Edit tour

Windows Analysis Report
https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html

Overview

General Information

Sample URL:	https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html
Analysis ID:	1521951
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Misleading page title found

Yara detected HtmlPhish64

Phishing site detected (based on favicon image match)

Phishing site detected (based on logo match)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid 'forgot password' link found

Invalid T&C link found

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2320,i,16143554761151837650,1738748694076415774,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html

LLM: Score: 9 Reasons: The brand 'Facebook' is well-known and its legitimate domain is 'facebook.com'., The provided URL 'dev-shamsunpavel.github.io' does not match the legitimate domain of Facebook., The URL is hosted on GitHub Pages, which is a common platform for hosting personal or project pages, not official brand pages., The URL contains a personal or developer's name, which is not typical for official brand pages., Phishing sites often use well-known brand names to lure users into providing sensitive information. DOM: 0.0.pages.csv

Misleading page title found

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	Page Title: Facebook Login
Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	Page Title: Facebook Login

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Phishing site detected (based on favicon image match)

Source: https://dev-shamsunpavel.github.io	Matcher: Template: facebook matched with high similarity
Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	Matcher: Template: facebook matched with high similarity
Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html	Matcher: Template: facebook matched with high similarity

Phishing site detected (based on logo match)

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html

Matcher: Template: facebook matched

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	HTTP Parser: Number of links: 0
Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html	HTTP Parser: Number of links: 0

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	HTTP Parser: Title: Facebook Login does not match URL
Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html	HTTP Parser: Title: FB Sign Up does not match URL

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html

HTTP Parser: Invalid link: Forgotten password?

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html	HTTP Parser: Invalid link: Terms
Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html	HTTP Parser: Invalid link: Privacy Policy

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	HTTP Parser: <input type="password" .../> found
Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html	HTTP Parser: <input type="password" .../> found

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	HTTP Parser: No <meta name="author".. found
Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html	HTTP Parser: No <meta name="author".. found

Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49731 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49722 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:59757 -> 162.159.36.2:53

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49731 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /assignment-04-facebook_login_and_signup/index.html HTTP/1.1Host: dev-shamsunpavel.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assignment-04-facebook_login_and_signup/css/facebook_login_page%20style.css HTTP/1.1Host: dev-shamsunpavel.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assignment-04-facebook_login_and_signup/img/facebook-favicon.png HTTP/1.1Host: dev-shamsunpavel.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assignment-04-facebook_login_and_signup/img/facebook-favicon.png HTTP/1.1Host: dev-shamsunpavel.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /assignment-04-facebook_login_and_signup/Create_new_account-index.html HTTP/1.1Host: dev-shamsunpavel.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assignment-04-facebook_login_and_signup/css/Create_new_account-style.css HTTP/1.1Host: dev-shamsunpavel.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://dev-shamsunpavel.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://dev-shamsunpavel.github.iosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: dev-shamsunpavel.github.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 241.42.69.40.in-addr.arpa

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1727583624773&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_69.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_69.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_74.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_70.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Open
Source: chromecache_71.2.dr, chromecache_74.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:ital
Source: chromecache_74.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEz4dL_nz.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEz8dL_nz.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzAdLw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzMdL_nz.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc-CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc0CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc1CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc2CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc3CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc5CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TLBCc6CsQ.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc-CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc0CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc1CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc2CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc3CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc5CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_82.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_77.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59766
Source: unknown	Network traffic detected: HTTP traffic on port 59766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49722 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.win@17/35@12/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2320,i,16143554761151837650,1738748694076415774,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2320,i,16143554761151837650,1738748694076415774,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label	Link
http://fontawesome.io	0%	URL Reputation	safe
http://fontawesome.io/license	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	unknown
dev-shamsunpavel.github.io	185.199.108.153	true	true	unknown
www.google.com	142.250.184.196	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
241.42.69.40.in-addr.arpa	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/img/facebook-favicon.png	true	unknown
https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html	true	unknown
https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/css/facebook_login_page%20style.css	true	unknown
https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css	false	unknown
https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html	true	unknown
https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/css/Create_new_account-style.css	true	unknown
https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_69.2.dr	false	URL Reputation: safe	unknown
http://fontawesome.io/license	chromecache_69.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.199.108.153	dev-shamsunpavel.github.io	Netherlands	54113	FASTLYUS	true
185.199.110.153	unknown	Netherlands	54113	FASTLYUS	false

Private

IP
192.168.2.8
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521951
Start date and time:	2024-09-29 06:19:44 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.win@17/35@12/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 142.250.186.78, 66.102.1.84, 34.104.35.123, 172.217.16.138, 142.250.186.67, 142.250.186.42, 142.250.185.170, 142.250.185.202, 142.250.185.234, 142.250.186.170, 142.250.185.138, 142.250.181.234, 216.58.212.170, 216.58.206.42, 216.58.206.74, 142.250.74.202, 142.250.184.202, 172.217.18.10, 172.217.16.202, 142.250.184.234, 20.12.23.50, 93.184.221.240, 192.229.221.95, 52.165.164.15, 13.95.31.18, 40.69.42.241, 13.85.23.86, 4.175.87.197, 142.250.185.67, 142.250.185.131
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html

Input	Output
URL: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html Model: jbxai	{ "brand":["Facebook"], "contains_trigger_text":true, "trigger_text":"Log In", "prominent_button_name":"Log In", "text_input_field_labels":["Email address or phone number", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html Model: jbxai	{ "phishing_score":9, "brands":"Facebook", "legit_domain":"facebook.com", "classification":"wellknown", "reasons":["The brand 'Facebook' is well-known and its legitimate domain is 'facebook.com'.", "The provided URL 'dev-shamsunpavel.github.io' does not match the legitimate domain of Facebook.", "The URL is hosted on GitHub Pages, which is a common platform for hosting personal or project pages, not official brand pages.", "The URL contains a personal or developer's name, which is not typical for official brand pages.", "Phishing sites often use well-known brand names to lure users into providing sensitive information."], "brand_matches":[false], "url_match":false, "brand_input":"Facebook", "input_fields":"Email address or phone number, Password"}

URL: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":null, "prominent_button_name":"Sign Up", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 03:20:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.983916415635584
Encrypted:	false
SSDEEP:	48:84dWjTC+G0fHBcidAKZdA19ehwiZUklqehgy+3:8pjvr5q3y
MD5:	09E2D4DC76C29A25AEAA94D726717870
SHA1:	A0067AF9000965FEBC11ABF64783515164B4FD37
SHA-256:	D8941E4217572EC8197CF17969713E9A9A60FC8A74612BF309747FB81F9DE2FF
SHA-512:	BAD518D12ED076DD64C8ECA20834B1CB5B14B344DB97DD69AE298621DC21AB6181DED38670F195288BE804F0A4934645EF802DCB2BF429C7EFF3E8FD3A419215
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......".&...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y."....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y."....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y."....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y."..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y."...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 03:20:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.995681547251229
Encrypted:	false
SSDEEP:	48:8TdWjTC+G0fHBcidAKZdA1weh/iZUkAQkqehny+2:8Yjvr5g9QKy
MD5:	817876239BAEABE72A2D2E31AA0FB2DF
SHA1:	5910346FE77FE2A3D402C4CA70CB9F60DDC74A05
SHA-256:	D0492CBCDF2DD582E75F0606682C7690FD36EF3DF222BE70DE94AB2191C5E5CC
SHA-512:	6C47E8A38F115E73547106782C4261A3E2715AB945EEB374F6FE717B37A509E00A40B7DB863E1F981481986379696C7A696E14D3C86099823BA9C5A171A4D429
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....s0..&...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y."....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y."....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y."....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y."..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y."...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.009607869855875
Encrypted:	false
SSDEEP:	48:8x/dWjTC+sHBcidAKZdA14tseh7sFiZUkmgqeh7sBy+BX:8x0jvO4nzy
MD5:	BAC69DC58A7C3679094A92C6B40BE179
SHA1:	4980358F766E6BBBDAFADC7ADC15C369FCB18F29
SHA-256:	93E067F17F344294DF6B400C09D6BB76B9F77BD10DD9FA49BD13466F0FA70032
SHA-512:	1C32E54D9C19915973F8EE9D081A8D0A86B6D0641C2EC51C2DEE73179F881CFCF5365A324B718D6E81BBEBCB770289273268A6C88BEA80729F317C395F53CEFA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y."....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y."....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y."....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y."..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 03:20:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9989148046742704
Encrypted:	false
SSDEEP:	48:8jdWjTC+G0fHBcidAKZdA1vehDiZUkwqehby+R:8ojvr5rpy
MD5:	B6578016BA362E1C44065C6BEC9C13EA
SHA1:	FD19EBAB7FE75FB1477986ED194ABEAE3270F1F1
SHA-256:	41935EA4F6620FEA58E91DCC1524BA4DCBB3ABE0BADC608519172DAD24C0885D
SHA-512:	49D8E9D1F1E840556076D5843DBF0348050F2D9B2E898E52640708A048783D5346DF799E333F0E34F6C2F843A221394DB03AA1D0EFA82F813E96FE8436640693
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........&...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y."....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y."....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y."....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y."..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y."...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 03:20:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9842308672865814
Encrypted:	false
SSDEEP:	48:8UndWjTC+G0fHBcidAKZdA1hehBiZUk1W1qehty+C:85jvr5r9Ny
MD5:	8770C904C56D505D663504B51EDB0734
SHA1:	A5433057F35E090B054785A0985546D591E66D09
SHA-256:	B6876C65B9E615DEEE18BEB4C2E249EE8634177221BAE809798A501A488C4597
SHA-512:	3C712A6812F6DC8AA7C6862821A9C89809FECA49AF9F2D3BF14959EFBC37C1753297DA44A0B13ED6AE975FDB31D80EE62237699717D9895E8EA651126DB74A66
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....&h..&...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y."....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y."....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y."....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y."..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y."...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 03:20:43 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9959767315585464
Encrypted:	false
SSDEEP:	48:82dWjTC+G0fHBcidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbzy+yT+:8rjvr5LT/TbxWOvTbzy7T
MD5:	088C766B8FD5F69EF3C12C44BA26E546
SHA1:	57DC9657A1114925E0E25A5963903BA570AF4CFB
SHA-256:	8615970C2E5C9C9CECDFDBCBB582651363DE32F2872C091418DAE8438F935568
SHA-512:	80604ADB0290AEA6EE33039C88D705B5DD8298B2A1CE1F0FAB91AEDA1BA3A53FDA575B8F151AB0F31D0DDE931C50FFE92B38B5247037BDF6AA1D787BED79AE37
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....B..&...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=Y."....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=Y."....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=Y."....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=Y."..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=Y."...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........B.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2824
Entropy (8bit):	4.874328448099535
Encrypted:	false
SSDEEP:	24:u6boMhwMQ7YbFblW+lonv9rhK7CspZDO0/vcxv9nwCPvS6pXCd8ghlHtgc8ApsNa:upMhwMQUbVlpydh9AMPqZl+nN9CUN3PA
MD5:	57B0B7CD40DE0A6953AE2B94821E034A
SHA1:	7935AB84484B3E2C440CE96B2A221DD670C98B54
SHA-256:	4455ABE0CDF664A76AFF75CA6BFFC59F319785899B9CA2B096C4C3B8835599EF
SHA-512:	6027949DDF6E28D899B74BB43198BA7D4C7DFD329E44D9A71EAA7D0F2D71C4F64A51A1D522619FB9E1FB248E7BD60945B3204271DAC8A0F2BD7CDF923182D315
Malicious:	false
Reputation:	low
URL:	https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/css/Create_new_account-style.css
Preview:	/* Google Open Sans font link /..@import url('https://fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap');..../ Global CSS /.. {.. margin: 0;.. padding: 0;.. box-sizing: border-box;..}....body {.. font-family: 'Open Sans', sans-serif;.. background-color: #f0f2f5;..}.....container {.. width: 100%;.. max-width: 400px;.. margin: 0 auto;..}....ul {.. margin: 0;.. padding: 0;..}....a, a:hover {.. text-decoration: none;..}..../* Facebook Sign Up */...fb-signup {.. background-color: #f0f2f5;.. height: 100vh;.. display: flex;.. justify-content: center;.. align-items: center;..}.....fb-signup .main-part .signup-info {.. background-color: white;.. box-shadow: 0 2px 10px rgba(0, 0, 0, 0.1);.. border-radius: 10px;.. overflow: hidden;.. width: 100%;..}.....fb-signup .intro {.. background-color: #1877f2;.. color: white;.. text-align: center;.. padding: 20px;..}.....fb-signup .intro h1 {.. font-si

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2034
Entropy (8bit):	4.929464458764752
Encrypted:	false
SSDEEP:	24:lQlW9boMhwMQ+jvS3Gosnv9nejPv9nWdY5+8jab+nNvp4XNFxDjswYTBsDjFFa:lQA2MhwMQiqqnyP4do76XvOByi
MD5:	70C5B55F608BA68AB195C9F58F18DEF4
SHA1:	A63021D42256DAA1EC3A9DCA3DF8308B14F2CF11
SHA-256:	6014C52309464CA35836079E111B58FBE057C86DDF6C2E58709E2B96836E2D71
SHA-512:	2F4FC1A3E7770A7DCE1213707B1CD3289D050D93E08FAB7077ED446D7DF5ADFAD5529E92D6172F2D913632A79734E34A809E3748A9693D38306C433CA5F14956
Malicious:	false
Reputation:	low
URL:	https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/css/facebook_login_page%20style.css
Preview:	/* CSS font link /..@import url('https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap');..../ Global CSS /.. {.. margin: 0;.. padding: 0;.. box-sizing: border-box;..}....body {.. font-family: 'Roboto', sans-serif;.. display: flex;.. align-items: center;.. justify-content: center;.. height: 100vh;.. background-color: #f0f2f5;..}.....container {.. width: 980px;.. display: flex;.. justify-content: space-between;..}.....flex-class {.. display: flex;.. justify-content: space-between;.. width: 100%;..}.....left {.. width: 50%;..}.....left h1 {.. font-size: 48px;.. color: #1877f2;.. margin-bottom: 10px;..}.....left h2 {.. font-size: 24px;.. color: #1c1e21;.. font-weight: normal;..}.....right {.. width: 40%;.. background-color: #fff;.. padding: 20px;.. border-radius: 10px;.. box-shadow: 0 2px 4px rgba(0, 0, 0, 0.1);..}...

