Edit tour

Windows Analysis Report
https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0

Overview

General Information

Sample URL:	https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0
Analysis ID:	1590181
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1260 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=1976,i,29055799889446091,581148314653188410,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0	Joe Sandbox AI: Score: 9 Reasons: The brand 'DHL' is a well-known global logistics company., The URL 'cortevaopscenter.freshdesk.com' does not match the legitimate domain 'dhl.com'., The domain 'freshdesk.com' is associated with a customer support platform, not DHL., The subdomain 'cortevaopscenter' does not relate to DHL and suggests a different entity., The presence of input fields for passwords on a non-DHL domain is suspicious. DOM: 1.1.pages.csv
Source: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0	Joe Sandbox AI: Score: 9 Reasons: The brand 'DHL' is a well-known global logistics company., The URL 'cortevaopscenter.freshdesk.com' does not match the legitimate domain 'dhl.com'., The domain 'freshdesk.com' is associated with a customer support platform, not DHL., The subdomain 'cortevaopscenter' does not relate to DHL and suggests a different entity., The presence of input fields for passwords on a non-DHL domain is suspicious. DOM: 1.0.pages.csv

Source: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0

HTTP Parser: Number of links: 0

Source: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0

HTTP Parser: <input type="password" .../> found

Source: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0	HTTP Parser: No <meta name="author".. found
Source: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0	HTTP Parser: No <meta name="author".. found

Source: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0	HTTP Parser: No <meta name="copyright".. found
Source: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.4:53662 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:63700 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /register/FFFaTYjVZRX8bcRDPna0 HTTP/1.1Host: cortevaopscenter.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/frameworks-3fd8606ae3fd565bca52791d9712b5326fc5645337a279f6e7cb053b57aec9ed.js HTTP/1.1Host: assets6.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cortevaopscenter.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/common-6b0a9831febc2aba51eb45fec8990fe9a3c430f8970e25683428fb1c342044d2.css HTTP/1.1Host: assets2.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cortevaopscenter.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js HTTP/1.1Host: assets4.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cortevaopscenter.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/workspace-d8499e654b71d649e6e50c906a29ecbc01bd0e78b3150b8e88ef71d647c78625.js HTTP/1.1Host: assets3.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cortevaopscenter.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/falcon_activations-22e619801618c7f6d9e0ea55cff5834b59c838f266b5f99872e015a117494683.css HTTP/1.1Host: assets2.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://cortevaopscenter.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153001919509/logo/EBBOHloK8lxStnQVALHsXKt8TjfNyqNAkw.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20250110%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250110T125716Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=3bb13d76a0bbddc0ce45edfff8e5f245d64503ead7226c99b91f484c70c20438 HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cortevaopscenter.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js HTTP/1.1Host: assets4.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/workspace-d8499e654b71d649e6e50c906a29ecbc01bd0e78b3150b8e88ef71d647c78625.js HTTP/1.1Host: assets3.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/strftime-min.js?1736773238 HTTP/1.1Host: cortevaopscenter.freshdesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _helpkit_session=bktjVjRNb0x5T3NRZE1OQVV6WHNnVURlbUlOem1TUnYzZHA5bnZjcTZ0TVU5cGw3dUtoeW5HaGpsUXVyTTZBTVVFUVdxcnVqcU5Zb09EUHNrenArVm05TWNYVUZsV1BtaVNCRG1pNHRpVTY1MnkvMUlZS1pERUtGSlRDK0FGT1VzY1VHWENMdUVMeVc5RTZQbmlTQ0g1YzFPQ0tNWkc5VGsyKzFGSEdVTjFrOXQ4N1M4eVhwMUtvREc3TU1tT1ZmLS0vM3JEM2daRWVDc1dvb0MzeEEvdTdnPT0%3D--e289c23d90858a54b8aa85207c94996e63e4a019
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cortevaopscenter.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153001919509/logo/EBBOHloK8lxStnQVALHsXKt8TjfNyqNAkw.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20250110%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250110T125716Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=3bb13d76a0bbddc0ce45edfff8e5f245d64503ead7226c99b91f484c70c20438 HTTP/1.1Host: s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/cdn/frameworks-3fd8606ae3fd565bca52791d9712b5326fc5645337a279f6e7cb053b57aec9ed.js HTTP/1.1Host: assets6.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/strftime-min.js?1736773238 HTTP/1.1Host: cortevaopscenter.freshdesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _x_w=45_1; _helpkit_session=Rm5pL054WTRhSEhURjc1U2JielhzazV4WW1JWnBZNTF2MXIyOWVGSVlBeEFmYXpEWlFGUys2M1hVdG5FRVF4UmwzSVdndDBaQThWbU1wVmN0NnVjNVE4V0gvV3BabzlOK09ST0tCUkMyaSs4cEN5SjF0aElnaHdhNW01WW01SkFKT2ljalFHTFN0NzhmcHNPM0dZMGVZUUJnYnpCeE5YZVZTRTNXSUtVTEJzdHkycmNxSWE2aHBsazRpNW1CRVVLLS1ZdkJmbWZ4OHJ5L1RCS3lhZjQ2YWJBPT0%3D--6e6d70643abefae5d04538faadd91fb30328c5f1
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153001919476/fav_icon/nu5c4cPGOxM3icX0y420n-oRHKOQ8ywl4g.png HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cortevaopscenter.freshdesk.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153001919476/fav_icon/nu5c4cPGOxM3icX0y420n-oRHKOQ8ywl4g.png HTTP/1.1Host: s3.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cortevaopscenter.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets2.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets4.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets6.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: assets3.freshdesk.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com

Source: chromecache_52.2.dr, chromecache_65.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_53.2.dr	String found in binary or memory: https://assets2.freshdesk.com/assets/cdn/common-6b0a9831febc2aba51eb45fec8990fe9a3c430f8970e25683428
Source: chromecache_53.2.dr	String found in binary or memory: https://assets2.freshdesk.com/assets/cdn/falcon_activations-22e619801618c7f6d9e0ea55cff5834b59c838f2
Source: chromecache_53.2.dr	String found in binary or memory: https://assets3.freshdesk.com
Source: chromecache_53.2.dr	String found in binary or memory: https://assets3.freshdesk.com/assets/cdn/workspace-d8499e654b71d649e6e50c906a29ecbc01bd0e78b3150b8e8
Source: chromecache_53.2.dr	String found in binary or memory: https://assets4.freshdesk.com/assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4
Source: chromecache_53.2.dr	String found in binary or memory: https://assets6.freshdesk.com/assets/cdn/frameworks-3fd8606ae3fd565bca52791d9712b5326fc5645337a279f6
Source: chromecache_53.2.dr	String found in binary or memory: https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153001919476/fav_ico
Source: chromecache_53.2.dr	String found in binary or memory: https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153001919509/logo/EB
Source: chromecache_53.2.dr	String found in binary or memory: https://www.dhl.com/us-en/home/supply-chain.html

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53721
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443

Source: classification engine

Classification label: mal48.phis.win@16/29@28/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=1976,i,29055799889446091,581148314653188410,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=1976,i,29055799889446091,581148314653188410,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153001919509/logo/EB	0%	Avira URL Cloud	safe
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153001919476/fav_icon/nu5c4cPGOxM3icX0y420n-oRHKOQ8ywl4g.png	0%	Avira URL Cloud	safe
https://cortevaopscenter.freshdesk.com/assets/strftime-min.js?1736773238	0%	Avira URL Cloud	safe
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153001919476/fav_ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s3.amazonaws.com	52.217.202.64	true	false	high
assets3.freshdesk.com	52.222.225.5	true	false	high
assets6.freshdesk.com	52.222.225.5	true	false	high
cortevaopscenter.freshdesk.com	52.72.100.244	true	true	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
assets2.freshdesk.com	52.222.225.5	true	false	high
www.google.com	216.58.206.68	true	false	high
assets4.freshdesk.com	52.222.225.5	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://assets2.freshdesk.com/assets/cdn/common-6b0a9831febc2aba51eb45fec8990fe9a3c430f8970e25683428fb1c342044d2.css	false		high
https://cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js	false		high
https://assets4.freshdesk.com/assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js	false		high
https://assets6.freshdesk.com/assets/cdn/frameworks-3fd8606ae3fd565bca52791d9712b5326fc5645337a279f6e7cb053b57aec9ed.js	false		high
https://assets2.freshdesk.com/assets/cdn/falcon_activations-22e619801618c7f6d9e0ea55cff5834b59c838f266b5f99872e015a117494683.css	false		high
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153001919476/fav_icon/nu5c4cPGOxM3icX0y420n-oRHKOQ8ywl4g.png	false	Avira URL Cloud: safe	unknown
https://cortevaopscenter.freshdesk.com/assets/strftime-min.js?1736773238	false	Avira URL Cloud: safe	unknown
https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0	true		unknown
https://assets3.freshdesk.com/assets/cdn/workspace-d8499e654b71d649e6e50c906a29ecbc01bd0e78b3150b8e88ef71d647c78625.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jquery.org/license	chromecache_52.2.dr, chromecache_65.2.dr	false		high
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153001919509/logo/EB	chromecache_53.2.dr	false	Avira URL Cloud: safe	unknown
https://assets4.freshdesk.com/assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4	chromecache_53.2.dr	false		high
https://assets6.freshdesk.com/assets/cdn/frameworks-3fd8606ae3fd565bca52791d9712b5326fc5645337a279f6	chromecache_53.2.dr	false		high
https://assets3.freshdesk.com	chromecache_53.2.dr	false		high
https://assets2.freshdesk.com/assets/cdn/falcon_activations-22e619801618c7f6d9e0ea55cff5834b59c838f2	chromecache_53.2.dr	false		high
https://assets2.freshdesk.com/assets/cdn/common-6b0a9831febc2aba51eb45fec8990fe9a3c430f8970e25683428	chromecache_53.2.dr	false		high
https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153001919476/fav_ico	chromecache_53.2.dr	false	Avira URL Cloud: safe	unknown
https://assets3.freshdesk.com/assets/cdn/workspace-d8499e654b71d649e6e50c906a29ecbc01bd0e78b3150b8e8	chromecache_53.2.dr	false		high
https://www.dhl.com/us-en/home/supply-chain.html	chromecache_53.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
52.222.225.5	assets3.freshdesk.com	United States	16509	AMAZON-02US	false
34.227.156.121	unknown	United States	14618	AMAZON-AESUS	false
52.72.100.244	cortevaopscenter.freshdesk.com	United States	14618	AMAZON-AESUS	true
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
16.15.178.206	unknown	United States	unknown	unknown	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.217.202.64	s3.amazonaws.com	United States	16509	AMAZON-02US	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590181
Start date and time:	2025-01-13 17:27:00 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@16/29@28/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.186.110, 74.125.133.84, 142.250.186.174, 142.250.184.206, 172.217.18.14, 142.250.186.138, 172.217.18.10, 142.250.185.234, 216.58.212.138, 142.250.186.42, 142.250.185.106, 142.250.184.234, 142.250.186.74, 142.250.185.74, 216.58.212.170, 142.250.185.202, 142.250.185.170, 216.58.206.74, 142.250.185.138, 172.217.18.106, 172.217.16.202, 199.232.210.172, 192.229.221.95, 142.250.184.238, 172.217.16.206, 142.250.185.238, 142.250.186.46, 142.250.81.238, 74.125.0.102, 216.58.206.67, 184.28.90.27, 20.109.210.53, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, 4.8.2.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa, update.googleapis.com, r1.sn-t0aekn7e.gvt1.com, clients.l.google.com, r1---sn-t0aekn7e.gvt1.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://cortevaopscenter.freshdesk.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://cortevaopscenter.freshdesk.com
URL: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Activate Your Account", "prominent_button_name": "ACTIVATE AND LOG IN", "text_input_field_labels": [ "Full name", "Enter Password", "Retype Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0 Model: Joe Sandbox AI	{ "brands": [ "DHL" ] }
	{ "brands": [ "DHL" ] }
URL: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Activate Your Account", "prominent_button_name": "ACTIVATE AND LOG IN", "text_input_field_labels": [ "Full name", "Enter Password", "Retype Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0 Model: Joe Sandbox AI	{ "brands": [ "DHL" ] }
	{ "brands": [ "DHL" ] }
URL: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0 Model: Joe Sandbox AI	```json{ "legit_domain": "dhl.com", "classification": "wellknown", "reasons": [ "The brand 'DHL' is a well-known global logistics company.", "The URL 'cortevaopscenter.freshdesk.com' does not match the legitimate domain 'dhl.com'.", "The domain 'freshdesk.com' is associated with a customer support platform, not DHL.", "The subdomain 'cortevaopscenter' does not relate to DHL and suggests a different entity.", "The presence of input fields for passwords on a non-DHL domain is suspicious." ], "riskscore": 9} Google indexed: False
URL: cortevaopscenter.freshdesk.com Brands: DHL Input Fields: Full name, Enter Password, Retype Password
URL: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0 Model: Joe Sandbox AI	```json{ "legit_domain": "dhl.com", "classification": "wellknown", "reasons": [ "The brand 'DHL' is a well-known global logistics company.", "The URL 'cortevaopscenter.freshdesk.com' does not match the legitimate domain 'dhl.com'.", "The domain 'freshdesk.com' is associated with a customer support platform, not DHL.", "The subdomain 'cortevaopscenter' does not relate to DHL and suggests a different entity.", "The presence of input fields for passwords on a non-DHL domain is suspicious." ], "riskscore": 9} Google indexed: False
URL: cortevaopscenter.freshdesk.com Brands: DHL Input Fields: Full name, Enter Password, Retype Password

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1888
Entropy (8bit):	7.4962856328834295
Encrypted:	false
SSDEEP:	48:VqfhiGvm7KCF6IytpLQTWTj0jlAT0r3FfUEx8:wfhiX1YjX0xZ8
MD5:	7CEA8340DE5BB7A4692CC8BF795EA710
SHA1:	5F0357A6600988500214BB02830A6FB15E98F571
SHA-256:	4B682C079901ACF8C823E518BB6E275F6B8986B98218A53C24A7E30BC42D6C59
SHA-512:	8B391F4C455BC666D3D99E4BF781A7E2824AAAFBF36CC9E4A9ECE7F8D9F44CEBE935F1F602C8D71EF9751DB3F39D210AA7B8D93761C0DBD03CD3DDB135D3321B
Malicious:	false
Reputation:	low
URL:	https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153001919509/logo/EBBOHloK8lxStnQVALHsXKt8TjfNyqNAkw.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20250110%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250110T125716Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=3bb13d76a0bbddc0ce45edfff8e5f245d64503ead7226c99b91f484c70c20438
Preview:	.PNG........IHDR...Y...2............gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE..........^!....................................................................................................................................................................................................u..r..r..k..i..o..m...x.....y.......................................................A).<.C).r........G'.:+.e........O%.;.X#.......g........6,..6..6..6..5..5.t..I'..6..5.&0.......\"..3......)/.%0..........n..c .a!.a .d .o..d . 2..5..4.]".n....q..i.....D(..4.~........=.7,.7+.\|..z........3..4....Y#....8+.1-....P%.......N%.R%.T$.S$.U$.["..........r..s.....Z"..5.(0.K&.J&.H'...h........R$.J'.Y"......h..x...6....w..m...3.l...6.p..>.?).C(...............@).......u....StRNS......6Skz../l......W...V.....Z.\|........nE.....1.(.s..-.\....................\.F.A.vt....bKGD.(..0....tIME.......&-.K...[IDATX.c` .....XX..98.89..XY.."...a..7./....Ppp....?./.7..f.......F.b.".....(.!)....$%.)1.

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2609)
Category:	downloaded
Size (bytes):	2771
Entropy (8bit):	5.330972099586877
Encrypted:	false
SSDEEP:	48:NEziSHvaS18A37h+27lVWMzoCoyYkHykhpUhHSUdhKU04obSN114YLZ:ki5pMP77ukHMsMp7NzZ
MD5:	D5843DBDC71FF8014A5EAFD346A262DA
SHA1:	127E1D971EFAB9341DB8079F10663DC28E8E0A2F
SHA-256:	8E73A30D35C83EA6A597C3343324D2B7DF097AD26E67B62EFB5266EE12D317B5
SHA-512:	AC28DFA1A6FD09528E1FFC3F4FA19B0719C01F9033872E3EAB51175B95C451179F1DB22445B43EF9947E1810A5A37FDDDEAE7CDD7FE03B814A98E16E8642AB74
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js
Preview:	/!. jQuery Mousewheel 3.1.13. . Copyright 2015 jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. /.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function b(b){var g=b\|\|window.event,h=i.call(arguments,1),j=0,l=0,m=0,n=0,o=0,p=0;if(b=a.event.fix(g),b.type="mousewheel","detail"in g&&(m=-1g.detail),"wheelDelta"in g&&(m=g.wheelDelta),"wheelDeltaY"in g&&(m=g.wheelDeltaY),"wheelDeltaX"in g&&(l=-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.deltaY,j=m),"deltaX"in g&&(l=g.deltaX,0===m&&(j=-1l)),0!==m\|\|0!==l){if(1===g.deltaMode){var q=a.data(this,"mousewheel-line-height");j=q,m=q,l=q}else if(2===g.deltaMode){var r=a.data(this,"mousewheel-page-height");j=r,m=r,l=r}if(n=Math.max(Math.abs(m),Math.abs(l)),(!f\|\|f>n)&&(f=n,d(g,n)&&(f/=40)),d(g,n)&&(j/=40,l/=40,m/=40),j=Math[j>=1?"floor

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (515)
Category:	downloaded
Size (bytes):	7045
Entropy (8bit):	5.277547814406522
Encrypted:	false
SSDEEP:	96:m9WeN3lFNTUIyh/Y9gKPdTgol8U/JmyxvEOyj06zlxEPFBtAaS:yQrh/YiOdTgoLAI8Oi06zPEPFDAaS
MD5:	3632BC40D07CA76C3EF47FA9BC345011
SHA1:	221A6795D488F0EEB56D7F20F69859C026C20596
SHA-256:	033E95745166402F14E8DD1D82453DCA053DFC36838FCEDE91FE0A7923B84E22
SHA-512:	B98EDB610C9FF4BCE2B4A3467F77849C407A0F1C95FDFA5A98C249812AF79ADF16B0F04290D889D58FF8C11ECAB22884E59997F4F857088F7C2884238E1B2A3A
Malicious:	false
Reputation:	low
URL:	https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0
Preview:	<!DOCTYPE html>.. [if lt IE 7]><html class="no-js ie6" lang="en" dir="ltr" data-date-format="non_us"><![endif]-->. [if IE 7]><html class="no-js ie7" lang="en" dir="ltr" data-date-format="non_us"><![endif]-->. [if IE 8]><html class="no-js ie8" lang="en" dir="ltr" data-date-format="non_us"><![endif]-->. [if IE 9]><html class="no-js ie9" lang="en" dir="ltr" data-date-format="non_us"><![endif]-->. [if IE 10]><html class="no-js ie10" lang="en" dir="ltr" data-date-format="non_us"><![endif]-->. [if (gt IE 10)\|!(IE)]> ><html class="no-js " lang="en" dir="ltr" data-date-format="non_us"> <![endif]-->.<head>. <title>Helpdesk : Corteva DHL Operations Center</title>. <meta name="csrf-param" content="authenticity_token" />.<meta name="csrf-token" content="VBQGpQCtKrNr853ZBkF1Cz6w1ZFmPp7+G6aoEn7cdYWgGuTlcJd8osne6qBALvnBZzaOJa6F6mePrQauFiNn7g==" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <link

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Tue Dec 10 15:20:16 2024, max compression, from Unix, original size modulo 2^32 1859809
Category:	downloaded
Size (bytes):	537184
Entropy (8bit):	7.9990990710382315
Encrypted:	true
SSDEEP:	12288:zGPa86aMhuGFSPEff9X0hOpQUw9B6CoNPljsWnumDWT:zGP9xMhzFSM396OuUw9B6DPpnume
MD5:	3BF257EA550CE745C37A8E78EABF0254
SHA1:	2A2F2BC742934AF358C278949CF9ED92B5C208CA
SHA-256:	E2DE4B5826036790453223DDA17A3FAEAE9483F7E60B952BD81A3ECDDA2BC624
SHA-512:	6ED33EF52734661F6CB88AE7E5FA2EA23033E5081AC6C684A5B69286CA996106C163CAF4353A08114D3FFDB85401ECB6C405CF3118418466C21C54DF236671F3
Malicious:	false
Reputation:	low
URL:	https://assets6.freshdesk.com/assets/cdn/frameworks-3fd8606ae3fd565bca52791d9712b5326fc5645337a279f6e7cb053b57aec9ed.js
Preview:	....0\Xg...y..F.&..~."..1.J.g......n]-...a.(2....h..T..?..O....r.....U..ygddDd...tV&Yz.(..'...k_.7.")...u$.[/.{....,...z.m.\.%JF..N.g.9....g...et...(u.\.DN.R...nrYn...`...W..#.R.7.y\J.......^.Z{{.....~4....u".e......<J.#...".^}J_..Z.._..-.Y.K!'.4...U3....nP....y\|=X.Y...k.a..$..r....fE.,..$.g...,-...v.....-m.....n.I...}...w..A.....B~v.DFr.....?...........v..,..8..7^..O..@?.Ow.NS....(...x.\|.......w..w..{.....g../..../....oF..d=I..=;.I.2~I...../,'................UgJ..\|.-i......e...EX........X... ...2.}.BJ...-6.E..Cq'..do.......}wr2.>-.Rz.n.P,...3.v6Z~mW..v..O..,wI=...b1....y..'....b.}:..O...e\,P)....h.YI.Is.)..$....o:H.Q_].....d.FX.4...R\.s.vND..r.z.qQzb...Z..2[...jA.3j.8O.l.J..Q....F....O.s.PCJ..:.O.R.x>.QW..a.~..m..)N7q~M.x"/r..".g.....%.#.O.T...o.7W.t.{KS/W.2..W.J....I\|$g.q.....w...~.4*'....,-.~0..N.q.g...'...o2..@.T....%..%.0_D..i........}......z.U......../<......j.....h1.c..+..lg.ZNN. d.....<.....{.....<^..3`..W...5N..)G.2^.KV

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3975), with no line terminators
Category:	dropped
Size (bytes):	3975
Entropy (8bit):	5.288148816245992
Encrypted:	false
SSDEEP:	96:zuGJ+ERWJIUlw/LOyP1LE5rgDtVTsXouqJEXNXSz4g3116d:zlJ+EE+UW/LlP1LE5rgDX8ouqJcVSz4h
MD5:	F1DCE063C63A60001F49D6F34BA7BEA0
SHA1:	2AC29DDA3BF00F65938DE54DF7427B7899A72AB2
SHA-256:	67D022337404306F740A6DCFD7497398BF4B1723B9EC29A6D27E5EAFAEA41AD1
SHA-512:	9E0946439DB84843A1F4D1A778EB1E71CB044533107D6C48AD2C1CF59A63B3365721F1ABE47717B5242A6DBC97E68304C7D8619D7A4638B7A3CAA1F41DD331DA
Malicious:	false
Reputation:	low
Preview:	Date.ext={},Date.ext.util={},Date.ext.util.xPad=function(e,t,n){for("undefined"==typeof n&&(n=10);parseInt(e,10)<n&&n>1;n/=10)e=t.toString()+e;return e.toString()},Date.prototype.locale="en-GB",document.getElementsByTagName("html")&&document.getElementsByTagName("html")[0].lang&&(Date.prototype.locale=document.getElementsByTagName("html")[0].lang),Date.ext.locales={},Date.ext.locales.en={a:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],A:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],b:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],B:["January","February","March","April","May","June","July","August","September","October","November","December"],c:"%a %d %b %Y %T %Z",p:["AM","PM"],P:["am","pm"],x:"%d/%m/%y",X:"%T"},Date.ext.locales["en-US"]=Date.ext.locales.en,Date.ext.locales["en-US"].c="%a %d %b %Y %r %Z",Date.ext.locales["en-US"].x="%D",Date.ext.locales["en-US"].X="%r",Date.ext.locales["en-GB"]=Date.ext.locales.en,Date.ext.locales["en-

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Thu Nov 28 02:59:27 2024, max compression, from Unix, original size modulo 2^32 133989
Category:	downloaded
Size (bytes):	31777
Entropy (8bit):	7.99226293017281
Encrypted:	true
SSDEEP:	768:F32RFFgMzsAH3hpOuq1uPGPgfEUrrCt8GAMKCOj7i6Yrc+n:F32RFPjhHWgfE3tbrOj7tdy
MD5:	F8683A56622B6970A7A8F1D9BE20D18A
SHA1:	7FDDBE7AF44F9A821C2D1AAC8D9A2F5715DDBED1
SHA-256:	EE4A3B0523BD24D5147F7C49A60EC7FE0AD7623760A54DCB5F7EBDF5D53BF4ED
SHA-512:	B2029D98E1130D11649E9AB0AEE0E1B80CC1DF66F038C040FEC9C11AFC0F53869BC056F65444E88720CF2EB41B50224A403810577F62F3D92FC128D6B1A643D0
Malicious:	false
Reputation:	low
URL:	https://assets2.freshdesk.com/assets/cdn/common-6b0a9831febc2aba51eb45fec8990fe9a3c430f8970e25683428fb1c342044d2.css
Preview:	......Gg...}.r.H....Fu5....;zb...Ym........0.{.._fj.L...V....K.......,3{a$.zH..6a..eB^...N..wM...d-/..,.....e.311.%V..a.ik..ZK..y<^'dem......k..c}.PtPF1U-.jFB.,.."./..}i%.c5....X%..l...^.s..2......U..[y..'6.=.hK[['T..N.j.4..#a......01..!.A..6.jB.W.n..6..=1M;a.4YM.k.%a..ym...c.......-..:=.T..t...~y. .......M....$..6an...N.7.C..S.kX..B^.>.`n..yB....V..x0.7...L....o.../5.mb...N.3.F_..n;.,.`h.#...d8...D^.../...`e#)..ty3.-...9.w...-.~l..........Fr.t.V1.s}36de~;....-.......6.'...fi.....k`.Z..F.....7..T...f.._n..........yBL.7[...Svv..9...2.....i.6...}Xi...,$.....uP7.x.m..b...=AO.?...F...Rg..\|.g..%8`k.....S.....I.]._9......T5.\.p...}t..$l.%.@%c.P?.I<.-.]h..........u...........i...&...T.USo......4c.9[.+\|.m.......m....4t5...(..\|g.E..s0k.......D..BWUC.v.._.0u.\b....Jz...%.......w..A.u.M.O..Y_....<...-O.pP^.E..$.....1C...K.....MD..q...`..}.......y.w.j..ua.e...eU.Xp..e........ K.D.)&...>q.(..Q...*....6..,&...-...t}:..%(..'[M:...T_.~4.Yr.

