Edit tour

Windows Analysis Report
http://xmu.fastestopt.com

Overview

General Information

Sample URL:	http://xmu.fastestopt.com
Analysis ID:	1523640
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2296 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2232,i,5948912565030126564,16594465241854581273,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://xmu.fastestopt.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:58420 -> 162.159.36.2:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: xmu.fastestopt.com to https://xmu.actionprolink.com/o/bmrhciom/c17f9dcc-802e-11ef-afe3-41d921c61080/c18a92fe-802e-11ef-b67c-7554c0c2b318
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: xmu.actionprolink.com to https://www.dpvyw6trk.com/7p4rrf/nfp1n58/?sub1=103989&sub2=c2a743f8-802e-11ef-b186-89c01e76f627
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: www.dpvyw6trk.com to https://afflat3a1.com/lnk.asp?o=23432&c=918277&a=574293&k=6164b8d4713f354a52a936396dea89d0&l=24395&s1=148&s2=9e6ff42287754e86ae94815cce54499c

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: xmu.fastestopt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /o/BMRHCIOM/c17f9dcc-802e-11ef-afe3-41d921c61080/c18a92fe-802e-11ef-b67c-7554c0c2b318 HTTP/1.1Host: xmu.actionprolink.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7P4RRF/NFP1N58/?sub1=103989&sub2=c2a743f8-802e-11ef-b186-89c01e76f627 HTTP/1.1Host: www.dpvyw6trk.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lnk.asp?o=23432&c=918277&a=574293&k=6164B8D4713F354A52A936396DEA89D0&l=24395&s1=148&s2=9e6ff42287754e86ae94815cce54499c HTTP/1.1Host: afflat3a1.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?mbi=1607332870 HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/2.194bef48.chunk.css HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://financialaidauthority.com/?mbi=1607332870Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main.130977d9.chunk.css HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://financialaidauthority.com/?mbi=1607332870Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/2.76b3d64d.chunk.js HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/?mbi=1607332870Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.d809321a.chunk.js HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://financialaidauthority.com/?mbi=1607332870Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://financialaidauthority.com/?mbi=1607332870Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://financialaidauthority.com/?mbi=1607332870Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo192.png HTTP/1.1Host: financialaidauthority.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://financialaidauthority.com/?mbi=1607332870Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/2.76b3d64d.chunk.js HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo192.png HTTP/1.1Host: financialaidauthority.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: xmu.fastestopt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: xmu.fastestopt.com
Source: global traffic	DNS traffic detected: DNS query: xmu.actionprolink.com
Source: global traffic	DNS traffic detected: DNS query: www.dpvyw6trk.com
Source: global traffic	DNS traffic detected: DNS query: afflat3a1.com
Source: global traffic	DNS traffic detected: DNS query: financialaidauthority.com

Source: chromecache_75.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_75.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58424
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/25@16/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2232,i,5948912565030126564,16594465241854581273,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://xmu.fastestopt.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2232,i,5948912565030126564,16594465241854581273,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://getbootstrap.com/)	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
xmu.fastestopt.com	45.147.195.6	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
www.dpvyw6trk.com	35.190.6.55	true	false	unknown
afflat3a1.com	69.172.200.185	true	false	unknown
financialaidauthority.com	69.172.201.115	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
xmu.actionprolink.com	45.147.195.6	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://financialaidauthority.com/logo192.png	false	unknown
https://financialaidauthority.com/?mbi=1607332870	false	unknown
http://xmu.fastestopt.com/	false	unknown
https://financialaidauthority.com/favicon.ico	false	unknown
https://financialaidauthority.com/static/css/2.194bef48.chunk.css	false	unknown
https://financialaidauthority.com/static/js/2.76b3d64d.chunk.js	false	unknown
https://www.dpvyw6trk.com/7P4RRF/NFP1N58/?sub1=103989&sub2=c2a743f8-802e-11ef-b186-89c01e76f627	false	unknown
https://xmu.fastestopt.com/	false	unknown
https://xmu.actionprolink.com/o/BMRHCIOM/c17f9dcc-802e-11ef-afe3-41d921c61080/c18a92fe-802e-11ef-b67c-7554c0c2b318	false	unknown
https://financialaidauthority.com/static/css/main.130977d9.chunk.css	false	unknown
https://financialaidauthority.com/static/js/main.d809321a.chunk.js	false	unknown
https://afflat3a1.com/lnk.asp?o=23432&c=918277&a=574293&k=6164B8D4713F354A52A936396DEA89D0&l=24395&s1=148&s2=9e6ff42287754e86ae94815cce54499c	false	unknown
https://financialaidauthority.com/manifest.json	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_75.2.dr	false		unknown
https://getbootstrap.com/)	chromecache_75.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
69.172.201.115	financialaidauthority.com	Canada	19324	DOSARRESTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
45.147.195.6	xmu.fastestopt.com	Russian Federation	49392	ASBAXETNRU	false
69.172.200.185	afflat3a1.com	Canada	19324	DOSARRESTUS	false
35.190.6.55	www.dpvyw6trk.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8
192.168.2.7
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523640
Start date and time:	2024-10-01 21:51:58 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://xmu.fastestopt.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/25@16/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 173.194.76.84, 142.250.185.238, 34.104.35.123, 2.19.126.163, 2.19.126.137, 20.12.23.50, 192.229.221.95, 40.69.42.241, 142.250.185.99, 199.232.214.172
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, slscr.update.microsoft.com, 7.4.8.4.4.3.1.4.0.0.0.0.0.0.0.0.0.0.0.a.0.0.1.f.1.1.1.0.1.0.a.2.ip6.arpa, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://xmu.fastestopt.com