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 835 x 835, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	421961
Entropy (8bit):	7.9768311719029095
Encrypted:	false
SSDEEP:	12288:fs3CNyIQNLHEP8GIwIAQMGSJVAcEiQFIw9nBxZQ:fs3iyfSP8GINAQiIcEixwXxZQ
MD5:	16B6F2BD6D5DD6F3CB83E3B3C4BA83BE
SHA1:	1C0E1E9EE05C29F4D9D5B193BEEAAD3B6BEE1A00
SHA-256:	B5895A2C09CBDB67504835788A21E8A7B03170A38BDB53DE7A6C1C1DA41D5E00
SHA-512:	D6B0C5B7A31C97816347FED117EBF3B16FEDAE6B3136BFD82D29A936E2E2B83B35315571B98A8983B41227C90232DEBA730F6E0D854B4F45DAE68CA8EFFAC039
Malicious:	false
Reputation:	low
URL:	https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/img/facebook-favicon.png
Preview:	.PNG........IHDR...C...C.....o..... .IDATx.....kv.t....P...!.2.P.,%.(to.J!X.".X:o.Hl).!...z._P<..b.!h..n...K..j.@.J.*..-%..EJ(%..}.u].?..}......3...y>..^?.....y...."\..y.....H.....e..l=.......@... ".......d....X..-.........z..(.?.,...nV..&?.....j.kn....gb.X.I.d....9..d; 3...>_.<.Dm..s?nv..N.l[.3B...:.q....2....L\....j.a.z..-...l..D.,.4c..>...W..b..2.....)....xD.?c.b.T./..J-..&b. .F...w...........I..1...*^>..s.....S.0.y...3.YvH.[;..y.vj.H....>+..?..Ol.Rl...n.,.Tu2U..6..HvlZ..-.vW.$.B......q......E3..`.........A...6M...........k.Rb{.@J..l.....N..}p....<bY.xb..h...?..{.................?...?.........[......L\|.....~l.....A.......'1...........]N_.$,..?....a....\|.....Y.d...$.]......t...K...U.d.6m........I~..nJc/t.,..g~.B....e.N.........ohC..W.5L...cMP'.=.&.[...6.R.:W.^U{.F..v.....f.>9....f.5...+\|..R....{.....@H.;.?.Y\..k..69.:)6O....&..N{N{....q.....@N./,.....l.R\|lxj..9Y.O..0s~6.`.w..L.T..i'.....T.sde.H.8.>.b........\|Q.........o..[.~..?...C

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1867
Entropy (8bit):	4.582647300202378
Encrypted:	false
SSDEEP:	24:hPCCWkCMtMGCUTN/FN/Q2lW9bqxWnkayBDuVUFNr6tVE+ZgRsaMB:tAk+ZwNtNjAyWnk7BDuSFZQzgBa
MD5:	C1FDB63541893782CE6867A4EED1804D
SHA1:	AE2D771C7DA96C28332D2F98A9198233CC6BF94B
SHA-256:	ECBA14F746635E85E0633C48B936EB3B88B9CA558E18032FB38F33E0FF2C6F32
SHA-512:	677D652AA92984DE46CCED6A4D78DFC9B0020C1B81FC61462748A8CE3ED8F35B6776D1DEC45D70C835AA6043E1AD46114FB21EFC737B1069E9AC08E01C341D63
Malicious:	false
Reputation:	low
URL:	https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html
Preview:	<!DOCTYPE html>..<html lang="en">....<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Facebook Login</title>.. Linking CSS File here -->.. <link rel="stylesheet" href="css/facebook_login_page style.css">.. linking Google Fonts here -->.. <link rel="preconnect" href="https://fonts.googleapis.com">.. <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>.. <link.. href="https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap".. rel="stylesheet">.. linking favicon -->.. <link rel="icon" href="img/facebook-favicon.png">..</head>....<body>.. <div class="container">.. <div class="flex-class">.. <div class="left">.. <h1>Facebook</h1>.. <h2>Facebook helps you connect and share with the people in your life.</h2>..

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 835 x 835, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	421961
Entropy (8bit):	7.9768311719029095
Encrypted:	false
SSDEEP:	12288:fs3CNyIQNLHEP8GIwIAQMGSJVAcEiQFIw9nBxZQ:fs3iyfSP8GINAQiIcEixwXxZQ
MD5:	16B6F2BD6D5DD6F3CB83E3B3C4BA83BE
SHA1:	1C0E1E9EE05C29F4D9D5B193BEEAAD3B6BEE1A00
SHA-256:	B5895A2C09CBDB67504835788A21E8A7B03170A38BDB53DE7A6C1C1DA41D5E00
SHA-512:	D6B0C5B7A31C97816347FED117EBF3B16FEDAE6B3136BFD82D29A936E2E2B83B35315571B98A8983B41227C90232DEBA730F6E0D854B4F45DAE68CA8EFFAC039
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...C...C.....o..... .IDATx.....kv.t....P...!.2.P.,%.(to.J!X.".X:o.Hl).!...z._P<..b.!h..n...K..j.@.J.*..-%..EJ(%..}.u].?..}......3...y>..^?.....y...."\..y.....H.....e..l=.......@... ".......d....X..-.........z..(.?.,...nV..&?.....j.kn....gb.X.I.d....9..d; 3...>_.<.Dm..s?nv..N.l[.3B...:.q....2....L\....j.a.z..-...l..D.,.4c..>...W..b..2.....)....xD.?c.b.T./..J-..&b. .F...w...........I..1...*^>..s.....S.0.y...3.YvH.[;..y.vj.H....>+..?..Ol.Rl...n.,.Tu2U..6..HvlZ..-.vW.$.B......q......E3..`.........A...6M...........k.Rb{.@J..l.....N..}p....<bY.xb..h...?..{.................?...?.........[......L\|.....~l.....A.......'1...........]N_.$,..?....a....\|.....Y.d...$.]......t...K...U.d.6m........I~..nJc/t.,..g~.B....e.N.........ohC..W.5L...cMP'.=.&.[...6.R.:W.^U{.F..v.....f.>9....f.5...+\|..R....{.....@H.;.?.Y\..k..69.:)6O....&..N{N{....q.....@N./,.....l.R\|lxj..9Y.O..0s~6.`.w..L.T..i'.....T.sde.H.8.>.b........\|Q.........o..[.~..?...C

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
Category:	downloaded
Size (bytes):	18536
Entropy (8bit):	7.986571198050597
Encrypted:	false
SSDEEP:	384:IhocXmE6eM871P7td/mcOKA454H2orQEONKrOqxw:f6WeL1P//9D54WCCKc
MD5:	8EFF0B8045FD1959E117F85654AE7770
SHA1:	227FEE13CEB7C410B5C0BB8000258B6643CB6255
SHA-256:	89978E658E840B927DDDB5CB3A835C7D8526ECE79933BD9F3096B301FE1A8571
SHA-512:	2E4FB65CAAB06F02E341E9BA4FB217D682338881DABA3518A0DF8DF724E0496E1AF613DB8E2F65B42B9E82703BA58916B5F5ABB68C807C78A88577030A6C2058
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......Hh..........H..............................Z..\|.`..J.T..<.....H..U..Z...x.6.$..0. ..t. ..I....p.0.VU.......1....AQ...d..x.....R..4.-.c..C$fUc.c..IX..@..~g.xs.....%...O...eJ.w..U.\|.......%..{.......U+..T#.S......`.n.....V.w.4..~P"..zk.%..../........=3...F.........V.FL..;Bc.........A.Uk.U1.b!Y.BH.DL...s.s...F.m.9a..GJ..1..#.`m5..DI..X5#.........B.Akm.....&..0...{.L.....G......-(.......O4.@3....=......f..l...$.....j..NO...e.Y.tJ2J>F.(.c....08..e...~....D2S7s:.G'Gm........!.7.........r.c.`,.....~.).......c>1.......Y.g2^...T-1.7./r./....>...g.ov@u.?.U.+._...'M..,.,g....!g..9."..yBF.#r+.Ps...%.d=....U...5.b.$:`.4R.II.<A....Q)....e...k.....M.8.z....+.....5}..F........F.d._...].~-](.Lf....Y..W....;-z...;. .@x._v../.%UIm....=s...P.C....G...^..Q.!g.!b._.P....at..?.}....t.z...O(..Y6..R.2.X....k.R..K.gw(.F.K?m..R...7....dj..7. .r.U..be.4......8.].w.B..B......Y..:..8.N..U...NEm...\.^q..f}.......{..6.". ...y-.Y...N.+.M E..`......R.$T

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9981
Entropy (8bit):	3.4611426868651245
Encrypted:	false
SSDEEP:	96:cOEZrC+BTwn7Jw0nKinSu2VxsHGDR0JIMeJ:cOEZrKlYu24HLaM6
MD5:	53421DF57143DBA064863E4EA95626F9
SHA1:	36B91F7B5D2BDFB4D53C00C4046654E31FDDB573
SHA-256:	270BAEEA8B6BA845BF9F8628AC243E3D5477EA989ADAE94555DE4DEB0C2423AB
SHA-512:	AB8C6C9AA2BB8AEF1AEC6E79063176EA50EC7127FF5B2234EFD6BEF5B06BAE3E858256171C8B230C5F0A3615C75EBDC2F9E178C2EF15FC7DCF624D4B914662BE
Malicious:	false
Reputation:	low
URL:	https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>FB Sign Up</title>.. Favicon linking -->.. <link rel="icon" type="image/x-icon" href="img/facebook-favicon.png">.. Font Awesome icon linking -->.. <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css">.. main css file linking here -->.. <link rel="stylesheet" href="css/Create_new_account-style.css">..</head>..<body>.. <div class="fb-signup">.. <div class="container">.. <div class="main-part">.. <div class="signup-info">.. <form action="">.. <div class="intro">.. <h1>Sign Up</h1>.. <h5>It's quick and easy.</h5>.. <p></p>.. </div>.. <div class="

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	4.517720251317943
Encrypted:	false
SSDEEP:	3:7jZoS8/ZoSG38yuUwm6NCnStkORnmNhn:PZoS8/ZoS5yuUwm6QnStHRn6h
MD5:	C2B8C8FBB9E2EA1D40402199CD031DDA
SHA1:	B9766D5315B1F99EC3F58EAB1750D9694D771529
SHA-256:	69DB78B2BF107B8F6CE6ED0805D63D8F25948C34EA2AAC7FF385FF058E6F5DF2
SHA-512:	EE8738C6F83833D6659BB3B3D1B6B44C80EFFDAD2DF5868F9E879563DC10BC0C7AF80A0B05790B9257D407BF098AD5CFC2AC61DBADC07EB28E76562CD514D76E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISOgkEl9MbL77OGBIFDZFhlU4SBQ2RYZVOEgUN0klUWBIFDXe-PlUSBQ0tIlB-EgUNUAuvsBIFDTWGVBw=?alt=proto
Preview:	Cj8KBw2RYZVOGgAKBw2RYZVOGgAKBw3SSVRYGgAKBw13vj5VGgAKBw0tIlB+GgAKBw1QC6+wGgAKBw01hlQcGgA=

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:WZoS+Nhn:WZoSyh
MD5:	A2432DC721D79CB02E73D270CE7E1EAA
SHA1:	5A3C7BE77E9108ACA1B39E6BCD336EAAE6A51080
SHA-256:	CE43C8C02C05A92B3E20FAB138AAD31B9FD54B92848913449D09924E839BB80E
SHA-512:	0091B8D2F943169BDF1DD01D07A31F683F3B353D4EAADF1F7973AA79A989E349F53D6518AC612A856D89AB1539923C9FFAABB13E7CF8BEDF450E128342FF3298
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmP9c0YqCCz0hIFDZFhlU4SBQ01hlQc?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw01hlQcGgA=

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	17451
Entropy (8bit):	5.359104590429714
Encrypted:	false
SSDEEP:	192:a/KWbqXV6uyErbqGIwYjc1Yk/MoBqNf6uyCrbqGIwYpa1GT/7Hqqmg6uy5rbqGIe:kaHq904Zq9H3gq98
MD5:	71B2730C1CECF7A0768725BD944422C5
SHA1:	8DFA323CB988538BCE8556A99BB5BD556E3593D1
SHA-256:	851699A18B631A7BD68EFC99598701293A6065B463FCED7B68D8D6D9227BD8E7
SHA-512:	E593A74CE83AAB1F8B9CA891B0D54BDBCC270202173C8842589B65F06E780A3384AF9BB3A79856AC71A01341D691E445371E1DEE8F6F3CA5DA2D883EC1EAD296
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	28178
Entropy (8bit):	5.4321866714906415
Encrypted:	false
SSDEEP:	768:yv9vAv9vIvDvHvzHFDfnmtpAtJBkkhDlZRkIdc+kOKVL4QiYvEf+vwvdvmv0vcv5:0E
MD5:	D253F46DD859DFE79FE365993AA2765B
SHA1:	53D211429ACD699E4B9C59BE93136410651346FE
SHA-256:	AFDD76F6919DC340E54A1045E6F4A8FC840A922C8EFD1D07CC5BCDF448373A66
SHA-512:	E3CFE209803E6F35AC18AB948940D398DFEB8354478A3F2F73C15DAF8FD5740B74046F907305EFC9F3B8AA1988F551F6389E5C15FBAAC8A1D97F04C64B906D9C
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 100;. font-display: swap;. src: url(https://font