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3975), with no line terminators
Category:	downloaded
Size (bytes):	3975
Entropy (8bit):	5.288148816245992
Encrypted:	false
SSDEEP:	96:zuGJ+ERWJIUlw/LOyP1LE5rgDtVTsXouqJEXNXSz4g3116d:zlJ+EE+UW/LlP1LE5rgDX8ouqJcVSz4h
MD5:	F1DCE063C63A60001F49D6F34BA7BEA0
SHA1:	2AC29DDA3BF00F65938DE54DF7427B7899A72AB2
SHA-256:	67D022337404306F740A6DCFD7497398BF4B1723B9EC29A6D27E5EAFAEA41AD1
SHA-512:	9E0946439DB84843A1F4D1A778EB1E71CB044533107D6C48AD2C1CF59A63B3365721F1ABE47717B5242A6DBC97E68304C7D8619D7A4638B7A3CAA1F41DD331DA
Malicious:	false
Reputation:	low
URL:	https://cortevaopscenter.freshdesk.com/assets/strftime-min.js?1736773238
Preview:	Date.ext={},Date.ext.util={},Date.ext.util.xPad=function(e,t,n){for("undefined"==typeof n&&(n=10);parseInt(e,10)<n&&n>1;n/=10)e=t.toString()+e;return e.toString()},Date.prototype.locale="en-GB",document.getElementsByTagName("html")&&document.getElementsByTagName("html")[0].lang&&(Date.prototype.locale=document.getElementsByTagName("html")[0].lang),Date.ext.locales={},Date.ext.locales.en={a:["Sun","Mon","Tue","Wed","Thu","Fri","Sat"],A:["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"],b:["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],B:["January","February","March","April","May","June","July","August","September","October","November","December"],c:"%a %d %b %Y %T %Z",p:["AM","PM"],P:["am","pm"],x:"%d/%m/%y",X:"%T"},Date.ext.locales["en-US"]=Date.ext.locales.en,Date.ext.locales["en-US"].c="%a %d %b %Y %r %Z",Date.ext.locales["en-US"].x="%D",Date.ext.locales["en-US"].X="%r",Date.ext.locales["en-GB"]=Date.ext.locales.en,Date.ext.locales["en-

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1888
Entropy (8bit):	7.4962856328834295
Encrypted:	false
SSDEEP:	48:VqfhiGvm7KCF6IytpLQTWTj0jlAT0r3FfUEx8:wfhiX1YjX0xZ8
MD5:	7CEA8340DE5BB7A4692CC8BF795EA710
SHA1:	5F0357A6600988500214BB02830A6FB15E98F571
SHA-256:	4B682C079901ACF8C823E518BB6E275F6B8986B98218A53C24A7E30BC42D6C59
SHA-512:	8B391F4C455BC666D3D99E4BF781A7E2824AAAFBF36CC9E4A9ECE7F8D9F44CEBE935F1F602C8D71EF9751DB3F39D210AA7B8D93761C0DBD03CD3DDB135D3321B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Y...2............gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE..........^!....................................................................................................................................................................................................u..r..r..k..i..o..m...x.....y.......................................................A).<.C).r........G'.:+.e........O%.;.X#.......g........6,..6..6..6..5..5.t..I'..6..5.&0.......\"..3......)/.%0..........n..c .a!.a .d .o..d . 2..5..4.]".n....q..i.....D(..4.~........=.7,.7+.\|..z........3..4....Y#....8+.1-....P%.......N%.R%.T$.S$.U$.["..........r..s.....Z"..5.(0.K&.J&.H'...h........R$.J'.Y"......h..x...6....w..m...3.l...6.p..>.?).C(...............@).......u....StRNS......6Skz../l......W...V.....Z.\|........nE.....1.(.s..-.\....................\.F.A.vt....bKGD.(..0....tIME.......&-.K...[IDATX.c` .....XX..98.89..XY.."...a..7./....Ppp....?./.7..f.......F.b.".....(.!)....$%.)1.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Tue Dec 10 15:20:16 2024, max compression, from Unix, original size modulo 2^32 176736
Category:	downloaded
Size (bytes):	48305
Entropy (8bit):	7.994757469891836
Encrypted:	true
SSDEEP:	768:SMIU5TaQQ8hcbvSrJ42UyQsQfTuGxAD9HNucfTcp/Dr0nuc9eMN34B8xcjIX2rlW:hHhHb2aaHyQDxyf4B0nu0DtI8GjeYY0U
MD5:	62B321DE989B72BB1FFD2563B4744996
SHA1:	B565267B7035DD3D73B55F29EAC84F6650AB323C
SHA-256:	31FCC770FDEE9326621772C1E7CD2165822E378DD26CC16D1C9DCFC9DFFAC43C
SHA-512:	337DCDCAF45F61B041809DC18185D753098A0FC3D31CCE093CF81379323A2BE5136C2EB94E3D61EFB4927776ECB9D7607CACCCA3A7BBD845C486D13E3283DC32
Malicious:	false
Reputation:	low
URL:	https://assets3.freshdesk.com/assets/cdn/workspace-d8499e654b71d649e6e50c906a29ecbc01bd0e78b3150b8e88ef71d647c78625.js
Preview:	....0\Xg....c.F. ..._A.....K.3........8....7K1........m)$.o....h.H.y....nd..]]]]..^..Y..Q.g/X._..e6w6.Y.......'..u.-C...Y.lk..Z.0..:.Z/...9}...7...g.1.....Y...]..U..kl.J.$..,..nW<^.....B.d.(......j..X.?......Uvk;..`.m.S}..}...:.....\......o...........u.r.-.....;..l>...Om...)..u...k=...G..1T...`..V..3g#...6.o..e..G......MV..1?....!.w`..x.Z.......}..14.{.........<HW!...l.&k].A4....}...g....7.C...../...9.y.[F^..J...?.Y......;.#. w.....c.CS.....[.G..Vl.Ud..$0..w. 1u.7........v..N.tT..cm.w_C...... .A4_........"..:.-./.%...).Y..wSXy.2.lF.....Y....v.n........@..A$.xm[I...n's........vnZ.E.O....M@..v....I....kff..h..M.........k......~..Xc1TQn....2..`..0.%tgu..+..j]4p...u.G..%O.........N.....[.w.sWu...>....GnP.Hz..v.Z.`.e.@...<;..P.R. ..}.i0!9.#.j.....?.2X)3P...'......\|.x....hC~.&.6...^'p.,..D}.v.a=..~.$....9.\..2....8..V.....,}.).>.Wp~...PL...8..3.....wM.C....#.%\|..b...T.....)}....[.......4bK.zc.....h.z...k.....y..._.......;...'try.LK.FE..

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Tue Dec 10 15:20:16 2024, max compression, from Unix, original size modulo 2^32 1859809
Category:	dropped
Size (bytes):	537184
Entropy (8bit):	7.9990990710382315
Encrypted:	true
SSDEEP:	12288:zGPa86aMhuGFSPEff9X0hOpQUw9B6CoNPljsWnumDWT:zGP9xMhzFSM396OuUw9B6DPpnume
MD5:	3BF257EA550CE745C37A8E78EABF0254
SHA1:	2A2F2BC742934AF358C278949CF9ED92B5C208CA
SHA-256:	E2DE4B5826036790453223DDA17A3FAEAE9483F7E60B952BD81A3ECDDA2BC624
SHA-512:	6ED33EF52734661F6CB88AE7E5FA2EA23033E5081AC6C684A5B69286CA996106C163CAF4353A08114D3FFDB85401ECB6C405CF3118418466C21C54DF236671F3
Malicious:	false
Reputation:	low
Preview:	....0\Xg...y..F.&..~."..1.J.g......n]-...a.(2....h..T..?..O....r.....U..ygddDd...tV&Yz.(..'...k_.7.")...u$.[/.{....,...z.m.\.%JF..N.g.9....g...et...(u.\.DN.R...nrYn...`...W..#.R.7.y\J.......^.Z{{.....~4....u".e......<J.#...".^}J_..Z.._..-.Y.K!'.4...U3....nP....y\|=X.Y...k.a..$..r....fE.,..$.g...,-...v.....-m.....n.I...}...w..A.....B~v.DFr.....?...........v..,..8..7^..O..@?.Ow.NS....(...x.\|.......w..w..{.....g../..../....oF..d=I..=;.I.2~I...../,'................UgJ..\|.-i......e...EX........X... ...2.}.BJ...-6.E..Cq'..do.......}wr2.>-.Rz.n.P,...3.v6Z~mW..v..O..,wI=...b1....y..'....b.}:..O...e\,P)....h.YI.Is.)..$....o:H.Q_].....d.FX.4...R\.s.vND..r.z.qQzb...Z..2[...jA.3j.8O.l.J..Q....F....O.s.PCJ..:.O.R.x>.QW..a.~..m..)N7q~M.x"/r..".g.....%.#.O.T...o.7W.t.{KS/W.2..W.J....I\|$g.q.....w...~.4*'....,-.~0..N.q.g...'...o2..@.T....%..%.0_D..i........}......z.U......../<......j.....h1.c..+..lg.ZNN. d.....<.....{.....<^..3`..W...5N..)G.2^.KV

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Wed Jul 12 07:42:38 2023, max compression, from Unix, original size modulo 2^32 135005
Category:	downloaded
Size (bytes):	36298
Entropy (8bit):	7.994623039256934
Encrypted:	true
SSDEEP:	768:qxcnwUXQLdSMgxcaWJ14cUdV66y9X/h8R4mJLwMkzjFd:CwnC4xc9X4DfnythA5BOjFd
MD5:	66B03BA3BB716FC88B1F55BA0E79C3B6
SHA1:	6021D77D5E008C77D6E8BF8F27164DE63046F186
SHA-256:	BAFC673436B8ED6761B9E145FC457A1CBF5B8CF5CC1221B105AA062A3E585F1A
SHA-512:	33FCCD36CB71EB007E8C5B38987F1762A5DA289C4BFEBB96E74CE79B775A4E8D68132ACACB40B6889143976B1B483083289FB8257C79DCE5B38249DE5B2CC7C9
Malicious:	false
Reputation:	low
URL:	https://assets4.freshdesk.com/assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js
Preview:	....nY.d...k{.F.(..._A"^..A.......W.../k+3.R...lI.S...mkH.o....@....=..3c..F_......r...U.g..'>.6..eA..u.Mgcxd.?)..F.vT.../......f.%....0.3...+T.....A:.f1....twq[.~....y5H....T.n.iN...........,88......T......4..7..A.%<.. d...Z...t^...h:....}o....>)...!.....k.U....(....a..Y...j...W.^..Vkh..n....z..S:8.9-.9}5.d....7/..:...}.X..G..W.{..r^...l..].../[......`..{[.U^.X..++Jh5.F.?.....>-./%+.....w.@...ARU....3....\|.$......5K....I.(K>....p.m.\.......NV.%.....?.......Q..}p............^...?.K.>.H..F...:..W...ip.?...O.........Y.m~z.TW.ZF.9Y.....;.C...88..:\|.b..".7..&..t.D..[...`.........;V..q[M..k...\|?..V.(.K..yOJ..r<;<..........$xr...{..........9......_.9................G!.^U7..D....w._....l..+...e..+...QA....qw..q7<[&e.o8`...-..JK@..J.e..6H.Q..Ai.....l.\...v.R.&.M...R.*N..UzQ...E5..C.......E..pP.a..i..=~..V".....".M...Jm.J...u9..,...8.C.#.b....TR... .b......3E.....m...E.......`.KW.k.z1.....O............A...L..u..nJhal>n....;.....8.<...=$....O....2.0<...

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Mon Dec 12 03:50:12 2022, max compression, from Unix, original size modulo 2^32 53127
Category:	downloaded
Size (bytes):	8638
Entropy (8bit):	7.976387138560033
Encrypted:	false
SSDEEP:	192:W5ms/gBUi9JhLHwHA2nVyzkx3l/33T1PPs6Xt1kjYpdmMeDLuYIqa1oomiVe7g:taoU+hQnVwq/HTJHtakpdmMNYpa87g
MD5:	50A2541263ABB3B92AC0CE82C386E6F7
SHA1:	695C81E2DE28255C61FED5C0C4EED55B4105EC14
SHA-256:	30BFB38923B300DECA1B9C25AF984EDF0D804A68F13213357376DCA63FEF731A
SHA-512:	8E55F12C80DD80F1F8C780DCCDB04F3D7F09E89F2A106BAE87818B68B4928F77A3478AD23EC537C2729B53AF7E2351658F11AA9BFBD11AFB2804A63A9DCA6879
Malicious:	false
Reputation:	low
URL:	https://assets2.freshdesk.com/assets/cdn/falcon_activations-22e619801618c7f6d9e0ea55cff5834b59c838f266b5f99872e015a117494683.css
Preview:	.......c...=i..Fr..+.7...Q.C...=.d.$. ...lgA.....D-Iyf,.O..j.:.. ..?....bUuuuuq..".Qs:$Y..V.z.TO....U...w....g.,..E.e.)....S.5.+..^....l.r....b..>...q.......".#...O..j.Ni..,.j.j.$~..C./. ...e.g.+...G.wIQ..a.x:..@..o..b~...&..pl&.#....@i3i..&.P"C...?1d.e..R..s<...&....z..~FM.&._..=L..`.\|S.I1q.d_.5..-.X..Y....C..z ..?)E...?aBj.Y..Qw.R.....vxn.Z....B....q.A.V.vI..z....%Uj...f....q...I6.ri}K.\|O.&.i.......o....gSf.8Cp.v.]n...U...z.b.i..wL.My..g{...$...<.3W.~..:E.!i...]..~....9..O+.!..?6.%_^......XC....\|.q..A$c7........a..&J........k...#..u......j[....h...k....J..&`..w.Q.p....!.@.....J.P.d.$!....1.....:brR=m.7.`..I...o.x\..<L...o.s.w2..Q...4D.2..9D..?.....G.....F./\|...F.w.t..K4x..g.~..=.t.f..y.r....My..$.C7.......?.C...T).o.BW...y....f...E....2f....g.?.Rqc..P.g...(.__)I....kiP...?.E.....7.~ ..O.j..!a...\|..\.T."...0.[y!...........l:..[n........XE.[.A.o!B..V..\.d......A.;].s..l\l..Pf..T...-.\=.Y...O.y........T%.3H..g.2o0mH..-..=...Tk\.5..\|..5.......

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 18, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	815
Entropy (8bit):	7.018155466027987
Encrypted:	false
SSDEEP:	12:6v/7iFUV58OdL7DELt0mxJBpDiAQqOl4iobc7wIcVVwyMmEjDbkQS8QbQIzS4o2K:za7tQl3BpDtBOaolM0XxJQQIzdEMC7
MD5:	FC4FEC7A85A7DCF9D6A5C88728CB44A2
SHA1:	3D1E346CD84A2B9079E2056BD588479A77092039
SHA-256:	04A8EEA87BF95F7C19B297720D5EDFF8F83472BC869EFEC638552576A5355DCD
SHA-512:	AEF551B08371CCCBD86A8F84F41805C94093EF4741B7166E9697AE2C4E9C34FE83F74319EEAD0548B38DFFF7A3B0A6E6EED6C3079BB3FAD9D0A7E638DC471471
Malicious:	false
Reputation:	low
URL:	https://s3.amazonaws.com/cdn.freshdesk.com/data/helpdesk/attachments/production/153001919476/fav_icon/nu5c4cPGOxM3icX0y420n-oRHKOQ8ywl4g.png
Preview:	.PNG........IHDR... ...........,`....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE...............v..............................................................................=...................................................................9+.O%.D(.'0./..R%.)/.f../.X#......i...3.?).n..S$.T$.d .6,.t..4,.V#.z......................................#tRNS.........1.......)....,p..........p........bKGD\........tIME......3.......IDAT(.c`..F.N.n..n.N.F.L...../.....\|...J......@H..]..0.<P.0..F.Qe. *...Q..U...#...UT....5..U.@CE........Z.:.z...F.&.f.R.....e.-,..mtlm......Ue..........[yxzy..z...... )`UP...............VT`ER.....t.....:....F.7.....&.Y...g.....)...4....%tEXtdate:create.2023-12-07T15:11:49+00:00fp.....%tEXtdate:modify.2023-12-07T15:11:49+00:00.-.~....IEND.B`.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Wed Jul 12 07:42:38 2023, max compression, from Unix, original size modulo 2^32 135005
Category:	dropped
Size (bytes):	36298
Entropy (8bit):	7.994623039256934
Encrypted:	true
SSDEEP:	768:qxcnwUXQLdSMgxcaWJ14cUdV66y9X/h8R4mJLwMkzjFd:CwnC4xc9X4DfnythA5BOjFd
MD5:	66B03BA3BB716FC88B1F55BA0E79C3B6
SHA1:	6021D77D5E008C77D6E8BF8F27164DE63046F186
SHA-256:	BAFC673436B8ED6761B9E145FC457A1CBF5B8CF5CC1221B105AA062A3E585F1A
SHA-512:	33FCCD36CB71EB007E8C5B38987F1762A5DA289C4BFEBB96E74CE79B775A4E8D68132ACACB40B6889143976B1B483083289FB8257C79DCE5B38249DE5B2CC7C9
Malicious:	false
Reputation:	low
Preview:	....nY.d...k{.F.(..._A"^..A.......W.../k+3.R...lI.S...mkH.o....@....=..3c..F_......r...U.g..'>.6..eA..u.Mgcxd.?)..F.vT.../......f.%....0.3...+T.....A:.f1....twq[.~....y5H....T.n.iN...........,88......T......4..7..A.%<.. d...Z...t^...h:....}o....>)...!.....k.U....(....a..Y...j...W.^..Vkh..n....z..S:8.9-.9}5.d....7/..:...}.X..G..W.{..r^...l..].../[......`..{[.U^.X..++Jh5.F.?.....>-./%+.....w.@...ARU....3....\|.$......5K....I.(K>....p.m.\.......NV.%.....?.......Q..}p............^...?.K.>.H..F...:..W...ip.?...O.........Y.m~z.TW.ZF.9Y.....;.C...88..:\|.b..".7..&..t.D..[...`.........;V..q[M..k...\|?..V.(.K..yOJ..r<;<..........$xr...{..........9......_.9................G!.^U7..D....w._....l..+...e..+...QA....qw..q7<[&e.o8`...-..JK@..J.e..6H.Q..Ai.....l.\...v.R.&.M...R.*N..UzQ...E5..C.......E..pP.a..i..=~..V".....".M...Jm.J...u9..,...8.C.#.b....TR... .b......3E.....m...E.......`.KW.k.z1.....O............A...L..u..nJhal>n....;.....8.<...=$....O....2.0<...

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2609)
Category:	dropped
Size (bytes):	2771
Entropy (8bit):	5.330972099586877
Encrypted:	false
SSDEEP:	48:NEziSHvaS18A37h+27lVWMzoCoyYkHykhpUhHSUdhKU04obSN114YLZ:ki5pMP77ukHMsMp7NzZ
MD5:	D5843DBDC71FF8014A5EAFD346A262DA
SHA1:	127E1D971EFAB9341DB8079F10663DC28E8E0A2F
SHA-256:	8E73A30D35C83EA6A597C3343324D2B7DF097AD26E67B62EFB5266EE12D317B5
SHA-512:	AC28DFA1A6FD09528E1FFC3F4FA19B0719C01F9033872E3EAB51175B95C451179F1DB22445B43EF9947E1810A5A37FDDDEAE7CDD7FE03B814A98E16E8642AB74
Malicious:	false
Reputation:	low
Preview:	/!. jQuery Mousewheel 3.1.13. . Copyright 2015 jQuery Foundation and other contributors. * Released under the MIT license.. * http://jquery.org/license. /.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function b(b){var g=b\|\|window.event,h=i.call(arguments,1),j=0,l=0,m=0,n=0,o=0,p=0;if(b=a.event.fix(g),b.type="mousewheel","detail"in g&&(m=-1g.detail),"wheelDelta"in g&&(m=g.wheelDelta),"wheelDeltaY"in g&&(m=g.wheelDeltaY),"wheelDeltaX"in g&&(l=-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.deltaY,j=m),"deltaX"in g&&(l=g.deltaX,0===m&&(j=-1l)),0!==m\|\|0!==l){if(1===g.deltaMode){var q=a.data(this,"mousewheel-line-height");j=q,m=q,l=q}else if(2===g.deltaMode){var r=a.data(this,"mousewheel-page-height");j=r,m=r,l=r}if(n=Math.max(Math.abs(m),Math.abs(l)),(!f\|\|f>n)&&(f=n,d(g,n)&&(f/=40)),d(g,n)&&(j/=40,l/=40,m/=40),j=Math[j>=1?"floor

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, last modified: Tue Dec 10 15:20:16 2024, max compression, from Unix, original size modulo 2^32 176736
Category:	dropped
Size (bytes):	48305
Entropy (8bit):	7.994757469891836
Encrypted:	true
SSDEEP:	768:SMIU5TaQQ8hcbvSrJ42UyQsQfTuGxAD9HNucfTcp/Dr0nuc9eMN34B8xcjIX2rlW:hHhHb2aaHyQDxyf4B0nu0DtI8GjeYY0U
MD5:	62B321DE989B72BB1FFD2563B4744996
SHA1:	B565267B7035DD3D73B55F29EAC84F6650AB323C
SHA-256:	31FCC770FDEE9326621772C1E7CD2165822E378DD26CC16D1C9DCFC9DFFAC43C
SHA-512:	337DCDCAF45F61B041809DC18185D753098A0FC3D31CCE093CF81379323A2BE5136C2EB94E3D61EFB4927776ECB9D7607CACCCA3A7BBD845C486D13E3283DC32
Malicious:	false
Reputation:	low
Preview:	....0\Xg....c.F. ..._A.....K.3........8....7K1........m)$.o....h.H.y....nd..]]]]..^..Y..Q.g/X._..e6w6.Y.......'..u.-C...Y.lk..Z.0..:.Z/...9}...7...g.1.....Y...]..U..kl.J.$..,..nW<^.....B.d.(......j..X.?......Uvk;..`.m.S}..}...:.....\......o...........u.r.-.....;..l>...Om...)..u...k=...G..1T...`..V..3g#...6.o..e..G......MV..1?....!.w`..x.Z.......}..14.{.........<HW!...l.&k].A4....}...g....7.C...../...9.y.[F^..J...?.Y......;.#. w.....c.CS.....[.G..Vl.Ud..$0..w. 1u.7........v..N.tT..cm.w_C...... .A4_........"..:.-./.%...).Y..wSXy.2.lF.....Y....v.n........@..A$.xm[I...n's........vnZ.E.O....M@..v....I....kff..h..M.........k......~..Xc1TQn....2..`..0.%tgu..+..j]4p...u.G..%O.........N.....[.w.sWu...>....GnP.Hz..v.Z.`.e.@...<;..P.R. ..}.i0!9.#.j.....?.2X)3P...'......\|.x....hC~.&.6...^'p.,..D}.v.a=..~.$....9.\..2....8..V.....,}.).>.Wp~...PL...8..3.....wM.C....#.%\|..b...T.....)}....[.......4bK.zc.....h.z...k.....y..._.......;...'try.LK.FE..