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 18:52:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9777055711393676
Encrypted:	false
SSDEEP:	48:8xdbTDDUH2idAKZdA19ehwiZUklqehjy+3:8Xbhoy
MD5:	190149765FE8928231DF7E8CAA75908D
SHA1:	EFDA728D0DB4AE54857CF831A52C56001F55145F
SHA-256:	8D55C18A32A686976DE6C95B8EA03EA35994331B4B27DCDBCA01D4F34D880999
SHA-512:	2B61BA2AF63BC6F3025C6981FA2C513E4790141BAEF5C1A1AD7AFFDDE524C4120869930C3BD0BF6C9EE55BB443F947B1D4667C66AE57AA0D5E991A12BFB7B283
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........;...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IAY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Vg.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 18:52:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9920017750725467
Encrypted:	false
SSDEEP:	48:8xdbTDDUH2idAKZdA1weh/iZUkAQkqehYy+2:8XbT9Qpy
MD5:	29FF8F2B90BFBA9D34DF0466DCFF33F7
SHA1:	97E9F85208A23048CBCD280CB37D8AC5A801F798
SHA-256:	457F64175972DB46A0B2FFB4A85C5FFE7DC8F1A84FD037FD68F3F7BB1C62D11A
SHA-512:	5DD9D3BE47FB095656DA6034D75B45E93381693627544335F603D3753C4F860D994694252C081B10293DB5850A6413FD9CD8F796D088E11886555261075E1B7E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........;...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IAY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Vg.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.003167430536103
Encrypted:	false
SSDEEP:	48:8xMdbTDDsH2idAKZdA14tseh7sFiZUkmgqeh7s2y+BX:8x8brn0y
MD5:	D8370E417C0D4AA37B416E9F75964096
SHA1:	573B0358C3BDB3F93344D4FBCC07AC8452DC161E
SHA-256:	B84C121DA3BD6A0D42F10B7769AC4725FA62AFAC77E4817C5D57F5295C9A32FC
SHA-512:	ADE141919B17B0269D30AE506F15A58E6DF70254273E0E8C6ABE1709115F1F7C6CE18CA6D67A25A5AF61EFBBC43A191FA1E7738D7C7A4337C764035348F6031D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IAY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Vg.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 18:52:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.99103839448701
Encrypted:	false
SSDEEP:	48:8tIgdbTDDUH2idAKZdA1vehDiZUkwqehMy+R:8trbQuy
MD5:	AA4C3EFCD71B95BF2A3ECBCACCB7C44E
SHA1:	05069F1A84DE1C3FA0A43CF57CF7872FEF7904B1
SHA-256:	F8828EB4E2F3838A489EA18557DFA7BF2B15B94C7A8B75C31582B9A3E3CE07E3
SHA-512:	E95B8EF2071AE1FC4D1AC941312613811323F79E82C4A22DECDBDAF14419C9BD5BDC5B56B7699B5EFA12698465E6421690AA90821D548F65951EE4451D7C430A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....4...;...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IAY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Vg.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 18:52:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9777264698652655
Encrypted:	false
SSDEEP:	48:8X49dbTDDUH2idAKZdA1hehBiZUk1W1qehCy+C:8qbQ9iy
MD5:	C434B06FE916CAF7390B9183DE1B273A
SHA1:	C24C9BB1D3F63A261FA0E62BD9466AD8A8250A9A
SHA-256:	1896D634B74B4F8542A088B7AFA5D94BEAEE1B86D0E6D1C395F5E6FB5B371690
SHA-512:	89E972D3D9C441A472BF68622693E2C51655DF389D81E1A311A04C2C22EF2C5AF35A07406A54B06EF0F7BE4AC6774402249566DBFFDBDB2A482054EB8441F99E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?n..;...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IAY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Vg.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Oct 1 18:52:53 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.98884140923206
Encrypted:	false
SSDEEP:	48:8IdbTDDUH2idAKZdA1duT+ehOuTbbiZUk5OjqehOuTb0y+yT+:8wbeT/TbxWOvTb0y7T
MD5:	A7C617A5A880420349E60373FB1E62B6
SHA1:	9D793673B3A0FEA707AEE9DA54E418CACD7B6D72
SHA-256:	A9D1FD8709BC827BA0D73FD3E48D90782A944763782528D0674C8BF689A2BB6E
SHA-512:	B265448F050F55622F980275C9F6490523913CFA7FD02AB7778997A0555B532B9F463CA393F04A8095D152D5432C5EEB43A5EC5F30349A53030658BBFA51662E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....3.;...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IAY......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VAY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VAY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VAY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VAY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Vg.E.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5347
Entropy (8bit):	7.94375880473395
Encrypted:	false
SSDEEP:	96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv
MD5:	33DBDD0177549353EEEB785D02C294AF
SHA1:	7F4F2D68782A7FAFCEDA84554ECAB9B489877500
SHA-256:	C386396EC70DB3608075B5FBFAAC4AB1CCAA86BA05A68AB393EC551EB66C3E00
SHA-512:	E34572CF754FF7E1D0ACB12D8275252230AD1DD9ADC5858E807FEF0FB61AEA82CB1F9CA3EBAB3EEB449460373140105F8D773E7BDDBF6745F9E81CC1546621F4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e..5....PLTE...d..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..a..a..a..a..f..a..c..e..h..H.....'tRNS...#..,..._....E..L..n?X.4Qg.yt.:.....!.....IDATx..[.r.0....l..;>...i...?_-,.)........L'......o..o..o..o..o.x-..F?......&.?B.Y.>....MO.q.......8.r....1.O..'....<...x...h.>.[.q.@L...)...."7....$.../..I.k....T.w...O.V...B8..O_....YI..... .e....0.5SH....\|.../..e8=vbu.\5.......}7r..l.h.O..O.p'8?i.3..O.-....6...CS..3.u..qHc6I..)(........k..LV.....#...,<....t.pz......!...YQ.yZ...C:.a.x.D....\|.\....M.Q..4.6.b..O9.Q.X......wt3...~..0........@..K..d.[T..r..k...@.O.X6$..J........,5....F..#.0._o...Iy....S.....>m..K9%..m.9.W..VJ..uX..Cc...p..+.".......>..)>x..!".#s3...d.'.....4{...H.n..fP......#.....8C.b..."......\@...F...P..Mul..v.&.....2...n~..P#..g.L.......K..7C....IO.--......I..)@.`'..KOY....2r?.C...C(..8....7...M\|68....y........D.U:R.......7.G..W..mT#t...;..[..