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
Category:	downloaded
Size (bytes):	18596
Entropy (8bit):	7.988788312296589
Encrypted:	false
SSDEEP:	384:h5D5WUhNanar/Z19V6iGCYIqoPfHwfr13GPgqbrxremyFKKWB:h/NaOrBGCYIBPfQD1xqPhl
MD5:	C83E4437A53D7F849F9D32DF3D6B68F3
SHA1:	FABEA5AD92ED3E2431659B02E7624DF30D0C6BBC
SHA-256:	D9BADA3A44BB2FFA66DEC5CC781CAFC9EF17ED876CD9B0C5F7EF18228B63CEBB
SHA-512:	C2CA1630F7229DD2DEC37E0722F769DD94FD115EEFA8EEBA40F9BB09E4FDAB7CC7D15F3DEEA23F50911FEAE22BAE96341A5BACA20B59C7982CAF7A91A51E152F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......H...........H=................................\|.`..J.H..<........>..Z...x.6.$..0. ..~. ..)...%.m..t.D<...U.c....D....@........@e..a..R./<...p..q..q....S<.nm...X..(ER....e.....O.?Q_..FYH......ml.E..?;X0>.f.Y.,.n.a...._h8c.006U.cS..3.m.Or..I9..5.;.=..'!..c.O...W.K..f....k..&Xq..Y?.r...%.S..y.:q.......uD.d.R..'..Q,L.... e`..=?.{...e%{.....3+$.....NkF2...... ._}..2]....,.F.u.S4O.~w).G..../]}6.nVwKj.h@........5.7P....i..r........U?.........q..Cm......g...\.zu.....P..\|....5G$...4k$..L..g..".y..?..6...O...e..@..0TYh..v........M.....#B...O.i.G$.Bq..m.A.s~...A...c.....25K.....B..<..w.A....G.O...A......A,y"q....q<....N..{Ta..!.\|vzo.;9.5>.>....7I.i.Ld.4..y...].g.....'m_(...O-..}.K.(....R..2.q.z9.D..]..$.#$.:x..:{..m.OF...K[J. ......lpH.#%V....4.;l.<..J.6.T..a...I..\|..zj.k.-...y...#..e.1,s....<.HX.....z{L....'.$. "..tY..m.<.\8P. a.......x.W\.b.%...RA.\.... M.......v1......#...............`.c..%.Nc.d.qP.68....$<.O.S_7...U.].jn>@.3.c..wO..>.>a.qg....\..kb.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 06:20:35.064374924 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:35.064440966 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:35.189363003 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:43.566960096 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:43.567006111 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:43.567068100 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:43.567331076 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:43.567341089 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:43.567651033 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:43.567660093 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:43.567711115 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:43.567887068 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:43.567898035 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.069643974 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.077357054 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.114159107 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.130979061 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.200222969 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.200242996 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.200825930 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.200840950 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.201397896 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.201410055 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.201477051 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.204766035 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.204865932 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.215929031 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.216005087 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.219110966 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.219304085 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.219963074 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.219973087 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.271889925 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.271903992 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.271912098 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.317877054 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.361148119 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.361413002 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.361468077 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.361483097 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.363367081 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.363517046 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.378159046 CEST	49709	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.378179073 CEST	443	49709	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.414566994 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.459433079 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.553946972 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.554980040 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.555067062 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.555110931 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.555130959 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.555202007 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.567125082 CEST	49710	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:44.567145109 CEST	443	49710	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:44.672297955 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:44.672312975 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:44.790942907 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:45.139413118 CEST	49716	443	192.168.2.5	142.250.184.196
Sep 29, 2024 06:20:45.139461040 CEST	443	49716	142.250.184.196	192.168.2.5
Sep 29, 2024 06:20:45.139543056 CEST	49716	443	192.168.2.5	142.250.184.196
Sep 29, 2024 06:20:45.140131950 CEST	49716	443	192.168.2.5	142.250.184.196
Sep 29, 2024 06:20:45.140145063 CEST	443	49716	142.250.184.196	192.168.2.5
Sep 29, 2024 06:20:45.801765919 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:45.801810980 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:45.801896095 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:45.802653074 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:45.802670002 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:45.855602980 CEST	443	49716	142.250.184.196	192.168.2.5
Sep 29, 2024 06:20:45.861936092 CEST	49716	443	192.168.2.5	142.250.184.196
Sep 29, 2024 06:20:45.861963987 CEST	443	49716	142.250.184.196	192.168.2.5
Sep 29, 2024 06:20:45.864053011 CEST	443	49716	142.250.184.196	192.168.2.5
Sep 29, 2024 06:20:45.864155054 CEST	49716	443	192.168.2.5	142.250.184.196
Sep 29, 2024 06:20:46.375282049 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.381933928 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.381953955 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.382591009 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.385481119 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.385608912 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.385958910 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.431408882 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.442662954 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:46.442763090 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:46.446697950 CEST	49716	443	192.168.2.5	142.250.184.196
Sep 29, 2024 06:20:46.446945906 CEST	443	49716	142.250.184.196	192.168.2.5
Sep 29, 2024 06:20:46.495762110 CEST	49716	443	192.168.2.5	142.250.184.196
Sep 29, 2024 06:20:46.495811939 CEST	443	49716	142.250.184.196	192.168.2.5
Sep 29, 2024 06:20:46.528548002 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.529366970 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.529457092 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.529478073 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.531021118 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.531071901 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.531079054 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.534455061 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.534502983 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.534584045 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.534590960 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.535650015 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.535664082 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.535670042 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.535736084 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.535741091 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.540432930 CEST	49716	443	192.168.2.5	142.250.184.196
Sep 29, 2024 06:20:46.556901932 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.559566975 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.559588909 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.615813971 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.616509914 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.616620064 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.616647959 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.617728949 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.617811918 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.617819071 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.619735956 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.620265007 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.620271921 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.620872021 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.620925903 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.620932102 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.622116089 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.623239994 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.623298883 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.623311043 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.623528004 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.624566078 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.625972033 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.626045942 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.626059055 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.627002954 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.627073050 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.627082109 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.627882957 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.628571987 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.628633022 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.628652096 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.629378080 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.629436970 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.629448891 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.629489899 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.629822016 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.675504923 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.675565958 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.722517014 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.732553959 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.732569933 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.732652903 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.732697964 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.732712984 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.732764959 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.732764959 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.732778072 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.732791901 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.732857943 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.746233940 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.746247053 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.746295929 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.746318102 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.746371984 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.746390104 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.746427059 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.746427059 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.761364937 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.761395931 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.761544943 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.761563063 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.761646986 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.787638903 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.787667036 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.787766933 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.787766933 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.787782907 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.787843943 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.822778940 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.822813034 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.822907925 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.822922945 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.822978973 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.823158979 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.827282906 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.827313900 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.827408075 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.827414036 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.827447891 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.827465057 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.831650972 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.831677914 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.831780910 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.831780910 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.831787109 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.831913948 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.836148024 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.836183071 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.836268902 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.836273909 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.836327076 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.836327076 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.839775085 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.839802980 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.839862108 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.839869022 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.839909077 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.839968920 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.843153000 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.843179941 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.843219995 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.843234062 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.843307972 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.843307972 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.920689106 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.920726061 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.920855999 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.920855999 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.920874119 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.921283007 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.929606915 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.929636002 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.929687023 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.929702997 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.929743052 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.929749966 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.937463045 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.937499046 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.937622070 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.937622070 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.937634945 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.937690020 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.944541931 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.944571972 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.944706917 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.944706917 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.944717884 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.944869041 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.958648920 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.958679914 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.958734035 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.958750963 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.958798885 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.958798885 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.967268944 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.967299938 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.967370033 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.967376947 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.967428923 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.967483044 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.977768898 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.977802992 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.977885008 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.977894068 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.977962017 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.977962017 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.986288071 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.986321926 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.986382008 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.986388922 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:46.986443043 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:46.986443043 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.009637117 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.009670019 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.009716988 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.009732008 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.009803057 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.009803057 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.013767004 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.013796091 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.013885975 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.013891935 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.013945103 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.013945103 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.017741919 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.017765999 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.017860889 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.017878056 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.017931938 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.019342899 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.019440889 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.019480944 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.019506931 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.019782066 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.022517920 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.022543907 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.022595882 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.022608042 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.022618055 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.022685051 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.022685051 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.022700071 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.022713900 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.022782087 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.093622923 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.161654949 CEST	49718	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:47.161695957 CEST	443	49718	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:47.707727909 CEST	49719	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:47.707839012 CEST	443	49719	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:47.707935095 CEST	49719	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:47.718935013 CEST	49719	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:47.718972921 CEST	443	49719	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:47.808018923 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:47.808085918 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:47.808227062 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:47.808757067 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:47.808768988 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.386894941 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.387655973 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.387677908 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.388768911 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.388853073 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.390774012 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.390831947 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.391319036 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.391325951 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.419622898 CEST	443	49719	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:48.419739008 CEST	49719	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:48.428256035 CEST	49719	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:48.428284883 CEST	443	49719	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:48.428729057 CEST	443	49719	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:48.439985991 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.491303921 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.515993118 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.516000986 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.516022921 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.516069889 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.516088963 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.516098976 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.516103983 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.516124964 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.564956903 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.634717941 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.634727955 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.634782076 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.634794950 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.634828091 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.634840965 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.634896994 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.634896994 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.639415979 CEST	443	49719	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:48.639513016 CEST	49719	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:48.657741070 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.657759905 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.657847881 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.657856941 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.657938004 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.696269989 CEST	49719	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:48.717791080 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.717811108 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.717910051 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.717921019 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.717966080 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.731420994 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.731441975 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.731503963 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.731511116 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.731601954 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.739444971 CEST	443	49719	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:48.752633095 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.752650023 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.752738953 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.752746105 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.752851963 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.764576912 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.764597893 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.764692068 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.764698982 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.764870882 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.803230047 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.803248882 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.803354979 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.803368092 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.803416014 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.811533928 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.811549902 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.811626911 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.811635971 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.811712980 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.818331003 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.818346024 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.818435907 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.818443060 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.818519115 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.824579954 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.824594975 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.824676037 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.824682951 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.824747086 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.841991901 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.842012882 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.842091084 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.842104912 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.842143059 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.847548008 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.847563982 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.847640991 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.847650051 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.847709894 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.883323908 CEST	443	49719	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:48.883420944 CEST	443	49719	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:48.883502960 CEST	49719	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:48.883658886 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.883676052 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.883747101 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.883759975 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.883805990 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.889200926 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.889218092 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.889275074 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.889285088 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.889344931 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.892303944 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.892349958 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.892430067 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.892436981 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.892484903 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.896677017 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.896692991 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.896894932 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.896902084 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.896971941 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.900285959 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.900300980 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.900414944 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.900420904 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.900490046 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.903923035 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.903938055 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.904103994 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.904112101 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.904155016 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.929828882 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.929846048 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.929924965 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.929934978 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.929999113 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.933094978 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.933110952 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.933245897 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.933254004 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.933306932 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.972362995 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.972400904 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.972455025 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.972470045 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.972549915 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.975644112 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.975661039 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.975737095 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.975743055 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.975984097 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.979099035 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.979115963 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.979212046 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.979218960 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.979399920 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.981595039 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.981626034 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.981678009 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.981683969 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.981713057 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.981733084 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.984358072 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.984375000 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.984508038 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:48.984524012 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:48.984574080 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:49.275857925 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:49.279205084 CEST	49719	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:49.279311895 CEST	443	49719	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:49.279345036 CEST	49719	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:49.279364109 CEST	443	49719	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:49.549768925 CEST	49720	443	192.168.2.5	185.199.110.153
Sep 29, 2024 06:20:49.549789906 CEST	443	49720	185.199.110.153	192.168.2.5
Sep 29, 2024 06:20:49.571217060 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:49.571264029 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:49.571432114 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:49.571830988 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:49.571847916 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:50.209822893 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:50.209898949 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:50.211456060 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:50.211467981 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:50.211699963 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:50.212959051 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:50.259402990 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:50.486135960 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:50.486215115 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:50.486305952 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:50.552033901 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:50.552073956 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:50.552089930 CEST	49722	443	192.168.2.5	184.28.90.27
Sep 29, 2024 06:20:50.552098989 CEST	443	49722	184.28.90.27	192.168.2.5
Sep 29, 2024 06:20:55.727252960 CEST	443	49716	142.250.184.196	192.168.2.5
Sep 29, 2024 06:20:55.727314949 CEST	443	49716	142.250.184.196	192.168.2.5
Sep 29, 2024 06:20:55.727524996 CEST	49716	443	192.168.2.5	142.250.184.196
Sep 29, 2024 06:20:56.239712954 CEST	49716	443	192.168.2.5	142.250.184.196
Sep 29, 2024 06:20:56.239734888 CEST	443	49716	142.250.184.196	192.168.2.5
Sep 29, 2024 06:20:56.280194044 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.280245066 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.280301094 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.280431986 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.280441046 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.280631065 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.280733109 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.280742884 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.280934095 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.280942917 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.796892881 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.800359011 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.804563999 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.804580927 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.804990053 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.804999113 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.805006027 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.805433035 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.806098938 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.806173086 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.807451963 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.807523012 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.807874918 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.851423025 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.861901999 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.923269033 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:56.924082994 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:56.928523064 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:56.929157972 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:56.931967974 CEST	49731	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:56.932009935 CEST	443	49731	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:56.932173014 CEST	49731	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:56.933281898 CEST	49731	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:56.933300972 CEST	443	49731	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:56.939806938 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.939867020 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.939959049 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.939970016 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.940234900 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.940263033 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.940309048 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.940315962 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.940395117 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.941020012 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.941066980 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.941221952 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.941230059 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.944605112 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:56.944642067 CEST	443	49730	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:56.944727898 CEST	49730	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:57.397790909 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:57.411617994 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:57.411676884 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:57.411756992 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:57.412373066 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:57.412385941 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:57.443397999 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:57.520942926 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:57.521028996 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:57.521341085 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:57.521409988 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:57.552679062 CEST	443	49731	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:57.552764893 CEST	49731	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:57.891248941 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:57.914644003 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:57.914664030 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:57.918976068 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:57.919066906 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:57.927304029 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:57.927597046 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:57.927613974 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:57.971395969 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:57.973694086 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:57.973716021 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.022006035 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.044358969 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.044486046 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.044538975 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.044553995 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.044682026 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.044727087 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.044734955 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.045325041 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.045383930 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.045391083 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.045537949 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.045588970 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.045595884 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.051508904 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.051534891 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.051570892 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.051579952 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.051628113 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.138025999 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.138421059 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.138478994 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.138509035 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.138673067 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.138735056 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.138742924 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.140870094 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.140924931 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.140934944 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.141221046 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.141273022 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.141279936 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.141413927 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.141463041 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.141469955 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.142297029 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.142345905 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.142353058 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.142421961 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:58.142467022 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.212771893 CEST	49729	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:20:58.212794065 CEST	443	49729	185.199.108.153	192.168.2.5
Sep 29, 2024 06:20:58.226155996 CEST	49732	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:58.226182938 CEST	443	49732	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:59.085891008 CEST	49731	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:59.085926056 CEST	443	49731	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:59.086368084 CEST	443	49731	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:59.086422920 CEST	49731	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:59.100159883 CEST	49731	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:59.100209951 CEST	443	49731	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:59.100646973 CEST	49731	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:59.100656033 CEST	443	49731	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:59.493643999 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:59.493686914 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:59.493760109 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:59.494715929 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:20:59.494724989 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:20:59.568615913 CEST	443	49731	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:59.569602013 CEST	49731	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:59.569787025 CEST	443	49731	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:59.569844007 CEST	443	49731	23.1.237.91	192.168.2.5
Sep 29, 2024 06:20:59.569843054 CEST	49731	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:20:59.569896936 CEST	49731	443	192.168.2.5	23.1.237.91
Sep 29, 2024 06:21:00.003683090 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.114186049 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.617192030 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.617260933 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.621236086 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.621275902 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.621331930 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.622318983 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.622498035 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.622715950 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.622735977 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.710428953 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.734257936 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.734639883 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.734699965 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.734719038 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.734877110 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.734936953 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.734949112 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.735311031 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.735368013 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.735378027 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.736016989 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.736118078 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.736129999 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.739084959 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.739145041 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.739155054 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.739461899 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.739520073 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.739530087 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.826776028 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.826853991 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.826878071 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.827616930 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.827676058 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.827687979 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.827836037 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.827886105 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.827897072 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.828556061 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.828630924 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.828641891 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.829060078 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.829107046 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.829118013 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.829969883 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.830022097 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.830033064 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.830802917 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.830859900 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.830873013 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.831020117 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.831068993 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.831079960 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.831830978 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.831887007 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.831897974 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.832652092 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.832717896 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.832729101 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.832886934 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.832937002 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.832947016 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.833614111 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.833664894 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.833674908 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.913558960 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.918840885 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.919362068 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.919435024 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.919452906 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.920586109 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.920638084 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.920650959 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.921506882 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.921571016 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.921581984 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.921657085 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.922439098 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.922457933 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.922498941 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.923353910 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.923372984 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.923413038 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.923438072 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.924199104 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.924261093 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.924273014 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.924330950 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.925120115 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.925175905 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.925196886 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.925242901 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.925379992 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:00.925426006 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.925466061 CEST	49736	443	192.168.2.5	104.18.11.207
Sep 29, 2024 06:21:00.925501108 CEST	443	49736	104.18.11.207	192.168.2.5
Sep 29, 2024 06:21:10.667064905 CEST	59757	53	192.168.2.5	162.159.36.2
Sep 29, 2024 06:21:10.671854019 CEST	53	59757	162.159.36.2	192.168.2.5
Sep 29, 2024 06:21:10.671925068 CEST	59757	53	192.168.2.5	162.159.36.2
Sep 29, 2024 06:21:10.671978951 CEST	59757	53	192.168.2.5	162.159.36.2
Sep 29, 2024 06:21:10.676748991 CEST	53	59757	162.159.36.2	192.168.2.5
Sep 29, 2024 06:21:11.121861935 CEST	53	59757	162.159.36.2	192.168.2.5
Sep 29, 2024 06:21:11.122494936 CEST	59757	53	192.168.2.5	162.159.36.2
Sep 29, 2024 06:21:11.128166914 CEST	53	59757	162.159.36.2	192.168.2.5
Sep 29, 2024 06:21:11.128216982 CEST	59757	53	192.168.2.5	162.159.36.2
Sep 29, 2024 06:21:35.529016018 CEST	59762	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:21:35.529069901 CEST	443	59762	185.199.108.153	192.168.2.5
Sep 29, 2024 06:21:35.529213905 CEST	59762	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:21:35.529927015 CEST	59762	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:21:35.529944897 CEST	443	59762	185.199.108.153	192.168.2.5
Sep 29, 2024 06:21:35.985137939 CEST	443	59762	185.199.108.153	192.168.2.5
Sep 29, 2024 06:21:35.985461950 CEST	59762	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:21:35.985476971 CEST	443	59762	185.199.108.153	192.168.2.5
Sep 29, 2024 06:21:35.986049891 CEST	443	59762	185.199.108.153	192.168.2.5
Sep 29, 2024 06:21:35.986577988 CEST	59762	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:21:35.986706018 CEST	443	59762	185.199.108.153	192.168.2.5
Sep 29, 2024 06:21:36.033920050 CEST	59762	443	192.168.2.5	185.199.108.153
Sep 29, 2024 06:21:45.184700966 CEST	59766	443	192.168.2.5	142.250.185.132
Sep 29, 2024 06:21:45.184760094 CEST	443	59766	142.250.185.132	192.168.2.5
Sep 29, 2024 06:21:45.184887886 CEST	59766	443	192.168.2.5	142.250.185.132
Sep 29, 2024 06:21:45.185251951 CEST	59766	443	192.168.2.5	142.250.185.132
Sep 29, 2024 06:21:45.185269117 CEST	443	59766	142.250.185.132	192.168.2.5
Sep 29, 2024 06:21:45.831108093 CEST	443	59766	142.250.185.132	192.168.2.5
Sep 29, 2024 06:21:45.884805918 CEST	59766	443	192.168.2.5	142.250.185.132
Sep 29, 2024 06:21:45.885823965 CEST	59766	443	192.168.2.5	142.250.185.132
Sep 29, 2024 06:21:45.885845900 CEST	443	59766	142.250.185.132	192.168.2.5
Sep 29, 2024 06:21:45.886524916 CEST	443	59766	142.250.185.132	192.168.2.5
Sep 29, 2024 06:21:45.887517929 CEST	59766	443	192.168.2.5	142.250.185.132
Sep 29, 2024 06:21:45.887618065 CEST	443	59766	142.250.185.132	192.168.2.5
Sep 29, 2024 06:21:45.940212965 CEST	59766	443	192.168.2.5	142.250.185.132
Sep 29, 2024 06:21:55.766860008 CEST	443	59766	142.250.185.132	192.168.2.5
Sep 29, 2024 06:21:55.766927004 CEST	443	59766	142.250.185.132	192.168.2.5
Sep 29, 2024 06:21:55.767014027 CEST	59766	443	192.168.2.5	142.250.185.132
Sep 29, 2024 06:21:56.239511013 CEST	59766	443	192.168.2.5	142.250.185.132
Sep 29, 2024 06:21:56.239551067 CEST	443	59766	142.250.185.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 06:20:41.858505011 CEST	53	62433	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:41.948936939 CEST	53	59324	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:42.983761072 CEST	53	62149	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:43.556545019 CEST	56215	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:20:43.556813002 CEST	61187	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:20:43.565716982 CEST	53	56215	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:43.566255093 CEST	53	61187	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:44.427684069 CEST	53	62515	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:44.440519094 CEST	53	61893	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:45.117981911 CEST	64962	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:20:45.118558884 CEST	52743	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:20:45.137053967 CEST	53	64962	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:45.137836933 CEST	53	52743	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:47.765278101 CEST	50658	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:20:47.765877962 CEST	63965	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:20:47.773813009 CEST	53	50658	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:47.774632931 CEST	53	63965	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:57.396894932 CEST	53686	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:20:57.397327900 CEST	63001	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:20:57.409405947 CEST	53	53686	1.1.1.1	192.168.2.5
Sep 29, 2024 06:20:57.410502911 CEST	53	63001	1.1.1.1	192.168.2.5
Sep 29, 2024 06:21:00.625452995 CEST	53	50394	1.1.1.1	192.168.2.5
Sep 29, 2024 06:21:10.666532993 CEST	53	57102	162.159.36.2	192.168.2.5
Sep 29, 2024 06:21:11.137537003 CEST	63806	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:21:11.146203041 CEST	53	63806	1.1.1.1	192.168.2.5
Sep 29, 2024 06:21:35.473277092 CEST	52480	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:21:35.473633051 CEST	65260	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:21:35.480475903 CEST	53	52480	1.1.1.1	192.168.2.5
Sep 29, 2024 06:21:35.481743097 CEST	53	65260	1.1.1.1	192.168.2.5
Sep 29, 2024 06:21:45.177273035 CEST	63304	53	192.168.2.5	1.1.1.1
Sep 29, 2024 06:21:45.183691025 CEST	53	63304	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 06:20:43.556545019 CEST	192.168.2.5	1.1.1.1	0x5886	Standard query (0)	dev-shamsunpavel.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:43.556813002 CEST	192.168.2.5	1.1.1.1	0xa26c	Standard query (0)	dev-shamsunpavel.github.io	65	IN (0x0001)	false
Sep 29, 2024 06:20:45.117981911 CEST	192.168.2.5	1.1.1.1	0xd80b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:45.118558884 CEST	192.168.2.5	1.1.1.1	0x8868	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 06:20:47.765278101 CEST	192.168.2.5	1.1.1.1	0x3674	Standard query (0)	dev-shamsunpavel.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:47.765877962 CEST	192.168.2.5	1.1.1.1	0x1abc	Standard query (0)	dev-shamsunpavel.github.io	65	IN (0x0001)	false
Sep 29, 2024 06:20:57.396894932 CEST	192.168.2.5	1.1.1.1	0x8096	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:57.397327900 CEST	192.168.2.5	1.1.1.1	0x201d	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Sep 29, 2024 06:21:11.137537003 CEST	192.168.2.5	1.1.1.1	0x2f54	Standard query (0)	241.42.69.40.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Sep 29, 2024 06:21:35.473277092 CEST	192.168.2.5	1.1.1.1	0xd2c9	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:21:35.473633051 CEST	192.168.2.5	1.1.1.1	0xc983	Standard query (0)	dev-shamsunpavel.github.io	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:21:45.177273035 CEST	192.168.2.5	1.1.1.1	0x4a84	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 06:20:43.565716982 CEST	1.1.1.1	192.168.2.5	0x5886	No error (0)	dev-shamsunpavel.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:43.565716982 CEST	1.1.1.1	192.168.2.5	0x5886	No error (0)	dev-shamsunpavel.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:43.565716982 CEST	1.1.1.1	192.168.2.5	0x5886	No error (0)	dev-shamsunpavel.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:43.565716982 CEST	1.1.1.1	192.168.2.5	0x5886	No error (0)	dev-shamsunpavel.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:45.137053967 CEST	1.1.1.1	192.168.2.5	0xd80b	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:45.137836933 CEST	1.1.1.1	192.168.2.5	0x8868	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 06:20:47.773813009 CEST	1.1.1.1	192.168.2.5	0x3674	No error (0)	dev-shamsunpavel.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:47.773813009 CEST	1.1.1.1	192.168.2.5	0x3674	No error (0)	dev-shamsunpavel.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:47.773813009 CEST	1.1.1.1	192.168.2.5	0x3674	No error (0)	dev-shamsunpavel.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:47.773813009 CEST	1.1.1.1	192.168.2.5	0x3674	No error (0)	dev-shamsunpavel.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:54.900289059 CEST	1.1.1.1	192.168.2.5	0xebc1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 06:20:54.900289059 CEST	1.1.1.1	192.168.2.5	0xebc1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:57.409405947 CEST	1.1.1.1	192.168.2.5	0x8096	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:57.409405947 CEST	1.1.1.1	192.168.2.5	0x8096	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:20:57.410502911 CEST	1.1.1.1	192.168.2.5	0x201d	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Sep 29, 2024 06:21:08.637109995 CEST	1.1.1.1	192.168.2.5	0x664a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 06:21:08.637109995 CEST	1.1.1.1	192.168.2.5	0x664a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:21:11.146203041 CEST	1.1.1.1	192.168.2.5	0x2f54	Name error (3)	241.42.69.40.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Sep 29, 2024 06:21:35.480475903 CEST	1.1.1.1	192.168.2.5	0xd2c9	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:21:35.480475903 CEST	1.1.1.1	192.168.2.5	0xd2c9	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:21:35.481743097 CEST	1.1.1.1	192.168.2.5	0xc983	No error (0)	dev-shamsunpavel.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:21:35.481743097 CEST	1.1.1.1	192.168.2.5	0xc983	No error (0)	dev-shamsunpavel.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:21:35.481743097 CEST	1.1.1.1	192.168.2.5	0xc983	No error (0)	dev-shamsunpavel.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:21:35.481743097 CEST	1.1.1.1	192.168.2.5	0xc983	No error (0)	dev-shamsunpavel.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:21:45.183691025 CEST	1.1.1.1	192.168.2.5	0x4a84	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