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 18, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	815
Entropy (8bit):	7.018155466027987
Encrypted:	false
SSDEEP:	12:6v/7iFUV58OdL7DELt0mxJBpDiAQqOl4iobc7wIcVVwyMmEjDbkQS8QbQIzS4o2K:za7tQl3BpDtBOaolM0XxJQQIzdEMC7
MD5:	FC4FEC7A85A7DCF9D6A5C88728CB44A2
SHA1:	3D1E346CD84A2B9079E2056BD588479A77092039
SHA-256:	04A8EEA87BF95F7C19B297720D5EDFF8F83472BC869EFEC638552576A5355DCD
SHA-512:	AEF551B08371CCCBD86A8F84F41805C94093EF4741B7166E9697AE2C4E9C34FE83F74319EEAD0548B38DFFF7A3B0A6E6EED6C3079BB3FAD9D0A7E638DC471471
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ...........,`....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....PLTE...............v..............................................................................=...................................................................9+.O%.D(.'0./..R%.)/.f../.X#......i...3.?).n..S$.T$.d .6,.t..4,.V#.z......................................#tRNS.........1.......)....,p..........p........bKGD\........tIME......3.......IDAT(.c`..F.N.n..n.N.F.L...../.....\|...J......@H..]..0.<P.0..F.Qe. *...Q..U...#...UT....5..U.@CE........Z.:.z...F.&.f.R.....e.-,..mtlm......Ue..........[yxzy..z...... )`UP...............VT`ER.....t.....:....F.7.....&.Y...g.....)...4....%tEXtdate:create.2023-12-07T15:11:49+00:00fp.....%tEXtdate:modify.2023-12-07T15:11:49+00:00.-.~....IEND.B`.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.427567157116927
Encrypted:	false
SSDEEP:	3:mSifLxCnIzbPgyYn:mSifLEnIzbPgyY
MD5:	9CCAFCD1B4D46192C6527F059634019F
SHA1:	6D781C98F159844DCCD7759A74DBA062BD6CD47B
SHA-256:	D1B6FE95FEA822A8532755436CCDA8C8107E6092805AE476D2DE91DF1DC3678D
SHA-512:	EB1B038D65F9B8330D7FF8089AD06162D4A7B2D90C79AB3990EC88F5CA9888B31A9B4E3F70BF3C67F5430B10A890ECCB50913760C4135AD9DEC73E527D985C0F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmWef73sQkxuxIFDRNzOdYSBQ3LAvZiEgUNos1JEQ==?alt=proto
Preview:	ChsKBw0TcznWGgAKBw3LAvZiGgAKBw2izUkRGgA=

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 17:27:56.185941935 CET	49675	443	192.168.2.4	173.222.162.32
Jan 13, 2025 17:28:01.024008036 CET	49737	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:28:01.024072886 CET	443	49737	216.58.206.68	192.168.2.4
Jan 13, 2025 17:28:01.024209023 CET	49737	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:28:01.024504900 CET	49737	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:28:01.024522066 CET	443	49737	216.58.206.68	192.168.2.4
Jan 13, 2025 17:28:01.672928095 CET	443	49737	216.58.206.68	192.168.2.4
Jan 13, 2025 17:28:01.673314095 CET	49737	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:28:01.673348904 CET	443	49737	216.58.206.68	192.168.2.4
Jan 13, 2025 17:28:01.674776077 CET	443	49737	216.58.206.68	192.168.2.4
Jan 13, 2025 17:28:01.674840927 CET	49737	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:28:01.676511049 CET	49737	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:28:01.676614046 CET	443	49737	216.58.206.68	192.168.2.4
Jan 13, 2025 17:28:01.716981888 CET	49737	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:28:01.717025995 CET	443	49737	216.58.206.68	192.168.2.4
Jan 13, 2025 17:28:01.763940096 CET	49737	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:28:01.917445898 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:01.917489052 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:01.917545080 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:01.917689085 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:01.917767048 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:01.917825937 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:01.918112993 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:01.918143034 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:01.918349981 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:01.918364048 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.483194113 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.483700991 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.483716011 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.485246897 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.485304117 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.492407084 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.492551088 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.492585897 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.503756046 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.504297972 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.504323006 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.506428003 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.506503105 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.506956100 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.507039070 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.539326906 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.545041084 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.545047998 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.560311079 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.560331106 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.591569901 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.606580973 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.700383902 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.700453043 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.700474024 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.700509071 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.700520039 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.700542927 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.700560093 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.700560093 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.700717926 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.701330900 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.714936018 CET	49739	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:02.714962006 CET	443	49739	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:02.740573883 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.740614891 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:02.740729094 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.740741968 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.740768909 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:02.740811110 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.741067886 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.741079092 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:02.741194010 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.741211891 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:02.742811918 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.742841005 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:02.742894888 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.743372917 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.743387938 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:02.748353958 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.748389006 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:02.748591900 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.748802900 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.748816967 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:02.749222040 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.749231100 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:02.749325037 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.749664068 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:02.749675989 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.482789993 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.483026981 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.483043909 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.484704971 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.484776974 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.485081911 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.485449076 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.485460997 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.486010075 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.486099958 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.486366987 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.486424923 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.486562014 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.486571074 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.487232924 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.487288952 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.487340927 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.491267920 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.491449118 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.491457939 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.492897987 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.492955923 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.493671894 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.493751049 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.493767977 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.501601934 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.501899958 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.501923084 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.502820015 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.502882004 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.503721952 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.503778934 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.503827095 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.503837109 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.506520987 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.506720066 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.506799936 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.508410931 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.508480072 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.509244919 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.509339094 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.509367943 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.531339884 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.531552076 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.531553030 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.531558990 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.535326958 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.547643900 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.547657013 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.547715902 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.551345110 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.563724995 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.563782930 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:03.579819918 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.595124006 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:03.611061096 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.085170031 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.085227013 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.085248947 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.085268974 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.085278988 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.085294008 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.085309982 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.085318089 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.085334063 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.085352898 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.085367918 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.085386038 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.085386992 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.085393906 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.088010073 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.088030100 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.088037968 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.088067055 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.088076115 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.088078976 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.088102102 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.088116884 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.088129997 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.088169098 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.114463091 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.114484072 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.114490986 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.114661932 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.114701986 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.114718914 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.114748955 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.114763021 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.114782095 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.114808083 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.115731001 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.120652914 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.120676994 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.120713949 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.120754004 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.120754004 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.120831966 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.120879889 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.120878935 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.121130943 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.121263981 CET	49742	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.121294022 CET	443	49742	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.126092911 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.126142025 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.126143932 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.126163960 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.126203060 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.126202106 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.126234055 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.126234055 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.126250982 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.126275063 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.126275063 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.166095018 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.170759916 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.173350096 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.178599119 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.178611994 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.178632975 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.178647995 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.178658962 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.178688049 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.178709030 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.179053068 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.179107904 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.179115057 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.179138899 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.179161072 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.179193974 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.182992935 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.183026075 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.183029890 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.183032990 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.183044910 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.183080912 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.183084965 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.183087111 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.183092117 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.183120012 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.183130026 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.183173895 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.183260918 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.183372974 CET	49743	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.183387041 CET	443	49743	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.183856964 CET	49744	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.183871031 CET	443	49744	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.199528933 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.200489998 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:04.200577021 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:04.200722933 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:04.200898886 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:04.200932026 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:04.205051899 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.205113888 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.208620071 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.208635092 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.208693981 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.208722115 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.208735943 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.213669062 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.213696003 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.213814974 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.213954926 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.213963985 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.219515085 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.219542027 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.219587088 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.219588995 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.219618082 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.219620943 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.219641924 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.219646931 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.219717026 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.221120119 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.221138000 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.221190929 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.221194983 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.221213102 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.221234083 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.223016024 CET	49745	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.223038912 CET	443	49745	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.234261990 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.234312057 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.234406948 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.234406948 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.234417915 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.234510899 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.244879961 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.244970083 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.245049000 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.245237112 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.245277882 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.296021938 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.296088934 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.296108961 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.296123981 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.296150923 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.296164036 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.299097061 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.299166918 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.322649002 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.322702885 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.322721958 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.322734118 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.322771072 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.332266092 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.332340002 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.332349062 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.332391024 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.334819078 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.340902090 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.340950012 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.340969086 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.340984106 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.341010094 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.381964922 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.382039070 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.382078886 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.382090092 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.382131100 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.385186911 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.385241985 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.385261059 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.385270119 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.385309935 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.392664909 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.392715931 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.392735004 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.392744064 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.392770052 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.407272100 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.407339096 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.407342911 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.407373905 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.407398939 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.421921015 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.421993017 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.422008991 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.422024965 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.422070980 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.438148975 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.438206911 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.438245058 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.438268900 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.438285112 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.440824986 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.440876007 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.440902948 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.440927029 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.440944910 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.440964937 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.441005945 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.441015005 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.452433109 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.452476025 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.452512980 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.452527046 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.452545881 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.467184067 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.467232943 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.467246056 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.467268944 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.467282057 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.470943928 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.470993042 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.471029997 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.471050978 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.471071959 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.474709988 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.474749088 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.474782944 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.474801064 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.474826097 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.494589090 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.494617939 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.494678974 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.494699001 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.494787931 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.508112907 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.508137941 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.508304119 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.508304119 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.508322001 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.524379015 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.524405003 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.524476051 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.524491072 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.526626110 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.526644945 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.526691914 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.526701927 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.526740074 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.529244900 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.529266119 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.529335022 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.529344082 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.553868055 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.553920031 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.553942919 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.554008961 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.554024935 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.554049969 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.554061890 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.554501057 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.554523945 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.554558039 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.554564953 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.554601908 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.557709932 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.557734013 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.557805061 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.557815075 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.557826996 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.557852030 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.751925945 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.751990080 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.752017021 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.752036095 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.752104044 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.752212048 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.752252102 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.752254963 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.752259970 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.752289057 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.752316952 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.752485037 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.752525091 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.752557993 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.752567053 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.752588987 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.752691031 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.752736092 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.752747059 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.752769947 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.752793074 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.758721113 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.758812904 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.758850098 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.758867979 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.758894920 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.759040117 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:04.759851933 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.759877920 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.759902954 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.759912968 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.759949923 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.759954929 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.759978056 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.760005951 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.760013103 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.760032892 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.760049105 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.760638952 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.760725021 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.760731936 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.760759115 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.760854959 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.803179026 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:04.850296021 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.850301027 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:04.850317001 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:04.851442099 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:04.851509094 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:04.851517916 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:04.851555109 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:04.852874994 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:04.852936983 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:04.853132010 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:04.853138924 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:04.885101080 CET	49746	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.885117054 CET	443	49746	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.907676935 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:04.907823086 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.907860994 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.908094883 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.908339977 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.908349991 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.950320005 CET	49751	443	192.168.2.4	104.17.24.14
Jan 13, 2025 17:28:04.950364113 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:04.950449944 CET	49751	443	192.168.2.4	104.17.24.14
Jan 13, 2025 17:28:04.950773954 CET	49751	443	192.168.2.4	104.17.24.14
Jan 13, 2025 17:28:04.950788975 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:04.956835985 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.957112074 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.957134008 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.958534002 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.958606958 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.958923101 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.958981991 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.959043026 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.959047079 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.971467972 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.971666098 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.971677065 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.972532034 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.972603083 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.972875118 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.972928047 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.972981930 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:04.972990036 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:04.979717016 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:04.999561071 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.005354881 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:05.005414009 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:05.005461931 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:05.005513906 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:05.011840105 CET	49747	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:05.011857986 CET	443	49747	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:05.022087097 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.027327061 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:05.037533045 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.037573099 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.037633896 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.037798882 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.037811995 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.182400942 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:05.182435036 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:05.182482004 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:05.182512045 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:05.182533979 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:05.182538033 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:05.182576895 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:05.182652950 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:05.182703972 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:05.184331894 CET	49740	443	192.168.2.4	52.72.100.244
Jan 13, 2025 17:28:05.184346914 CET	443	49740	52.72.100.244	192.168.2.4
Jan 13, 2025 17:28:05.207586050 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.207634926 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.207854986 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.208034992 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.208067894 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.562385082 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.562393904 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.562418938 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.562426090 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.562470913 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.562503099 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.562521935 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.562530994 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.562541962 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.562551975 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.562572002 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.566879034 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.566885948 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.566906929 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.566970110 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.566999912 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.567014933 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.567059994 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.571532011 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:05.571801901 CET	49751	443	192.168.2.4	104.17.24.14
Jan 13, 2025 17:28:05.571825981 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:05.572869062 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:05.572942972 CET	49751	443	192.168.2.4	104.17.24.14
Jan 13, 2025 17:28:05.573818922 CET	49751	443	192.168.2.4	104.17.24.14
Jan 13, 2025 17:28:05.573894024 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:05.574007988 CET	49751	443	192.168.2.4	104.17.24.14
Jan 13, 2025 17:28:05.574024916 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:05.596139908 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.596430063 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.596451044 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.598002911 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.598063946 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.598078012 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.598119020 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.598498106 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.598582029 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.598660946 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.598670006 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.615114927 CET	49751	443	192.168.2.4	104.17.24.14
Jan 13, 2025 17:28:05.630824089 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.630836964 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.630904913 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.630932093 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.630970001 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.633301973 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.633358002 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.633364916 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.633392096 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.633414984 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.633441925 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.633570910 CET	49748	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.633585930 CET	443	49748	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.638465881 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.646120071 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.647665024 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.648040056 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.648049116 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.649477005 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.649538994 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.650434971 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.650513887 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.650557041 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.652916908 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.652937889 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.652981997 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.653023958 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.653053045 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.668617964 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.668699980 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.668728113 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.668749094 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.668819904 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.668967009 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.669032097 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.669044971 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.669096947 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.669101000 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.669141054 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.669460058 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.669498920 CET	443	49749	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.669521093 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.669552088 CET	49749	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.694112062 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.694119930 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:05.699112892 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:05.699197054 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:05.699256897 CET	49751	443	192.168.2.4	104.17.24.14
Jan 13, 2025 17:28:05.699281931 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:05.699521065 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:05.699580908 CET	49751	443	192.168.2.4	104.17.24.14
Jan 13, 2025 17:28:05.699903965 CET	49751	443	192.168.2.4	104.17.24.14
Jan 13, 2025 17:28:05.699919939 CET	443	49751	104.17.24.14	192.168.2.4
Jan 13, 2025 17:28:05.707947969 CET	49755	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:05.708000898 CET	443	49755	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:05.708075047 CET	49755	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:05.708239079 CET	49755	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:05.708257914 CET	443	49755	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:05.713905096 CET	49756	443	192.168.2.4	104.17.25.14
Jan 13, 2025 17:28:05.713932037 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:05.713999033 CET	49756	443	192.168.2.4	104.17.25.14
Jan 13, 2025 17:28:05.714138985 CET	49756	443	192.168.2.4	104.17.25.14
Jan 13, 2025 17:28:05.714154959 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:05.733268023 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.733376026 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.733441114 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.733474016 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.733597994 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.733649015 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.734132051 CET	49753	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:05.734159946 CET	443	49753	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:05.747704983 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:05.813699961 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.813966036 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.814001083 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.817173004 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.817272902 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.817559004 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.817641973 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.817682981 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.859371901 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.871176004 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.871189117 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.916941881 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.956518888 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.956553936 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.956594944 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.956615925 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.956650019 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.956667900 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.956799030 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.956808090 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:05.956898928 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.958663940 CET	49754	443	192.168.2.4	34.227.156.121
Jan 13, 2025 17:28:05.958681107 CET	443	49754	34.227.156.121	192.168.2.4
Jan 13, 2025 17:28:06.188304901 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:06.188633919 CET	49756	443	192.168.2.4	104.17.25.14
Jan 13, 2025 17:28:06.188658953 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:06.189585924 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:06.189671993 CET	49756	443	192.168.2.4	104.17.25.14
Jan 13, 2025 17:28:06.190001965 CET	49756	443	192.168.2.4	104.17.25.14
Jan 13, 2025 17:28:06.190063953 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:06.190143108 CET	49756	443	192.168.2.4	104.17.25.14
Jan 13, 2025 17:28:06.190148115 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:06.229732037 CET	49756	443	192.168.2.4	104.17.25.14
Jan 13, 2025 17:28:06.230696917 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.230731010 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.230740070 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.230823040 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.230854034 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.230876923 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.230896950 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.230922937 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.230940104 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.230940104 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.230940104 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.230979919 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.260524035 CET	443	49755	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:06.260807991 CET	49755	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:06.260848999 CET	443	49755	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:06.261557102 CET	443	49755	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:06.261830091 CET	49755	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:06.261931896 CET	49755	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:06.261938095 CET	443	49755	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:06.303342104 CET	443	49755	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:06.310067892 CET	49755	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:06.312922001 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.322946072 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:06.323036909 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:06.323105097 CET	49756	443	192.168.2.4	104.17.25.14
Jan 13, 2025 17:28:06.323124886 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:06.323237896 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:06.323296070 CET	49756	443	192.168.2.4	104.17.25.14
Jan 13, 2025 17:28:06.324064970 CET	49756	443	192.168.2.4	104.17.25.14
Jan 13, 2025 17:28:06.324084997 CET	443	49756	104.17.25.14	192.168.2.4
Jan 13, 2025 17:28:06.325135946 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.325158119 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.325211048 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.325227976 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.325256109 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.333852053 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.333897114 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.333930969 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.333937883 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.333980083 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.406343937 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.406367064 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.406483889 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.406508923 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.406550884 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.409910917 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.409984112 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.409991980 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.410152912 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.410197020 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.410204887 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.422993898 CET	443	49755	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:06.423105955 CET	443	49755	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:06.423162937 CET	49755	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:06.423656940 CET	49755	443	192.168.2.4	52.217.202.64
Jan 13, 2025 17:28:06.423681974 CET	443	49755	52.217.202.64	192.168.2.4
Jan 13, 2025 17:28:06.427710056 CET	49758	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:06.427799940 CET	443	49758	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:06.427915096 CET	49758	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:06.428078890 CET	49758	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:06.428113937 CET	443	49758	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:06.428467035 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.428487062 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.428531885 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.428543091 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.428572893 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.435297966 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.435327053 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.435363054 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.435374022 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.435401917 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.435904980 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.435966015 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.435975075 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.481869936 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.496037006 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.496059895 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.496114969 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.496124983 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.496154070 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.496166945 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.497760057 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.497778893 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.497817039 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.497826099 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.497845888 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.497865915 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.506740093 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.506757975 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.506831884 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.506841898 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.506881952 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.513139009 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.513185024 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.513206959 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.513214111 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.513238907 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.513251066 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.518935919 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.519046068 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.519057035 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.523931026 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.523948908 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.524019957 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.524029016 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.525688887 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.525706053 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.525768995 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.525779963 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.531178951 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.531198025 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.531255960 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.531267881 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.531282902 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.575675964 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.586780071 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.586817026 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.586867094 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.586879015 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.586908102 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.586920023 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.588027000 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.588047981 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.588109970 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.588119030 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.588165045 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.588607073 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.588632107 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.588666916 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.588675976 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.588702917 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.588711023 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.597733974 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.597774029 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.597814083 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.597822905 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.597837925 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.597860098 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.609105110 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.609131098 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.609200001 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.609211922 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.609256983 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.610114098 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.610140085 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.610181093 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.610189915 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.610224962 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.610225916 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.617001057 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.617019892 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.617163897 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.617178917 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.617255926 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.623532057 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.623550892 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.623702049 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.623709917 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.623797894 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.627140999 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.627175093 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.627202988 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.627209902 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.627238035 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.678883076 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.678910017 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.678987980 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.679001093 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.679439068 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.679457903 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.679492950 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.679496050 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.679508924 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.679521084 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.679549932 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.688978910 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.688998938 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.689060926 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.689069033 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.689109087 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.708142042 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.708161116 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.708189011 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.708204031 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.708220005 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.708252907 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.709516048 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.709537983 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.709577084 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.709584951 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.709598064 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.715586901 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.715614080 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.715647936 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.715656042 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.715678930 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.716432095 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.716455936 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.716490030 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.716497898 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.716509104 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.723824024 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.723840952 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.723887920 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.723896980 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.769927025 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.769949913 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.770025969 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.770039082 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.770688057 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.770705938 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.770752907 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.770760059 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.770785093 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.773683071 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.773751974 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.773758888 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.773777008 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:06.773798943 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.773829937 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.774000883 CET	49750	443	192.168.2.4	52.222.225.5
Jan 13, 2025 17:28:06.774012089 CET	443	49750	52.222.225.5	192.168.2.4
Jan 13, 2025 17:28:07.038372040 CET	443	49758	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:07.038866043 CET	49758	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:07.038933039 CET	443	49758	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:07.039490938 CET	443	49758	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:07.039895058 CET	49758	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:07.039989948 CET	443	49758	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:07.040014029 CET	49758	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:07.083364964 CET	443	49758	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:07.086718082 CET	49758	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:07.163155079 CET	443	49758	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:07.163307905 CET	443	49758	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:07.163506985 CET	49758	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:07.182079077 CET	49758	443	192.168.2.4	16.15.178.206
Jan 13, 2025 17:28:07.182147026 CET	443	49758	16.15.178.206	192.168.2.4
Jan 13, 2025 17:28:11.563851118 CET	443	49737	216.58.206.68	192.168.2.4
Jan 13, 2025 17:28:11.563919067 CET	443	49737	216.58.206.68	192.168.2.4
Jan 13, 2025 17:28:11.563966990 CET	49737	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:28:13.124660015 CET	49737	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:28:13.124694109 CET	443	49737	216.58.206.68	192.168.2.4
Jan 13, 2025 17:28:13.286540031 CET	49723	80	192.168.2.4	199.232.214.172
Jan 13, 2025 17:28:13.291733980 CET	80	49723	199.232.214.172	192.168.2.4
Jan 13, 2025 17:28:13.291790009 CET	49723	80	192.168.2.4	199.232.214.172
Jan 13, 2025 17:28:37.130280018 CET	63700	53	192.168.2.4	162.159.36.2
Jan 13, 2025 17:28:37.135102034 CET	53	63700	162.159.36.2	192.168.2.4
Jan 13, 2025 17:28:37.135164022 CET	63700	53	192.168.2.4	162.159.36.2
Jan 13, 2025 17:28:37.139939070 CET	53	63700	162.159.36.2	192.168.2.4
Jan 13, 2025 17:28:37.580607891 CET	63700	53	192.168.2.4	162.159.36.2
Jan 13, 2025 17:28:37.585742950 CET	53	63700	162.159.36.2	192.168.2.4
Jan 13, 2025 17:28:37.585798025 CET	63700	53	192.168.2.4	162.159.36.2
Jan 13, 2025 17:28:39.020349979 CET	53662	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:39.025207996 CET	53	53662	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:39.025275946 CET	53662	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:39.025358915 CET	53662	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:39.030172110 CET	53	53662	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:39.491014004 CET	53	53662	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:39.491354942 CET	53662	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:39.496496916 CET	53	53662	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:39.497014046 CET	53662	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:29:01.081408978 CET	53721	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:29:01.081466913 CET	443	53721	216.58.206.68	192.168.2.4
Jan 13, 2025 17:29:01.081531048 CET	53721	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:29:01.081921101 CET	53721	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:29:01.081945896 CET	443	53721	216.58.206.68	192.168.2.4
Jan 13, 2025 17:29:01.716512918 CET	443	53721	216.58.206.68	192.168.2.4
Jan 13, 2025 17:29:01.716924906 CET	53721	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:29:01.716989994 CET	443	53721	216.58.206.68	192.168.2.4
Jan 13, 2025 17:29:01.717493057 CET	443	53721	216.58.206.68	192.168.2.4
Jan 13, 2025 17:29:01.717897892 CET	53721	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:29:01.718010902 CET	443	53721	216.58.206.68	192.168.2.4
Jan 13, 2025 17:29:01.763695002 CET	53721	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:29:02.278971910 CET	49724	80	192.168.2.4	199.232.214.172
Jan 13, 2025 17:29:02.284307003 CET	80	49724	199.232.214.172	192.168.2.4
Jan 13, 2025 17:29:02.284363985 CET	49724	80	192.168.2.4	199.232.214.172
Jan 13, 2025 17:29:11.651751041 CET	443	53721	216.58.206.68	192.168.2.4
Jan 13, 2025 17:29:11.651827097 CET	443	53721	216.58.206.68	192.168.2.4
Jan 13, 2025 17:29:11.651871920 CET	53721	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:29:13.126194954 CET	53721	443	192.168.2.4	216.58.206.68
Jan 13, 2025 17:29:13.126236916 CET	443	53721	216.58.206.68	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 17:27:56.783601999 CET	53	53548	1.1.1.1	192.168.2.4
Jan 13, 2025 17:27:56.821459055 CET	53	64978	1.1.1.1	192.168.2.4
Jan 13, 2025 17:27:57.924614906 CET	53	57689	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:01.014904022 CET	56480	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:01.015008926 CET	55402	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:01.021929979 CET	53	56480	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:01.021950006 CET	53	55402	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:01.896841049 CET	50137	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:01.897346020 CET	57628	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:01.915411949 CET	53	50137	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:01.916817904 CET	53	57628	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:02.723197937 CET	49876	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:02.723340988 CET	63021	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:02.724334002 CET	58236	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:02.724499941 CET	53733	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:02.729563951 CET	64013	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:02.730032921 CET	60787	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:02.730418921 CET	49394	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:02.730446100 CET	53	63021	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:02.730843067 CET	51190	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:02.738373041 CET	53	51190	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:02.739833117 CET	53	49876	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:02.741512060 CET	53	53733	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:02.742325068 CET	53	58236	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:02.746572971 CET	53	60787	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:02.747534037 CET	53	49394	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:02.747859955 CET	53	64013	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:04.192342043 CET	61497	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:04.192516088 CET	60250	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:04.194155931 CET	55959	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:04.194541931 CET	50607	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:04.199707985 CET	53	61497	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:04.199898958 CET	53	60250	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:04.201967001 CET	53	50607	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:04.213305950 CET	53	55959	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:04.226624966 CET	61976	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:04.226900101 CET	65348	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:04.233973026 CET	53	65348	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:04.244442940 CET	53	61976	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:04.889513969 CET	55869	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:04.889695883 CET	65153	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:04.896608114 CET	53	65153	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:04.907217979 CET	53	55869	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:04.942823887 CET	51843	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:04.943070889 CET	64363	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:04.949646950 CET	53	51843	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:04.949728966 CET	53	64363	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:05.029762030 CET	58072	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:05.030122995 CET	49398	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:05.031560898 CET	53	59698	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:05.036714077 CET	53	49398	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:05.037117004 CET	53	58072	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:05.189199924 CET	54331	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:05.189387083 CET	62445	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:05.206619978 CET	53	62445	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:05.207142115 CET	53	54331	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:05.705466986 CET	63401	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:05.706590891 CET	51351	53	192.168.2.4	1.1.1.1
Jan 13, 2025 17:28:05.712440014 CET	53	63401	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:05.713578939 CET	53	51351	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:13.863317966 CET	138	138	192.168.2.4	192.168.2.255
Jan 13, 2025 17:28:14.991424084 CET	53	65252	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:33.946996927 CET	53	56168	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:37.129833937 CET	53	64769	162.159.36.2	192.168.2.4
Jan 13, 2025 17:28:37.599915981 CET	53	57114	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:39.019973040 CET	53	50096	1.1.1.1	192.168.2.4
Jan 13, 2025 17:28:56.604301929 CET	53	62501	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 13, 2025 17:28:01.014904022 CET	192.168.2.4	1.1.1.1	0xb5ad	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:01.015008926 CET	192.168.2.4	1.1.1.1	0x92cd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:01.896841049 CET	192.168.2.4	1.1.1.1	0x81c8	Standard query (0)	cortevaopscenter.freshdesk.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:01.897346020 CET	192.168.2.4	1.1.1.1	0xa0c1	Standard query (0)	cortevaopscenter.freshdesk.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:02.723197937 CET	192.168.2.4	1.1.1.1	0xcbf1	Standard query (0)	assets2.freshdesk.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:02.723340988 CET	192.168.2.4	1.1.1.1	0x6c23	Standard query (0)	assets2.freshdesk.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:02.724334002 CET	192.168.2.4	1.1.1.1	0x32fd	Standard query (0)	assets4.freshdesk.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:02.724499941 CET	192.168.2.4	1.1.1.1	0xf515	Standard query (0)	assets4.freshdesk.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:02.729563951 CET	192.168.2.4	1.1.1.1	0xcbfb	Standard query (0)	assets6.freshdesk.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:02.730032921 CET	192.168.2.4	1.1.1.1	0x6319	Standard query (0)	assets6.freshdesk.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:02.730418921 CET	192.168.2.4	1.1.1.1	0x8cb7	Standard query (0)	assets3.freshdesk.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:02.730843067 CET	192.168.2.4	1.1.1.1	0x796f	Standard query (0)	assets3.freshdesk.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:04.192342043 CET	192.168.2.4	1.1.1.1	0x7ae4	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.192516088 CET	192.168.2.4	1.1.1.1	0x4f2b	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:04.194155931 CET	192.168.2.4	1.1.1.1	0x8d43	Standard query (0)	assets4.freshdesk.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.194541931 CET	192.168.2.4	1.1.1.1	0xbe0a	Standard query (0)	assets4.freshdesk.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:04.226624966 CET	192.168.2.4	1.1.1.1	0x3f75	Standard query (0)	assets3.freshdesk.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.226900101 CET	192.168.2.4	1.1.1.1	0x9b64	Standard query (0)	assets3.freshdesk.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:04.889513969 CET	192.168.2.4	1.1.1.1	0xfeee	Standard query (0)	assets6.freshdesk.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.889695883 CET	192.168.2.4	1.1.1.1	0xb48f	Standard query (0)	assets6.freshdesk.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:04.942823887 CET	192.168.2.4	1.1.1.1	0x350f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.943070889 CET	192.168.2.4	1.1.1.1	0x33dc	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:05.029762030 CET	192.168.2.4	1.1.1.1	0x5d99	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.030122995 CET	192.168.2.4	1.1.1.1	0x70a9	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:05.189199924 CET	192.168.2.4	1.1.1.1	0x5b91	Standard query (0)	cortevaopscenter.freshdesk.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.189387083 CET	192.168.2.4	1.1.1.1	0xf7d8	Standard query (0)	cortevaopscenter.freshdesk.com	65	IN (0x0001)	false
Jan 13, 2025 17:28:05.705466986 CET	192.168.2.4	1.1.1.1	0xeca	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.706590891 CET	192.168.2.4	1.1.1.1	0x2ff7	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 13, 2025 17:28:01.021929979 CET	1.1.1.1	192.168.2.4	0xb5ad	No error (0)	www.google.com	216.58.206.68	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:01.021950006 CET	1.1.1.1	192.168.2.4	0x92cd	No error (0)	www.google.com		65	IN (0x0001)	false
Jan 13, 2025 17:28:01.915411949 CET	1.1.1.1	192.168.2.4	0x81c8	No error (0)	cortevaopscenter.freshdesk.com	52.72.100.244	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:01.915411949 CET	1.1.1.1	192.168.2.4	0x81c8	No error (0)	cortevaopscenter.freshdesk.com	34.227.156.121	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:01.915411949 CET	1.1.1.1	192.168.2.4	0x81c8	No error (0)	cortevaopscenter.freshdesk.com	3.212.100.132	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:01.915411949 CET	1.1.1.1	192.168.2.4	0x81c8	No error (0)	cortevaopscenter.freshdesk.com	54.243.42.8	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:01.915411949 CET	1.1.1.1	192.168.2.4	0x81c8	No error (0)	cortevaopscenter.freshdesk.com	54.163.169.242	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:02.739833117 CET	1.1.1.1	192.168.2.4	0xcbf1	No error (0)	assets2.freshdesk.com	52.222.225.5	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:02.742325068 CET	1.1.1.1	192.168.2.4	0x32fd	No error (0)	assets4.freshdesk.com	52.222.225.5	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:02.747534037 CET	1.1.1.1	192.168.2.4	0x8cb7	No error (0)	assets3.freshdesk.com	52.222.225.5	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:02.747859955 CET	1.1.1.1	192.168.2.4	0xcbfb	No error (0)	assets6.freshdesk.com	52.222.225.5	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.199707985 CET	1.1.1.1	192.168.2.4	0x7ae4	No error (0)	s3.amazonaws.com	52.217.202.64	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.199707985 CET	1.1.1.1	192.168.2.4	0x7ae4	No error (0)	s3.amazonaws.com	52.217.234.192	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.199707985 CET	1.1.1.1	192.168.2.4	0x7ae4	No error (0)	s3.amazonaws.com	52.216.212.0	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.199707985 CET	1.1.1.1	192.168.2.4	0x7ae4	No error (0)	s3.amazonaws.com	16.15.176.253	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.199707985 CET	1.1.1.1	192.168.2.4	0x7ae4	No error (0)	s3.amazonaws.com	52.217.94.222	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.199707985 CET	1.1.1.1	192.168.2.4	0x7ae4	No error (0)	s3.amazonaws.com	52.216.57.192	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.199707985 CET	1.1.1.1	192.168.2.4	0x7ae4	No error (0)	s3.amazonaws.com	52.216.214.64	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.199707985 CET	1.1.1.1	192.168.2.4	0x7ae4	No error (0)	s3.amazonaws.com	16.182.32.64	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.213305950 CET	1.1.1.1	192.168.2.4	0x8d43	No error (0)	assets4.freshdesk.com	52.222.225.5	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.244442940 CET	1.1.1.1	192.168.2.4	0x3f75	No error (0)	assets3.freshdesk.com	52.222.225.5	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.907217979 CET	1.1.1.1	192.168.2.4	0xfeee	No error (0)	assets6.freshdesk.com	52.222.225.5	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.949646950 CET	1.1.1.1	192.168.2.4	0x350f	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.949646950 CET	1.1.1.1	192.168.2.4	0x350f	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:04.949728966 CET	1.1.1.1	192.168.2.4	0x33dc	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Jan 13, 2025 17:28:05.037117004 CET	1.1.1.1	192.168.2.4	0x5d99	No error (0)	s3.amazonaws.com	16.15.178.206	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.037117004 CET	1.1.1.1	192.168.2.4	0x5d99	No error (0)	s3.amazonaws.com	52.217.160.64	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.037117004 CET	1.1.1.1	192.168.2.4	0x5d99	No error (0)	s3.amazonaws.com	52.217.112.128	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.037117004 CET	1.1.1.1	192.168.2.4	0x5d99	No error (0)	s3.amazonaws.com	52.216.60.152	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.037117004 CET	1.1.1.1	192.168.2.4	0x5d99	No error (0)	s3.amazonaws.com	54.231.224.200	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.037117004 CET	1.1.1.1	192.168.2.4	0x5d99	No error (0)	s3.amazonaws.com	54.231.229.224	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.037117004 CET	1.1.1.1	192.168.2.4	0x5d99	No error (0)	s3.amazonaws.com	52.217.116.160	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.037117004 CET	1.1.1.1	192.168.2.4	0x5d99	No error (0)	s3.amazonaws.com	52.216.251.158	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.207142115 CET	1.1.1.1	192.168.2.4	0x5b91	No error (0)	cortevaopscenter.freshdesk.com	34.227.156.121	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.207142115 CET	1.1.1.1	192.168.2.4	0x5b91	No error (0)	cortevaopscenter.freshdesk.com	54.243.42.8	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.207142115 CET	1.1.1.1	192.168.2.4	0x5b91	No error (0)	cortevaopscenter.freshdesk.com	54.163.169.242	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.207142115 CET	1.1.1.1	192.168.2.4	0x5b91	No error (0)	cortevaopscenter.freshdesk.com	52.72.100.244	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.207142115 CET	1.1.1.1	192.168.2.4	0x5b91	No error (0)	cortevaopscenter.freshdesk.com	3.212.100.132	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.712440014 CET	1.1.1.1	192.168.2.4	0xeca	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.712440014 CET	1.1.1.1	192.168.2.4	0xeca	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 17:28:05.713578939 CET	1.1.1.1	192.168.2.4	0x2ff7	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false

