26/k3kXo84MPvpLmixcA63oeALhL4iJ-Q7m8w.otf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssharada/v16/gok0H7rwAEdtF9N8-mdTGALG6p0kwoXLPOwr4H8a.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansshavian/v15/CHy5V_HZE0jxJBQlqAeCKjJvQBNF4EFQSplv2Cwg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssiddham/v17/OZpZg-FwqiNLe9PELUikxTWDoCCeGqndk3Ic92ZH.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssinhala/v26/yMJ2MJBya43H0SUF_WmcBEEf4rQVO2P524V5N_MxQzQtb-tf5dJb
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssogdian/v15/taiQGn5iC4--qtsfi4Jp6eHPnfxQBo--Pm6KHidM.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssorasompeng/v24/PlIRFkO5O6RzLfvNNVSioxM2_OTrEhPyDLolKvCsHzCxWuGk
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssoyombo/v15/RWmSoL-Y6-8q5LTtXs6MF6q7xsxgY0FrIFOcK25W.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssundanese/v24/FwZw7_84xUkosG2xJo2gm7nFwSLQkdymq2mkz3Gz1_b6ctxpNN
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssylotinagri/v20/uU9eCAQZ75uhfF9UoWDRiY3q7Sf_VFV3m4dGFVfxN87gsj0.
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssymbols/v40/rP2up3q65FkAtHfwd-eIS2brbDN6gxP34F9jRRCe4W3gfQ8gavVF
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssymbols2/v17/I_uyMoGduATTei9eI8daxVHDyfisHr71ypPqfX71-AI.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanssyriac/v15/Ktk2AKuMeZjqPnXgyqribqzQqgW0N4O3WYZB_sU.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstagalog/v17/J7aFnoNzCnFcV9ZI-sUYuvote1R0wwEAA8jHexnL.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstagbanwa/v17/Y4GWYbB8VTEp4t3MKJSMmQdIKjRtt_nZRjQEaYpGoQ.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstaile/v17/vEFK2-VODB8RrNDvZSUmVxEATwR58tK1W77HtMo.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstaitham/v19/kJEbBv0U4hgtwxDUw2x9q7tbjLIfbPGHBoaVSAZ3MdLJBCUbPgqu
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstaiviet/v16/8QIUdj3HhN_lv4jf9vsE-9GMOLsaSPZr644fWsRO9w.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstakri/v21/TuGJUVpzXI5FBtUq5a8bnKIOdTwQNO_W3khJXg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstamil/v26/ieVc2YdFI3GCY6SyQy1KfStzYKZgzN1z4LKDbeZce-0429tBManUkt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstamilsupplement/v19/DdTz78kEtnooLS5rXF1DaruiCd_bFp_Ph4sGcn7ax_vs
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstelugu/v19/0FlxVOGZlE2Rrtr-HmgkMWJNjJ5_RyT8o8c7fHkeg-esVC5dzHkHI
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansthaana/v23/C8c14dM-vnz-s-3jaEsxlxHkBH-WZOETXfoQrfQ9Y4XrbhLhnu4-t
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansthai/v20/iJWnBXeUZi_OHPqn4wq6hQ2_hbJ1xyN9wd43SofNWcd1MKVQt_So_9C
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstifinagh/v17/I_uzMoCduATTei9eI8dawkHIwvmhCvbn6rnEcXfs4Q.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanstirhuta/v15/t5t6IQYRNJ6TWjahPR6X-M-apUyby7uGUBsTrn5P.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansugaritic/v15/3qTwoiqhnSyU8TNFIdhZVCwbjCpkAXXkMhoIkiazfg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansvai/v17/NaPecZTSBuhTirw6IaFn_UrURMTsDIRSfr0.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanswancho/v17/zrf-0GXXyfn6Fs0lH9P4cUubP0GBqAPopiRfKp8.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanswarangciti/v17/EYqtmb9SzL1YtsZSScyKDXIeOv3w-zgsNvKRpeVCCXzdgA.tt
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosansyi/v18/sJoD3LFXjsSdcnzn071rO3apxVDJNVgSNg.ttf
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notosanszanabazarsquare/v16/Cn-jJsuGWQxOjaGwMQ6fOicyxLBEMRfDtkzl4uagQtJx
Source: chromecache_98.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5WZLCzYlKw.ttf
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/flutter/user/blob/main/lib/web_ui/lib/src/user/js_interop/js_loader.dart#L42
Source: chromecache_95.2.dr, chromecache_94.2.dr, chromecache_122.2.dr, chromecache_97.2.dr, chromecache_107.2.dr, chromecache_110.2.dr	String found in binary or memory: https://github.com/itfoundry/Poppins)
Source: chromecache_98.2.dr	String found in binary or memory: https://github.com/material-foundation/flutter-packages/issues/new/choose.
Source: chromecache_98.2.dr	String found in binary or memory: https://ipapi.co/json
Source: chromecache_94.2.dr, chromecache_122.2.dr	String found in binary or memory: https://scripts.sil.org/OFLPoppins-Bold4.004Poppins
Source: chromecache_95.2.dr, chromecache_110.2.dr	String found in binary or memory: https://scripts.sil.org/OFLPoppins-Regular4.004Poppins
Source: chromecache_97.2.dr, chromecache_107.2.dr	String found in binary or memory: https://scripts.sil.org/OFLPoppins-SemiBold4.004ITFO;
Source: chromecache_98.2.dr	String found in binary or memory: https://www.gstatic.com/flutter-canvaskit/45f6e009110df4f34ec2cf99f63cf73b71b7a420/
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/conversations/addConversations
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/conversations/conversationsDelete/
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/email/send
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/users/
Source: chromecache_98.2.dr	String found in binary or memory: https://zwillmuqka.onrender.com/users/update/

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49778 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@17/60@10/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1896,i,14678065025971338511,13714765998862464718,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1896,i,14678065025971338511,13714765998862464718,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	100%	Avira URL Cloud	phishing
http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.apache.org/licenses/LICENSE-2.0	0%	URL Reputation	safe
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/FontManifest.json	100%	Avira URL Cloud	phishing
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf	100%	Avira URL Cloud	phishing
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/manifest.json	100%	Avira URL Cloud	phishing
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/main.dart.js	100%	Avira URL Cloud	phishing
https://github.com/itfoundry/Poppins)	0%	Avira URL Cloud	safe
https://github.com/flutter/user/blob/main/lib/web_ui/lib/src/user/js_interop/js_loader.dart#L42	0%	Avira URL Cloud	safe
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.bin	100%	Avira URL Cloud	phishing
https://scripts.sil.org/OFLPoppins-Regular4.004Poppins	0%	Avira URL Cloud	safe
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/icons/Icon-192.png	100%	Avira URL Cloud	phishing
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/cupertino_icons/assets/CupertinoIcons.ttf	100%	Avira URL Cloud	phishing
https://zwillmuqka.onrender.com/email/send	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts	0%	Avira URL Cloud	safe
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter.js	100%	Avira URL Cloud	phishing
https://flutter.dev/docs/cookbook/design/fonts	0%	Avira URL Cloud	safe
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/bg.jpg	100%	Avira URL Cloud	phishing
https://zwillmuqka.onrender.com/users/update/	0%	Avira URL Cloud	safe
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/fbv2.jpg	100%	Avira URL Cloud	phishing
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.json	100%	Avira URL Cloud	phishing
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/fonts/MaterialIcons-Regular.otf	100%	Avira URL Cloud	phishing
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf	100%	Avira URL Cloud	phishing
https://scripts.sil.org/OFLPoppins-SemiBold4.004ITFO;	0%	Avira URL Cloud	safe
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/avatar.png	100%	Avira URL Cloud	phishing
https://zwillmuqka.onrender.com/users/	0%	Avira URL Cloud	safe
https://scripts.sil.org/OFLPoppins-Bold4.004Poppins	0%	Avira URL Cloud	safe
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/metav2.png	100%	Avira URL Cloud	phishing
https://docs.flutter.dev/development/platform-integration/web/initialization	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base	0%	Avira URL Cloud	safe
https://developers.google.com/web/fundamentals/primers/service-workers	0%	Avira URL Cloud	safe
https://api.flutter.dev/flutter/material/Scaffold/of.html	0%	Avira URL Cloud	safe
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/favicon.png	100%	Avira URL Cloud	phishing
https://zwillmuqka.onrender.com/conversations/addConversations	0%	Avira URL Cloud	safe
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf	100%	Avira URL Cloud	phishing
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/meta.png	100%	Avira URL Cloud	phishing
https://zwillmuqka.onrender.com/conversations/conversationsDelete/	0%	Avira URL Cloud	safe
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464	100%	Avira URL Cloud	phishing
https://ipapi.co/json	0%	Avira URL Cloud	safe
https://github.com/material-foundation/flutter-packages/issues/new/choose.	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ipapi.co	104.26.8.44	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com	18.65.39.51	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
windowsupdatebg.s.llnwi.net	87.248.204.0	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/#/	true		unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/FontManifest.json	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/manifest.json	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/main.dart.js	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/icons/Icon-192.png	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/cupertino_icons/assets/CupertinoIcons.ttf	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.bin	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/fbv2.jpg	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter.js	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/bg.jpg	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/fonts/MaterialIcons-Regular.otf	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.json	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/avatar.png	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/metav2.png	false	Avira URL Cloud: phishing	unknown
http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	true		unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/favicon.png	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html	true		unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/meta.png	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf	false	Avira URL Cloud: phishing	unknown
https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464	false	Avira URL Cloud: phishing	unknown
https://ipapi.co/json	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.apache.org/licenses/LICENSE-2.0	chromecache_91.2.dr	false	URL Reputation: safe	unknown
https://github.com/itfoundry/Poppins)	chromecache_95.2.dr, chromecache_94.2.dr, chromecache_122.2.dr, chromecache_97.2.dr, chromecache_107.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/flutter/user/blob/main/lib/web_ui/lib/src/user/js_interop/js_loader.dart#L42	chromecache_99.2.dr	false	Avira URL Cloud: safe	unknown
https://scripts.sil.org/OFLPoppins-Regular4.004Poppins	chromecache_95.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
https://zwillmuqka.onrender.com/email/send	chromecache_98.2.dr	false	Avira URL Cloud: safe	unknown
https://flutter.dev/docs/cookbook/design/fonts	chromecache_98.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts	chromecache_99.2.dr	false	Avira URL Cloud: safe	unknown
https://zwillmuqka.onrender.com/users/update/	chromecache_98.2.dr	false	Avira URL Cloud: safe	unknown
https://scripts.sil.org/OFLPoppins-SemiBold4.004ITFO;	chromecache_97.2.dr, chromecache_107.2.dr	false	Avira URL Cloud: safe	unknown
https://scripts.sil.org/OFLPoppins-Bold4.004Poppins	chromecache_94.2.dr, chromecache_122.2.dr	false	Avira URL Cloud: safe	unknown
https://zwillmuqka.onrender.com/users/	chromecache_98.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/web/fundamentals/primers/service-workers	chromecache_99.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base	chromecache_105.2.dr	false	Avira URL Cloud: safe	unknown
https://api.flutter.dev/flutter/material/Scaffold/of.html	chromecache_98.2.dr	false	Avira URL Cloud: safe	unknown
https://docs.flutter.dev/development/platform-integration/web/initialization	chromecache_98.2.dr, chromecache_99.2.dr	false	Avira URL Cloud: safe	unknown
https://zwillmuqka.onrender.com/conversations/addConversations	chromecache_98.2.dr	false	Avira URL Cloud: safe	unknown
https://zwillmuqka.onrender.com/conversations/conversationsDelete/	chromecache_98.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/material-foundation/flutter-packages/issues/new/choose.	chromecache_98.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.26.8.44	ipapi.co	United States	13335	CLOUDFLARENETUS	false
18.65.39.51	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com	United States	3	MIT-GATEWAYSUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.65.39.113	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467904
Start date and time:	2024-07-05 00:48:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@17/60@10/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 172.217.18.110, 74.125.133.84, 34.104.35.123, 216.58.206.67, 142.250.185.67, 20.114.59.183, 192.229.221.95, 142.250.186.131, 13.85.23.206, 93.184.221.240, 216.58.212.131, 13.95.31.18, 172.217.23.99
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 12, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	7.595187138991271
Encrypted:	false
SSDEEP:	12:6v/7UuEYykgv1+nOJz5LC1PFCg5zw6HMwVr+dW/mPyHMVyKPbKQp4hYtSQcc:eTykgvInOno9Cghw4V6dl1VyKPfs4cc
MD5:	82F724AA56DB0DA424F206B9991FD62E
SHA1:	C0334262E1A6720EFB47FA3334E8DD6437377836
SHA-256:	D96115050F54FD0C168F20FB496755CE4A6857A57446DBDAD9310BFC1D79FCB8
SHA-512:	B466B2EF2B3AE788F31E6BBAB7702911B5D43676CBB7DFCAD5B41C5F51EEBA812414F70870DDCC51666EB8E811ABAF2CF2C40D82C99B9F94CF10B5C1556EBDAA
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/metav2.png
Preview:	.PNG........IHDR...6.................bKGD........DIDAT8..O.Ue....jLN.3....9R..(.b"..!...$..C.B.hadS.D0..5...B.h...B..?.C.ZX._.....0..3.qq..{.i.wV.w~.{.....nS..L... ...Ap...>..<.Rs..-y#...jU.?.5.g..Y?.5..u..>2.....eE...........$.....)I\.Z.?4<_.g....f.a../Il..[lvC..&o..J.[..a.z..0fq....%6.C.-I\.>mb.....I.R.A.C....Y.X.a.l...A...`.......ib...9.4mek..bk...E?....^_k./fN.....W.Su..I.......&<.}.W..1..x:I.b..D.......mX..L....{OC.<....*...Z.a8..;.%...J..w[..c.x$).!\..^....w...n.jq.1u...O..]~.......X.M...V......b..]6b.[.......f...~..t.7.XgLs.8..[0.b..x.Z.%.."1...4.../........z.3.....$....u....:M..F....IEND.B`.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 662 x 664, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	58407
Entropy (8bit):	7.96753430481835
Encrypted:	false
SSDEEP:	768:j1VuqRV07YN5twewbsDHVC7UoaSzAHHI9R7y5QZL7SStHriNU2+BiHvUcLR8K9H5:jw7q2IIbciL7SSHvicGR8QPszbgzNj
MD5:	02FB04256D936E0D83A6340A1D1F3AF4
SHA1:	B8BFE3B59F0DC0D7841D17F4352AC2CE0FEB2238
SHA-256:	0734468737B7EAF71A997B518A6B70A4EC17D136F41BF3BB562429BBEA1DE8CB
SHA-512:	6D15096F055D0CB7FC72F655A5EF59BE0821EA4A507FF1E6E55E6FA72F4E5490DADF53DC8201B28656EF613413FF07460CEB9F50BA67029443C2256F8E251344
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/avatar.png
Preview:	.PNG........IHDR................z....sRGB...,.....pHYs.................IDATx..9s[........qC.,E\Cq.Y.U^G..j.Xm...k.....4....3)Q.....'..Z.A."H%...z.#!`....e....$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I.$I..(... Ik.!N..Q.>4...u.+..F.#..l.....[.$I.$I.P...A.d..8}P....q.\}RU~..u..M......g.k.Bn$=W..Q...o.7...o......$I.$I......q?N......RM..........O.c..k..k.Z......j..vg.?...'..<..FY.>c....>.:.>.. ..b../..o..x...Y.._,U.+.c..39^....N.$I.$.7^..`...3L..C........Y.4l..f@.(~.u\.....0......}W;...a.s.x.>..$I.$Ic...^.fH.......H.$I.$y......j..u~d.%I.$I..b._.5.B5.?.JR{\..'.(.!..]OnnB.........s.9...y..N..].%I.$I.Q.(..".J.T.]n2<fD.Zn..>2..m,..sk..y...<a.&..B.OI.$I..T..V....`.......x....K.G.\.6..$IXB..q......[...!....8..}..$I....E#.+.m..l.X.J..V.M.0d,g.X.:...+.)7..H.-... I.$I...T.~.rT{RM.C.I....5W].....&..z...{.z.E..0....v.A.m,C......9....rA....e.-WR_.(K..k.!....._.$I.........?...'q..!..

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	945
Entropy (8bit):	4.189407823881876
Encrypted:	false
SSDEEP:	24:1ECCUUD+HH+HJwY4Kp66rJIcpFHIdoFHIacpAPzHIayAPP:Q/6+PFd5H
MD5:	B0169C8E4A2B589E3C0D226AA86F67CB
SHA1:	B269DEB4E5E67D133ADF5CB00900B24CE4E14B04
SHA-256:	2702332E380A68612FD1005614E684C839421D7C317FAA466D903C6C13887103
SHA-512:	AA29A3B57106287920E4E589A1A4EECA7EFFACC4E30E488672A281F0F8B60F89CAED8DE4B97968EBE200E76FA6F2FCD1B4D82F71F90BA02DFB325A2F9C5574D3
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/manifest.json
Preview:	{.. "name": "release",.. "short_name": "release",.. "start_url": ".",.. "display": "standalone",.. "background_color": "#0175C2",.. "theme_color": "#0175C2",.. "description": "A new Flutter project.",.. "orientation": "portrait-primary",.. "prefer_related_applications": false,.. "icons": [.. {.. "src": "icons/Icon-192.png",.. "sizes": "192x192",.. "type": "image/png".. },.. {.. "src": "icons/Icon-512.png",.. "sizes": "512x512",.. "type": "image/png".. },.. {.. "src": "icons/Icon-maskable-192.png",.. "sizes": "192x192",.. "type": "image/png",.. "purpose": "maskable".. },.. {.. "src": "icons/Icon-maskable-512.png",.. "sizes": "512x512",.. "type": "image/png",.. "purpose": "maskable".. }.. ]..}..

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14026
Entropy (8bit):	7.918580075370981
Encrypted:	false
SSDEEP:	384:9G/VXkrnRCOZJbe2uBkSfQ4iQA0UfTaJULcEcNPZh3e//tz:9G/VUrRCOZJbe2um0xNlUqULcP130tz
MD5:	7A2DBFDEC08B3A38D668B605D78DF964
SHA1:	87DBA0BAA4BFFBB072A921C7C6A5199C26F83ABA
SHA-256:	C770CE547AF85DF31198C63F7EBA9CBA64FF3A48F8EB127D4EA12181453036C8
SHA-512:	BF80C0E4CE1F97A541F7F4411F994E3586517B301D564EB41CAFC285FCBFE325421C0A79C1C70B3DA122A6CDB52103F98D60B59217132E97FDB3374C2D0D7AC1
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/favicon.png
Preview:	.PNG........IHDR.............}......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD............5.IDATx...w.\u....>3....M...&.%...RT.C.H.D$ U"E..}..>..R.C.dI.........`.Q....J.&..-3s...c...d........Maw.:.k.s.1..m.z..j..j=..f...H.F...;.;.]U.R..J.,i.....\|.a.....YI...}(i..vIm]..5S..V......0i..VXR.........).f...eD...?.m.zEj0S..&.T/i...I...J.n.HZ$i...r.)..HzK...Z.2.V......1..a.H[.kK7ma.-.....4:..,5.U.^u..z.M.d....p[..(`....>.c...@.K..m%m#..tze...LzN..._.....'[;...0.j..\;...>.I...M.N^d]z!....w..L....eP.@..{.of.=M.Y..&}.;Ox...%.,........3j..h@...h....jWE./..m.n.. ..xRZ..&{.?...t.eH..0P..=..A..t..{+.n2mB0e..V..$..\zp.?...2(``..........&...q....$=b..3.}K...D.....;n.}.]..}.K.................e...0.O....LB.J..&;@R5.`#.......T..5...(`........W.G.t...RA....9..i.u.W..........4.,:J.#%.!..P.\.)..........F.mz..j..Ow....... ...zX...f...)..H@......X.A.E.z.........yp.b...b!...FY.0..gM....q]e...2..a0c..{.8@......5.ir.!.2.....5-Z..s..P.(.....a..d.Uu~&.P

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	670
Entropy (8bit):	4.8003189680086
Encrypted:	false
SSDEEP:	12:JIvfJJzP5lBDfSursyAJ7f5xKfRP8ff5xKkGrxf58VK9hh:JOfJJzPBfSYsys7f5Ap8ff5Olf5vhh
MD5:	5A32D4310A6F5D9A6B651E75BA0D7372
SHA1:	1EEA93FDD82FAD31CE32E9B9428E415DFC737DA3
SHA-256:	2CD9411B540E5C6E15AC65523A3601BEE668AECA9104E1DE136FC34B3A912771
SHA-512:	D3EB7CDFDBD802A8BE6D1C71574892DB9D7431C7054C0D9E02AC5CDC88C0D8D566FF144AC1B20B514F179549173432E5B54B812040D2C8BC6CB0702A815305BC
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/FontManifest.json
Preview:	[{"family":"MaterialIcons","fonts":[{"asset":"fonts/MaterialIcons-Regular.otf"}]},{"family":"packages/cupertino_icons/CupertinoIcons","fonts":[{"asset":"packages/cupertino_icons/assets/CupertinoIcons.ttf"}]},{"family":"packages/font_awesome_flutter/FontAwesomeBrands","fonts":[{"weight":400,"asset":"packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf"}]},{"family":"packages/font_awesome_flutter/FontAwesomeRegular","fonts":[{"weight":400,"asset":"packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf"}]},{"family":"packages/font_awesome_flutter/FontAwesomeSolid","fonts":[{"weight":900,"asset":"packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf"}]}]

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1885
Entropy (8bit):	4.926403956426229
Encrypted:	false
SSDEEP:	48:tWEO0TX+15UTpXppRIJ670pvC/4UxARm6h2OX+sK:EEO++oaQ7Lcj2qA
MD5:	0A13749DFA99C24F040C7F444DF96DFD
SHA1:	FB1903DC2695265F109D9DD3EB7104D6089920C6
SHA-256:	DDF84E67A663A8B0254842E41C87B7AEF6D10D118AA9E4AD61771450AD4A6042
SHA-512:	160411D9DEE70336C46046B6FF5D829B6C6A98F3CD7139C8494340D7DA1DAD3FE9112248EB4C853C4D29DB29CD60AD43041A30163C7949E12A39D0624A2384E5
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html
Preview:	<!DOCTYPE html>..<html>..<head>.. .. If you are serving your web app in a path other than the root, change the.. href value below to reflect the base path you are serving from..... The path provided below has to start and end with a slash "/" in order for.. it to work correctly..... For more details:.. * https://developer.mozilla.org/en-US/docs/Web/HTML/Element/base.... This is a placeholder for base href that will be replaced by the value of.. the `--base-href` argument provided to `flutter build`... -->.. <base href="/">.... <meta charset="UTF-8">.. <meta content="IE=Edge" http-equiv="X-UA-Compatible">.. <meta name="description" content="A new Flutter project.">.... iOS meta tags & icons -->.. <meta name="apple-mobile-web-app-capable" content="yes">.. <meta name="apple-mobile-web-app-status-bar-style" content="black">.. <meta name="apple-mobile-web-app-title" content="release">.. <link rel="apple-touch-icon" href="icons/Icon-192.png">....

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	5292
Entropy (8bit):	7.924675787053952
Encrypted:	false
SSDEEP:	96:yA8+THu155ottxwCxV36m/l0yx9bTrWOfu3UMGp37mixLz5imG6pUlU:yAfTO155itxwcV36ENxFuOWEPhLNzUWv
MD5:	AC9A721A12BBC803B44F645561ECB1E1
SHA1:	293B2825C89D2ABD4B17E2F5AC30C30F5BA3724F
SHA-256:	3DCE99077602F70421C1C6B2A240BC9B83D64D86681D45F2154143310C980BE3
SHA-512:	7DE1298A7B5CF2C72D17ACECC1F29834C272B3F145CC41D8A7DCAA19CC2A56F7BE04678D022EA15B1BCABD00FB795FD3489B7749C295F168532E8310944D8CE8
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/icons/Icon-192.png
Preview:	.PNG........IHDR...............P....zTXtRaw profile type exif..x..[v.=....Y.I....^.....C.#..?..e$[-Q.5P(.(.......#I..e....y..Z...x\.O.....W\|~.._D...<>.}..........=S..D.9...[9.m...I\|....k...^n..........ce... ..j......W.....(..$.s.....{..`;..vyo....\|.....vy....(...........9.qw=.,U.}S?n.zG.)..Vx*...z=...-N<....9]h!b..RX....u..-..w..1...j....y9#.3...d9<.e.5.9>...u.....W.g.L.....}..7..D..tC..i+....l.<g...!..6.}..{...q...\|..r....#.7l..g._...Gh.].....3....\|..C.^c...c.?..GIq...s\..\|#RpN..6c4\}c..f..BC.(.i.qVJ..h.`.g...K.\s.HI%.R..Gu.M...j..JM5.R...jo....[i.Zm.....;.;=z.q.H#.2t..F..g..g.:.l...d...,u......(...[w.m....t.)GO=....n...Z...{-.^3.....y.f..S...l>.c1.<......g....y.\|.[$(r.k!.sV0....C.'<}.......%.._y.....s..s?.....~e...dQh6.r 6:.X......;...D..4f.r.....Q.X...;nux......R.h...QgL@.8..`..O[j...}..yDgKC.o..j......\.:........9.......f..Rj..........Y..q@.m$..lb..<.>...5.....uYU.H'./..k.{..M..i{....{....)....:.hb..G...0.,.GR...,..+.h..7G.#.V..EW.3_

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	151480
Entropy (8bit):	6.744387466364086
Encrypted:	false
SSDEEP:	3072:yF1ysTnqHvobJixBp0TKf3H5z8MkKURj7i8w+fGOW58LHGR5QE:yDysUnQ3tlHGb
MD5:	8360FDD61FD8609EF10E61C40C0ECA11
SHA1:	C80E173F72D4F31827D75C4EC934EDE660D35B16
SHA-256:	A24A61E9A408F85504DCDCD11EDC4995ADCEB4AB585C0011F39CFBE193248B71
SHA-512:	DAA3C81E152628C226FE0F8AD300BB9A736F0C33072D05EDE308F6B20CC47BE1B7596A17A452B31D04103252850A94B57736D56278C7E20B074BB038EE4CD833
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/a/a24a61e9a408f85504dcdcd11edc4995adceb4ab585c0011f39cfbe193248b71.ttf
Preview:	...........PGDEF.......x...@GPOS-...........GSUB.......%(OS/2.z....X...`cmap5.;.........glyf...........0head..$n.......6hhea.0.........$hmtxh..,........loca./l.........maxp...%...8... name$bBr........postl _....... ...........X_.<..................6........C.....................d.....8...............................t.............d.........b.X.......X...K...X...^.2.L............................ITFO...........d.o.s ............. ...................C.A.s.A.C...C...9...Y...........................x.A.x.A.....F.A.x.A.5...5...5.%...9...............A...A...+...!.6.a.5.S...}.7...........................5...T...^...9...........9.......p.........@.c.....F................?.?.6...................H.K.....9...J.......F.?.=...............T...9.......................................5...$...4...............9.......A.........@.b.....F.....f.............?.................t...#.K.........J.......$.?.................$.............}...4.M.@...(...z...5.j.$.>.,.W.-.../...O...E.$.#...:.r.A..H...H.@..

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	OpenType font data
Category:	downloaded
Size (bytes):	7896
Entropy (8bit):	6.511191346161419
Encrypted:	false
SSDEEP:	192:p7obS5W1zubxNzYvbdw5BA5mGmP8QmRhuleN1rRraO:FobkW1zubnysB9zP0aleNqO
MD5:	0F341CB48F96334DFC114136D18A1DB6
SHA1:	091CFB252BEBB642FEF1F98BB2E912B9293E407C
SHA-256:	2418EC80C4672B4CDB3AF33E6AC4314A559D88000636BE249B3CEF5A4F37D1CD
SHA-512:	5C2CBC19CA17877A68DA76169B6BB28E4069C7DA131A0273B599D2FC69F79BD790C9528A3A55BF783BFF06DD5CA25358FD79F3EECA9DCF78BB85D28DD0DE3E6E
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/fonts/MaterialIcons-Regular.otf
Preview:	OTTO........CFF .......D....OS/2#.Y.... ...`cmap.=.A........head...,.......6hhea...........$hmtx............maxp.BP.........name..4........vpost........... ..P..B.................................................................................p_.<..........=s......>[...............................................................................????...:........................... ...............................................................................................................................................Z.........^...................................6.^..........4.........4............4.2.0.2.2.-.0.9.-.0.6.T.1.5.:.0.0.:.3.8...8.1.9.9.0.3.M.a.t.e.r.i.a.l.I.c.o.n.s.-.R.e.g.u.l.a.r.M.a.t.e.r.i.a.l. .I.c.o.n.s. .:. .2.0.2.2.-.0.9.-.0.7.R.e.g.u.l.a.r.M.a.t.e.r.i.a.l. .I.c.o.n.s.C.o.p.y.r.i.g.h.t. .2.0.1.9. .G.o.o.g.l.e. .L.L.C... .A.l.l. .R.i.g.h.t.s. .R.e.s.e.r.v.e.d...............................................<...:...:....................................................

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 12 tables, 1st "OS/2", 7 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	1236
Entropy (8bit):	4.975108963991262
Encrypted:	false
SSDEEP:	24:WyvIz0JJWqzVBksc1MNqs3RD0rm+CU3BJCy2yMg3DojuwlzhI:RvI+Wqjksc+YshD2mlWTTJBDojuw/I
MD5:	57D849D738900CFD590E9ADC7E208250
SHA1:	41985B8972E5289666D6054B2242F562F1D6E11A
SHA-256:	7FAEBFC34FCF9AEED5ED14C8D859995DA91D26EE4D515A5D5A632A14CC6B3D98
SHA-512:	58AC1DF05CF595F495B2F0E06DBB5CC4AB41C28B0DD36977EDBDFA6875CB273FA55E40A227954F82CBAFFD27E64030EA3D5235AC80E3A667BC751FA5044644A6
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/cupertino_icons/assets/CupertinoIcons.ttf
Preview:	...........@OS/2...L.......`cmap..........Lcvt ...D........gasp............glyf.JB....p...dhead..*....\...6hhea.......8...$hmtx............loca............maxp._.0....... name.4.p...@...0post........... ...D.............C.f.................................................@...............................................2....................................}._.<...........t.......t............................................8...........n...........n...........3.0._.......................e.....M.e.............................................n.......2...2............... .......Z.........6.........................v.........V. ..................... ...............V.e.r.s.i.o.n. .0.0.1...0.0.0. .F.o.n.t.F.o.r.g.e. .2...0. .:. .C.u.p.e.r.t.i.n.o.I.c.o.n.s. .:. .1.6.-.1.2.-.2.0.2.0.R.e.g.u.l.a.r.C.u.p.e.r.t.i.n.o.I.c.o.n.s.C.o.p.y.r.i.g.h.t. .(.c.). .2.0.2.0.,. .X.i.a.o. .Y.u.............-..."&4632....'2?...32654/.7654&#"..'&#"..........Z..ZY.....@@.....@@.....A@.....@@.......YZ.\|.AA.....@@...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409
Category:	dropped
Size (bytes):	154584
Entropy (8bit):	6.752057811562586
Encrypted:	false
SSDEEP:	1536:UCUvT+GNqUESJ/8w/lF703hmTWH6lrGcRAbf9EpthYp0wf0IDh1jlGPkz2zFGWOD:UCfGfJ/AaHjxlzOkTgb3FiA98GEk
MD5:	9BA5C294B162C2688A1541EA64F36FB3
SHA1:	257C4AFC8725D026F06E0208E2AE7BFE079F1452
SHA-256:	705290B12F58C6D70AAFCAAF461DBC3D2F7F19D0F4362AF1843B107D95D4960A
SHA-512:	6C146F6A4248F2AA595CB51558C25289A89124308A5BBF85F60048D07E056636E46CCC7A507E16F4FD558814E89DF0B04B139989AC3310A0665CC23BBDB5C0AF
Malicious:	false
Reputation:	low
Preview:	...........PGDEF......"....@GPOS.G!...".....GSUBE..Z..6...%&OS/2..w....X...`cmap5.;.........glyfI.C........6head..$a.......6hhea.u.........$hmtx2...........loca..9.........maxp...,...8... name%.Cs........postl _....... ...........\|l_.<..................6........).....................d.....n...............................v.............d.........S.........X...K...X...^.2.H............................ITFO...........d.o.s ........$..... ...................<.J.Z.J.D...D...?...a...........................a.J.a.J.....=.J.a.J.&...&...&.C...R...............X...X...2...,.&.X.&.O.....&...........................1...H...Q...*...........>.......X.........O.a.....Q...................L.......................Z.....3...J.......!.H.&...............H...>.......................................1..."...9...............>.......4.........O.a.....Q.....n.............L.......................Z.........J.........H.................".........4.......;.@.L...F...a.t.>.@.&.?.3.M.1.u.(.t.I.{.I.".!.w.<.v.I. .O...Q....