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	downloaded
Size (bytes):	1385146
Entropy (8bit):	5.4985354486956535
Encrypted:	false
SSDEEP:	6144:sQpri3xzSQ8kwT5fAH/comP88RThM8hWDuZMHO1cuafkAef0WFBCNvmsQN6:stx+wBA88Rtc2BamsQN6
MD5:	0035D393D52A8DC4B008227CC9D294F3
SHA1:	D286BA77617A7E877B1931D00C9A59B57C0B62EA
SHA-256:	DE2F8B90BD2D93A0E19AFC102BCB50F4E689EF39B7741B82B81C6517A0E8C152
SHA-512:	ED246DF5D93790BE80484C0D4D43810D7FCB1A09E6B61AD2D68E47DA20D955B3039492E699E79063D1363B779B0E10FFE1EB33935DE31B9ECABBDA0EF7C634D5
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/static/js/2.76b3d64d.chunk.js
Preview:	/! For license information please see 2.76b3d64d.chunk.js.LICENSE.txt /.(this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[2],[function(t,e,n){"use strict";t.exports=n(223)},function(t,e,n){"use strict";t.exports=n(121)},function(t,e,n){t.exports=n(130)()},function(t,e,n){var r=n(8),i=r.Buffer;function o(t,e){for(var n in t)e[n]=t[n]}function a(t,e,n){return i(t,e,n)}i.from&&i.alloc&&i.allocUnsafe&&i.allocUnsafeSlow?t.exports=r:(o(r,e),e.Buffer=a),a.prototype=Object.create(i.prototype),o(i,a),a.from=function(t,e,n){if("number"===typeof t)throw new TypeError("Argument must not be a number");return i(t,e,n)},a.alloc=function(t,e,n){if("number"!==typeof t)throw new TypeError("Argument must be a number");var r=i(t);return void 0!==e?"string"===typeof n?r.fill(e,n):r.fill(e):r.fill(0),r},a.allocUnsafe=function(t){if("number"!==typeof t)throw new TypeError("Argument must be a number");return i(t)},a.allocUnsafeSlow=function(t){if("number"!==typeof

