Edit tour

Windows Analysis Report
http://acticityaccountactuallypages.github.io/

Overview

General Information

Sample URL:	http://acticityaccountactuallypages.github.io/
Analysis ID:	1520228
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6252 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2172,i,15881319247358023124,14805304467598766215,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3536 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://acticityaccountactuallypages.github.io/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET PHISHING Request for Possible Account Phishing Hosted on Github.io

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-27T06:59:07.753448+0200	2027244	1	Potential Corporate Privacy Violation	192.168.2.6	49718	185.199.110.153	443	TCP
2024-09-27T06:59:08.579362+0200	2027244	1	Potential Corporate Privacy Violation	192.168.2.6	49721	185.199.110.153	443	TCP
2024-09-27T06:59:08.579848+0200	2027244	1	Potential Corporate Privacy Violation	192.168.2.6	49720	185.199.110.153	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://acticityaccountactuallypages.github.io/	Avira URL Cloud: detection malicious, Label: phishing
Source: http://acticityaccountactuallypages.github.io/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Antivirus detection for URL or domain

Source: https://acticityaccountactuallypages.github.io/	Avira URL Cloud: Label: phishing
Source: https://acticityaccountactuallypages.github.io/css/cross/hidden_2.css	Avira URL Cloud: Label: phishing
Source: https://acticityaccountactuallypages.github.io/css/cross/hidden.css	Avira URL Cloud: Label: phishing

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:58102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:58103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.6:58104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:58108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:58109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.6:58110 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:58113 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2027244 - Severity 1 - ET PHISHING Request for Possible Account Phishing Hosted on Github.io : 192.168.2.6:49721 -> 185.199.110.153:443
Source: Network traffic	Suricata IDS: 2027244 - Severity 1 - ET PHISHING Request for Possible Account Phishing Hosted on Github.io : 192.168.2.6:49720 -> 185.199.110.153:443
Source: Network traffic	Suricata IDS: 2027244 - Severity 1 - ET PHISHING Request for Possible Account Phishing Hosted on Github.io : 192.168.2.6:49718 -> 185.199.110.153:443

Source: global traffic

TCP traffic: 192.168.2.6:58100 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: acticityaccountactuallypages.github.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/cross/hidden.css HTTP/1.1Host: acticityaccountactuallypages.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://acticityaccountactuallypages.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/cross/hidden_2.css HTTP/1.1Host: acticityaccountactuallypages.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://acticityaccountactuallypages.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4uwWTL4mo5NfnXa&MD=h2HvXsy3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4uwWTL4mo5NfnXa&MD=h2HvXsy3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: acticityaccountactuallypages.github.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: acticityaccountactuallypages.github.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58102
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58103
Source: unknown	Network traffic detected: HTTP traffic on port 58104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 58114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58109
Source: unknown	Network traffic detected: HTTP traffic on port 58108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58108
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58114
Source: unknown	Network traffic detected: HTTP traffic on port 58103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:58102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:58103 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.6:58104 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:58108 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:58109 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.6:58110 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:58113 version: TLS 1.2

Source: classification engine

Classification label: mal64.win@22/6@6/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2172,i,15881319247358023124,14805304467598766215,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://acticityaccountactuallypages.github.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2172,i,15881319247358023124,14805304467598766215,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://acticityaccountactuallypages.github.io/	100%	Avira URL Cloud	phishing
http://acticityaccountactuallypages.github.io/	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://acticityaccountactuallypages.github.io/	100%	Avira URL Cloud	phishing
https://acticityaccountactuallypages.github.io/css/cross/hidden_2.css	100%	Avira URL Cloud	phishing
https://acticityaccountactuallypages.github.io/css/cross/hidden.css	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
acticityaccountactuallypages.github.io	185.199.111.153	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://acticityaccountactuallypages.github.io/	true		unknown
https://acticityaccountactuallypages.github.io/	true	Avira URL Cloud: phishing	unknown
https://acticityaccountactuallypages.github.io/css/cross/hidden.css	true	Avira URL Cloud: phishing	unknown
https://acticityaccountactuallypages.github.io/css/cross/hidden_2.css	true	Avira URL Cloud: phishing	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.199.111.153	acticityaccountactuallypages.github.io	Netherlands	54113	FASTLYUS	false
185.199.110.153	unknown	Netherlands	54113	FASTLYUS	true

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520228
Start date and time:	2024-09-27 06:58:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://acticityaccountactuallypages.github.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.win@22/6@6/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 216.58.206.78, 66.102.1.84, 34.104.35.123, 192.229.221.95, 20.242.39.171, 199.232.214.172, 40.69.42.241, 216.58.206.67
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://acticityaccountactuallypages.github.io/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (55670), with CRLF line terminators
Category:	downloaded
Size (bytes):	311296
Entropy (8bit):	5.372629960393855
Encrypted:	false
SSDEEP:	3072:zXqlB8QYegugepRiP9St0kRaYvDte17kGv6yF6mz3HU0j3LIVulJjU8w28YgUJED:zX+SeSPCuCs3pseSEdHEtSBYRIcHyJen
MD5:	84E98849BC69E441A1D38324D3696767
SHA1:	07EF07919C123E7E0A54A9DF801DEB2E0289F4EE
SHA-256:	3E8C019AEBD0B08284C9FBE70E630DA259074B92C7A5989BE30BAD96CE568B36
SHA-512:	E25228F5D7E759AD3D2635DF7E029A187150A17DE506307CB3281825B9998ABD923E4D3A0747DC05D99B583F3B59BADB6C429B2F5475F00B5529F80623C2730C
Malicious:	false
Reputation:	low
URL:	https://acticityaccountactuallypages.github.io/
Preview:	<html class="__fb-light-mode" lang="en"><head><title>Community Standard</title>.. <link rel="icon" type="image/png" href="img/favicon.ico">.. <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=2,shrink-to-fit=no">.. <meta name="color-scheme" content="light">.. <meta name="theme-color" content="#FFFFFF">.. <link type="text/css" rel="stylesheet" href="css/cross/hidden.css">.. <link type="text/css" rel="stylesheet" href="css/cross/hidden_2.css">.. <style nonce=""></style>.. <style nonce="">.twbca1pg{border-bottom:solid 1px var(--fds-spectrum-teal-dark-1)}.twhas466{border-right:solid 2px}.ut7o74af{border-top:2px solid transparent}.uz2wizr7{border-bottom:2px dashed var(--divider)}.v7lbagvl{border-right:3px dashed var(--media-inner-border)}.w5o66jgc{border-bottom:5px solid transparent}.w7og4mts{border-right:2px solid var(--media-inner-border)}.xxtls0x7{border-left:solid transparent}.a1yigdvo{border-botto

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11259)
Category:	downloaded
Size (bytes):	12478
Entropy (8bit):	5.214344826279296
Encrypted:	false
SSDEEP:	384:aX7UtcW0mvWQWLiW0mvWQWkm/g0yWqKq8Rr8UUrH9I3qqhO:a7ycW0mvWQWWW0mvWQWkmYoqxA3qqhO
MD5:	03965AB9D90C48DDB7EA74C84EE32422
SHA1:	7879531FE445D83F96C360427BA13E39FD3B9E6B
SHA-256:	BFE5CD76647E20B420DA958C1A6D56EAA9D452584A76981CE897AEA8A0D163B4
SHA-512:	A1225BC339AC05BD61AD5ADB05EB46B8A2C89C65AE6A81A064A63794B1B3B857BE4157B5669DFF3A75BA06C26C32C497225CB4F3BA3BC669EED6CC15623914C9
Malicious:	false
Reputation:	low
URL:	https://acticityaccountactuallypages.github.io/css/cross/hidden.css
Preview:	.x1lkfr7t{font-size:14px}..Gar1i5{border-top: 1px solid #dddfe2;padding: 10px 0px 10px 0px;}..rot0o{margin-top: 6px;font-size: 14px;font-weight: 400;color: #000000;font-family: Segoe UI Historic, Segoe UI, Helvetica, Arial, sans-serif;line-height: 1.1765;}..KolM4x{width: 100%;display: flex;box-sizing: border-box;padding-top: 6px;}..inPUt1{width: 100%;color: rgba(0,0,0,.85);font-size: 14px;border-radius: 6px;border-color: rgba(0,0,0,.15);border-width: 1px;padding: 11px;border-style: solid;}..inPUt1err{width: 100%;color: rgba(0,0,0,.85);font-size: 14px;border-radius: 6px;border-color: rgb(255 0 0);border-width: 1px;padding: 11px;border-style: solid;}..KolM4xBir{width: 100%;display: flex;box-sizing: border-box;margin-bottom: 37px;}..inPUt2{color: rgba(0,0,0,.85);font-size: 14px;border-radius: 6px;border-color: rgba(0,0,0,.15);border-width: 1px;padding: 10px;border-style: solid;}..spCBir{margin-right: 5px;}..BirT3X{margin-top: 5px;margin-left: 3px;margin-bottom: 1px;font-size: 14px;color:

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38068), with CRLF line terminators
Category:	downloaded
Size (bytes):	573319
Entropy (8bit):	5.283389625089064
Encrypted:	false
SSDEEP:	3072:+XwLX/myWHo/Rbd/o5eqGFQDqSQuStayCpp0uz1QN+1KIo6U9U2VLTNzJnUz:Yw2oZx/oMQuSQuStaDp0uz0TNz+
MD5:	DFD1DBC0CE36FE3DBBBC28BBE82D7FDF
SHA1:	96DFAF86FB27BC36C1B604051FB422B3E67B507D
SHA-256:	84AC2481A5E38D5A974CE16F8D55DC322D38F6E021E4A45A9580091FB0AA6BD3
SHA-512:	C01D4A299FDE02F8CB59F5BE11EBCDBAF935B416A03387FEE0E2CB6A1E22FEC78CD7F3D9AE7F7D7AE723E93F977803365870E21762763D11F5861951CF5FC9DE
Malicious:	false
Reputation:	low
URL:	https://acticityaccountactuallypages.github.io/css/cross/hidden_2.css
Preview:	form{margin:0;padding:0}label{color:#606770;cursor:default;font-weight:600;vertical-align:middle}label input{font-weight:normal}textarea,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textarea{max-width:100%}select{border:1px solid #ccd0d5;padding:2px}input,select,textarea{background-color:#fff;color:#1c1e21}.inputtext,.inputpassword{padding-bottom:4px}.inputtext:invalid,.inputpassword:invalid{box-shadow:none}.inputradio{margin:0 5px 0 0;padding:0;vertical-align:middle}.inputcheckbox{border:0;vertical-align:middle}.inputbutton,.inputsubmit{background-color:#4267b2;border-color:#DADDE1 #0e1f5b #0e1f5b #d9dfea;border-style:solid;border-width:1px;color:#fff;padding:2px 15px 3px 15px;text-align:center}.inputaux{background:#ebedf0;border-color:#EBEDF0 #666 #666 #e7e7e7;color:#000}.inputsearch{background:#FFFFFF url(/rsrc.php/v3/yL/r/unHwF9CkMyM.png) no-repeat left 4px;padding-left:17px}..html{touch-action:manipulation}body{bac