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 10 tables, 1st "OS/2", 7 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	357256
Entropy (8bit):	5.869606381061728
Encrypted:	false
SSDEEP:	3072:TsNV7I8srinOSBOW5pdA7f6CrtN9KePRbj48qLxns0tlzMTKJM/SmNp:cO8vOSBhdAr6CB1BEbns2zUKJKNp
MD5:	658B490C9DA97710B01BD0F8825FCE94
SHA1:	0C454D0B88EA5736402CDD5A19AE767765DCBA6D
SHA-256:	2395721EC2A7BA59D9EA05E0567339CA73D280E8768FB3F7ECEB6FD2C1824913
SHA-512:	D2ADB3153B734AE67F8800F4B5A9565F9672709EC5E4AB584EC8EC5480DB7707D2AA1A33E2D00630288A9388EB29EBA0FF15EC422BE8875400AFB56D8D166FD8
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf
Preview:	........... OS/2aK[K...H...`cmap......@...4glyf^.....<...6.head%'.........6hhea.;.........$hmtx...N...t....loca......'0....maxp..."....... name.A7.........post........... .....o. ...........................................................................................o............_.<..........Bc......Bc................................L.f...G.L.f....................................AWSM...!...........@.........9..... .......Z.........4...........2.......................>...........2...........d.,.........,...F.o.n.t.A.w.e.s.o.m.e.6.F.r.e.e.-.S.o.l.i.d.V.e.r.s.i.o.n. .7.7.2...0.0.3.9.0.6.2.5. .(.F.o.n.t. .A.w.e.s.o.m.e. .v.e.r.s.i.o.n.:. .6...4...0.).F.o.n.t. .A.w.e.s.o.m.e. .6. .F.r.e.e. .S.o.l.i.d.-.6...4...0.S.o.l.i.d.F.o.n.t. .A.w.e.s.o.m.e. .6. .F.r.e.e. .S.o.l.i.d.C.o.p.y.r.i.g.h.t. .(.c.). .F.o.n.t. .A.w.e.s.o.m.e....................... ...........!.%.+.9.Z.......A.v..................1.<.@.R.c.i.m.{...........................".-.=.....................<.E.H.l.s.w

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebAssembly (wasm) binary module version 0x1 (MVP)
Category:	downloaded
Size (bytes):	5357872
Entropy (8bit):	5.595454578704093
Encrypted:	false
SSDEEP:	24576:oBy5KQcdsyYHGKnGtLQD0L2JnCIM48g939mOmHhifZAn7Yo7hhNB8tC2mvxy5x9G:Wt84CnNtO5/IA03qv
MD5:	FC18C3010856029414B70CAE1AFC5CD9
SHA1:	98A8566757D4776826962E54DC1AA9784C4A8965
SHA-256:	C163375D22119DDB60045F34F2C838B42550A9E9FFCCD52511E892B2E1BCBA53
SHA-512:	882BBAE94C9D931FA4ED2FD2050D78BE89ED817D5308CABC5F70164144F225BEB2CB01BA78D07563A9F25E4B475073A6B478155C60D015AF965198366B6A714C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/flutter-canvaskit/45f6e009110df4f34ec2cf99f63cf73b71b7a420/chromium/canvaskit.wasm
Preview:	.asm.........`...`....`....`.....`.....`......`......`...}}}}.`.......`.......`........`........`.........`.........`...........`..........`..........`...........`...`............`..}.`....}}..`.\|\|\|.\|`...\|.`...}\|.`...}}.`...}.`..}}.`...}}...`..}}..`...}`...}}}}}}..`...\|`..`...}}..`....}.`....}}}}..`..}}...`..~.`............`..}...`..\|\|..`.............`....}}}}}}..`.\|.\|`.}.}`..~..`..}}.}`....}`........~`..}}}}.`.\|\|..`.............`....~`...}}}}..`..}}..`..\|...`.\|\|.\|`...~`......~`...\|\|\|...`.}}.}`..}..`.}}..`..~~~~.`..}.}`....}..`..}...`...}..`...}}}.`.................`...............`..............`......}}...`......~.`..}}}}..`..}}}.`..}}}}}}.`...}..`..}..`.}..`..~..~`..}}}..`.....}}..`.......}....`.....~..`..............`.....}`....~.`...............`..\|\|\|.\|`..}}...`..........}..`....}....`.....}}...`....}}.`..}}}..}}.`...~.`..}}}}}.`...}}...`...~...`.....\|`.}}}}.`..\|\|...`........}`..~~..`.~...`.\|\|\|...`....\|`..\|..`..}....`.....}....`...\|...`...}...`...\|\|.`..~..`...}...`...\|..`.....\|..`

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	763
Entropy (8bit):	4.73890517681664
Encrypted:	false
SSDEEP:	12:f8+MHx14yOu/hz/zHoaNOU4/c/UddFB6MrYJmV4Mr2iWxmrE2AptAv9VVZ8BHA:k+mx14wxHoaNO38mV5r2ZmrE2sAv9OBg
MD5:	3849201717DD51D96B654574CCED466A
SHA1:	E24F74FECAB382E723EDA00292AA9EC36DC35EC0
SHA-256:	842748142398582957A7231B1D55996C3036ECB3182289C2C0D48A387BB4DBCE
SHA-512:	3153B3DC36715F41F7181E6F332EB4E7CBC60348C7025BE9AC5853FD175E8C72C941CA093D222B9F5AE8D56CDE0A913186FAAEB186E30258AF71F0492EB5DF89
Malicious:	false
Reputation:	low
URL:	https://ipapi.co/json
Preview:	{. "ip": "8.46.123.33",. "network": "8.46.123.0/24",. "version": "IPv4",. "city": "New York City",. "region": "New York",. "region_code": "NY",. "country": "US",. "country_name": "United States",. "country_code": "US",. "country_code_iso3": "USA",. "country_capital": "Washington",. "country_tld": ".us",. "continent_code": "NA",. "in_eu": false,. "postal": "10069",. "latitude": 40.778,. "longitude": -73.9884,. "timezone": "America/New_York",. "utc_offset": "-0400",. "country_calling_code": "+1",. "currency": "USD",. "currency_name": "Dollar",. "languages": "en-US,es-US,haw,fr",. "country_area": 9629091.0,. "country_population": 327167434,. "asn": "AS3356",. "org": "LEVEL3".}

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 236x236, segment length 16, progressive, precision 8, 236x236, components 3
Category:	downloaded
Size (bytes):	3053
Entropy (8bit):	7.348809796701033
Encrypted:	false
SSDEEP:	48:YiWgxmNoJ+ulZf7F2lkLTODyiSRl+Yx9nMXhYBEpZqVvMHs9L8gNcKUNoe5:bxOoJ+Wf7F2lqjBRlhxqXmipZqyMfNcb
MD5:	E165AF495D51EF5B46CAD3D602A2A5F8
SHA1:	E3D73BF45F360750678F666B4FA51553AAD7090D
SHA-256:	171F1B3AC7B11EF605B96F91537ED2CC32AB21D7233733114A923D21D552B021
SHA-512:	5C9BE518DDCA13FAFFE50B9DF8FE632C88C226ACAABC8721FB8D608E256AD6B6604635EE60B2D55E2D61C715DAAFAF9E0EA0FD5EFA12208C3BDC2192E7AC5F22
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/fbv2.jpg
Preview:	......JFIF.............C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."..............................................................................R..,.?.........$..w......................_.L.#../.sU:_.y..Sg.4........$ux;...M...l..=........~...._........Dgk....Y..........I.{..n.3.......D......}..J.U...c..`..qX..g.-)...../.........e......Vs{..~`..........^....3...G(Y..........3^...1...{[..t2.9.G..@......&.&..9...+.z.G(Y........M.M..Lsu..V,...P. ................8.Y....d@.......7.7.u1...qX..:9B...Q..WL.E.....7.7.u1...qX..:9B.....-....'........................ 4@.5.0..A"$`..........wr..!LS.J...H.H..!n...C.:R...J..1N8 G......S@.d.LX4..J.Tc.j L%j.,%.r...F4..w....(.CC).6(rLD.....^H.Z.R.8...D....YQO.......v./eeC......(..Dp.!.....tn5Z..Dp.#.Q...LF.\.e@/.:.r}. ...\.eD/.z.r}.b.8....1..6..0N6?.0....cc.lNs...{+..^..;a......e.s..{+..^..;a......e.s..{+*..K.y.U.e.s.....UI.R.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebAssembly (wasm) binary module version 0x1 (MVP)
Category:	dropped
Size (bytes):	5357872
Entropy (8bit):	5.595454578704093
Encrypted:	false
SSDEEP:	24576:oBy5KQcdsyYHGKnGtLQD0L2JnCIM48g939mOmHhifZAn7Yo7hhNB8tC2mvxy5x9G:Wt84CnNtO5/IA03qv
MD5:	FC18C3010856029414B70CAE1AFC5CD9
SHA1:	98A8566757D4776826962E54DC1AA9784C4A8965
SHA-256:	C163375D22119DDB60045F34F2C838B42550A9E9FFCCD52511E892B2E1BCBA53
SHA-512:	882BBAE94C9D931FA4ED2FD2050D78BE89ED817D5308CABC5F70164144F225BEB2CB01BA78D07563A9F25E4B475073A6B478155C60D015AF965198366B6A714C
Malicious:	false
Reputation:	low
Preview:	.asm.........`...`....`....`.....`.....`......`......`...}}}}.`.......`.......`........`........`.........`.........`...........`..........`..........`...........`...`............`..}.`....}}..`.\|\|\|.\|`...\|.`...}\|.`...}}.`...}.`..}}.`...}}...`..}}..`...}`...}}}}}}..`...\|`..`...}}..`....}.`....}}}}..`..}}...`..~.`............`..}...`..\|\|..`.............`....}}}}}}..`.\|.\|`.}.}`..~..`..}}.}`....}`........~`..}}}}.`.\|\|..`.............`....~`...}}}}..`..}}..`..\|...`.\|\|.\|`...~`......~`...\|\|\|...`.}}.}`..}..`.}}..`..~~~~.`..}.}`....}..`..}...`...}..`...}}}.`.................`...............`..............`......}}...`......~.`..}}}}..`..}}}.`..}}}}}}.`...}..`..}..`.}..`..~..~`..}}}..`.....}}..`.......}....`.....~..`..............`.....}`....~.`...............`..\|\|\|.\|`..}}...`..........}..`....}....`.....}}...`....}}.`..}}}..}}.`...~.`..}}}}}.`...}}...`...~...`.....\|`.}}}}.`..\|\|...`........}`..~~..`.~...`.\|\|\|...`....\|`..\|..`..}....`.....}....`...\|...`...}...`...\|\|.`..~..`...}...`...\|..`.....\|..`

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1920x175, components 3
Category:	downloaded
Size (bytes):	80630
Entropy (8bit):	7.927891543874801
Encrypted:	false
SSDEEP:	1536:HZ3ox6rWCQwqxWtu3PEUvOdISL4u+bLQYsieGGYeDasF:HZTqCjs4u/hOdxBIj5CF
MD5:	49A366B72644F04EA8EFCCF9550FB0A5
SHA1:	54492AA337FC8EE34297A04FD789D202FBA78D58
SHA-256:	289D99B21FAE145C868238C0C499DCF8E84BEA445B63E47E3406ACFE98E20A34
SHA-512:	4960EF185ED8BF68C72F1F6BC97D1EA83347174BF3823243CEF738BAC33069E302FD1B4850A89F554D08544F4ED206713A3B6CA8A4B2F2E6F4B2374AFC49D71F
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/bg.jpg
Preview:	.....Phttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""/> </rdf:RDF> </x:xmpmeta>

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	5292
Entropy (8bit):	7.924675787053952
Encrypted:	false
SSDEEP:	96:yA8+THu155ottxwCxV36m/l0yx9bTrWOfu3UMGp37mixLz5imG6pUlU:yAfTO155itxwcV36ENxFuOWEPhLNzUWv
MD5:	AC9A721A12BBC803B44F645561ECB1E1
SHA1:	293B2825C89D2ABD4B17E2F5AC30C30F5BA3724F
SHA-256:	3DCE99077602F70421C1C6B2A240BC9B83D64D86681D45F2154143310C980BE3
SHA-512:	7DE1298A7B5CF2C72D17ACECC1F29834C272B3F145CC41D8A7DCAA19CC2A56F7BE04678D022EA15B1BCABD00FB795FD3489B7749C295F168532E8310944D8CE8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............P....zTXtRaw profile type exif..x..[v.=....Y.I....^.....C.#..?..e$[-Q.5P(.(.......#I..e....y..Z...x\.O.....W\|~.._D...<>.}..........=S..D.9...[9.m...I\|....k...^n..........ce... ..j......W.....(..$.s.....{..`;..vyo....\|.....vy....(...........9.qw=.,U.}S?n.zG.)..Vx*...z=...-N<....9]h!b..RX....u..-..w..1...j....y9#.3...d9<.e.5.9>...u.....W.g.L.....}..7..D..tC..i+....l.<g...!..6.}..{...q...\|..r....#.7l..g._...Gh.].....3....\|..C.^c...c.?..GIq...s\..\|#RpN..6c4\}c..f..BC.(.i.qVJ..h.`.g...K.\s.HI%.R..Gu.M...j..JM5.R...jo....[i.Zm.....;.;=z.q.H#.2t..F..g..g.:.l...d...,u......(...[w.m....t.)GO=....n...Z...{-.^3.....y.f..S...l>.c1.<......g....y.\|.[$(r.k!.sV0....C.'<}.......%.._y.....s..s?.....~e...dQh6.r 6:.X......;...D..4f.r.....Q.X...;nux......R.h...QgL@.8..`..O[j...}..yDgKC.o..j......\.:........9.......f..Rj..........Y..q@.m$..lb..<.>...5.....uYU.H'./..k.{..M..i{....{....)....:.hb..G...0.,.GR...,..+.h..7G.#.V..EW.3_

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 10 tables, 1st "OS/2", 7 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	169196
Entropy (8bit):	5.908420789663514
Encrypted:	false
SSDEEP:	3072:8aJWBEVD6uOsKWY51/OjzxzG2/7gX7CEnNNZJVTeQ+6:8aJWgD6uOsKWY5Nejq7CE9JVT66
MD5:	D7791EF376C159F302B8AD90A748D2AB
SHA1:	8484EBFC7EFECDB9ABE12F03F94014A32B6781CC
SHA-256:	E68CB27BED42FE434BE64D0D6296D8DC5B81686A725FE31D4293509F8598636E
SHA-512:	7C62E20706B0156D3797647B71D5C4AB9621D62871666E2F3FD9D7E11979F90D76F729F6A88A9EE304D316AF1C2B75C35DCE0A5548350B70FD9F45E4A9969588
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf
Preview:	........... OS/2?<WS...H...`cmap.3.....\...Tglyf..:....T..}.head%'.........6hhea.=.........$hmtx...6.......Ploca..3........Tmaxp...:....... name".;.........post........... .......8.'...................................................................................................Y._.<..........Bc......Bc................................L.f...G.L.f....................................AWSM...............@.........9..... .......Z.........4.&.........:.......................F...........:...........d.4.........4...F.o.n.t.A.w.e.s.o.m.e.6.B.r.a.n.d.s.-.R.e.g.u.l.a.r.V.e.r.s.i.o.n. .7.7.2...0.0.3.9.0.6.2.5. .(.F.o.n.t. .A.w.e.s.o.m.e. .v.e.r.s.i.o.n.:. .6...4...0.).F.o.n.t. .A.w.e.s.o.m.e. .6. .B.r.a.n.d.s. .R.e.g.u.l.a.r.-.6...4...0.R.e.g.u.l.a.r.F.o.n.t. .A.w.e.s.o.m.e. .6. .B.r.a.n.d.s. .R.e.g.u.l.a.r.C.o.p.y.r.i.g.h.t. .(.c.). .F.o.n.t. .A.w.e.s.o.m.e.......................@...L.....L.........I.R.W.......@.`.....:.J....1.p................6.<.Z.i.n.q.t.~....................

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 10 tables, 1st "OS/2", 7 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	49012
Entropy (8bit):	5.923566408255839
Encrypted:	false
SSDEEP:	768:xunGfI1bONxcPY3l/b6k5osaUet3ssqWY7/GF3N:xunGBb6k5osgssqtA9
MD5:	5070443340D1D8CCEB516D02C3D6DEE7
SHA1:	2EDCBF8F12C01EF48617B87FD497C07FBE85087C
SHA-256:	6B04AD8CD0E6BE09EB285526CC0E4F66F84AE231D7EEFFA4569F65B9FC3D511D
SHA-512:	9E8DE5B437DD86834902F4151300E3319450C81E16BD6513098F2DAD7E02D37DA43930CBD9FACB68CCE21F68F75AF9E2B5BB54472AC13F729974967FD1C577C9
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf
Preview:	........... OS/2@.T#...H...`cmap..j....,....glyf.k.....H...head%'.........6hhea.B.........$hmtx;...........loca..[a.......Jmaxp...%....... name!'9.........post........... .......#.7..................................................................................................~.O_.<..........Bc......Bc................................L.f...G.L.f....................................AWSM..............@.........9..... .......T.............#.....v...s./...X.....`...j...H.........@...G.....5...9.....1...&...Z.b....._...m...B.....+...5.......a...h...t.. E .!Q!."0".#:#x$ $.%2%.&Q&.(.(Q(.(.)P)..+Q+.-.../Z/.0J0.1.1{1.2.2.2.3~4]4.5L5.6a6.7Q7.7.8.8.9F9.:+:.;.;.;.<7<.=#=.>->.?&?.@:@[A.A.BpC C.D.EKE.F.GaH`I.I.J.KrL.MZN N.O.P.Q.R.SrTFT.U.V.V.W.X,Y.YVY.Z........Z.........4...........6.......................B...........6...........d.0.........0...F.o.n.t.A.w.e.s.o.m.e.6.F.r.e.e.-.R.e.g.u.l.a.r.V.e.r.s.i.o.n. .7.7.2...0.0.3.9.0.6.2.5. .(.F.o.n.t. .A.w.e.s.o.m.e. .v.e.r.s.i.o.n.:. .6...4...0.).F.o.n

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	9161
Entropy (8bit):	5.222122020719994
Encrypted:	false
SSDEEP:	192:3uoAphcVdVqWxIKmjZUJYsZcRAzcMDmPMY/j3WR:3CXcRqWxvFdDmko3q
MD5:	DE0B30E26243DA6A9CB202CD20B4E88F
SHA1:	F2F8CF8FFCA9E73D91E354AE0069A41A3C8C433D
SHA-256:	1583EBADF83E01BB081A0ABCDE021B998B64948952FD541AEC38C4BB6ED73318
SHA-512:	73B7E35826F25881A809729D52872B07B2542863A89EA34797029841024B7DC8EADD35208B4CAD195FFD54AA572257822EF33CD4F8317B2EE3B9A9A2675EE703
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464
Preview:	'use strict';..const MANIFEST = 'flutter-app-manifest';..const TEMP = 'flutter-temp-cache';..const CACHE_NAME = 'flutter-app-cache';....const RESOURCES = {"assets/AssetManifest.bin": "8b1cf21a141e282cc9fcc19ad6b2028b",."assets/AssetManifest.json": "ffcce918f60617fed6fdd5c787356cc5",."assets/assets/images/avatar.png": "02fb04256d936e0d83a6340a1d1f3af4",."assets/assets/images/banner.png": "2db05c985875dddc242f32ece8743a2f",."assets/assets/images/bg.jpg": "49a366b72644f04ea8efccf9550fb0a5",."assets/assets/images/captcha.png": "763a3035391b1865c821d24a2faf9cd7",."assets/assets/images/fb.png": "a50dbccd4ee805a91a19f7aa07988833",."assets/assets/images/fbv2.jpg": "e165af495d51ef5b46cad3d602a2a5f8",."assets/assets/images/hcaptcha2.png": "0cb9e79e34bc8124b7926395dc9211b2",."assets/assets/images/id.png": "6c87d385e7d74538f804ad79ac4a68ed",."assets/assets/images/logo.png": "95c4c698dfe8ab6f6751af6a7a6ce4df",."assets/assets/images/meta.png": "82f724aa56db0da424f206b9991fd62e",."assets/assets/image

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409
Category:	dropped
Size (bytes):	150252
Entropy (8bit):	6.73158535690119
Encrypted:	false
SSDEEP:	1536:knW9ORN5pJR1JOWgmd5Fju/qIzYq+qJi5ExrwpcWS7J5ffnVxjSZUNu1s6Mup2iX:VgnJ4Bmd5tIzYAl7ffVaG6ox2q8zrgk
MD5:	C67DB2AD4A5CA29B517DA8EABAFD2459
SHA1:	C54A0034E60D6445CAEE8533684B3CEA13420C81
SHA-256:	9ECFD020E9CC0B676025DF8390C0DC8CC2062523540887DD04BEC0EF4D5A449C
SHA-512:	FEA51DD4102876C99682DC21B6FDD27EBD74BBDB5D23814E34CE278ECCA784DFBFEB2679D1BD5540AA6AF2D362F13F943FAAA24B81CD0544399B250ABF805E3C
Malicious:	false
Reputation:	low
Preview:	...........PGDEF...........@GPOS............GSUBa....%...%OS/2.$z....X...`cmap5.;.........glyf...c.......zhead.Q$q.......6hhea...].......$hmtx.j..........loca.r..........maxp...%...8... name"g@....(....postl _....... ...........u._.<..................6........T.....................d.....................................t.............d.........i.........X...K...X...^.2.N............................ITFO...........d.o.s .............. ...................G.<...<.B...B...5...U.............................<...<.....K.<...<.?...?...?.....)...............3...3...'.....@.g.?.T...i.@.........../...............8...\...e...C...........6.................7.d.....?.7...............U.7.K...................X.C.....<...I.......].:.K...............\...6......................."...............8...&...1...............6.......H.........7.c.....?.....a.............7.................g...).C.........I......./.:.!..........."...&.............i...0.U.9...........-.x...;.%.]....1...T.}.>.......6.g.4.0.D...B.X..

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1167
Entropy (8bit):	4.53421093869775
Encrypted:	false
SSDEEP:	24:Y1btUtKJBFDce37SKrtVdXn9Xr5GvakWAG0ZbGKGqh9hT:Y1btUtKJBFDB7SKrtVdXn9Xr5GvTWq
MD5:	FFCCE918F60617FED6FDD5C787356CC5
SHA1:	846A32513232598402EB182379F105EADECB2BE3
SHA-256:	8C0D3BECCAC7837C17CE065F6F02B169D4E865ADA6D59E0DB8C0CF1B25B16AE7
SHA-512:	20A52678CEFFD9247A6F46F91F63D0A8E93BDC8687F4A549FC4F5D7D48E2CF2F4005AADEB4F44A076846287B44AFF4036093C9A53BA0271EEF4036D42801F7F5
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.json
Preview:	{"assets/images/avatar.png":["assets/images/avatar.png"],"assets/images/banner.png":["assets/images/banner.png"],"assets/images/bg.jpg":["assets/images/bg.jpg"],"assets/images/captcha.png":["assets/images/captcha.png"],"assets/images/fb.png":["assets/images/fb.png"],"assets/images/fbv2.jpg":["assets/images/fbv2.jpg"],"assets/images/hcaptcha2.png":["assets/images/hcaptcha2.png"],"assets/images/id.png":["assets/images/id.png"],"assets/images/logo.png":["assets/images/logo.png"],"assets/images/meta.png":["assets/images/meta.png"],"assets/images/metav2.png":["assets/images/metav2.png"],"assets/images/ref.png":["assets/images/ref.png"],"assets/images/steps.png":["assets/images/steps.png"],"packages/cupertino_icons/assets/CupertinoIcons.ttf":["packages/cupertino_icons/assets/CupertinoIcons.ttf"],"packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf":["packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf"],"packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf":["packages/font_

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1287
Entropy (8bit):	4.60020471905728
Encrypted:	false
SSDEEP:	24:HbzDSCmGP9/FzUbp8UJllX9Qze9N1dMhQhF:fDSCm2/FzUt8UJllX9Qze9x
MD5:	8B1CF21A141E282CC9FCC19AD6B2028B
SHA1:	C7EFBC9D05F7E18D34D946A736E5487E1E1C550E
SHA-256:	65597AF2671C420356B08D5CDBBEFB567B1BDA6B6613B32908C970B9342631FB
SHA-512:	2A267EF1C081BCA0715952236225C8663BD08BAB8649DA1D8697D925BA675356ECB41FC5EDAD73261CEA8A3EC75B763FA77B47B625047EF483D0B02BF9223A02
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/AssetManifest.bin
Preview:	....assets/images/avatar.png......asset..assets/images/avatar.png..assets/images/banner.png......asset..assets/images/banner.png..assets/images/bg.jpg......asset..assets/images/bg.jpg..assets/images/captcha.png......asset..assets/images/captcha.png..assets/images/fb.png......asset..assets/images/fb.png..assets/images/fbv2.jpg......asset..assets/images/fbv2.jpg..assets/images/hcaptcha2.png......asset..assets/images/hcaptcha2.png..assets/images/id.png......asset..assets/images/id.png..assets/images/logo.png......asset..assets/images/logo.png..assets/images/meta.png......asset..assets/images/meta.png..assets/images/metav2.png......asset..assets/images/metav2.png..assets/images/ref.png......asset..assets/images/ref.png..assets/images/steps.png......asset..assets/images/steps.png.2packages/cupertino_icons/assets/CupertinoIcons.ttf......asset.2packages/cupertino_icons/assets/CupertinoIcons.ttf.9packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf......asset.9packages/font_awesome_flutte

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "GDEF", 13 names, Microsoft, language 0x409, Copyright 2011 Google Inc. All Rights Reserved.RobotoRegularVersion 2.137; 2017Roboto-RegularRob
Category:	downloaded
Size (bytes):	171272
Entropy (8bit):	6.459127809417728
Encrypted:	false
SSDEEP:	3072:Uy2goL/sAQRuzzlPrvRwhRFUzMWlYfxJVBxV+aYT3qPXI05Wz4OuNOIOU7og2FnI:SOmCeu+bqPVWkWUMxFnI
MD5:	11EABCA2251325CFC5589C9C6FB57B46
SHA1:	096C9245B6A192D1403A82848E104A65F578A8EC
SHA-256:	017C0BE9AAA6D0359737E1FA762AD304C0E0107927FAFF5A6C1F415C7F5244ED
SHA-512:	E4B50F7EB7E96FE01AC44160F2AB88044FDCFC3E295F1C730F0A82DE7149DCF902225A16C3C8E1D69E84BFB5AC00C98BD9D6B29DB1A1E57F4E47AE842AC4A3CB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Me5WZLCzYlKw.ttf
Preview:	........... GDEF.B....'H...bGPOS......)...].GSUB..Y...x....OS/2.......l...`cmap.wX........Fcvt +.....$4...Tfpgmw.`...!,....gasp......'<....glyf&......,...lhdmxUz`z........head.j.z.......6hhea.......H...$hmtx.r.........8loca.w.........maxp.>........ name6!a...$.....post.m.d..'.... prep.f...."....I...d...(.............q......9........................EX../....>Y..EX../....>Y......9......9......9......9..........9......9.......01!!.!.......!.5.!.(.<..6......................}.w...x.^.^..^.......{.......0...EX../....>Y..EX../....>Y.....+X!...Y......901.#.3.462..."&.[....7l88l7......-==Z;;........#.........../......9../........01..#.3..#.3...o.....o...x...........w...............EX../....>Y..EX../....>Y..EX../....>Y..EX../....>Y......9\|../......+X!...Y............../.....+X!...Y...............................01.!.#.#5!.!5!.3.!.3.3.#.3.#.#.!.!....P.P...E....R.R..R.R..E..P....E.....f....b....`...`.....f.#.b....n.0.....+.i...EX../....>Y..EX."/..".>Y.."...9..................+X!.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (545)
Category:	downloaded
Size (bytes):	95628
Entropy (8bit):	5.617037167782012
Encrypted:	false
SSDEEP:	1536:Z7REKK6TwhAxVSrdhLBNlTFQ4u/AxupMwEIagrpTYN5ylEF:Fw4VSDL9Ty+F
MD5:	8C8392CE4A4364CBB240AA09B5652E05
SHA1:	9975BD51172FFC15DC947020B9141EA8CA1263A8
SHA-256:	36E982E5547689D39881245052762524D943CE03E936FB414AF0A5E803C6283A
SHA-512:	3103A785D49B923692DFFD39D812C4F65970A3E0701064E7657B7B17978F5C87D856E689DD6999CFA8204BFF5B6C8B5442EDAFE8914DF52DA0887B8DA2CD0C2A
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/flutter-canvaskit/45f6e009110df4f34ec2cf99f63cf73b71b7a420/chromium/canvaskit.js
Preview:	.var CanvasKitInit = (() => {. var _scriptDir = typeof document !== 'undefined' && document.currentScript ? document.currentScript.src : undefined;. if (typeof __filename !== 'undefined') _scriptDir = _scriptDir \|\| __filename;. return (.function(CanvasKitInit) {. CanvasKitInit = CanvasKitInit \|\| {};...null;var r;r\|\|(r=typeof CanvasKitInit !== 'undefined' ? CanvasKitInit : {});var aa=Object.assign,ba,ca;r.ready=new Promise(function(a,b){ba=a;ca=b});.(function(a){a.Md=a.Md\|\|[];a.Md.push(function(){a.MakeSWCanvasSurface=function(b){var c=b;if("CANVAS"!==c.tagName&&(c=document.getElementById(b),!c))throw"Canvas with id "+b+" was not found";if(b=a.MakeSurface(c.width,c.height))b.ke=c;return b};a.MakeCanvasSurface\|\|(a.MakeCanvasSurface=a.MakeSWCanvasSurface);a.MakeSurface=function(b,c){var e={width:b,height:c,colorType:a.ColorType.RGBA_8888,alphaType:a.AlphaType.Unpremul,colorSpace:a.ColorSpace.SRGB},f=bc4,k=a._malloc(f);if(e=a.Surface._makeRasterDirect(e,.k,4*b))e.ke=null,e.Qe=b,e.Ne=

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14026
Entropy (8bit):	7.918580075370981
Encrypted:	false
SSDEEP:	384:9G/VXkrnRCOZJbe2uBkSfQ4iQA0UfTaJULcEcNPZh3e//tz:9G/VUrRCOZJbe2um0xNlUqULcP130tz
MD5:	7A2DBFDEC08B3A38D668B605D78DF964
SHA1:	87DBA0BAA4BFFBB072A921C7C6A5199C26F83ABA
SHA-256:	C770CE547AF85DF31198C63F7EBA9CBA64FF3A48F8EB127D4EA12181453036C8
SHA-512:	BF80C0E4CE1F97A541F7F4411F994E3586517B301D564EB41CAFC285FCBFE325421C0A79C1C70B3DA122A6CDB52103F98D60B59217132E97FDB3374C2D0D7AC1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............}......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD............5.IDATx...w.\u....>3....M...&.%...RT.C.H.D$ U"E..}..>..R.C.dI.........`.Q....J.&..-3s...c...d........Maw.:.k.s.1..m.z..j..j=..f...H.F...;.;.]U.R..J.,i.....\|.a.....YI...}(i..vIm]..5S..V......0i..VXR.........).f...eD...?.m.zEj0S..&.T/i...I...J.n.HZ$i...r.)..HzK...Z.2.V......1..a.H[.kK7ma.-.....4:..,5.U.^u..z.M.d....p[..(`....>.c...@.K..m%m#..tze...LzN..._.....'[;...0.j..\;...>.I...M.N^d]z!....w..L....eP.@..{.of.=M.Y..&}.;Ox...%.,........3j..h@...h....jWE./..m.n.. ..xRZ..&{.?...t.eH..0P..=..A..t..{+.n2mB0e..V..$..\zp.?...2(``..........&...q....$=b..3.}K...D.....;n.}.]..}.K.................e...0.O....LB.J..&;@R5.`#.......T..5...(`........W.G.t...RA....9..i.u.W..........4.,:J.#%.!..P.\.)..........F.mz..j..Ow....... ...zX...f...)..H@......X.A.E.z.........yp.b...b!...FY.0..gM....q]e...2..a0c..{.8@......5.ir.!.2.....5-Z..s..P.(.....a..d.Uu~&.P

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	150252
Entropy (8bit):	6.73158535690119
Encrypted:	false
SSDEEP:	1536:knW9ORN5pJR1JOWgmd5Fju/qIzYq+qJi5ExrwpcWS7J5ffnVxjSZUNu1s6Mup2iX:VgnJ4Bmd5tIzYAl7ffVaG6ox2q8zrgk
MD5:	C67DB2AD4A5CA29B517DA8EABAFD2459
SHA1:	C54A0034E60D6445CAEE8533684B3CEA13420C81
SHA-256:	9ECFD020E9CC0B676025DF8390C0DC8CC2062523540887DD04BEC0EF4D5A449C
SHA-512:	FEA51DD4102876C99682DC21B6FDD27EBD74BBDB5D23814E34CE278ECCA784DFBFEB2679D1BD5540AA6AF2D362F13F943FAAA24B81CD0544399B250ABF805E3C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/a/9ecfd020e9cc0b676025df8390c0dc8cc2062523540887dd04bec0ef4d5a449c.ttf
Preview:	...........PGDEF...........@GPOS............GSUBa....%...%OS/2.$z....X...`cmap5.;.........glyf...c.......zhead.Q$q.......6hhea...].......$hmtx.j..........loca.r..........maxp...%...8... name"g@....(....postl _....... ...........u._.<..................6........T.....................d.....................................t.............d.........i.........X...K...X...^.2.N............................ITFO...........d.o.s .............. ...................G.<...<.B...B...5...U.............................<...<.....K.<...<.?...?...?.....)...............3...3...'.....@.g.?.T...i.@.........../...............8...\...e...C...........6.................7.d.....?.7...............U.7.K...................X.C.....<...I.......].:.K...............\...6......................."...............8...&...1...............6.......H.........7.c.....?.....a.............7.................g...).C.........I......./.:.!..........."...&.............i...0.U.9...........-.x...;.%.]....1...T.}.>.......6.g.4.0.D...B.X..