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65462)
Category:	dropped
Size (bytes):	1385146
Entropy (8bit):	5.4985354486956535
Encrypted:	false
SSDEEP:	6144:sQpri3xzSQ8kwT5fAH/comP88RThM8hWDuZMHO1cuafkAef0WFBCNvmsQN6:stx+wBA88Rtc2BamsQN6
MD5:	0035D393D52A8DC4B008227CC9D294F3
SHA1:	D286BA77617A7E877B1931D00C9A59B57C0B62EA
SHA-256:	DE2F8B90BD2D93A0E19AFC102BCB50F4E689EF39B7741B82B81C6517A0E8C152
SHA-512:	ED246DF5D93790BE80484C0D4D43810D7FCB1A09E6B61AD2D68E47DA20D955B3039492E699E79063D1363B779B0E10FFE1EB33935DE31B9ECABBDA0EF7C634D5
Malicious:	false
Reputation:	low
Preview:	/! For license information please see 2.76b3d64d.chunk.js.LICENSE.txt /.(this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[2],[function(t,e,n){"use strict";t.exports=n(223)},function(t,e,n){"use strict";t.exports=n(121)},function(t,e,n){t.exports=n(130)()},function(t,e,n){var r=n(8),i=r.Buffer;function o(t,e){for(var n in t)e[n]=t[n]}function a(t,e,n){return i(t,e,n)}i.from&&i.alloc&&i.allocUnsafe&&i.allocUnsafeSlow?t.exports=r:(o(r,e),e.Buffer=a),a.prototype=Object.create(i.prototype),o(i,a),a.from=function(t,e,n){if("number"===typeof t)throw new TypeError("Argument must not be a number");return i(t,e,n)},a.alloc=function(t,e,n){if("number"!==typeof t)throw new TypeError("Argument must be a number");var r=i(t);return void 0!==e?"string"===typeof n?r.fill(e,n):r.fill(e):r.fill(0),r},a.allocUnsafe=function(t){if("number"!==typeof t)throw new TypeError("Argument must be a number");return i(t)},a.allocUnsafeSlow=function(t){if("number"!==typeof