HTTP Request Dependency Graph

cortevaopscenter.freshdesk.com

https:

assets6.freshdesk.com

assets2.freshdesk.com

assets4.freshdesk.com

assets3.freshdesk.com

s3.amazonaws.com

cdnjs.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	52.72.100.244	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:02 UTC	702	OUT	GET /register/FFFaTYjVZRX8bcRDPna0 HTTP/1.1 Host: cortevaopscenter.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:02 UTC	1343	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 16:28:02 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Status: 200 OK X-Request-Id: 0f662711-130a-459e-9e09-def88b2af09c Etag: W/"3632bc40d07ca76c3ef47fa9bc345011" X-Frame-Options: SAMEORIGIN Cache-Control: max-age=0, private, must-revalidate Strict-Transport-Security: max-age=31536000; includeSubDomains X-Xss-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: _x_w=45_1; path=/; HttpOnly; secure Set-Cookie: _helpkit_session=bktjVjRNb0x5T3NRZE1OQVV6WHNnVURlbUlOem1TUnYzZHA5bnZjcTZ0TVU5cGw3dUtoeW5HaGpsUXVyTTZBTVVFUVdxcnVqcU5Zb09EUHNrenArVm05TWNYVUZsV1BtaVNCRG1pNHRpVTY1MnkvMUlZS1pERUtGSlRDK0FGT1VzY1VHWENMdUVMeVc5RTZQbmlTQ0g1YzFPQ0tNWkc5VGsyKzFGSEdVTjFrOXQ4N1M4eVhwMUtvREc3TU1tT1ZmLS0vM3JEM2daRWVDc1dvb0MzeEEvdTdnPT0%3D--e289c23d90858a54b8aa85207c94996e63e4a019; path=/; HttpOnly; secure X-Envoy-Upstream-Service-Time: 100 X-Trace-Id: 00-4a93b0ee81be4bc6978097a1d40a8711-93318b1a7f075b53-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} X-Fw-Ratelimiting-Managed: false Server: fwe
2025-01-13 16:28:02 UTC	7053	IN	Data Raw: 31 62 38 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 64 61 74 65 2d 66 6f 72 6d 61 74 3d 22 6e 6f 6e 5f 75 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 64 61 74 65 2d 66 6f 72 6d 61 74 3d 22 6e 6f 6e 5f 75 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 20 Data Ascii: 1b85<!DOCTYPE html> ...[if lt IE 7]><html class="no-js ie6" lang="en" dir="ltr" data-date-format="non_us"><![endif]--> ...[if IE 7]><html class="no-js ie7" lang="en" dir="ltr" data-date-format="non_us"><![endif]--> ...[if IE
2025-01-13 16:28:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49746	52.222.225.5	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:03 UTC	623	OUT	GET /assets/cdn/frameworks-3fd8606ae3fd565bca52791d9712b5326fc5645337a279f6e7cb053b57aec9ed.js HTTP/1.1 Host: assets6.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cortevaopscenter.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:04 UTC	687	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 537184 Connection: close Date: Mon, 13 Jan 2025 16:28:04 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Dec 2024 15:54:04 GMT ETag: "3bf257ea550ce745c37a8e78eabf0254" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Wed, 10 Dec 2025 21:54:02 GMT x-amz-version-id: S.s00bbyxOf16C13s.wyPjKg5XSXqAOD Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a823be133adad65df6d3bf471a742792.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: cSvmiQt8yo3lU6BF3jZ5LIHumbQG9voCJd__aVBsYB6yjXk8zyXVCA==
2025-01-13 16:28:04 UTC	14483	IN	Data Raw: 1f 8b 08 00 30 5c 58 67 02 03 ec bd 79 9f db 46 92 26 fc ff 7e 8a 22 ec a1 00 31 c9 2a 4a b6 67 1a 14 8a ab b3 a5 6e 5d 2d c9 e3 ee 61 d1 b5 28 32 ab 08 89 04 68 00 94 54 2e b2 3f fb 1b 4f e4 81 04 08 ca 72 cf cc ee ce be e3 9f 55 04 12 79 67 64 64 44 64 1c 97 9b 74 56 26 59 7a f4 28 2e e3 27 f1 ac cc f2 6b 5f 06 37 e5 22 29 06 1f e4 75 24 b7 5b 2f 99 7b 82 13 0a fa 2c a3 9b 9d 7a 9b 6d f2 5c a6 25 4a 46 93 a9 4e 8b 67 0b 39 7f 96 ce e5 67 9b af 90 65 74 a9 db f1 a5 28 75 ed 5c d9 44 4e a3 52 e7 bb aa e5 0b 6e 72 59 6e f2 f4 e8 60 bd ba fd 57 17 ef 23 a9 52 ce 37 eb 79 5c 4a f4 c8 af b5 11 f0 f7 dd 5e ae 5a 7b 7b 83 92 bb 9d f9 7e 34 cb a5 2e f3 16 75 22 ff 65 96 fb 1f e3 fc a8 3c 4a d2 23 19 c8 c1 22 2e 5e 7d 4a 5f e7 d9 5a e6 e5 b5 5f 06 dd ae 2d 80 59 Data Ascii: 0\XgyF&~"1*Jgn]-a(2hT.?OrUygddDdtV&Yz(.'k_7")u$[/{,zm\%JFNg9get(u\DNRnrYn`W#R7y\J^Z{{~4.u"e<J#".^}J_Z_-Y
2025-01-13 16:28:04 UTC	2328	IN	Data Raw: 28 1f 09 bd 7c 0c 76 06 67 2c c5 47 3e 5b 80 a4 3f da 45 a4 be f5 ec fa 0e 71 f2 a8 e3 ff 6d 96 97 54 8b 81 0e 3d 30 f1 22 3a 0f c4 ca 7a ad 2d c6 b8 41 0c 73 e6 90 2e c4 07 f1 49 7c 16 0f c5 3b f1 56 dc 17 2f c4 63 f1 4a 3c 12 ef c5 1b f1 5c 3c 13 2f c5 6b f1 ab 78 1a 79 45 f2 eb af 4b e9 f5 86 b7 8d 68 4a 3c 71 35 29 7e a1 75 79 40 ff fe 12 11 3f 27 7e e2 bf 3f f2 df 6f db 55 10 18 29 51 0f 5f 41 a7 49 9c ec c4 5f a3 e1 bd 7b 77 87 e2 5f 89 84 69 ea 52 fc 11 30 f8 b7 e8 8f f0 8c 27 fe 8c 5f 68 66 fc c9 3c fc 1b 3d 28 25 0e d9 54 78 a8 b8 27 28 54 3b 92 7a 2b 2d 96 4a 4a 5c 56 22 96 4a 4a 5c 22 aa a0 76 38 65 9c 66 6c e3 e2 3a 9d 6d e1 da 9b 5d 91 f3 13 ab 34 41 51 20 cf 96 c5 76 0e db 80 ed 3c 29 60 97 38 df 2a 5d a3 6d 52 ac e2 f5 76 99 65 eb ed 6a b3 Data Ascii: (\|vg,G>[?EqmT=0":z-As.I\|;V/cJ<\</kxyEKhJ<q5)~uy@?'~?oU)Q_AI_{w_iR0'_hf<=(%Tx'(T;z+-JJ\V"JJ\"v8efl:m]4AQ v<)`8*]mRvej
2025-01-13 16:28:04 UTC	16384	IN	Data Raw: 56 17 92 20 47 f0 c1 ff 36 10 af ac 5a 8a d4 bc 07 1f 15 93 62 aa c2 72 a9 03 bc d0 2e c3 94 ee 98 b1 89 f3 a1 37 26 86 f6 06 e9 b1 ba af 95 3b f1 59 b1 3d 08 d5 d1 da 7f cf b3 e8 ce da 5d b3 2b 05 e3 57 9f 16 e8 0f ea 67 c8 af da b1 58 d3 92 c0 f5 d2 5c 79 eb 76 12 b9 d7 b8 21 75 e2 8f 48 b6 d9 76 f4 cc 82 a4 17 21 e8 80 d5 86 bd ab 9a fe ce d5 76 55 3d 65 bf e5 35 8d 1c a9 45 67 5c 47 e9 44 61 12 9f ac eb f4 2c 2f a2 1b 47 1b 31 fc fe 44 3b 10 7a 5d c8 cd 3c 0b 53 c1 58 05 d6 b2 15 98 c3 d4 0d 9c 1d 9b bc e9 fb e7 f0 c6 3b f5 c2 9b 79 92 87 ae 7a 93 b6 d2 84 91 14 61 a1 fd ef 94 dc b3 c9 b9 fc 98 64 9b 42 0f be 56 f6 ef 87 32 ed 76 82 92 94 03 85 f0 86 c5 f8 6d 92 07 28 0d e1 4f 43 6a 20 e4 e4 ee 94 ce 7d 0e 1c 26 27 df f1 df ef a7 75 57 da 3a 2b 58 15 Data Ascii: V G6Zbr.7&;Y=]+WgX\yv!uHv!vU=e5Eg\GDa,/G1D;z]<SX;yzadBV2vm(OCj }&'uW:+X
2025-01-13 16:28:04 UTC	15990	IN	Data Raw: 57 2f fd 8a 1c 90 09 87 24 43 24 cd 87 6f 40 c0 af b3 16 21 9f 9b 38 41 a2 ec 57 a9 8a 7b 6f 61 bc dd 65 c3 7a 5f f1 ef b1 61 a3 dd 4c 95 f3 11 ac fe 14 ae ca b1 44 9a 7b 1c d3 c7 33 44 12 e8 f5 23 99 1f 64 96 98 17 9a b3 c9 ce c5 59 e2 23 e5 66 ca cf 26 f6 56 74 6e a7 6c 11 fa 75 d9 e2 72 e6 38 4a 5e 6a eb 44 8b b5 b8 d9 fc ab 9f c8 00 7a 75 8e 2b f3 83 13 b0 34 6a 7c e0 a2 51 d5 41 12 00 de e2 4b fa 15 8b 26 94 52 ac 46 54 d9 4a fb da 3d 0b e2 38 13 8d 5e 1c 34 f5 62 68 83 bb e3 7e cf ce bb f4 f7 f5 a7 8e 8d b6 51 08 ca 6e 76 2c 6a b4 10 b8 63 44 73 17 bd 42 8f 21 87 f8 f2 15 04 ad 8f 44 e3 4a df 5e 46 61 5e fb 46 4b 03 ad fd 47 cd 74 2e ca d4 ba 81 ba 30 cf 96 df 95 ab f7 70 52 ca de 7d c3 fb 1a 73 96 af 56 ca d5 49 3d bd 14 73 5b 14 a9 6e e9 55 89 f4 Data Ascii: W/$C$o@!8AW{oaez_aLD{3D#dY#f&Vtnlur8J^jDzu+4j\|QAK&RFTJ=8^4bh~Qnv,jcDsB!DJ^Fa^FKGt.0pR}sVI=s[nU
2025-01-13 16:28:04 UTC	16384	IN	Data Raw: 3e 38 06 1c 10 8c d2 40 4c 3f b4 83 23 48 01 2e 3c f3 fa e8 a9 1a da bb 75 d5 14 6c f0 11 64 e7 4d b5 42 f8 e5 98 c8 66 72 f0 47 fa bf 78 95 5f b4 ea 27 d7 4a b9 e8 c3 81 7b 58 b6 af a0 f4 6f 64 82 f4 33 ac 30 e8 e7 97 44 9c 56 ef dd 97 92 a2 5e ff c8 66 30 ee 6b 49 01 c0 44 de 52 f7 5e ad b3 05 fc 94 55 0e 2f 11 06 4f 57 24 bc e2 31 4f 82 b2 ba ad b3 75 00 6f e9 d4 77 0b 87 a3 70 c8 f8 b8 f0 e5 89 b4 02 c5 da 47 1d ed 1f 5d c6 c1 7e 76 bd 9e b8 96 0d a7 0d 27 97 e7 8d 9f fe 84 93 57 ad 97 f8 94 13 2f 91 38 c9 94 23 b0 0a 31 96 66 66 26 aa b4 1e b3 dd b3 9e ee a7 69 31 ed 24 25 45 bc a2 ce ea 22 8b 74 f5 14 00 f3 4f e1 1a 5f 3d 2d e8 e7 13 dc 3f c9 4a 9a 2c 60 71 23 79 2b 68 4d 33 8f 22 36 58 c4 b2 18 e4 c4 7c 93 bf bf 59 8f e8 5f a8 1e 46 e7 ab 9b 7a a4 Data Ascii: >8@L?#H.<uldMBfrGx_'J{Xod30DV^f0kIDR^U/OW$1OuowpG]~v'W/8#1ff&i1$%E"tO_=-?J,`q#y+hM3"6X\|Y_Fz
2025-01-13 16:28:04 UTC	3466	IN	Data Raw: 5b ee 6f ab b4 df 1e 8e 85 8e 55 e4 43 0e d3 94 bc af be 1e 9c 16 69 82 af 8d 44 b7 62 ab db 6a 00 9f 9e 47 47 75 d1 2e 2b bd 50 bd 18 63 55 84 ae 57 24 83 6b d9 0d 52 d4 2d 1c c8 5c 3d 64 e0 20 f9 f8 fd bd b8 32 6c f8 97 a0 c9 fd 8b 53 c9 17 18 9b a8 0a ea a8 ba b2 2e e0 d9 d2 5c 15 a7 ce 2a b5 c2 3d 9c 59 63 90 bc 94 a6 5a 6f ee a9 f3 1b 48 a1 f4 64 65 44 91 dc 4b 91 85 33 36 2f b9 0c fd 84 0d fa ed ca 6a 48 ae 25 02 9c 49 61 74 b8 f6 e7 49 02 d5 e4 3a a2 6b e0 11 31 61 d1 e4 e5 10 77 06 3a 8b 69 5a 50 f7 7d 95 6f 8a b2 dd 79 21 7c 3c 87 a2 21 06 7e fb 25 13 a1 97 8c 49 49 d4 5a c7 aa 60 4d 71 6c ab 20 12 18 cf 62 f7 a0 23 e2 d7 a4 d4 8c 6a 09 a3 2d 9d 4c a9 fa 24 f6 c7 01 fd d6 ac fb 49 30 f0 5e 4a d6 75 74 5c 5c 9e c7 d3 53 3a ff 0f f0 ff 3e fd 17 4c Data Ascii: [oUCiDbjGGu.+PcUW$kR-\=d 2lS.\*=YcZoHdeDK36/jH%IatI:k1aw:iZP}oy!\|<!~%IIZ`Mql b#j-L$I0^Jut\\S:>L
2025-01-13 16:28:04 UTC	16384	IN	Data Raw: 24 2a 8c c3 83 c7 2a a5 9d 68 3a 99 67 a0 61 53 9d b5 7a 98 d6 dc b8 c1 54 a6 e1 ad 68 60 f5 af f9 44 ff ed 09 04 9b f6 0f fe 76 9b f5 bf 00 43 ed 28 dd 60 dc de 75 cc d0 c1 12 6b c8 db 89 ab 30 d3 a8 c8 5e fb 3b 04 ab 88 38 f6 dc 7f 85 89 b8 90 73 7c d1 bf ea a7 bf 2a 89 52 06 9f 31 30 e1 fa b2 22 f2 32 9c c4 ab 7b 4f 19 8e 8d 08 74 1b c9 5a c7 34 3d 58 9e af e4 47 1d 24 c6 04 87 b1 cd 75 20 81 0f 1c 3c ee 06 70 ba d6 83 45 27 c9 f7 8e c3 15 35 df b0 2b e1 25 c0 f7 2e 95 f5 b2 09 af 2d 1e ae 84 10 bb 16 c0 54 43 4e 24 e4 8f bc ba 54 02 04 1a 5e ee 9c fb 23 c4 e9 82 38 7e 20 ce fd 71 65 ae 95 0f e4 42 db 80 b2 5e 3a a0 ba 97 ca e2 89 5c 1a 8d c4 c3 5d 38 56 f7 f4 1f 77 8e da 21 ca ca f0 9a 56 1a 6b 1b f1 8b 99 c7 07 5b a2 80 2c b9 f0 e4 36 af 62 46 3e fc Data Ascii: $*h:gaSzTh`DvC(`uk0^;8s\|R10"2{OtZ4=XG$u <pE'5+%.-TCN$T^#8~ qeB^:\]8Vw!Vk[,6bF>
2025-01-13 16:28:04 UTC	8949	IN	Data Raw: 85 da 04 4c 77 bc 51 25 ba d3 25 08 fc 00 b7 37 2d 1f 40 18 40 b6 5d 41 60 2f c6 1f b2 cb f2 3e ff b7 4a bf db 8e 5f e1 bb 8d 7e b5 1c bf c5 57 1a 38 38 9d 8f 6f f1 55 87 64 8b e9 45 04 fc 41 40 4c ab 6c 26 49 57 b3 18 c7 57 a0 32 0c 25 f5 49 f5 91 55 6c 9d 72 36 76 39 92 cf 3e a2 a0 09 6b 70 a2 3b 6c 9f 49 4d e7 ea 13 eb 98 73 49 00 05 29 8e bd 6a b7 db ec 76 ab 3c c1 43 66 78 2a 69 da ac 99 fc e0 cf e4 ad 3f 93 6f 3f 6d 26 7f ad e9 3a 7e 45 7c f2 4c fe 7a f3 75 78 4d 64 f9 e9 d0 e9 91 ea 59 de ed d6 99 77 6c c0 3f c1 97 ff 3d 07 89 dd ba c3 14 01 e0 94 0c 93 04 26 eb 99 83 48 f9 be fa a5 26 07 88 5a f0 9d 58 42 46 7a 83 d4 f6 0c 95 28 1a 1a 4a 1e e0 11 90 67 24 54 94 a0 49 15 04 f6 0b 27 da 67 53 2b 46 b7 91 05 a4 80 e1 5c 82 68 d9 b8 f4 46 af 22 54 59 Data Ascii: LwQ%%7-@@]A`/>J_~W88oUdEA@Ll&IWW2%IUlr6v9>kp;lIMsI)jv<Cfx*i?o?m&:~E\|LzuxMdYwl?=&H&ZXBFz(Jg$TI'gS+F\hF"TY
2025-01-13 16:28:04 UTC	1024	IN	Data Raw: 5c be ba 81 5f e7 e8 ab d5 52 40 3a 91 f4 17 b4 61 01 48 bc e4 fa 26 c9 46 49 99 8c e8 35 34 5c 17 34 83 34 05 c0 e8 91 f9 48 ab 91 dd 29 b1 2c 12 9f a0 14 30 59 a0 50 4a 4f c0 50 b8 5f 3d 15 b7 fd 87 5f 77 e0 1a 6f d4 64 2b 1e 33 6a 14 ef da a1 58 0e 21 b5 8a 7b 9e 64 ef a2 fd 23 63 d9 1b e2 2b e9 aa d0 fa 19 41 2f 20 08 cf 58 3e 85 48 51 4b af e4 b2 1a b1 87 f1 8a 00 6c f3 65 b9 1a 19 88 9c e6 f5 87 2a 03 4c b4 08 bc c7 12 b7 65 94 e8 6e 47 73 b0 4a 5c 5e 89 1f f9 5d 19 25 fe fb d1 02 4c f3 36 57 e2 47 be 2e b7 4f 9e dc c9 d9 51 54 62 19 a3 12 a5 d8 4f 79 0c a0 1d 06 65 fa 66 b5 d1 54 9c 98 9e 23 28 ce f0 28 5e e3 eb 37 d2 7e 60 26 fd 1d 0b e5 02 79 55 1f 4a 31 5b 17 d5 e5 f0 e4 9e 7f f1 e4 49 33 1e 4e 71 29 8e cc d5 e5 81 c9 86 82 ba f1 81 24 97 4b 6f Data Ascii: \_R@:aH&FI54\44H),0YPJOP_=_wod+3jX!{d#c+A/ X>HQKle*LenGsJ\^]%L6WG.OQTbOyefT#((^7~`&yUJ1[I3Nq)$Ko
2025-01-13 16:28:04 UTC	16384	IN	Data Raw: ae cc 9c 9d eb 7e cf 5b 39 66 f4 37 ef d1 75 94 d0 01 3a db b3 9b f1 56 f8 3d 7b 75 67 08 ed ab 04 e3 12 48 80 60 e6 72 c2 30 40 10 b9 4c 99 38 72 63 e6 db ae 5f dd 73 00 6d eb 25 53 55 9a a5 cd 8e 4a a5 4f b6 6c 8a 62 5f 63 be 42 42 51 35 69 95 9b 06 62 8a 87 6d cd ed 34 8e 50 d2 ec fc e1 d4 6a 70 8e 48 6b 04 b2 8a b4 d2 9c ad c3 e5 99 01 ad 06 0a e4 69 76 cc 9a 3d 73 3a 7b 7f 73 20 f9 a9 72 ff 54 b4 6e 6b 0b 69 ad 47 93 e6 3d 65 9a 17 1c c3 4a 2b 59 6e 3d 69 40 50 cf b3 a8 77 36 8c 8e c9 de af fe b0 7a 07 43 d1 d5 c8 8d 81 61 5d 32 6a 47 c9 55 92 f7 d6 95 a3 0d 89 1a 74 5f b3 0b 54 c1 bb 47 c9 49 94 22 3a 2c d8 67 09 50 8f 86 83 c0 a9 cd 7a b6 59 7c b9 31 ad 16 fb 00 d5 d3 43 1d f5 3f 00 3c 12 fa d1 6f 02 9d 60 f3 bf 2e cb 0a c8 70 74 1d a0 e8 4c 9a fb Data Ascii: ~[9f7u:V={ugH`r0@L8rc_sm%SUJOlb_cBBQ5ibm4PjpHkiv=s:{s rTnkiG=eJ+Yn=i@Pw6zCa]2jGUt_TGI":,gPzY\|1C?<o`.ptL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	52.222.225.5	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:03 UTC	634	OUT	GET /assets/cdn/common-6b0a9831febc2aba51eb45fec8990fe9a3c430f8970e25683428fb1c342044d2.css HTTP/1.1 Host: assets2.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cortevaopscenter.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:04 UTC	679	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 31777 Connection: close Date: Mon, 13 Jan 2025 16:28:04 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 28 Nov 2024 03:32:14 GMT ETag: "f8683a56622b6970a7a8f1d9be20d18a" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Fri, 28 Nov 2025 09:32:13 GMT x-amz-version-id: b_yO6rYYyep6hezh9oYsu3wOiihIFDlc Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 ce765e91525a836efb6bc0a409334a5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: CfjPCngtiX_pwl-zSbptZMKU2RvHYkt_3T_kXLZJoCvVvnK5a0rPCg==
2025-01-13 16:28:04 UTC	15705	IN	Data Raw: 1f 8b 08 00 8f dc 47 67 02 03 ec 7d 89 72 ea 48 96 e8 af f0 aa e2 46 75 35 9b 90 10 08 3b 7a 62 d8 8d 8d b1 59 6d 98 d7 e1 10 92 00 19 81 30 12 7b f8 df 5f 66 6a cb 4c a5 00 fb 56 f5 9b 99 ae 4b b9 8c a5 cc 93 fb d9 f2 2c 33 7b 61 24 c6 a6 7a 48 a8 fa 36 61 ad e4 65 42 5e ad 0c cd 4e 98 e3 77 4d b1 13 fa 64 2d 2f b4 c4 2c 93 98 f1 89 99 90 98 65 13 33 31 31 cb 25 56 89 b1 61 2a f3 8f 8d 69 6b 89 d5 5a 4b c8 09 79 3c 5e 27 64 65 6d 2e 0f 8b 84 ac aa 6b cd b2 12 63 7d 9a 50 74 50 46 31 55 2d a1 6a 46 42 9d 2c 13 da 22 a1 2f a6 09 7d 69 25 e6 63 35 f1 91 b0 12 96 bc 58 25 ac 85 6c 18 09 cb 5e eb 73 0d fe 32 97 d3 84 b5 19 83 9f 55 c2 b6 13 5b 79 9d 18 27 36 09 3d a1 68 4b 5b 5b 27 54 00 ce 4e a8 6a c2 34 12 1b 23 61 e8 89 89 ae 19 aa 05 06 30 31 d7 8b 84 21 Data Ascii: Gg}rHFu5;zbYm0{_fjLVK,3{a$zH6aeB^NwMd-/,e311%Va*ikZKy<^'dem.kc}PtPF1U-jFB,"/}i%c5X%l^s2U[y'6=hK[['TNj4#a01!