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409
Category:	downloaded
Size (bytes):	154584
Entropy (8bit):	6.752057811562586
Encrypted:	false
SSDEEP:	1536:UCUvT+GNqUESJ/8w/lF703hmTWH6lrGcRAbf9EpthYp0wf0IDh1jlGPkz2zFGWOD:UCfGfJ/AaHjxlzOkTgb3FiA98GEk
MD5:	9BA5C294B162C2688A1541EA64F36FB3
SHA1:	257C4AFC8725D026F06E0208E2AE7BFE079F1452
SHA-256:	705290B12F58C6D70AAFCAAF461DBC3D2F7F19D0F4362AF1843B107D95D4960A
SHA-512:	6C146F6A4248F2AA595CB51558C25289A89124308A5BBF85F60048D07E056636E46CCC7A507E16F4FD558814E89DF0B04B139989AC3310A0665CC23BBDB5C0AF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/a/705290b12f58c6d70aafcaaf461dbc3d2f7f19d0f4362af1843b107d95d4960a.ttf
Preview:	...........PGDEF......"....@GPOS.G!...".....GSUBE..Z..6...%&OS/2..w....X...`cmap5.;.........glyfI.C........6head..$a.......6hhea.u.........$hmtx2...........loca..9.........maxp...,...8... name%.Cs........postl _....... ...........\|l_.<..................6........).....................d.....n...............................v.............d.........S.........X...K...X...^.2.H............................ITFO...........d.o.s ........$..... ...................<.J.Z.J.D...D...?...a...........................a.J.a.J.....=.J.a.J.&...&...&.C...R...............X...X...2...,.&.X.&.O.....&...........................1...H...Q...*...........>.......X.........O.a.....Q...................L.......................Z.....3...J.......!.H.&...............H...>.......................................1..."...9...............>.......4.........O.a.....Q.....n.............L.......................Z.........J.........H.................".........4.......;.@.L...F...a.t.>.@.&.?.3.M.1.u.(.t.I.{.I.".!.w.<.v.I. .O...Q....

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 12, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	7.595187138991271
Encrypted:	false
SSDEEP:	12:6v/7UuEYykgv1+nOJz5LC1PFCg5zw6HMwVr+dW/mPyHMVyKPbKQp4hYtSQcc:eTykgvInOno9Cghw4V6dl1VyKPfs4cc
MD5:	82F724AA56DB0DA424F206B9991FD62E
SHA1:	C0334262E1A6720EFB47FA3334E8DD6437377836
SHA-256:	D96115050F54FD0C168F20FB496755CE4A6857A57446DBDAD9310BFC1D79FCB8
SHA-512:	B466B2EF2B3AE788F31E6BBAB7702911B5D43676CBB7DFCAD5B41C5F51EEBA812414F70870DDCC51666EB8E811ABAF2CF2C40D82C99B9F94CF10B5C1556EBDAA
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/assets/assets/images/meta.png
Preview:	.PNG........IHDR...6.................bKGD........DIDAT8..O.Ue....jLN.3....9R..(.b"..!...$..C.B.hadS.D0..5...B.h...B..?.C.ZX._.....0..3.qq..{.i.wV.w~.{.....nS..L... ...Ap...>..<.Rs..-y#...jU.?.5.g..Y?.5..u..>2.....eE...........$.....)I\.Z.?4<_.g....f.a../Il..[lvC..&o..J.[..a.z..0fq....%6.C.-I\.>mb.....I.R.A.C....Y.X.a.l...A...`.......ib...9.4mek..bk...E?....^_k./fN.....W.Su..I.......&<.}.W..1..x:I.b..D.......mX..L....{OC.<....*...Z.a8..;.%...J..w[..c.x$).!\..^....w...n.jq.1u...O..]~.......X.M...V......b..]6b.[.......f...~..t.7.XgLs.8..[0.b..x.Z.%.."1...4.../........z.3.....$....u....:M..F....IEND.B`.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 13 tables, 1st "GDEF", 8 names, Microsoft, language 0x409
Category:	dropped
Size (bytes):	151480
Entropy (8bit):	6.744387466364086
Encrypted:	false
SSDEEP:	3072:yF1ysTnqHvobJixBp0TKf3H5z8MkKURj7i8w+fGOW58LHGR5QE:yDysUnQ3tlHGb
MD5:	8360FDD61FD8609EF10E61C40C0ECA11
SHA1:	C80E173F72D4F31827D75C4EC934EDE660D35B16
SHA-256:	A24A61E9A408F85504DCDCD11EDC4995ADCEB4AB585C0011F39CFBE193248B71
SHA-512:	DAA3C81E152628C226FE0F8AD300BB9A736F0C33072D05EDE308F6B20CC47BE1B7596A17A452B31D04103252850A94B57736D56278C7E20B074BB038EE4CD833
Malicious:	false
Reputation:	low
Preview:	...........PGDEF.......x...@GPOS-...........GSUB.......%(OS/2.z....X...`cmap5.;.........glyf...........0head..$n.......6hhea.0.........$hmtxh..,........loca./l.........maxp...%...8... name$bBr........postl _....... ...........X_.<..................6........C.....................d.....8...............................t.............d.........b.X.......X...K...X...^.2.L............................ITFO...........d.o.s ............. ...................C.A.s.A.C...C...9...Y...........................x.A.x.A.....F.A.x.A.5...5...5.%...9...............A...A...+...!.6.a.5.S...}.7...........................5...T...^...9...........9.......p.........@.c.....F................?.?.6...................H.K.....9...J.......F.?.=...............T...9.......................................5...$...4...............9.......A.........@.b.....F.....f.............?.................t...#.K.........J.......$.?.................$.............}...4.M.@...(...z...5.j.$.>.,.W.-.../...O...E.$.#...:.r.A..H...H.@..

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (727)
Category:	downloaded
Size (bytes):	2363539
Entropy (8bit):	5.642914882241716
Encrypted:	false
SSDEEP:	49152:8HfRKM0TjasnRnLg/2dYBBDGWXCMI+U4zrd5N1daVaQ/63gsQ1sMIcfV:8HJXVi
MD5:	8311E439DC154163771AC561C8CFCDDD
SHA1:	03BF67566FA55360D8F9451E17FA69B296ED1DC4
SHA-256:	EE86AA323D6EA1CC0B7AA375BA7BEEC43B22DD3B682D84C49200979A2CAE126F
SHA-512:	2E51BEC1B9CC3A199091F6E76217F5DBEE4A6619FD95D09492FCBF718BA5DC0018AAFFE4B1E234F40B33851A49A5844F49F1643E175810803E20060BB6E07DC7
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/main.dart.js
Preview:	(function dartProgram(){function copyProperties(a,b){var s=Object.keys(a).for(var r=0;r<s.length;r++){var q=s[r].b[q]=a[q]}}function mixinPropertiesHard(a,b){var s=Object.keys(a).for(var r=0;r<s.length;r++){var q=s[r].if(!b.hasOwnProperty(q))b[q]=a[q]}}function mixinPropertiesEasy(a,b){Object.assign(b,a)}var z=function(){var s=function(){}.s.prototype={p:{}}.var r=new s().if(!(Object.getPrototypeOf(r)&&Object.getPrototypeOf(r).p===s.prototype.p))return false.try{if(typeof navigator!="undefined"&&typeof navigator.userAgent=="string"&&navigator.userAgent.indexOf("Chrome/")>=0)return true.if(typeof version=="function"&&version.length==0){var q=version().if(/^\d+\.\d+\.\d+\.\d+$/.test(q))return true}}catch(p){}return false}().function inherit(a,b){a.prototype.constructor=a.a.prototype["$i"+a.name]=a.if(b!=null){if(z){Object.setPrototypeOf(a.prototype,b.prototype).return}var s=Object.create(b.prototype).copyProperties(a.prototype,s).a.prototype=s}}function inheritMany(a,b){for(var s=0;s<b.l

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	14623
Entropy (8bit):	4.643598924304495
Encrypted:	false
SSDEEP:	192:Nd5KmEFBB8ZjieJTwrRR0Ci+GIyAsUTB4Op6Gu/+rkh2zPDzvgHvp7SnzYLJ:NWmqgzJWRi+dyAdli+rk0PHAp7yYLJ
MD5:	6B515E434CEA20006B3EF1726D2C8894
SHA1:	65E782370BC35A4F5E37922F12DEBFAE61EFF946
SHA-256:	EBEF4683C7634467E3E792E993CD8E28D44940D4299DD8F3F8CE8EA3C1F20B67
SHA-512:	F77633B802A7686F36697C4E1F6A157653CBE91C3FCE781E0D6D0DA4E2DE91B75A5159CDED648AEF354ABB1C80B87315112EC4247C7F711C93EABACE7B0C4176
Malicious:	false
Reputation:	low
URL:	https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter.js
Preview:	// Copyright 2014 The Flutter Authors. All rights reserved...// Use of this source code is governed by a BSD-style license that can be..// found in the LICENSE file.....if (!_flutter) {.. var _flutter = {};..}.._flutter.loader = null;....(function () {.. "use strict";.... const baseUri = ensureTrailingSlash(getBaseURI());.... function getBaseURI() {.. const base = document.querySelector("base");.. return (base && base.getAttribute("href")) \|\| "";.. }.... function ensureTrailingSlash(uri) {.. if (uri == "") {.. return uri;.. }.. return uri.endsWith("/") ? uri : `${uri}/`;.. }.... /*.. Wraps `promise` in a timeout of the given `duration` in ms... .. Resolves/rejects with whatever the original `promises` does, or rejects.. * if `promise` takes longer to complete than `duration`. In that case,.. * `debugName` is used to compose a legible error message... .. If `duration` is < 0, the original `promise` is returned unchanged... * @param {P