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5802)
Category:	downloaded
Size (bytes):	5854
Entropy (8bit):	5.099267423047712
Encrypted:	false
SSDEEP:	48:OHFGDr7brMveU3oxrX00P+KXmtmdYtyI0Vo0kDhkZhkLjDg2m0CUoHjT9rFUoWtW:kz3EX8OdK8EbOjT9raqskR
MD5:	C930721751DEB710C22A6188C43665D9
SHA1:	70609A8A0031EB6FB6B8FB725DA904E8C1C58A76
SHA-256:	DD1BDE2763ECD902E29DE62AEB28137601085BF555C92A3A803BD8BC42A7F489
SHA-512:	3094F35A347AFB6192E289409C5672E4D6B6378007F022FB0746A04DDBB60CABA5C3E723CF511F827A6C5B130A251ABB88438FB221A28D4586A532D44A5B5B51
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/static/css/main.130977d9.chunk.css
Preview:	body,html{height:100%}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Roboto","Oxygen","Ubuntu","Cantarell","Fira Sans","Droid Sans","Helvetica Neue",sans-serif;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;background:rgba(0,0,0,.05)}#root,.App{height:100%}code{font-family:source-code-pro,Menlo,Monaco,Consolas,"Courier New",monospace}@media(max-width:768px){h2{font-size:1.3rem}.hide-mobile{display:none}}.App{text-align:center}.App-logo{height:40vmin;pointer-events:none}@media (prefers-reduced-motion:no-preference){.App-logo{animation:App-logo-spin 20s linear infinite}}.App-header{background-color:#282c34;min-height:100vh;display:flex;flex-direction:column;align-items:center;justify-content:center;font-size:calc(10px + 2vmin);color:#fff}.App-link{color:#61dafb}.mb-maxw-500{max-width:500px}.text-small{font-size:.8rem}.text-xsmall{font-size:.65rem}.text-regular{font-size:1rem}.text-xlarge{font-size:1.3rem}.mw-200px{max-width:200px!important}.r

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	648
Entropy (8bit):	4.648411003815521
Encrypted:	false
SSDEEP:	12:n5oL0Mqo4XorigqXoTjvV/2wDTilmH2z1YMxeA9LSNDWKafe:n5HzXf7XybfDTilmWz1YCeCzKr
MD5:	FC3B19A436384D01FC46AD18FA3666B5
SHA1:	D53EF9C240666FD979D1AB100B2C0A946A49BBF7
SHA-256:	5F29D1722A24564CE607D8C0C6122B87A85DB56EF4175E36440B75B071526ADA
SHA-512:	9DB1A9B979C1C9B4F192DD74C3DAF46F0F4596E60C605E289CDE1C0173AF540399E4EB62E1B23EA1FE723EFD4B6E53E1CA186F7F55A041A720FAC0CB69C54134
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/manifest.json
Preview:	{.. "icons": [.. {.. "src": "favicon.ico",.. "sizes": "64x64 32x32 24x24 16x16",.. "type": "image/x-icon".. },.. {.. "src": "logo192.png",.. "type": "image/png",.. "sizes": "192x192".. },.. {.. "src": "logo512.png",.. "type": "image/png",.. "sizes": "512x512".. }.. ],.. "start_url": ".",.. "display": "standalone",.. "theme_color": "#000000",.. "background_color": "#ffffff",.. "manifest_version": 2,.. "name": "Pushnami",.. "version": "0.0.2",.. "permissions": ["gcm", "storage", "notifications"],.. "gcm_sender_id": "733213273952",.. "gcm_user_visible_only": true ..}..

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3009), with no line terminators
Category:	downloaded
Size (bytes):	3009
Entropy (8bit):	5.275505116203392
Encrypted:	false
SSDEEP:	48:0EPY1r2OjC7ReT66GHBYPm6YkuGvVpeuwTLHii3Ik4X6oT/ZXw:zPY1r2OjC7Rem6GHeu7uzeX94X68/a
MD5:	4E2E6F25FA3000EC69866FC7B923D016
SHA1:	1B19C474A13E640530C94E9D7393DF41DAC45CC3
SHA-256:	F0E8B869D8FBC370704219BB0DBD083181511103DF93B8CF8DDC6C7CC7DE4F71
SHA-512:	22E539A505C602718F8F6D14FA48A8ED50A32D92D4D7B3CDAC86CE93B168AA79D5937B8B7CB5F825B6A01C2F12274197AC0E4D124774AD2D8FBEAD332FF2334F
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/?mbi=1607332870
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.png"/><link rel="manifest" href="/manifest.json"/><link href="/static/css/2.194bef48.chunk.css" rel="stylesheet"><link href="/static/css/main.130977d9.chunk.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div><script>!function(e){function r(r){for(var n,a,i=r[0],c=r[1],l=r[2],s=0,p=[];s<i.length;s++)a=i[s],Object.prototype.hasOwnProperty.call(o,a)&&o[a]&&p.push(o[a][0]),o[a]=0;for(n in c)Object.prototype.hasOwnProperty.call(c,n)&&(e[n]=c[n]);for(f&&f(r);p.length;)p.shift()();return u.push.apply(u,l\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,i=1;i<t.length;i++){var c=t[i];0!==o[c]&&(n=!1)}n&&(u.splice(r--,1),e=a(a.s=t[0]))}return e}var n={