dev-shamsunpavel.github.io

https:

stackpath.bootstrapcdn.com

www.bing.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	185.199.108.153	443	4352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:20:44 UTC	719	OUT	GET /assignment-04-facebook_login_and_signup/index.html HTTP/1.1 Host: dev-shamsunpavel.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:20:44 UTC	733	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1867 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Fri, 06 Sep 2024 18:19:41 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "66db47bd-74b" expires: Sun, 29 Sep 2024 04:30:44 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 79F8:946D5:28BC379:2DC1011:66F8D59B Accept-Ranges: bytes Age: 0 Date: Sun, 29 Sep 2024 04:20:44 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740053-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727583644.280665,VS0,VE15 Vary: Accept-Encoding X-Fastly-Request-ID: e36b444bdd49a5ea8e6f39a26ead54b2afe81898
2024-09-29 04:20:44 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 61 63 65 62 6f 6f 6b 20 4c 6f 67 69 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 4c 69 6e 6b 69 6e 67 20 43 53 53 20 46 69 6c 65 20 68 65 72 65 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Facebook Login</title> ... Linking CSS File here --> <link rel="stylesheet" href="cs
2024-09-29 04:20:44 UTC	489	IN	Data Raw: 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 6c 6f 67 69 6e 2d 62 75 74 74 6f 6e 22 3e 4c 6f 67 20 49 6e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 72 6d 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 46 6f 72 67 6f 74 74 65 6e 20 70 61 73 73 77 6f 72 64 3f 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6c 69 6e 65 Data Ascii: </div> <button class="login-button">Log In</button> <div class="terms"> <a href="#">Forgotten password?</a> </div> <div class="horizontal-line