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 5, 2024 00:49:19.923043013 CEST	443	49709	40.113.110.67	192.168.2.6
Jul 5, 2024 00:49:19.923307896 CEST	49709	443	192.168.2.6	40.113.110.67
Jul 5, 2024 00:49:19.928304911 CEST	49709	443	192.168.2.6	40.113.110.67
Jul 5, 2024 00:49:19.928316116 CEST	443	49709	40.113.110.67	192.168.2.6
Jul 5, 2024 00:49:19.928625107 CEST	443	49709	40.113.110.67	192.168.2.6
Jul 5, 2024 00:49:19.929788113 CEST	49709	443	192.168.2.6	40.113.110.67
Jul 5, 2024 00:49:19.929843903 CEST	49709	443	192.168.2.6	40.113.110.67
Jul 5, 2024 00:49:19.929850101 CEST	443	49709	40.113.110.67	192.168.2.6
Jul 5, 2024 00:49:19.929939032 CEST	49709	443	192.168.2.6	40.113.110.67
Jul 5, 2024 00:49:19.976492882 CEST	443	49709	40.113.110.67	192.168.2.6
Jul 5, 2024 00:49:20.187024117 CEST	443	49709	40.113.110.67	192.168.2.6
Jul 5, 2024 00:49:20.187092066 CEST	443	49709	40.113.110.67	192.168.2.6
Jul 5, 2024 00:49:20.187139988 CEST	49709	443	192.168.2.6	40.113.110.67
Jul 5, 2024 00:49:20.187433958 CEST	49709	443	192.168.2.6	40.113.110.67
Jul 5, 2024 00:49:20.187455893 CEST	443	49709	40.113.110.67	192.168.2.6
Jul 5, 2024 00:49:23.871546984 CEST	49674	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:23.871546984 CEST	49673	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:24.199824095 CEST	49672	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:27.056909084 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:27.056941986 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:27.057041883 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:27.058001041 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:27.058016062 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:27.870393038 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:27.870524883 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:27.912786961 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:27.912811041 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:27.913105011 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:27.914474010 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:27.914525032 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:27.914529085 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:27.914622068 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:27.960508108 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:28.089194059 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:28.089399099 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:28.089461088 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:28.165695906 CEST	49710	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:28.165718079 CEST	443	49710	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:30.200841904 CEST	49716	80	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:30.201446056 CEST	49717	80	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:30.205645084 CEST	80	49716	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:30.205759048 CEST	49716	80	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:30.206046104 CEST	49716	80	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:30.206231117 CEST	80	49717	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:30.206434965 CEST	49717	80	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:30.211122036 CEST	80	49716	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:30.851836920 CEST	80	49716	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:30.900855064 CEST	49716	80	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:30.903461933 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:30.903512001 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:30.903580904 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:30.903825998 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:30.903836966 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:31.618496895 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:31.618783951 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:31.618812084 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:31.619810104 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:31.619894981 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:31.647546053 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:31.647713900 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:31.647723913 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:31.692496061 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:31.694058895 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:31.694068909 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:31.737669945 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:32.004318953 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:32.004343987 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:32.004416943 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:32.004446983 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:32.005572081 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:32.005654097 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:32.387204885 CEST	49718	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:32.387243032 CEST	443	49718	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:32.395412922 CEST	49721	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:32.395443916 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:32.395515919 CEST	49721	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:32.395710945 CEST	49721	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:32.395720959 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:32.603429079 CEST	49722	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:32.603481054 CEST	443	49722	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:32.603542089 CEST	49722	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:32.605176926 CEST	49722	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:32.605192900 CEST	443	49722	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:33.140170097 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.140460968 CEST	49721	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.140497923 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.140845060 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.141206980 CEST	49721	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.141273975 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.141359091 CEST	49721	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.188496113 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.378519058 CEST	49723	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:33.378566027 CEST	443	49723	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:33.378782034 CEST	49723	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:33.379374027 CEST	49723	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:33.379388094 CEST	443	49723	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:33.472121954 CEST	49673	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:33.473103046 CEST	49674	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:33.649940014 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.650768995 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.650784969 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.650851011 CEST	49721	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.650876045 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.650934935 CEST	49721	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.650970936 CEST	443	49722	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:33.651038885 CEST	49722	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:33.654241085 CEST	49722	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:33.654279947 CEST	443	49722	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:33.654557943 CEST	443	49722	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:33.657248020 CEST	49724	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:49:33.657285929 CEST	443	49724	142.250.186.132	192.168.2.6
Jul 5, 2024 00:49:33.657380104 CEST	49724	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:49:33.658468962 CEST	49724	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:49:33.658485889 CEST	443	49724	142.250.186.132	192.168.2.6
Jul 5, 2024 00:49:33.659224033 CEST	49721	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.659244061 CEST	443	49721	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.664639950 CEST	49725	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:33.664695978 CEST	443	49725	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:33.664781094 CEST	49725	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:33.667635918 CEST	49722	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:33.667701006 CEST	49722	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:33.667716026 CEST	443	49722	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:33.667821884 CEST	49722	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:33.690556049 CEST	49725	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:33.690594912 CEST	443	49725	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:33.703685045 CEST	49726	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.703717947 CEST	443	49726	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.703871012 CEST	49726	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.704057932 CEST	49726	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.704066992 CEST	443	49726	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.704766035 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.704797029 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.704905987 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.705586910 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.705600023 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.706433058 CEST	49728	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.706461906 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.706547976 CEST	49728	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.707350016 CEST	49728	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:33.707362890 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:33.708491087 CEST	443	49722	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:33.808315992 CEST	49672	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:33.842500925 CEST	443	49722	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:33.842711926 CEST	443	49722	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:33.842910051 CEST	49722	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:33.843112946 CEST	49722	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:33.843154907 CEST	443	49722	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:34.198986053 CEST	443	49723	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:34.199054003 CEST	49723	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:34.201570034 CEST	49723	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:34.201586962 CEST	443	49723	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:34.201828957 CEST	443	49723	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:34.203600883 CEST	49723	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:34.204041958 CEST	49723	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:34.204041958 CEST	49723	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:34.204054117 CEST	443	49723	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:34.248497963 CEST	443	49723	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:34.441329956 CEST	443	49723	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:34.441414118 CEST	443	49723	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:34.441531897 CEST	49723	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:34.448467016 CEST	443	49726	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.449359894 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.449503899 CEST	443	49724	142.250.186.132	192.168.2.6
Jul 5, 2024 00:49:34.449517965 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.455055952 CEST	443	49725	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:34.455127001 CEST	49725	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:34.468430042 CEST	49723	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:34.468449116 CEST	443	49723	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:34.469244957 CEST	49724	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:49:34.469261885 CEST	443	49724	142.250.186.132	192.168.2.6
Jul 5, 2024 00:49:34.469568014 CEST	49728	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.469599962 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.469804049 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.469830036 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.469948053 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.469997883 CEST	49726	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.470015049 CEST	443	49726	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.470231056 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.470324039 CEST	443	49724	142.250.186.132	192.168.2.6
Jul 5, 2024 00:49:34.470383883 CEST	49724	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:49:34.470911026 CEST	443	49726	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.471018076 CEST	49726	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.471582890 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.471658945 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.472810030 CEST	49728	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.472877026 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.473140001 CEST	49724	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:49:34.473220110 CEST	443	49724	142.250.186.132	192.168.2.6
Jul 5, 2024 00:49:34.473659992 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.473973036 CEST	49728	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.474559069 CEST	49726	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.474620104 CEST	443	49726	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.474797964 CEST	49726	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.474807024 CEST	443	49726	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.516545057 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.520447969 CEST	49725	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:34.520478010 CEST	443	49725	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:34.520503998 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.521600962 CEST	443	49725	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:34.525623083 CEST	49726	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.525641918 CEST	49724	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:49:34.525659084 CEST	443	49724	142.250.186.132	192.168.2.6
Jul 5, 2024 00:49:34.572505951 CEST	49725	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:34.572513103 CEST	49724	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:49:34.713999033 CEST	49725	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:34.756541014 CEST	443	49725	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:34.850961924 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.850995064 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.851057053 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.851073027 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.851109028 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.851145029 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.853172064 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.853229046 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.853348017 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.853385925 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.853544950 CEST	443	49727	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.853589058 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.853605032 CEST	49727	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.864864111 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.864888906 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.864932060 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.864954948 CEST	49728	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.865006924 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.865061045 CEST	49728	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.865461111 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.865521908 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.865747929 CEST	49728	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.865833044 CEST	49728	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.865881920 CEST	443	49728	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.878978014 CEST	443	49726	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.879304886 CEST	443	49726	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.879368067 CEST	49726	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.879560947 CEST	49726	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:34.879578114 CEST	443	49726	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:34.906037092 CEST	443	49725	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:34.906167984 CEST	443	49725	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:34.906233072 CEST	49725	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:34.906233072 CEST	49725	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:34.906306028 CEST	49725	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:34.906337023 CEST	443	49725	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:34.937944889 CEST	49729	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:34.937983036 CEST	443	49729	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:34.938113928 CEST	49729	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:34.938600063 CEST	49729	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:34.938621998 CEST	443	49729	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:35.218915939 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.218945026 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.219033957 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.219500065 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.219516039 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.220590115 CEST	49731	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.220649004 CEST	443	49731	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.220840931 CEST	49731	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.221008062 CEST	49731	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.221024990 CEST	443	49731	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.221956015 CEST	49732	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.221963882 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.222142935 CEST	49732	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.222805977 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.222816944 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.222866058 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.223237991 CEST	49732	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.223248005 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.223402977 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.223414898 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.259720087 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:35.259757996 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:35.259821892 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:35.260447979 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:35.260459900 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:35.475425959 CEST	443	49705	173.222.162.64	192.168.2.6
Jul 5, 2024 00:49:35.475528955 CEST	49705	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:35.592860937 CEST	443	49729	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:35.592941999 CEST	49729	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:35.594990969 CEST	49729	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:35.595001936 CEST	443	49729	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:35.595232964 CEST	443	49729	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:35.598483086 CEST	49729	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:35.640505075 CEST	443	49729	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:35.871272087 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.871784925 CEST	49732	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.871798992 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.872684956 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.872759104 CEST	49732	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.873279095 CEST	49732	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.873331070 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.873691082 CEST	49732	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.873697996 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.877310991 CEST	443	49729	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:35.877383947 CEST	443	49729	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:35.877563000 CEST	49729	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:35.879741907 CEST	49729	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:35.879756927 CEST	443	49729	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:35.879767895 CEST	49729	443	192.168.2.6	23.211.4.90
Jul 5, 2024 00:49:35.879774094 CEST	443	49729	23.211.4.90	192.168.2.6
Jul 5, 2024 00:49:35.916645050 CEST	49732	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.929271936 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.929691076 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.929702997 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.930071115 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.930927038 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.930998087 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.931348085 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.931617022 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.931957006 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.931988001 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.933079004 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.933156967 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.933686972 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.933751106 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.933991909 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.934000015 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.949372053 CEST	443	49731	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.949619055 CEST	49731	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.949628115 CEST	443	49731	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.952645063 CEST	443	49731	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.952714920 CEST	49731	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.953207970 CEST	49731	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.953273058 CEST	443	49731	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.953448057 CEST	49731	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.953455925 CEST	443	49731	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.976504087 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:35.979255915 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:35.994770050 CEST	49731	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.001329899 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.001581907 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.001606941 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.002618074 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.002686024 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.003072977 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.003132105 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.003418922 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.003427029 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.057255983 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.288659096 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.288686991 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.288749933 CEST	49732	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.288764954 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.288779020 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.288829088 CEST	49732	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.290014029 CEST	49732	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.290033102 CEST	443	49732	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.338989019 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.339010954 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.339055061 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.339077950 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.339462996 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.339515924 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.339715958 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.339735031 CEST	443	49733	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.339745045 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.339776039 CEST	49733	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.352720976 CEST	443	49731	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.352855921 CEST	443	49731	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.352907896 CEST	49731	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.353298903 CEST	49731	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.353307962 CEST	443	49731	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.400993109 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.401015997 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.401025057 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.401037931 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.401051998 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.401057959 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.401062012 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.401084900 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.401107073 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.401120901 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.401153088 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.402127028 CEST	49734	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.402143002 CEST	443	49734	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.421366930 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.421384096 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.421430111 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.421451092 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.421471119 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.421489000 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.421523094 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.505796909 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.505821943 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.505908966 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.505908966 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.505925894 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.506103039 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.511054039 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.511070013 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.511132956 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.511147022 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.511231899 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.595309019 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.595331907 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.595407963 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.595428944 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.595472097 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.595472097 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.595921040 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.595937014 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.596015930 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.596015930 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.596034050 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.596191883 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.597126007 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.597141981 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.597197056 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.597203970 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.597285986 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.600836039 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.600852013 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.600895882 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.600912094 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.600928068 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.600938082 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.600969076 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.600969076 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.610603094 CEST	49735	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.610636950 CEST	443	49735	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.610821962 CEST	49735	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.611510992 CEST	49735	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.611526012 CEST	443	49735	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.619213104 CEST	49736	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.619254112 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.619482040 CEST	49736	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.619774103 CEST	49736	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:36.619787931 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:36.684746981 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.684813976 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.684835911 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.685364008 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.685380936 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.685410976 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.685463905 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.685463905 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.685473919 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.685523033 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.686203957 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.686220884 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.686296940 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.686304092 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.686383009 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.687083006 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.687100887 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.687154055 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.687170029 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.687176943 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.687211037 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.687235117 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.689678907 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.689701080 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.689743042 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.689749956 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.689755917 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.689810991 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.689810991 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.689821005 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.689862967 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.690474987 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.690490007 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.690578938 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.690588951 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.690660000 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.691190004 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.691205978 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.691236973 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.691256046 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.691262007 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.691308022 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.691308022 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.692843914 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.692859888 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.692897081 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.692914963 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.692923069 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.692991972 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.748018980 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.775307894 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.775329113 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.775363922 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.775403023 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.775415897 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.775427103 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.776040077 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.776060104 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.776093960 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.776103973 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.776159048 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.776791096 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.776812077 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.776859999 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.776868105 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.776910067 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.777221918 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.777268887 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.777288914 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.777296066 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.777327061 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.778512955 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.778527975 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.778605938 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.778605938 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.778614998 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.779372931 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.779416084 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.779469967 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.779469967 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.779476881 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.779675007 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.779694080 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.779736042 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.779745102 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.779779911 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.779838085 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.779943943 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.779952049 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.780495882 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.780529022 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.780572891 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.780579090 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.780651093 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.864381075 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.864404917 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.864496946 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.864603043 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.864614010 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.864660025 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.865022898 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.865056038 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.865135908 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.865143061 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.865730047 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.865745068 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.865781069 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.865783930 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.865792990 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.865823030 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.865850925 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.866362095 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.866379976 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.866441965 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.866441965 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.866450071 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.867166042 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.867182970 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.867257118 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.867264032 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.867300034 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.867764950 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.867779970 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.867867947 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.867876053 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.868513107 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.868552923 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.868591070 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.868597031 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.868635893 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.868990898 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.869107962 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.869124889 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.869164944 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.869168043 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.869168043 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.869179010 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.869224072 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.872663975 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.872683048 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.872715950 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.872733116 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.872766018 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.919656992 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.954957962 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.954998016 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.955039024 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.955048084 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.955094099 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.955185890 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.955225945 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.955776930 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.955797911 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.955836058 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.955845118 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.955873013 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.956178904 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.956209898 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.956237078 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.956243038 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.956265926 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.956902981 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.956918955 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.956963062 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.956970930 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.957642078 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.957662106 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.957690001 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.957696915 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.957724094 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.958071947 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.958101034 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.958122969 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.958127975 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.958137035 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.958640099 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.958653927 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.958693027 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.958699942 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.958726883 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.958745956 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.958995104 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.959043980 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.962378979 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.962393999 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.962445974 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:36.962454081 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:36.962506056 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.044451952 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.044470072 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.044536114 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.044544935 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.044579983 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.045258999 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.045274019 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.045330048 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.045336962 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.045372009 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.045543909 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.045598030 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.046226025 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.046247959 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.046278000 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.046284914 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.046307087 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.046324015 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.046910048 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.046925068 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.046976089 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.046983004 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.047023058 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.047610044 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.047624111 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.047672033 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.047679901 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.047719955 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.048310041 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.048342943 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.048362970 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.048368931 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.048398018 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.048595905 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.048640966 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.048646927 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.050256968 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.050276041 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.050307989 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.050317049 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.050343990 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.091167927 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.134007931 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.134025097 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.134090900 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.134098053 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.134136915 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.134848118 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.134862900 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.134906054 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.134916067 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.134952068 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.134970903 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.135566950 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.135602951 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.135638952 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.135644913 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.135675907 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.135694027 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.136051893 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.136068106 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.136116982 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.136123896 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.136181116 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.136735916 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.136971951 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.136989117 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.137047052 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.137053967 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.137078047 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.137099981 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.137618065 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.137631893 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.137686014 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.137695074 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.137794971 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.138204098 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.138219118 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.138274908 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.138283014 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.138322115 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.139951944 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.139966965 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.140001059 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.140007019 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.140038967 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.140057087 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.140786886 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.224257946 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.224277973 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.224333048 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.224339962 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.224376917 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.224376917 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.224389076 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.224419117 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.225480080 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.225497961 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.225547075 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.225555897 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.225897074 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.225954056 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.225960016 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.225997925 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.226375103 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.226388931 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.226438999 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.226447105 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.226481915 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.227052927 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.227072954 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.227123022 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.227129936 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.227166891 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.227741957 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.227758884 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.227817059 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.227823973 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.227859974 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.228517056 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.228534937 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.228569031 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.228588104 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.228595018 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.228621960 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.228638887 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.228792906 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.228811979 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.228843927 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.228853941 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.228873968 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.228887081 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.231986046 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.232002974 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.232058048 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.232064009 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.232101917 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.314764977 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.314788103 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.314857006 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.314868927 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.315010071 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.315596104 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.315612078 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.315673113 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.315679073 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.315716028 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.316442013 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.316457987 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.316519976 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.316529036 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.316565037 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.317187071 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.317202091 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.317265034 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.317271948 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.317311049 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.317807913 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.317825079 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.317883968 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.317890882 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.317926884 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.318403959 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.318418980 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.318470001 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.318475962 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.318509102 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.318527937 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.319029093 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.319044113 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.319101095 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.319107056 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.319145918 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.320521116 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.321954966 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.321971893 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.322007895 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.322014093 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.322057962 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.340580940 CEST	443	49735	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.340903044 CEST	49735	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.340912104 CEST	443	49735	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.341260910 CEST	443	49735	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.344445944 CEST	49735	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.344528913 CEST	443	49735	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.344605923 CEST	49735	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.355364084 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:37.355751038 CEST	49736	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:37.355762005 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:37.356128931 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:37.356487989 CEST	49736	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:37.356551886 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:37.356677055 CEST	49736	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:37.388505936 CEST	443	49735	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.389380932 CEST	49735	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.404491901 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:37.404755116 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.404778957 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.404836893 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.404845953 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.404886961 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.404897928 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.405585051 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.405601025 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.405653000 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.405661106 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.405695915 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.406968117 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.406984091 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.407038927 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.407046080 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.407088041 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.407562971 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.407579899 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.407628059 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.407634974 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.407672882 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.408298016 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.408313036 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.408360958 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.408368111 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.408405066 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.408838034 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.408854008 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.408902884 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.408910036 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.408946037 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.409313917 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.409329891 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.409373999 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.409380913 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.409410954 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.409429073 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.411906004 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.411921978 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.411974907 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.411982059 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.412017107 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.433295012 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.494678020 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.494702101 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.494765997 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.494776011 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.494811058 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.494832039 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.495337963 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.495359898 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.495392084 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.495399952 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.495435953 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.496709108 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.496730089 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.496798038 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.496804953 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.496857882 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.497301102 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.497315884 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.497369051 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.497375965 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.497411013 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.497991085 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.498012066 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.498064995 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.498070955 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.498100996 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.498122931 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.498487949 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.498503923 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.498557091 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.498563051 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.498600006 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.499166012 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.499198914 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.499232054 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.499237061 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.499293089 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.501786947 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.501808882 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.501846075 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.501852036 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.501884937 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.501909018 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.584505081 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.584523916 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.584563017 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.584577084 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.584618092 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.584633112 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.585215092 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.585235119 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.585266113 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.585274935 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.585304022 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.585319042 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.586424112 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.586440086 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.586507082 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.586513996 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.586568117 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.587028027 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.587044001 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.587097883 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.587105036 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.587163925 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.587893009 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.587908030 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.587955952 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.587964058 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.588006020 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.588370085 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.588391066 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.588427067 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.588434935 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.588459015 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.588501930 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.589046001 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.589061022 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.589122057 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.589129925 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.589173079 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.591517925 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.591535091 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.591593981 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.591599941 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.591633081 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.674365997 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.674390078 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.674428940 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.674437046 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.674494028 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.675081015 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.675107002 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.675132036 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.675138950 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.675174952 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.675201893 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.676350117 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.676364899 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.676419973 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.676428080 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.676496983 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.676976919 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.677000999 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.677036047 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.677045107 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.677066088 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.677088022 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.677771091 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.677798033 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.677834988 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.677841902 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.677858114 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.677877903 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.678303003 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.678323030 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.678371906 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.678379059 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.678407907 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.678422928 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.678961992 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.678977966 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.679032087 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.679039001 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.679079056 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.681406975 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.681421995 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.681462049 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.681469917 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.681504011 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.681524038 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.701873064 CEST	49737	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.701930046 CEST	443	49737	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.702080965 CEST	49737	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.702301979 CEST	49737	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.702318907 CEST	443	49737	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.751828909 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:37.751882076 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:37.751936913 CEST	49736	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:37.751950979 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:37.752068996 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:37.752130985 CEST	49736	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:37.752551079 CEST	49736	443	192.168.2.6	18.65.39.113
Jul 5, 2024 00:49:37.752567053 CEST	443	49736	18.65.39.113	192.168.2.6
Jul 5, 2024 00:49:37.755316973 CEST	443	49735	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.755693913 CEST	443	49735	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.755744934 CEST	49735	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.756947041 CEST	49735	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.756967068 CEST	443	49735	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.764205933 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.764224052 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.764273882 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.764281988 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.764317989 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.764851093 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.764868021 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.764919043 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.764925957 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.764969110 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.766218901 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.766237974 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.766273022 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.766278028 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.766314983 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.766333103 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.766859055 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.766874075 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.766916037 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.766921043 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.766944885 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.766963959 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.767254114 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.767277002 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.767318010 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.767326117 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.767364025 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.768023014 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.768038988 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.768068075 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.768073082 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.768099070 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.768124104 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.768429995 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.768449068 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.768620968 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.768627882 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.768670082 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.771311998 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.771327972 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.771374941 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.771394014 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.771661997 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.854365110 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.854386091 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.854425907 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.854434967 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.854485989 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.854902983 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.854918957 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.854955912 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.854963064 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.854990005 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.855010033 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.856115103 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.856133938 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.856185913 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.856192112 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.856225014 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.856240034 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.856877089 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.856893063 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.856952906 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.856961012 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.856997967 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.857410908 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.857426882 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.857481956 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.857489109 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.857527018 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.858135939 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.858151913 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.858190060 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.858196020 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.858239889 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.858253002 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.858633041 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.858649015 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.858694077 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:37.858700037 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:37.858741999 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.049643993 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.049668074 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.049725056 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.049741030 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.049766064 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.049793005 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.050403118 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.050424099 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.050458908 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.050467014 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.050492048 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.050637007 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.051141977 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.051175117 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.051212072 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.051218987 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.051239967 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.051248074 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.051264048 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.051270962 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.051281929 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.051297903 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.051330090 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.051335096 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.051439047 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.052149057 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.052165031 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.052212954 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.052220106 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.052263975 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.052932978 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.052967072 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.052995920 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.053004980 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.053011894 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.053025007 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.053052902 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.053056955 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.053095102 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.053097963 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.053107977 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.053141117 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.053148031 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.053160906 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.053164005 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.053199053 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.054069042 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.054084063 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.054125071 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.054131031 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.054152012 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.054182053 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.054934025 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.054950953 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.054986954 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.054992914 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.055011034 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.055016041 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.055033922 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.055042982 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.055047989 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.055073023 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.055102110 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.056380987 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.056395054 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.056432009 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.056437969 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.056444883 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.056472063 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.056479931 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.056495905 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.056499958 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.056529999 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.057337046 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.057354927 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.057395935 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.057401896 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.057445049 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.057957888 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.057974100 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.058015108 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.058021069 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.058042049 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.058060884 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.058453083 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.058468103 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.058510065 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.058515072 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.058537960 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.058548927 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.058581114 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.058590889 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.058597088 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.058634043 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.123720884 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.123739004 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.123784065 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.123797894 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.123821974 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.123840094 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.124244928 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.124262094 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.124293089 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.124299049 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.124305964 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.124325991 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.124346018 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.124351025 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.124392986 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.124922991 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.124938011 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.124980927 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.124986887 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.125036001 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.126188040 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.126203060 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.126244068 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.126250982 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.126272917 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.126297951 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.126673937 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.126688957 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.126740932 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.126748085 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.126830101 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.127330065 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.127346039 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.127398014 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.127404928 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.127537012 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.127821922 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.127873898 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.127883911 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.127888918 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.127923965 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.128495932 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.128510952 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.128549099 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.128566027 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.128576040 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.128606081 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.213601112 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.213620901 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.213675022 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.213685989 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.213740110 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.214109898 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.214123964 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.214169025 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.214174986 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.214212894 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.214225054 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.214231014 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.214257956 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.215009928 CEST	49730	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.215020895 CEST	443	49730	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.425199986 CEST	443	49737	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.425554037 CEST	49737	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.425590038 CEST	443	49737	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.425904989 CEST	443	49737	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.426239967 CEST	49737	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.426309109 CEST	443	49737	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.426400900 CEST	49737	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.472507000 CEST	443	49737	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.847646952 CEST	443	49737	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.847867966 CEST	443	49737	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.847939014 CEST	49737	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.851859093 CEST	49737	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.851883888 CEST	443	49737	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:38.851922035 CEST	49737	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:38.851922035 CEST	49737	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.188947916 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.188971043 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.189110041 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.189486027 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.189500093 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.190650940 CEST	49740	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.190707922 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.190761089 CEST	49740	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.191106081 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.191119909 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.191446066 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.191452980 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.191483021 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.191514015 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.192039967 CEST	49743	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.192050934 CEST	443	49743	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.192099094 CEST	49743	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.192802906 CEST	49740	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.192821026 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.194700956 CEST	49743	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.194701910 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.194701910 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.194715977 CEST	443	49743	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.194725990 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.194758892 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.899874926 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.900113106 CEST	49740	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.900135040 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.900631905 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.901067019 CEST	49740	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.901145935 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.901207924 CEST	49740	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.903018951 CEST	443	49743	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.903259993 CEST	49743	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.903268099 CEST	443	49743	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.904330969 CEST	443	49743	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.904387951 CEST	49743	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.904793024 CEST	49743	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.904855013 CEST	443	49743	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.904939890 CEST	49743	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.904947042 CEST	443	49743	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.909327984 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.909630060 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.909641027 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.909991980 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.910449028 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.910525084 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.910572052 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.926223993 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.926474094 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.926482916 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.927576065 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.927650928 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.928064108 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.928128958 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.928181887 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.928316116 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.928556919 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.928564072 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.929564953 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.929682016 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.930073977 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.930129051 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.930255890 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.930272102 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.944500923 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.947853088 CEST	49743	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.952508926 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.963496923 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.968503952 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:39.979114056 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.979114056 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:39.979121923 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.025999069 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.316957951 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.318022966 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.318108082 CEST	49740	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.318137884 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.318595886 CEST	49740	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.318600893 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.318618059 CEST	443	49740	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.318659067 CEST	49740	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.318684101 CEST	49740	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.352334976 CEST	443	49743	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.352436066 CEST	443	49743	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.352844000 CEST	49743	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.353336096 CEST	49743	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.353352070 CEST	443	49743	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.361938000 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.361962080 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.361969948 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.362001896 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.362020016 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.362021923 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.362034082 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.362056017 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.362061024 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.362095118 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.362095118 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.376338959 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.384879112 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.384887934 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.384944916 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.384968042 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.385003090 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.385031939 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.385059118 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.385072947 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.385072947 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.385138988 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.447000027 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.447043896 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.447083950 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.447094917 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.447201014 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.449441910 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.449467897 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.449515104 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.449522018 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.449557066 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.449585915 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.453425884 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.453493118 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.453500986 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.453515053 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.453556061 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.453850031 CEST	49742	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.453855991 CEST	443	49742	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.470190048 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.470216036 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.470257044 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.470277071 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.470314026 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.470329046 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.470329046 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.474991083 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.475035906 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.475054979 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.475064039 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.475153923 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.559730053 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.559762955 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.559801102 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.559808969 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.559820890 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.559843063 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.559880972 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.559886932 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.559957981 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.560066938 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.560096025 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.560103893 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.560125113 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.560142040 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.560147047 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.560183048 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.561305046 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.561331987 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.561428070 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.561428070 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.561435938 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.561475992 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.562972069 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.562993050 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.563060999 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.563069105 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.563164949 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.566441059 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.566517115 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.566523075 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.566684008 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.566708088 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.566783905 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.566783905 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.566792011 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.566843987 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.619576931 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.651526928 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.651549101 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.651618004 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.651632071 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.651669979 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.651669979 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.651915073 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.651926994 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.651983976 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.651988983 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.652266026 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.652306080 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.652347088 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.652347088 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.652357101 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.652437925 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.652779102 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.652796030 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.652832985 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.652838945 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.652882099 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.652882099 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.653414011 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.653446913 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.653475046 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.653480053 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.653507948 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.653507948 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.653532028 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.653604031 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.654263973 CEST	49739	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.654275894 CEST	443	49739	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.657461882 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.657470942 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.657485008 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.657490969 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.657558918 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.657567978 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.657588005 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.659509897 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.659584045 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.659589052 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.713376045 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.744757891 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.744776011 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.744807005 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.744837999 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.744860888 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.744864941 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.744937897 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.746242046 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.746249914 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.746274948 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.746330976 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.746334076 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.746356010 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.746381998 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.747837067 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.747852087 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.747876883 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.747952938 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.747952938 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.747958899 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.755304098 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.755325079 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.755366087 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.755372047 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.755419016 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.757514000 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.757630110 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.838591099 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.838608027 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.838721037 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.838728905 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.838741064 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.838998079 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.839040995 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.839061975 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.839066029 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.839085102 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.839962006 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.839976072 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.840017080 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.840022087 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.840054989 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.840084076 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.840883017 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.840897083 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.840924025 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.840958118 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.840965033 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.840989113 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.843441963 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.843460083 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.843537092 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.843539953 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.843556881 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.843563080 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.843622923 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.843627930 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.843676090 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.844974995 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.844989061 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.845053911 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.845058918 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.845139980 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.849019051 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.849034071 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.849103928 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.849108934 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.849138975 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.855411053 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.855429888 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.855496883 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.855501890 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.855566025 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.932403088 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.932497025 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.932504892 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.932826042 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.932840109 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.932893038 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.932898998 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.932930946 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.933149099 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.933214903 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.933218956 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.933509111 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.933540106 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.933543921 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.933552027 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.933564901 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.933614969 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.933619022 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.933893919 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.934344053 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.934362888 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.934395075 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.934420109 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.934426069 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.934456110 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.936408043 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.936435938 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.936465025 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.936467886 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.936507940 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.938693047 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.938705921 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.938776970 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.938781023 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.938813925 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.938824892 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.938884020 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.940470934 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.940530062 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.940624952 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.940670013 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.943020105 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.943073988 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:40.943082094 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.943104029 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:40.945801973 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:41.019546032 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:41.043212891 CEST	49741	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:41.043224096 CEST	443	49741	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:41.485769033 CEST	49747	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:41.485816956 CEST	443	49747	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:41.485939026 CEST	49747	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:41.487283945 CEST	49747	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:41.487303972 CEST	443	49747	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:42.404118061 CEST	443	49747	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:42.404194117 CEST	49747	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:42.408313990 CEST	49747	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:42.408324957 CEST	443	49747	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:42.408595085 CEST	443	49747	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:42.424411058 CEST	49747	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:42.424716949 CEST	49747	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:42.424741030 CEST	443	49747	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:42.425177097 CEST	49747	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:42.472492933 CEST	443	49747	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:42.604696035 CEST	443	49747	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:42.604934931 CEST	443	49747	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:42.605007887 CEST	49747	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:42.616620064 CEST	49747	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:42.616640091 CEST	443	49747	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:42.616656065 CEST	49747	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:44.245708942 CEST	443	49724	142.250.186.132	192.168.2.6
Jul 5, 2024 00:49:44.245769978 CEST	443	49724	142.250.186.132	192.168.2.6
Jul 5, 2024 00:49:44.245897055 CEST	49724	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:49:45.192570925 CEST	49724	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:49:45.192595005 CEST	443	49724	142.250.186.132	192.168.2.6
Jul 5, 2024 00:49:46.298976898 CEST	49751	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:46.299036026 CEST	443	49751	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:46.299104929 CEST	49751	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:46.309520960 CEST	49752	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:46.309535027 CEST	443	49752	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:46.309588909 CEST	49752	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:46.315303087 CEST	49751	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:46.315319061 CEST	443	49751	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:46.316200972 CEST	49752	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:46.316217899 CEST	443	49752	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:46.535773039 CEST	49756	443	192.168.2.6	104.26.8.44
Jul 5, 2024 00:49:46.535784960 CEST	443	49756	104.26.8.44	192.168.2.6
Jul 5, 2024 00:49:46.535839081 CEST	49756	443	192.168.2.6	104.26.8.44
Jul 5, 2024 00:49:46.536056995 CEST	49756	443	192.168.2.6	104.26.8.44
Jul 5, 2024 00:49:46.536066055 CEST	443	49756	104.26.8.44	192.168.2.6
Jul 5, 2024 00:49:47.026489019 CEST	443	49752	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.026762009 CEST	49752	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.026796103 CEST	443	49752	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.027168036 CEST	443	49752	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.027683973 CEST	49752	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.027744055 CEST	443	49752	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.028011084 CEST	49752	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.049854040 CEST	443	49751	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.050103903 CEST	49751	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.050132990 CEST	443	49751	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.050489902 CEST	443	49751	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.050856113 CEST	49751	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.050914049 CEST	443	49751	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.051126003 CEST	49751	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.068501949 CEST	443	49752	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.092535019 CEST	443	49751	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.109369040 CEST	443	49756	104.26.8.44	192.168.2.6
Jul 5, 2024 00:49:47.109603882 CEST	49756	443	192.168.2.6	104.26.8.44
Jul 5, 2024 00:49:47.109621048 CEST	443	49756	104.26.8.44	192.168.2.6
Jul 5, 2024 00:49:47.110666037 CEST	443	49756	104.26.8.44	192.168.2.6
Jul 5, 2024 00:49:47.110722065 CEST	49756	443	192.168.2.6	104.26.8.44
Jul 5, 2024 00:49:47.111789942 CEST	49756	443	192.168.2.6	104.26.8.44
Jul 5, 2024 00:49:47.111860037 CEST	443	49756	104.26.8.44	192.168.2.6
Jul 5, 2024 00:49:47.111955881 CEST	49756	443	192.168.2.6	104.26.8.44
Jul 5, 2024 00:49:47.151478052 CEST	49756	443	192.168.2.6	104.26.8.44
Jul 5, 2024 00:49:47.151488066 CEST	443	49756	104.26.8.44	192.168.2.6
Jul 5, 2024 00:49:47.198360920 CEST	49756	443	192.168.2.6	104.26.8.44
Jul 5, 2024 00:49:47.332305908 CEST	443	49756	104.26.8.44	192.168.2.6
Jul 5, 2024 00:49:47.332418919 CEST	443	49756	104.26.8.44	192.168.2.6
Jul 5, 2024 00:49:47.332477093 CEST	49756	443	192.168.2.6	104.26.8.44
Jul 5, 2024 00:49:47.420155048 CEST	443	49752	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.420234919 CEST	443	49752	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.420324087 CEST	49752	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.448524952 CEST	443	49751	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.448873043 CEST	443	49751	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.448916912 CEST	49751	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.456115961 CEST	49752	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.456134081 CEST	443	49752	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.456494093 CEST	49756	443	192.168.2.6	104.26.8.44
Jul 5, 2024 00:49:47.456510067 CEST	443	49756	104.26.8.44	192.168.2.6
Jul 5, 2024 00:49:47.464082003 CEST	49751	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.464092970 CEST	443	49751	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.479988098 CEST	49759	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:47.480009079 CEST	443	49759	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:47.480156898 CEST	49759	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:47.480828047 CEST	49759	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:47.480843067 CEST	443	49759	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:47.481267929 CEST	49705	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:47.481662989 CEST	49705	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:47.482008934 CEST	49760	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:47.482033968 CEST	443	49760	173.222.162.64	192.168.2.6
Jul 5, 2024 00:49:47.482106924 CEST	49760	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:47.482414007 CEST	49760	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:47.482429028 CEST	443	49760	173.222.162.64	192.168.2.6
Jul 5, 2024 00:49:47.486067057 CEST	443	49705	173.222.162.64	192.168.2.6
Jul 5, 2024 00:49:47.486457109 CEST	443	49705	173.222.162.64	192.168.2.6
Jul 5, 2024 00:49:47.497849941 CEST	49761	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.497881889 CEST	443	49761	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.498135090 CEST	49761	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.498368025 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.498375893 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.498467922 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.498806000 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.498814106 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.498907089 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.499181032 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.499187946 CEST	443	49764	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.499236107 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.499984026 CEST	49761	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.499996901 CEST	443	49761	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.500238895 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.500250101 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.500401020 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.500412941 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:47.500530005 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:47.500539064 CEST	443	49764	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.103929043 CEST	443	49760	173.222.162.64	192.168.2.6
Jul 5, 2024 00:49:48.103996038 CEST	49760	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:49:48.205425024 CEST	443	49761	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.205657959 CEST	49761	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.205686092 CEST	443	49761	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.206043959 CEST	443	49761	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.206362963 CEST	49761	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.206444025 CEST	443	49761	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.206499100 CEST	49761	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.218878031 CEST	443	49764	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.219074965 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.219089031 CEST	443	49764	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.220639944 CEST	443	49764	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.220690012 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.221039057 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.221121073 CEST	443	49764	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.221168041 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.223740101 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.223918915 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.223941088 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.225029945 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.225083113 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.225419044 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.225480080 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.225544930 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.225553036 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.239803076 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.240108013 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.240127087 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.240447044 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.240746021 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.240807056 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.240864992 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.248492956 CEST	443	49761	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.260926962 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.260940075 CEST	443	49764	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.276536942 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.288512945 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.307782888 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.310559034 CEST	443	49759	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:48.310636044 CEST	49759	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:48.313965082 CEST	49759	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:48.313977003 CEST	443	49759	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:48.314222097 CEST	443	49759	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:48.315474987 CEST	49759	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:48.315548897 CEST	49759	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:48.315555096 CEST	443	49759	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:48.315644026 CEST	49759	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:48.360498905 CEST	443	49759	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:48.385936022 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.496464968 CEST	443	49759	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:48.496840000 CEST	443	49759	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:48.496953964 CEST	49759	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:48.497154951 CEST	49759	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:48.497175932 CEST	443	49759	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:48.497194052 CEST	49759	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:48.616887093 CEST	443	49764	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.616916895 CEST	443	49764	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.616988897 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.617003918 CEST	443	49764	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.617048979 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.618201971 CEST	49764	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.618223906 CEST	443	49764	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.632245064 CEST	443	49761	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.632517099 CEST	443	49761	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.632572889 CEST	49761	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.639595032 CEST	49761	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.639604092 CEST	443	49761	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.671611071 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.676269054 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.676295042 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.676321030 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.676368952 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.676379919 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.676414967 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.676429033 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.682858944 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.682879925 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.682910919 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.682945013 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.682950974 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.720808983 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.720829964 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.720840931 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.720869064 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.720879078 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.720885038 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.720897913 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.720917940 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.720921040 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.720942974 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.720966101 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.735907078 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.765162945 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.765173912 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.765203953 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.765216112 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.765218973 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.765232086 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.765240908 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.765275002 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.765295982 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.772041082 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.772048950 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.772077084 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.772093058 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.772136927 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.772141933 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.772154093 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.772308111 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.819506884 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.819514990 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.819547892 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.819574118 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.819592953 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.819655895 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.821881056 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.821888924 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.821917057 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.821938992 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.821947098 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.821981907 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.821996927 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.823009968 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.824105024 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.824120998 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.824176073 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.824186087 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.824286938 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.853957891 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.853966951 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.854024887 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.854038954 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.854053020 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.854104042 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.854353905 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.854370117 CEST	443	49763	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.854402065 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.854425907 CEST	49763	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.913768053 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.913841009 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.914349079 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.914369106 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.914411068 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.914421082 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.914433002 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.914433002 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.914479017 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.914484978 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.914521933 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:48.914628983 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.914849043 CEST	49762	443	192.168.2.6	18.65.39.51
Jul 5, 2024 00:49:48.914870024 CEST	443	49762	18.65.39.51	192.168.2.6
Jul 5, 2024 00:49:55.898077965 CEST	49768	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:55.898123980 CEST	443	49768	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:55.902216911 CEST	49768	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:55.904611111 CEST	49768	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:55.904632092 CEST	443	49768	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:56.790815115 CEST	443	49768	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:56.790878057 CEST	49768	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:56.792884111 CEST	49768	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:56.792895079 CEST	443	49768	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:56.793133974 CEST	443	49768	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:56.794955015 CEST	49768	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:56.795006990 CEST	49768	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:56.795012951 CEST	443	49768	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:56.795140982 CEST	49768	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:56.836508036 CEST	443	49768	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:56.968095064 CEST	443	49768	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:56.968508959 CEST	49768	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:56.968508959 CEST	49768	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:49:56.968527079 CEST	443	49768	40.115.3.253	192.168.2.6
Jul 5, 2024 00:49:56.968579054 CEST	49768	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:00.741956949 CEST	80	49717	18.65.39.51	192.168.2.6
Jul 5, 2024 00:50:00.742124081 CEST	49717	80	192.168.2.6	18.65.39.51
Jul 5, 2024 00:50:01.153356075 CEST	49717	80	192.168.2.6	18.65.39.51
Jul 5, 2024 00:50:01.158240080 CEST	80	49717	18.65.39.51	192.168.2.6
Jul 5, 2024 00:50:02.919974089 CEST	49769	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:02.920032024 CEST	443	49769	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:02.920161009 CEST	49769	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:02.920759916 CEST	49769	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:02.920773983 CEST	443	49769	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:03.940025091 CEST	443	49769	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:03.940144062 CEST	49769	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:03.946913004 CEST	49769	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:03.946938038 CEST	443	49769	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:03.947168112 CEST	443	49769	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:03.950176001 CEST	49769	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:03.950316906 CEST	49769	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:03.950329065 CEST	443	49769	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:03.950470924 CEST	49769	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:03.992506027 CEST	443	49769	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:04.133306980 CEST	443	49769	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:04.133713961 CEST	443	49769	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:04.133755922 CEST	49769	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:04.133796930 CEST	443	49769	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:04.133814096 CEST	49769	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:04.133814096 CEST	49769	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:04.133822918 CEST	443	49769	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:07.264550924 CEST	443	49760	173.222.162.64	192.168.2.6
Jul 5, 2024 00:50:07.264775038 CEST	49760	443	192.168.2.6	173.222.162.64
Jul 5, 2024 00:50:10.419903994 CEST	49770	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:10.419945955 CEST	443	49770	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:10.420006990 CEST	49770	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:10.421940088 CEST	49770	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:10.421952009 CEST	443	49770	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:11.228719950 CEST	443	49770	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:11.228828907 CEST	49770	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:11.230732918 CEST	49770	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:11.230746031 CEST	443	49770	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:11.231033087 CEST	443	49770	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:11.232841015 CEST	49770	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:11.233021021 CEST	49770	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:11.233021021 CEST	49770	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:11.233026981 CEST	443	49770	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:11.276506901 CEST	443	49770	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:11.408117056 CEST	443	49770	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:11.408615112 CEST	443	49770	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:11.408936977 CEST	49770	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:11.408936977 CEST	49770	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:11.408982992 CEST	443	49770	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:11.409013033 CEST	49770	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:15.870143890 CEST	49716	80	192.168.2.6	18.65.39.51
Jul 5, 2024 00:50:15.875863075 CEST	80	49716	18.65.39.51	192.168.2.6
Jul 5, 2024 00:50:25.898313999 CEST	49772	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:25.898417950 CEST	443	49772	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:25.898507118 CEST	49772	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:25.901043892 CEST	49772	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:25.901070118 CEST	443	49772	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:26.718945980 CEST	443	49772	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:26.719053984 CEST	49772	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:26.720876932 CEST	49772	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:26.720887899 CEST	443	49772	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:26.721086025 CEST	443	49772	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:26.722438097 CEST	49772	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:26.722590923 CEST	49772	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:26.722590923 CEST	49772	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:26.722596884 CEST	443	49772	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:26.764508009 CEST	443	49772	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:26.905894995 CEST	443	49772	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:26.906140089 CEST	443	49772	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:26.914058924 CEST	49772	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:26.914525032 CEST	49772	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:26.914541960 CEST	443	49772	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:29.351645947 CEST	49774	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:29.351691008 CEST	443	49774	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:29.351741076 CEST	49774	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:29.352813959 CEST	49774	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:29.352828026 CEST	443	49774	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:30.170284033 CEST	443	49774	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:30.170422077 CEST	49774	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:30.172189951 CEST	49774	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:30.172199965 CEST	443	49774	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:30.172549963 CEST	443	49774	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:30.174488068 CEST	49774	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:30.174488068 CEST	49774	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:30.174505949 CEST	443	49774	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:30.174628019 CEST	49774	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:30.216504097 CEST	443	49774	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:30.529629946 CEST	443	49774	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:30.529720068 CEST	443	49774	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:30.530183077 CEST	49774	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:30.530183077 CEST	49774	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:30.530214071 CEST	49774	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:33.521169901 CEST	49775	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:50:33.521212101 CEST	443	49775	142.250.186.132	192.168.2.6
Jul 5, 2024 00:50:33.521313906 CEST	49775	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:50:33.522825956 CEST	49775	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:50:33.522842884 CEST	443	49775	142.250.186.132	192.168.2.6
Jul 5, 2024 00:50:34.703226089 CEST	443	49775	142.250.186.132	192.168.2.6
Jul 5, 2024 00:50:34.703845978 CEST	49775	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:50:34.703862906 CEST	443	49775	142.250.186.132	192.168.2.6
Jul 5, 2024 00:50:34.704155922 CEST	443	49775	142.250.186.132	192.168.2.6
Jul 5, 2024 00:50:34.705164909 CEST	49775	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:50:34.705221891 CEST	443	49775	142.250.186.132	192.168.2.6
Jul 5, 2024 00:50:34.745625973 CEST	49775	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:50:44.461853981 CEST	443	49775	142.250.186.132	192.168.2.6
Jul 5, 2024 00:50:44.461926937 CEST	443	49775	142.250.186.132	192.168.2.6
Jul 5, 2024 00:50:44.462057114 CEST	49775	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:50:45.154234886 CEST	49775	443	192.168.2.6	142.250.186.132
Jul 5, 2024 00:50:45.154269934 CEST	443	49775	142.250.186.132	192.168.2.6
Jul 5, 2024 00:50:48.640444994 CEST	49777	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:48.640480042 CEST	443	49777	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:48.640651941 CEST	49777	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:48.641213894 CEST	49777	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:48.641232967 CEST	443	49777	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:49.525901079 CEST	443	49777	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:49.525983095 CEST	49777	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:49.531306028 CEST	49777	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:49.531317949 CEST	443	49777	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:49.531521082 CEST	443	49777	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:49.532915115 CEST	49777	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:49.532967091 CEST	49777	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:49.532974005 CEST	443	49777	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:49.533077955 CEST	49777	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:49.576558113 CEST	443	49777	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:49.706021070 CEST	443	49777	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:49.706167936 CEST	443	49777	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:49.706379890 CEST	49777	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:49.706665993 CEST	49777	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:49.706684113 CEST	443	49777	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:52.135103941 CEST	49778	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:52.135155916 CEST	443	49778	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:52.135305882 CEST	49778	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:52.135972023 CEST	49778	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:52.135992050 CEST	443	49778	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:52.932435989 CEST	443	49778	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:52.932507038 CEST	49778	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:52.935178995 CEST	49778	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:52.935194016 CEST	443	49778	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:52.935425997 CEST	443	49778	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:52.937505007 CEST	49778	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:52.937669992 CEST	49778	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:52.937676907 CEST	443	49778	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:52.937903881 CEST	49778	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:52.984502077 CEST	443	49778	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:53.115103960 CEST	443	49778	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:53.115374088 CEST	443	49778	40.115.3.253	192.168.2.6
Jul 5, 2024 00:50:53.115457058 CEST	49778	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:53.115572929 CEST	49778	443	192.168.2.6	40.115.3.253
Jul 5, 2024 00:50:53.115595102 CEST	443	49778	40.115.3.253	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 5, 2024 00:49:28.712477922 CEST	53	60281	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:28.757760048 CEST	53	62902	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:29.933403969 CEST	53	57523	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:30.155438900 CEST	60332	53	192.168.2.6	1.1.1.1
Jul 5, 2024 00:49:30.155587912 CEST	62467	53	192.168.2.6	1.1.1.1
Jul 5, 2024 00:49:30.184719086 CEST	53	62467	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:30.200114012 CEST	53	60332	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:30.860250950 CEST	50770	53	192.168.2.6	1.1.1.1
Jul 5, 2024 00:49:30.860474110 CEST	60174	53	192.168.2.6	1.1.1.1
Jul 5, 2024 00:49:30.890573978 CEST	53	60174	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:30.902726889 CEST	53	50770	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:33.471461058 CEST	58245	53	192.168.2.6	1.1.1.1
Jul 5, 2024 00:49:33.471651077 CEST	59964	53	192.168.2.6	1.1.1.1
Jul 5, 2024 00:49:33.652834892 CEST	53	59964	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:33.653043032 CEST	53	58245	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:35.228349924 CEST	59878	53	192.168.2.6	1.1.1.1
Jul 5, 2024 00:49:35.228677988 CEST	49669	53	192.168.2.6	1.1.1.1
Jul 5, 2024 00:49:35.246905088 CEST	53	49669	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:35.258965015 CEST	53	59878	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:39.163342953 CEST	53	58555	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:39.195213079 CEST	53	50242	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:46.526864052 CEST	50222	53	192.168.2.6	1.1.1.1
Jul 5, 2024 00:49:46.527012110 CEST	57328	53	192.168.2.6	1.1.1.1
Jul 5, 2024 00:49:46.533898115 CEST	53	50222	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:46.535290003 CEST	53	57328	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:46.591020107 CEST	53	65326	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:47.144884109 CEST	53	50079	1.1.1.1	192.168.2.6
Jul 5, 2024 00:49:47.798115969 CEST	53	51628	1.1.1.1	192.168.2.6
Jul 5, 2024 00:50:05.926434040 CEST	53	57993	1.1.1.1	192.168.2.6
Jul 5, 2024 00:50:28.573668003 CEST	53	61259	1.1.1.1	192.168.2.6
Jul 5, 2024 00:50:28.578187943 CEST	53	58429	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 5, 2024 00:49:30.155438900 CEST	192.168.2.6	1.1.1.1	0x2785	Standard query (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:30.155587912 CEST	192.168.2.6	1.1.1.1	0x195d	Standard query (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com	65	IN (0x0001)	false
Jul 5, 2024 00:49:30.860250950 CEST	192.168.2.6	1.1.1.1	0x19d0	Standard query (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:30.860474110 CEST	192.168.2.6	1.1.1.1	0xa49f	Standard query (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com	65	IN (0x0001)	false
Jul 5, 2024 00:49:33.471461058 CEST	192.168.2.6	1.1.1.1	0x2905	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:33.471651077 CEST	192.168.2.6	1.1.1.1	0x3a1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 5, 2024 00:49:35.228349924 CEST	192.168.2.6	1.1.1.1	0x6588	Standard query (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:35.228677988 CEST	192.168.2.6	1.1.1.1	0xd071	Standard query (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com	65	IN (0x0001)	false
Jul 5, 2024 00:49:46.526864052 CEST	192.168.2.6	1.1.1.1	0x6aba	Standard query (0)	ipapi.co	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:46.527012110 CEST	192.168.2.6	1.1.1.1	0xfee0	Standard query (0)	ipapi.co	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 5, 2024 00:49:30.200114012 CEST	1.1.1.1	192.168.2.6	0x2785	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.51	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:30.200114012 CEST	1.1.1.1	192.168.2.6	0x2785	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.113	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:30.200114012 CEST	1.1.1.1	192.168.2.6	0x2785	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.7	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:30.200114012 CEST	1.1.1.1	192.168.2.6	0x2785	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.56	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:30.902726889 CEST	1.1.1.1	192.168.2.6	0x19d0	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.51	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:30.902726889 CEST	1.1.1.1	192.168.2.6	0x19d0	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.56	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:30.902726889 CEST	1.1.1.1	192.168.2.6	0x19d0	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.7	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:30.902726889 CEST	1.1.1.1	192.168.2.6	0x19d0	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.113	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:33.652834892 CEST	1.1.1.1	192.168.2.6	0x3a1	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 5, 2024 00:49:33.653043032 CEST	1.1.1.1	192.168.2.6	0x2905	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:35.258965015 CEST	1.1.1.1	192.168.2.6	0x6588	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.113	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:35.258965015 CEST	1.1.1.1	192.168.2.6	0x6588	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.56	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:35.258965015 CEST	1.1.1.1	192.168.2.6	0x6588	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.7	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:35.258965015 CEST	1.1.1.1	192.168.2.6	0x6588	No error (0)	helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com		18.65.39.51	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:44.828771114 CEST	1.1.1.1	192.168.2.6	0x21bf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:49:44.828771114 CEST	1.1.1.1	192.168.2.6	0x21bf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:46.533898115 CEST	1.1.1.1	192.168.2.6	0x6aba	No error (0)	ipapi.co		104.26.8.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:46.533898115 CEST	1.1.1.1	192.168.2.6	0x6aba	No error (0)	ipapi.co		172.67.69.226	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:46.533898115 CEST	1.1.1.1	192.168.2.6	0x6aba	No error (0)	ipapi.co		104.26.9.44	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:49:46.535290003 CEST	1.1.1.1	192.168.2.6	0xfee0	No error (0)	ipapi.co			65	IN (0x0001)	false
Jul 5, 2024 00:50:02.731998920 CEST	1.1.1.1	192.168.2.6	0x9773	No error (0)	windowsupdatebg.s.llnwi.net		87.248.204.0	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:50:42.503226042 CEST	1.1.1.1	192.168.2.6	0x9cd0	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:50:42.503226042 CEST	1.1.1.1	192.168.2.6	0x9cd0	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com