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit colormap, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	3870
Entropy (8bit):	7.717397930394703
Encrypted:	false
SSDEEP:	96:LBz+xCxxOSqQAjRvv9TXYR/vgJ4QuhrgSo:dKSYScddTX2Mmhrho
MD5:	C92B85A5B907C70211F4EC25E29A8C4A
SHA1:	1120538C77AD1F28A89243B4B53FE2AC16CC3BC6
SHA-256:	3D10F7DA6C603178340081668C4AC5B3AE9743CA9A262AB0FCD312FBB9F48BDD
SHA-512:	D792613E3C31D3AEA08AE9CE51A26498AFED8B48C93290640C64D0A23EDC85E524BC1D090B5BA3FA161B3F2F7D31F9D1DA5DB77B14189FC3F8ED81FF830FA70C
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/favicon.ico
Preview:	............ .....F......... .....)... .... .9...5...@@.... .....n....PNG........IHDR.............(-.S....PLTE""""""""""""""""""2PX=r.)7;:>H..-BGE..8do5Xb6[eK..K..1MU9gs3S\I..:gt'03@{.V..T..A}.V..@y.6\fH..-CII..E..+;@7_i7_jF..J..K..H..-BHa..,@FC..L..&.0W..N..I..$)+B..J..R..?v.>s.>u.S..=q.P..P..P..,?D4U^%+-M..K..%+,2OX+<AL..#&&D..%,.I..v.T.....tRNSI..J.e.e.....IDATx.M..ZEA.......%R....TTh.G..,...=......m.f.mnf.A.$.>!..g..Hg..E..}........k.d....Jo....3.L"J......Q.$....ff.,.5i9....H../mB...w..w;D..+&.W.....D.o.@.RI..B.om..........IEND.B`..PNG........IHDR...................ePLTE""""""""""""""""""""""""2RZN..J..3R[J..)59Y..0KS4W`Q..L..%+-0JR)6::gtC.."##?v.U..?w.<n{&-/Y..=q.:iuB..A}.A{.B../IPP..=q.K.._..L..$();lzR..a..I..Z..3U^1MU3T]Z..I..X..F..-BGP..6[e,@E5ZdO..-BHX..+=AW..,@FW..Q..?v.W..+<A@y."#$\..4Wa\..S..$(.EL^..V..6]h#$%G..#&';jwV..-CIL..Z..^..>u.S../HNM.._..\..M..8doD..D..>t.+=B[..,>C>t.<o}@y.0LS.EKT..$'(%,.A~.W..C..%+,\..C!......tRNS......G.....OIDATx.l..B.Q...u.._.<