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	185.199.108.153	443	4352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:20:44 UTC	676	OUT	GET /assignment-04-facebook_login_and_signup/css/facebook_login_page%20style.css HTTP/1.1 Host: dev-shamsunpavel.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:20:44 UTC	752	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2034 Server: GitHub.com Content-Type: text/css; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Fri, 06 Sep 2024 18:19:41 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "66db47bd-7f2" expires: Sun, 29 Sep 2024 04:30:44 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 1B20:F6A1:260C96B:2B10FDC:66F8D59B Accept-Ranges: bytes Age: 0 Date: Sun, 29 Sep 2024 04:20:44 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740056-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727583644.475785,VS0,VE17 Vary: Accept-Encoding X-Fastly-Request-ID: 6fdb1491a9f069bff3e184e26339f70e9a49609c
2024-09-29 04:20:44 UTC	1378	IN	Data Raw: 2f 2a 20 43 53 53 20 66 6f 6e 74 20 6c 69 6e 6b 20 2a 2f 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 3a 69 74 61 6c 2c 77 67 68 74 40 30 2c 31 30 30 3b 30 2c 33 30 30 3b 30 2c 34 30 30 3b 30 2c 35 30 30 3b 30 2c 37 30 30 3b 30 2c 39 30 30 3b 31 2c 31 30 30 3b 31 2c 33 30 30 3b 31 2c 34 30 30 3b 31 2c 35 30 30 3b 31 2c 37 30 30 3b 31 2c 39 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 0d 0a 2f 2a 20 47 6c 6f 62 61 6c 20 43 53 53 20 2a 2f 0d 0a 2a 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 Data Ascii: /* CSS font link /@import url('https://fonts.googleapis.com/css2?family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap');/ Global CSS / { margin: 0; padding: 0; box-sizing:
2024-09-29 04:20:44 UTC	656	IN	Data Raw: 66 66 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 34 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 65 72 6d 73 20 7b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 74 65 72 6d 73 20 61 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 31 38 37 37 66 32 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a Data Ascii: ff; padding: 14px; border: none; border-radius: 6px; font-size: 16px; cursor: pointer; margin-bottom: 10px;}.terms { text-align: center; margin-bottom: 10px;}.terms a { color: #1877f2; font-siz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49718	185.199.108.153	443	4352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:20:46 UTC	711	OUT	GET /assignment-04-facebook_login_and_signup/img/facebook-favicon.png HTTP/1.1 Host: dev-shamsunpavel.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:20:46 UTC	744	IN	HTTP/1.1 200 OK Connection: close Content-Length: 421961 Server: GitHub.com Content-Type: image/png permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Fri, 06 Sep 2024 18:19:41 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "66db47bd-67049" expires: Sun, 29 Sep 2024 04:30:46 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 6B70:298D2D:27ED2F7:2CF1DA2:66F8D59C Accept-Ranges: bytes Age: 0 Date: Sun, 29 Sep 2024 04:20:46 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740043-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727583646.439338,VS0,VE22 Vary: Accept-Encoding X-Fastly-Request-ID: b2b07a887add3339f93bf695f0d8ab4ab2bf7e16
2024-09-29 04:20:46 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 43 00 00 03 43 08 06 00 00 00 6f c0 c4 ef 00 00 20 00 49 44 41 54 78 9c ec bd df eb f6 6b 76 1e 74 ad cd 10 86 50 86 a1 84 21 84 32 94 50 0f 2c 25 e4 28 74 6f 0f 4a 21 58 19 22 e2 58 3a 6f b0 48 6c 29 dd 21 07 a2 10 7a e0 5f 50 3c 10 0f 62 de 21 68 14 94 6e 8b d4 03 4b 11 f1 a4 6a f7 40 8e 4a d0 2a 2a a5 14 2d 25 04 09 45 4a 28 25 cb 83 cf 7d ad 75 5d eb be 3f cf f7 7d f7 ec 99 f9 ce ec e7 33 b3 df e7 79 3e 9f fb 5e 3f af b5 d6 fd eb 79 be 91 99 f8 22 5c 1f bd 79 fb d3 00 be 9e 48 04 e2 df 00 f0 65 00 7f 6c 3d fe 2a 80 af 00 f9 d3 11 40 02 eb 1f 20 22 00 00 99 09 04 10 08 64 a6 df 9f ed 10 58 1f bd 2d 12 c8 eb d9 f5 fe ea 97 89 eb de 7a 9d fd 28 0e 3f 95 2c 19 d7 fd 6e 56 fd 9a 26 3f 8b fc 97 0d 8c Data Ascii: PNGIHDRCCo IDATxkvtP!2P,%(toJ!X"X:oHl)!z_P<b!hnKj@J*-%EJ(%}u]?}3y>^?y"\yHel=@ "dX-z(?,nV&?
2024-09-29 04:20:46 UTC	1378	IN	Data Raw: 05 c0 57 00 7c 00 5c 1e 3d 97 e5 33 58 d9 e2 02 b9 17 9d 87 03 87 d5 e0 94 74 f6 ab 0b 87 60 b9 e8 b1 94 b8 e4 7b b1 99 3c 4e 49 6d ca b9 bf 6f f2 0c 48 0e 46 3c 01 9d 94 ef 63 60 77 f6 99 b6 78 69 15 66 be 9f fa 1b ad 25 fd e1 90 cd d1 06 53 0e c5 c6 43 d9 1f d0 bb 97 f7 46 f6 47 b2 1d 30 e7 7c 66 d1 3b fb fa b1 36 2f f3 bc 2b 5e fb a0 ea 5d b9 a8 0e 2f d9 ea de 46 9f 85 df ec 7b a4 f1 28 f3 bf 2b fd 77 d0 4b 25 39 17 ed 1e 00 bd 84 cd f7 b5 d1 bb a8 f8 ee 3a 9c 64 1e f4 df c9 a6 8f 3d 9a 2b a9 3e 92 69 52 78 62 f3 40 ff 95 60 f3 5e be ef 5a c5 5b 59 3e 3b fd ef 1e 9b ef 22 47 ae 07 ef 83 f1 fb 76 ef 67 f7 ae fe ef cb bb 8f be bd 1b 0f 99 51 bc c3 a0 fb ac c7 3b 8c db 06 36 3f 8f eb 89 cd 77 c3 66 66 fe 53 20 7e 17 c0 ff 00 e0 af 25 f2 ef 7d e7 93 5f fe Data Ascii: W\|\=3Xt`{<NImoHF<c`wxif%SCFG0\|f;6/+^]/F{(+wK%9:d=+>iRxb@`^Z[Y>;"GvgQ;6?wffS ~%}_
2024-09-29 04:20:46 UTC	1378	IN	Data Raw: 5f 11 a5 b7 d6 3d 02 83 dd ea 78 c5 6a 22 b5 bb 78 fa cf a2 8e 36 2c b0 e1 f2 63 63 cf a2 35 02 73 31 96 5f 2d b5 d5 0e ee 4c f8 42 c7 a5 4b 60 4f 1c 36 f0 cf 55 c0 84 df 4e f7 7e d0 bc 4d 0e 35 f8 34 39 aa 4e 43 80 8c b8 26 35 32 c8 98 fc ea fd 58 cd e1 6e 9b 7d 97 e5 b0 ba 61 b6 5d f7 75 00 84 e8 81 8b 06 bf f2 65 da ca 9a 94 74 e2 41 a1 2a 5c 06 9d a4 09 66 20 c9 59 ac d9 03 16 34 0e 47 95 d1 30 38 24 3d b6 11 f9 56 47 b5 11 8b 8e c9 20 36 9a bb 95 ba 6a 95 54 76 14 8e 40 58 48 01 30 bf 5a cc 60 ea e5 41 73 7d cc 8d 47 4d 7a 29 2b 88 d3 83 8d 06 36 87 a9 ad 0d 68 4b 06 e5 6a 93 91 37 bf fa 68 cd 10 70 59 53 de 78 4e 10 9c 53 2e 4b 66 42 6d 30 c9 70 3d 2a df b1 5c 06 24 ff cd 7c 07 89 8f 3d 77 ce 81 cc c9 5e c9 dd c6 4e 0e 5e f2 cc a6 9d a7 1e 33 3c c8 Data Ascii: _=xj"x6,cc5s1_-LBK`O6UN~M549NC&52Xn}a]uetA\f Y4G08$=VG 6jTv@XH0Z`As}GMz)+6hKj7hpYSxNS.KfBm0p=\$\|=w^N^3<
2024-09-29 04:20:46 UTC	1378	IN	Data Raw: b1 59 f9 bb b8 b6 0f 37 6c 0a 1f 2e 3c 6b 4b c7 a6 30 8e c5 53 e5 2a 9b 94 48 2d eb c0 f3 96 ef 8e 78 dc b1 69 bd a2 75 a3 78 8a 4d a7 21 3e 53 db 48 3b a5 2b 82 1d b1 49 dd b4 5f 3f 3b 63 b3 f5 73 9f 2b 36 b7 fa 7a c0 88 c6 24 6d 37 4f 53 4d 6c 5a 0c c9 ab a2 84 b4 f8 ea 2e ca fe df 01 9b 9a af 7c 3c f0 c4 e6 6b c0 e6 4a 7a df 00 f2 6f 03 f8 b5 35 0f f8 81 5e 3f b0 9d a1 0f bf f5 f6 2b 11 f8 05 00 ff 11 02 3f 01 48 41 28 2f b7 a5 13 7a 9e 92 9f 81 f5 b3 65 97 b3 73 4c 73 38 c0 8c 55 00 16 49 a3 9c 4d 9b a6 a8 a3 23 31 4f 5d 3b 0f 95 29 d7 43 fd b2 1e 12 b6 d5 c8 c4 73 3a b7 e9 5f 1e c6 96 4c 38 e1 3b ae 06 14 d0 fa 58 4a 07 6d ec 34 c9 73 29 3b 6d d4 61 cb a2 b9 e8 d0 7e 66 28 0e 1d da 2a 6c af 83 19 f5 09 ed e4 74 44 c0 0d 93 21 cd fa 19 fd 43 ac 94 88 Data Ascii: Y7l.<kK0SH-xiuxM!>SH;+I_?;cs+6z$m7OSMlZ.\|<kJzo5^?+?HA(/zesLs8UIM#1O];)Cs:_L8;XJm4s);ma~f(ltD!C
2024-09-29 04:20:46 UTC	1378	IN	Data Raw: d7 e7 b2 fb 3b 8c 21 64 85 57 7d f6 68 62 5a 2b c7 86 59 ea 2d 2b 28 32 53 2d 1f 0c ba 47 1b 26 7d d2 84 63 f0 56 9f a5 d9 52 8e 45 c0 31 d4 4a ac 58 5c 94 74 5b db 64 5a 06 dc 27 fa 79 f4 f9 e4 51 6f 43 26 9c 89 5a f1 f6 f5 bc c7 64 bc fe 5d 95 7e ca 24 49 e2 76 a1 83 34 c3 de af 7f 05 34 d3 16 4e db 25 da e9 b1 af 0c 66 21 eb 9c c7 09 04 ce f7 85 73 8d 8b 17 fb ab 8f 60 eb 4e 90 a3 a4 e3 36 5f 42 b0 26 57 2f 5c f9 8e 53 cb 9f 66 b7 46 70 6c f2 2b 38 4e c7 82 e7 60 e7 89 cd d7 8d cd ce 83 29 a2 c4 86 cd 79 44 a9 86 08 61 d4 8c 6f 2f fa ed ba d6 15 87 1d 49 48 8d 18 d8 bc 5b cc 6c ad f6 cb 76 d8 45 6f dd 69 ab d5 79 e6 fc 8d 87 8f 03 d8 94 74 90 6e 01 c3 66 c9 76 c6 c2 bc e6 6e c4 d5 db b1 69 16 7d 20 ef 4e fc 1c 93 5a 17 eb 1b 0e 37 29 a7 b5 e9 37 5b 0e Data Ascii: ;!dW}hbZ+Y-+(2S-G&}cVRE1JX\t[dZ'yQoC&Zd]~$Iv44N%f!s`N6_B&W/\SfFpl+8N`)yDao/IH[lvEoiytnfvni} NZ7)7[
2024-09-29 04:20:46 UTC	1378	IN	Data Raw: e8 20 36 62 53 1f 40 e4 fc c4 36 5c 10 88 b6 73 2f 50 68 6c f4 5b e6 37 2b 2c d2 ff ce 4f 8a 93 d3 f7 0d f7 3e 9d 23 4c 36 f3 c9 68 33 db 2a 36 a3 f3 54 1f 51 a9 e4 d7 3e 35 8c 88 af 86 2d 80 27 36 5f 27 36 99 c4 bd 76 3f ae 5f 37 3e 9c d8 4c da 65 60 ad 1c 99 42 60 ec 16 d0 e1 65 83 81 4d 64 fd 1a d6 f4 25 26 f6 93 f5 00 b8 fd db 1e db 0f d8 bc 03 36 b5 ad e0 eb 88 cd 69 f3 68 cf 1b 36 c7 a2 a3 61 64 62 53 f0 7c 8a 25 c5 a6 a5 1f ad 5b a6 f4 1e 95 bd d3 da 4e b6 9a 5e 7e 95 14 31 7d 37 b1 29 f9 67 4b 12 d3 4e 4f 6c be 7e 6c 26 fe 21 90 bf 9a c0 7f fd 9d 4f 7e f9 0f ce 4a 7c 77 d7 f7 e4 98 dc 87 df 7a fb 01 80 6f 02 f9 ed 40 7e 05 c0 b2 42 1c 66 b5 29 f1 26 a9 3e 56 91 09 09 94 5c a6 26 80 89 2b 79 7f 35 bd 92 73 54 1f a0 8e 75 25 ea 7b 2f d7 67 0d f4 ae Data Ascii: 6bS@6\s/Phl[7+,O>#L6h3*6TQ>5-'6_'6v?_7>Le`B`eMd%&6ih6adbS\|%[N^~1}7)gKNOl~l&!O~J\|wzo@~Bf)&>V\&+y5sTu%{/g
2024-09-29 04:20:46 UTC	1378	IN	Data Raw: 6c 2c 58 6d bc 4c da 43 8f 6c 19 20 35 65 0e 16 20 79 c1 f2 8c b5 8a bd 0a e1 a0 f3 c2 05 a1 67 31 5a 6a f5 e2 cb 9d 7d f7 4b 7c 3b b1 54 74 a3 7f 28 e7 20 c3 13 9b af 13 9b 9a a7 5c 1f e1 55 bf fc 95 b2 38 2a f6 38 61 13 97 3e a9 45 dd 5c 3d b0 69 f9 59 fc 9b 01 b8 45 24 a7 f6 18 c0 92 f6 c0 85 cb 29 b6 7b 80 4d cf b3 3b 36 37 da 78 8c 4d 1b 8f d8 18 63 60 53 ea 28 6b 80 c9 2e d8 ec c9 f9 e2 bd 12 8d 87 b7 da ae 31 50 4f 26 5d 61 39 17 0d 37 9c 10 9b d2 de 62 e4 80 cd 4b be 89 71 34 f6 9f d8 14 81 7e 08 b1 99 f8 7f 01 fc e5 04 fe c6 77 3e c7 09 d1 e7 b6 dd f4 d1 b7 e6 44 88 06 8f 72 ad 5e c4 de 35 20 5f c6 ac 22 c7 3e 72 4d 3c 20 fa 17 7e da ee 8b 4e 07 58 20 7a 35 00 10 40 74 0c 44 39 53 9d d0 8c bb ff 08 ff a4 73 17 0d 0e 40 b3 c1 14 e8 15 13 b5 c8 65 Data Ascii: l,XmLCl 5e yg1Zj}K\|;Tt( \U8*8a>E\=iYE$){M;67xMc`S(k.1PO&]a97bKq4~w>Dr^5 _">rM< ~NX z5@tD9Ss@e
2024-09-29 04:20:46 UTC	1378	IN	Data Raw: ff b4 7b 8b df a0 24 8d 50 df 08 0f 22 b5 be 55 6a fb 75 a5 af ce dd 6d 51 a4 ec d5 36 ad 49 bc ca b3 84 53 6c 1a a6 98 d8 19 f7 e6 99 eb 39 cf b7 17 ad 0e 5a af 7f e6 10 ad 68 f2 b6 03 42 7c 38 7d 94 72 d2 42 9e 95 cd 19 5b 8d e5 b2 8b 86 9f c6 a3 58 6c 4e c0 cb b6 dd b4 e3 c5 85 5e a9 ad 57 28 2f 5e d4 85 c5 af 2f 5d cd ad 5c 1b ac 93 4f 6c be 6a 6c a6 74 a9 ee 37 d8 2c 9a 69 bc 26 36 bb 04 32 b3 b6 10 e5 bf b6 b2 f6 16 9d 34 8f 8a 90 85 4f 88 2f 13 d8 b0 19 e0 77 43 0a c5 b2 9a af d8 ec d3 eb ed db da 91 5f b1 a3 d8 6c b9 03 5a 2f 74 87 a3 c4 65 3d d2 58 a5 5e 03 9b 34 79 d5 3f c9 09 13 9b 8e 11 79 27 df f9 70 1b b2 17 7d 2b 78 32 6c a2 63 93 75 11 1a c7 03 9b 15 13 ac db 61 79 cf b1 d9 58 aa b6 c5 1f 2d e8 13 9b 3f e4 d8 c4 57 33 f1 1b b8 36 75 fe fa Data Ascii: {$P"UjumQ6ISl9ZhB\|8}rB[XlN^W(/^/]\Oljlt7,i&624O/wC_lZ/te=X^4y?y'p}+x2lcuayX-?W36u
2024-09-29 04:20:46 UTC	1378	IN	Data Raw: cb 9c 2f 4f 43 5b 36 57 fa c1 b1 29 93 cd d1 be d3 6e ac 2f 86 aa 1f 57 8b 99 27 a0 2b e5 6a a3 13 ce d8 da 07 ca c1 22 5e 24 ce 89 ac 5c 62 72 c7 e1 7e 59 80 91 d5 be ce 73 de b8 09 a1 a5 56 ca 7d b1 51 e1 68 71 12 8c ed 36 52 04 dc ad c2 a6 f8 c5 3c 59 ed cb cc b9 34 7f 62 f3 15 63 53 e9 f4 1d f6 70 6c a6 f4 38 59 59 de b7 c1 1b 77 d1 dc 1c 9b 57 81 c8 a5 80 ad 2f c6 8e cd cb 3e 9d 04 2f 95 0b 70 16 03 6e 07 d1 77 60 73 46 4f e7 df 6e bf de 0e 8a 97 62 87 b1 66 61 d3 23 12 98 0b d3 8a 4d ee 46 16 9d 9c f7 1c 9b 5b 38 2c 95 72 b4 3f e9 70 f1 95 25 81 89 4d a1 85 ee 8a 11 be 7d bf b5 31 64 29 36 27 06 ef 5e 9f d8 fc d1 c1 66 26 fe 00 c8 bf 05 c4 67 9e 10 7d 37 c7 e4 7e 09 c8 6f 04 f0 81 19 21 e1 95 50 ee 6f a7 92 e6 7b 5e 71 78 94 b2 5d 76 e8 9b 7a 43 be Data Ascii: /OC[6W)n/W'+j"^$\br~YsV}Qhq6R<Y4bcSpl8YYwW/>/pnw`sFOnbfa#MF[8,r?p%M}1d)6'^f&g}7~o!Po{^qx]vzC