https:

ipapi.co

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	18.65.39.51	80	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 5, 2024 00:49:30.206046104 CEST	493	OUT	GET /index.html HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 5, 2024 00:49:30.851836920 CEST	657	IN	HTTP/1.1 301 Moved Permanently Server: CloudFront Date: Thu, 04 Jul 2024 22:49:30 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Location: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html X-Cache: Redirect from cloudfront Via: 1.1 d0b402ca7e5fc6514bdd05f23e206b58.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: _h5JkjWxgdG1ZrKNMeyBKsVIxdMb_9gowIT_gJ5rO1RjNwiki4eJzg== Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 43 6c 6f 75 64 46 72 6f 6e 74 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>CloudFront</center></body></html>
Jul 5, 2024 00:50:15.870143890 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49709	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:19 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 37 7a 66 43 4b 41 32 50 46 45 69 59 66 47 6e 52 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 63 32 30 66 63 62 30 65 31 66 30 31 61 37 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 7zfCKA2PFEiYfGnR.1Context: 9c20fcb0e1f01a7c
2024-07-04 22:49:19 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:49:19 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 37 7a 66 43 4b 41 32 50 46 45 69 59 66 47 6e 52 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 63 32 30 66 63 62 30 65 31 66 30 31 61 37 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: 7zfCKA2PFEiYfGnR.2Context: 9c20fcb0e1f01a7c<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:49:19 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 37 7a 66 43 4b 41 32 50 46 45 69 59 66 47 6e 52 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 63 32 30 66 63 62 30 65 31 66 30 31 61 37 63 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: 7zfCKA2PFEiYfGnR.3Context: 9c20fcb0e1f01a7c
2024-07-04 22:49:20 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:49:20 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 64 72 4b 79 78 43 51 51 38 6b 69 52 59 59 70 4b 4d 38 73 4e 32 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: drKyxCQQ8kiRYYpKM8sN2g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49710	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:27 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 56 65 51 6d 79 33 68 6c 30 55 36 58 74 4f 74 6d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 66 32 30 31 62 35 34 65 35 38 66 34 66 65 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: VeQmy3hl0U6XtOtm.1Context: 8f201b54e58f4fea
2024-07-04 22:49:27 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:49:27 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 56 65 51 6d 79 33 68 6c 30 55 36 58 74 4f 74 6d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 66 32 30 31 62 35 34 65 35 38 66 34 66 65 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: VeQmy3hl0U6XtOtm.2Context: 8f201b54e58f4fea<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:49:27 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 56 65 51 6d 79 33 68 6c 30 55 36 58 74 4f 74 6d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 66 32 30 31 62 35 34 65 35 38 66 34 66 65 61 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: VeQmy3hl0U6XtOtm.3Context: 8f201b54e58f4fea
2024-07-04 22:49:28 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:49:28 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 56 42 4a 79 73 75 32 77 32 45 6d 4d 78 68 6d 50 64 4d 37 2f 69 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: VBJysu2w2EmMxhmPdM7/iQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49718	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:31 UTC	721	OUT	GET /index.html HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:31 UTC	545	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1885 Connection: close Date: Thu, 04 Jul 2024 22:49:31 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "0a13749dfa99c24f040c7f444df96dfd" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 490623df85c571a18ba7da1511cc969e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 7R0oNCmEL6J_sieuaPVVVXer9Fm_oFL_fe4GPife5Tf-X5KMxX21NQ==
2024-07-04 22:49:31 UTC	1885	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 21 2d 2d 0d 0a 20 20 20 20 49 66 20 79 6f 75 20 61 72 65 20 73 65 72 76 69 6e 67 20 79 6f 75 72 20 77 65 62 20 61 70 70 20 69 6e 20 61 20 70 61 74 68 20 6f 74 68 65 72 20 74 68 61 6e 20 74 68 65 20 72 6f 6f 74 2c 20 63 68 61 6e 67 65 20 74 68 65 0d 0a 20 20 20 20 68 72 65 66 20 76 61 6c 75 65 20 62 65 6c 6f 77 20 74 6f 20 72 65 66 6c 65 63 74 20 74 68 65 20 62 61 73 65 20 70 61 74 68 20 79 6f 75 20 61 72 65 20 73 65 72 76 69 6e 67 20 66 72 6f 6d 2e 0d 0a 0d 0a 20 20 20 20 54 68 65 20 70 61 74 68 20 70 72 6f 76 69 64 65 64 20 62 65 6c 6f 77 20 68 61 73 20 74 6f 20 73 74 61 72 74 20 61 6e 64 20 65 6e 64 20 77 69 74 68 20 61 20 73 6c 61 73 68 20 22 2f Data Ascii: <!DOCTYPE html><html><head> ... If you are serving your web app in a path other than the root, change the href value below to reflect the base path you are serving from. The path provided below has to start and end with a slash "/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49721	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:33 UTC	641	OUT	GET /flutter.js HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:33 UTC	559	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 14623 Connection: close Date: Thu, 04 Jul 2024 22:49:33 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "6b515e434cea20006b3ef1726d2c8894" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 acee7e60faaea7b7699fe033930a0164.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 6IF4iu6VkyZSzuLqY4EOGfM6cWb_cvA8cifdnOfjBydsvmgKuD_lYw==
2024-07-04 22:49:33 UTC	14623	IN	Data Raw: 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 54 68 65 20 46 6c 75 74 74 65 72 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 20 55 73 65 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 61 20 42 53 44 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 74 68 61 74 20 63 61 6e 20 62 65 0d 0a 2f 2f 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 2e 0d 0a 0d 0a 69 66 20 28 21 5f 66 6c 75 74 74 65 72 29 20 7b 0d 0a 20 20 76 61 72 20 5f 66 6c 75 74 74 65 72 20 3d 20 7b 7d 3b 0d 0a 7d 0d 0a 5f 66 6c 75 74 74 65 72 2e 6c 6f 61 64 65 72 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a Data Ascii: // Copyright 2014 The Flutter Authors. All rights reserved.// Use of this source code is governed by a BSD-style license that can be// found in the LICENSE file.if (!_flutter) { var _flutter = {};}_flutter.loader = null;(function () {

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49722	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:33 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 49 4d 38 4f 68 76 46 6c 69 30 71 57 72 51 73 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 36 36 30 35 65 66 64 61 31 33 39 32 38 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: IM8OhvFli0qWrQs6.1Context: 46605efda13928b
2024-07-04 22:49:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:49:33 UTC	1063	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 30 0d 0a 4d 53 2d 43 56 3a 20 49 4d 38 4f 68 76 46 6c 69 30 71 57 72 51 73 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 36 36 30 35 65 66 64 61 31 33 39 32 38 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 78 Data Ascii: ATH 2 CON\DEVICE 1040MS-CV: IM8OhvFli0qWrQs6.2Context: 46605efda13928b<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1x
2024-07-04 22:49:33 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 49 4d 38 4f 68 76 46 6c 69 30 71 57 72 51 73 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 36 36 30 35 65 66 64 61 31 33 39 32 38 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: IM8OhvFli0qWrQs6.3Context: 46605efda13928b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-04 22:49:33 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:49:33 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4a 70 42 77 37 76 38 36 50 30 4b 63 65 42 67 68 51 35 63 48 35 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: JpBw7v86P0KceBghQ5cH5Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49723	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:34 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 53 4b 70 30 2b 35 6e 41 4c 30 65 49 43 68 67 58 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 65 31 65 31 35 63 36 35 38 66 32 62 36 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: SKp0+5nAL0eIChgX.1Context: 31e1e15c658f2b65
2024-07-04 22:49:34 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:49:34 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 53 4b 70 30 2b 35 6e 41 4c 30 65 49 43 68 67 58 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 65 31 65 31 35 63 36 35 38 66 32 62 36 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: SKp0+5nAL0eIChgX.2Context: 31e1e15c658f2b65<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:49:34 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 53 4b 70 30 2b 35 6e 41 4c 30 65 49 43 68 67 58 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 65 31 65 31 35 63 36 35 38 66 32 62 36 35 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: SKp0+5nAL0eIChgX.3Context: 31e1e15c658f2b65
2024-07-04 22:49:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:49:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4a 53 78 68 42 62 70 39 30 6b 4f 61 43 78 71 6a 76 46 39 47 66 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: JSxhBbp90kOaCxqjvF9GfQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49727	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:34 UTC	702	OUT	GET /favicon.png HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:34 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 14026 Connection: close Date: Thu, 04 Jul 2024 22:49:34 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "7a2dbfdec08b3a38d668b605d78df964" X-Cache: Miss from cloudfront Via: 1.1 acee7e60faaea7b7699fe033930a0164.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xf5ip-Bd-DbKSHJVzCzIZX13mjvxvMuLLoNxtXAlZJNNnJKvx7VNKw==
2024-07-04 22:49:34 UTC	8949	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 e0 08 06 00 00 00 7d d4 be 95 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 35 e1 49 44 41 54 78 da ed dd 77 9c 5c 75 d9 fe f1 eb 3e 33 b3 9b 84 b4 4d b2 9b cd 26 9b 25 14 a5 0a 52 54 da 43 8b 48 13 44 24 20 55 22 45 04 05 7d e4 81 c7 9f 3e 2e a2 52 04 43 0d 64 49 02 84 1e c0 86 82 02 82 82 60 03 51 a4 0a 04 12 4a ca 26 d9 d4 2d 33 73 ce fd fb 63 17 09 90 64 db cc ec cc 9c cf fb f5 ca 8b 4d 61 77 e6 3a df 99 6b ee 73 ce 9c 31 01 c8 bb 6d e7 7a c5 8a 84 6a a2 a4 6a 3d ab b1 66 1a e9 d2 48 93 46 9a Data Ascii: PNGIHDR}gAMAa cHRMz&u0`:pQ<bKGD5IDATxw\u>3M&%RTCHD$ U"E}>.RCdI`QJ&-3scdMaw:ks1mzjj=fHF
2024-07-04 22:49:34 UTC	5077	IN	Data Raw: 00 c0 7a fd 75 6d 63 cd a2 9c 17 b0 24 99 b1 1b 1a 00 80 0d e8 55 47 f6 aa 80 03 b3 5f 90 2f 00 00 1f 16 79 f4 cb de fc fb 5e bd bf a2 f5 c2 9a 67 06 7d 7b f1 0b 92 6d 43 d4 88 0d ce 7c e8 5f 76 e4 87 18 30 d7 bf d2 17 d5 3e 97 b7 09 b8 eb 7f 99 4b d4 00 00 ac f3 5a d3 74 47 af db b4 d7 3f 24 88 6e e5 35 2d 00 00 ef 55 a3 82 e8 ce bc 17 70 c7 0f c6 be 26 f9 df c8 1b 00 00 49 d2 93 ed 3f a8 7d 3d ef 05 2c 49 66 c1 1d e4 0d 00 80 e4 52 9f 3a b1 4f 05 1c a4 fd 4e 49 7c 20 26 00 20 ee b2 49 f9 3d 7d f9 1f fb 74 95 f9 b5 3f ae 59 34 e8 7f 17 3f 2a 69 32 d9 03 d8 f8 78 c0 29 23 28 6b 0f af bd 68 ec e2 82 4d c0 92 24 33 76 43 03 00 e2 cd d4 e7 2e ec 73 01 b7 57 24 ee 91 d4 46 fa 00 80 98 6a 6f 0f 53 7d be 40 55 df 3f e8 b4 71 f4 2a 7d 7b f1 af dc 75 14 db 00 e5 Data Ascii: zumc$UG_/y^g}{mC\|_v0>KZtG?$n5-Up&I?}=,IfR:ONI\| & I=}t?Y4?i2x)#(khM$3vC.sW$FjoS}@U?q}{u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49728	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:34 UTC	600	OUT	GET /flutter_service_worker.js?v=1157178464 HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:34 UTC	558	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 9161 Connection: close Date: Thu, 04 Jul 2024 22:49:34 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "de0b30e26243da6a9cb202cd20b4e88f" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 19f569e782b5b925c41d8bc4e292cc7a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: a0Cj4C2WCMYanSQ--yrRHAFjOreLl05pEhV28Tz8LLyr4Cj1l7jEFg==
2024-07-04 22:49:34 UTC	9161	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 63 6f 6e 73 74 20 4d 41 4e 49 46 45 53 54 20 3d 20 27 66 6c 75 74 74 65 72 2d 61 70 70 2d 6d 61 6e 69 66 65 73 74 27 3b 0d 0a 63 6f 6e 73 74 20 54 45 4d 50 20 3d 20 27 66 6c 75 74 74 65 72 2d 74 65 6d 70 2d 63 61 63 68 65 27 3b 0d 0a 63 6f 6e 73 74 20 43 41 43 48 45 5f 4e 41 4d 45 20 3d 20 27 66 6c 75 74 74 65 72 2d 61 70 70 2d 63 61 63 68 65 27 3b 0d 0a 0d 0a 63 6f 6e 73 74 20 52 45 53 4f 55 52 43 45 53 20 3d 20 7b 22 61 73 73 65 74 73 2f 41 73 73 65 74 4d 61 6e 69 66 65 73 74 2e 62 69 6e 22 3a 20 22 38 62 31 63 66 32 31 61 31 34 31 65 32 38 32 63 63 39 66 63 63 31 39 61 64 36 62 32 30 32 38 62 22 2c 0a 22 61 73 73 65 74 73 2f 41 73 73 65 74 4d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3a 20 22 66 66 63 63 65 39 Data Ascii: 'use strict';const MANIFEST = 'flutter-app-manifest';const TEMP = 'flutter-temp-cache';const CACHE_NAME = 'flutter-app-cache';const RESOURCES = {"assets/AssetManifest.bin": "8b1cf21a141e282cc9fcc19ad6b2028b","assets/AssetManifest.json": "ffcce9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49726	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:34 UTC	643	OUT	GET /manifest.json HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:34 UTC	528	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 945 Connection: close Date: Thu, 04 Jul 2024 22:49:34 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "b0169c8e4a2b589e3c0d226aa86f67cb" X-Cache: Miss from cloudfront Via: 1.1 29d6db1b5ecb170f22487453430df556.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: QXU1rMPiLrKkiEBetLQxsr5000TsAZUa1ooBYEkMkhFRCziH5jS4JA==
2024-07-04 22:49:34 UTC	945	IN	Data Raw: 7b 0d 0a 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 72 65 6c 65 61 73 65 22 2c 0d 0a 20 20 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 72 65 6c 65 61 73 65 22 2c 0d 0a 20 20 20 20 22 73 74 61 72 74 5f 75 72 6c 22 3a 20 22 2e 22 2c 0d 0a 20 20 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 0d 0a 20 20 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 20 22 23 30 31 37 35 43 32 22 2c 0d 0a 20 20 20 20 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 20 22 23 30 31 37 35 43 32 22 2c 0d 0a 20 20 20 20 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 41 20 6e 65 77 20 46 6c 75 74 74 65 72 20 70 72 6f 6a 65 63 74 2e 22 2c 0d 0a 20 20 20 20 22 6f 72 69 65 6e 74 61 74 69 6f 6e 22 3a 20 22 70 6f 72 74 72 61 69 74 2d 70 72 69 Data Ascii: { "name": "release", "short_name": "release", "start_url": ".", "display": "standalone", "background_color": "#0175C2", "theme_color": "#0175C2", "description": "A new Flutter project.", "orientation": "portrait-pri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49725	23.211.4.90	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 22:49:34 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=235163 Date: Thu, 04 Jul 2024 22:49:34 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49729	23.211.4.90	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 22:49:35 UTC	535	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=235280 Date: Thu, 04 Jul 2024 22:49:35 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-04 22:49:35 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49732	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:35 UTC	709	OUT	GET /icons/Icon-192.png HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:36 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5292 Connection: close Date: Thu, 04 Jul 2024 22:49:36 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "ac9a721a12bbc803b44f645561ecb1e1" X-Cache: Miss from cloudfront Via: 1.1 97eaba44803576cf9f5d9993fc05ccee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: klo6iaZMRpBI94qIBBVeJa6k8AwsNSdSG-va8DgM6Cns9e3jrmqaRQ==
2024-07-04 22:49:36 UTC	5292	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 02 00 00 00 dd be fb 50 00 00 0c a8 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da d5 99 5b 76 1b 3d 0e 84 df b9 8a 59 02 49 90 04 b9 1c 5e cf 99 1d cc f2 e7 43 ab 23 cb 8e 93 3f 8e e7 65 24 5b 2d 51 bc 35 50 28 14 28 b7 ff f3 ef e3 fe c5 23 49 88 2e 65 ad a5 95 e2 79 a4 96 5a ec bc a9 fe f1 78 5c 83 4f d7 eb f5 98 f7 57 7c 7e d7 ee 9e 5f 44 9a 84 ab 3c 3e 96 7d f7 ef b4 e7 b7 01 9a ee f6 f1 be dd e9 3d 53 ac f7 44 e1 39 f1 f5 10 5b 39 be 6d a5 de 13 49 7c b4 87 fb b3 6b f7 b8 9e 5e 6e e7 fe 8f f3 9e f6 9e fc e3 e7 a4 18 63 65 e6 93 e8 e2 96 20 9e d7 6a ab c8 e3 bf f3 1f ae 57 a5 93 97 ca fb 28 99 d7 24 f9 73 db b9 e7 db 0f c6 7b be fb 60 3b Data Ascii: PNGIHDRPzTXtRaw profile type exifx[v=YI^C#?e$[-Q5P((#I.eyZx\OW\|~_D<>}=SD9[9mI\|k^nce jW($s{`;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49730	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:35 UTC	580	OUT	GET /main.dart.js HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:36 UTC	561	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2363539 Connection: close Date: Thu, 04 Jul 2024 22:49:36 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "8311e439dc154163771ac561c8cfcddd" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c337a55bb25a3540411fbbf6c8ad1b46.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bsKJyA2qYM8Db_oP5tRIVuUGjlgJtMf0juKlJ3ug5xQ20xdhVRuSSw==
2024-07-04 22:49:36 UTC	15823	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 64 61 72 74 50 72 6f 67 72 61 6d 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 6f 70 79 50 72 6f 70 65 72 74 69 65 73 28 61 2c 62 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 29 0a 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 71 3d 73 5b 72 5d 0a 62 5b 71 5d 3d 61 5b 71 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 69 78 69 6e 50 72 6f 70 65 72 74 69 65 73 48 61 72 64 28 61 2c 62 29 7b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 29 0a 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 71 3d 73 5b 72 5d 0a 69 66 28 21 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 71 29 29 62 5b 71 5d 3d 61 5b 71 5d 7d 7d 66 75 Data Ascii: (function dartProgram(){function copyProperties(a,b){var s=Object.keys(a)for(var r=0;r<s.length;r++){var q=s[r]b[q]=a[q]}}function mixinPropertiesHard(a,b){var s=Object.keys(a)for(var r=0;r<s.length;r++){var q=s[r]if(!b.hasOwnProperty(q))b[q]=a[q]}}fu
2024-07-04 22:49:36 UTC	16384	IN	Data Raw: 74 75 72 6e 20 6e 65 77 20 41 2e 78 39 28 62 2c 63 2c 64 2c 65 2c 66 2c 6d 2c 6b 2c 61 30 2c 67 2c 68 2c 6a 2c 71 2c 61 31 2c 6f 2c 70 2c 72 2c 61 2c 6e 2c 73 2c 69 2c 6c 29 7d 2c 0a 61 72 6d 28 61 2c 62 29 7b 76 61 72 20 73 3d 74 2e 65 2e 61 28 7b 7d 29 0a 69 66 28 61 21 3d 6e 75 6c 6c 29 73 2e 77 65 69 67 68 74 3d 24 2e 61 41 43 28 29 5b 61 2e 61 5d 0a 69 66 28 62 21 3d 6e 75 6c 6c 29 73 2e 73 6c 61 6e 74 3d 24 2e 61 41 42 28 29 5b 62 2e 61 5d 0a 72 65 74 75 72 6e 20 73 7d 2c 0a 61 71 4b 28 61 2c 62 29 7b 76 61 72 20 73 3d 41 2e 61 28 5b 5d 2c 74 2e 73 29 0a 69 66 28 61 21 3d 6e 75 6c 6c 29 73 2e 70 75 73 68 28 61 29 0a 69 66 28 62 21 3d 6e 75 6c 6c 26 26 21 42 2e 63 2e 4f 58 28 62 2c 6e 65 77 20 41 2e 61 6d 36 28 61 29 29 29 42 2e 63 2e 4f 28 73 2c 62 Data Ascii: turn new A.x9(b,c,d,e,f,m,k,a0,g,h,j,q,a1,o,p,r,a,n,s,i,l)},arm(a,b){var s=t.e.a({})if(a!=null)s.weight=$.aAC()[a.a]if(b!=null)s.slant=$.aAB()[b.a]return s},aqK(a,b){var s=A.a([],t.s)if(a!=null)s.push(a)if(b!=null&&!B.c.OX(b,new A.am6(a)))B.c.O(s,b
2024-07-04 22:49:36 UTC	16384	IN	Data Raw: 6c 29 73 3d 72 2e 61 3d 3d 3d 61 0a 65 6c 73 65 20 73 3d 21 31 0a 69 66 28 73 29 7b 72 2e 74 6f 53 74 72 69 6e 67 0a 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 24 2e 41 4b 3d 6e 65 77 20 41 2e 61 39 57 28 61 2c 41 2e 61 28 5b 5d 2c 74 2e 55 70 29 2c 24 2c 24 2c 24 2c 6e 75 6c 6c 29 7d 2c 0a 61 71 65 28 29 7b 76 61 72 20 73 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 29 2c 72 3d 6e 65 77 20 44 61 74 61 56 69 65 77 28 6e 65 77 20 41 72 72 61 79 42 75 66 66 65 72 28 38 29 29 0a 72 65 74 75 72 6e 20 6e 65 77 20 41 2e 61 63 49 28 6e 65 77 20 41 2e 4f 39 28 73 2c 30 29 2c 72 2c 41 2e 63 5a 28 72 2e 62 75 66 66 65 72 2c 30 2c 6e 75 6c 6c 29 29 7d 2c 0a 61 4c 64 28 61 2c 62 29 7b 76 61 72 20 73 2c 72 2c 71 2c 70 2c 6f 2c 6e 2c 6d 2c 6c 2c 6b 2c 6a 2c Data Ascii: l)s=r.a===aelse s=!1if(s){r.toStringreturn r}return $.AK=new A.a9W(a,A.a([],t.Up),$,$,$,null)},aqe(){var s=new Uint8Array(0),r=new DataView(new ArrayBuffer(8))return new A.acI(new A.O9(s,0),r,A.cZ(r.buffer,0,null))},aLd(a,b){var s,r,q,p,o,n,m,l,k,j,
2024-07-04 22:49:36 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 32 34 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 61 3d 61 0a 74 68 69 73 2e 62 3d 62 0a 74 68 69 73 2e 63 3d 63 7d 2c 0a 61 32 35 3a 66 75 6e 63 74 69 6f 6e 20 61 32 35 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 61 3d 61 0a 74 68 69 73 2e 62 3d 62 0a 74 68 69 73 2e 63 3d 63 7d 2c 0a 61 32 36 3a 66 75 6e 63 74 69 6f 6e 20 61 32 36 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 61 3d 61 0a 74 68 69 73 2e 62 3d 62 0a 74 68 69 73 2e 63 3d 63 7d 2c 0a 61 5f 5f 3a 66 75 6e 63 74 69 6f 6e 20 61 5f 5f 28 29 7b 7d 2c 0a 48 4f 3a 66 75 6e 63 74 69 6f 6e 20 48 4f 28 61 2c 62 29 7b 74 68 69 73 2e 62 3d 61 0a 74 68 69 73 2e 63 3d 62 0a 74 68 69 73 2e 61 3d 6e 75 6c 6c 7d 2c 0a 48 50 3a 66 75 6e 63 74 69 6f 6e 20 48 50 28 61 29 7b 74 68 69 73 2e 61 3d 61 Data Ascii: function a24(a,b,c){this.a=athis.b=bthis.c=c},a25:function a25(a,b,c){this.a=athis.b=bthis.c=c},a26:function a26(a,b,c){this.a=athis.b=bthis.c=c},a__:function a__(){},HO:function HO(a,b){this.b=athis.c=bthis.a=null},HP:function HP(a){this.a=a
2024-07-04 22:49:36 UTC	16384	IN	Data Raw: 65 6e 67 74 68 2c 72 3d 30 3b 72 3c 73 3b 2b 2b 72 29 69 66 28 61 3d 3d 3d 24 2e 72 5f 5b 72 5d 29 72 65 74 75 72 6e 21 30 0a 72 65 74 75 72 6e 21 31 7d 2c 0a 66 53 28 61 2c 62 2c 63 2c 64 29 7b 41 2e 64 53 28 62 2c 22 73 74 61 72 74 22 29 0a 69 66 28 63 21 3d 6e 75 6c 6c 29 7b 41 2e 64 53 28 63 2c 22 65 6e 64 22 29 0a 69 66 28 62 3e 63 29 41 2e 57 28 41 2e 63 30 28 62 2c 30 2c 63 2c 22 73 74 61 72 74 22 2c 6e 75 6c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 41 2e 66 6b 28 61 2c 62 2c 63 2c 64 2e 69 28 22 66 6b 3c 30 3e 22 29 29 7d 2c 0a 6e 38 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 74 2e 45 65 2e 62 28 61 29 29 72 65 74 75 72 6e 20 6e 65 77 20 41 2e 6f 51 28 61 2c 62 2c 63 2e 69 28 22 40 3c 30 3e 22 29 2e 4c 28 64 29 2e 69 28 22 6f 51 3c 31 2c 32 3e 22 Data Ascii: ength,r=0;r<s;++r)if(a===$.r_[r])return!0return!1},fS(a,b,c,d){A.dS(b,"start")if(c!=null){A.dS(c,"end")if(b>c)A.W(A.c0(b,0,c,"start",null))}return new A.fk(a,b,c,d.i("fk<0>"))},n8(a,b,c,d){if(t.Ee.b(a))return new A.oQ(a,b,c.i("@<0>").L(d).i("oQ<1,2>"
2024-07-04 22:49:36 UTC	16384	IN	Data Raw: 2c 73 29 0a 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 66 28 74 68 69 73 29 5b 65 5d 28 67 28 74 68 69 73 29 2c 68 29 7d 7d 28 63 2c 72 2c 73 29 0a 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 66 28 74 68 69 73 29 5b 65 5d 28 67 28 74 68 69 73 29 2c 68 2c 69 29 7d 7d 28 63 2c 72 2c 73 29 0a 63 61 73 65 20 34 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 66 28 74 68 69 73 29 5b 65 5d 28 67 28 Data Ascii: ,s)case 2:return function(e,f,g){return function(h){return f(this)[e](g(this),h)}}(c,r,s)case 3:return function(e,f,g){return function(h,i){return f(this)[e](g(this),h,i)}}(c,r,s)case 4:return function(e,f,g){return function(h,i,j){return f(this)[e](g(
2024-07-04 22:49:36 UTC	16384	IN	Data Raw: 28 6a 3d 3d 3d 32 7c 7c 6a 3d 3d 3d 33 7c 7c 6a 3d 3d 3d 34 7c 7c 6a 3d 3d 3d 35 7c 7c 6b 3d 3d 3d 6f 29 29 69 66 28 21 28 6b 3d 3d 3d 6e 29 29 69 3d 21 31 0a 65 6c 73 65 20 69 3d 21 30 0a 65 6c 73 65 20 69 3d 21 30 0a 69 66 28 21 69 29 6d 2b 3d 22 20 65 78 74 65 6e 64 73 20 22 2b 41 2e 68 31 28 6b 2c 61 34 29 7d 6d 2b 3d 22 3e 22 7d 65 6c 73 65 7b 6d 3d 22 22 0a 72 3d 6e 75 6c 6c 7d 6f 3d 61 33 2e 79 0a 68 3d 61 33 2e 7a 0a 67 3d 68 2e 61 0a 66 3d 67 2e 6c 65 6e 67 74 68 0a 65 3d 68 2e 62 0a 64 3d 65 2e 6c 65 6e 67 74 68 0a 63 3d 68 2e 63 0a 62 3d 63 2e 6c 65 6e 67 74 68 0a 61 3d 41 2e 68 31 28 6f 2c 61 34 29 0a 66 6f 72 28 61 30 3d 22 22 2c 61 31 3d 22 22 2c 70 3d 30 3b 70 3c 66 3b 2b 2b 70 2c 61 31 3d 61 32 29 61 30 2b 3d 61 31 2b 41 2e 68 31 28 67 5b Data Ascii: (j===2\|\|j===3\|\|j===4\|\|j===5\|\|k===o))if(!(k===n))i=!1else i=!0else i=!0if(!i)m+=" extends "+A.h1(k,a4)}m+=">"}else{m=""r=null}o=a3.yh=a3.zg=h.af=g.lengthe=h.bd=e.lengthc=h.cb=c.lengtha=A.h1(o,a4)for(a0="",a1="",p=0;p<f;++p,a1=a2)a0+=a1+A.h1(g[
2024-07-04 22:49:36 UTC	2351	IN	Data Raw: 73 2c 73 2c 73 2c 72 29 0a 71 2e 48 43 28 30 2c 61 29 0a 71 2e 49 39 28 29 0a 72 65 74 75 72 6e 20 6e 65 77 20 41 2e 6b 41 28 71 2c 72 2e 69 28 22 6b 41 3c 31 3e 22 29 29 7d 2c 0a 61 50 68 28 61 29 7b 41 2e 69 69 28 61 2c 22 73 74 72 65 61 6d 22 2c 74 2e 4b 29 0a 72 65 74 75 72 6e 20 6e 65 77 20 41 2e 55 4e 28 29 7d 2c 0a 61 76 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 41 2e 43 64 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 61 2e 69 28 22 43 64 3c 30 3e 22 29 29 7d 2c 0a 58 41 28 61 29 7b 76 61 72 20 73 2c 72 2c 71 0a 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 0a 74 72 79 7b 61 2e 24 30 28 29 7d 63 61 74 63 68 28 71 29 7b 73 3d 41 2e 61 6f 28 71 29 0a 72 3d 41 2e 61 52 28 71 29 0a 41 2e 47 62 28 73 2c 72 29 7d 7d 2c 0a 61 49 5f 28 61 2c 62 2c 63 2c 64 Data Ascii: s,s,s,r)q.HC(0,a)q.I9()return new A.kA(q,r.i("kA<1>"))},aPh(a){A.ii(a,"stream",t.K)return new A.UN()},avo(a){return new A.Cd(null,null,a.i("Cd<0>"))},XA(a){var s,r,qif(a==null)returntry{a.$0()}catch(q){s=A.ao(q)r=A.aR(q)A.Gb(s,r)}},aI_(a,b,c,d
2024-07-04 22:49:36 UTC	9000	IN	Data Raw: 3d 65 0a 5f 2e 66 3d 66 7d 2c 0a 61 32 66 3a 66 75 6e 63 74 69 6f 6e 20 61 32 66 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 76 61 72 20 5f 3d 74 68 69 73 0a 5f 2e 61 3d 61 0a 5f 2e 62 3d 62 0a 5f 2e 63 3d 63 0a 5f 2e 64 3d 64 0a 5f 2e 65 3d 65 0a 5f 2e 66 3d 66 0a 5f 2e 72 3d 67 0a 5f 2e 77 3d 68 7d 2c 0a 61 32 62 3a 66 75 6e 63 74 69 6f 6e 20 61 32 62 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 5f 3d 74 68 69 73 0a 5f 2e 61 3d 61 0a 5f 2e 62 3d 62 0a 5f 2e 63 3d 63 0a 5f 2e 64 3d 64 7d 2c 0a 61 32 61 3a 66 75 6e 63 74 69 6f 6e 20 61 32 61 28 61 29 7b 74 68 69 73 2e 61 3d 61 7d 2c 0a 43 71 3a 66 75 6e 63 74 69 6f 6e 20 43 71 28 29 7b 7d 2c 0a 62 70 3a 66 75 6e 63 74 69 6f 6e 20 62 70 28 61 2c 62 29 7b 74 68 69 73 2e 61 3d 61 0a 74 68 69 73 2e 24 Data Ascii: =e_.f=f},a2f:function a2f(a,b,c,d,e,f,g,h){var _=this_.a=a_.b=b_.c=c_.d=d_.e=e_.f=f_.r=g_.w=h},a2b:function a2b(a,b,c,d){var _=this_.a=a_.b=b_.c=c_.d=d},a2a:function a2a(a){this.a=a},Cq:function Cq(){},bp:function bp(a,b){this.a=athis.$
2024-07-04 22:49:36 UTC	16384	IN	Data Raw: 3d 6a 2b 31 26 33 0a 69 66 28 6a 3d 3d 3d 30 29 7b 6f 3d 65 2b 31 0a 64 5b 65 5d 3d 6b 3e 3e 3e 31 36 26 32 35 35 0a 65 3d 6f 2b 31 0a 64 5b 6f 5d 3d 6b 3e 3e 3e 38 26 32 35 35 0a 6f 3d 65 2b 31 0a 64 5b 65 5d 3d 6b 26 32 35 35 0a 65 3d 6f 0a 6b 3d 30 7d 63 6f 6e 74 69 6e 75 65 7d 65 6c 73 65 20 69 66 28 70 3d 3d 3d 2d 31 26 26 6a 3e 31 29 7b 69 66 28 72 3e 31 32 37 29 62 72 65 61 6b 0a 69 66 28 6a 3d 3d 3d 33 29 7b 69 66 28 28 6b 26 33 29 21 3d 3d 30 29 74 68 72 6f 77 20 41 2e 63 28 41 2e 63 39 28 6d 2c 61 2c 73 29 29 0a 64 5b 65 5d 3d 6b 3e 3e 3e 31 30 0a 64 5b 65 2b 31 5d 3d 6b 3e 3e 3e 32 7d 65 6c 73 65 7b 69 66 28 28 6b 26 31 35 29 21 3d 3d 30 29 74 68 72 6f 77 20 41 2e 63 28 41 2e 63 39 28 6d 2c 61 2c 73 29 29 0a 64 5b 65 5d 3d 6b 3e 3e 3e 34 7d 6e Data Ascii: =j+1&3if(j===0){o=e+1d[e]=k>>>16&255e=o+1d[o]=k>>>8&255o=e+1d[e]=k&255e=ok=0}continue}else if(p===-1&&j>1){if(r>127)breakif(j===3){if((k&3)!==0)throw A.c(A.c9(m,a,s))d[e]=k>>>10d[e+1]=k>>>2}else{if((k&15)!==0)throw A.c(A.c9(m,a,s))d[e]=k>>>4}n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49733	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:35 UTC	578	OUT	GET /index.html HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:36 UTC	545	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1885 Connection: close Date: Thu, 04 Jul 2024 22:49:36 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "0a13749dfa99c24f040c7f444df96dfd" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 e086ec27af2d3105a1a9fa7efa1be454.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: NxG1xGaxmfIzP6tUuXTjMi6uPy_8MY-4FQPrOSRs4HIXaoA52LpQ_w==
2024-07-04 22:49:36 UTC	1885	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 21 2d 2d 0d 0a 20 20 20 20 49 66 20 79 6f 75 20 61 72 65 20 73 65 72 76 69 6e 67 20 79 6f 75 72 20 77 65 62 20 61 70 70 20 69 6e 20 61 20 70 61 74 68 20 6f 74 68 65 72 20 74 68 61 6e 20 74 68 65 20 72 6f 6f 74 2c 20 63 68 61 6e 67 65 20 74 68 65 0d 0a 20 20 20 20 68 72 65 66 20 76 61 6c 75 65 20 62 65 6c 6f 77 20 74 6f 20 72 65 66 6c 65 63 74 20 74 68 65 20 62 61 73 65 20 70 61 74 68 20 79 6f 75 20 61 72 65 20 73 65 72 76 69 6e 67 20 66 72 6f 6d 2e 0d 0a 0d 0a 20 20 20 20 54 68 65 20 70 61 74 68 20 70 72 6f 76 69 64 65 64 20 62 65 6c 6f 77 20 68 61 73 20 74 6f 20 73 74 61 72 74 20 61 6e 64 20 65 6e 64 20 77 69 74 68 20 61 20 73 6c 61 73 68 20 22 2f Data Ascii: <!DOCTYPE html><html><head> ... If you are serving your web app in a path other than the root, change the href value below to reflect the base path you are serving from. The path provided below has to start and end with a slash "/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49731	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:35 UTC	593	OUT	GET /assets/AssetManifest.json HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:36 UTC	552	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 1167 Connection: close Date: Thu, 04 Jul 2024 22:49:36 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "ffcce918f60617fed6fdd5c787356cc5" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 a4583a5b47f0a64ec35be32f95ac1b46.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 4e88fyOuxGZGiZNtiwjTMgJbexggrXtnUcqXkuk0f4PRGt8g3BlJAg==
2024-07-04 22:49:36 UTC	1167	IN	Data Raw: 7b 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 61 76 61 74 61 72 2e 70 6e 67 22 3a 5b 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 61 76 61 74 61 72 2e 70 6e 67 22 5d 2c 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 62 61 6e 6e 65 72 2e 70 6e 67 22 3a 5b 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 62 61 6e 6e 65 72 2e 70 6e 67 22 5d 2c 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 62 67 2e 6a 70 67 22 3a 5b 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 62 67 2e 6a 70 67 22 5d 2c 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 63 61 70 74 63 68 61 2e 70 6e 67 22 3a 5b 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 63 61 70 74 63 68 61 2e 70 6e 67 22 5d 2c 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 66 62 2e 70 6e 67 22 3a 5b 22 61 73 73 65 74 73 2f 69 6d 61 67 Data Ascii: {"assets/images/avatar.png":["assets/images/avatar.png"],"assets/images/banner.png":["assets/images/banner.png"],"assets/images/bg.jpg":["assets/images/bg.jpg"],"assets/images/captcha.png":["assets/images/captcha.png"],"assets/images/fb.png":["assets/imag