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit colormap, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	3870
Entropy (8bit):	7.717397930394703
Encrypted:	false
SSDEEP:	96:LBz+xCxxOSqQAjRvv9TXYR/vgJ4QuhrgSo:dKSYScddTX2Mmhrho
MD5:	C92B85A5B907C70211F4EC25E29A8C4A
SHA1:	1120538C77AD1F28A89243B4B53FE2AC16CC3BC6
SHA-256:	3D10F7DA6C603178340081668C4AC5B3AE9743CA9A262AB0FCD312FBB9F48BDD
SHA-512:	D792613E3C31D3AEA08AE9CE51A26498AFED8B48C93290640C64D0A23EDC85E524BC1D090B5BA3FA161B3F2F7D31F9D1DA5DB77B14189FC3F8ED81FF830FA70C
Malicious:	false
Reputation:	low
Preview:	............ .....F......... .....)... .... .9...5...@@.... .....n....PNG........IHDR.............(-.S....PLTE""""""""""""""""""2PX=r.)7;:>H..-BGE..8do5Xb6[eK..K..1MU9gs3S\I..:gt'03@{.V..T..A}.V..@y.6\fH..-CII..E..+;@7_i7_jF..J..K..H..-BHa..,@FC..L..&.0W..N..I..$)+B..J..R..?v.>s.>u.S..=q.P..P..P..,?D4U^%+-M..K..%+,2OX+<AL..#&&D..%,.I..v.T.....tRNSI..J.e.e.....IDATx.M..ZEA.......%R....TTh.G..,...=......m.f.mnf.A.$.>!..g..Hg..E..}........k.d....Jo....3.L"J......Q.$....ff.,.5i9....H../mB...w..w;D..+&.W.....D.o.@.RI..B.om..........IEND.B`..PNG........IHDR...................ePLTE""""""""""""""""""""""""2RZN..J..3R[J..)59Y..0KS4W`Q..L..%+-0JR)6::gtC.."##?v.U..?w.<n{&-/Y..=q.:iuB..A}.A{.B../IPP..=q.K.._..L..$();lzR..a..I..Z..3U^1MU3T]Z..I..X..F..-BGP..6[e,@E5ZdO..-BHX..+=AW..,@FW..Q..?v.W..+<A@y."#$\..4Wa\..S..$(.EL^..V..6]h#$%G..#&';jwV..-CIL..Z..^..>u.S../HNM.._..\..M..8doD..D..>t.+=B[..,>C>t.<o}@y.0LS.EKT..$'(%,.A~.W..C..%+,\..C!......tRNS......G.....OIDATx.l..B.Q...u.._.<

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65326)
Category:	downloaded
Size (bytes):	190916
Entropy (8bit):	5.50147585144712
Encrypted:	false
SSDEEP:	1536:eAT6IQE4uz8uUsDEBi8uGc3JEayZcRzT5q3SYiLENM6HN26A02Fkj74LbH19TSob:7Tkoh1q3SYiLENM6HN26A02W4bTSLibx
MD5:	CED133B96A32FDF22868DD948D4404A0
SHA1:	BC5D7EB08D59F609F2DDC883E87CFE8A96051FED
SHA-256:	E78D713B6AA1E880B2B25B2549684086F21BEAAC38DD8FFA1536EB17FCDB4723
SHA-512:	2E77DBEDDE3D18A763AD4394AB49C56B352301660A2698E9BEC6D7A15DC8376BB814963BE9848D9A6AE8D6ADDDDB274744CAB4138177D34B471F6C05E4A77509
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/static/css/2.194bef48.chunk.css
Preview:	/!. Bootstrap v4.6.2 (https://getbootstrap.com/). * Copyright 2011-2022 The Bootstrap Authors. * Copyright 2011-2022 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},:after,:befo

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65179), with no line terminators
Category:	downloaded
Size (bytes):	65179
Entropy (8bit):	5.317427103721406
Encrypted:	false
SSDEEP:	768:wGhvk3cIUfW1sv/cPUTcqLZVbRDDqd1Bw7FED9TQFuKvr5R1D/6Z9Chze6npHAP:Fhvk3cIUfW1u/cPULbFbEhTsZ8Cpe/P
MD5:	91BF34B4BC48725EF54CAE77A94B232F
SHA1:	00B4E74C26DFE63668EAD33272CC7C177EAAC2E6
SHA-256:	3148DC21A2DD45B9621AEAB29D11347B90B82BFFB8A80B1379849F18A0CF6042
SHA-512:	F08D2EB6F42FC2FEC8A32AE7770B65E84A0E343E4ED76761BC07BB712583235F23AF948F8C7B0D7DBE1B9988111EB9E4CF56465EE52197BAACAA8A2890AE8040
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/static/js/main.d809321a.chunk.js
Preview:	(this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[0],{108:function(e,t,s){"use strict";(function(e){var a=s(1),n=s(5),o=s(109),c=s.n(o),i=s(110),r=s.n(i),d=s(45),l=s(111),m=s.n(l),u=(s(222),s(6)),h=s.n(u),p=s(23),j=s(34),b=s(118),x=s(35),g=s(120),v=s(119),y=s(113),N=s(114),O=s(115),f=s(116),S=s(117),C=s.n(S),_=s(0);p.b.add(j.b,b.a,j.a);class I extends a.Component{constructor(){super(...arguments),this.state={dataLoaded:!1,error:!1},this.getPrePop=(e,t)=>{let s=h.a.cloneDeep(t);return s.survey.forEach((t=>{if(""===t.response\|\|0===t.response.length){let s=x.a.find((e=>e.type===t.type));s.requiredFields.length>0&&(t.response={},s.requiredFields.forEach((s=>{!(s in e)\|\|""===e[s]\|\|""!==t.response[s]&&s in t.response\|\|(t.response[s]=e[s])})))}})),s}}componentDidMount(){const t=new d.a;let s=r.a.parse(this.props.location.search),a=0;s.mbi?(a=encodeURIComponent(parseInt(s.mbi)),t.set("mbi",a,{secure:!0,maxAge:new Date(Date.now()+18e5)})):t.get("mbi")&