2024-09-29 04:20:46 UTC	1378	IN	Data Raw: 3f c6 40 9a eb bd e2 64 c8 a2 5e 2b db 80 b1 bb c7 a8 46 4e db ab 82 f5 d2 63 f9 da be f7 33 68 b4 bc 2c 32 d4 23 5d de c2 67 63 a6 64 10 3f 6e 66 4a da 48 f3 41 8a 4d 3b f7 97 bc a4 f1 30 5f 2f 6c ae bc ce a3 1a 1d a9 15 45 52 fb fa 6e 34 db 61 fb 5d a7 27 36 d5 3e 3f 38 6c 2e a6 23 8f a0 30 61 d8 ac a4 a8 be 38 d4 17 62 b3 6a dd 3c 89 e1 f2 42 fa 6c ba 16 66 b2 64 bf f8 84 2d 40 b5 2c 82 cd b2 bf a1 56 64 1e d8 04 4a 5e 80 03 67 82 c3 b1 99 a5 34 ed d1 3c 27 36 95 4d fd 50 10 60 36 54 db 44 46 eb 09 cf 1b 27 6c 86 dd 94 47 82 4d 6d af 0d da ef 5b 52 a8 7b 91 ed a7 aa 9d b1 f7 d0 5e 29 ef cc d7 eb ea 7c d4 58 7a 62 53 65 fe d1 c4 66 26 fe 31 80 7f f1 d3 4f 3e fe bd 03 83 db eb bd 77 86 02 f8 36 80 af 75 26 04 d6 d9 a0 96 90 60 83 be 62 ff dc d3 bf eb fe Data Ascii: ?@d^+FNc3h,2#]gcd?nfJHAM;0_/lERn4a]'6>?8l.#0a8bj<Blfd-@,VdJ^g4<'6MP`6TDF'lGMm[R{^)\|XzbSef&1O>w6u&`b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	185.199.110.153	443	4352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:20:48 UTC	414	OUT	GET /assignment-04-facebook_login_and_signup/img/facebook-favicon.png HTTP/1.1 Host: dev-shamsunpavel.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:20:48 UTC	742	IN	HTTP/1.1 200 OK Connection: close Content-Length: 421961 Server: GitHub.com Content-Type: image/png permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Fri, 06 Sep 2024 18:19:41 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "66db47bd-67049" expires: Sun, 29 Sep 2024 04:30:46 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 6B70:298D2D:27ED2F7:2CF1DA2:66F8D59C Accept-Ranges: bytes Date: Sun, 29 Sep 2024 04:20:48 GMT Via: 1.1 varnish Age: 2 X-Served-By: cache-ewr-kewr1740076-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727583648.446406,VS0,VE0 Vary: Accept-Encoding X-Fastly-Request-ID: 643299863a96aa0ac6909df8b456d60c6138f9d7
2024-09-29 04:20:48 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 43 00 00 03 43 08 06 00 00 00 6f c0 c4 ef 00 00 20 00 49 44 41 54 78 9c ec bd df eb f6 6b 76 1e 74 ad cd 10 86 50 86 a1 84 21 84 32 94 50 0f 2c 25 e4 28 74 6f 0f 4a 21 58 19 22 e2 58 3a 6f b0 48 6c 29 dd 21 07 a2 10 7a e0 5f 50 3c 10 0f 62 de 21 68 14 94 6e 8b d4 03 4b 11 f1 a4 6a f7 40 8e 4a d0 2a 2a a5 14 2d 25 04 09 45 4a 28 25 cb 83 cf 7d ad 75 5d eb be 3f cf f7 7d f7 ec 99 f9 ce ec e7 33 b3 df e7 79 3e 9f fb 5e 3f af b5 d6 fd eb 79 be 91 99 f8 22 5c 1f bd 79 fb d3 00 be 9e 48 04 e2 df 00 f0 65 00 7f 6c 3d fe 2a 80 af 00 f9 d3 11 40 02 eb 1f 20 22 00 00 99 09 04 10 08 64 a6 df 9f ed 10 58 1f bd 2d 12 c8 eb d9 f5 fe ea 97 89 eb de 7a 9d fd 28 0e 3f 95 2c 19 d7 fd 6e 56 fd 9a 26 3f 8b fc 97 0d 8c Data Ascii: PNGIHDRCCo IDATxkvtP!2P,%(toJ!X"X:oHl)!z_P<b!hnKj@J*-%EJ(%}u]?}3y>^?y"\yHel=@ "dX-z(?,nV&?
2024-09-29 04:20:48 UTC	16384	IN	Data Raw: 84 67 1d b5 1b 31 d6 61 71 17 07 f2 f9 50 47 f4 df 53 bf 3d 1e 3c df 3e b1 d9 d7 6b c2 a6 4a 45 3a 95 f3 26 36 d5 ff 81 ca 6b 67 6c 4a 0e cb dd 86 fb b5 57 4f d6 66 ec ec 00 00 20 00 49 44 41 54 cb d2 e9 3e b1 3f 2d 71 68 47 0a 86 a4 74 bb 6d d8 04 75 5a 59 bc c6 24 3b 36 a3 6a 00 17 a2 fb f9 c4 a6 e9 5f 7f fb e7 8c cd 3a 72 64 31 dd 06 51 6c 76 2d e9 f8 d6 58 51 6c 86 f6 a1 70 07 3f 2c 57 2e 14 a6 bd 76 8b 71 cc 57 6d b2 54 b4 18 32 d5 fb 44 83 da fc 89 cd 2f 2e 36 81 f8 13 01 fc ca 66 30 b9 6e 27 43 1f bd 79 fb d3 00 fe ad 42 ae 5c 89 61 f4 58 e7 2e 95 b7 5e 6b 30 66 f9 32 7a 6b ab 66 ad 75 26 bd a7 46 95 6e 35 82 0c aa 10 db 31 41 c3 0c 57 fd d7 96 a6 85 5d 50 96 16 36 e9 1c 4e fd 05 78 35 a9 02 03 5e 0b 9c f0 01 aa 50 f6 ac 49 e5 3b 18 aa 0a 4c 87 a3 Data Ascii: g1aqPGS=<>kJE:&6kglJWOf IDAT>?-qhGtmuZY$;6j_:rd1Qlv-XQlp?,W.vqWmT2D/.6f0n'CyB\aX.^k0f2zkfu&Fn51AW]P6Nx5^PI;L
2024-09-29 04:20:48 UTC	16384	IN	Data Raw: 8e f6 57 68 5e f5 e6 26 c7 2a e9 81 cf fe 6e 6e d2 56 70 b1 14 53 9b 9b db b7 f4 d9 8b 9b 19 9a 5f d5 ec ff e2 26 ec ad e1 89 37 37 79 3a 02 89 96 68 be dc bc 20 bd 5e fd 6d e5 e6 af 9d 24 e7 da aa 24 dc 85 35 f9 b2 4f 22 f8 19 22 21 cb 8c c7 00 00 20 00 49 44 41 54 3c 77 cc dd a7 1c 05 12 8a 68 be 5f fa 70 53 e1 ee 03 cc 50 51 f4 d5 38 69 99 4a cb 07 ef 06 11 51 17 76 2d c8 92 16 60 d3 3d 4c 12 a0 ff 58 a5 8e 98 32 c0 39 f2 22 4b cc 9f 51 b8 c1 e2 35 65 c8 8c f1 5d fa cd 68 7c 67 bc eb c7 f5 1c e1 b3 e0 4c f9 08 32 1d 8b 0a 14 d4 87 c2 be c5 91 ed cb 0e 72 65 12 64 a0 1c 78 c0 e7 86 e8 b0 5d 0b 0b bd 79 a9 50 96 24 60 06 87 1f 22 6a 75 55 b2 6a ad f9 3a 23 02 7f b3 64 4e 1a d5 c6 55 56 1b 85 7c 22 73 8b c0 e6 7d 25 9f ea 58 20 12 98 20 31 59 6b 42 93 1c Data Ascii: Wh^&*nnVpS_&77y:h ^m$$5O""! IDAT<wh_pSPQ8iJQv-`=LX29"KQ5e]h\|gL2redx]yP$`"juUj:#dNUV\|"s}%X 1YkB
2024-09-29 04:20:48 UTC	16384	IN	Data Raw: d8 3e 19 f5 c9 36 17 6c 91 23 a0 c7 f5 d6 db 1f 03 e4 a9 56 17 cb ad fb f0 69 4e 83 6a 00 38 0b 1d 1e 7b 24 99 07 c0 c9 eb 9a 88 8c 28 b7 9f 64 37 f7 6f 99 0f 1f 9f 31 96 7d b4 db c6 5f 3b cb 03 22 b7 b7 8a 1f ee 0e 93 e3 21 75 9c 86 e0 0b 2d 28 5a 87 c3 4d 60 24 ac e6 d7 65 02 fb 69 b6 38 91 d2 63 f1 cd e5 b1 11 00 00 20 00 49 44 41 54 ce 6d 83 5f 5d ce e0 0b f0 30 df f0 14 67 24 cb 14 5c 81 24 75 80 4e 93 6c 9a 8f 8a 95 69 f2 2d 96 89 47 84 e2 1a b9 04 76 46 d1 1f 5e ff 0e 8e 2d ef e2 a1 f6 9f 82 12 55 80 8a 7e d2 38 ae 13 c7 1c 79 07 bc d4 75 7b 39 b1 2f 2d e6 15 5b b6 1b 98 33 17 09 f7 a0 30 d7 5c 97 8d af 2d 8c 8f 18 e0 bd fb 6b e9 4e 2e 3b b6 ca 28 c6 e5 59 c8 94 5b 84 5b b8 6e b8 1c 11 fe 65 34 2c 1c 11 64 b6 cc 29 ab 45 93 c3 e9 56 54 9d 5c ce 54 Data Ascii: >6l#ViNj8{$(d7o1}_;"!u-(ZM`$ei8c IDATm_]0g$\$uNli-GvF^-U~8yu{9/-[30\-kN.;(Y[[ne4,d)EVT\T
2024-09-29 04:20:48 UTC	16384	IN	Data Raw: b4 f5 d9 db a7 d9 b1 59 52 8a 75 ac df 78 e9 b3 52 0a d0 08 07 eb 14 cd 94 dd 1c 28 cd 84 d3 9f a9 bf 43 29 95 f8 d4 76 f0 87 6c 44 5c 4b c5 9b b7 b1 f2 59 7c 1c 7e 6f 9b 25 fd a7 bc 8e 98 57 bc 41 11 d3 f4 56 1b 43 de e0 f8 66 8d ea 51 35 2a 43 52 b0 a0 6c e8 fe 06 b9 95 67 f8 66 36 1d 75 a4 c0 1a 75 0d c5 74 f9 a6 f3 64 8d 03 c1 3f ba 0d e2 99 6f 16 c5 bf 49 df 7c fd d5 27 43 c3 4c 00 00 20 00 49 44 41 54 97 e2 f7 7f ed c3 f8 f5 ef 7d 10 5f 79 f7 ad 78 ee b9 47 db e2 f3 ac e9 b8 55 2c f7 9d 7c 9d 77 56 d8 3f cd 69 c4 ad 46 ed 9e 62 7e b7 ee 59 23 d5 e9 ef f8 dd 35 56 67 a7 3d f7 36 12 4f 23 c7 6e de bd a7 5d b8 7e 2f ed 2e db d9 a9 d8 d3 f2 7f d6 40 ef 78 eb 35 db 0e 37 cf e6 74 dc 94 e8 de f2 dd 71 d3 f0 a0 d5 2e 8a 9b 5a 19 1e b0 d6 37 99 23 34 8c 95 Data Ascii: YRuxR(C)vlD\KY\|~o%WAVCfQ5*CRlgf6uutd?oI\|'CL IDAT}_yxGU,\|wV?iFb~Y#5Vg=6O#n]~/.@x57tq.Z7#4
2024-09-29 04:20:48 UTC	16384	IN	Data Raw: e6 bb f1 5f fc 87 df df 36 42 bd b0 d6 42 ba 17 81 bb 02 b8 d3 ec f7 75 8c d2 ba 7a 9d d1 df 35 24 57 af 9d 0c 57 cd 4f bf de 8b e3 5d 23 78 6f 63 d6 75 78 cf da 67 0d d1 8e ee 8e c6 ee 7a 6f 92 ae 9a bc 2b 7b ee e4 d9 e9 6b 27 c3 95 2d ce 1a b0 33 df bc 6a da ce 7c b3 f3 71 d6 64 9d f9 ff de 86 22 4b 68 c6 de e0 a6 e6 70 7b 9d f9 b3 8e 07 2f 0d 77 e4 a3 6f 46 72 3d c5 4d 5b 6e 28 af 2b 6e 16 ae 37 79 8d e6 94 0d 43 b4 e1 d0 7a 6b 8f 9b cc 6d 15 0e 83 97 00 00 20 00 49 44 41 54 4a 13 74 88 9b fa 52 7b ae b8 69 eb 49 ed b3 c5 cd 45 21 2b 5f 2a 67 e5 8c ca 4f f3 de d4 e3 a3 0c 75 c8 31 c5 c0 59 48 d6 e3 58 a5 f8 49 68 cc 04 59 fc 80 5b c9 3d 7c 94 8b f9 54 d3 7b 1d 81 86 d3 48 5d 67 12 24 8f 56 56 88 30 b3 49 90 42 b5 28 48 51 ab b4 b0 73 59 6b 80 0a 3a e3 Data Ascii: _6BBuz5$WWO]#xocuxgzo+{k'-3j\|qd"Khp{/woFr=M[n(+n7yCzkm IDATJtR{iIE!+_*gOu1YHXIhY[=\|T{H]g$VV0IB(HQsYk:
2024-09-29 04:20:48 UTC	16384	IN	Data Raw: 8e f5 44 77 dd 4e 77 be f9 4a f6 35 ed 0b 7e 5e d7 07 dc b4 8a fb 7c bf e3 66 a1 2f 6d 57 60 90 f7 61 bd a1 64 d2 1b 6e 32 8e 89 9e 2e 0e 77 dc 04 5f 89 7d e4 ad e3 26 e4 52 fc f3 6c 0f 5e e4 79 00 67 3c 2d 32 0e b8 e9 22 33 08 20 9e f6 98 1e 72 5e e8 0c 31 9d 32 c1 48 da d7 53 57 6c b3 fc c5 2b 1d c4 c3 37 a9 0c 78 87 9e 21 fc fb d5 49 7f 0b 48 05 3c 4c 12 4d 16 ad 31 70 25 99 2c 12 3c a3 9d 48 9a a9 c0 ea 14 61 16 5e 14 bc 72 3f 83 f3 64 3d 12 74 ac eb 17 7e bd 90 e6 bd e4 da 32 21 d7 88 dd 5e 3d 93 81 eb 5d 84 cf 35 dc 40 00 00 20 00 49 44 41 54 96 10 17 7f a2 09 39 f3 e4 6b bf 0b 02 a4 e4 3a d9 23 6c a3 b5 f4 11 25 bb f0 eb 9a 16 7c e9 2c 35 c1 ae 36 bf 14 93 36 85 12 dd ac 7c 3a 1c fc 37 9b 13 90 bc c8 67 ab c0 8a 1c 3b 6c f3 15 51 44 5b e7 b5 bd a1 Data Ascii: DwNwJ5~^\|f/mW`adn2.w_}&Rl^yg<-2"3 r^12HSWl+7x!IH<LM1p%,<Ha^r?d=t~2!^=]5@ IDAT9k:#l%\|,566\|:7g;lQD[
2024-09-29 04:20:48 UTC	16384	IN	Data Raw: a1 ce d7 ca 6e 67 b4 fa dc 1d 8d 1a 5b ef b3 70 77 df e2 66 35 02 a8 0f 2b 67 33 6e 66 5d 88 bc 40 f9 3a 21 72 e0 e6 81 5b 35 56 0e e6 07 4d ae d9 74 b3 b5 92 5b c7 4d fe d3 23 98 07 3a 02 dd 74 1f 27 21 89 c2 a1 5a 10 5d 90 40 4e 17 3d 7f 12 8d 94 5b 29 64 7e 68 39 9d eb a8 24 da 73 7a 29 28 c5 ce 1c 1d 9a d3 5d 0d 6d d9 9b 58 d1 bc 45 9c 25 b3 71 ac 6b 78 48 26 15 98 76 1f 87 77 81 e3 c1 c1 bd 99 e5 63 43 5e 0e 93 8a e4 ad ba fc 3d 0e 22 0c 5e 29 69 f1 1d 7e cc d1 f9 77 86 ac ce 27 30 07 27 28 f9 18 16 7e a9 16 55 b1 93 63 a3 40 87 21 f2 f7 30 ca c8 b5 d6 86 cf 21 2f 3a 6f 14 16 70 21 50 84 7e 00 00 20 00 49 44 41 54 37 1c a5 2a 4d 2b 0f 18 9f b9 63 f5 94 53 5f 90 b5 9e 60 a9 c7 76 e0 c6 ac 8f 14 34 8b ac 26 37 5f 34 d8 8d 4c e5 52 8a 0c e0 e5 2b fd 8d Data Ascii: ng[pwf5+g3nf]@:!r[5VMt[M#:t'!Z]@N=[)d~h9$sz)(]mXE%qkxH&vwcC^="^)i~w'0'(~Uc@!0!/:op!P~ IDAT7*M+cS_`v4&7_4LR+
2024-09-29 04:20:48 UTC	16384	IN	Data Raw: 63 7f a1 c7 04 40 cb 95 a6 0d 5d 89 0c 6d 8c 5b 64 bc b9 e8 00 ba e1 78 2b 78 e4 57 ea 3f 18 17 30 1e ef 5d 78 e1 d6 e4 b0 8b d7 f8 e8 5a 2b cd 76 db 38 fb 66 f0 f8 02 32 49 46 5d 1f 56 3e 5e f2 e9 aa 9e fc 30 cf fc 8a f2 71 4e 4e ac 9b d4 69 9b 3b 78 d7 26 78 c8 ea 75 bd fc bd e1 42 92 e9 dc 13 9d 66 93 4a 1d 48 d6 68 9a bc 93 a5 b9 18 0f bf f2 d4 b9 da aa 3d c2 b2 88 c3 29 67 e7 3c ce 39 37 f3 cd 1f fc f8 07 ec c3 1f 78 f7 24 fd a5 47 cb ce 1e b7 e2 9f bb 13 a6 6b 4e 33 ce 4e aa ce 4e 44 ae a1 b3 a3 bb bb c6 9f fb 09 c9 b5 3c f5 39 ab b9 97 f8 dd f1 b3 d2 0f 5e 97 9a a2 9d ec 3b 3d 1c 5f 96 70 3c 1a 87 46 68 e5 b3 70 58 3d 0f 0f 4a 1d 21 43 3b 97 8c 9b b1 8a a2 3c 00 00 20 00 49 44 41 54 1a a5 b5 89 b6 c2 4d e4 b6 a3 d6 68 35 4b c3 cd e4 7d c4 cb 6a c3 Data Ascii: c@]m[dx+xW?0]xZ+v8f2IF]V>^0qNNi;x&xuBfJHh=)g<97x$GkN3NND<9^;=_p<FhpX=J!C;< IDATMh5K}j
2024-09-29 04:20:48 UTC	16384	IN	Data Raw: fa 22 90 a9 a6 a0 af 7d 19 3c 28 3f 37 b3 e5 53 c6 af 63 13 ed b4 bf ba ec 20 56 4a 98 a1 ff 68 52 cf c1 57 d8 cc 8c f8 d3 3f fe bd fd de 70 3e 16 16 5e 88 cf a2 fc 56 cc 3f 9d d4 4c 99 b7 45 8d bf 9e 4e 9c e6 82 6a 16 f3 b7 85 c3 6d 8c a7 05 c6 47 64 df 5e ef 2d 4a 6e fe 79 5a fc 78 fb e9 cb 9b 3d 73 11 78 f3 f3 7b 76 47 44 fc 0f ff cb 9f 05 17 d7 d8 1c 72 de 34 02 f3 b9 7f 5f ea d8 8c 3d c7 59 15 14 d1 53 a7 6d 8e 96 d9 95 ce 49 27 6f a2 96 59 36 9a bf d6 9b c6 9b 98 0b 98 df 5e f4 0e de 2c e7 26 da db 71 d4 79 53 f3 90 a5 fd c1 9b b4 d5 e6 5f af 9c 9d 23 e0 c7 95 f3 cb be 44 6d 39 78 13 ce 9e 33 19 79 e0 e0 4d cc ab e2 9f 19 4f f2 a6 e9 b5 c4 15 fd 33 79 93 9c 87 1b ec 74 f2 a6 d7 32 f4 7d 68 c1 24 3f 4b 5c 6e ff 7e 62 f3 ce e4 1b 81 00 00 20 00 49 44 Data Ascii: "}<(?7Sc VJhRW?p>^V?LENjmGd^-JnyZx=sx{vGDr4_=YSmI'oY6^,&qyS_#Dm9x3yMO3yt2}h$?K\n~b ID