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49734	18.65.39.113	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:35 UTC	403	OUT	GET /favicon.png HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:36 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 14026 Connection: close Date: Thu, 04 Jul 2024 22:49:36 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "7a2dbfdec08b3a38d668b605d78df964" X-Cache: Miss from cloudfront Via: 1.1 cf45fdeb5348a5648604f5f9e4f2b8a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: g7XSdJodpjHH6TZvXC0-UI1XFHtHzBS7N0QYobIBntiV9nO6HHYXIw==
2024-07-04 22:49:36 UTC	14026	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 e0 08 06 00 00 00 7d d4 be 95 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 35 e1 49 44 41 54 78 da ed dd 77 9c 5c 75 d9 fe f1 eb 3e 33 b3 9b 84 b4 4d b2 9b cd 26 9b 25 14 a5 0a 52 54 da 43 8b 48 13 44 24 20 55 22 45 04 05 7d e4 81 c7 9f 3e 2e a2 52 04 43 0d 64 49 02 84 1e c0 86 82 02 82 82 60 03 51 a4 0a 04 12 4a ca 26 d9 d4 2d 33 73 ce fd fb 63 17 09 90 64 db cc ec cc 9c cf fb f5 ca 8b 4d 61 77 e6 3a df 99 6b ee 73 ce 9c 31 01 c8 bb 6d e7 7a c5 8a 84 6a a2 a4 6a 3d ab b1 66 1a e9 d2 48 93 46 9a Data Ascii: PNGIHDR}gAMAa cHRMz&u0`:pQ<bKGD5IDATxw\u>3M&%RTCHD$ U"E}>.RCdI`QJ&-3scdMaw:ks1mzjj=fHF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49735	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:37 UTC	592	OUT	GET /assets/FontManifest.json HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/flutter_service_worker.js?v=1157178464 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:37 UTC	528	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 670 Connection: close Date: Thu, 04 Jul 2024 22:49:37 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "5a32d4310a6f5d9a6b651e75ba0d7372" X-Cache: Miss from cloudfront Via: 1.1 97eaba44803576cf9f5d9993fc05ccee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: bYYczJ5_SKYFFO_Ajr8vPbYjEwDrrKpH__AbLvg8qhZxhVDQp-vh-Q==
2024-07-04 22:49:37 UTC	670	IN	Data Raw: 5b 7b 22 66 61 6d 69 6c 79 22 3a 22 4d 61 74 65 72 69 61 6c 49 63 6f 6e 73 22 2c 22 66 6f 6e 74 73 22 3a 5b 7b 22 61 73 73 65 74 22 3a 22 66 6f 6e 74 73 2f 4d 61 74 65 72 69 61 6c 49 63 6f 6e 73 2d 52 65 67 75 6c 61 72 2e 6f 74 66 22 7d 5d 7d 2c 7b 22 66 61 6d 69 6c 79 22 3a 22 70 61 63 6b 61 67 65 73 2f 63 75 70 65 72 74 69 6e 6f 5f 69 63 6f 6e 73 2f 43 75 70 65 72 74 69 6e 6f 49 63 6f 6e 73 22 2c 22 66 6f 6e 74 73 22 3a 5b 7b 22 61 73 73 65 74 22 3a 22 70 61 63 6b 61 67 65 73 2f 63 75 70 65 72 74 69 6e 6f 5f 69 63 6f 6e 73 2f 61 73 73 65 74 73 2f 43 75 70 65 72 74 69 6e 6f 49 63 6f 6e 73 2e 74 74 66 22 7d 5d 7d 2c 7b 22 66 61 6d 69 6c 79 22 3a 22 70 61 63 6b 61 67 65 73 2f 66 6f 6e 74 5f 61 77 65 73 6f 6d 65 5f 66 6c 75 74 74 65 72 2f 46 6f 6e 74 41 77 Data Ascii: [{"family":"MaterialIcons","fonts":[{"asset":"fonts/MaterialIcons-Regular.otf"}]},{"family":"packages/cupertino_icons/CupertinoIcons","fonts":[{"asset":"packages/cupertino_icons/assets/CupertinoIcons.ttf"}]},{"family":"packages/font_awesome_flutter/FontAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49736	18.65.39.113	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:37 UTC	410	OUT	GET /icons/Icon-192.png HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:37 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5292 Connection: close Date: Thu, 04 Jul 2024 22:49:37 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "ac9a721a12bbc803b44f645561ecb1e1" X-Cache: Miss from cloudfront Via: 1.1 b0062bb33b961b53be87d688f2bdd9f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: g7WaZ_VLJaNu5IH_fJ1sOlerekBqYC4AIeCFCjv09_2nq2LOjumC9Q==
2024-07-04 22:49:37 UTC	5292	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 02 00 00 00 dd be fb 50 00 00 0c a8 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da d5 99 5b 76 1b 3d 0e 84 df b9 8a 59 02 49 90 04 b9 1c 5e cf 99 1d cc f2 e7 43 ab 23 cb 8e 93 3f 8e e7 65 24 5b 2d 51 bc 35 50 28 14 28 b7 ff f3 ef e3 fe c5 23 49 88 2e 65 ad a5 95 e2 79 a4 96 5a ec bc a9 fe f1 78 5c 83 4f d7 eb f5 98 f7 57 7c 7e d7 ee 9e 5f 44 9a 84 ab 3c 3e 96 7d f7 ef b4 e7 b7 01 9a ee f6 f1 be dd e9 3d 53 ac f7 44 e1 39 f1 f5 10 5b 39 be 6d a5 de 13 49 7c b4 87 fb b3 6b f7 b8 9e 5e 6e e7 fe 8f f3 9e f6 9e fc e3 e7 a4 18 63 65 e6 93 e8 e2 96 20 9e d7 6a ab c8 e3 bf f3 1f ae 57 a5 93 97 ca fb 28 99 d7 24 f9 73 db b9 e7 db 0f c6 7b be fb 60 3b Data Ascii: PNGIHDRPzTXtRaw profile type exifx[v=YI^C#?e$[-Q5P((#I.eyZx\OW\|~_D<>}=SD9[9mI\|k^nce jW($s{`;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49737	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:38 UTC	744	OUT	GET /main.dart.js HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "8311e439dc154163771ac561c8cfcddd" If-Modified-Since: Mon, 01 Jul 2024 18:55:45 GMT
2024-07-04 22:49:38 UTC	486	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 04 Jul 2024 22:49:38 GMT Server: AmazonS3 Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "8311e439dc154163771ac561c8cfcddd" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 490623df85c571a18ba7da1511cc969e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 0ctq0Qw6AiINqx32jwGziQZ0f6R4arBgB-zOTcf18Pmm9bGNihGc6g==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49740	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:39 UTC	665	OUT	GET /assets/fonts/MaterialIcons-Regular.otf HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:40 UTC	544	IN	HTTP/1.1 200 OK Content-Type: font/otf Content-Length: 7896 Connection: close Date: Thu, 04 Jul 2024 22:49:40 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "0f341cb48f96334dfc114136d18a1db6" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6750d77433312fa1bf305e9ae7af80ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 9txuhrg_HFmcF3Ppg4-bdtk5vsYTRIWrYl3ALBu80uMGcuxpqHH70g==
2024-07-04 22:49:40 UTC	7896	IN	Data Raw: 4f 54 54 4f 00 09 00 80 00 03 00 10 43 46 46 20 0a bf 81 ea 00 00 08 44 00 00 16 93 4f 53 2f 32 23 2e 59 c3 00 00 01 20 00 00 00 60 63 6d 61 70 81 3d 11 41 00 00 03 80 00 00 04 c4 68 65 61 64 1f 92 10 2c 00 00 00 e8 00 00 00 36 68 68 65 61 02 01 02 02 00 00 00 c4 00 00 00 24 68 6d 74 78 02 00 00 00 00 00 01 80 00 00 00 86 6d 61 78 70 00 42 50 00 00 00 00 9c 00 00 00 06 6e 61 6d 65 19 14 34 b0 00 00 02 08 00 00 01 76 70 6f 73 74 00 03 00 00 00 00 00 a4 00 00 00 20 00 00 50 00 00 42 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 02 00 00 00 00 00 02 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 00 00 01 00 00 0e ac b6 70 5f 0f 3c f5 00 03 02 00 00 00 00 Data Ascii: OTTOCFF DOS/2#.Y `cmap=Ahead,6hhea$hmtxmaxpBPname4vpost PBp_<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49743	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:39 UTC	684	OUT	GET /assets/packages/cupertino_icons/assets/CupertinoIcons.ttf HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:40 UTC	544	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 1236 Connection: close Date: Thu, 04 Jul 2024 22:49:40 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "57d849d738900cfd590e9adc7e208250" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 5de5e66003332bec09dff893114ac06c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: TftBiXtJ9IHUnXgXQBVlSZzhZJv47AOdW9pLIZKzEiVCYQsg0xc7QQ==
2024-07-04 22:49:40 UTC	1236	IN	Data Raw: 00 01 00 00 00 0c 00 80 00 03 00 40 4f 53 2f 32 fe 2e 12 4c 00 00 01 e0 00 00 00 60 63 6d 61 70 e9 c2 e6 84 00 00 01 94 00 00 00 4c 63 76 74 20 00 11 01 44 00 00 00 cc 00 00 00 04 67 61 73 70 ff ff 00 03 00 00 00 d0 00 00 00 08 67 6c 79 66 c0 4a 42 85 00 00 03 70 00 00 01 64 68 65 61 64 19 0e 2a 04 00 00 01 5c 00 00 00 36 68 68 65 61 03 e7 01 d3 00 00 01 38 00 00 00 24 68 6d 74 78 05 96 00 11 00 00 00 e4 00 00 00 14 6c 6f 63 61 00 c9 01 18 00 00 00 d8 00 00 00 0c 6d 61 78 70 00 5f 01 30 00 00 00 f8 00 00 00 20 6e 61 6d 65 14 34 2e 70 00 00 02 40 00 00 01 30 70 6f 73 74 ff dd 00 19 00 00 01 18 00 00 00 20 00 11 01 44 00 00 00 01 ff ff 00 02 00 00 00 00 00 43 00 66 00 86 00 b2 00 bb 00 11 01 b5 00 00 00 c0 00 00 00 d2 00 00 01 94 00 00 00 01 00 00 00 05 00 Data Ascii: @OS/2.L`cmapLcvt DgaspglyfJBpdhead*\6hhea8$hmtxlocamaxp_0 name4.p@0post DCf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49739	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:39 UTC	691	OUT	GET /assets/packages/font_awesome_flutter/lib/fonts/fa-brands-400.ttf HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:40 UTC	546	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 169196 Connection: close Date: Thu, 04 Jul 2024 22:49:40 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "d7791ef376c159f302b8ad90a748d2ab" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 97eaba44803576cf9f5d9993fc05ccee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: E37M9u8LwaGQoHe8y0BxOEu5RBEyndHwafyoIkBvAlAObTj8PgjVuw==
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 00 01 00 00 00 0a 00 80 00 03 00 20 4f 53 2f 32 3f 3c 57 53 00 00 01 48 00 00 00 60 63 6d 61 70 bf 33 a9 02 00 00 03 5c 00 00 05 54 67 6c 79 66 0a d0 3a 1a 00 00 17 54 00 02 7d 97 68 65 61 64 25 27 08 de 00 00 01 10 00 00 00 36 68 68 65 61 04 3d 04 06 00 00 00 ec 00 00 00 24 68 6d 74 78 88 fa 08 36 00 00 08 b0 00 00 07 50 6c 6f 63 61 02 09 33 a9 00 00 10 00 00 00 07 54 6d 61 78 70 01 fd 04 3a 00 00 00 ac 00 00 00 20 6e 61 6d 65 22 87 3b 17 00 00 01 a8 00 00 01 b4 70 6f 73 74 ff de 00 19 00 00 00 cc 00 00 00 20 00 01 00 00 01 d4 04 38 00 27 00 00 00 00 00 01 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ff db 00 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 01 c0 ff c0 00 00 02 80 ff f8 ff f1 02 82 00 Data Ascii: OS/2?<WSH`cmap3\Tglyf:T}head%'6hhea=$hmtx6Ploca3Tmaxp: name";post 8'
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 1a 32 0b 02 02 07 07 0c 01 a0 01 06 2d 38 38 3d 3f 38 38 2d 06 01 01 08 b6 09 0c 0c 09 09 09 a4 45 57 2e 2c 2b 24 07 0c 0c 0a 0a 03 fe 40 01 06 2d 38 38 3f 3d 38 38 2d 06 01 01 08 b6 09 0c 0c 09 09 09 a4 45 55 30 2c 2c 23 07 0c 0c 0b 09 03 00 08 00 0f ff cc 01 f1 01 c0 00 08 00 1a 00 35 00 3e 00 47 00 5d 00 7b 00 91 00 00 13 36 37 16 17 06 07 26 27 17 14 07 31 06 23 22 27 26 35 34 37 36 33 32 17 16 15 17 36 37 33 06 07 06 07 06 07 06 23 22 27 26 27 26 27 26 27 33 16 17 16 17 36 37 25 06 07 26 27 36 37 16 17 05 36 37 16 17 06 07 26 2f 01 06 07 26 27 26 27 36 37 14 17 16 17 36 37 36 35 16 17 06 07 31 07 06 27 36 37 16 17 16 37 36 37 36 37 36 37 36 27 26 27 26 27 36 37 16 17 16 07 06 07 31 21 26 27 26 37 36 37 16 17 06 07 06 17 16 17 16 37 16 17 06 27 31 ea Data Ascii: 2-88=?88-EW.,+$@-88?=88-EU0,,#5>G]{67&'1#"'&547632673#"'&'&'&'367%&'6767&/&'&'6767651'6776767676'&'&'671!&'&7677'1
2024-07-04 22:49:40 UTC	1765	IN	Data Raw: 36 37 34 2f 01 33 36 17 16 15 14 07 06 2b 01 35 17 23 35 33 36 17 06 07 06 23 25 23 35 33 15 17 34 27 31 26 27 06 07 06 07 14 17 16 17 32 37 23 06 07 06 23 26 27 33 36 35 27 36 37 16 17 23 e8 30 01 20 21 2f a7 ac 32 24 25 02 41 9a 49 16 0f 10 0d 0d 15 4f 53 53 55 36 02 01 10 10 19 01 67 90 90 38 20 20 3d 3b 24 23 01 23 23 3d 5c 1c 3e 06 10 11 11 3e 01 b9 01 ba 06 35 34 04 73 d3 15 35 34 12 13 01 fe 9d 19 18 36 45 15 65 01 09 08 18 17 0a 0a 53 ea 62 02 35 1a 0b 0a f1 23 23 b0 3a 28 27 02 01 26 26 3b 3d 24 25 01 57 11 08 09 02 40 06 07 1f 35 02 02 35 00 07 00 00 ff e0 01 c0 01 a0 00 07 00 12 00 18 00 2d 00 32 00 42 00 5e 00 00 37 06 27 23 35 33 36 17 27 26 27 31 26 2b 01 15 33 32 37 17 06 07 33 26 27 37 11 06 07 06 07 21 26 27 26 27 11 36 37 36 37 21 16 17 Data Ascii: 674/36+5#536#%#534'1&'27##&'365'67#0 !/2$%AIOSSU6g8 =;$###=\>>54s546EeSb5##:('&&;=$%W@55-2B^7'#536'&'1&+3273&'7!&'&'6767!
2024-07-04 22:49:40 UTC	8949	IN	Data Raw: 23 6f 06 06 04 04 06 06 04 04 16 05 05 05 05 04 01 05 05 01 04 19 05 05 05 05 05 01 05 05 01 05 97 02 05 05 02 02 01 05 05 01 02 18 02 01 06 06 01 02 02 01 07 07 01 02 19 03 06 06 03 03 07 07 03 19 03 06 06 03 04 07 07 04 f2 02 02 04 02 03 04 02 02 01 08 08 04 04 04 1b 02 02 03 02 03 01 02 03 01 03 04 03 02 03 03 03 01 03 6f 06 05 05 01 05 05 01 05 05 01 05 01 78 10 0e 06 27 26 37 1c 17 08 01 08 da 22 16 16 01 01 16 16 22 fe d8 07 01 03 03 01 07 07 04 04 01 06 36 06 04 04 01 05 06 01 04 04 01 06 1b 07 04 04 01 06 06 01 04 04 01 06 c0 41 45 04 04 45 41 03 01 01 03 2d 05 69 45 04 01 01 04 45 69 05 18 05 82 44 05 05 44 82 05 60 03 23 23 03 03 23 23 03 16 01 02 39 38 03 02 39 39 02 01 0b 03 44 42 03 03 42 44 03 02 03 46 44 04 04 44 46 03 6f 01 01 01 01 03 04 Data Ascii: #oox'&7""6AEEA-iEEiDD`####9899DBBDFDDFo
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 31 16 15 06 07 26 27 26 27 26 35 34 37 36 37 17 06 23 22 27 26 27 26 37 36 37 16 17 16 17 16 17 06 07 22 27 26 27 26 27 06 17 16 17 16 17 36 37 36 27 32 33 32 33 14 17 16 17 36 37 34 31 34 27 26 27 36 37 36 37 36 37 36 37 26 27 22 23 06 27 26 27 26 27 26 37 36 33 36 17 16 17 16 17 16 17 16 07 06 07 27 16 17 31 32 17 06 07 26 27 26 27 01 5b 06 0b 0b 08 09 01 01 0b 0b 15 13 12 11 0e 0e 08 05 02 01 02 06 0f 0f 13 12 13 18 0b 0b 01 0e 0f 0c 03 02 0a 0a 13 0e 0f 01 02 06 35 02 01 2d 2d 4a 59 33 32 01 01 0a 0b 23 23 03 0b 0a 0d 0c 01 01 09 09 0b 0b 05 01 22 21 aa 05 05 0a 0b 10 22 02 03 14 0a 01 06 0b 0a 09 08 01 02 0f 0f 10 0a 0b 01 09 0c 12 12 0e 0f 07 07 06 b8 2c 41 2d 22 21 11 0c 09 09 0e 07 0c 0d 0b 0b 01 03 09 09 07 07 0a 08 0a 0e 07 08 13 12 14 14 0b 0b Data Ascii: 1&'&'&54767#"'&'&767"'&'&'676'232367414'&'67676767&'"#'&'&'&7636'12&'&'[5--JY32##"!",A-"!
2024-07-04 22:49:40 UTC	1514	IN	Data Raw: 23 23 26 2d 2e 20 21 02 07 0d 0e 06 01 1a 19 25 21 17 18 06 0d 1f 1e 24 24 1d 0b 0b 32 2d 0f 1b 1b 19 01 22 24 52 2e 19 19 25 13 11 03 07 1c 22 22 1d 93 02 0e 09 0e 0e 10 06 06 15 0f 0f 05 0b 0d 12 0e 0a 04 03 07 07 13 19 1e 1e 16 17 01 00 02 00 0d ff d1 01 f2 01 af 00 83 00 ff 00 00 25 26 27 26 23 26 27 26 27 26 27 26 27 26 37 36 37 36 37 36 37 36 37 36 27 26 27 22 07 22 07 34 27 26 27 26 27 26 27 26 23 22 07 06 07 06 07 06 07 06 15 22 27 26 23 06 07 06 17 16 17 16 17 16 17 16 17 16 17 16 07 06 07 06 07 06 07 06 07 06 17 16 17 16 17 16 17 16 17 16 17 16 17 16 37 32 17 16 17 16 17 16 17 36 37 36 37 30 31 36 37 36 33 32 31 16 37 36 37 36 37 36 37 36 37 36 37 36 37 35 36 27 07 06 07 31 06 07 06 15 14 07 06 23 26 07 06 07 06 07 06 07 26 27 26 27 26 27 26 07 Data Ascii: ##&-. !%!$$2-"$R.%""%&'&#&'&'&'&'&7676767676'&'""4'&'&'&'&#""'&#72676701676321767676767676756'1#&&'&'&'&
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 14 01 02 03 03 06 01 02 03 03 05 05 02 02 05 03 05 0c 02 02 0c 05 03 05 02 02 04 06 03 03 01 02 06 03 03 02 01 00 02 00 20 ff e0 01 d3 01 a9 00 2c 00 3c 00 00 01 06 07 26 23 06 07 06 07 16 17 16 17 36 37 36 37 26 27 06 07 16 17 06 07 06 07 22 27 36 37 36 37 36 37 36 37 36 37 36 37 36 27 26 07 01 26 27 31 26 35 36 37 36 37 32 17 06 07 06 07 01 c8 2b 48 2f 36 58 3b 3b 02 02 3b 3b 58 58 3b 3b 02 01 3a 0a 07 2c 01 02 32 32 4b 2f 29 18 16 16 13 20 19 19 10 02 1a 1a 48 06 03 03 07 fe b5 1e 10 10 02 32 32 4b 28 25 32 2f 2f 30 01 a9 0a 3a 1b 02 3b 3b 58 58 3b 3b 02 02 3b 3b 58 54 3d 0d 0f 32 43 4b 32 32 02 17 1e 0f 0f 0a 0d 1e 1d 55 19 2b 2a 32 05 06 06 01 fe 81 19 23 23 27 4b 32 32 02 12 2e 47 47 69 00 06 00 05 ff c0 01 bb 01 c0 00 08 00 51 00 58 00 5f 00 66 00 Data Ascii: ,<&#6767&'"'6767676767676'&&'1&567672+H/6X;;;;XX;;:,22K/) H22K(%2//0:;;XX;;;;XT=2CK22U+*2##'K22.GGiQX_f
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 07 04 06 08 07 10 0e 0c 09 17 04 02 05 02 02 09 16 18 06 17 17 12 09 08 03 03 23 1b 01 01 01 01 01 03 10 0c 0c 01 02 0f 11 0b 0a 09 06 81 06 12 07 11 01 5d 1a 16 0b 0a 29 18 09 09 01 01 0d 08 04 05 0e 3a 23 20 12 11 02 01 02 01 09 06 0f 01 06 02 02 14 18 0f 0b 0c 01 0b 13 19 02 02 14 16 01 01 10 24 1a 1c 17 20 7b 11 09 09 01 02 05 01 01 07 04 04 02 02 01 05 11 04 04 09 0a 04 04 01 01 02 02 01 01 1c 2e 01 01 01 12 0c 10 04 01 04 0e 1c 2b 01 06 0a 05 05 01 02 29 22 1c 08 02 03 01 01 01 02 02 06 03 05 04 01 01 b0 14 03 03 02 02 06 03 1d 13 0b 1b 1e 21 17 10 0f 08 01 01 07 15 15 11 10 1c 06 12 12 02 05 03 24 31 09 07 10 18 19 24 1c 18 04 03 02 01 0b 0b 01 02 03 02 18 0c 10 07 08 1b 1a 26 03 01 2f 05 02 05 07 0c 0c 0d 09 0c 03 01 01 02 04 03 0e 0f 10 0b 03 02 Data Ascii: #]):# $ {.+)"!$1$&/
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 01 01 1d 1d 2c b3 05 13 18 23 07 4d 17 1a 1a 4d 2c 1d 1d 01 4c 03 17 63 71 0b 0b 71 84 13 12 13 08 06 07 08 01 15 04 01 03 03 03 46 0c 07 07 1b 1b 28 b2 01 00 02 00 02 ff c0 01 be 01 c0 00 0a 00 15 00 00 01 11 07 11 27 07 13 27 11 37 17 03 07 27 11 07 11 17 37 11 27 15 01 be 40 9e 9f 01 40 de de be 20 20 3f 5f 5f 3f 01 40 ff 00 25 01 00 5c 5c ff 00 25 01 00 80 80 fe db 12 12 01 00 24 ff 00 37 37 01 00 24 ff 00 04 00 00 ff c0 01 40 01 c0 00 3a 00 46 00 52 00 98 00 00 37 36 37 31 36 37 31 36 33 16 17 16 17 36 37 36 37 36 37 16 17 16 17 16 15 16 17 16 33 14 07 06 23 30 31 06 07 06 07 26 27 26 27 07 06 27 26 27 26 27 30 23 22 27 22 27 26 3f 01 17 36 35 31 34 27 23 06 15 14 17 33 07 36 35 31 34 27 23 06 15 14 17 33 37 36 37 31 36 37 36 37 34 31 36 37 36 37 26 Data Ascii: ,#MM,LcqqF(''7'7'@@ ?__?@%\\%$77$@:FR7671671636767673#01&'&''&'&'0#"'"'&?6514'#36514'#376716767416767&
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 07 03 04 04 0c 0b 01 01 09 08 04 01 0a 0c 0b 06 64 1e 2a 1e 11 12 11 12 1d 49 1e 23 29 01 01 29 23 a3 1e 0e 01 1c 10 0f 1a 19 0f 10 01 1b 05 18 1c 01 26 35 01 0d 0d 16 08 19 02 01 1c 22 0a 0a 10 66 16 0d 0c 09 35 1f 23 01 24 1f 33 03 06 13 05 04 05 06 01 21 0e 13 0d 0f 01 13 0e 12 06 03 01 01 03 05 01 02 19 19 1e 1e 15 0b 08 08 01 03 04 01 01 04 04 01 07 08 0a 0c 08 09 01 01 0a 0a 16 13 09 0a 02 0e 04 03 25 c3 42 01 11 12 1d 1c 12 11 01 1a 01 26 25 01 4d ab 01 18 17 61 15 0c 0d 0c 0c 14 13 01 18 0b 02 04 26 13 0b 0c 17 01 13 12 02 02 0b 0d 09 09 4a 01 0b 0a 19 95 73 73 8e 09 15 01 01 18 00 08 00 00 ff e1 02 40 01 a1 00 07 00 10 00 25 00 2e 00 5f 00 6e 00 86 00 98 00 00 25 14 07 23 35 33 16 15 17 14 17 36 37 35 07 06 15 37 11 06 07 06 07 21 26 27 26 27 11 Data Ascii: d*I#))#&5"f5#$3!%B&%Ma&Jss@%._n%#536757!&'&'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49742	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:39 UTC	692	OUT	GET /assets/packages/font_awesome_flutter/lib/fonts/fa-regular-400.ttf HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:40 UTC	545	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 49012 Connection: close Date: Thu, 04 Jul 2024 22:49:40 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "5070443340d1d8cceb516d02c3d6dee7" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6750d77433312fa1bf305e9ae7af80ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: D73YT2_ZBfo36cc57xEf5ctW0jzTiQBpHCEIBVxwqXM_O5s-xW2Ejw==
2024-07-04 22:49:40 UTC	15839	IN	Data Raw: 00 01 00 00 00 0a 00 80 00 03 00 20 4f 53 2f 32 40 ba 54 23 00 00 01 48 00 00 00 60 63 6d 61 70 9c 85 6a f1 00 00 07 2c 00 00 03 1c 67 6c 79 66 a4 6b c1 0d 00 00 0a 48 00 00 b5 2a 68 65 61 64 25 27 08 dd 00 00 01 10 00 00 00 36 68 68 65 61 04 42 02 e4 00 00 00 ec 00 00 00 24 68 6d 74 78 3b c0 01 a6 00 00 04 9c 00 00 02 8e 6c 6f 63 61 8a 9c 5b 61 00 00 01 a8 00 00 01 4a 6d 61 78 70 00 dd 04 25 00 00 00 ac 00 00 00 20 6e 61 6d 65 21 27 39 b3 00 00 02 f4 00 00 01 a8 70 6f 73 74 ff de 00 19 00 00 00 cc 00 00 00 20 00 01 00 00 00 a4 04 23 00 37 00 00 00 00 00 01 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ff db 00 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 01 c0 ff c0 00 00 02 80 00 00 00 00 02 80 00 Data Ascii: OS/2@T#H`cmapj,glyfkH*head%'6hheaB$hmtx;loca[aJmaxp% name!'9post #7
2024-07-04 22:49:40 UTC	9995	IN	Data Raw: 0b 0f 0d 01 01 0d 0f 0b 70 08 01 60 0f 01 01 0f fe c0 0f 01 01 0f 01 40 40 01 12 12 1b fe c0 1b 12 12 01 01 12 12 1b 01 40 1b 12 12 01 e0 0a 08 68 0a 06 07 0f d0 0f 07 06 0a 68 08 0a 00 02 00 00 ff c0 01 80 01 c0 00 10 00 27 00 00 05 36 37 11 23 22 27 26 3d 01 23 06 07 11 16 17 21 01 36 37 31 36 37 33 32 1f 01 16 15 11 06 07 06 07 21 26 27 26 27 11 01 40 0f 01 50 0e 09 09 a0 0f 01 01 0f 01 00 fe c0 01 12 12 1b a6 1a 13 5a 13 01 12 12 1b ff 00 1b 12 12 01 10 01 0f 01 20 09 09 0e 50 01 0f fe 80 0f 01 01 90 1b 12 12 01 13 5a 13 1b fe db 1b 12 12 01 01 12 12 1b 01 80 00 00 04 00 00 ff c0 01 80 01 c0 00 10 00 27 00 32 00 3d 00 00 17 26 27 11 36 37 33 15 14 17 16 3b 01 11 06 07 21 11 06 07 31 06 07 11 16 17 16 17 21 36 37 36 37 11 34 2f 01 26 2b 01 13 06 07 16 Data Ascii: p`@@@hh'67#"'&=#!6716732!&'&'@PZ PZ'2=&'673;!1!67674/&+
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 17 17 20 04 04 a4 05 05 06 06 eb 18 18 8a 13 13 01 2d 03 0e 0c 1b 0c 0d 06 2f 13 0e 05 2f 08 16 16 1a 0c af af 0c b0 0d 69 79 13 79 13 09 04 0d 13 19 09 0a 0a 2c 15 0e 07 2c 0b 18 18 19 13 b5 b5 13 b5 13 07 2d 26 2d 25 03 0a 08 26 11 04 03 15 1d 17 0a 0d 1d 16 19 19 12 26 47 47 26 47 26 2c 01 2b 26 35 01 30 30 30 30 30 4f 23 16 15 01 30 01 1f 20 34 0b dd dd 0b dc 0c 13 04 0f 0c 1b 16 16 07 2f 0b 0e 03 2f 06 0d 0d 1b 0b 69 69 0c 69 0c 13 01 12 0c 10 01 30 1e 0c 09 09 30 08 08 0b 09 97 97 09 98 08 13 04 0f 08 1b 15 15 05 2f 0d 0e 01 2f 04 0f 0e 1b 08 a4 a4 08 a3 09 17 02 15 09 0f 01 30 15 14 01 30 01 0e 0c c7 c7 0c c7 0c fe 54 16 02 30 02 16 18 02 16 16 02 30 a2 0c 07 07 07 26 0e 0e 0e 18 13 00 00 05 00 00 ff c0 01 c0 01 c0 00 36 00 66 00 71 00 7c 00 87 00 Data Ascii: -//iyy,,-&-%&&GG&G&,+&500000O#0 4//iii00//00T00&6fq\|
2024-07-04 22:49:40 UTC	6794	IN	Data Raw: 02 01 12 09 09 12 01 02 19 25 1b 12 12 01 01 12 12 1b 00 05 00 00 ff c0 02 00 01 c0 00 27 00 41 00 57 00 6d 00 86 00 00 25 26 27 31 26 27 06 07 06 07 16 17 16 17 26 3d 01 26 27 26 37 36 17 16 17 36 37 36 17 16 07 06 07 15 14 07 36 37 36 37 21 36 37 31 36 37 36 33 32 17 16 17 16 17 06 07 06 07 06 23 22 27 26 27 26 27 37 34 37 31 36 1f 01 16 15 14 0f 01 06 27 26 35 34 3f 01 27 26 35 25 36 17 31 16 15 14 0f 01 17 16 15 14 07 06 2f 01 26 35 34 3f 01 03 35 26 27 23 06 07 06 23 22 27 26 27 23 06 07 15 16 17 16 17 36 37 36 37 01 d0 02 3b 3b 58 58 3b 3b 02 01 1f 1f 35 04 25 12 03 06 07 0a 3c 47 48 3c 0a 06 07 04 12 25 04 35 1f 1f 01 fe 30 01 21 22 3c 3d 43 43 3d 3c 22 21 01 01 21 22 3c 3d 43 43 3d 3c 22 21 01 74 06 05 07 59 08 08 59 07 05 06 03 24 24 03 01 07 06 Data Ascii: %'AWm%&'1&'&=&'&766766767!67167632#"'&'&'74716'&54?'&5%61/&54?5&'##"'&'#6767;;XX;;5%<GH<%50!"<=CC=<"!!"<=CC=<"!tYY$$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49741	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:39 UTC	690	OUT	GET /assets/packages/font_awesome_flutter/lib/fonts/fa-solid-900.ttf HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:40 UTC	546	IN	HTTP/1.1 200 OK Content-Type: font/ttf Content-Length: 357256 Connection: close Date: Thu, 04 Jul 2024 22:49:40 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "658b490c9da97710b01bd0f8825fce94" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 ef674a9df28e4fc8d944ae07304fa954.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 4WgE4mqkleXK5_kLNlhqfm5t5GdCepTkmdIdJD2FMHg-kQjf5G5-Bw==
2024-07-04 22:49:40 UTC	8949	IN	Data Raw: 00 01 00 00 00 0a 00 80 00 03 00 20 4f 53 2f 32 61 4b 5b 4b 00 00 01 48 00 00 00 60 63 6d 61 70 db 82 f7 f0 00 00 03 40 00 00 0e 34 67 6c 79 66 5e 02 db ee 00 00 3c f0 00 05 36 96 68 65 61 64 25 27 08 de 00 00 01 10 00 00 00 36 68 68 65 61 04 3b 07 a8 00 00 00 ec 00 00 00 24 68 6d 74 78 f2 02 13 4e 00 00 11 74 00 00 15 bc 6c 6f 63 61 0d fe ea d6 00 00 27 30 00 00 15 c0 6d 61 78 70 05 86 03 22 00 00 00 ac 00 00 00 20 6e 61 6d 65 1f 41 37 f1 00 00 01 a8 00 00 01 98 70 6f 73 74 ff de 00 19 00 00 00 cc 00 00 00 20 00 01 00 00 05 6f 03 20 00 15 00 00 00 00 00 01 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 00 00 00 ff db 00 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 01 c0 ff c0 00 00 02 80 ff f8 ff f8 02 80 00 Data Ascii: OS/2aK[KH`cmap@4glyf^<6head%'6hhea;$hmtxNtloca'0maxp" nameA7post o
2024-07-04 22:49:40 UTC	8949	IN	Data Raw: 00 00 02 02 00 00 02 02 00 00 00 02 80 00 00 02 80 00 00 01 c0 00 00 02 00 00 00 02 00 00 00 02 80 00 00 02 80 00 00 02 00 00 00 02 80 00 06 02 40 00 00 02 00 00 00 02 00 00 00 02 00 00 00 02 80 00 38 01 80 00 00 02 00 00 00 02 00 00 00 02 40 00 00 02 40 00 00 02 80 00 00 02 00 00 00 01 c0 00 20 02 40 00 00 01 c0 00 00 02 00 00 00 01 40 00 11 02 00 00 00 01 c0 00 00 02 00 00 1f 02 40 00 00 02 00 00 00 02 00 00 00 02 00 00 00 02 00 00 00 02 80 00 03 02 80 00 00 02 40 00 00 02 00 00 00 01 c0 00 00 02 80 00 00 02 40 00 20 02 00 00 00 02 80 00 00 02 00 00 00 02 80 00 00 02 00 00 00 02 00 00 00 02 00 00 16 02 00 00 00 02 00 00 00 02 00 00 00 02 00 00 00 02 40 00 00 02 40 00 00 02 80 00 00 01 40 00 00 02 80 00 00 02 80 00 00 02 40 00 00 01 40 00 00 01 c0 00 00 Data Ascii: @8@@ @@@@@ @@@@@
2024-07-04 22:49:40 UTC	8949	IN	Data Raw: 16 17 33 36 37 36 37 34 27 26 27 36 37 07 33 16 17 16 17 06 07 06 07 23 26 27 26 27 36 37 36 37 33 30 31 30 31 33 30 31 30 31 35 30 39 01 30 31 23 30 31 30 31 26 27 26 27 36 37 36 37 33 16 17 16 17 06 07 06 07 01 30 01 24 25 36 20 36 25 24 01 01 23 18 0e 0e 01 24 25 36 40 36 25 24 01 0e 0e 18 23 01 80 10 1b 12 12 01 01 12 12 1b 40 1b 12 12 01 01 12 12 1b 10 20 20 1b 12 12 01 01 12 12 1b 20 1b 12 12 01 01 12 12 1b 01 20 36 25 24 01 01 24 25 36 35 24 12 1a 1b 20 36 25 24 01 01 24 25 36 20 1b 1a 12 24 35 80 01 12 12 1b 1b 12 12 01 01 12 12 1b 1b 12 12 01 40 01 12 12 1b 1b 12 12 01 01 12 12 1b 1b 12 12 01 00 02 00 00 ff e0 01 40 01 a0 00 19 00 35 00 00 13 14 17 31 16 17 16 33 32 37 36 37 36 35 34 27 26 27 26 23 22 07 06 07 06 15 17 26 27 31 26 27 36 37 36 37 Data Ascii: 367674'&'673#&'&'6767301013010150901#0101&'&'676730$%6 6%$#$%6@6%$#@ 6%$$%65$ 6%$$%6 $5@@5132767654'&'&#"&'1&'6767
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 09 09 0e 0e 09 09 09 09 0e fe a0 01 17 18 18 17 01 01 17 18 18 17 01 80 11 11 1e 1a 1a 2e 3c 0d 0e 2e 09 11 15 0c 4e 07 0a 09 05 3e 09 12 14 0d 44 2b 09 09 0e 0e 09 09 01 2c 18 15 0d 02 01 1d 09 12 14 0d 2f 1b 01 04 05 0d 20 17 09 12 14 0d 3f 07 0d 0c 0c 3c 27 16 16 02 1b 11 11 01 02 27 33 b0 16 02 02 16 5c 0b 01 01 0b 7c 16 02 02 16 7c 0b 01 01 0b 9c 16 02 02 16 9c 0b 01 01 0b 7c 16 02 02 16 88 5d 2e 0b 03 03 07 01 80 09 09 0e 0e 09 09 09 09 0e 0e 09 09 80 09 09 0e 0e 09 09 09 09 0e 0e 09 09 fe f0 1b 0f 0c 0c 0f 1b 1b 0f 0c 0c 0f 1b 01 30 49 27 23 22 19 03 03 08 37 2e 2e 1e 25 08 02 4f 14 0d 09 12 87 09 05 06 0a 6b 15 0c 09 12 75 4b 31 0e 09 09 09 09 0e 47 2a 07 14 02 02 32 14 0c 0a 12 40 2f 09 08 28 14 0d 09 12 17 0b 03 03 07 25 19 28 27 2e 08 0d 0d 07 Data Ascii: .<.N>D+,/ ?<''3\\|\|\|].0I'#"7..%OkuK1G*2@/(%('.
2024-07-04 22:49:40 UTC	1514	IN	Data Raw: 10 18 55 2a 20 20 0a 1b 23 01 01 22 1b 0b 20 20 2a 55 18 10 0f 01 10 19 17 fe e6 07 07 13 13 19 55 07 01 30 45 35 07 07 35 45 30 01 07 55 19 13 13 07 83 0f 01 01 0f 0f 01 01 0f 30 01 0f 0f 01 01 0f 0f 01 50 0f 01 01 0f 0f 01 01 0f 00 01 00 00 ff c1 01 80 01 bf 00 51 00 00 01 36 27 31 26 27 26 07 06 0f 01 06 07 26 27 22 07 26 27 22 07 06 1d 02 14 17 16 33 32 37 36 3d 01 36 37 36 37 16 17 16 17 15 07 06 17 16 17 16 37 36 3f 01 16 17 32 37 36 3d 01 37 36 33 32 17 16 17 15 14 17 16 33 32 37 36 3d 01 26 27 26 27 37 01 2e 04 05 06 0c 0d 0c 0b 05 22 09 07 20 30 1e 18 09 11 0e 09 09 09 09 0e 0e 09 09 01 0d 0e 14 14 0e 0d 01 4e 04 05 06 0c 0d 0c 0b 05 16 08 14 0e 09 09 24 06 06 14 0e 0d 01 09 09 0e 0e 09 09 01 1c 1d 2b 13 01 95 0d 0c 0b 05 04 05 06 0c 5f 06 08 21 Data Ascii: U* #" *UU0E55E0U0PQ6'1&'&&'"&'"3276=676776?276=76323276=&'&'7." 0N$+_!
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 60 0e 09 09 09 09 0e 40 01 1a 1a 2b 09 09 0e 0e 09 09 08 08 08 08 09 09 0e 0e 09 09 2b 1a 1a 01 60 20 01 1f 40 08 08 08 08 20 60 1f 01 20 00 01 00 00 ff c0 02 00 01 c0 00 31 00 00 13 36 37 31 36 37 16 17 16 17 15 17 16 1d 01 14 07 06 2f 01 15 17 16 1d 01 06 07 22 23 27 07 22 23 26 27 35 34 3f 01 35 07 06 27 26 3d 01 34 3f 01 35 c0 01 12 12 1b 1c 12 11 01 b2 0e 07 06 08 ab 3a 06 01 0d 02 02 6e 6e 02 02 0d 01 06 3a ab 08 06 07 0e b2 01 62 1d 1f 1f 03 03 1f 1f 1d 42 77 09 11 39 08 05 04 02 39 50 2b 05 08 2a 0d 01 20 20 01 0d 2a 08 05 2b 50 39 02 04 05 08 39 11 09 77 42 00 04 00 00 ff c0 02 00 01 a0 00 24 00 30 00 4a 00 57 00 00 13 34 37 31 36 3b 01 16 17 16 17 06 07 06 07 17 16 07 06 07 06 27 26 2f 01 23 15 14 07 06 23 22 27 26 3d 02 17 33 36 37 36 37 26 27 Data Ascii: `@++` @ ` 167167/"#'"#&'54?5'&=4?5:nn:bBw99P+* *+P99wB$0JW4716;'&/##"'&=36767&'
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 31 16 17 16 17 14 07 21 26 35 15 34 37 31 36 33 21 32 17 16 15 06 07 06 0f 01 06 07 23 26 2f 01 26 27 26 27 00 01 12 12 1b 01 01 06 15 15 1e 17 12 0a 13 13 17 17 13 13 0a 12 17 1e 15 15 06 01 01 1b 12 12 01 09 fe 12 09 08 08 0b 01 ca 0b 08 08 01 1d 1d 30 01 06 1a e8 1a 06 01 30 1d 1d 01 01 00 1b 12 12 01 1c 12 11 01 0b 13 0c 0c 0c 0c 13 0b 01 11 12 1c 01 12 12 1b 12 0e 0e 12 5b 0b 08 08 08 08 0b 36 29 29 13 0e 1a 02 02 1a 0e 13 29 29 36 00 05 00 00 ff c0 02 80 01 c0 00 1c 00 31 00 3e 00 4b 00 56 00 00 01 36 37 31 36 37 21 16 17 16 17 11 06 07 06 07 23 36 3d 01 36 37 35 26 27 26 27 23 35 01 36 2f 01 26 0f 01 06 17 16 3f 01 15 16 17 36 37 35 17 16 37 25 36 37 21 16 17 15 06 07 21 26 27 35 05 15 14 07 06 23 21 22 27 26 3d 01 21 07 06 07 16 17 33 36 37 26 27 Data Ascii: 1!&547163!2#&/&'&'00[6))))61>KV67167!#6=675&'&'#56/&?6757%67!!&'5#!"'&=!367&'
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 17 30 b4 0c 10 10 0c 02 1d 01 02 32 31 4b 2b 24 01 01 21 21 34 23 21 20 19 0c 0c 19 20 21 23 34 21 21 01 01 2f 01 80 27 21 21 14 13 13 14 21 21 27 27 21 21 14 13 13 14 21 21 27 30 07 04 1f 24 08 03 03 07 60 07 08 07 04 1f 24 08 03 03 07 60 07 08 94 a9 0b 0b 02 2b 38 4b 31 32 02 13 0a 0a 06 36 26 27 0a 05 0a 0a 19 0c 0c 19 0a 0a 05 0a 27 26 36 06 41 2c d4 13 13 22 22 26 26 22 22 13 13 13 13 22 22 26 26 22 22 13 13 e1 06 09 36 08 08 06 48 05 06 07 08 36 08 08 06 48 05 06 00 03 00 00 ff c0 02 40 01 95 00 26 00 40 00 4f 00 00 37 17 16 33 32 3f 01 26 27 36 37 36 37 32 17 36 3d 01 26 27 26 27 26 07 06 0f 01 27 26 27 26 07 06 07 06 07 15 16 17 05 34 27 31 26 27 26 23 22 07 06 07 06 15 14 17 16 17 16 33 32 37 36 37 36 35 27 16 0f 01 06 2f 01 26 37 36 1f 01 37 36 Data Ascii: 021K+$!!4#! !#4!!/'!!!!''!!!!'0$`$`+8K126&''&6A,""&&""""&&""6H6H@&@O732?&'676726=&'&'&'&'&4'1&'&#"3276765'/&7676
2024-07-04 22:49:40 UTC	1514	IN	Data Raw: 09 bf 2f 0c 03 03 07 07 0c 0d 0c 61 15 0d 0c 0c 0d 15 61 0c 0d 0c 07 07 03 03 0c 2f bf 01 80 f3 1a 09 09 0a 0d 0d 0a 50 09 09 50 0a 0d 0d 0a 09 09 1a f3 0e 09 09 09 09 0e 00 04 00 00 ff c0 02 80 01 c0 00 0c 00 11 00 46 00 69 00 00 13 36 37 36 27 26 27 06 07 06 17 16 17 03 35 33 15 2b 02 22 07 06 15 14 17 16 3b 02 21 32 37 36 35 34 27 26 23 21 35 17 16 17 16 37 36 37 36 2f 01 26 27 26 2b 01 22 07 06 0f 01 06 17 16 17 16 37 36 3f 01 15 01 27 26 23 22 0f 01 06 15 14 17 16 33 32 3f 01 15 14 17 16 33 32 37 36 3d 01 17 16 33 32 37 36 35 34 27 c0 1b 0f 0c 0c 0f 1b 1b 0f 0c 0c 0f 1b 08 10 10 40 58 0e 09 09 09 09 0e 78 50 01 78 0e 09 09 09 09 0e fe a8 1d 07 0c 0d 0c 0b 03 03 07 3a 0d 16 16 19 1e 1a 15 16 0d 3a 07 03 03 0b 0c 0d 0c 07 1d 01 df 50 0a 0d 0d 0a 50 09 Data Ascii: /aa/PPFi676'&'53+";!27654'&#!57676/&'&+"76?'&#"32?3276=327654'@XxPx::PP
2024-07-04 22:49:40 UTC	16384	IN	Data Raw: 26 3f 01 36 37 36 3b 01 32 17 16 1f 01 06 07 26 2f 01 15 14 07 06 23 22 27 26 3d 01 23 17 34 37 31 36 37 36 33 32 17 16 17 16 15 14 07 06 07 06 23 22 27 26 27 26 35 37 26 0f 01 27 26 07 06 1f 01 16 3f 01 36 27 70 01 17 18 18 17 01 01 17 18 18 17 01 28 09 09 0e 0e 09 09 1d 07 0c 0d 0b 0c 03 03 07 3a 0d 16 16 19 1e 1a 15 16 0d 2d 18 0c 03 02 1d 09 09 0e 0e 09 09 10 88 13 13 22 22 26 26 22 22 13 13 13 13 22 22 26 26 22 22 13 13 d3 0b 0b 3d 1d 0b 0b 0a 0a 28 0b 0b 48 0a 0a 01 90 1b 0f 0c 0c 0f 1b 1b 0f 0c 0c 0f 1b fe d0 80 0e 09 09 09 09 0e df 30 0b 03 03 07 07 0c 0d 0b 61 16 0d 0c 0c 0d 16 4a 1b 23 03 04 2f df 0e 09 09 09 09 0e 80 10 27 21 21 14 13 13 14 21 21 27 27 21 21 14 13 13 14 21 21 27 2b 0a 0a 3c 1c 0a 0a 0b 0b 28 0a 0a 48 0b 0b 00 05 00 00 ff c0 02 Data Ascii: &?676;2&/#"'&=#47167632#"'&'&57&'&?6'p(:-""&&""""&&""=(H0aJ#/'!!!!''!!!!'+<(H