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-27T06:59:07.753448+0200	2027244	ET PHISHING Request for Possible Account Phishing Hosted on Github.io	1	192.168.2.6	49718	185.199.110.153	443	TCP
2024-09-27T06:59:08.579362+0200	2027244	ET PHISHING Request for Possible Account Phishing Hosted on Github.io	1	192.168.2.6	49721	185.199.110.153	443	TCP
2024-09-27T06:59:08.579848+0200	2027244	ET PHISHING Request for Possible Account Phishing Hosted on Github.io	1	192.168.2.6	49720	185.199.110.153	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 06:58:56.553841114 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 27, 2024 06:58:56.553958893 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 27, 2024 06:58:56.897646904 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 27, 2024 06:59:05.595592022 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:05.595649004 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:05.595714092 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:05.596379042 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:05.596395016 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:06.286262035 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 27, 2024 06:59:06.348773956 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 27, 2024 06:59:06.378678083 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:06.378760099 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:06.383567095 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:06.383596897 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:06.383878946 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:06.385843992 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:06.385905027 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:06.385914087 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:06.386034966 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:06.431396008 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:06.536962986 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 27, 2024 06:59:06.557049990 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:06.557673931 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:06.557698965 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:06.557720900 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:06.557893038 CEST	443	49713	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:06.557949066 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:06.557966948 CEST	49713	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:06.790347099 CEST	49716	80	192.168.2.6	185.199.111.153
Sep 27, 2024 06:59:06.790479898 CEST	49717	80	192.168.2.6	185.199.111.153
Sep 27, 2024 06:59:06.795201063 CEST	80	49716	185.199.111.153	192.168.2.6
Sep 27, 2024 06:59:06.795300961 CEST	80	49717	185.199.111.153	192.168.2.6
Sep 27, 2024 06:59:06.795315027 CEST	49716	80	192.168.2.6	185.199.111.153
Sep 27, 2024 06:59:06.795368910 CEST	49717	80	192.168.2.6	185.199.111.153
Sep 27, 2024 06:59:06.795471907 CEST	49716	80	192.168.2.6	185.199.111.153
Sep 27, 2024 06:59:06.800240040 CEST	80	49716	185.199.111.153	192.168.2.6
Sep 27, 2024 06:59:07.253432989 CEST	80	49716	185.199.111.153	192.168.2.6
Sep 27, 2024 06:59:07.273812056 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.273852110 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.273938894 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.274147034 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.274153948 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.304124117 CEST	49716	80	192.168.2.6	185.199.111.153
Sep 27, 2024 06:59:07.749398947 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.753448009 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.753462076 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.754462957 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.754518032 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.769145966 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.769263029 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.769517899 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.769536018 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.810122013 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.908906937 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.909082890 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.909109116 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.909126043 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.909132004 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.909190893 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.909200907 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.909473896 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.909517050 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.909519911 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.909591913 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.909787893 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.909790993 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.910346031 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.910376072 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.910408020 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.910410881 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.910449028 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:07.925072908 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:07.965070009 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.000361919 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.000370979 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.000386953 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.000406027 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.000411034 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.000428915 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.000435114 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.000498056 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.000502110 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.000539064 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.002099991 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.002129078 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.002192020 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.002196074 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.002244949 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.090776920 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.090799093 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.090847969 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.090856075 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.090912104 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.092108011 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.092125893 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.092163086 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.092169046 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.092226028 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.093826056 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.093851089 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.093852043 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.093883038 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.093888044 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.093890905 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.093935013 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.093959093 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.094943047 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.094964027 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.094999075 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.095004082 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.095065117 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.095185041 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.095232010 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.095282078 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.099461079 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.099479914 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.100128889 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.100145102 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.168662071 CEST	443	49705	173.222.162.64	192.168.2.6
Sep 27, 2024 06:59:08.168773890 CEST	49705	443	192.168.2.6	173.222.162.64
Sep 27, 2024 06:59:08.181448936 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.181469917 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.181543112 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.181549072 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.181588888 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.182926893 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.182943106 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.182991028 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.182996988 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.183037996 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.184066057 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.184081078 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.184142113 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.184145927 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.184181929 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.185699940 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.185715914 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.185764074 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.185769081 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.185805082 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.186778069 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.186801910 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.186830997 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.186836958 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.186889887 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.188523054 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.188560963 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.188586950 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.188596010 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.188635111 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.230197906 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.239279985 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.239312887 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.239352942 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.239362001 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.239398003 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.239434004 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.271894932 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.271929026 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.271965981 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.271977901 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.272025108 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.272552013 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.272578001 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.272604942 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.272610903 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.272634983 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.272656918 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.273081064 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.273102045 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.273134947 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.273138046 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.273170948 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.273188114 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.273798943 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.273818970 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.273858070 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.273861885 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.273919106 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.274528027 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.274547100 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.274574995 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.274581909 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.274604082 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.274627924 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.274801970 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.274873018 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.274913073 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.298897982 CEST	49718	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.298918962 CEST	443	49718	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.549004078 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.560106039 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.579361916 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.579396009 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.579848051 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.579916000 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.580220938 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.581204891 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.621037006 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.621048927 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.668803930 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.669007063 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.671241045 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.671678066 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.687448025 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.687561035 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.735397100 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.735410929 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.808077097 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.808124065 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.808142900 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.808165073 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.808168888 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.808188915 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.808212042 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.808701992 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.808727026 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.808751106 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.808780909 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.808815956 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.808830976 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.808861017 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.808895111 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.808903933 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.813707113 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.813760042 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.823724031 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.824004889 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.824054003 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.824081898 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.824187994 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.824229002 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.824235916 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.824356079 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.824398994 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.824404955 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.824855089 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.824897051 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.824903011 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.824995041 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.825036049 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.825046062 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.839030027 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.839107990 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.839121103 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.880078077 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.910583019 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.910742044 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.910820007 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.910852909 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.910868883 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.910906076 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.910912037 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.910979986 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.911019087 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.911024094 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.911120892 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.911159992 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.911164045 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.911232948 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.911273003 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.911278009 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.911654949 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.911700964 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.911705971 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.911824942 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.911873102 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.911878109 