2025-01-13 16:28:04 UTC	285	IN	Data Raw: 3d 09 f7 6a b9 80 f6 65 7f de a9 3b e5 9c 73 87 ce 61 0f bc 07 8c 09 8a 24 08 08 72 a3 0e 08 3c e8 87 a2 37 d2 cf db b2 59 ad 43 fc 73 3f ec f6 3b a5 c1 dd bb 9c bf 37 d3 dd d2 be 54 7b 1c bd 3e b7 33 0f 7a 71 da cd ae 0a 66 ba d1 6a ec cb e5 6e df aa f6 07 8b 7b 7b 24 2b 8d 69 bb 75 ff 20 77 db d3 c6 83 fe 3e 78 2d 36 3e 5e 57 3d fe d0 af 3d 68 ad d6 54 d5 ec 52 ad 36 cd dc cd aa ab 96 f9 6e 75 95 c5 a6 b0 17 a4 87 43 e3 e9 f0 24 c6 b9 a7 a3 f9 38 51 d2 f6 66 bc 94 d3 cb d7 c9 51 dc f0 ea 48 e5 ed ca b0 f9 9c 2d a7 c7 ed be 5d d1 b3 f7 6b 7d ae 97 cb 7b f1 4e ed 34 3a c5 ee 72 57 ce f7 3a f7 71 6e 94 ee d4 d4 59 ab 77 c8 eb 71 31 5d dd 72 99 78 2f 37 6b 0c 84 fb c7 b6 56 28 34 0d 3b 1b 6f aa a5 7a 57 3d b6 ca bb b5 0e f0 d4 cb 7d 8e 53 b4 b8 28 1f 9b ed Data Ascii: =je;sa$r<7YCs?;7T{>3zqfjn{{$+iu w>x-6>^W==hTR6nuC$8QfQH-]k}{N4:rW:qnYwq1]rx/7kV(4;ozW=}S(
2025-01-13 16:28:04 UTC	809	IN	Data Raw: 5b 9a 3e 4b c5 b2 55 9a ed 6b 4d a9 f4 fe 58 5c d6 07 c5 61 bb 31 b1 66 f1 8a c9 49 bd d5 5c fd 18 71 35 bd f9 52 7c 1e 9a 23 6b b4 1c 35 06 0f 7a 6d 5a e0 1f 5e 86 2f 23 1e bc e2 8d 79 fd 49 9d f5 bb e2 74 c5 97 8d bc f9 a0 f5 1f 3b 02 57 5e 0a d9 8e 59 e0 a5 c7 97 c7 76 71 51 2f 8a 5c d1 ea 4e a6 93 ec dd ea a1 fa 70 7f 28 aa f6 4b 35 5e 5a 73 da d3 7e 5c da ae 8b f3 ee a6 a4 9a d5 0f ab f8 de d5 df 9f 0f 33 c9 d8 3d ed d3 bd 57 49 c9 d7 84 67 71 08 be 8a 2f db 5e bc 78 78 9c 1a cd 9a d2 89 1f 0c cd 48 e7 d3 95 71 b6 5b 12 0a ad e3 fb cb 7d ba b8 5b f0 42 11 e0 ef 55 af f1 de 7c 29 d7 5a 13 85 8b 97 de 77 e5 d9 a0 a7 0f 57 2f ca a3 9e 97 ca d9 79 fc e5 61 12 57 36 c7 67 4d 79 50 24 9e 1b c7 e7 1f 62 a3 a8 df cf 1f 78 23 dd b0 f6 0f f9 91 51 58 f2 16 ff Data Ascii: [>KUkMX\a1fI\q5R\|#k5zmZ^/#yIt;W^YvqQ/\Np(K5^Zs~\3=WIgq/^xxHq[}[BU\|)ZwW/yaW6gMyP$bx#QX
2025-01-13 16:28:04 UTC	12792	IN	Data Raw: 99 6b eb 1e 90 6b a6 cc 1c 76 b0 62 d6 8b 99 90 17 b0 c3 0e db c6 57 2c 00 ed ac 8c 33 fb 05 2a cd 41 96 99 52 a1 58 83 1f 32 69 3c 17 e3 39 27 60 00 91 ee c0 cf 86 e5 54 f1 12 66 e5 f3 97 53 11 e6 dc 00 48 e1 b0 2b 9e fa d9 85 8a 92 22 f8 ca c1 5f 2b e8 df b9 c8 30 5f a8 ff cd 7a d8 f4 32 cc 6f dd ed 0d ce e6 e1 0d 25 7e 0a 2c a6 f1 03 87 5e ad e4 b5 7f a6 45 f8 da 11 d8 01 34 45 9b 99 86 1a a8 98 c7 13 f8 f9 bc f1 45 72 d4 ca 99 92 bf ce 00 ee d1 d6 6f ce 56 f7 4e 4e 70 fc 3c 74 e6 62 af e0 6f bf 87 be a5 79 18 77 d5 38 f8 61 6c 1e 37 ff 56 b0 13 c0 3f 22 16 1a c4 2d 6f 63 45 79 d3 16 a1 d0 5b 48 72 8e 2e 1c c3 48 80 bb a1 b3 3f d0 5a 6c f4 24 dc 66 b1 8d 0f d0 3f 60 c1 ab c4 c6 f0 fe 3a 19 ba 05 0e 81 0d b8 1e e7 18 b3 2d d2 73 21 18 37 28 f5 18 06 c9 Data Ascii: kkvbW,3*ARX2i<9'`TfSH+"_+0_z2o%~,^E4EEroVNNp<tboyw8al7V?"-ocEy[Hr.H?Zl$f?`:-s!7(
2025-01-13 16:28:04 UTC	2186	IN	Data Raw: ca 0a 34 4b 87 de c7 21 84 d1 de 02 8b 1d ad ad 91 a3 19 24 14 90 fa 6a 8f f2 11 d8 e9 ce c8 f6 bc 95 44 5e 25 14 95 10 11 88 bc 85 da 64 9f 2d a5 12 63 d0 b7 1e d0 0b 68 83 08 40 fd 0f 7c b7 28 4f 0e a6 c4 a7 0f 87 7e 3d 9d 82 37 6c a9 ef 66 6b 8d 1a 7b ca f7 e6 60 0b 37 9a 89 30 0c e4 a4 83 72 c9 3b 21 5b 77 81 4a f1 f1 e1 a9 d2 f8 bb 66 1c 0c 8d 01 3f 88 73 3d c2 48 63 6f 9a ee 14 43 ec 0f 47 39 e2 bc 6e 7f fb 1b 89 ef 46 20 f8 e0 c4 00 9c d4 3d 64 12 56 68 ab f7 b7 85 02 5a 59 ac 43 77 6e 95 83 62 00 5e 0b e5 dc 1c b1 10 0f 4e ba 03 21 94 b2 3d 54 c1 e3 c2 9e 5e 8e db 11 d4 0a 92 40 13 f8 89 62 3d a0 ef 4d 82 d9 58 36 e8 89 19 d0 a9 87 d4 88 3f 20 06 78 64 4f 04 66 c8 9c 34 67 09 76 91 52 7b 68 42 e2 de c5 c9 c5 04 fa 26 d3 4c 98 6a 2e 8c b0 28 fc fc Data Ascii: 4K!$jD^%d-ch@\|(O~=7lfk{`70r;![wJf?s=HcoCG9nF =dVhZYCwnb^N!=T^@b=MX6? xdOf4gvR{hB&Lj.(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	52.222.225.5	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:03 UTC	621	OUT	GET /assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js HTTP/1.1 Host: assets4.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cortevaopscenter.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:04 UTC	686	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 36298 Connection: close Date: Mon, 13 Jan 2025 16:28:04 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 12 Jul 2023 10:12:03 GMT ETag: "66b03ba3bb716fc88b1f55ba0e79c3b6" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Thu, 11 Jul 2024 16:12:02 GMT x-amz-version-id: FX0J3GnHPC2RzwB9koXY8pR7p66GZ.1U Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 a89f27dcb39a061266ddc18ab5416cba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: 04raHo1QgUupNKmbnQPh0OXPuDVT9j_tiWr577t4Vj-JkbimBhjLBw==
2025-01-13 16:28:04 UTC	15698	IN	Data Raw: 1f 8b 08 00 6e 59 ae 64 02 03 e4 bd 6b 7b db 46 92 28 fc f9 9c 5f 41 22 5e 19 10 41 8a b4 93 d9 19 d0 10 57 b6 e5 89 df 89 2f 6b 2b 33 c9 52 8c 1f 98 6c 49 18 53 00 17 00 6d 6b 48 ee 6f 7f ab aa ef 40 83 92 92 cc 9e 3d cf c9 33 63 11 8d 46 5f aa ab ab ab aa eb 72 b1 ce e6 55 9a 67 9d 07 27 3e 0b 36 e9 85 df 65 41 c1 aa 75 91 4d 67 63 78 64 83 2a 3f 29 8a e4 46 94 76 54 81 1f 8c 2f f2 c2 ff 9c 14 9d 2a 66 83 25 cb 2e ab ab 30 8d 33 f6 a5 c3 2b 54 c1 b8 ea f7 c7 41 3a ad 66 31 83 7f c6 a2 8d 74 77 71 5b bf 7e f7 cd c7 bf b3 79 35 48 cb 17 a2 2e 54 dc 6e bd 69 4e e5 9d d7 f9 82 fd 90 96 d5 cc eb c6 2c 38 38 f8 a7 0f f4 0b 0e 54 94 ab b1 bd af 8a 34 bb 84 37 13 9f 41 db 25 3c ae fc 20 64 13 f8 bd 5a a6 95 7f 74 5e f6 8e 82 68 3a c3 ff 1b ad 7d 6f b4 86 03 f9 Data Ascii: nYdk{F(_A"^AW/k+3RlISmkHo@=3cF_rUg'>6eAuMgcxd?)FvT/f%.03+TA:f1twq[~y5H.TniN,88T47A%< dZt^h:}o
2025-01-13 16:28:04 UTC	1114	IN	Data Raw: 65 19 c5 18 bc 5a e5 d6 f0 ba 5e 37 2e b5 9f 4e c6 01 58 6a b7 7a 57 04 f7 fa 4e 68 8c 44 98 15 91 76 cf 11 b9 be 0a 50 e5 aa fa da e9 be ac 73 ef 77 5b 03 89 0f 56 94 fc ca 82 7f 73 94 8d ee c7 f5 34 19 28 e6 5a b9 4a 34 42 9b c9 77 43 77 b6 01 77 fb b5 b4 03 77 ee c3 75 0e 85 14 2c 81 07 2e 31 5d 27 44 3c a2 99 29 e7 4b 50 92 19 0b 6d d4 8c 47 ec 33 b8 1e 0c 0a a2 16 a2 20 5d 73 01 f0 16 1a e6 44 c3 bb 70 e3 7c 6a 42 9c 54 04 88 20 b0 5e 14 c8 0d 15 a8 3a 98 c0 ae b5 9f c2 7d 80 c6 78 35 23 74 e8 85 d1 8f f2 95 68 19 52 e3 ec 0c 8d 10 13 0f 78 ac 16 27 94 ba a5 ce ab 42 b9 7b 0f 0e 0c b7 2f f9 ae 9c 99 10 45 80 72 66 71 3f 2c a1 5e 69 d8 b9 c7 71 a1 db db c9 0c 5e 77 5f 1a c3 57 c6 8c 64 8d 2b 15 b8 1a 56 7c eb ad cd de 39 b5 46 19 38 26 c1 c8 ba d5 0c Data Ascii: eZ^7.NXjzWNhDvPsw[Vs4(ZJ4BwCwwwu,.1]'D<)KPmG3 ]sDp\|jBT ^:}x5#thRx'B{/Erfq?,^iq^w_Wd+V\|9F8&
2025-01-13 16:28:04 UTC	16384	IN	Data Raw: 08 3d 8c 42 02 a7 53 3a 28 e7 49 e6 1f f9 78 9d f0 4d 34 f8 af e3 9e 1f 9c 97 fd 59 6f 7b 7e b8 3d 9f 0e 0e 27 e7 b3 80 5f 23 84 74 09 62 99 29 f2 e9 93 a5 93 b0 3c 0f 76 0e 21 a9 49 8f 38 65 a9 24 ad ce 8f 0b 22 2e 59 6d e1 80 e8 a8 86 43 43 ed 92 d9 0b 6a 64 c8 cd 8f 47 93 44 da f5 96 41 54 ee 76 ee 84 82 00 e5 26 37 ce 3b 88 ef a8 8c 27 95 a2 f6 74 a5 7c c8 75 ed 3c e7 0f d0 55 08 83 dc d5 e3 a2 db 89 5e 79 2a 05 ca b8 53 70 6b ff 96 c5 94 c9 fd ba 3a b9 5f 45 0e e1 57 11 06 47 8b 1c 8e 34 24 94 5e 51 60 61 fa 85 2e ca 3a aa 30 a0 1a e5 cb e2 01 a7 42 4c 4e 23 f8 ae 8d e1 40 6f 6c df 6e 65 50 d3 8a c2 94 71 b4 a5 9f 00 28 4a 3f 0d 47 35 e5 29 c3 1d 47 41 4b 31 ec 2e ef 03 d9 a8 41 45 9a 59 bf 04 3a 2f f2 05 26 c0 b9 75 e3 64 bb ed fa e4 45 8d 39 e8 c8 Data Ascii: =BS:(IxM4Yo{~='_#tb)<v!I8e$".YmCCjdGDATv&7;'t\|u<U^y*Spk:_EWG4$^Q`a.:0BLN#@olnePq(J?G5)GAK1.AEY:/&udE9
2025-01-13 16:28:04 UTC	2111	IN	Data Raw: a8 40 b3 9d 34 9c e6 92 bd 03 46 b7 3a 38 69 66 1c b7 eb 42 3d ef 29 f8 cc 1f 2e 7f 91 8a 70 85 9c 2b bb 3c c9 0a fd 29 99 00 7a ae 85 23 d8 28 cf 6b 8e a8 69 66 90 25 56 26 79 68 49 49 f4 64 51 3e 7d 02 ee 31 d5 c5 d3 68 50 18 bc 87 ac 3a 88 9e 3c f4 2b 58 9f 79 1f 9c f1 11 a6 a3 f0 26 2b ba 84 99 d7 49 1d ce ce 8e 57 2e 8e 66 67 07 e7 0e 19 78 b5 24 4c 1d dc fd fd c3 f7 cd 43 91 1a 56 cd a3 e6 8f e4 38 49 c0 1e d6 58 91 b5 92 1a e6 e8 af a0 5e b7 c4 7a d0 b9 c8 df 77 5e 69 3d 18 5b 67 86 05 ca 92 ce 48 4f 20 52 e5 80 75 4b 49 c9 84 47 a9 07 5e bb ea b9 e3 d4 5b f4 e4 66 f1 14 9c 2f 84 f5 49 84 53 87 22 88 46 8e 86 40 80 4a 5e 96 6c 31 27 e1 c5 cb 9a b1 3d 12 31 e6 1d f2 30 e3 96 8b a6 2a d6 0c f0 60 20 f4 40 f4 77 50 bd 59 70 0e 68 7f 5e f2 bb b5 99 2b Data Ascii: @4F:8ifB=).p+<)z#(kif%V&yhIIdQ>}1hP:<+Xy&+IW.fgx$LCV8IX^zw^i=[gHO RuKIG^[f/IS"F@J^l1'=10*` @wPYph^+
2025-01-13 16:28:04 UTC	991	IN	Data Raw: 45 bf 4a eb 54 0c 5e f6 f0 a7 f7 27 c3 af df cf 1e 90 2e e8 67 8e 2c 44 10 88 23 b4 2f de 12 12 23 36 df 2a aa ad b2 e2 a8 a5 9c 6f 69 68 e2 9f af 21 29 50 d5 0a 1d 78 34 f1 e0 10 44 0c d0 6d da 03 3f 7d 24 ac fa b9 11 dd 6a 01 72 aa 0d e6 1c d8 b0 f0 e0 9f 36 e3 81 da 0e f9 bd 36 c3 9f 40 7e 92 b6 f3 aa 8b d9 60 ec 48 41 f8 47 51 07 e5 6f dd 21 a8 2f 1d ab 72 cc f0 49 c6 71 71 0c 89 5d 23 b2 70 26 31 4e 9c 58 8c 87 a1 74 ef e5 1b 41 4b 91 db 8a c0 b4 5f ff e8 ab 9c c4 79 7d b8 81 a4 cb d8 0a de d7 78 13 b6 75 93 9b ab ef eb ff 07 66 14 f7 9b 05 ef 65 da b1 8d 7f d8 1d 31 79 3b 67 98 0e 54 fc 79 5c 73 c7 5b 64 14 74 45 42 7a 94 e7 ca 4e 7d ca 32 88 9c 65 30 52 2b 79 fc 11 5e 9f a8 ac 2c aa cf 56 01 63 95 4c 6f 76 da fa b3 28 aa 5b 8b 2b 91 d2 71 48 b4 91 Data Ascii: EJT^'.g,D#/#6*oih!)Px4Dm?}$jr66@~`HAGQo!/rIqq]#p&1NXtAK_y}xufe1y;gTy\s[dtEBzN}2e0R+y^,VcLov([+qH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	52.222.225.5	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:03 UTC	622	OUT	GET /assets/cdn/workspace-d8499e654b71d649e6e50c906a29ecbc01bd0e78b3150b8e88ef71d647c78625.js HTTP/1.1 Host: assets3.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cortevaopscenter.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:04 UTC	686	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 48305 Connection: close Date: Mon, 13 Jan 2025 16:28:04 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Dec 2024 15:54:07 GMT ETag: "62b321de989b72bb1ffd2563b4744996" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Wed, 10 Dec 2025 21:54:06 GMT x-amz-version-id: YjbdK8TlPG.lpr0Eb1QS5ZjcT7alJu.4 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2c29bb35ddacc1dc2616fe65bdf5122e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: 8GEbMW-3UCJqbZt1W3l4Oqb2m97AVFa0--OaVCxiCZOT-yn8l-pFyw==
2025-01-13 16:28:04 UTC	15345	IN	Data Raw: 1f 8b 08 00 30 5c 58 67 02 03 ec bd fb 63 db 46 92 20 fc f3 dd 5f 41 c1 8e 04 88 e0 4b b6 33 19 d0 10 c7 f1 e3 e2 dd 38 ce c5 ce ce 37 4b 31 bc 16 d9 94 10 83 00 07 00 6d 29 24 e7 6f ff aa aa 1f 68 bc 48 c9 79 dc ec ed cc 6e 64 b0 df 5d 5d 5d 5d af ae 5e ac a3 59 16 c4 51 eb 8a 67 2f 58 c6 5f c5 c9 92 65 36 77 36 1f 59 d2 ca fc 9f ff f7 9a 27 b7 b6 75 9d 2d 43 cb e9 ce 59 c6 6c 6b ae 0b 5a ce 30 e1 d9 3a 89 5a 2f 9e bd 7f 39 7d f5 f6 87 37 cf de bf 1b 67 93 31 9f ec 16 aa ed 59 18 a7 9c 5d 86 fc 55 c8 d2 6b 6c dc 4a b3 24 88 ae 2c df cf 6e 57 3c 5e b4 f8 f1 b1 ea aa cb 42 9e 64 dd 28 ce 82 19 f7 e0 1f db 6a f3 b6 e5 58 ce b8 3f 19 1d 2e d5 e5 cb 55 76 6b 3b dd eb 60 ce 6d c7 53 7d 1d 19 7d f1 ee ec 3a 08 e7 09 8f a0 5c c8 a3 ab ec fa bc bf 6f 08 0f a0 f5 Data Ascii: 0\XgcF _AK387K1m)$ohHynd]]]]^YQg/X_e6w6Y'u-CYlkZ0:Z/9}7g1Y]UklJ$,nW<^Bd(jX?.Uvk;`mS}}:\o
2025-01-13 16:28:04 UTC	1435	IN	Data Raw: e1 c0 96 41 54 5b 8b 65 2d fc 99 55 6b 24 68 97 ad af 23 47 74 c9 b3 4f 9c 8b ce 58 34 6f 6d 06 66 13 ad 30 06 66 40 b6 73 f7 16 c4 0c 1b ca 87 80 1d 62 82 71 d2 22 a8 b5 b2 18 6b 8b 19 36 d4 ba 22 1d 7b d2 54 51 68 cf a6 2c 23 40 4c e3 08 46 2b 2c a7 39 74 20 b1 25 74 46 ba c2 d9 14 c6 19 2c d7 cb 69 88 a1 56 a7 3f ff dd b3 fe 16 af 61 69 23 81 14 52 2b 87 73 83 79 c1 00 61 f0 00 4e 9e c8 0a fc 66 c6 f9 1c b7 d4 db 78 95 1e b5 b0 f2 35 fb 08 a3 97 19 ad 37 aa 46 eb fb 90 65 78 e5 f2 24 cd 21 dc a2 66 ba 2d 39 e7 65 3c 87 c3 a9 75 0b fc 1c ec ca 74 15 47 29 ee 03 a5 f4 9d ce 63 9e 4e a3 38 13 16 2f dc c7 5c eb 93 d3 d6 3c 8e 4e 32 f1 94 89 6e 31 4b 6e 35 d6 61 45 82 db 34 8b 25 0d 90 ce 62 ad f4 3a 5e 03 31 80 12 b0 9e 1a b8 72 bf 4f e5 9e 9e 06 11 6d 00 Data Ascii: AT[e-Uk$h#GtOX4omf0f@sbq"k6"{TQh,#@LF+,9t %tF,iV?ai#R+syaNfx57Fex$!f-9e<utG)cN8/\<N2n1Kn5aE4%b:^1rOm
2025-01-13 16:28:04 UTC	16384	IN	Data Raw: 44 ed f4 4c 15 42 0d 39 37 72 f7 4c 83 3c 24 e5 81 57 04 bf f2 8e 36 a6 a0 5e 6e e9 cb e7 31 54 dc 3a e3 65 14 eb e2 22 3d 75 f1 8f e5 5a 57 f8 c0 86 76 e5 c4 ee 91 11 92 2e 52 cc ad 75 a8 15 c5 7a 3f d9 b6 8d 3c d5 64 7b 31 df 8e 8f 1e 5c 3c fc e2 f8 e4 e2 f4 a2 7d d1 b9 e8 f9 17 a3 8b 9f a6 ff 67 73 b1 dd fd 63 b2 25 8b d5 33 34 ea bc f8 d3 ab 57 17 eb 57 7f 26 6b d1 ab 17 cf f1 c7 8b 57 f4 e3 d5 cb 57 13 a7 6d 5f 74 7f 87 56 9d 53 67 6b db 17 37 67 67 0e 8c 1a 3f fa db 8b 9b fe 9f 9d 53 f8 ee cf e1 3f e6 38 23 23 bd 0d bf ec 31 7c 0e 3a f0 e7 2b f8 ef 12 fe 9b c1 7f 5c 1b c0 60 88 37 67 03 18 c6 cd d9 23 48 7c 72 89 43 ba 79 32 87 ef 3f f1 fb 0c 6f 6b 5f 5c e4 9d fd d9 e8 8c da 5a dc a7 2d f8 df e9 9d 67 48 00 71 9c bf 14 56 f2 1e c3 fe 9c 5a 79 9d ce Data Ascii: DLB97rL<$W6^n1T:e"=uZWv.Ruz?<d{1\<}gsc%34WW&kWWm_tVSgk7gg?S?8##1\|:+\`7g#H\|rCy2?ok_\Z-gHqVZy
2025-01-13 16:28:04 UTC	15141	IN	Data Raw: 65 00 94 90 cf d6 e5 6c 0d 03 14 4d 3f 47 a1 ed 63 2d 0a bc 8d d7 49 30 7e b0 82 11 d0 20 36 aa 7b c0 e3 c5 46 fe cb d9 73 3f 2a ae ae aa b4 8e fd ee 60 30 00 6e 20 b2 88 89 b8 b3 5e 9e 5a 59 8f ad bc 17 56 de 23 33 ef b9 5d ef 89 95 f7 62 3b cc 57 76 bd af ac bc 17 db 61 be b1 eb 7d 6d e5 bd 68 c3 bc d8 44 2d 3b 0e 72 6c 5e 8f 8c 48 44 f4 0c c7 10 8a a2 64 e4 76 68 85 62 eb e8 28 8c 02 1f b1 d7 49 e9 31 f1 34 0d ba c3 2f eb 70 73 5c b3 1e 04 79 fd 68 4b b0 06 e8 dc f7 40 e8 55 20 3d 13 54 18 5a 0f d7 86 95 74 4a ab a8 51 4a 2d 3e 95 be c1 b0 af ac 90 3b 2b 7e 2a 3e b4 8d 56 e4 2b c0 63 67 27 52 54 8d f3 67 d8 ee 0f e5 ca 1f 61 bb 73 94 2f 7f 84 5b 7a 2a 80 18 29 a1 ec 3b be 07 86 25 dc 46 95 f1 76 51 21 14 3d 07 a4 bd 29 07 db 1a b5 7c 85 65 d5 4f c9 4f Data Ascii: elM?Gc-I0~ 6{Fs?`0n ^ZYV#3]b;Wva}mhD-;rl^HDdvhb(I14/ps\yhK@U =TZtJQJ->;+~>V+cg'RTgas/[z*);%FvQ!=)\|eOO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	52.222.225.5	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:03 UTC	646	OUT	GET /assets/cdn/falcon_activations-22e619801618c7f6d9e0ea55cff5834b59c838f266b5f99872e015a117494683.css HTTP/1.1 Host: assets2.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cortevaopscenter.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:04 UTC	678	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 8638 Connection: close Date: Mon, 13 Jan 2025 16:28:04 GMT x-amz-replication-status: COMPLETED Last-Modified: Mon, 12 Dec 2022 04:52:12 GMT ETag: "50a2541263abb3b92ac0ce82c386e6f7" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Tue, 12 Dec 2023 10:52:11 GMT x-amz-version-id: s85mL0Ta7XIwARM7zbr3aXUVgeVOWLB5 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 3431ec594cac61983aae2d9ffaf23980.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: mng8cUS1DgnAm4C3tstSSSs9PzP6ci_jbFsGRi_-4jjsZMmS768lMA==