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49747	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:42 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 2b 62 63 6b 31 43 71 5a 71 55 6d 6a 52 42 41 31 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 38 62 38 66 35 34 62 62 30 39 61 63 61 35 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: +bck1CqZqUmjRBA1.1Context: 28b8f54bb09aca5b
2024-07-04 22:49:42 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:49:42 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 2b 62 63 6b 31 43 71 5a 71 55 6d 6a 52 42 41 31 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 38 62 38 66 35 34 62 62 30 39 61 63 61 35 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: +bck1CqZqUmjRBA1.2Context: 28b8f54bb09aca5b<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:49:42 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 2b 62 63 6b 31 43 71 5a 71 55 6d 6a 52 42 41 31 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 38 62 38 66 35 34 62 62 30 39 61 63 61 35 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: +bck1CqZqUmjRBA1.3Context: 28b8f54bb09aca5b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-04 22:49:42 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:49:42 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 37 43 63 32 49 53 57 67 50 30 53 32 64 54 37 79 2b 48 68 7a 39 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 7Cc2ISWgP0S2dT7y+Hhz9A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49752	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:47 UTC	641	OUT	GET /assets/AssetManifest.bin HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:47 UTC	537	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 1287 Connection: close Date: Thu, 04 Jul 2024 22:49:47 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "8b1cf21a141e282cc9fcc19ad6b2028b" X-Cache: Miss from cloudfront Via: 1.1 b0062bb33b961b53be87d688f2bdd9f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: AYbEWzRMFrXzB242XUnYjkc-_3oWdgmI0Zmfh9IIdUd3Gnb8t4ckDg==
2024-07-04 22:49:47 UTC	1287	IN	Data Raw: 0d 11 07 18 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 61 76 61 74 61 72 2e 70 6e 67 0c 01 0d 01 07 05 61 73 73 65 74 07 18 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 61 76 61 74 61 72 2e 70 6e 67 07 18 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 62 61 6e 6e 65 72 2e 70 6e 67 0c 01 0d 01 07 05 61 73 73 65 74 07 18 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 62 61 6e 6e 65 72 2e 70 6e 67 07 14 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 62 67 2e 6a 70 67 0c 01 0d 01 07 05 61 73 73 65 74 07 14 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 62 67 2e 6a 70 67 07 19 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 63 61 70 74 63 68 61 2e 70 6e 67 0c 01 0d 01 07 05 61 73 73 65 74 07 19 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 63 61 70 74 63 68 61 2e 70 6e 67 07 14 61 73 73 65 74 Data Ascii: assets/images/avatar.pngassetassets/images/avatar.pngassets/images/banner.pngassetassets/images/banner.pngassets/images/bg.jpgassetassets/images/bg.jpgassets/images/captcha.pngassetassets/images/captcha.pngasset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49751	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:47 UTC	648	OUT	GET /assets/assets/images/metav2.png HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:47 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 651 Connection: close Date: Thu, 04 Jul 2024 22:49:47 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "82f724aa56db0da424f206b9991fd62e" X-Cache: Miss from cloudfront Via: 1.1 29676c2ee539645954aa742bde1ce894.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: JK5m98S3ZHcfrjz1NVcsqLiMNEDCjsCNcG_xfCzMaMXPYpAyfMKn8w==
2024-07-04 22:49:47 UTC	651	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 0c 08 04 00 00 00 83 ad 86 9d 00 00 00 02 62 4b 47 44 00 ff 87 8f cc bf 00 00 02 44 49 44 41 54 38 cb b5 d4 4f 88 55 65 1c 06 e0 f7 6a 4c 4e a4 33 a5 99 0e 96 39 52 14 b5 28 8b 62 22 99 0a 21 c1 0b 11 24 98 91 43 10 42 8b 68 61 64 53 d0 44 30 94 14 35 14 c2 0d 42 8b 68 a5 2e 12 42 1c a5 3f 1b 43 2a 0a 5a 58 d2 5f ad ac 18 af 8c 30 83 8e 33 f7 71 71 8f c7 7b a1 69 d7 77 56 ef 77 7e e7 7b ce f9 9d ef 9c a4 18 6e 53 b5 b4 4c ab ac b5 20 ff c7 b0 d0 41 70 d6 90 8a 05 3e 06 a7 3c d4 52 73 02 03 2d 79 23 8e fd eb 6a 55 ef 98 3f 1b 35 d7 67 d8 e5 59 3f e0 35 07 1d 75 bb 95 3e 32 a5 af 0d fb dd 65 45 ea f0 e3 ac d8 10 ae 9a 0d 1b c0 ee 24 d1 ed 1b 8c bb 29 49 5c ea 88 af 5a b0 3f 34 3c 5f a4 67 Data Ascii: PNGIHDR6bKGDDIDAT8OUejLN39R(b"!$CBhadSD05Bh.B?C*ZX_03qq{iwVw~{nSL Ap><Rs-y#jU?5gY?5u>2eE$)I\Z?4<_g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49756	104.26.8.44	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:47 UTC	646	OUT	GET /json HTTP/1.1 Host: ipapi.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:47 UTC	770	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:49:47 GMT Content-Type: application/json Content-Length: 763 Connection: close Allow: OPTIONS, GET, POST, OPTIONS, HEAD X-Frame-Options: DENY Vary: Host, origin access-control-allow-origin: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com X-Content-Type-Options: nosniff Referrer-Policy: same-origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YV8X6pvlmyYfC31EEKlADzQL6MDeVUcfFquxf5wPxUXM%2B0hOJpBWFDWSedHQflnv%2FgOETryxMrh5xyl%2BWhjcoDjh0tVgWV8VcA66hocMijQm8jckR87G66Or"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e2aba5cced32d9-EWR
2024-07-04 22:49:47 UTC	599	IN	Data Raw: 7b 0a 20 20 20 20 22 69 70 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 0a 20 20 20 20 22 6e 65 74 77 6f 72 6b 22 3a 20 22 38 2e 34 36 2e 31 32 33 2e 30 2f 32 34 22 2c 0a 20 20 20 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 49 50 76 34 22 2c 0a 20 20 20 20 22 63 69 74 79 22 3a 20 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 4e 65 77 20 59 6f 72 6b 22 2c 0a 20 20 20 20 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 20 22 4e 59 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 6e 61 6d 65 22 3a 20 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 20 22 55 53 22 2c 0a 20 20 20 20 22 63 6f 75 6e Data Ascii: { "ip": "8.46.123.33", "network": "8.46.123.0/24", "version": "IPv4", "city": "New York City", "region": "New York", "region_code": "NY", "country": "US", "country_name": "United States", "country_code": "US", "coun
2024-07-04 22:49:47 UTC	164	IN	Data Raw: 6d 65 22 3a 20 22 44 6f 6c 6c 61 72 22 2c 0a 20 20 20 20 22 6c 61 6e 67 75 61 67 65 73 22 3a 20 22 65 6e 2d 55 53 2c 65 73 2d 55 53 2c 68 61 77 2c 66 72 22 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 61 72 65 61 22 3a 20 39 36 32 39 30 39 31 2e 30 2c 0a 20 20 20 20 22 63 6f 75 6e 74 72 79 5f 70 6f 70 75 6c 61 74 69 6f 6e 22 3a 20 33 32 37 31 36 37 34 33 34 2c 0a 20 20 20 20 22 61 73 6e 22 3a 20 22 41 53 33 33 35 36 22 2c 0a 20 20 20 20 22 6f 72 67 22 3a 20 22 4c 45 56 45 4c 33 22 0a 7d Data Ascii: me": "Dollar", "languages": "en-US,es-US,haw,fr", "country_area": 9629091.0, "country_population": 327167434, "asn": "AS3356", "org": "LEVEL3"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49761	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:48 UTC	646	OUT	GET /assets/assets/images/meta.png HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:48 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 651 Connection: close Date: Thu, 04 Jul 2024 22:49:48 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "82f724aa56db0da424f206b9991fd62e" X-Cache: Miss from cloudfront Via: 1.1 447163709b16a97083db09f6ac040b38.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: v7EQ9SMbdF_QgMIfN7mN5Xp6JBlzn7NnXfJyDR4UKy-YHiSFfoh1Mg==
2024-07-04 22:49:48 UTC	651	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 0c 08 04 00 00 00 83 ad 86 9d 00 00 00 02 62 4b 47 44 00 ff 87 8f cc bf 00 00 02 44 49 44 41 54 38 cb b5 d4 4f 88 55 65 1c 06 e0 f7 6a 4c 4e a4 33 a5 99 0e 96 39 52 14 b5 28 8b 62 22 99 0a 21 c1 0b 11 24 98 91 43 10 42 8b 68 61 64 53 d0 44 30 94 14 35 14 c2 0d 42 8b 68 a5 2e 12 42 1c a5 3f 1b 43 2a 0a 5a 58 d2 5f ad ac 18 af 8c 30 83 8e 33 f7 71 71 8f c7 7b a1 69 d7 77 56 ef 77 7e e7 7b ce f9 9d ef 9c a4 18 6e 53 b5 b4 4c ab ac b5 20 ff c7 b0 d0 41 70 d6 90 8a 05 3e 06 a7 3c d4 52 73 02 03 2d 79 23 8e fd eb 6a 55 ef 98 3f 1b 35 d7 67 d8 e5 59 3f e0 35 07 1d 75 bb 95 3e 32 a5 af 0d fb dd 65 45 ea f0 e3 ac d8 10 ae 9a 0d 1b c0 ee 24 d1 ed 1b 8c bb 29 49 5c ea 88 af 5a b0 3f 34 3c 5f a4 67 Data Ascii: PNGIHDR6bKGDDIDAT8OUejLN39R(b"!$CBhadSD05Bh.B?C*ZX_03qq{iwVw~{nSL Ap><Rs-y#jU?5gY?5u>2eE$)I\Z?4<_g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49764	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:48 UTC	646	OUT	GET /assets/assets/images/fbv2.jpg HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:48 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 3053 Connection: close Date: Thu, 04 Jul 2024 22:49:48 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "e165af495d51ef5b46cad3d602a2a5f8" X-Cache: Miss from cloudfront Via: 1.1 0e12b175c31e0e750266df78bf0e1068.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: FvplKkiVd6V8Dff7RbA6xaIK_78yoSAgD_yK3VUy4XvZNWO1J5-rqw==
2024-07-04 22:49:48 UTC	3053	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 02 00 ec 00 ec 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c2 00 11 08 00 ec 00 ec 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 05 06 07 04 01 02 03 ff c4 00 19 01 01 00 03 01 01 00 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 01 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 b0 52 1f 1d 2c 81 3f 00 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C((((((((((((((((((((((((((((((((((((((((((((((((((("R,?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49763	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:48 UTC	648	OUT	GET /assets/assets/images/avatar.png HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:48 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 58407 Connection: close Date: Thu, 04 Jul 2024 22:49:48 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "02fb04256d936e0d83a6340a1d1f3af4" X-Cache: Miss from cloudfront Via: 1.1 2f7b5be8899520ed019685dc425dc306.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qmo29rlyF365V8eclX0mm71XxC7EVmfg47AKc3sxLSTAMCHhoC6I7Q==
2024-07-04 22:49:48 UTC	8949	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 96 00 00 02 98 08 06 00 00 00 c9 f8 b8 7a 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 e3 cc 49 44 41 54 78 9c ec bd 39 73 5b c9 ba a6 bb 9d 1b b2 14 d1 71 43 96 2c 45 5c 43 71 0d 59 e5 95 55 5e 47 1b db 6a ef 58 6d f5 0f ec 6b dc e1 9c b3 f7 ae b9 34 90 18 d6 84 99 33 29 51 14 a9 99 b3 f2 ae 27 81 0f 5a 04 41 02 22 48 25 86 f7 8d 7a 0a 23 21 60 ad 1c de f5 65 e6 97 7f fb 9b 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 Data Ascii: PNGIHDRzsRGB,pHYsIDATx9s[qC,E\CqYU^GjXmk43)Q'ZA"H%z#!`e$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I
2024-07-04 22:49:48 UTC	8949	IN	Data Raw: 8e 93 2c 2f 08 dd b9 11 14 0a 19 4b 31 cb 10 99 b4 c8 4f ad b9 ea 6f 89 5a 76 d6 b6 dd a7 a3 e1 06 52 c6 52 ba 4d 0d 33 96 f6 3c 65 10 73 49 a4 12 63 49 e4 92 32 cb 7d 6e 43 d7 1f 21 ae 63 5c 63 d9 68 b4 72 bf 90 c9 5c 2e 9a 30 95 39 de 54 42 92 36 34 c7 52 cc 3c d6 49 17 a3 41 74 de af f7 3f b8 b3 21 26 c0 3a 7c 49 ba 4d 5d 55 a6 28 83 bb 6f de f7 cb 29 d1 4b ee 17 23 97 42 4c 2b e3 cc b1 c4 4b d4 73 4f 01 b9 b1 94 b9 5c 24 d9 10 78 a3 99 1b c6 fc b6 1b ad 6c c8 58 8a 99 c7 86 c0 99 6f c9 10 38 1d f9 f1 99 1b 6a 2c 65 2a a5 bb d2 b0 b2 45 19 3c 3c 71 6e 67 f7 c0 1b ca 72 54 f3 b7 9a 63 29 66 81 51 c6 12 0f c1 94 ba 34 f7 14 cd dc 5b 70 5b a9 44 ca 6d b9 08 4a b3 fa 3d 86 c0 eb 8d 96 87 fb be 30 64 4d 19 4b 31 d3 d0 39 5b 34 88 fb 6b 9b af dc d1 69 b7 43 Data Ascii: ,/K1OoZvRRM3<esIcI2}nC!c\chr\.09TB64R<IAt?!&:\|IM]U(o)K#BL+KsO\$xlXo8j,e*E<<qngrTc)fQ4[p[DmJ=0dMK19[4kiC
2024-07-04 22:49:48 UTC	16384	IN	Data Raw: b9 b9 64 18 fc eb 9c ca 63 b7 f7 e6 c0 ef ac b3 ba b6 e5 6f a1 d1 5c f5 db 8c 3e 7d 56 f2 06 73 a9 9c b8 52 6e 36 31 98 94 47 99 4b 21 be 1f e3 18 4b bc 1c 9e 2e b4 af ec 1b 4b ed bc 23 c4 74 53 49 5b 1e ee d3 99 13 b9 f4 9d ba 8f 2e 75 e7 c3 75 56 36 dc 41 6e 2e cf ce 2e 46 29 07 f7 7d 96 e6 5f 36 1d e2 f3 e7 cf ee d3 a7 4f ee f3 d1 a1 5f fd 5d 9c 8f fb f1 d3 a1 db d8 7c e9 e7 66 d1 07 b0 12 7c 65 75 2b 37 98 db fe 16 1a 8d 75 17 c7 2d f7 f4 45 c5 3d 5f 8e bc b9 24 72 a9 21 71 21 be 1f e3 ec bc 33 35 c6 b2 54 aa fc 60 69 25 64 2c 85 98 62 6a 9d 6e 5d 2c a4 7c e1 79 db a1 a7 bb 00 af e1 da ed 15 b7 b7 b7 7f c9 5c 4a 8b 25 2e 26 d8 5f 9e 7c 94 ef df bf bf 10 a5 3c cf ff c7 a2 af f5 8d 2d 3f 37 eb c5 52 85 1c 78 bd 9c a9 6d 9f f8 9c 79 95 5b db af dd fa fa Data Ascii: dco\>}VsRn61GK!K.K#tSI[.uuV6An..F)}_6O_]\|f\|eu+7u-E=_$r!q!35T`i%d,bjn],\|y\J%.&_\|<-?7Rxmy[
2024-07-04 22:49:48 UTC	16384	IN	Data Raw: 8d 63 38 ed c6 f7 87 53 91 e1 00 ac 65 61 6c 94 04 4b e8 61 1a b5 fe 61 f2 4e 98 48 23 0e 1b d8 14 37 c3 14 ee 28 61 29 e1 15 96 87 91 10 f0 f1 7b 81 c7 86 ef 54 ec a4 12 75 54 47 33 5c 2e af aa 6f 7f 17 0b 56 d5 8e 94 c8 64 bb 24 f4 42 11 23 ef 8d 92 46 e4 2d 0e 85 4a 98 0d 1b 8a fb d0 63 1c be 46 44 ea 18 f0 5a 71 85 ea 2c 13 7a 29 43 ef a5 8e 95 42 7e d8 1e ed 5f 4d 8b b2 0c f1 ce be 51 f6 bc c4 a6 b2 c4 c3 4e 2b cf dd 60 4c c2 f0 fc 94 70 0b bd c0 61 22 cd 30 6f 60 56 08 86 fb 90 f3 41 5e 47 79 39 55 1e 0a 51 1e 7a 5f e5 91 e4 b9 bc ce 8a cf e4 3d 79 35 b3 fb 5a 02 2b 5c e7 d0 73 19 4e cf 67 b3 a1 55 13 36 5c 87 f0 c6 a0 9e b4 70 d5 4c 85 da b4 72 dd ab 8e ed a8 e4 1d 8e b9 a6 0b 75 fe eb 9a 0b 0b a2 0f bb f9 f3 e7 48 72 4c b2 c2 52 61 06 8a e5 55 09 Data Ascii: c8SealKaaNH#7(a){TuTG3\.oVd$B#F-JcFDZq,z)CB~_MQN+`Lpa"0o`VA^Gy9UQz_=y5Z+\sNgU6\pLruHrLRaU
2024-07-04 22:49:48 UTC	1514	IN	Data Raw: 61 f9 22 83 c1 90 1f b2 75 6a b3 4d 11 c2 6b 15 1e 9f 9c b9 d5 b5 0d 7f cd 97 2b d5 dc ed cf a2 13 c1 ee 45 7b ed 31 d3 71 93 04 59 3a de c5 02 b3 43 3b e5 5a e3 a7 28 aa fd 9c f7 78 6f 30 fc 50 14 8a d1 af 12 95 e5 4a dd 84 e5 94 b3 5a 6b 78 36 9a 6d b7 b2 ba ee 3e ef 1d b8 b3 f3 cb 74 80 a2 c8 7a 56 60 4a 64 9e 5f 5c e5 32 98 1a 0c 86 01 b8 56 9f bb 3e b5 9c 6b 99 cf 71 6d 73 8d d3 40 81 6b 9e ba b7 79 db 9f 45 e7 28 61 c9 18 ea 1d 35 24 c3 2e 57 ac 56 a5 61 31 41 f1 74 0a e9 72 a7 85 c0 7c b8 f3 1a 2e 30 f3 be b0 17 9d 08 4a 06 19 bc 17 14 57 c7 93 b1 b6 be e9 8e be 9e a4 45 d4 5f 6a 0d 69 30 18 f2 83 ae cf e7 ae 51 04 e6 97 a3 63 d7 5b 59 1b 08 c9 a8 e6 af 77 ae 73 13 96 f9 f3 a9 b0 1c 2c d7 78 49 13 12 c6 d2 62 21 72 a5 62 f5 97 bc c7 77 83 21 37 20 Data Ascii: a"ujMk+E{1qY:C;Z(xo0PJZkx6m>tzV`Jd_\2V>kqms@kyE(a5$.WVa1Atr\|.0JWE_ji0Qc[Yws,xIb!rbw!7
2024-07-04 22:49:48 UTC	6227	IN	Data Raw: 95 f8 49 8b 31 9f 75 16 1b dd a1 d4 b8 45 08 10 e1 40 9f 8a 15 1f 1b 4b 9b dc 52 39 fa 98 f7 98 6b 30 2c 04 88 33 29 54 ab bf 96 89 25 8a 2f 40 32 e5 0a 51 dd 84 e5 9c b3 58 aa f8 de c5 24 72 75 7b ab 6e 7b e7 b3 3b 3e 39 7b 54 c3 2f 14 99 f4 43 e6 31 15 a0 26 22 0d 39 41 31 92 08 cb 8b 9b be e7 f5 dd b0 32 5b 77 ee e8 f4 cc 6d ee 7e 76 ed 95 55 2f 28 8b 51 d5 2d 97 2b b9 5f 7f c6 09 ed d7 08 61 19 26 5c 11 17 4b d2 6a de 63 ad c1 b0 70 88 2f c4 5f 15 a8 4e 79 8d a7 17 73 37 c3 fc 8d 8b f1 fb 89 a0 a4 c8 7a 7c 17 ef 45 66 25 aa f9 82 eb eb 1b 5b 6e 67 77 cf 9d 9d 5f fa 4e 23 59 af 25 c2 d2 77 f6 79 41 58 9a e8 34 4c 8a 51 e7 17 42 72 98 c7 12 91 79 72 71 e9 b6 3e ef b9 d5 cd 2d d7 e8 74 5d a9 5a f3 62 b2 50 89 62 b1 51 37 8f e5 1c f0 39 41 29 52 e7 17 51 Data Ascii: I1uE@KR9k0,3)T%/@2QX$ru{n{;>9{T/C1&"9A12[wm~vU/(Q-+_a&\Kjcp/_Nys7z\|Ef%[ngw_N#Y%wyAX4LQBryrq>-t]ZbPbQ79A)RQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49762	18.65.39.51	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:48 UTC	644	OUT	GET /assets/assets/images/bg.jpg HTTP/1.1 Host: helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:49:48 UTC	524	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 80630 Connection: close Date: Thu, 04 Jul 2024 22:49:48 GMT Server: AmazonS3 Accept-Ranges: bytes Last-Modified: Mon, 01 Jul 2024 18:55:45 GMT Cache-Control: public, max-age=0, s-maxage=2 ETag: "49a366b72644f04ea8efccf9550fb0a5" X-Cache: Miss from cloudfront Via: 1.1 b6cf988ed9428ad8492255f2faaacfdc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: xWWIpoYvcNSPpAdOu2FG2mSJg1S2IrxdEFr69uoOgfe5GPU6uFdTgA==
2024-07-04 22:49:48 UTC	15860	IN	Data Raw: ff d8 ff e1 09 50 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e Data Ascii: Phttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syn
2024-07-04 22:49:48 UTC	10987	IN	Data Raw: 68 24 4e c4 70 7f e6 15 a3 cd b9 2e 67 9c 79 5b 69 13 de 6d 0b 78 af 8d 94 1b 4c b3 c9 70 d1 33 3c ae 31 94 2e 87 d1 54 3a 15 03 5e 27 35 a5 9a 3e cf b3 e6 f7 22 dc 6d c7 85 e9 d6 b8 b7 cc f2 e7 d8 d2 a9 28 97 b6 32 15 3b bb 86 53 1b 64 72 dd 91 56 b2 7d a5 b4 ae 31 97 85 f9 0d 36 c6 da a0 64 59 34 ab ed 42 c9 20 3d db 8c 4d 2c d2 da 70 ff 00 ba bb 6d 10 a4 b7 b9 87 3d 35 b4 d0 e3 89 78 d9 47 bc 8a a7 45 38 cb 46 9f 79 1c 32 b7 06 07 b8 d4 37 4c 30 49 0a 01 66 3e aa 8d 49 a0 2e ad ec b3 b3 6e d6 e4 91 d0 5c 43 30 89 4e be 98 68 ce f1 e5 ca b6 a3 cc e1 29 ff 00 98 ab 8a 6b c9 96 56 96 21 62 49 a6 84 74 2c 37 ad ac f3 b8 ae 3e f2 56 fb 31 8f 7b 70 5e ba df 44 73 9e 2e 74 9e 7c 5f d9 73 7f 45 c4 54 f3 ab 4a d2 b1 17 73 90 00 91 97 76 24 55 d1 55 23 ea 1c b3 Data Ascii: h$Np.gy[imxLp3<1.T:^'5>"m(2;SdrV}16dY4B =M,pm=5xGE8Fy27L0If>I.n\C0Nh)kV!bIt,7>V1{p^Ds.t\|_sETJsv$UU#
2024-07-04 22:49:48 UTC	16384	IN	Data Raw: 4b 1c 11 89 66 c9 56 fa a8 c7 ac e4 75 75 0e b3 43 4a 2e 4e 91 4d 34 f2 5c be fc 84 68 30 91 8f 55 07 52 8a 87 a2 31 51 54 87 d6 75 90 05 b9 c9 23 45 b9 51 97 1d 8c 3e d0 f8 d0 c3 85 7c be 1f ba 0a 78 da 3d d2 48 64 7f ab 95 4e 55 bb 8f ed c6 84 4e ce 66 a1 4b 05 cd af ff 00 e5 91 a9 fb 90 79 7e 73 f0 ef aa 71 7f 1f 67 9f e3 cc 68 63 18 e5 d5 50 a4 b8 ee e4 40 11 f1 34 63 84 72 6b 8f ca dc 45 0e 6f 0d 3c d6 44 f8 95 6e 70 20 0e 24 63 85 85 c1 d4 9e 4a e0 60 f7 1c 50 e6 de ee bf bd c2 e7 8e 58 51 ad 82 e2 56 ff 00 15 92 01 5c 6a 23 d4 f8 9a 12 2d 37 bd c3 87 af a1 17 a2 93 98 51 fc e9 ff 00 e5 50 d5 a0 dd 23 d6 78 d7 1c 09 91 07 fd 54 1f ba 31 e3 34 72 0d db a9 6d a7 00 60 33 4c 82 40 3b 1c 1c fb f3 43 2a 2d 7c a9 ae ec 8c 9f 94 de 4c 5a ed 65 5d b1 63 79 Data Ascii: KfVuuCJ.NM4\h0UR1QTu#EQ>\|x=HdNUNfKy~sqghcP@4crkEo<Dnp $cJ`PXQV\j#-7QP#xT14rm`3L@;C*-\|LZe]cy
2024-07-04 22:49:48 UTC	16384	IN	Data Raw: 27 3b 29 48 12 83 d4 8d a0 7f 81 ec a8 7a 56 23 8f cd e2 b4 fc 79 15 cc a4 33 2b 02 ae a7 0c 8c 30 41 ea 20 f0 aa 75 4c 41 a8 68 f2 7f 2c ad fa 3d ad 3c c0 63 7c a9 3f 96 55 df 4f 71 0c 2a 9f 77 d9 d3 bc 34 bf 72 c9 fd 8c 87 1d 0d 0f a0 4e 19 bd 40 38 de c0 be 89 e7 34 6a 38 7e 75 1c 3a c7 68 ad 7c dd a6 3e 5e cf 22 10 24 15 65 62 08 39 56 07 04 1e b0 6b 26 c9 9d 24 57 5f 5e 56 0b 93 c2 eb 18 47 3f e6 81 c0 fe 21 e2 39 d6 ae f5 d4 c5 38 e9 a7 ee 84 69 22 92 17 31 ca 85 1c 0c e0 f3 07 81 04 68 41 eb 15 1a a3 49 a7 a0 8a 85 2e 36 46 fc 53 2b cc cb 6f 67 75 f4 6d 3c 9a 02 73 e8 94 1c 5b 07 ab df 5b c3 95 33 8e 2b 55 4b 36 bf 7b 8d 31 91 21 24 5b a1 0e 34 37 12 00 5c 1f c2 bc 17 e2 6b d0 70 dd 72 f9 bc 3f 75 04 25 93 78 92 cc 59 b7 98 9c 92 7b 4d 69 68 5d 0e Data Ascii: ';)HzV#y3+0A uLAh,=<c\|?UOq*w4rN@84j8~u:h\|>^"$eb9Vk&$W_^VG?!98i"1hAI.6FS+ogum<s[[3+UK6{1!$[47\kpr?u%xY{Mih]
2024-07-04 22:49:48 UTC	3028	IN	Data Raw: 98 3a 50 f9 5b 66 0e ee 2b ac af 35 df aa ec bf 32 e5 84 d6 8a af 6d 70 cd 69 31 22 29 07 aa 4f 34 74 39 01 87 30 47 68 d2 a1 e6 55 3c 9a cd 7e e4 f9 10 64 82 c6 e3 26 7b 08 c3 9f e3 5b 93 03 e7 ac 81 95 3f d3 43 ac 65 38 e9 2f 1c ff 00 3f 52 0c 9b 16 17 d6 d2 fc 29 e5 15 da ee 7f ff 00 44 de 5f 78 15 4e ab 68 6b e6 8f 87 a3 19 8e d7 68 6c b9 44 f3 d9 49 35 a3 a9 8e e4 c5 89 23 92 26 f5 86 f2 64 03 cc 13 cc 0a 85 94 e1 8a a9 4a 9f 0b ca 9f 79 2a e6 c4 35 ac 31 1b 80 2c 45 c3 dd 3e d1 03 d1 e8 3a 35 54 65 1c d9 f3 80 be d6 7a 8d 0c c3 16 a4 dd 7c 55 55 d6 fc 97 3e 44 39 1d ae d9 05 b5 bb 8b 78 17 a3 b4 b6 8d 4b f4 69 9c f1 50 72 49 d5 8f 33 43 69 6e 6a f3 7a be 7f bc 09 31 ec 7d af 28 cc 7b 36 7c 7b 4c bb 83 fd 65 68 62 5b 46 12 d6 48 98 9e 4f 6d 13 f5 8d Data Ascii: :P[f+52mpi1")O4t90GhU<~d&{[?Ce8/?R)D_xNhkhlDI5#&dJy*51,E>:5Tez\|UU>D9xKiPrI3Cinjz1}({6\|{Lehb[FHOm
2024-07-04 22:49:48 UTC	16384	IN	Data Raw: 2c 68 37 a4 91 82 46 bd 6c c7 00 7b e8 74 74 b3 67 a0 5c 4f 65 b1 ac 5a 4b a9 c4 16 1b 32 35 8a 49 b1 92 cc 39 22 fd a7 76 ce 00 fd 28 7c 98 46 78 d3 a8 ab 94 b3 fd e8 91 e1 be 50 79 41 77 e5 0d da cd 32 f9 bd 9d be 57 67 ec f0 72 b1 29 e2 cc 7e d3 b7 da 6f 01 a5 0f d3 6c 9b 24 76 78 d2 cd bd 5f 3f c2 e0 8a 2a 1e a3 55 e4 85 e7 45 b4 a4 b0 63 f4 7b 56 3e 8d 01 fb f8 f2 f1 7b f5 5f 1a 1e 1f 68 61 de 1e ff 00 18 bf a3 c9 fa 9e 8d 04 e6 2d e1 ba 25 8a 50 04 f0 3f aa e3 96 79 82 39 11 a8 a8 7c 79 c2 fb 79 9d 9e 00 88 27 81 8c b6 ae 77 43 9f 5a 36 f6 24 03 81 ea 3c 0f 2e aa 12 32 b7 4f 5f dc d7 ee 44 7a 1b 25 59 c7 73 35 c4 70 d9 6f 0b 89 8e 13 71 8a f7 96 23 80 03 52 4d 53 38 8e 2a 37 2d 11 b5 be 8f cd f6 6d 8c 2a eb 70 2d a7 70 f3 bc 68 4b bb ae f6 fe 0a e8 Data Ascii: ,h7Fl{ttg\OeZK25I9"v(\|FxPyAw2Wgr)~ol$vx_?UEc{V>{_ha-%P?y9\|yy'wCZ6$<.2O_Dz%Ys5poq#RMS87-m*p-phK
2024-07-04 22:49:48 UTC	1603	IN	Data Raw: f1 5d 48 ed 23 c7 96 63 93 82 b8 ec 03 5e 02 96 54 ab 24 27 cd e7 fb a3 ef 5f 9d 0a 1e 6f 3f dd 1f 7a fc e8 03 cd e7 fb a3 ef 5f 9d 01 cf 37 9f ee 8f bd 7e 74 b0 3d 35 bc fb fb a2 32 44 6a a8 0e 47 21 af 3e ba b2 79 91 1c 6b 79 fa 28 07 44 72 37 f3 aa f5 f7 d1 e8 87 11 bf 37 9f ee 8f bd 7e 75 0a 1e 6f 3f dd 1f 7a fc e8 03 cd e7 fb a3 ef 5f 9d 00 79 bc ff 00 74 7d eb f3 a0 0f 37 9f ee 8f bd 7e 74 01 e6 f3 fd d1 f7 af ce 80 3c de 7f ba 3e f5 f9 d0 07 9b cf f7 47 de bf 3a 00 f3 79 fe e8 fb d7 e7 40 1e 6f 3f dd 1f 7a fc e8 05 24 57 51 92 51 08 cf ac 32 a4 1e f1 9c 1a 27 42 87 05 b3 ca 40 11 74 32 37 01 90 50 9f 7e 45 5c 99 33 1a 36 d7 0a 4a 98 8e 41 c1 d5 7e 75 1e 45 39 e6 f3 fd d1 f7 af ce 80 3c de 7f ba 3e f5 f9 d0 07 9b cf f7 47 de bf 3a 00 f3 79 fe e8 fb Data Ascii: ]H#c^T$'_o?z_7~t=52DjG!>yky(Dr77~uo?z_yt}7~t<>G:y@o?z$WQQ2'B@t27P~E\36JA~uE9<>G:y