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.911936045 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.911973953 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.911978006 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.912516117 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.912564039 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.912569046 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.912674904 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.912719011 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.912723064 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.912787914 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.912827015 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.912831068 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.916208982 CEST	49721	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.916238070 CEST	443	49721	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.958194971 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.958209991 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.997766972 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.997790098 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.997833014 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.997843981 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.997852087 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.997869015 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.997884035 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.997899055 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.997914076 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.997921944 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.997932911 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.997951984 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.998517036 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.998580933 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.998595953 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.998605013 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.998631001 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.999624968 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.999672890 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.999689102 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:08.999711037 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:08.999732018 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.051968098 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.052227020 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.052248955 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.052285910 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.052305937 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.052330017 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.052340031 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.052362919 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.052386999 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.083559990 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.083604097 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.083731890 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.083733082 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.083755970 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.083806992 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.084290981 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.084330082 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.084398985 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.084398985 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.084404945 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.084630013 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.084943056 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.084983110 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.085020065 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.085024118 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.085035086 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.085481882 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.085890055 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.085932970 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.085967064 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.085971117 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.086066961 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.086704016 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.086743116 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.086779118 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.086782932 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.086805105 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.086838961 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.087435961 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.087475061 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.087511063 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.087516069 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.087565899 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.087565899 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.088018894 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.088061094 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.088095903 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.088100910 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:09.088125944 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:09.088326931 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.187208891 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.187237978 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.187284946 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.187316895 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.187378883 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.187443972 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.187443972 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.188079119 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.188122988 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.188175917 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.188175917 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.188193083 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.188246012 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.188314915 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.188357115 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.188385963 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.188397884 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.188426971 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.188446045 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.188903093 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.188945055 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.189022064 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.189033031 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.189074039 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.189074039 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.192203045 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.192260027 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.192284107 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.192296028 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.192327976 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.192348003 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.192835093 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.192873955 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.192936897 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.192953110 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.192981005 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.193000078 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.193411112 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.193454981 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.193497896 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.193509102 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.193536043 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.193555117 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.193875074 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.193916082 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.193947077 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.193957090 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.193985939 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.194005966 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.194396019 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.194437027 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.194467068 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.194478035 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.194515944 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.194515944 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.194969893 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.195012093 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.195049047 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.195060968 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.195089102 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.195106030 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.195286036 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.195323944 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.195353031 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.195364952 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.195415020 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.195415020 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.195910931 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.195976019 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.195982933 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.196008921 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.196059942 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.196185112 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.196224928 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.196290016 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.196300983 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.196350098 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.196350098 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.196948051 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.196990013 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.197033882 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.197045088 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.197077990 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.197098017 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.197309971 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.197350025 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.197381973 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.197391987 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.197418928 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.197453976 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.197938919 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.197964907 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.198009014 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.198020935 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.198072910 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.198072910 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.198350906 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.198365927 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.198424101 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.198436022 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.198483944 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.198612928 CEST	49724	443	192.168.2.6	142.250.184.196
Sep 27, 2024 06:59:10.198669910 CEST	443	49724	142.250.184.196	192.168.2.6
Sep 27, 2024 06:59:10.198736906 CEST	49724	443	192.168.2.6	142.250.184.196
Sep 27, 2024 06:59:10.198924065 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.198937893 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.198992014 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.199007034 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.199038982 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.199058056 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.199311018 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.199330091 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.199345112 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.199415922 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.199434042 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.199459076 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.199495077 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.199964046 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.199979067 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.200081110 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.200093031 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.200169086 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.200176001 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.200186014 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.200239897 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.200239897 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.200294018 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.200309992 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.200340986 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.200340986 CEST	49724	443	192.168.2.6	142.250.184.196
Sep 27, 2024 06:59:10.200375080 CEST	443	49724	142.250.184.196	192.168.2.6
Sep 27, 2024 06:59:10.200397015 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.200695992 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.200757027 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.200761080 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.200805902 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.211941957 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.213985920 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.217231989 CEST	49720	443	192.168.2.6	185.199.110.153
Sep 27, 2024 06:59:10.217252016 CEST	443	49720	185.199.110.153	192.168.2.6
Sep 27, 2024 06:59:10.463589907 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:10.463624954 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:10.463711977 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:10.467694998 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:10.467711926 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:10.623322010 CEST	58100	53	192.168.2.6	1.1.1.1
Sep 27, 2024 06:59:10.628223896 CEST	53	58100	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:10.628305912 CEST	58100	53	192.168.2.6	1.1.1.1
Sep 27, 2024 06:59:10.628351927 CEST	58100	53	192.168.2.6	1.1.1.1
Sep 27, 2024 06:59:10.633194923 CEST	53	58100	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:10.833710909 CEST	443	49724	142.250.184.196	192.168.2.6
Sep 27, 2024 06:59:10.834101915 CEST	49724	443	192.168.2.6	142.250.184.196
Sep 27, 2024 06:59:10.834184885 CEST	443	49724	142.250.184.196	192.168.2.6
Sep 27, 2024 06:59:10.835697889 CEST	443	49724	142.250.184.196	192.168.2.6
Sep 27, 2024 06:59:10.835772038 CEST	49724	443	192.168.2.6	142.250.184.196
Sep 27, 2024 06:59:11.076128006 CEST	53	58100	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:11.076934099 CEST	58100	53	192.168.2.6	1.1.1.1
Sep 27, 2024 06:59:11.081948042 CEST	53	58100	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:11.082010984 CEST	58100	53	192.168.2.6	1.1.1.1
Sep 27, 2024 06:59:11.129986048 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:11.130737066 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:11.137196064 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:11.137212038 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:11.137643099 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:11.170175076 CEST	49724	443	192.168.2.6	142.250.184.196
Sep 27, 2024 06:59:11.170356989 CEST	443	49724	142.250.184.196	192.168.2.6
Sep 27, 2024 06:59:11.193731070 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:11.224169970 CEST	49724	443	192.168.2.6	142.250.184.196
Sep 27, 2024 06:59:11.224225998 CEST	443	49724	142.250.184.196	192.168.2.6
Sep 27, 2024 06:59:11.253724098 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:11.270977020 CEST	49724	443	192.168.2.6	142.250.184.196
Sep 27, 2024 06:59:11.299407005 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:11.442224026 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:11.442291975 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:11.442425966 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:11.442622900 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:11.442624092 CEST	49725	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:11.442643881 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:11.442656994 CEST	443	49725	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:11.511759996 CEST	58102	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:11.511854887 CEST	443	58102	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:11.512015104 CEST	58102	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:11.512706995 CEST	58102	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:11.512734890 CEST	443	58102	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:12.172203064 CEST	443	58102	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:12.172307968 CEST	58102	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:12.175282001 CEST	58102	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:12.175318956 CEST	443	58102	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:12.175733089 CEST	443	58102	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:12.177289009 CEST	58102	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:12.223412991 CEST	443	58102	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:12.452549934 CEST	443	58102	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:12.452644110 CEST	443	58102	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:12.452717066 CEST	58102	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:12.453557968 CEST	58102	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:12.453558922 CEST	58102	443	192.168.2.6	184.28.90.27