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49719	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:20:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 04:20:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=131054 Date: Sun, 29 Sep 2024 04:20:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49722	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:20:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 04:20:50 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=131082 Date: Sun, 29 Sep 2024 04:20:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 04:20:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49730	185.199.108.153	443	4352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:20:56 UTC	718	OUT	GET /assignment-04-facebook_login_and_signup/Create_new_account-index.html HTTP/1.1 Host: dev-shamsunpavel.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:20:56 UTC	755	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9981 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Fri, 06 Sep 2024 18:19:41 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "66db47bd-26fd" expires: Sun, 29 Sep 2024 04:30:56 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: B4D9:B14C7:26CE7D0:2BD2F28:66F8D5A8 Accept-Ranges: bytes Age: 0 Date: Sun, 29 Sep 2024 04:20:56 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740067-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727583657.878077,VS0,VE17 Vary: Accept-Encoding X-Fastly-Request-ID: 738f75cb62ecee15e01e4b952bad3376c153ac4a
2024-09-29 04:20:56 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 42 20 53 69 67 6e 20 55 70 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 46 61 76 69 63 6f 6e 20 6c 69 6e 6b 69 6e 67 20 2d 2d 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>FB Sign Up</title> ... Favicon linking --> <link rel="icon" type="image/x-icon" href="
2024-09-29 04:20:56 UTC	1378	IN	Data Raw: 20 6f 66 20 62 69 72 74 68 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 71 75 65 73 74 69 6f 6e 2d 63 69 72 63 6c 65 22 3e 3c 2f 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 6f 62 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 6c 65 63 74 20 6e 61 6d 65 3d 22 64 61 79 Data Ascii: of birth <i class="fa fa-question-circle"></i> </p> </div> <div class="dob"> <select name="day
2024-09-29 04:20:56 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 37 22 3e 31 37 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 38 22 3e 31 38 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 39 22 3e 31 39 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 32 30 22 3e 32 30 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <option value="17">17</option> <option value="18">18</option> <option value="19">19</option> <option value="20">20</option>
2024-09-29 04:20:56 UTC	1378	IN	Data Raw: 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 41 70 72 69 6c 22 3e 41 70 72 69 6c 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4d 61 79 22 3e 4d 61 79 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4a 75 6e 65 22 3e 4a 75 6e 65 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 4a 75 6c 79 22 3e 4a 75 6c 79 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 Data Ascii: ption value="April">April</option> <option value="May">May</option> <option value="June">June</option> <option value="July">July</option>
2024-09-29 04:20:56 UTC	1378	IN	Data Raw: 69 6f 6e 20 76 61 6c 75 65 3d 22 32 30 31 36 22 3e 32 30 31 36 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 32 30 31 35 22 3e 32 30 31 35 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 32 30 31 34 22 3e 32 30 31 34 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 32 30 31 33 22 3e 32 30 31 33 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 Data Ascii: ion value="2016">2016</option> <option value="2015">2015</option> <option value="2014">2014</option> <option value="2013">2013</option>
2024-09-29 04:20:56 UTC	1378	IN	Data Raw: 22 31 39 39 37 22 3e 31 39 39 37 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 39 39 36 22 3e 31 39 39 36 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 39 39 35 22 3e 31 39 39 35 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 39 39 34 22 3e 31 39 39 34 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: "1997">1997</option> <option value="1996">1996</option> <option value="1995">1995</option> <option value="1994">1994</option>
2024-09-29 04:20:56 UTC	1378	IN	Data Raw: 65 22 20 63 6c 61 73 73 3d 22 62 74 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 65 6e 64 65 72 2d 6f 70 74 69 6f 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 63 75 73 74 6f 6d 22 3e 43 75 73 74 6f 6d 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 67 65 6e Data Ascii: e" class="btn"> </div> <div class="gender-option"> <label for="custom">Custom</label> <input type="radio" name="gen
2024-09-29 04:20:56 UTC	335	IN	Data Raw: 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 61 76 65 2d 61 63 63 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3e 41 6c 72 65 61 64 79 20 68 61 76 65 20 61 6e 20 61 63 63 6f 75 6e 74 3f 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="have-account"> <a href="index.html">Already have an account?</a> </div> </div> </form>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49729	185.199.108.153	443	4352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:20:57 UTC	692	OUT	GET /assignment-04-facebook_login_and_signup/css/Create_new_account-style.css HTTP/1.1 Host: dev-shamsunpavel.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/Create_new_account-index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:20:57 UTC	754	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2824 Server: GitHub.com Content-Type: text/css; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Fri, 06 Sep 2024 18:19:41 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "66db47bd-b08" expires: Sun, 29 Sep 2024 04:30:57 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 5F5C:17E5D1:2815058:2D19919:66F8D5A7 Accept-Ranges: bytes Age: 0 Date: Sun, 29 Sep 2024 04:20:57 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890070-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727583657.451526,VS0,VE26 Vary: Accept-Encoding X-Fastly-Request-ID: 410f763f767490d31b4783b3eef936218a96d880
2024-09-29 04:20:57 UTC	1378	IN	Data Raw: 2f 2a 20 47 6f 6f 67 6c 65 20 4f 70 65 6e 20 53 61 6e 73 20 66 6f 6e 74 20 6c 69 6e 6b 20 2a 2f 0d 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4f 70 65 6e 2b 53 61 6e 73 3a 77 67 68 74 40 34 30 30 3b 36 30 30 3b 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 27 29 3b 0d 0a 0d 0a 2f 2a 20 47 6c 6f 62 61 6c 20 43 53 53 20 2a 2f 0d 0a 2a 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 Data Ascii: /* Google Open Sans font link /@import url('https://fonts.googleapis.com/css2?family=Open+Sans:wght@400;600;700&display=swap');/ Global CSS / { margin: 0; padding: 0; box-sizing: border-box;}body { font-family: 'Open
2024-09-29 04:20:57 UTC	1378	IN	Data Raw: 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 67 61 70 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 62 2d 73 69 67 6e 75 70 20 2e 64 6f 62 2c 20 2e 66 62 2d 73 69 67 6e 75 70 20 2e 67 65 6e 64 65 72 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 62 2d 73 69 67 6e 75 70 20 2e 67 65 6e 64 65 72 20 2e 67 65 6e 64 65 72 2d 6f 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 Data Ascii: display: flex; gap: 10px;}.fb-signup .dob, .fb-signup .gender { display: flex; justify-content: space-between; margin-bottom: 15px;}.fb-signup .gender .gender-option { display: flex; align-items: center;
2024-09-29 04:20:57 UTC	68	IN	Data Raw: 74 68 3a 20 33 32 25 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 65 6e 64 65 72 2d 69 6e 66 6f 2c 20 2e 69 6e 66 6f 2d 62 69 72 74 68 20 70 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a Data Ascii: th: 32%;}.gender-info, .info-birth p{ margin: 5px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49732	104.18.11.207	443	4352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:20:57 UTC	593	OUT	GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://dev-shamsunpavel.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:20:58 UTC	903	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 04:20:57 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"269550530cc127b6aa5a35925a7de6ce" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 18:51:50 CDN-EdgeStorageId: 871 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 89a80850cf648016f7f038802a45eac9 CDN-Cache: HIT CF-Cache-Status: HIT Age: 17239682 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ca92f0668a85e68-EWR
2024-09-29 04:20:58 UTC	466	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-09-29 04:20:58 UTC	1369	IN	Data Raw: 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 31 20 46 Data Ascii: at('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 F
2024-09-29 04:20:58 UTC	1369	IN	Data Raw: 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e Data Ascii: (0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{-ms-filter:"progid:DXImageTran
2024-09-29 04:20:58 UTC	1369	IN	Data Raw: 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 33 22 7d 2e 66 61 2d 68 65 61 72 Data Ascii: th:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{content:"\f003"}.fa-hear
2024-09-29 04:20:58 UTC	1369	IN	Data Raw: 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 62 22 7d Data Ascii: 4"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag:before{content:"\f02b"}
2024-09-29 04:20:58 UTC	1369	IN	Data Raw: 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: tent:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-forward:before{content:"\
2024-09-29 04:20:58 UTC	1369	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: :before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-chevron-up:before{conte
2024-09-29 04:20:58 UTC	1369	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 63 22 Data Ascii: {content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unlock:before{content:"\f09c"
2024-09-29 04:20:58 UTC	1369	IN	Data Raw: 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 72 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: ent:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}.fa-underline:before{content
2024-09-29 04:20:58 UTC	1369	IN	Data Raw: 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 Data Ascii: board:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stethoscope:before{content:"\f