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.6	49759	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:48 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4f 56 6e 34 61 33 33 43 74 6b 71 59 50 6e 49 47 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 34 61 37 31 66 64 30 36 61 64 62 33 30 64 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: OVn4a33CtkqYPnIG.1Context: d4a71fd06adb30df
2024-07-04 22:49:48 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:49:48 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 4f 56 6e 34 61 33 33 43 74 6b 71 59 50 6e 49 47 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 34 61 37 31 66 64 30 36 61 64 62 33 30 64 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: OVn4a33CtkqYPnIG.2Context: d4a71fd06adb30df<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:49:48 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 4f 56 6e 34 61 33 33 43 74 6b 71 59 50 6e 49 47 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 34 61 37 31 66 64 30 36 61 64 62 33 30 64 66 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: OVn4a33CtkqYPnIG.3Context: d4a71fd06adb30df
2024-07-04 22:49:48 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:49:48 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6a 77 62 43 36 50 31 63 41 55 57 47 42 30 6d 64 44 4e 64 6f 46 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: jwbC6P1cAUWGB0mdDNdoFw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.6	49768	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:49:56 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 67 62 75 53 65 2b 74 75 6f 55 75 71 35 32 2b 2b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 65 32 31 65 33 61 61 63 62 38 62 33 37 64 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: gbuSe+tuoUuq52++.1Context: be21e3aacb8b37db
2024-07-04 22:49:56 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:49:56 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 67 62 75 53 65 2b 74 75 6f 55 75 71 35 32 2b 2b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 65 32 31 65 33 61 61 63 62 38 62 33 37 64 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: gbuSe+tuoUuq52++.2Context: be21e3aacb8b37db<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:49:56 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 67 62 75 53 65 2b 74 75 6f 55 75 71 35 32 2b 2b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 65 32 31 65 33 61 61 63 62 38 62 33 37 64 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: gbuSe+tuoUuq52++.3Context: be21e3aacb8b37db<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-04 22:49:56 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:49:56 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 65 72 6b 6d 45 4a 33 68 59 30 36 73 33 33 32 46 34 64 72 4e 37 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: erkmEJ3hY06s332F4drN7Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49769	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:50:03 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 46 4e 62 42 4d 54 62 41 48 45 4b 30 4e 45 4b 56 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 35 36 39 30 36 36 37 39 35 35 34 33 61 66 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: FNbBMTbAHEK0NEKV.1Context: 8569066795543aff
2024-07-04 22:50:03 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:50:03 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 46 4e 62 42 4d 54 62 41 48 45 4b 30 4e 45 4b 56 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 35 36 39 30 36 36 37 39 35 35 34 33 61 66 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: FNbBMTbAHEK0NEKV.2Context: 8569066795543aff<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:50:03 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 46 4e 62 42 4d 54 62 41 48 45 4b 30 4e 45 4b 56 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 35 36 39 30 36 36 37 39 35 35 34 33 61 66 66 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: FNbBMTbAHEK0NEKV.3Context: 8569066795543aff
2024-07-04 22:50:04 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:50:04 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6f 6e 38 73 43 78 4b 69 75 55 57 33 31 52 34 70 4d 47 38 31 66 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: on8sCxKiuUW31R4pMG81fQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49770	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:50:11 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 49 63 6d 4a 48 2b 65 50 46 45 75 33 4f 7a 64 47 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 62 35 64 61 65 65 62 62 35 65 62 31 35 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: IcmJH+ePFEu3OzdG.1Context: 88b5daeebb5eb155
2024-07-04 22:50:11 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:50:11 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 49 63 6d 4a 48 2b 65 50 46 45 75 33 4f 7a 64 47 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 62 35 64 61 65 65 62 62 35 65 62 31 35 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: IcmJH+ePFEu3OzdG.2Context: 88b5daeebb5eb155<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:50:11 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 49 63 6d 4a 48 2b 65 50 46 45 75 33 4f 7a 64 47 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 38 62 35 64 61 65 65 62 62 35 65 62 31 35 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: IcmJH+ePFEu3OzdG.3Context: 88b5daeebb5eb155<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-04 22:50:11 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:50:11 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 51 45 64 37 6c 76 31 74 6e 55 79 4a 34 42 68 2b 59 45 66 33 73 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: QEd7lv1tnUyJ4Bh+YEf3sw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49772	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:50:26 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 44 75 53 2f 54 66 71 4f 55 6b 2b 4e 67 75 71 55 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 61 37 38 62 31 62 65 62 37 38 61 61 62 65 36 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: DuS/TfqOUk+NguqU.1Context: fa78b1beb78aabe6
2024-07-04 22:50:26 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:50:26 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 44 75 53 2f 54 66 71 4f 55 6b 2b 4e 67 75 71 55 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 61 37 38 62 31 62 65 62 37 38 61 61 62 65 36 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: DuS/TfqOUk+NguqU.2Context: fa78b1beb78aabe6<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:50:26 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 44 75 53 2f 54 66 71 4f 55 6b 2b 4e 67 75 71 55 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 61 37 38 62 31 62 65 62 37 38 61 61 62 65 36 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: DuS/TfqOUk+NguqU.3Context: fa78b1beb78aabe6
2024-07-04 22:50:26 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:50:26 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 32 2b 66 39 4f 48 2b 58 65 30 47 58 35 53 50 73 56 56 53 6e 76 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 2+f9OH+Xe0GX5SPsVVSnvA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49774	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:50:30 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6a 7a 62 36 39 76 56 35 39 45 6d 30 6b 44 36 44 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 61 38 32 32 65 32 38 37 65 33 37 38 66 39 37 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: jzb69vV59Em0kD6D.1Context: 3a822e287e378f97
2024-07-04 22:50:30 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:50:30 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 6a 7a 62 36 39 76 56 35 39 45 6d 30 6b 44 36 44 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 61 38 32 32 65 32 38 37 65 33 37 38 66 39 37 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: jzb69vV59Em0kD6D.2Context: 3a822e287e378f97<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:50:30 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6a 7a 62 36 39 76 56 35 39 45 6d 30 6b 44 36 44 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 61 38 32 32 65 32 38 37 65 33 37 38 66 39 37 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: jzb69vV59Em0kD6D.3Context: 3a822e287e378f97<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-04 22:50:30 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:50:30 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 43 58 66 36 31 53 68 6b 79 6b 57 71 76 37 4c 4d 78 72 49 71 63 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: CXf61ShkykWqv7LMxrIqcQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49777	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:50:49 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 53 68 30 49 37 61 4f 62 30 55 53 32 4d 4f 57 4a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 34 33 66 38 39 30 32 63 38 34 38 36 33 65 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Sh0I7aOb0US2MOWJ.1Context: 943f8902c84863e9
2024-07-04 22:50:49 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:50:49 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 53 68 30 49 37 61 4f 62 30 55 53 32 4d 4f 57 4a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 34 33 66 38 39 30 32 63 38 34 38 36 33 65 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: Sh0I7aOb0US2MOWJ.2Context: 943f8902c84863e9<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:50:49 UTC	74	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 51 4f 53 20 35 36 0d 0a 4d 53 2d 43 56 3a 20 53 68 30 49 37 61 4f 62 30 55 53 32 4d 4f 57 4a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 34 33 66 38 39 30 32 63 38 34 38 36 33 65 39 0d 0a 0d 0a Data Ascii: BND 3 CON\QOS 56MS-CV: Sh0I7aOb0US2MOWJ.3Context: 943f8902c84863e9
2024-07-04 22:50:49 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:50:49 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 79 57 6d 4b 69 41 63 42 33 45 61 76 6c 55 77 7a 58 42 57 4e 35 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: yWmKiAcB3EavlUwzXBWN5Q.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.6	49778	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:50:52 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 46 62 6b 79 31 72 46 37 64 55 71 4e 77 34 4b 4d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 38 66 61 35 62 38 33 39 61 31 65 36 30 66 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Fbky1rF7dUqNw4KM.1Context: 78fa5b839a1e60f3
2024-07-04 22:50:52 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-04 22:50:52 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 46 62 6b 79 31 72 46 37 64 55 71 4e 77 34 4b 4d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 38 66 61 35 62 38 33 39 61 31 65 36 30 66 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 41 70 45 32 7a 30 46 48 42 77 4a 45 78 6f 31 62 55 74 66 4f 4a 43 4b 66 4f 7a 37 75 78 72 46 57 64 4c 4e 70 7a 72 46 6c 4d 69 74 78 61 61 57 5a 4c 57 46 75 41 56 44 2b 77 6e 2b 59 76 63 4a 65 4d 35 48 67 6d 5a 4f 70 62 45 4c 79 56 58 38 62 73 33 6e 63 4f 77 46 38 66 44 52 6d 52 49 32 4d 2f 4f 52 6e 71 37 50 78 34 79 6e 31 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: Fbky1rF7dUqNw4KM.2Context: 78fa5b839a1e60f3<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQApE2z0FHBwJExo1bUtfOJCKfOz7uxrFWdLNpzrFlMitxaaWZLWFuAVD+wn+YvcJeM5HgmZOpbELyVX8bs3ncOwF8fDRmRI2M/ORnq7Px4yn1
2024-07-04 22:50:52 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 46 62 6b 79 31 72 46 37 64 55 71 4e 77 34 4b 4d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 38 66 61 35 62 38 33 39 61 31 65 36 30 66 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Fbky1rF7dUqNw4KM.3Context: 78fa5b839a1e60f3<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-04 22:50:53 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-04 22:50:53 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 54 47 34 46 59 71 39 34 50 6b 53 7a 2f 62 48 6c 4f 48 5a 4e 67 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: TG4FYq94PkSz/bHlOHZNgg.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5896, Parent PID: 5980

General

Target ID:	0
Start time:	18:49:24
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4888, Parent PID: 5896

General

Target ID:	2
Start time:	18:49:27
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2120 --field-trial-handle=1896,i,14678065025971338511,13714765998862464718,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3392, Parent PID: 5980

General

Target ID:	3
Start time:	18:49:29
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Windows Analysis Report
http://helpdesk-advertising-review-id-9865133.d3m7n55z273utf.amplifyapp.com/index.html