Sep 27, 2024 06:59:12.453622103 CEST	443	58102	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:12.453650951 CEST	443	58102	184.28.90.27	192.168.2.6
Sep 27, 2024 06:59:14.732999086 CEST	58103	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:14.733043909 CEST	443	58103	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:14.733104944 CEST	58103	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:14.733788967 CEST	58103	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:14.733802080 CEST	443	58103	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:15.547770023 CEST	443	58103	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:15.547951937 CEST	58103	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:15.549735069 CEST	58103	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:15.549745083 CEST	443	58103	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:15.550118923 CEST	443	58103	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:15.551925898 CEST	58103	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:15.551925898 CEST	58103	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:15.551939964 CEST	443	58103	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:15.552073002 CEST	58103	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:15.599417925 CEST	443	58103	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:15.725718975 CEST	443	58103	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:15.725805044 CEST	443	58103	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:15.726210117 CEST	58103	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:15.726244926 CEST	443	58103	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:15.726300001 CEST	58103	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:15.726300001 CEST	58103	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:15.726310015 CEST	443	58103	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:16.770787001 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:16.770819902 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:16.770948887 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:16.776251078 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:16.776266098 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.368566036 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.368660927 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:17.379430056 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:17.379448891 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.379776001 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.427567959 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:17.566618919 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:17.611406088 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.759423018 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.759485006 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.759506941 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.759546995 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.759558916 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:17.759582996 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.759596109 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.759609938 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:17.759633064 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:17.759632111 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.759665966 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.759694099 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:17.759704113 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:17.759711027 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.760107040 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:17.760176897 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:17.770659924 CEST	58104	443	192.168.2.6	20.12.23.50
Sep 27, 2024 06:59:17.770679951 CEST	443	58104	20.12.23.50	192.168.2.6
Sep 27, 2024 06:59:20.758636951 CEST	443	49724	142.250.184.196	192.168.2.6
Sep 27, 2024 06:59:20.758804083 CEST	443	49724	142.250.184.196	192.168.2.6
Sep 27, 2024 06:59:20.758891106 CEST	49724	443	192.168.2.6	142.250.184.196
Sep 27, 2024 06:59:21.898169994 CEST	49724	443	192.168.2.6	142.250.184.196
Sep 27, 2024 06:59:21.898206949 CEST	443	49724	142.250.184.196	192.168.2.6
Sep 27, 2024 06:59:30.747905970 CEST	58108	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:30.747946024 CEST	443	58108	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:30.748056889 CEST	58108	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:30.748657942 CEST	58108	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:30.748677015 CEST	443	58108	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:31.528306007 CEST	443	58108	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:31.528486967 CEST	58108	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:31.533751011 CEST	58108	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:31.533771992 CEST	443	58108	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:31.534094095 CEST	443	58108	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:31.535963058 CEST	58108	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:31.536107063 CEST	58108	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:31.536107063 CEST	58108	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:31.536113977 CEST	443	58108	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:31.583406925 CEST	443	58108	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:31.706166029 CEST	443	58108	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:31.706269979 CEST	443	58108	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:31.706634045 CEST	58108	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:31.706634045 CEST	58108	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:31.706662893 CEST	443	58108	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:31.706691027 CEST	58108	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:49.551706076 CEST	58109	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:49.551770926 CEST	443	58109	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:49.551831961 CEST	58109	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:49.553862095 CEST	58109	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:49.553877115 CEST	443	58109	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:50.336560965 CEST	443	58109	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:50.336702108 CEST	58109	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:50.338294029 CEST	58109	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:50.338305950 CEST	443	58109	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:50.339106083 CEST	443	58109	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:50.340919018 CEST	58109	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:50.341053009 CEST	58109	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:50.341059923 CEST	443	58109	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:50.341289997 CEST	58109	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:50.383408070 CEST	443	58109	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:50.511511087 CEST	443	58109	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:50.511674881 CEST	443	58109	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:50.512482882 CEST	58109	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:50.512482882 CEST	58109	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:50.512521029 CEST	443	58109	40.113.103.199	192.168.2.6
Sep 27, 2024 06:59:50.512547016 CEST	58109	443	192.168.2.6	40.113.103.199
Sep 27, 2024 06:59:51.802654028 CEST	49717	80	192.168.2.6	185.199.111.153
Sep 27, 2024 06:59:51.807595968 CEST	80	49717	185.199.111.153	192.168.2.6
Sep 27, 2024 06:59:52.271507978 CEST	49716	80	192.168.2.6	185.199.111.153
Sep 27, 2024 06:59:52.277690887 CEST	80	49716	185.199.111.153	192.168.2.6
Sep 27, 2024 06:59:54.125274897 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:54.125317097 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:54.125477076 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:54.125822067 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:54.125844002 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:54.795813084 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:54.796153069 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:54.797600031 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:54.797617912 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:54.797946930 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:54.806941986 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:54.847410917 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:55.050599098 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:55.050632954 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:55.050652027 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:55.050825119 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:55.050843000 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:55.050863028 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:55.050905943 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:55.050908089 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:55.050923109 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:55.051009893 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:55.051009893 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:55.051512957 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:55.051578999 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:55.051680088 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:55.055502892 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:55.055516958 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 06:59:55.055566072 CEST	58110	443	192.168.2.6	52.165.165.26
Sep 27, 2024 06:59:55.055579901 CEST	443	58110	52.165.165.26	192.168.2.6
Sep 27, 2024 07:00:07.899643898 CEST	49717	80	192.168.2.6	185.199.111.153
Sep 27, 2024 07:00:07.905255079 CEST	80	49717	185.199.111.153	192.168.2.6
Sep 27, 2024 07:00:07.908150911 CEST	49717	80	192.168.2.6	185.199.111.153
Sep 27, 2024 07:00:09.595829964 CEST	58112	443	192.168.2.6	142.250.184.196
Sep 27, 2024 07:00:09.595874071 CEST	443	58112	142.250.184.196	192.168.2.6
Sep 27, 2024 07:00:09.596189976 CEST	58112	443	192.168.2.6	142.250.184.196
Sep 27, 2024 07:00:09.596673012 CEST	58112	443	192.168.2.6	142.250.184.196
Sep 27, 2024 07:00:09.596685886 CEST	443	58112	142.250.184.196	192.168.2.6
Sep 27, 2024 07:00:09.981370926 CEST	58113	443	192.168.2.6	40.113.103.199
Sep 27, 2024 07:00:09.981427908 CEST	443	58113	40.113.103.199	192.168.2.6
Sep 27, 2024 07:00:09.981590033 CEST	58113	443	192.168.2.6	40.113.103.199
Sep 27, 2024 07:00:09.982211113 CEST	58113	443	192.168.2.6	40.113.103.199
Sep 27, 2024 07:00:09.982223988 CEST	443	58113	40.113.103.199	192.168.2.6
Sep 27, 2024 07:00:10.225935936 CEST	443	58112	142.250.184.196	192.168.2.6
Sep 27, 2024 07:00:10.226927042 CEST	58112	443	192.168.2.6	142.250.184.196
Sep 27, 2024 07:00:10.226941109 CEST	443	58112	142.250.184.196	192.168.2.6
Sep 27, 2024 07:00:10.227417946 CEST	443	58112	142.250.184.196	192.168.2.6
Sep 27, 2024 07:00:10.228895903 CEST	58112	443	192.168.2.6	142.250.184.196
Sep 27, 2024 07:00:10.228980064 CEST	443	58112	142.250.184.196	192.168.2.6
Sep 27, 2024 07:00:10.271425009 CEST	58112	443	192.168.2.6	142.250.184.196
Sep 27, 2024 07:00:10.758065939 CEST	443	58113	40.113.103.199	192.168.2.6
Sep 27, 2024 07:00:10.758153915 CEST	58113	443	192.168.2.6	40.113.103.199
Sep 27, 2024 07:00:10.760211945 CEST	58113	443	192.168.2.6	40.113.103.199
Sep 27, 2024 07:00:10.760231972 CEST	443	58113	40.113.103.199	192.168.2.6
Sep 27, 2024 07:00:10.760607004 CEST	443	58113	40.113.103.199	192.168.2.6
Sep 27, 2024 07:00:10.762475014 CEST	58113	443	192.168.2.6	40.113.103.199
Sep 27, 2024 07:00:10.762538910 CEST	58113	443	192.168.2.6	40.113.103.199
Sep 27, 2024 07:00:10.762548923 CEST	443	58113	40.113.103.199	192.168.2.6
Sep 27, 2024 07:00:10.762697935 CEST	58113	443	192.168.2.6	40.113.103.199
Sep 27, 2024 07:00:10.807409048 CEST	443	58113	40.113.103.199	192.168.2.6
Sep 27, 2024 07:00:10.932425976 CEST	443	58113	40.113.103.199	192.168.2.6
Sep 27, 2024 07:00:10.932585001 CEST	443	58113	40.113.103.199	192.168.2.6
Sep 27, 2024 07:00:10.932646036 CEST	58113	443	192.168.2.6	40.113.103.199
Sep 27, 2024 07:00:10.936372042 CEST	58113	443	192.168.2.6	40.113.103.199
Sep 27, 2024 07:00:10.936395884 CEST	443	58113	40.113.103.199	192.168.2.6
Sep 27, 2024 07:00:20.143115044 CEST	443	58112	142.250.184.196	192.168.2.6
Sep 27, 2024 07:00:20.143219948 CEST	443	58112	142.250.184.196	192.168.2.6
Sep 27, 2024 07:00:20.143405914 CEST	58112	443	192.168.2.6	142.250.184.196
Sep 27, 2024 07:00:21.899285078 CEST	58112	443	192.168.2.6	142.250.184.196
Sep 27, 2024 07:00:21.899307013 CEST	443	58112	142.250.184.196	192.168.2.6
Sep 27, 2024 07:00:32.444365025 CEST	58114	443	192.168.2.6	40.115.3.253
Sep 27, 2024 07:00:32.444417000 CEST	443	58114	40.115.3.253	192.168.2.6
Sep 27, 2024 07:00:32.444545984 CEST	58114	443	192.168.2.6	40.115.3.253
Sep 27, 2024 07:00:32.445382118 CEST	58114	443	192.168.2.6	40.115.3.253
Sep 27, 2024 07:00:32.445408106 CEST	443	58114	40.115.3.253	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 06:59:05.486248016 CEST	53	58262	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:05.560506105 CEST	53	55908	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:06.555571079 CEST	53	57474	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:06.778565884 CEST	65460	53	192.168.2.6	1.1.1.1
Sep 27, 2024 06:59:06.778886080 CEST	50390	53	192.168.2.6	1.1.1.1
Sep 27, 2024 06:59:06.787272930 CEST	53	65460	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:06.787942886 CEST	53	50390	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:07.261725903 CEST	49655	53	192.168.2.6	1.1.1.1
Sep 27, 2024 06:59:07.261836052 CEST	57065	53	192.168.2.6	1.1.1.1
Sep 27, 2024 06:59:07.269720078 CEST	53	57065	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:07.270735025 CEST	53	49655	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:09.495548010 CEST	65305	53	192.168.2.6	1.1.1.1
Sep 27, 2024 06:59:09.495548010 CEST	53416	53	192.168.2.6	1.1.1.1
Sep 27, 2024 06:59:10.189941883 CEST	53	65305	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:10.189955950 CEST	53	53416	1.1.1.1	192.168.2.6
Sep 27, 2024 06:59:10.622240067 CEST	53	59484	1.1.1.1	192.168.2.6
Sep 27, 2024 07:00:05.202752113 CEST	53	56659	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 06:59:06.778565884 CEST	192.168.2.6	1.1.1.1	0x30b6	Standard query (0)	acticityaccountactuallypages.github.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:06.778886080 CEST	192.168.2.6	1.1.1.1	0x55c	Standard query (0)	acticityaccountactuallypages.github.io	65	IN (0x0001)	false
Sep 27, 2024 06:59:07.261725903 CEST	192.168.2.6	1.1.1.1	0xf6d7	Standard query (0)	acticityaccountactuallypages.github.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:07.261836052 CEST	192.168.2.6	1.1.1.1	0xfc97	Standard query (0)	acticityaccountactuallypages.github.io	65	IN (0x0001)	false
Sep 27, 2024 06:59:09.495548010 CEST	192.168.2.6	1.1.1.1	0xf848	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:09.495548010 CEST	192.168.2.6	1.1.1.1	0x121d	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 27, 2024 06:59:06.787272930 CEST	1.1.1.1	192.168.2.6	0x30b6	No error (0)	acticityaccountactuallypages.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:06.787272930 CEST	1.1.1.1	192.168.2.6	0x30b6	No error (0)	acticityaccountactuallypages.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:06.787272930 CEST	1.1.1.1	192.168.2.6	0x30b6	No error (0)	acticityaccountactuallypages.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:06.787272930 CEST	1.1.1.1	192.168.2.6	0x30b6	No error (0)	acticityaccountactuallypages.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:07.270735025 CEST	1.1.1.1	192.168.2.6	0xf6d7	No error (0)	acticityaccountactuallypages.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:07.270735025 CEST	1.1.1.1	192.168.2.6	0xf6d7	No error (0)	acticityaccountactuallypages.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:07.270735025 CEST	1.1.1.1	192.168.2.6	0xf6d7	No error (0)	acticityaccountactuallypages.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:07.270735025 CEST	1.1.1.1	192.168.2.6	0xf6d7	No error (0)	acticityaccountactuallypages.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:10.189941883 CEST	1.1.1.1	192.168.2.6	0xf848	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:10.189955950 CEST	1.1.1.1	192.168.2.6	0x121d	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 27, 2024 06:59:17.387258053 CEST	1.1.1.1	192.168.2.6	0x65c8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 27, 2024 06:59:17.387258053 CEST	1.1.1.1	192.168.2.6	0x65c8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:19.329657078 CEST	1.1.1.1	192.168.2.6	0x292d	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:59:19.329657078 CEST	1.1.1.1	192.168.2.6	0x292d	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