2025-01-13 16:28:04 UTC	8638	IN	Data Raw: 1f 8b 08 00 f4 a4 96 63 02 03 ed 3d 69 af e3 46 72 df f3 2b 98 37 18 ec bc 19 51 cb 43 a4 2e d8 80 3d f6 64 03 24 1b 20 d8 0f 01 6c 67 41 91 ad f7 98 a1 44 2d 49 79 66 2c e8 bf a7 4f b2 8f 6a 92 3a 9e 8f 20 ab 1d 3f a9 8f ea ea 62 55 75 75 75 75 71 9b a3 22 ab 51 73 3a 24 59 96 ef 9f 56 de 7a 97 54 4f f9 1e 7f d9 94 55 86 aa 95 77 2e d0 13 da 67 a7 2c af 0f 45 f2 65 b5 29 ca f4 e3 fa 53 9e 35 cf 2b df f3 5e af f5 be ee a6 6c 9a 72 b7 0a fc e9 62 1e 1d 3e af b7 e5 be 71 eb fc 17 84 8b f0 cf 22 df 23 f7 19 e5 4f cf cd 6a 16 4e 69 93 b4 2c ca 6a f5 6a 99 24 7e 12 b7 43 f3 2f 02 20 ee ec d4 65 91 67 ce 2b 14 91 0f 47 cd a9 77 49 51 9c ba 61 fc 78 3a f3 e2 40 02 1c 6f e7 e9 62 7e 2e 92 0d 2a 26 f9 fe 70 6c 26 9b 23 06 ba 9f d4 a8 40 69 33 69 d0 e7 26 a9 50 22 Data Ascii: c=iFr+7QC.=d$ lgAD-Iyf,Oj: ?bUuuuuq"Qs:$YVzTOUw.g,Ee)S5+^lrb>q"#OjNi,jj$~C/ eg+GwIQax:@ob~.*&pl&#@i3i&P"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	52.217.202.64	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:04 UTC	970	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153001919509/logo/EBBOHloK8lxStnQVALHsXKt8TjfNyqNAkw.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20250110%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250110T125716Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=3bb13d76a0bbddc0ce45edfff8e5f245d64503ead7226c99b91f484c70c20438 HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cortevaopscenter.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:05 UTC	503	IN	HTTP/1.1 200 OK x-amz-id-2: o3waCSpd/Nh7TguSte/UgSuu7a+KWrYd6FN/e0/zR2ns0oH1lxjSaTwSuzS1oAqhuXCFofjSTyE= x-amz-request-id: 31E94C9VHYKT744B Date: Mon, 13 Jan 2025 16:28:05 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 07 Dec 2023 15:13:06 GMT ETag: "7cea8340de5bb7a4692cc8bf795ea710" x-amz-server-side-encryption: AES256 x-amz-version-id: Cydo45cZhCMYU6iKE08OU6AqUEqDsJ99 Accept-Ranges: bytes Content-Type: image/png Content-Length: 1888 Server: AmazonS3 Connection: close
2025-01-13 16:28:05 UTC	1888	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 59 00 00 00 32 08 03 00 00 00 00 e6 87 04 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 a3 50 4c 54 45 00 00 00 ff ca 05 ff cb 05 e7 5e 21 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff cb 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff cb 05 ff ca 05 ff ca 05 ff cb 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff cb 05 ff ca 05 ff ca 05 ff ca 05 ff Data Ascii: PNGIHDRY2gAMAa cHRMz&u0`:pQ<PLTE^!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	52.222.225.5	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:04 UTC	432	OUT	GET /assets/cdn/defaults-be9795ecc546fd0e9fbe525c6f1d020d0bd6e8edaaf3c12fe4f1a49a1f761c09.js HTTP/1.1 Host: assets4.freshdesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:05 UTC	686	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 36298 Connection: close Date: Mon, 13 Jan 2025 16:28:06 GMT x-amz-replication-status: COMPLETED Last-Modified: Wed, 12 Jul 2023 10:12:03 GMT ETag: "66b03ba3bb716fc88b1f55ba0e79c3b6" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Thu, 11 Jul 2024 16:12:02 GMT x-amz-version-id: FX0J3GnHPC2RzwB9koXY8pR7p66GZ.1U Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 71c4b07776e0b6812900664940c9d7a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: d59kTZLPIIxR8lY984-ljSAnROKSgmQi4H0m43y1UjAt8doxGE10AQ==
2025-01-13 16:28:05 UTC	16384	IN	Data Raw: 1f 8b 08 00 6e 59 ae 64 02 03 e4 bd 6b 7b db 46 92 28 fc f9 9c 5f 41 22 5e 19 10 41 8a b4 93 d9 19 d0 10 57 b6 e5 89 df 89 2f 6b 2b 33 c9 52 8c 1f 98 6c 49 18 53 00 17 00 6d 6b 48 ee 6f 7f ab aa ef 40 83 92 92 cc 9e 3d cf c9 33 63 11 8d 46 5f aa ab ab ab aa eb 72 b1 ce e6 55 9a 67 9d 07 27 3e 0b 36 e9 85 df 65 41 c1 aa 75 91 4d 67 63 78 64 83 2a 3f 29 8a e4 46 94 76 54 81 1f 8c 2f f2 c2 ff 9c 14 9d 2a 66 83 25 cb 2e ab ab 30 8d 33 f6 a5 c3 2b 54 c1 b8 ea f7 c7 41 3a ad 66 31 83 7f c6 a2 8d 74 77 71 5b bf 7e f7 cd c7 bf b3 79 35 48 cb 17 a2 2e 54 dc 6e bd 69 4e e5 9d d7 f9 82 fd 90 96 d5 cc eb c6 2c 38 38 f8 a7 0f f4 0b 0e 54 94 ab b1 bd af 8a 34 bb 84 37 13 9f 41 db 25 3c ae fc 20 64 13 f8 bd 5a a6 95 7f 74 5e f6 8e 82 68 3a c3 ff 1b ad 7d 6f b4 86 03 f9 Data Ascii: nYdk{F(_A"^AW/k+3RlISmkHo@=3cF_rUg'>6eAuMgcxd?)FvT/f%.03+TA:f1twq[~y5H.TniN,88T47A%< dZt^h:}o
2025-01-13 16:28:05 UTC	428	IN	Data Raw: 9a 65 ee 0c 5c d3 2c eb c2 91 27 74 bd 26 15 56 bb 4e 50 60 68 ae 18 90 e4 65 1c ff f3 70 01 a4 79 0e db 71 31 1b 2f 60 3b ce 4d 6f 3f 4b da 24 a9 da 9f 5b ce c2 98 7a 72 c9 a7 68 be e0 69 34 54 ba 81 5f ce 17 3d d4 73 6f aa 58 05 23 dc 37 02 2d d7 e2 1c 05 e1 9f 07 8a 5d c2 14 19 77 55 89 27 5c 25 9e 48 95 b8 ee 76 4d ef a4 0a 3c 11 8a f1 2b 28 7d 64 94 92 62 3c 5c 35 70 70 a0 51 c9 5f 87 18 ca 59 ac 1d 4e 27 bc 88 57 52 96 36 66 26 fb be 86 09 5f 1c 5f 8f af eb b3 5d 4d af 67 e6 84 25 6d 93 22 33 dd c9 89 df cb 20 cc 9b 89 55 ee 42 fd 41 04 8d cd f8 b1 99 e1 ad 4a 71 a0 74 3e 16 b5 80 e5 21 2c a0 fb 3c b0 af 3c 9d fb 56 a1 62 59 4f cb 67 1b ec e0 c1 cf 51 b4 b4 59 0b c1 90 25 9a 21 4b 0c e4 54 ac 81 22 0c 12 48 25 07 92 b8 af bd 1f 98 b2 81 bc d8 75 cf Data Ascii: e\,'t&VNP`hepyq1/`;Mo?K$[zrhi4T_=soX#7-]wU'\%HvM<+(}db<\5ppQ_YN'WR6f&__]Mg%m"3 UBAJqt>!,<<VbYOgQY%!KT"H%u
2025-01-13 16:28:05 UTC	16384	IN	Data Raw: 08 3d 8c 42 02 a7 53 3a 28 e7 49 e6 1f f9 78 9d f0 4d 34 f8 af e3 9e 1f 9c 97 fd 59 6f 7b 7e b8 3d 9f 0e 0e 27 e7 b3 80 5f 23 84 74 09 62 99 29 f2 e9 93 a5 93 b0 3c 0f 76 0e 21 a9 49 8f 38 65 a9 24 ad ce 8f 0b 22 2e 59 6d e1 80 e8 a8 86 43 43 ed 92 d9 0b 6a 64 c8 cd 8f 47 93 44 da f5 96 41 54 ee 76 ee 84 82 00 e5 26 37 ce 3b 88 ef a8 8c 27 95 a2 f6 74 a5 7c c8 75 ed 3c e7 0f d0 55 08 83 dc d5 e3 a2 db 89 5e 79 2a 05 ca b8 53 70 6b ff 96 c5 94 c9 fd ba 3a b9 5f 45 0e e1 57 11 06 47 8b 1c 8e 34 24 94 5e 51 60 61 fa 85 2e ca 3a aa 30 a0 1a e5 cb e2 01 a7 42 4c 4e 23 f8 ae 8d e1 40 6f 6c df 6e 65 50 d3 8a c2 94 71 b4 a5 9f 00 28 4a 3f 0d 47 35 e5 29 c3 1d 47 41 4b 31 ec 2e ef 03 d9 a8 41 45 9a 59 bf 04 3a 2f f2 05 26 c0 b9 75 e3 64 bb ed fa e4 45 8d 39 e8 c8 Data Ascii: =BS:(IxM4Yo{~='_#tb)<v!I8e$".YmCCjdGDATv&7;'t\|u<U^y*Spk:_EWG4$^Q`a.:0BLN#@olnePq(J?G5)GAK1.AEY:/&udE9
2025-01-13 16:28:05 UTC	3102	IN	Data Raw: a8 40 b3 9d 34 9c e6 92 bd 03 46 b7 3a 38 69 66 1c b7 eb 42 3d ef 29 f8 cc 1f 2e 7f 91 8a 70 85 9c 2b bb 3c c9 0a fd 29 99 00 7a ae 85 23 d8 28 cf 6b 8e a8 69 66 90 25 56 26 79 68 49 49 f4 64 51 3e 7d 02 ee 31 d5 c5 d3 68 50 18 bc 87 ac 3a 88 9e 3c f4 2b 58 9f 79 1f 9c f1 11 a6 a3 f0 26 2b ba 84 99 d7 49 1d ce ce 8e 57 2e 8e 66 67 07 e7 0e 19 78 b5 24 4c 1d dc fd fd c3 f7 cd 43 91 1a 56 cd a3 e6 8f e4 38 49 c0 1e d6 58 91 b5 92 1a e6 e8 af a0 5e b7 c4 7a d0 b9 c8 df 77 5e 69 3d 18 5b 67 86 05 ca 92 ce 48 4f 20 52 e5 80 75 4b 49 c9 84 47 a9 07 5e bb ea b9 e3 d4 5b f4 e4 66 f1 14 9c 2f 84 f5 49 84 53 87 22 88 46 8e 86 40 80 4a 5e 96 6c 31 27 e1 c5 cb 9a b1 3d 12 31 e6 1d f2 30 e3 96 8b a6 2a d6 0c f0 60 20 f4 40 f4 77 50 bd 59 70 0e 68 7f 5e f2 bb b5 99 2b Data Ascii: @4F:8ifB=).p+<)z#(kif%V&yhIIdQ>}1hP:<+Xy&+IW.fgx$LCV8IX^zw^i=[gHO RuKIG^[f/IS"F@J^l1'=10*` @wPYph^+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49749	52.222.225.5	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:04 UTC	433	OUT	GET /assets/cdn/workspace-d8499e654b71d649e6e50c906a29ecbc01bd0e78b3150b8e88ef71d647c78625.js HTTP/1.1 Host: assets3.freshdesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:05 UTC	686	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 48305 Connection: close Date: Mon, 13 Jan 2025 16:28:06 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Dec 2024 15:54:07 GMT ETag: "62b321de989b72bb1ffd2563b4744996" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Wed, 10 Dec 2025 21:54:06 GMT x-amz-version-id: YjbdK8TlPG.lpr0Eb1QS5ZjcT7alJu.4 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 64f5a3ab7bfb476c633b87746aced0ee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: DRVzuijLQBp2aRF4sYMH3IdKfKEJNKSzSTReuHfexQQ6RV6WHA9v9Q==
2025-01-13 16:28:05 UTC	15698	IN	Data Raw: 1f 8b 08 00 30 5c 58 67 02 03 ec bd fb 63 db 46 92 20 fc f3 dd 5f 41 c1 8e 04 88 e0 4b b6 33 19 d0 10 c7 f1 e3 e2 dd 38 ce c5 ce ce 37 4b 31 bc 16 d9 94 10 83 00 07 00 6d 29 24 e7 6f ff aa aa 1f 68 bc 48 c9 79 dc ec ed cc 6e 64 b0 df 5d 5d 5d 5d af ae 5e ac a3 59 16 c4 51 eb 8a 67 2f 58 c6 5f c5 c9 92 65 36 77 36 1f 59 d2 ca fc 9f ff f7 9a 27 b7 b6 75 9d 2d 43 cb e9 ce 59 c6 6c 6b ae 0b 5a ce 30 e1 d9 3a 89 5a 2f 9e bd 7f 39 7d f5 f6 87 37 cf de bf 1b 67 93 31 9f ec 16 aa ed 59 18 a7 9c 5d 86 fc 55 c8 d2 6b 6c dc 4a b3 24 88 ae 2c df cf 6e 57 3c 5e b4 f8 f1 b1 ea aa cb 42 9e 64 dd 28 ce 82 19 f7 e0 1f db 6a f3 b6 e5 58 ce b8 3f 19 1d 2e d5 e5 cb 55 76 6b 3b dd eb 60 ce 6d c7 53 7d 1d 19 7d f1 ee ec 3a 08 e7 09 8f a0 5c c8 a3 ab ec fa bc bf 6f 08 0f a0 f5 Data Ascii: 0\XgcF _AK387K1m)$ohHynd]]]]^YQg/X_e6w6Y'u-CYlkZ0:Z/9}7g1Y]UklJ$,nW<^Bd(jX?.Uvk;`mS}}:\o
2025-01-13 16:28:05 UTC	1082	IN	Data Raw: 5a e7 90 41 f4 5a 67 76 9f f6 d8 f9 89 04 6d 9c 4c 57 d7 84 ae a5 ae 5f 12 58 a1 a3 ef 31 bb 25 f8 6f 64 c3 c4 14 03 b4 4a 78 d6 6b f1 b3 45 3f 51 36 23 8b 04 be 72 d7 30 7d cc 52 64 7e ba 20 62 fe 03 fd 68 e5 60 68 61 3a 3e fc 84 ef bb 4c 53 f2 58 f4 2c bc 13 d5 c2 94 16 ea 04 b8 70 93 3e 86 14 28 8c 9f 9f ae 41 ec a1 c2 96 7b cd 6f a6 b3 38 84 c9 69 94 a9 5f 0c 7e d3 a2 72 62 97 77 c5 9d ea e9 7c bd 0a d1 65 02 97 84 70 1c 53 5b 2c 44 ab cd 2d 60 4b 90 12 a1 56 b0 a0 f7 54 72 58 fc c0 af d6 21 9c 78 2f 6f e8 b9 1d 11 e2 1e 9b 5d 08 d3 88 f5 9c 45 88 e8 68 08 47 54 d2 34 5a e4 9b e4 79 7a f6 e4 49 69 e8 39 f9 82 3c 83 54 c2 d1 c2 67 b0 0c e1 94 0e 92 a9 9c 36 b9 23 21 3d c1 1e 09 79 73 02 7f d6 92 55 e4 d9 63 b9 0b 80 de 65 1c 7f 28 6d 97 bf 21 96 bf 92 Data Ascii: ZAZgvmLW_X1%odJxkE?Q6#r0}Rd~ bh`ha:>LSX,p>(A{o8i_~rbw\|epS[,D-`KVTrX!x/o]EhGT4ZyzIi9<Tg6#!=ysUce(m!
2025-01-13 16:28:05 UTC	16384	IN	Data Raw: 44 ed f4 4c 15 42 0d 39 37 72 f7 4c 83 3c 24 e5 81 57 04 bf f2 8e 36 a6 a0 5e 6e e9 cb e7 31 54 dc 3a e3 65 14 eb e2 22 3d 75 f1 8f e5 5a 57 f8 c0 86 76 e5 c4 ee 91 11 92 2e 52 cc ad 75 a8 15 c5 7a 3f d9 b6 8d 3c d5 64 7b 31 df 8e 8f 1e 5c 3c fc e2 f8 e4 e2 f4 a2 7d d1 b9 e8 f9 17 a3 8b 9f a6 ff 67 73 b1 dd fd 63 b2 25 8b d5 33 34 ea bc f8 d3 ab 57 17 eb 57 7f 26 6b d1 ab 17 cf f1 c7 8b 57 f4 e3 d5 cb 57 13 a7 6d 5f 74 7f 87 56 9d 53 67 6b db 17 37 67 67 0e 8c 1a 3f fa db 8b 9b fe 9f 9d 53 f8 ee cf e1 3f e6 38 23 23 bd 0d bf ec 31 7c 0e 3a f0 e7 2b f8 ef 12 fe 9b c1 7f 5c 1b c0 60 88 37 67 03 18 c6 cd d9 23 48 7c 72 89 43 ba 79 32 87 ef 3f f1 fb 0c 6f 6b 5f 5c e4 9d fd d9 e8 8c da 5a dc a7 2d f8 df e9 9d 67 48 00 71 9c bf 14 56 f2 1e c3 fe 9c 5a 79 9d ce Data Ascii: DLB97rL<$W6^n1T:e"=uZWv.Ruz?<d{1\<}gsc%34WW&kWWm_tVSgk7gg?S?8##1\|:+\`7g#H\|rCy2?ok_\Z-gHqVZy
2025-01-13 16:28:05 UTC	8555	IN	Data Raw: 65 00 94 90 cf d6 e5 6c 0d 03 14 4d 3f 47 a1 ed 63 2d 0a bc 8d d7 49 30 7e b0 82 11 d0 20 36 aa 7b c0 e3 c5 46 fe cb d9 73 3f 2a ae ae aa b4 8e fd ee 60 30 00 6e 20 b2 88 89 b8 b3 5e 9e 5a 59 8f ad bc 17 56 de 23 33 ef b9 5d ef 89 95 f7 62 3b cc 57 76 bd af ac bc 17 db 61 be b1 eb 7d 6d e5 bd 68 c3 bc d8 44 2d 3b 0e 72 6c 5e 8f 8c 48 44 f4 0c c7 10 8a a2 64 e4 76 68 85 62 eb e8 28 8c 02 1f b1 d7 49 e9 31 f1 34 0d ba c3 2f eb 70 73 5c b3 1e 04 79 fd 68 4b b0 06 e8 dc f7 40 e8 55 20 3d 13 54 18 5a 0f d7 86 95 74 4a ab a8 51 4a 2d 3e 95 be c1 b0 af ac 90 3b 2b 7e 2a 3e b4 8d 56 e4 2b c0 63 67 27 52 54 8d f3 67 d8 ee 0f e5 ca 1f 61 bb 73 94 2f 7f 84 5b 7a 2a 80 18 29 a1 ec 3b be 07 86 25 dc 46 95 f1 76 51 21 14 3d 07 a4 bd 29 07 db 1a b5 7c 85 65 d5 4f c9 4f Data Ascii: elM?Gc-I0~ 6{Fs?`0n ^ZYV#3]b;Wva}mhD-;rl^HDdvhb(I14/ps\yhK@U =TZtJQJ->;+~>V+cg'RTgas/[z*);%FvQ!=)\|eOO
2025-01-13 16:28:05 UTC	394	IN	Data Raw: ba 89 05 19 b0 a7 71 67 f4 eb 17 ac ec 25 de df 13 38 36 de 2a 94 fd f2 f3 8f 1e 8c d6 5b 16 59 4e 93 8d ae bb 9e ff f4 ec d5 cb fd 10 f6 cd a0 bb 42 c8 dd a4 fb 9e 20 2b 7c 41 ed 2e 40 ee 4a c8 88 a9 ee 14 b5 0b 46 af 80 ca ae b2 eb 55 49 7d 83 6e 10 2c 41 63 26 5d ef 4b 5a 47 48 5a 12 22 35 cf bd 63 c2 ca 2d 88 46 2f 56 55 5d 2c b2 df 14 41 31 c9 a1 fd ff 62 4f 34 3c ee 4e 35 10 1a 2a c3 e8 12 0c a3 a9 32 4d 6a 1e ad 77 fa e6 3b 20 d4 69 51 ce 90 64 81 49 ac ca d4 83 63 f5 32 85 ad 96 50 30 4b e7 e8 2c f9 76 8f 4e 3c 7a 38 fc 6a d0 9d 0a f0 30 f4 2e 4a c5 f0 55 2d af d4 27 ff e1 36 e5 2f 20 68 6e ba cb 4d 0b 5c a9 a6 9b 24 44 64 fb 06 44 f5 0a 7b 0d 73 9b 5e 97 e8 5a 90 7d 04 2e a1 43 b7 1e 70 a7 bd 66 ec 68 f0 70 28 66 88 68 16 4f 00 15 f6 48 81 ed 12 Data Ascii: qg%86[YNB +\|A.@JFUI}n,Ac&]KZGHZ"5c-F/VU],A1bO4<N52Mjw; iQdIc2P0K,vN<z8j0.JU-'6/ hnM\$DdD{s^Z}.Cpfhp(fhOH
2025-01-13 16:28:05 UTC	6192	IN	Data Raw: f5 c3 a3 ee c3 c1 37 14 45 58 57 f8 9b 2e f6 e8 91 f7 f5 60 00 ff ff ba fb f8 ab 46 b9 67 2b dc 23 41 da d7 c5 9f 00 d8 6f 1e 79 4f be fe aa 7b 74 f4 35 f6 08 f5 53 70 74 c9 7e 4b db 5a 2a 3e 50 57 52 39 85 e7 92 17 e2 8c f7 1c 45 79 53 29 65 f2 01 33 fd 34 45 67 9c df 65 e9 7c 66 26 9f 25 97 2d 10 72 f2 7f cc f2 77 36 88 f4 d9 7c 0e 27 2f 02 25 73 40 dc 06 a1 ea 19 63 ff 4c 1c fd 84 8a 5b 4c 89 55 f2 39 a3 de 2e 29 e7 83 1c 26 20 f4 67 72 8b 75 1d f1 cd 2b 99 ce 1a fe ff 67 f1 82 d2 f7 e1 88 9d 1d 1c 64 fa ad 9f 78 46 84 30 9f 27 f3 f9 25 29 46 51 f3 01 72 17 71 b8 5b 58 e1 15 9c 9f 40 e6 82 2e d5 b7 9f 34 2e 52 a9 11 f0 2e 05 e9 b0 c5 4d 10 da 84 17 36 a1 4f 61 cc f1 b9 38 18 44 b2 04 42 b9 2a 13 dd 11 5b c6 a5 42 0a 33 72 14 16 66 d4 68 e4 be 26 ba 68 Data Ascii: 7EXW.`Fg+#AoyO{t5Spt~KZ>PWR9EyS)e34Ege\|f&%-rw6\|'/%s@cL[LU9.)& gru+gdxF0'%)FQrq[X@.4.R.M6Oa8DB[B3rfh&h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49740	52.72.100.244	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:04 UTC	981	OUT	GET /assets/strftime-min.js?1736773238 HTTP/1.1 Host: cortevaopscenter.freshdesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _helpkit_session=bktjVjRNb0x5T3NRZE1OQVV6WHNnVURlbUlOem1TUnYzZHA5bnZjcTZ0TVU5cGw3dUtoeW5HaGpsUXVyTTZBTVVFUVdxcnVqcU5Zb09EUHNrenArVm05TWNYVUZsV1BtaVNCRG1pNHRpVTY1MnkvMUlZS1pERUtGSlRDK0FGT1VzY1VHWENMdUVMeVc5RTZQbmlTQ0g1YzFPQ0tNWkc5VGsyKzFGSEdVTjFrOXQ4N1M4eVhwMUtvREc3TU1tT1ZmLS0vM3JEM2daRWVDc1dvb0MzeEEvdTdnPT0%3D--e289c23d90858a54b8aa85207c94996e63e4a019