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49731	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:20:59 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1727583624773&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-09-29 04:20:59 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-09-29 04:20:59 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-09-29 04:20:59 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 73A7B70B060E48DA83671159EB51D438 Ref B: LAX311000113035 Ref C: 2024-09-29T04:20:59Z Date: Sun, 29 Sep 2024 04:20:59 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.2eed0117.1727583659.1a3771ab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49736	104.18.11.207	443	4352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:21:00 UTC	676	OUT	GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://dev-shamsunpavel.github.io sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:21:00 UTC	930	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 04:21:00 GMT Content-Type: font/woff2 Content-Length: 77160 Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: "af7ae505a9eed503f8b8e6982036873e" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 09/26/2024 19:44:55 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: babdc14819f1eae08a8e91835808c0bf CDN-Cache: HIT CF-Cache-Status: HIT Age: 91410 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ca92f173a637274-EWR alt-svc: h3=":443"; ma=86400
2024-09-29 04:21:00 UTC	439	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-09-29 04:21:00 UTC	1369	IN	Data Raw: 54 b4 31 12 03 fb f4 ac 3c 0b ed 3b ed f3 d2 60 10 e6 b6 27 f1 48 0e 3f f1 73 ce a9 3a 91 0f 4e 44 9f a8 fc a9 10 49 11 a4 24 8c 04 54 14 8b 5b 81 82 62 34 8a 11 cd fc 7f ea ec ef 2c af ce bc d7 ef bd a3 62 6c 36 91 ba 0b 49 4c e9 69 7d db 8c 26 e0 34 e3 94 6d 2c 27 cb 16 cb f3 23 bd d7 a5 b3 7f 52 77 01 a2 62 75 c0 b6 2c 4b 96 0b c6 06 9b e2 76 8b 03 db 08 6d 5f 2d c0 c0 e6 5c 48 8b 9d fb 8e 48 48 fe aa f3 93 ea 07 c6 c2 3f 98 96 d3 6d f3 0b 39 50 88 ad d8 29 39 e7 4a a8 86 24 c6 bd 88 9c e7 b1 f4 38 f8 e8 c7 da ce ce 7e b9 3b c4 72 15 8d 6e bf 3d 24 11 1a b5 1f 94 4e 64 64 6e 1b 21 27 ae a6 f0 e3 3b b3 f4 ac 38 99 bc 27 d9 4e a6 ed 1e 21 7f 2d 18 06 4a 19 ca b6 d3 2e e0 d8 fa 91 ee 58 af 3d 0c 2c 12 04 0e 90 9b 1e 22 60 3a 18 a2 ff 1b 0f 09 09 20 7b 8d Data Ascii: T1<;`'H?s:NDI$T[b4,bl6ILi}&4m,'#Rwbu,Kvm_-\HHH?m9P)9J$8~;rn=$Nddn!';8'N!-J.X=,"`: {
2024-09-29 04:21:00 UTC	1369	IN	Data Raw: b3 68 04 37 49 8c f6 a0 3c 53 43 4f 02 ad 19 b8 96 c8 90 48 a0 1e e2 45 77 21 01 2e 1f d7 e9 fd 21 42 53 12 43 aa 67 1e c4 9d 89 63 e3 0e b9 e4 73 2a d5 a7 73 89 28 35 6d 94 3d 71 c6 ca 8a 65 a2 fb f1 59 91 0b 24 eb 5c 3e 10 66 4e 38 80 71 97 8c 78 ea 23 76 0a a5 36 75 6d ef 09 e0 19 9d b0 60 db 4e 4d 2d 4a 00 5c f4 10 46 b7 c7 72 e9 44 02 80 1e b5 5a d3 30 93 07 23 27 ea a5 88 6e ec 11 d2 47 6a 4c 82 da 86 58 14 1b ca 8c a2 41 aa 9d f1 67 59 73 99 2a b2 59 ca dc 07 c7 5e d9 b5 98 3b 22 d8 1d 24 68 62 7f 3d b9 16 19 cf 9b 13 98 30 de 76 48 3c 97 56 76 7f 81 63 9b 5f 00 5c 59 8a 03 ec a3 e8 77 3b 64 42 16 02 83 8b 03 4e 83 84 33 1b 21 24 ce e7 e7 b4 e7 e2 de 49 7c 50 98 20 7e 13 26 13 e4 03 64 c5 2e c8 03 1b d4 b0 e9 02 2d 61 07 f3 fa 61 19 09 2b 2b c2 13 Data Ascii: h7I<SCOHEw!.!BSCgcss(5m=qeY$\>fN8qx#v6um`NM-J\FrDZ0#'nGjLXAgYsY^;"$hb=0vH<Vvc_\Yw;dBN3!$I\|P ~&d.-aa++
2024-09-29 04:21:00 UTC	1369	IN	Data Raw: 2d 60 2f 22 48 0b 0a 6f 85 26 92 44 97 49 30 ff 45 32 58 61 89 95 2d 1f a9 7b 0e 35 c0 81 99 3c 0d 2c 7d 94 d1 13 60 60 36 fa c7 ed 18 90 6a 69 a2 e9 d8 69 6d 3c 55 75 6a 59 a9 5a fa 6a 0e 42 5c 40 8c 67 cb 33 45 6a 66 70 96 f8 98 9f 3a ba da ed ea 10 57 db c7 ae 9f ba d9 df b3 8e 9c 94 ce 70 a5 c4 b3 33 61 6f af fb 11 81 31 88 64 61 8b f8 20 9c 03 b7 dd ab a5 fd 88 99 4a 82 d7 b2 3f 20 6a ce 71 37 ae be 4d c3 e6 ce 66 66 99 59 b5 66 cb 1c d4 73 02 1e b0 1b 24 9b 9c 09 84 95 48 fd 91 14 e6 ac 6c a5 96 f5 b9 bf c0 88 97 28 25 2e 9b 72 06 e3 d2 77 3f 03 f2 be 6d 3d 7e 0b 82 79 b2 63 59 91 62 67 29 3c cb 57 84 20 2f 56 78 16 da 6b a9 b4 92 24 e7 f3 8f 0c 42 f0 72 7e f1 86 01 a7 d3 f0 39 13 de 36 8d 30 d1 26 fe 99 5f 76 4d 00 59 c2 25 84 93 d2 9d 7b e6 45 7f Data Ascii: -`/"Ho&DI0E2Xa-{5<,}``6jiim<UujYZjB\@g3Ejfp:Wp3ao1da J? jq7MffYfs$Hl(%.rw?m=~ycYbg)<W /Vxk$Br~960&_vMY%{E
2024-09-29 04:21:00 UTC	1369	IN	Data Raw: 1e 39 90 87 64 a6 6b 59 fd 0d d9 6a 90 8e c2 52 36 d1 d4 ed f7 03 51 12 21 98 ca 00 ea ee f7 20 56 86 bb 99 0a 25 22 08 15 5e d0 60 97 4e 33 4f f2 8c a2 0f fa 86 83 ac 5b f1 1d 76 3a e0 ca 84 3a d9 e8 5e da 9c 72 d7 bf e7 11 40 ea d2 ec 0a 8d 46 c5 5f ae d7 11 e5 01 08 4e 63 cc 42 d2 17 f1 fd c3 38 70 a3 5c 69 af a2 b5 d7 37 cf ee 8b 67 e5 ad 03 2a ee 8f d1 cd fd 2c 83 43 ab 9d 1a c2 0e e1 5b 87 36 b4 54 92 3f ba ba b5 16 85 25 f2 7a fb c5 40 01 06 18 6a 41 70 42 4e 35 f0 9e 22 34 54 9e a5 e0 f4 22 96 7d 30 75 4a f4 87 8f 9e 96 c8 9c 7e 33 f6 1e d9 0e d1 7b 7d 02 75 57 f6 8c e0 ee 4d 93 1e 6a fa 39 c8 2d 82 5d 13 f5 ab 9d 11 99 27 6c 53 b2 20 2f f0 52 3e 3c a5 2b e7 4f 9f 95 db d8 1f 65 42 23 95 42 63 d2 1a d9 c0 02 e8 6a 4c 5c 11 12 a3 c4 2d be 5a 68 95 Data Ascii: 9dkYjR6Q! V%"^`N3O[v::^r@F_NcB8p\i7g*,C[6T?%z@jApBN5"4T"}0uJ~3{}uWMj9-]'lS /R><+OeB#BcjL\-Zh
2024-09-29 04:21:00 UTC	1369	IN	Data Raw: 4d 7c f6 d4 99 9a 64 4f 86 d9 a5 69 5a ae e3 19 c5 24 ae ee 19 bb 2b 23 1e 4b 48 c8 46 0a 8d c3 e9 c4 ea ed be 83 00 a7 8e 09 ee c8 18 f8 89 1f a7 8f 29 2d 09 be 06 3a 4d 24 cb 79 63 a0 ae 45 c0 25 41 69 95 92 05 32 5d 96 98 08 cc 6c e5 b6 a8 90 89 1c 9a 19 cd 38 86 49 1a bc 79 b2 d2 05 5a 17 47 4a b3 83 1a a2 06 ae 5c d5 1e 32 1a d6 99 58 62 18 bf 4c be f6 f0 9f 49 c2 41 2d fd 47 72 52 00 21 cd 30 a0 13 a0 db 4c 2b c0 51 68 aa 53 f3 59 d4 d2 13 d7 f2 53 bf 35 fd 5f 1e d8 28 a5 06 0e 70 6f 46 9a a7 54 89 87 11 af 23 6b 1c 4e db be ea 6c 7c 72 87 6e 06 b3 64 d7 48 a0 07 1e 96 dc 79 13 db 8a e6 f9 ee e4 c8 26 db 86 17 78 e3 70 b0 c1 f7 e1 e5 5b e9 16 38 47 1a 86 fe d9 64 74 ac a2 ac a3 b1 7a ec b0 83 d9 a6 06 09 38 b4 b4 42 bd ae 4b 50 22 40 32 65 8c 65 03 Data Ascii: M\|dOiZ$+#KHF)-:M$ycE%Ai2]l8IyZGJ\2XbLIA-GrR!0L+QhSYS5_(poFT#kNl\|rndHy&xp[8Gdtz8BKP"@2ee
2024-09-29 04:21:00 UTC	1369	IN	Data Raw: 50 2d d0 62 44 a0 d4 fc 22 8d 0f ec 5b 3a b0 77 c9 ba 5e 6a f9 89 d3 81 bb d0 51 65 6a 60 8c 8b 97 54 71 92 05 3d a2 fa b1 94 48 26 a3 6f 8f 1b a1 1b 6b c4 89 4c 44 de 57 a1 4f fb 86 c2 f9 94 eb ca 2a 4a 33 73 5b 19 ce 36 9d 6a 31 f0 40 d9 d8 6e 72 3c ae ce be db 87 86 23 89 cd d2 40 09 88 30 bf 9b 63 06 09 a2 9d 1f 05 99 3f ef b5 9d 3c 32 8a 44 d5 d3 a6 09 bf e8 7d af b0 54 73 cd d9 53 ce fd d0 22 e2 0b 52 cd 0a ae 95 a4 2e 7d df 6f 5a de cd 18 e3 87 f9 46 6f 2a 98 95 a7 dd 97 87 b6 ff b7 96 b5 3a dd f4 d6 1b c1 93 bc c1 37 c9 ed f7 48 c2 f2 e4 8d 9a 0e a5 78 a1 b4 5d c5 db c7 61 19 36 1e 76 35 ed 12 52 fd a0 cc be 65 31 87 ed 24 58 4c 85 9b ba c3 0a 4a 89 61 61 9a 11 13 dd 86 2c c6 f3 ec 84 90 cc 1a 22 33 2d cf 47 e4 21 1c cb a5 38 b3 b7 f2 38 0a 7c e0 Data Ascii: P-bD"[:w^jQej`Tq=H&okLDWOJ3s[6j1@nr<#@0c?<2D}TsS"R.}oZFo:7Hx]a6v5Re1$XLJaa,"3-G!88\|
2024-09-29 04:21:00 UTC	1369	IN	Data Raw: f2 4a b5 41 ca cd 3b a4 f2 51 3b 1c 95 5d 85 89 fd 49 b4 4d 38 09 d9 73 af 02 aa d8 14 4d 66 f4 3f d4 b0 07 1c a1 49 12 18 9a b2 72 1b bb 72 21 d2 4b 86 39 d1 8f 38 70 d9 7d 51 bf ec bd 8d 8b e7 67 fb 2d 84 2a 0f 73 6d b5 7e c5 58 06 d7 50 1a 30 64 f8 4d 5e 08 b5 f0 3f 44 c5 18 64 49 82 6d 3c 86 a8 70 3b a1 7f 06 79 8e 06 2c 22 db a6 a6 36 ad e4 76 ca 70 07 54 5c 5e ca 6e f4 db f7 be 7f 05 33 6d a4 3e 38 a4 65 43 ae f1 dc 4e 7d 10 ad cd ea ed 63 c3 a0 e6 d9 ad 24 73 37 db bc 13 fa 9c 23 d5 b5 3c 53 46 2d 41 ba a7 a0 14 e4 86 f9 7a ac d2 e2 89 b1 13 cf 0a 80 42 81 09 2a 7b b8 06 36 63 67 1d 89 87 b1 54 7a ad 47 07 58 1f 32 2b 93 82 cd f6 d9 19 ff 61 07 b6 9c 30 9b 01 1b 86 a4 ff 07 3b e6 1c 20 9d 45 45 61 47 98 64 f1 ce 98 00 06 d7 bf c0 5b ef aa 4d 00 bc Data Ascii: JA;Q;]IM8sMf?Irr!K98p}Qg-sm~XP0dM^?DdIm<p;y,"6vpT\^n3m>8eCN}c$s7#<SF-AzB{6cgTzGX2+a0; EEaGd[M
2024-09-29 04:21:00 UTC	1369	IN	Data Raw: 24 18 4d 72 89 f5 c0 9a 7c 5e ba 04 91 09 61 99 bb e2 b7 10 03 fe a7 3a 88 a0 cd 22 e9 d6 8a 9d db 61 09 c2 6c 02 f2 3e 1b de 68 00 c7 e1 79 a2 7f 80 14 61 d1 ce 7b 9e 32 3e af fe 43 50 ae 89 90 b0 4c c5 0f 10 20 9a 6a 3f d1 6e 08 74 67 e5 9e d8 d3 5d 03 a6 16 e1 53 88 b8 f8 f8 7b e1 b5 55 d3 87 05 91 28 27 b3 b5 62 e7 a3 27 66 8f e6 67 30 d3 83 dd ea 18 95 c4 4c 50 41 a5 4d 74 64 15 07 cc 29 e3 b3 32 c3 ba e3 59 21 d6 76 00 8e 26 60 6f 85 af fe 32 12 50 5b 0b 1b 9d 61 de 94 84 bb 35 fb c0 0c 53 87 7c 23 2b 80 b2 01 37 4a 05 a4 8a 0a 23 1b c8 b8 cc 5f ab d5 64 55 a9 a4 36 23 56 19 44 ae 86 c0 9b 42 22 4b 83 f7 d6 7c a2 1a b8 c0 c1 19 16 80 29 02 6f 90 d0 10 aa 74 6b fd 6c 03 9a e6 c8 2c ae 14 fb 6c 11 e8 a1 eb 0f f3 55 1f ec 29 dd b9 65 98 35 81 3c 41 ba Data Ascii: $Mr\|^a:"al>hya{2>CPL j?ntg]S{U('b'fg0LPAMtd)2Y!v&`o2P[a5S\|#+7J#_dU6#VDB"K\|)otkl,lU)e5<A
2024-09-29 04:21:00 UTC	1369	IN	Data Raw: c1 1d 67 5a be 08 32 cf 76 1a 6c 66 2c df 10 d0 a3 a2 ce 7f 59 bf f3 87 d1 ae ec dd 62 d4 a9 ea 1c f9 9e 19 d9 58 6f c3 49 12 c4 97 cb 9c dd 58 a8 81 a2 0e 5f 27 01 c4 12 f2 c3 35 f5 c7 15 5d 1a 4a 84 b8 fc 32 50 d2 08 39 32 b0 a8 43 cd 89 fa d4 ff 0c fd 40 f1 99 a6 43 a5 a0 86 f9 9b 18 36 14 45 9f 65 d1 00 42 40 8b 0b 06 e8 ac df 41 91 39 94 df 87 c3 02 e7 e6 c7 b4 e8 79 06 5d 00 f5 05 48 f1 09 07 89 03 2d 1c e0 20 db 62 b6 a8 39 0d d1 f0 4f 1e f5 19 30 0c 75 77 a7 ac 49 e2 c8 f1 a6 02 37 4a a6 78 95 c5 ab 32 af f3 5c ca 19 56 66 3d 6e 56 91 56 80 ab a4 d0 22 23 39 93 ac d6 76 38 78 0a fb b6 6d 15 0f 14 70 41 68 f6 d3 13 e8 79 e2 91 33 82 bb 70 51 09 0e 25 e4 d0 74 5e af 91 d8 20 7c 83 c2 82 5d 9d 59 42 38 6a 43 d7 ac 6e c4 23 07 26 cb c9 87 0b ee fc bd Data Ascii: gZ2vlf,YbXoIX_'5]J2P92C@C6EeB@A9y]H- b9O0uwI7Jx2\Vf=nVV"#9v8xmpAhy3pQ%t^ \|]YB8jCn#&

Target ID:	0
Start time:	00:20:35
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	00:20:39
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 --field-trial-handle=2320,i,16143554761151837650,1738748694076415774,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	00:20:42
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
https://dev-shamsunpavel.github.io/assignment-04-facebook_login_and_signup/index.html