acticityaccountactuallypages.github.io

https:

fs.microsoft.com

slscr.update.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	185.199.111.153	80	6252	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 06:59:06.795471907 CEST	453	OUT	GET / HTTP/1.1 Host: acticityaccountactuallypages.github.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 06:59:07.253432989 CEST	721	IN	HTTP/1.1 301 Moved Permanently Connection: keep-alive Content-Length: 162 Server: GitHub.com Content-Type: text/html permissions-policy: interest-cohort=() Location: https://acticityaccountactuallypages.github.io/ X-GitHub-Request-Id: B28D:B4E6B:346742:3AF0B2:66F63B9A Accept-Ranges: bytes Age: 0 Date: Fri, 27 Sep 2024 04:59:07 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740041-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727413147.199635,VS0,VE9 Vary: Accept-Encoding X-Fastly-Request-ID: e9c3f72ec31362d10184ca404645d515e8298b0f Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Sep 27, 2024 06:59:52.271507978 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49717	185.199.111.153	80	6252	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 06:59:51.802654028 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49713	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:59:06 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 46 5a 56 53 48 74 59 68 6f 55 65 4d 71 4e 68 74 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 34 61 39 65 31 38 32 33 31 63 34 31 31 39 35 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: FZVSHtYhoUeMqNht.1Context: c4a9e18231c41195
2024-09-27 04:59:06 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-27 04:59:06 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 46 5a 56 53 48 74 59 68 6f 55 65 4d 71 4e 68 74 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 34 61 39 65 31 38 32 33 31 63 34 31 31 39 35 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 6b 4b 48 6b 2f 74 38 57 5a 36 46 4b 7a 4b 31 48 5a 2b 6c 57 39 75 78 5a 75 58 66 70 33 68 6d 4e 2b 36 4f 33 6b 2b 68 41 31 47 73 78 6c 74 4e 35 62 57 43 47 51 45 4d 32 52 77 62 6c 6d 63 34 71 32 75 4a 68 4a 61 36 38 46 67 32 6d 61 52 49 4b 44 50 53 79 62 46 48 58 41 4f 70 69 32 76 38 6a 6c 54 37 39 39 74 47 56 42 67 39 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: FZVSHtYhoUeMqNht.2Context: c4a9e18231c41195<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAakKHk/t8WZ6FKzK1HZ+lW9uxZuXfp3hmN+6O3k+hA1GsxltN5bWCGQEM2Rwblmc4q2uJhJa68Fg2maRIKDPSybFHXAOpi2v8jlT799tGVBg98
2024-09-27 04:59:06 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 46 5a 56 53 48 74 59 68 6f 55 65 4d 71 4e 68 74 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 34 61 39 65 31 38 32 33 31 63 34 31 31 39 35 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: FZVSHtYhoUeMqNht.3Context: c4a9e18231c41195<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-27 04:59:06 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-27 04:59:06 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 58 42 4b 6c 4b 4a 6d 4d 73 30 61 5a 64 57 33 57 63 37 70 55 55 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: XBKlKJmMs0aZdW3Wc7pUUQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49718	185.199.110.153	443	6252	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:59:07 UTC	681	OUT	GET / HTTP/1.1 Host: acticityaccountactuallypages.github.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:59:07 UTC	736	IN	HTTP/1.1 200 OK Connection: close Content-Length: 335894 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sat, 06 Jan 2024 10:16:00 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "65992860-52016" expires: Fri, 27 Sep 2024 05:09:07 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 0FB0:11D1CA:375EA0:3DE8B6:66F63B9A Accept-Ranges: bytes Age: 0 Date: Fri, 27 Sep 2024 04:59:07 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740021-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727413148.819416,VS0,VE42 Vary: Accept-Encoding X-Fastly-Request-ID: eb265da2cb7c6bfe9b897846a770f9396186b8e8
2024-09-27 04:59:07 UTC	1378	IN	Data Raw: 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 5f 5f 66 62 2d 6c 69 67 68 74 2d 6d 6f 64 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 6f 6d 6d 75 6e 69 74 79 20 53 74 61 6e 64 61 72 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 Data Ascii: <html class="__fb-light-mode" lang="en"><head><title>Community Standard</title> <link rel="icon" type="image/png" href="img/favicon.ico"> <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=2,shrink-to-fit=no"
2024-09-27 04:59:07 UTC	1378	IN	Data Raw: 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 65 61 6c 2d 64 61 72 6b 2d 31 29 7d 2e 61 66 64 31 69 64 70 71 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 73 65 2d 67 72 61 70 65 29 7d 2e 61 66 64 7a 79 6c 35 61 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 7d 2e 61 66 77 6d 6c 32 75 69 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 7d 2e 61 66 78 73 70 39 6f 34 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 70 78 7d 2e 61 67 65 68 61 6e 32 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 30 7d 2e 61 67 Data Ascii: rder-bottom-color:var(--fds-spectrum-teal-dark-1)}.afd1idpq{border-top-color:var(--base-grape)}.afdzyl5a{border-right-color:var(--shadow-1)}.afwml2ui{border-bottom-color:var(--shadow-1)}.afxsp9o4{border-bottom-width:1px}.agehan2d{border-bottom-width:0}.ag
2024-09-27 04:59:07 UTC	1378	IN	Data Raw: 2e 6e 37 70 34 35 73 63 31 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 73 65 2d 63 68 65 72 72 79 29 7d 2e 6e 38 65 6a 33 6f 33 6c 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 30 7d 2e 6e 61 6c 6d 36 33 6e 78 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 61 73 68 29 7d 2e 6e 63 77 6e 6a 76 64 70 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 6e 67 34 6f 65 73 39 77 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 61 63 63 65 6e 74 29 7d 2e 6e 69 78 7a 69 36 79 71 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 32 2e 37 35 70 78 Data Ascii: .n7p45sc1{border-top-color:var(--base-cherry)}.n8ej3o3l{border-right-width:0}.nalm63nx{border-bottom-color:var(--wash)}.ncwnjvdp{border-top-color:var(--secondary-button-background)}.ng4oes9w{border-top-color:var(--accent)}.nixzi6yq{border-top-width:2.75px
2024-09-27 04:59:07 UTC	1378	IN	Data Raw: 29 7d 2e 6f 6c 33 6f 39 69 7a 64 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 29 7d 2e 6f 6d 36 34 32 69 31 77 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 33 30 70 78 7d 2e 6f 6d 66 6a 36 75 35 78 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 6f 6d 75 36 72 6f 62 63 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 74 68 69 6e 7d 2e 6f 6e 61 30 75 76 71 30 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 31 61 31 61 31 61 7d 2e 6f 6f 6e 6d 32 73 72 6d 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 66 64 62 33 32 61 7d 2e 6f 6f 71 38 34 35 78 73 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 Data Ascii: )}.ol3o9izd{border-left-color:var(--highlight-bg)}.om642i1w{border-top-width:30px}.omfj6u5x{border-right-style:none}.omu6robc{border-left-width:thin}.ona0uvq0{border-top-color:#1a1a1a}.oonm2srm{border-right-color:#fdb32a}.ooq845xs{border-bottom-color:var(
2024-09-27 04:59:07 UTC	1378	IN	Data Raw: 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 72 37 70 35 73 35 32 7a 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 32 2e 37 35 70 78 7d 2e 72 39 6b 68 67 77 66 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 32 2e 35 70 78 7d 2e 72 62 79 71 37 72 67 35 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 61 73 68 29 7d 2e 72 65 39 32 67 78 69 35 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 34 31 70 78 7d 2e 72 68 34 70 7a 63 6a 7a 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 76 61 72 28 2d 2d 61 6c 77 61 79 73 2d 77 68 69 74 65 29 2c 2e 33 29 7d 2e 72 68 35 37 31 6f 61 34 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 Data Ascii: :transparent}.r7p5s52z{border-left-width:2.75px}.r9khgwfr{border-top-width:2.5px}.rbyq7rg5{border-left-color:var(--wash)}.re92gxi5{border-top-width:41px}.rh4pzcjz{border-left-color:rgba(var(--always-white),.3)}.rh571oa4{border-bottom-color:var(--primary-t
2024-09-27 04:59:07 UTC	1378	IN	Data Raw: 6f 79 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 64 73 2d 67 72 65 65 6e 2d 35 35 29 7d 2e 74 34 6c 36 39 72 32 32 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 65 62 2d 77 61 73 68 29 7d 2e 74 35 31 73 34 71 73 32 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 65 64 69 61 2d 69 6e 6e 65 72 2d 62 6f 72 64 65 72 29 7d 2e 74 35 39 6f 77 39 64 37 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 65 64 29 7d 2e 74 35 66 6e 36 71 30 74 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 29 7d 2e 74 39 36 79 61 6d 71 34 Data Ascii: oy{border-left-color:var(--fds-green-55)}.t4l69r22{border-right-color:var(--web-wash)}.t51s4qs2{border-top-color:var(--media-inner-border)}.t59ow9d7{border-top-color:var(--primary-button-pressed)}.t5fn6q0t{border-bottom-color:var(--highlight-bg)}.t96yamq4
2024-09-27 04:59:07 UTC	1378	IN	Data Raw: 69 77 65 61 74 68 65 72 2c 4f 70 74 69 6d 69 73 74 69 63 20 44 69 73 70 6c 61 79 20 4c 69 67 68 74 2c 73 79 73 74 65 6d 2d 75 69 2c 73 61 6e 73 2d 73 65 72 69 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 31 63 63 65 65 36 66 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 34 70 78 7d 2e 61 31 72 6a 65 76 6e 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 38 30 29 7d 2e 61 31 77 66 70 39 6b 66 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 38 70 78 7d 2e 61 31 78 75 31 61 61 6f 7b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 76 61 72 28 2d 2d 6d 77 70 2d 6d 65 73 73 61 67 65 2d 6c 69 73 74 2d 61 63 74 69 6f 6e 73 2d 77 69 64 74 68 2c 36 32 70 78 29 20 2d 20 35 70 78 29 7d 2e Data Ascii: iweather,Optimistic Display Light,system-ui,sans-serif!important}.a1ccee6f{min-height:184px}.a1rjevna{background-color:var(--fds-black-alpha-80)}.a1wfp9kf{margin-left:88px}.a1xu1aao{max-width:calc(100% - var(--mwp-message-list-actions-width,62px) - 5px)}.
2024-09-27 04:59:07 UTC	1378	IN	Data Raw: 65 66 74 3a 6c 65 66 74 7d 0d 0a 20 20 20 20 20 20 20 20 2e 61 35 79 30 71 66 31 63 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 73 61 74 75 72 61 74 65 28 30 29 7d 0d 0a 20 20 20 20 20 20 20 20 2e 61 35 7a 6a 67 69 79 6b 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6f 30 74 32 65 73 30 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 72 65 6d 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6f 30 78 74 33 6e 38 62 7b 6d 61 78 2d 77 69 64 74 68 3a 34 38 30 70 78 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6f 31 33 37 6d 6c 6b 77 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 33 70 78 7d 0d 0a 20 20 20 20 20 20 20 20 2e 61 36 34 7a 67 38 71 66 7b 6d 61 78 2d 77 69 64 74 68 3a 33 39 37 70 78 7d 2e Data Ascii: eft:left} .a5y0qf1c{-webkit-filter:saturate(0)} .a5zjgiyk{animation-timing-function:linear} .o0t2es00{font-size:1.3rem} .o0xt3n8b{max-width:480px} .o137mlkw{min-height:63px} .a64zg8qf{max-width:397px}.