2025-01-13 16:28:05 UTC	6192	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 16:28:05 GMT Content-Type: application/javascript Content-Length: 3975 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: da8fe76d-55ba-49b1-ac89-4315bd196a5c Etag: "67d022337404306f740a6dcfd7497398bf4b1723b9ec29a6d27e5eafaea41ad1" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] Set-Cookie: _helpkit_session=Rm5pL054WTRhSEhURjc1U2JielhzazV4WW1JWnBZNTF2MXIyOWVGSVlBeEFmYXpEWlFGUys2M1hVdG5FRVF4UmwzSVdndDBaQThWbU1wVmN0NnVjNVE4V0gvV3BabzlOK09ST0tCUkMyaSs4cEN5SjF0aElnaHdhNW01WW01SkFKT2ljalFHTFN0NzhmcHNPM0dZMGVZUUJnYnpCeE5YZVZTRTNXSUtVTEJzdHkycmNxSWE2aHBsazRpNW1CRVVLLS1ZdkJmbWZ4OHJ5L1RCS3lhZjQ2YWJBPT0%3D--6e6d70643abefae5d04538faadd91fb30328c5f1; path=/; HttpOnly; secure X-Envoy-Upstream-Service-Time: 31 X-Trace-Id: 00-afcf1af5eb25ea5a0034f7a353c7e120-20d2516c4e70fbf8-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} X-Fw-Ratelimiting-Managed: false Server: fwe
2025-01-13 16:28:05 UTC	3975	IN	Data Raw: 44 61 74 65 2e 65 78 74 3d 7b 7d 2c 44 61 74 65 2e 65 78 74 2e 75 74 69 6c 3d 7b 7d 2c 44 61 74 65 2e 65 78 74 2e 75 74 69 6c 2e 78 50 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 6e 3d 31 30 29 3b 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 3c 6e 26 26 6e 3e 31 3b 6e 2f 3d 31 30 29 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 2b 65 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 63 61 6c 65 3d 22 65 6e 2d 47 42 22 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 74 6d 6c 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 Data Ascii: Date.ext={},Date.ext.util={},Date.ext.util.xPad=function(e,t,n){for("undefined"==typeof n&&(n=10);parseInt(e,10)<n&&n>1;n/=10)e=t.toString()+e;return e.toString()},Date.prototype.locale="en-GB",document.getElementsByTagName("html")&&document.getElementsBy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	104.17.24.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:05 UTC	593	OUT	GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cortevaopscenter.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:05 UTC	957	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 16:28:05 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec2-ad3" Last-Modified: Mon, 04 May 2020 16:11:46 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 411445 Expires: Sat, 03 Jan 2026 16:28:05 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uz6AYjt1nvAFEdvyfId9WmMKFaP4J78IDhrACJ3Oqlk%2FwcNoUiMuJ5TAyGG1t7oHZeuktXb%2Bud9IvCyr5Eqm4GuXbQgqIG59JRA9vRI2Dpi3LhYQ8wfCC33uMqD%2B75EvmEDDU8v1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9016c1e73cc232dc-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 16:28:05 UTC	412	IN	Data Raw: 61 64 33 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4d 6f 75 73 65 77 68 65 65 6c 20 33 2e 31 2e 31 33 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 Data Ascii: ad3/! jQuery Mousewheel 3.1.13 * * Copyright 2015 jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof
2025-01-13 16:28:05 UTC	1369	IN	Data Raw: 3d 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 22 64 65 74 61 69 6c 22 69 6e 20 67 26 26 28 6d 3d 2d 31 2a 67 2e 64 65 74 61 69 6c 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 22 69 6e 20 67 26 26 28 6d 3d 67 2e 77 68 65 65 6c 44 65 6c 74 61 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 59 22 69 6e 20 67 26 26 28 6d 3d 67 2e 77 68 65 65 6c 44 65 6c 74 61 59 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 58 22 69 6e 20 67 26 26 28 6c 3d 2d 31 2a 67 2e 77 68 65 65 6c 44 65 6c 74 61 58 29 2c 22 61 78 69 73 22 69 6e 20 67 26 26 67 2e 61 78 69 73 3d 3d 3d 67 2e 48 4f 52 49 5a 4f 4e 54 41 4c 5f 41 58 49 53 26 26 28 6c 3d 2d 31 2a 6d 2c 6d 3d 30 29 2c 6a 3d 30 3d 3d 3d 6d 3f 6c 3a 6d 2c 22 64 65 6c 74 61 59 22 69 6e 20 67 26 26 28 6d 3d 2d 31 2a 67 2e 64 65 6c 74 61 59 2c 6a 3d 6d 29 2c Data Ascii: ="mousewheel","detail"in g&&(m=-1g.detail),"wheelDelta"in g&&(m=g.wheelDelta),"wheelDeltaY"in g&&(m=g.wheelDeltaY),"wheelDeltaX"in g&&(l=-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.deltaY,j=m),
2025-01-13 16:28:05 UTC	997	IN	Data Raw: 6a 5d 5d 3d 61 2e 65 76 65 6e 74 2e 6d 6f 75 73 65 48 6f 6f 6b 73 3b 76 61 72 20 6b 3d 61 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 6d 6f 75 73 65 77 68 65 65 6c 3d 7b 76 65 72 73 69 6f 6e 3a 22 33 2e 31 2e 31 32 22 2c 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 66 6f 72 28 76 61 72 20 63 3d 68 2e 6c 65 6e 67 74 68 3b 63 3b 29 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 68 5b 2d 2d 63 5d 2c 62 2c 21 31 29 3b 65 6c 73 65 20 74 68 69 73 2e 6f 6e 6d 6f 75 73 65 77 68 65 65 6c 3d 62 3b 61 2e 64 61 74 61 28 74 68 69 73 2c 22 6d 6f 75 73 65 77 68 65 65 6c 2d 6c 69 6e 65 2d 68 65 69 67 68 74 22 2c 6b 2e 67 65 74 4c 69 6e 65 48 65 69 67 68 74 28 74 68 69 73 Data Ascii: j]]=a.event.mouseHooks;var k=a.event.special.mousewheel={version:"3.1.12",setup:function(){if(this.addEventListener)for(var c=h.length;c;)this.addEventListener(h[--c],b,!1);else this.onmousewheel=b;a.data(this,"mousewheel-line-height",k.getLineHeight(this
2025-01-13 16:28:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	16.15.178.206	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:05 UTC	720	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153001919509/logo/EBBOHloK8lxStnQVALHsXKt8TjfNyqNAkw.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAS6FNSMY2XLZULJPI%2F20250110%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250110T125716Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=3bb13d76a0bbddc0ce45edfff8e5f245d64503ead7226c99b91f484c70c20438 HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:05 UTC	535	IN	HTTP/1.1 200 OK x-amz-id-2: r8R0EoCXG56MN60QXM4XorBczY/0HCh8WQcZnpgsgDUG+jTbxaxTI/wf5pwJenp19mzTFdPRUucYWbMwqc/Jb2MItwGxWarzIBZBfer5pl8= x-amz-request-id: 086EWE7JYZN7AMRV Date: Mon, 13 Jan 2025 16:28:06 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 07 Dec 2023 15:13:06 GMT ETag: "7cea8340de5bb7a4692cc8bf795ea710" x-amz-server-side-encryption: AES256 x-amz-version-id: Cydo45cZhCMYU6iKE08OU6AqUEqDsJ99 Accept-Ranges: bytes Content-Type: image/png Content-Length: 1888 Server: AmazonS3 Connection: close
2025-01-13 16:28:05 UTC	1888	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 59 00 00 00 32 08 03 00 00 00 00 e6 87 04 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 a3 50 4c 54 45 00 00 00 ff ca 05 ff cb 05 e7 5e 21 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff cb 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff cb 05 ff ca 05 ff ca 05 ff cb 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff cb 05 ff ca 05 ff ca 05 ff ca 05 ff Data Ascii: PNGIHDRY2gAMAa cHRMz&u0`:pQ<PLTE^!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49750	52.222.225.5	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:05 UTC	434	OUT	GET /assets/cdn/frameworks-3fd8606ae3fd565bca52791d9712b5326fc5645337a279f6e7cb053b57aec9ed.js HTTP/1.1 Host: assets6.freshdesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:06 UTC	687	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 537184 Connection: close Date: Mon, 13 Jan 2025 16:28:07 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 10 Dec 2024 15:54:04 GMT ETag: "3bf257ea550ce745c37a8e78eabf0254" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31557600 Content-Encoding: gzip Expires: Wed, 10 Dec 2025 21:54:02 GMT x-amz-version-id: S.s00bbyxOf16C13s.wyPjKg5XSXqAOD Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 82386e4e4f56a0c01411d1aea6f3fd46.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: dZkD9pDK2Cv_OTCuPJ3JI1gACHKCT4yZJX40sxOj3CTol3dFf-qc3g==
2025-01-13 16:28:06 UTC	15697	IN	Data Raw: 1f 8b 08 00 30 5c 58 67 02 03 ec bd 79 9f db 46 92 26 fc ff 7e 8a 22 ec a1 00 31 c9 2a 4a b6 67 1a 14 8a ab b3 a5 6e 5d 2d c9 e3 ee 61 d1 b5 28 32 ab 08 89 04 68 00 94 54 2e b2 3f fb 1b 4f e4 81 04 08 ca 72 cf cc ee ce be e3 9f 55 04 12 79 67 64 64 44 64 1c 97 9b 74 56 26 59 7a f4 28 2e e3 27 f1 ac cc f2 6b 5f 06 37 e5 22 29 06 1f e4 75 24 b7 5b 2f 99 7b 82 13 0a fa 2c a3 9b 9d 7a 9b 6d f2 5c a6 25 4a 46 93 a9 4e 8b 67 0b 39 7f 96 ce e5 67 9b af 90 65 74 a9 db f1 a5 28 75 ed 5c d9 44 4e a3 52 e7 bb aa e5 0b 6e 72 59 6e f2 f4 e8 60 bd ba fd 57 17 ef 23 a9 52 ce 37 eb 79 5c 4a f4 c8 af b5 11 f0 f7 dd 5e ae 5a 7b 7b 83 92 bb 9d f9 7e 34 cb a5 2e f3 16 75 22 ff 65 96 fb 1f e3 fc a8 3c 4a d2 23 19 c8 c1 22 2e 5e 7d 4a 5f e7 d9 5a e6 e5 b5 5f 06 dd ae 2d 80 59 Data Ascii: 0\XgyF&~"1*Jgn]-a(2hT.?OrUygddDdtV&Yz(.'k_7")u$[/{,zm\%JFNg9get(u\DNRnrYn`W#R7y\J^Z{{~4.u"e<J#".^}J_Z_-Y
2025-01-13 16:28:06 UTC	1114	IN	Data Raw: d7 7c cb b3 47 0d 12 11 57 40 2d 12 d0 e6 35 5c b7 fb bc 92 0f 37 ae d5 2a 85 9d 64 4c e4 64 38 99 ee 08 a7 68 3e b5 de a2 dd 5e 96 2d bc 90 84 06 6d 05 ad 6b b6 7f e9 c4 2c fd 2e 08 8d 51 b7 1d dc 7f 40 b3 6a 90 07 a5 c2 b6 27 ea 4e 63 3f 4d f5 d0 b1 fd 49 b4 8b 3a d5 67 51 31 90 51 3b e8 8e db 38 86 df 5a 23 a7 f8 c1 eb c9 90 2f 0a c7 2d b1 cb a5 bd 91 6f d7 35 00 03 62 cc da 0e 54 3e b2 86 26 5a b0 33 4a ac 29 1b a4 bb 49 0d 71 69 56 be 92 56 1a 35 88 9d 99 1f 26 ce a2 c3 17 a8 ff e0 24 39 35 3c 1f 1f bc 5a ad e6 43 bc c4 d8 9f e1 8f ba 67 75 76 78 73 1a 59 2a 5a df d4 fb bb d9 ba 47 f4 ee c5 47 ea 8e f3 69 cf bb 75 7a ef 38 3e bd a7 48 99 2a b9 0f a6 e7 d6 d1 aa e0 80 57 b3 78 8d c0 50 d1 2d ca ad 9c 1c 1e 59 5f 86 48 3b 56 89 f4 a0 92 4f 3d d1 e2 ac Data Ascii: \|GW@-5\7dLd8h>^-mk,.Q@j'Nc?MI:gQ1Q;8Z#/-o5bT>&Z3J)IqiVV5&$95<ZCguvxsYZGGiuz8>H*WxP-Y_H;VO=
2025-01-13 16:28:06 UTC	16384	IN	Data Raw: 56 17 92 20 47 f0 c1 ff 36 10 af ac 5a 8a d4 bc 07 1f 15 93 62 aa c2 72 a9 03 bc d0 2e c3 94 ee 98 b1 89 f3 a1 37 26 86 f6 06 e9 b1 ba af 95 3b f1 59 b1 3d 08 d5 d1 da 7f cf b3 e8 ce da 5d b3 2b 05 e3 57 9f 16 e8 0f ea 67 c8 af da b1 58 d3 92 c0 f5 d2 5c 79 eb 76 12 b9 d7 b8 21 75 e2 8f 48 b6 d9 76 f4 cc 82 a4 17 21 e8 80 d5 86 bd ab 9a fe ce d5 76 55 3d 65 bf e5 35 8d 1c a9 45 67 5c 47 e9 44 61 12 9f ac eb f4 2c 2f a2 1b 47 1b 31 fc fe 44 3b 10 7a 5d c8 cd 3c 0b 53 c1 58 05 d6 b2 15 98 c3 d4 0d 9c 1d 9b bc e9 fb e7 f0 c6 3b f5 c2 9b 79 92 87 ae 7a 93 b6 d2 84 91 14 61 a1 fd ef 94 dc b3 c9 b9 fc 98 64 9b 42 0f be 56 f6 ef 87 32 ed 76 82 92 94 03 85 f0 86 c5 f8 6d 92 07 28 0d e1 4f 43 6a 20 e4 e4 ee 94 ce 7d 0e 1c 26 27 df f1 df ef a7 75 57 da 3a 2b 58 15 Data Ascii: V G6Zbr.7&;Y=]+WgX\yv!uHv!vU=e5Eg\GDa,/G1D;z]<SX;yzadBV2vm(OCj }&'uW:+X
2025-01-13 16:28:06 UTC	9973	IN	Data Raw: 57 2f fd 8a 1c 90 09 87 24 43 24 cd 87 6f 40 c0 af b3 16 21 9f 9b 38 41 a2 ec 57 a9 8a 7b 6f 61 bc dd 65 c3 7a 5f f1 ef b1 61 a3 dd 4c 95 f3 11 ac fe 14 ae ca b1 44 9a 7b 1c d3 c7 33 44 12 e8 f5 23 99 1f 64 96 98 17 9a b3 c9 ce c5 59 e2 23 e5 66 ca cf 26 f6 56 74 6e a7 6c 11 fa 75 d9 e2 72 e6 38 4a 5e 6a eb 44 8b b5 b8 d9 fc ab 9f c8 00 7a 75 8e 2b f3 83 13 b0 34 6a 7c e0 a2 51 d5 41 12 00 de e2 4b fa 15 8b 26 94 52 ac 46 54 d9 4a fb da 3d 0b e2 38 13 8d 5e 1c 34 f5 62 68 83 bb e3 7e cf ce bb f4 f7 f5 a7 8e 8d b6 51 08 ca 6e 76 2c 6a b4 10 b8 63 44 73 17 bd 42 8f 21 87 f8 f2 15 04 ad 8f 44 e3 4a df 5e 46 61 5e fb 46 4b 03 ad fd 47 cd 74 2e ca d4 ba 81 ba 30 cf 96 df 95 ab f7 70 52 ca de 7d c3 fb 1a 73 96 af 56 ca d5 49 3d bd 14 73 5b 14 a9 6e e9 55 89 f4 Data Ascii: W/$C$o@!8AW{oaez_aLD{3D#dY#f&Vtnlur8J^jDzu+4j\|QAK&RFTJ=8^4bh~Qnv,jcDsB!DJ^Fa^FKGt.0pR}sVI=s[nU
2025-01-13 16:28:06 UTC	16384	IN	Data Raw: 5d 77 ac 9b b1 5f 74 db 0d df 83 18 d2 c5 0a 02 a3 48 8a 62 62 23 bc c2 c1 cd 2f cd e8 2a 23 21 7d c5 02 dd e8 3c cf cb 91 e0 5b ec 39 b1 65 72 e7 6e 53 d5 97 16 e9 1d 6d ae 37 cf a1 4f d1 a6 16 49 90 cd 20 6b 1e b0 05 38 11 84 78 a4 12 04 3f da 3e 43 54 6d 73 fb ac 2c 62 0f 60 4b d1 4b 9d 07 b1 d8 a9 75 1a 93 44 af c2 84 d8 dd 10 73 a1 2c 35 a3 78 e4 e6 d2 fd ea 65 0b 62 b6 71 13 4d b2 6d 41 c4 b6 4e 97 39 67 27 4d e3 e4 79 c9 41 8c 26 5e 31 f4 9e ad 13 69 f2 e6 6b 6e d2 ff 26 ee 94 b4 c0 37 cc 02 dc 47 2d 74 5f 30 86 9f 4e 57 df 38 50 42 de f0 f7 f2 eb 79 14 0f 54 3f 63 f2 1d f7 eb d7 2f 06 1a e8 bc e2 27 b7 9d 20 56 d3 67 3f ce 19 39 6f c2 93 bc 64 7b 68 7f b2 76 64 f1 87 7a 47 a6 7e 4b f7 37 f2 a1 fa cd 7b 92 6c cb 8f fc 28 6d e5 7d df 57 d9 3c f7 7d Data Ascii: ]w_tHbb#/*#!}<[9ernSm7OI k8x?>CTms,b`KKuDs,5xebqMmAN9g'MyA&^1ikn&7G-t_0NW8PByT?c/' Vg?9od{hvdzG~K7{l(m}W<}
2025-01-13 16:28:06 UTC	9201	IN	Data Raw: 70 08 c4 aa 01 30 4f cb 68 ac b2 28 46 f0 5f 13 69 0c c0 64 59 94 cd ca 59 3a 18 cc e7 93 20 b5 61 ff d8 a5 24 33 d7 df 33 5a 6e b1 89 c9 35 af ab 5d 58 7e 27 ae ef 84 68 d4 26 1f 46 8e bd 9e 7f 0f 65 f2 fb 7a 7d b9 af 06 de d0 10 04 c9 c5 ab ef 3c 26 b1 a7 fe dd f9 44 47 23 92 2f 84 79 45 7e f9 d5 c8 7d 46 b9 11 ae da a3 dd e2 ea 88 a9 e5 ef ed 56 74 6a b2 7a ec 3a 2d d2 3f 23 53 41 74 a3 3e c3 62 44 2f 65 df 55 3e 6f 2c d7 1b b7 36 94 7c 3b e9 69 af ad d3 90 b9 a9 ad a9 0a ed 4f 44 6a 8e 49 d4 f4 d4 83 c7 ab c8 0b bd 4d 3a 04 e6 5d 32 d4 c6 07 07 de c0 6f 4e 05 e0 0c ec 18 50 0d 68 4a e8 bd 84 67 ff 41 95 e7 40 ae 80 d9 65 91 92 b0 03 2b 04 af fd 72 57 07 d8 45 0b 38 0c 78 a7 11 1c 10 5c ff 1d 4a a8 5c 05 59 2c f4 8e 60 de 5a 4e a8 98 7a aa 6a 60 e1 7a Data Ascii: p0Oh(F_idYY: a$33Zn5]X~'h&Fez}<&DG#/yE~}FVtjz:-?#SAt>bD/eU>o,6\|;iODjIM:]2oNPhJgA@e+rWE8x\J\Y,`ZNzj`z