2024-09-27 04:59:07 UTC	1378	IN	Data Raw: 64 74 68 3a 36 30 30 30 70 78 7d 2e 61 39 63 37 79 34 35 73 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 38 7d 2e 61 39 64 62 73 67 6c 65 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 37 34 38 70 78 7d 2e 61 39 6e 30 34 38 68 78 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 34 70 78 7d 2e 61 39 6e 64 6a 70 70 63 7b 77 69 64 74 68 3a 33 35 30 70 78 7d 2e 61 39 72 34 6c 73 31 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 74 72 61 6e 73 70 61 72 65 6e 74 2c 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 20 31 32 2e 35 25 2c 76 61 72 28 2d 2d 61 6c 77 61 79 73 2d 64 61 72 6b 2d 6f 76 65 72 6c 61 79 29 29 7d 2e 61 39 74 78 64 79 67 67 7b 6d 61 72 67 69 6e 2d 72 69 67 Data Ascii: dth:6000px}.a9c7y45s{border-top-left-radius:8}.a9dbsgle{min-height:748px}.a9n048hx{padding-left:44px}.a9ndjppc{width:350px}.a9r4ls1a{background-image:linear-gradient(180deg,transparent,var(--shadow-1) 12.5%,var(--always-dark-overlay))}.a9txdygg{margin-rig
2024-09-27 04:59:07 UTC	1378	IN	Data Raw: 63 61 6c 63 28 31 30 30 76 77 20 2d 20 33 34 70 78 29 7d 2e 61 6b 76 34 31 64 78 38 7b 2d 2d 54 36 38 37 37 39 38 32 31 3a 30 20 32 70 78 20 34 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 2c 30 20 31 32 70 78 20 32 38 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 32 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 54 36 38 37 37 39 38 32 31 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 2c 30 20 31 32 70 78 20 32 38 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 32 29 7d 2e 61 6b 77 7a 36 69 39 6a 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 2e 61 6b 7a 38 63 71 79 75 7b 6f 70 61 63 69 74 79 3a 2e 33 7d 2e 61 6b 7a 6e Data Ascii: calc(100vw - 34px)}.akv41dx8{--T68779821:0 2px 4px var(--shadow-1),0 12px 28px var(--shadow-2);-webkit-box-shadow:var(--T68779821);box-shadow:0 2px 4px var(--shadow-1),0 12px 28px var(--shadow-2)}.akwz6i9j{transition-duration:0s}.akz8cqyu{opacity:.3}.akzn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49721	185.199.110.153	443	6252	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:59:08 UTC	595	OUT	GET /css/cross/hidden.css HTTP/1.1 Host: acticityaccountactuallypages.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://acticityaccountactuallypages.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:59:08 UTC	753	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12478 Server: GitHub.com Content-Type: text/css; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sat, 06 Jan 2024 10:16:00 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "65992860-30be" expires: Fri, 27 Sep 2024 05:09:08 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: B7A0:F59F1:3A5927:40E2DF:66F63B9C Accept-Ranges: bytes Age: 0 Date: Fri, 27 Sep 2024 04:59:08 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740073-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727413149.737222,VS0,VE24 Vary: Accept-Encoding X-Fastly-Request-ID: 2e5b32aa3238542bb57e43d71b0d717750417219
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 2e 78 31 6c 6b 66 72 37 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 0a 2e 47 61 72 31 69 35 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 66 65 32 3b 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 70 78 20 31 30 70 78 20 30 70 78 3b 7d 0a 2e 72 6f 74 30 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 53 65 67 6f 65 20 55 49 20 48 69 73 74 6f 72 69 63 2c 20 53 65 67 6f 65 20 55 49 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 37 36 35 3b Data Ascii: .x1lkfr7t{font-size:14px}.Gar1i5{border-top: 1px solid #dddfe2;padding: 10px 0px 10px 0px;}.rot0o{margin-top: 6px;font-size: 14px;font-weight: 400;color: #000000;font-family: Segoe UI Historic, Segoe UI, Helvetica, Arial, sans-serif;line-height: 1.1765;
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 32 39 34 31 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 2d 6d 61 78 2d 77 69 64 74 68 3a 37 30 30 70 78 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 6d 61 78 2d 77 69 64 74 68 3a 35 34 38 70 78 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 2d 64 61 74 61 76 69 7a 2d 70 72 69 6d 61 72 79 2d 32 3a 72 67 62 28 31 33 34 2c 32 31 38 2c 32 35 35 29 3b 2d 2d 64 61 74 61 76 69 7a 2d 70 72 69 6d 61 72 79 2d 33 3a 72 67 62 28 39 35 2c 31 37 30 2c 32 35 35 29 3b 2d 2d 64 61 74 61 76 69 7a 2d 73 65 63 6f 6e 64 61 72 79 2d 31 3a 72 67 62 28 31 31 38 2c 36 32 2c 32 33 30 29 3b 2d 2d 64 Data Ascii: 2941;--dialog-size-medium-max-width:700px;--dialog-size-medium-width:100%;--dialog-size-small-max-width:548px;--dialog-size-small-width:100%;--dataviz-primary-2:rgb(134,218,255);--dataviz-primary-3:rgb(95,170,255);--dataviz-secondary-1:rgb(118,62,230);--d
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 65 72 3a 30 2e 37 35 3b 2d 2d 74 65 78 74 2d 69 6e 70 75 74 2d 6c 61 62 65 6c 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 2d 74 65 78 74 2d 69 6e 70 75 74 2d 6c 61 62 65 6c 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 39 34 31 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 2d 6d 61 78 2d 77 69 64 74 68 3a 37 30 30 70 78 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 6d 61 78 2d 77 69 64 74 68 3a 35 34 38 70 78 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 2d 64 61 74 61 76 69 7a 2d 70 72 69 6d 61 72 79 2d 32 3a 72 67 62 28 31 33 34 2c 32 31 38 2c 32 35 35 29 3b 2d Data Ascii: er:0.75;--text-input-label-font-weight:400;--text-input-label-line-height:1.2941;--dialog-size-medium-max-width:700px;--dialog-size-medium-width:100%;--dialog-size-small-max-width:548px;--dialog-size-small-width:100%;--dataviz-primary-2:rgb(134,218,255);-
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 35 35 2c 20 32 35 35 2c 20 30 2e 34 29 3b 2d 2d 66 64 73 2d 77 68 69 74 65 2d 61 6c 70 68 61 2d 35 30 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 35 29 3b 2d 2d 66 64 73 2d 77 68 69 74 65 2d 61 6c 70 68 61 2d 36 30 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 36 29 3b 2d 2d 66 64 73 2d 77 68 69 74 65 2d 61 6c 70 68 61 2d 38 30 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 38 29 3b 2d 2d 66 64 73 2d 79 65 6c 6c 6f 77 2d 32 30 3a 23 46 46 42 41 30 30 3b 2d 2d 61 63 63 65 6e 74 3a 23 30 38 36 36 46 46 3b 2d 2d 61 6c 77 61 79 73 2d 77 68 69 74 65 3a 23 46 46 46 46 46 46 3b 2d 2d 61 6c 77 61 79 73 2d 62 6c 61 63 6b 3a 62 6c 61 63 6b 3b 2d 2d 61 6c 77 61 79 73 2d 64 61 72 6b 2d 67 72 61 64 Data Ascii: 55, 255, 0.4);--fds-white-alpha-50:rgba(255, 255, 255, 0.5);--fds-white-alpha-60:rgba(255, 255, 255, 0.6);--fds-white-alpha-80:rgba(255, 255, 255, 0.8);--fds-yellow-20:#FFBA00;--accent:#0866FF;--always-white:#FFFFFF;--always-black:black;--always-dark-grad
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 73 28 39 36 25 29 20 63 6f 6e 74 72 61 73 74 28 31 30 31 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 61 6c 77 61 79 73 2d 77 68 69 74 65 3a 69 6e 76 65 72 74 28 31 30 30 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 64 69 73 61 62 6c 65 64 2d 69 63 6f 6e 3a 69 6e 76 65 72 74 28 38 30 25 29 20 73 65 70 69 61 28 36 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 32 30 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 33 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 38 25 29 20 63 6f 6e 74 72 61 73 74 28 38 39 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 69 63 6f 6e 3a 69 6e 76 65 72 74 28 35 39 25 29 20 73 65 70 69 61 28 31 31 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 Data Ascii: s(96%) contrast(101%);--filter-always-white:invert(100%);--filter-disabled-icon:invert(80%) sepia(6%) saturate(200%) saturate(120%) hue-rotate(173deg) brightness(98%) contrast(89%);--filter-placeholder-icon:invert(59%) sepia(11%) saturate(200%) saturate(1
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 25 29 20 63 6f 6e 74 72 61 73 74 28 39 36 25 29 3b 2d 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 62 6c 75 65 3a 23 30 38 36 36 46 46 3b 2d 2d 67 6c 69 6d 6d 65 72 2d 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 3a 23 36 35 36 37 36 42 3b 2d 2d 68 65 72 6f 2d 62 61 6e 6e 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 46 46 46 3b 2d 2d 68 6f 73 74 65 64 2d 76 69 65 77 2d 73 65 6c 65 63 74 65 64 2d 73 74 61 74 65 3a 23 45 42 46 35 46 46 3b 2d 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 3a 23 45 37 46 33 46 46 3b 2d 2d 68 6f 76 65 72 2d 6f 76 65 72 6c 61 79 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 2d 2d 6c 69 73 74 2d 63 65 6c 6c 2d 63 68 65 76 72 6f 6e 3a 23 36 35 36 37 36 42 3b 2d 2d 6d 65 64 69 61 2d 68 6f 76 65 72 3a 72 67 62 61 28 36 38 2c 20 37 Data Ascii: %) contrast(96%);--focus-ring-blue:#0866FF;--glimmer-spinner-icon:#65676B;--hero-banner-background:#FFFFFF;--hosted-view-selected-state:#EBF5FF;--highlight-bg:#E7F3FF;--hover-overlay:rgba(0, 0, 0, 0.05);--list-cell-chevron:#65676B;--media-hover:rgba(68, 7
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 38 36 36 46 46 3b 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 3a 23 46 46 46 46 46 46 3b 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 65 64 3a 23 37 37 41 37 46 46 3b 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 74 65 78 74 3a 23 46 46 46 46 46 46 3b 2d 2d 70 72 69 6d 61 72 79 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 42 46 35 46 46 3b 2d 2d 70 72 69 6d 61 72 79 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 65 64 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 2d 2d 70 72 69 6d 61 72 79 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 Data Ascii: -background:#0866FF;--primary-button-icon:#FFFFFF;--primary-button-pressed:#77A7FF;--primary-button-text:#FFFFFF;--primary-deemphasized-button-background:#EBF5FF;--primary-deemphasized-button-pressed:rgba(0, 0, 0, 0.05);--primary-deemphasized-button-press
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 20 30 2c 20 30 2e 31 29 3b 2d 2d 73 68 61 64 6f 77 2d 32 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 73 68 61 64 6f 77 2d 35 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 3b 2d 2d 73 68 61 64 6f 77 2d 38 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 3b 2d 2d 73 68 61 64 6f 77 2d 69 6e 73 65 74 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 35 29 3b 2d 2d 73 68 61 64 6f 77 2d 65 6c 65 76 61 74 65 64 3a 30 20 38 70 78 20 32 30 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 2c 20 30 20 32 70 78 20 34 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 2d 2d 73 68 61 64 6f 77 2d 70 65 72 73 69 73 74 65 6e 74 3a 30 70 78 20 30 70 78 20 31 32 70 78 20 72 Data Ascii: 0, 0.1);--shadow-2:rgba(0, 0, 0, 0.2);--shadow-5:rgba(0, 0, 0, 0.5);--shadow-8:rgba(0, 0, 0, 0.8);--shadow-inset:rgba(255, 255, 255, 0.5);--shadow-elevated:0 8px 20px 0 rgba(0, 0, 0, 0.2), 0 2px 4px 0 rgba(0, 0, 0, 0.1);--shadow-persistent:0px 0px 12px r
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 68 65 69 67 68 74 2d 6c 61 72 67 65 3a 34 30 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 68 65 69 67 68 74 2d 6d 65 64 69 75 6d 3a 33 36 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6c 61 72 67 65 3a 31 36 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6d 65 64 69 75 6d 3a 31 36 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 70 61 64 64 69 6e 67 2d 6c 61 72 67 65 3a 31 36 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 65 64 69 75 6d 3a 31 36 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 72 2d 69 63 6f 6e 2d 73 70 61 63 69 6e 67 2d 6c 61 72 67 65 3a 33 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 Data Ascii: px;--button-height-large:40px;--button-height-medium:36px;--button-padding-horizontal-large:16px;--button-padding-horizontal-medium:16px;--button-icon-padding-large:16px;--button-icon-padding-medium:16px;--button-inner-icon-spacing-large:3px;--button-inne
2024-09-27 04:59:08 UTC	76	IN	Data Raw: 70 74 69 6d 69 73 74 69 63 20 44 69 73 70 6c 61 79 20 42 6f 6c 64 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 68 65 61 64 6c 69 6e 65 31 2d 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 3b Data Ascii: ptimistic Display Bold, system-ui, sans-serif;--headline1-font-size:1.75rem;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49720	185.199.110.153	443	6252	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:59:08 UTC	597	OUT	GET /css/cross/hidden_2.css HTTP/1.1 Host: acticityaccountactuallypages.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://acticityaccountactuallypages.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:59:08 UTC	756	IN	HTTP/1.1 200 OK Connection: close Content-Length: 573319 Server: GitHub.com Content-Type: text/css; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sat, 06 Jan 2024 10:16:00 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "65992860-8bf87" expires: Fri, 27 Sep 2024 05:09:08 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 5186:16FE33:2D9401:341DF8:66F63B9C Accept-Ranges: bytes Age: 0 Date: Fri, 27 Sep 2024 04:59:08 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740038-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727413149.737705,VS0,VE43 Vary: Accept-Encoding X-Fastly-Request-ID: 39cc70bb79aceeb0f82bc7170e3c598be71a4f6f
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 66 6f 72 6d 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 36 30 36 37 37 30 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 6c 61 62 65 6c 20 69 6e 70 75 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 74 65 78 74 61 72 65 61 2c 2e 69 6e 70 75 74 74 65 78 74 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 64 30 64 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 33 70 78 7d 74 65 78 74 61 72 Data Ascii: form{margin:0;padding:0}label{color:#606770;cursor:default;font-weight:600;vertical-align:middle}label input{font-weight:normal}textarea,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textar
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 7d 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 74 64 2c 74 64 2e 6c 61 62 65 6c 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 64 64 7b 63 6f 6c 6f 72 3a 23 30 30 30 7d 64 74 7b 63 6f 6c 6f 72 3a 23 36 30 36 37 37 30 7d 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 61 62 62 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 68 72 7b 62 61 63 6b 67 72 6f 75 6e Data Ascii: sor:pointer;text-decoration:none}button{margin:0}a:hover{text-decoration:underline}img{border:0}td,td.label{text-align:left}dd{color:#000}dt{color:#606770}ul{list-style-type:none;margin:0;padding:0}abbr{border-bottom:none;text-decoration:none}hr{backgroun
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 2e 68 6f 6d 65 20 23 63 6f 6e 74 65 6e 74 2c 2e 73 65 61 72 63 68 20 23 63 6f 6e 74 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 30 30 70 78 7d 2e 55 49 53 74 61 6e 64 61 72 64 46 72 61 6d 65 5f 43 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 3b 77 69 64 74 68 3a 39 36 30 70 78 7d 2e 55 49 53 74 61 6e 64 61 72 64 46 72 61 6d 65 5f 43 6f 6e 74 65 6e 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 37 36 30 70 78 7d 2e 55 49 53 74 61 6e 64 61 72 64 46 72 61 6d 65 5f 53 69 64 65 62 61 72 41 64 73 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 32 30 30 70 Data Ascii: .home #content,.search #content{min-height:600px}.UIStandardFrame_Container{margin:0 auto;padding-top:20px;width:960px}.UIStandardFrame_Content{float:left;margin:0;padding:0;width:760px}.UIStandardFrame_SidebarAds{float:right;margin:0;padding:0;width:200p
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 69 6e 3a 30 7d 2e 5f 37 31 70 6e 20 2e 5f 35 65 32 68 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 31 32 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 35 65 32 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6d 6d 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 38 70 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 5f 37 31 70 6e 20 2e 5f 34 34 32 5f 7b 70 61 64 64 69 6e 67 2d 62 Data Ascii: in:0}._71pn ._5e2h{line-height:24px;padding:0 12px}._71pn ._5e2k{background-color:var(--comment-background);border:0;border-radius:18px;color:var(--secondary-text);font-size:12px;font-weight:600;height:24px;max-width:100%;padding:0}._71pn ._442_{padding-b
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 2e 5f 37 31 70 6e 20 2e 5f 34 73 78 67 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 33 5f 71 6c 7b 6d 61 72 67 69 6e 3a 30 7d 2e 5f 37 31 70 6e 20 2e 5f 33 5f 71 6d 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 73 61 74 75 72 61 74 65 28 30 29 3b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 30 20 33 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 33 5f 71 6f 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 36 39 34 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 3a 30 20 31 36 70 78 20 34 70 78 20 31 36 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a Data Ascii: ._71pn ._4sxg{align-items:center;display:flex;margin-left:8px}._71pn ._3_ql{margin:0}._71pn ._3_qm{-webkit-filter:saturate(0);margin:2px 0 0 3px}._71pn ._3_qo{margin-left:8px}._71pn ._694w{align-items:center;display:flex;margin:0 16px 4px 16px;min-height:
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 5f 37 31 70 6e 20 2e 5f 32 2d 35 68 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 69 63 6f 6e 29 7d 2e 5f 37 31 70 6e 20 2e 5f 36 39 67 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6d 6d 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 5f 37 31 70 6e 20 2e 5f 31 33 78 6b 7b 70 61 64 64 69 6e 67 3a 34 70 78 20 31 36 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 31 6d 32 6c 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 37 68 6c 71 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 37 6d 74 67 7b 63 6f Data Ascii: ;vertical-align:middle}._71pn ._2-5h{color:var(--placeholder-icon)}._71pn ._69g3{background-color:var(--comment-background)}._71pn ._13xk{padding:4px 16px}._71pn ._1m2l{color:var(--secondary-text)}._71pn ._7hlq{color:var(--secondary-text)}._71pn ._7mtg{co
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 2d 64 61 72 6b 2d 6d 6f 64 65 20 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 6e 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 76 61 72 28 2d 2d 66 69 6c 74 65 72 2d 70 72 69 6d 61 72 79 2d 69 63 6f 6e 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 6c 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 6d 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 39 79 2e 5f 34 2d 75 38 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 39 79 2e 5f 34 2d 75 32 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 5f 37 31 70 6e 20 Data Ascii: -dark-mode ._71pn ._5r5n{-webkit-filter:var(--filter-primary-icon)}._71pn ._5r5l{color:var(--primary-text)}._71pn ._5r5m{color:var(--secondary-text)}._71pn ._5r9y._4-u8{background:var(--card-background)}._71pn ._5r9y._4-u2{border-color:transparent}._71pn
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 34 2d 69 30 2c 2e 5f 37 31 70 6e 20 2e 5f 34 2d 69 32 2c 2e 5f 37 31 70 6e 20 2e 5f 35 61 38 75 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 76 69 64 65 72 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 34 74 32 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 32 63 39 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 31 2d 75 20 2e 5f 35 30 7a 79 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 Data Ascii: 4-i0,._71pn ._4-i2,._71pn ._5a8u{background-color:var(--card-background);border-color:var(--divider);color:var(--primary-text)}._71pn ._4t2a{background-color:var(--card-background)}._71pn ._52c9{color:var(--primary-text)}._71pn ._51-u ._50zy{-webkit-filte
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 68 35 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 68 36 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 62 75 74 74 6f 6e 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 69 6e 70 75 74 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 6c 61 62 65 6c 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 73 65 6c 65 63 74 2c 23 66 61 63 65 62 6f 6f Data Ascii: -fonts--body h5,#facebook .system-fonts--body h6,#facebook .system-fonts--body p{font-family:inherit}#facebook .system-fonts--body button,#facebook .system-fonts--body input,#facebook .system-fonts--body label,#facebook .system-fonts--body select,#faceboo
2024-09-27 04:59:08 UTC	1378	IN	Data Raw: 61 64 6f 77 2d 69 6e 73 65 74 29 7d 2e 78 31 30 62 36 61 71 71 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 78 31 30 66 35 6e 77 63 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 31 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 7d 2e 78 31 30 6c 36 74 71 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 78 31 30 77 36 74 39 37 7b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 78 31 30 77 68 39 62 69 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 78 31 30 77 6a 64 31 64 7b 68 65 69 67 68 74 3a 35 30 70 78 7d 2e 78 31 30 77 6c 74 36 32 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 7d 2e 78 31 31 30 6c 73 6d 77 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 Data Ascii: adow-inset)}.x10b6aqq{padding-bottom:6px}.x10f5nwc{box-shadow:0 0 0 1px var(--shadow-1)}.x10l6tqk{position:absolute}.x10w6t97{height:32px}.x10wh9bi{margin-top:0!important}.x10wjd1d{height:50px}.x10wlt62{overflow-y:hidden}.x110lsmw{border-bottom-left-radiu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49725	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:59:11 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 04:59:11 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=42423 Date: Fri, 27 Sep 2024 04:59:11 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	58102	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:59:12 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 04:59:12 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=42368 Date: Fri, 27 Sep 2024 04:59:12 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 04:59:12 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	58103	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:59:15 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 65 66 62 62 46 46 4d 53 48 55 4b 74 51 69 59 53 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 63 63 65 35 66 65 37 35 63 66 66 39 34 34 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: efbbFFMSHUKtQiYS.1Context: acce5fe75cff944d
2024-09-27 04:59:15 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-27 04:59:15 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 65 66 62 62 46 46 4d 53 48 55 4b 74 51 69 59 53 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 63 63 65 35 66 65 37 35 63 66 66 39 34 34 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 6b 4b 48 6b 2f 74 38 57 5a 36 46 4b 7a 4b 31 48 5a 2b 6c 57 39 75 78 5a 75 58 66 70 33 68 6d 4e 2b 36 4f 33 6b 2b 68 41 31 47 73 78 6c 74 4e 35 62 57 43 47 51 45 4d 32 52 77 62 6c 6d 63 34 71 32 75 4a 68 4a 61 36 38 46 67 32 6d 61 52 49 4b 44 50 53 79 62 46 48 58 41 4f 70 69 32 76 38 6a 6c 54 37 39 39 74 47 56 42 67 39 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: efbbFFMSHUKtQiYS.2Context: acce5fe75cff944d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAakKHk/t8WZ6FKzK1HZ+lW9uxZuXfp3hmN+6O3k+hA1GsxltN5bWCGQEM2Rwblmc4q2uJhJa68Fg2maRIKDPSybFHXAOpi2v8jlT799tGVBg98