2025-01-13 16:28:06 UTC	2012	IN	Data Raw: 40 47 7f f2 4b 72 fe 1f 69 35 fa f6 5d 7e 4e 4d 3a 4e 05 cf 27 8b 6f d2 cb b8 ca 49 12 2a 93 e2 87 4b 90 23 da 18 63 e5 7d 7f f6 0c db e2 64 5e ef 68 a2 47 cb e4 22 cd c0 fb 79 df d1 7b e7 d5 19 25 8d bc 20 78 fe fd e8 44 5d 64 e1 43 dc 08 0f c6 27 36 4d a1 04 1f 13 0f 52 47 91 26 b0 de c6 03 26 36 fc 51 e6 32 47 30 28 14 78 82 36 57 f1 fc 59 d0 42 3e 83 47 10 dc 63 db 27 7c 6c 32 c6 d0 17 d5 ae 42 71 d7 60 5d dc 27 4a bc 93 d3 1b 29 0c 37 d9 6b f6 0c 5e 76 e6 21 8f 37 b8 b3 dc 16 0e ae 9a 19 55 75 f3 ea 9f 65 d7 ae 9f a4 a0 1d 6d bd c5 2a cf 7a 6f 44 89 be 01 79 d3 3a 06 d8 b0 57 91 b4 82 3f dc df 0c 0b 8a 31 33 cc f8 dc eb ca eb ae 07 42 d6 f0 47 78 b9 cf 13 e1 25 14 35 e0 6c d8 69 0f ef e8 c4 db a4 d3 9b d6 3a 30 4a 80 76 95 e9 76 4b 2c 30 c8 be 6e 61 Data Ascii: @GKri5]~NM:N'oIK#c}d^hG"y{% xD]dC'6MRG&&6Q2G0(x6WYB>Gc'\|l2Bq`]'J)7k^v!7UuemzoDy:W?13BGx%5li:0JvvK,0na
2025-01-13 16:28:06 UTC	16384	IN	Data Raw: bc bf 45 de a0 d4 17 25 67 16 d5 47 a2 ad 3f 54 0d 2f 9b cc 84 4e 4a fc c6 50 8d 4c f3 49 58 a1 1f 3e ae 55 e2 8a a4 8f d2 b1 5b ab 97 c2 64 e5 06 50 21 6e 5f 02 a7 8e 00 f0 b5 4a b3 2f 10 4f e8 e7 5b fa 89 eb 9d 46 4d 50 6f 9d 61 28 a3 6e 9b f9 9d 1e f0 d6 67 66 d0 69 c2 7a 3e 74 de aa ab b8 34 b3 3d 46 7c 35 d3 13 73 27 7a 78 12 1e d2 24 8e 9c 99 f0 0b e7 2b b5 0a 58 63 25 b3 f1 7e b5 fc ff 27 44 c6 e5 7f 66 60 f5 54 01 a6 a9 41 53 1f 19 cb aa 7f 2c 89 e2 37 37 77 e3 09 fa a3 45 2c 06 df 7a e4 1e 59 52 d5 a3 4b aa 6a f7 55 a2 42 c2 8c bf 59 a7 bc 1d 78 07 20 c5 52 9b 07 1b 21 89 cd 83 e3 a8 41 b3 a2 86 b9 af d0 c5 89 35 df 7b 6c 3d 34 aa ed 5f 12 95 e3 c6 06 af 8a c7 d7 44 9b 4c 72 b8 8f d6 24 d9 e8 41 00 6d 11 8d 9c c2 58 21 c0 42 e8 7d 2e f3 6c ed 71 Data Ascii: E%gG?T/NJPLIX>U[dP!n_J/O[FMPoa(ngfiz>t4=F\|5s'zx$+Xc%~'Df`TAS,77wE,zYRKjUBYx R!A5{l=4_DLr$AmX!B}.lq
2025-01-13 16:28:06 UTC	16384	IN	Data Raw: 5d 61 14 a7 44 10 ac 82 ab cd ab 6e 2d b6 da 4f 90 12 f3 6e fb d5 b7 cd 22 84 d3 7f 7b b7 ea 02 b0 fc 5d 91 d4 62 fb 0a 92 8e f9 16 f1 e9 be 7a 2f a3 84 20 95 23 1e 29 4e 0c 3d 35 1c b5 e7 62 02 0f f4 49 fc 96 90 f8 bf 9f e4 d4 d9 41 50 fc 76 7b 1f 92 2d 6a dd 0f 83 b6 00 6e d4 1f b7 f7 af 4d 89 94 4a 7f 2a be 55 7f 4c ed 5c 20 a6 b8 ab 3a 0a 22 19 10 7e ca 68 16 04 1f 9c 79 80 0f 16 73 d4 02 ac 93 0a af d3 cc 12 6d f6 23 76 84 b2 79 4a 2c 21 47 2f 08 07 c0 38 9f 14 29 fc 2c 2f 00 d5 05 df e5 f8 3c c9 bb 6c 48 ef 60 39 85 b3 33 38 6b 77 18 d6 34 28 65 d7 0b 34 d3 32 02 2c e5 e1 95 b5 54 4e 57 67 c6 b3 b5 8c ec 2f ec 1c c5 f0 de 16 82 e0 2b 4d 58 89 7d fd 81 96 33 ab 2f 05 19 9e 4b 6b 68 51 26 23 c7 af ce 70 21 c2 0f b9 a2 67 fa 63 62 a3 c6 e3 5b 3a f3 f7 Data Ascii: ]aDn-On"{]bz/ #)N=5bIAPv{-jnMJ*UL\ :"~hysm#vyJ,!G/8),/<lH`938kw4(e42,TNWg/+MX}3/KkhQ&#p!gcb[:
2025-01-13 16:28:06 UTC	1514	IN	Data Raw: 2b 7f 37 5a 4a e9 03 f4 b6 60 cd fc 2b 16 8d a5 12 df 48 0a ca bc c5 21 c3 3e 98 22 32 3e b9 80 9d 5b bd ff 60 03 cb f3 1a 32 33 f0 d9 ac 2b e5 2b 5b 76 78 3c b6 1e 1d d7 9c c1 5b 48 8d 00 75 0c 3a 13 e8 0d a8 ab 01 e8 ad e4 18 0c 9b fb 6a d9 fc 13 59 b3 dc 03 c3 a7 dc d2 bf f2 41 1a 15 8a a1 e3 40 02 be 2f 1e 82 36 2a 2c 33 6f 2e 66 1c 3a 61 2b aa 00 39 ad 57 29 c8 2c 13 05 3c a6 4c 9b 7c ad 7b 60 9e 27 96 66 bf 0e 6b eb 8f 15 ca 58 49 4c 04 22 93 79 88 c8 0f 8d 30 ea 50 7f 42 bb 56 72 c1 81 d5 2e 49 c7 53 e7 d8 e1 e5 e2 05 65 b7 cc 67 cc 43 03 29 1d 35 a9 01 2d fd 89 56 1e e3 55 87 b4 bf fc 8d b5 ce 00 22 e6 be 5a 8b cb 20 80 09 e3 dd 38 b3 07 2c 41 dc 03 98 bb e8 f7 85 36 85 d9 03 13 23 bf 53 4d 70 ab 4b 1e 83 92 d3 13 bc c6 ef c4 24 f2 f2 88 61 a3 58 Data Ascii: +7ZJ`+H!>"2>[`23++[vx<[Hu:jYA@/6*,3o.f:a+9W),<L\|{`'fkXIL"y0PBVr.ISegC)5-VU"Z 8,A6#SMpK$aX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	34.227.156.121	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:05 UTC	761	OUT	GET /assets/strftime-min.js?1736773238 HTTP/1.1 Host: cortevaopscenter.freshdesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _x_w=45_1; _helpkit_session=Rm5pL054WTRhSEhURjc1U2JielhzazV4WW1JWnBZNTF2MXIyOWVGSVlBeEFmYXpEWlFGUys2M1hVdG5FRVF4UmwzSVdndDBaQThWbU1wVmN0NnVjNVE4V0gvV3BabzlOK09ST0tCUkMyaSs4cEN5SjF0aElnaHdhNW01WW01SkFKT2ljalFHTFN0NzhmcHNPM0dZMGVZUUJnYnpCeE5YZVZTRTNXSUtVTEJzdHkycmNxSWE2aHBsazRpNW1CRVVLLS1ZdkJmbWZ4OHJ5L1RCS3lhZjQ2YWJBPT0%3D--6e6d70643abefae5d04538faadd91fb30328c5f1
2025-01-13 16:28:05 UTC	6192	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 16:28:05 GMT Content-Type: application/javascript Content-Length: 3975 Connection: close Status: 200 OK Cache-Control: public, must-revalidate Vary: Accept-Encoding X-Xss-Protection: 1; mode=block X-Request-Id: bb35a957-9ba3-473f-9f3e-c6cc00103144 Etag: "67d022337404306f740a6dcfd7497398bf4b1723b9ec29a6d27e5eafaea41ad1" X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'self'; connect-src 'self' .freshconnect.io/ .freshsales.io/ .freshworks.com/ .freshdesk.com/ .freshworksapi.com/ .freshdeskusercontent.com/ .freshdeskusercontent-euc.com/ .freshdeskusercontent-in.com/ .freshdeskusercontent-aus.com/ .fconstage.io/ analytics.inlinemanual.com/__profile analytics.inlinemanual.com/__ptm backend.getbeamer.com/ heapanalytics.com/ d3h0owdjgzys62.cloudfront.net/ d2uy6ubiilaqku.cloudfront.net/assets/ dcdu85ocrj5q6.cloudfront.net/ dtdafz6i4gvv1.cloudfront.net/ d3r4aewxkdubw4.cloudfront.net/ d2lz1e868xzctj.cloudfront.net/ rum.haystack.es/freshdesk/analytics fonts.googleapis.com/ fonts.gstatic.com/ sentry.io/api/ wss://.freshworksapi.com/ wss://.freshdesk.com/ fg8vvsvnieiv3ej16jby.litix.io/ distillery.wistia.com/ pipedream.wistia.com/ freshworks.asknice.ly/ embedwistia-a.akamaihd.net/ embed-fastly.wistia.com/ maps.googleapis.com/ graph.microsoft.com/v1.0/ freshcaller-attachments.s3.amazonaws.com/production/ euc-freshcaller-attachments.s3.e [TRUNCATED] Set-Cookie: _helpkit_session=ZHRTbnA4dHN2RHhJdFNLejRISnpmNnNBQlJlUUVycmRSR2YyU0QrSVh5amdtM1dDY1c1NVY2RDlYMnNXZ1VHZGY4aXJWeVNLNmVCQmdyWjBQNGU0VHNSVHBpNStIeVpZbzJRNjJmQ3ZhVEVwK3VjNUM5cTNjQlhDeVZqS1NzV2FoRm14N3ZXaENiZUJNUjN0c05DamppRFcxZjJMVllRQzF5Yy9MMG0zS0poK2h5aURhbGpCMEcxMGZhWExUZ1hJLS1aVlFMcVg4WCtPUFRJODRGQlgrYTlBPT0%3D--24d77dc3f27a2f60252d94dd09a1e39b6092f7e3; path=/; HttpOnly; secure X-Envoy-Upstream-Service-Time: 24 X-Trace-Id: 00-f4acf6878e1bfb93547e9015f9e9edaa-2cd25d087e5f3903-00 Nel: { "report_to": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true} Report-To: { "group": "nel-endpoint-freshdesk", "max_age": 2592000, "include_subdomains": true, "endpoints": [{"url": "https://edge-admin.us-east-1.freshedge.net/nelreports/freshdesk"}]} X-Fw-Ratelimiting-Managed: false Server: fwe
2025-01-13 16:28:05 UTC	3975	IN	Data Raw: 44 61 74 65 2e 65 78 74 3d 7b 7d 2c 44 61 74 65 2e 65 78 74 2e 75 74 69 6c 3d 7b 7d 2c 44 61 74 65 2e 65 78 74 2e 75 74 69 6c 2e 78 50 61 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 6e 3d 31 30 29 3b 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 3c 6e 26 26 6e 3e 31 3b 6e 2f 3d 31 30 29 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 2b 65 3b 72 65 74 75 72 6e 20 65 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 63 61 6c 65 3d 22 65 6e 2d 47 42 22 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 74 6d 6c 22 29 26 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 Data Ascii: Date.ext={},Date.ext.util={},Date.ext.util.xPad=function(e,t,n){for("undefined"==typeof n&&(n=10);parseInt(e,10)<n&&n>1;n/=10)e=t.toString()+e;return e.toString()},Date.prototype.locale="en-GB",document.getElementsByTagName("html")&&document.getElementsBy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	104.17.25.14	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:06 UTC	403	OUT	GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:06 UTC	961	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 16:28:06 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec2-ad3" Last-Modified: Mon, 04 May 2020 16:11:46 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 411446 Expires: Sat, 03 Jan 2026 16:28:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mzDfCK1JCQnF3Ru8MhHfvRm7nFBJvhrY6FGirMEW%2FMWRUHiA53vG6BcJCRpfPw%2FTuC5wiAe14GhPFO%2FG29c3cDMPUXSbIyN%2FJ%2F3wtgb2bhKHCYuqEA9kboo3QpvtiucBVKNTi3s1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9016c1eb29b742c1-EWR alt-svc: h3=":443"; ma=86400
2025-01-13 16:28:06 UTC	408	IN	Data Raw: 61 64 33 0d 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4d 6f 75 73 65 77 68 65 65 6c 20 33 2e 31 2e 31 33 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 Data Ascii: ad3/! jQuery Mousewheel 3.1.13 * * Copyright 2015 jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof
2025-01-13 16:28:06 UTC	1369	IN	Data Raw: 74 79 70 65 3d 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 22 64 65 74 61 69 6c 22 69 6e 20 67 26 26 28 6d 3d 2d 31 2a 67 2e 64 65 74 61 69 6c 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 22 69 6e 20 67 26 26 28 6d 3d 67 2e 77 68 65 65 6c 44 65 6c 74 61 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 59 22 69 6e 20 67 26 26 28 6d 3d 67 2e 77 68 65 65 6c 44 65 6c 74 61 59 29 2c 22 77 68 65 65 6c 44 65 6c 74 61 58 22 69 6e 20 67 26 26 28 6c 3d 2d 31 2a 67 2e 77 68 65 65 6c 44 65 6c 74 61 58 29 2c 22 61 78 69 73 22 69 6e 20 67 26 26 67 2e 61 78 69 73 3d 3d 3d 67 2e 48 4f 52 49 5a 4f 4e 54 41 4c 5f 41 58 49 53 26 26 28 6c 3d 2d 31 2a 6d 2c 6d 3d 30 29 2c 6a 3d 30 3d 3d 3d 6d 3f 6c 3a 6d 2c 22 64 65 6c 74 61 59 22 69 6e 20 67 26 26 28 6d 3d 2d 31 2a 67 2e 64 65 6c 74 61 59 2c 6a Data Ascii: type="mousewheel","detail"in g&&(m=-1g.detail),"wheelDelta"in g&&(m=g.wheelDelta),"wheelDeltaY"in g&&(m=g.wheelDeltaY),"wheelDeltaX"in g&&(l=-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.deltaY,j
2025-01-13 16:28:06 UTC	1001	IN	Data Raw: 67 5b 2d 2d 6a 5d 5d 3d 61 2e 65 76 65 6e 74 2e 6d 6f 75 73 65 48 6f 6f 6b 73 3b 76 61 72 20 6b 3d 61 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 6d 6f 75 73 65 77 68 65 65 6c 3d 7b 76 65 72 73 69 6f 6e 3a 22 33 2e 31 2e 31 32 22 2c 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 66 6f 72 28 76 61 72 20 63 3d 68 2e 6c 65 6e 67 74 68 3b 63 3b 29 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 68 5b 2d 2d 63 5d 2c 62 2c 21 31 29 3b 65 6c 73 65 20 74 68 69 73 2e 6f 6e 6d 6f 75 73 65 77 68 65 65 6c 3d 62 3b 61 2e 64 61 74 61 28 74 68 69 73 2c 22 6d 6f 75 73 65 77 68 65 65 6c 2d 6c 69 6e 65 2d 68 65 69 67 68 74 22 2c 6b 2e 67 65 74 4c 69 6e 65 48 65 69 67 68 74 28 Data Ascii: g[--j]]=a.event.mouseHooks;var k=a.event.special.mousewheel={version:"3.1.12",setup:function(){if(this.addEventListener)for(var c=h.length;c;)this.addEventListener(h[--c],b,!1);else this.onmousewheel=b;a.data(this,"mousewheel-line-height",k.getLineHeight(
2025-01-13 16:28:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	52.217.202.64	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:06 UTC	705	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153001919476/fav_icon/nu5c4cPGOxM3icX0y420n-oRHKOQ8ywl4g.png HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cortevaopscenter.freshdesk.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:06 UTC	502	IN	HTTP/1.1 200 OK x-amz-id-2: Z/gO80tw5PsCWgi++U4wEW5a070sTDGkXtMx5X8bb/vORbv13PzWkqaT7u7nXoI3+J+2yB2a7Jg= x-amz-request-id: ARYC2S4YKTBAQY7N Date: Mon, 13 Jan 2025 16:28:07 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 07 Dec 2023 15:11:53 GMT ETag: "fc4fec7a85a7dcf9d6a5c88728cb44a2" x-amz-server-side-encryption: AES256 x-amz-version-id: WCvAPQaBzgH7vtQoiqSRS9ctPdqWmGRE Accept-Ranges: bytes Content-Type: image/png Content-Length: 815 Server: AmazonS3 Connection: close
2025-01-13 16:28:06 UTC	815	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 12 08 03 00 00 00 0d 16 2c 60 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 01 17 50 4c 54 45 00 00 00 ff ca 05 ff cb 05 fe ca 05 f3 96 12 ec 76 1b ff e2 00 ff cb 04 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff cb 05 ff cb 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 04 ff cb 04 ff cb 05 fe ca 05 ff cb 04 fe cb 04 f3 97 12 f1 8e 15 e0 3d 2a f4 97 12 ff cd 04 ff cb 05 ff ca 05 ff cc 04 ff ce 04 ff cd 04 ff cb 04 f7 a7 0e ef 83 18 ef 82 18 ef 81 18 f1 8d 15 fc bf 07 f4 9c 11 f0 89 16 f9 b0 0c f0 87 16 f4 Data Ascii: PNGIHDR ,`gAMAa cHRMz&u0`:pQ<PLTEv=*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49758	16.15.178.206	443	332	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-13 16:28:07 UTC	455	OUT	GET /cdn.freshdesk.com/data/helpdesk/attachments/production/153001919476/fav_icon/nu5c4cPGOxM3icX0y420n-oRHKOQ8ywl4g.png HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 16:28:07 UTC	534	IN	HTTP/1.1 200 OK x-amz-id-2: wKyrLq5aFaQw5uvFQjhd+s+eRoa821U76DOUb2fRXMnh+HKkoWdV9zkTHVeMfapl7sFN7J4ExsfJLyvRFc/ZcaOoBv2qwP0hQnlhAhWouDY= x-amz-request-id: V515H9W53E7CWP8P Date: Mon, 13 Jan 2025 16:28:08 GMT x-amz-replication-status: COMPLETED Last-Modified: Thu, 07 Dec 2023 15:11:53 GMT ETag: "fc4fec7a85a7dcf9d6a5c88728cb44a2" x-amz-server-side-encryption: AES256 x-amz-version-id: WCvAPQaBzgH7vtQoiqSRS9ctPdqWmGRE Accept-Ranges: bytes Content-Type: image/png Content-Length: 815 Server: AmazonS3 Connection: close
2025-01-13 16:28:07 UTC	815	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 12 08 03 00 00 00 0d 16 2c 60 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 01 17 50 4c 54 45 00 00 00 ff ca 05 ff cb 05 fe ca 05 f3 96 12 ec 76 1b ff e2 00 ff cb 04 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff cb 05 ff cb 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 05 ff ca 04 ff cb 04 ff cb 05 fe ca 05 ff cb 04 fe cb 04 f3 97 12 f1 8e 15 e0 3d 2a f4 97 12 ff cd 04 ff cb 05 ff ca 05 ff cc 04 ff ce 04 ff cd 04 ff cb 04 f7 a7 0e ef 83 18 ef 82 18 ef 81 18 f1 8d 15 fc bf 07 f4 9c 11 f0 89 16 f9 b0 0c f0 87 16 f4 Data Ascii: PNGIHDR ,`gAMAa cHRMz&u0`:pQ<PLTEv=*

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1260, Parent PID: 1804

General

Target ID:	0
Start time:	11:27:51
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 332, Parent PID: 1260

General

Target ID:	2
Start time:	11:27:54
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=1976,i,29055799889446091,581148314653188410,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6552, Parent PID: 1804

General

Target ID:	3
Start time:	11:28:00
Start date:	13/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Windows Analysis Report
https://cortevaopscenter.freshdesk.com/register/FFFaTYjVZRX8bcRDPna0