2024-09-27 04:59:15 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 65 66 62 62 46 46 4d 53 48 55 4b 74 51 69 59 53 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 63 63 65 35 66 65 37 35 63 66 66 39 34 34 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: efbbFFMSHUKtQiYS.3Context: acce5fe75cff944d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-27 04:59:15 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-27 04:59:15 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 55 39 44 73 4f 37 4a 63 78 30 75 62 62 64 33 38 4d 33 32 53 54 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: U9DsO7Jcx0ubbd38M32STA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	58104	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:59:17 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4uwWTL4mo5NfnXa&MD=h2HvXsy3 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-27 04:59:17 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: cfb92c29-4ffe-426a-840f-dae777fda567 MS-RequestId: abd2e7f7-c94c-44aa-873b-b440dbc10364 MS-CV: wFZwuT/WkEWpBlHS.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 27 Sep 2024 04:59:17 GMT Connection: close Content-Length: 24490
2024-09-27 04:59:17 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-27 04:59:17 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.6	58108	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:59:31 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 67 58 79 58 38 4d 64 48 43 6b 65 54 49 77 4f 50 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 35 38 38 62 38 33 36 39 33 61 62 66 34 61 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: gXyX8MdHCkeTIwOP.1Context: b588b83693abf4ad
2024-09-27 04:59:31 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-27 04:59:31 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 67 58 79 58 38 4d 64 48 43 6b 65 54 49 77 4f 50 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 35 38 38 62 38 33 36 39 33 61 62 66 34 61 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 6b 4b 48 6b 2f 74 38 57 5a 36 46 4b 7a 4b 31 48 5a 2b 6c 57 39 75 78 5a 75 58 66 70 33 68 6d 4e 2b 36 4f 33 6b 2b 68 41 31 47 73 78 6c 74 4e 35 62 57 43 47 51 45 4d 32 52 77 62 6c 6d 63 34 71 32 75 4a 68 4a 61 36 38 46 67 32 6d 61 52 49 4b 44 50 53 79 62 46 48 58 41 4f 70 69 32 76 38 6a 6c 54 37 39 39 74 47 56 42 67 39 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: gXyX8MdHCkeTIwOP.2Context: b588b83693abf4ad<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAakKHk/t8WZ6FKzK1HZ+lW9uxZuXfp3hmN+6O3k+hA1GsxltN5bWCGQEM2Rwblmc4q2uJhJa68Fg2maRIKDPSybFHXAOpi2v8jlT799tGVBg98
2024-09-27 04:59:31 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 67 58 79 58 38 4d 64 48 43 6b 65 54 49 77 4f 50 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 62 35 38 38 62 38 33 36 39 33 61 62 66 34 61 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: gXyX8MdHCkeTIwOP.3Context: b588b83693abf4ad<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-27 04:59:31 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-27 04:59:31 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 61 77 46 4b 34 39 74 42 5a 6b 4b 50 5a 35 6a 51 4b 72 6e 32 38 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: awFK49tBZkKPZ5jQKrn28g.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.6	58109	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:59:50 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 6b 76 45 31 66 54 4d 6b 59 6b 6d 77 37 78 62 45 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 30 35 36 66 64 34 33 38 37 66 35 36 39 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: kvE1fTMkYkmw7xbE.1Context: 3056fd4387f5691
2024-09-27 04:59:50 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-27 04:59:50 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 6b 76 45 31 66 54 4d 6b 59 6b 6d 77 37 78 62 45 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 30 35 36 66 64 34 33 38 37 66 35 36 39 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 6b 4b 48 6b 2f 74 38 57 5a 36 46 4b 7a 4b 31 48 5a 2b 6c 57 39 75 78 5a 75 58 66 70 33 68 6d 4e 2b 36 4f 33 6b 2b 68 41 31 47 73 78 6c 74 4e 35 62 57 43 47 51 45 4d 32 52 77 62 6c 6d 63 34 71 32 75 4a 68 4a 61 36 38 46 67 32 6d 61 52 49 4b 44 50 53 79 62 46 48 58 41 4f 70 69 32 76 38 6a 6c 54 37 39 39 74 47 56 42 67 39 38 63 Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: kvE1fTMkYkmw7xbE.2Context: 3056fd4387f5691<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAakKHk/t8WZ6FKzK1HZ+lW9uxZuXfp3hmN+6O3k+hA1GsxltN5bWCGQEM2Rwblmc4q2uJhJa68Fg2maRIKDPSybFHXAOpi2v8jlT799tGVBg98c
2024-09-27 04:59:50 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 6b 76 45 31 66 54 4d 6b 59 6b 6d 77 37 78 62 45 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 30 35 36 66 64 34 33 38 37 66 35 36 39 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: kvE1fTMkYkmw7xbE.3Context: 3056fd4387f5691<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-27 04:59:50 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-27 04:59:50 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 61 43 65 44 54 2b 50 2f 51 55 53 36 46 63 69 58 6c 6e 2b 48 76 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: aCeDT+P/QUS6FciXln+HvQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	58110	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:59:54 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4uwWTL4mo5NfnXa&MD=h2HvXsy3 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-27 04:59:55 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: d0ae7ac9-ebfc-4d20-af29-f58c5673f2af MS-RequestId: 0f58d4e5-503b-4875-9403-169780f5d474 MS-CV: RsSsqY0agUSaPEs4.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 27 Sep 2024 04:59:54 GMT Connection: close Content-Length: 30005
2024-09-27 04:59:55 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-09-27 04:59:55 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	58113	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 05:00:10 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 44 4f 77 6f 2f 56 5a 2f 6a 30 32 70 33 4e 7a 63 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 32 32 37 30 63 63 36 39 61 35 38 34 36 31 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: DOwo/VZ/j02p3Nzc.1Context: 72270cc69a584618
2024-09-27 05:00:10 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-27 05:00:10 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 44 4f 77 6f 2f 56 5a 2f 6a 30 32 70 33 4e 7a 63 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 32 32 37 30 63 63 36 39 61 35 38 34 36 31 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 6b 4b 48 6b 2f 74 38 57 5a 36 46 4b 7a 4b 31 48 5a 2b 6c 57 39 75 78 5a 75 58 66 70 33 68 6d 4e 2b 36 4f 33 6b 2b 68 41 31 47 73 78 6c 74 4e 35 62 57 43 47 51 45 4d 32 52 77 62 6c 6d 63 34 71 32 75 4a 68 4a 61 36 38 46 67 32 6d 61 52 49 4b 44 50 53 79 62 46 48 58 41 4f 70 69 32 76 38 6a 6c 54 37 39 39 74 47 56 42 67 39 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: DOwo/VZ/j02p3Nzc.2Context: 72270cc69a584618<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAakKHk/t8WZ6FKzK1HZ+lW9uxZuXfp3hmN+6O3k+hA1GsxltN5bWCGQEM2Rwblmc4q2uJhJa68Fg2maRIKDPSybFHXAOpi2v8jlT799tGVBg98
2024-09-27 05:00:10 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 44 4f 77 6f 2f 56 5a 2f 6a 30 32 70 33 4e 7a 63 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 32 32 37 30 63 63 36 39 61 35 38 34 36 31 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: DOwo/VZ/j02p3Nzc.3Context: 72270cc69a584618<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-27 05:00:10 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-27 05:00:10 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 51 6d 36 4f 2b 45 6b 42 35 30 71 70 39 54 52 33 4e 39 48 4c 58 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: Qm6O+EkB50qp9TR3N9HLXA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	58114	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 05:00:33 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 74 58 72 66 36 79 62 48 65 30 2b 52 2b 42 6a 69 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 38 31 30 64 38 34 31 33 61 65 37 36 30 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: tXrf6ybHe0+R+Bji.1Context: f3810d8413ae760d
2024-09-27 05:00:33 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-27 05:00:33 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 74 58 72 66 36 79 62 48 65 30 2b 52 2b 42 6a 69 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 38 31 30 64 38 34 31 33 61 65 37 36 30 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 6b 4b 48 6b 2f 74 38 57 5a 36 46 4b 7a 4b 31 48 5a 2b 6c 57 39 75 78 5a 75 58 66 70 33 68 6d 4e 2b 36 4f 33 6b 2b 68 41 31 47 73 78 6c 74 4e 35 62 57 43 47 51 45 4d 32 52 77 62 6c 6d 63 34 71 32 75 4a 68 4a 61 36 38 46 67 32 6d 61 52 49 4b 44 50 53 79 62 46 48 58 41 4f 70 69 32 76 38 6a 6c 54 37 39 39 74 47 56 42 67 39 38 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: tXrf6ybHe0+R+Bji.2Context: f3810d8413ae760d<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAakKHk/t8WZ6FKzK1HZ+lW9uxZuXfp3hmN+6O3k+hA1GsxltN5bWCGQEM2Rwblmc4q2uJhJa68Fg2maRIKDPSybFHXAOpi2v8jlT799tGVBg98
2024-09-27 05:00:33 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 74 58 72 66 36 79 62 48 65 30 2b 52 2b 42 6a 69 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 33 38 31 30 64 38 34 31 33 61 65 37 36 30 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: tXrf6ybHe0+R+Bji.3Context: f3810d8413ae760d<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-27 05:00:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-27 05:00:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 78 46 52 44 36 6d 75 43 54 30 2b 61 46 48 6e 52 78 64 37 65 73 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: xFRD6muCT0+aFHnRxd7esA.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2960, Parent PID: 5884

General

Target ID:	0
Start time:	00:58:59
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6252, Parent PID: 2960

General

Target ID:	2
Start time:	00:59:04
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 --field-trial-handle=2172,i,15881319247358023124,14805304467598766215,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3536, Parent PID: 5884

General

Target ID:	3
Start time:	00:59:06
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://acticityaccountactuallypages.github.io/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://acticityaccountactuallypages.github.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Static File Info

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2960, Parent PID: 5884

General

Chronological Activities

Analysis Process: chrome.exePID: 6252, Parent PID: 2960

General

Chronological Activities

Analysis Process: chrome.exePID: 3536, Parent PID: 5884

General

Chronological Activities

Disassembly

Windows Analysis Report
http://acticityaccountactuallypages.github.io/