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5347
Entropy (8bit):	7.94375880473395
Encrypted:	false
SSDEEP:	96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv
MD5:	33DBDD0177549353EEEB785D02C294AF
SHA1:	7F4F2D68782A7FAFCEDA84554ECAB9B489877500
SHA-256:	C386396EC70DB3608075B5FBFAAC4AB1CCAA86BA05A68AB393EC551EB66C3E00
SHA-512:	E34572CF754FF7E1D0ACB12D8275252230AD1DD9ADC5858E807FEF0FB61AEA82CB1F9CA3EBAB3EEB449460373140105F8D773E7BDDBF6745F9E81CC1546621F4
Malicious:	false
Reputation:	low
URL:	https://financialaidauthority.com/logo192.png
Preview:	.PNG........IHDR.............e..5....PLTE...d..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..`..a..a..a..a..a..a..a..a..a..a..a..f..a..c..e..h..H.....'tRNS...#..,..._....E..L..n?X.4Qg.yt.:.....!.....IDATx..[.r.0....l..;>...i...?_-,.)........L'......o..o..o..o..o.x-..F?......&.?B.Y.>....MO.q.......8.r....1.O..'....<...x...h.>.[.q.@L...)...."7....$.../..I.k....T.w...O.V...B8..O_....YI..... .e....0.5SH....\|.../..e8=vbu.\5.......}7r..l.h.O..O.p'8?i.3..O.-....6...CS..3.u..qHc6I..)(........k..LV.....#...,<....t.pz......!...YQ.yZ...C:.a.x.D....\|.\....M.Q..4.6.b..O9.Q.X......wt3...~..0........@..K..d.[T..r..k...@.O.X6$..J........,5....F..#.0._o...Iy....S.....>m..K9%..m.9.W..VJ..uX..Cc...p..+.".......>..)>x..!".#s3...d.'.....4{...H.n..fP......#.....8C.b..."......\@...F...P..Mul..v.&.....2...n~..P#..g.L.......K..7C....IO.--......I..)@.`'..KOY....2r?.C...C(..8....7...M\|68....y........D.U:R.......7.G..W..mT#t...;..[..

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 21:52:42.923718929 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:52:42.923809052 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:52:43.017469883 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:52:52.537916899 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:52:52.725430012 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:52:52.725459099 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:52:53.894221067 CEST	49709	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:52:53.894282103 CEST	443	49709	142.250.184.196	192.168.2.5
Oct 1, 2024 21:52:53.894357920 CEST	49709	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:52:53.894625902 CEST	49709	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:52:53.894643068 CEST	443	49709	142.250.184.196	192.168.2.5
Oct 1, 2024 21:52:54.268512011 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 1, 2024 21:52:54.268642902 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:52:54.567137957 CEST	443	49709	142.250.184.196	192.168.2.5
Oct 1, 2024 21:52:54.567442894 CEST	49709	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:52:54.567468882 CEST	443	49709	142.250.184.196	192.168.2.5
Oct 1, 2024 21:52:54.568505049 CEST	443	49709	142.250.184.196	192.168.2.5
Oct 1, 2024 21:52:54.568591118 CEST	49709	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:52:54.571213961 CEST	49709	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:52:54.571306944 CEST	443	49709	142.250.184.196	192.168.2.5
Oct 1, 2024 21:52:54.617763042 CEST	49709	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:52:54.617793083 CEST	443	49709	142.250.184.196	192.168.2.5
Oct 1, 2024 21:52:54.665247917 CEST	49709	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:52:54.868629932 CEST	49712	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:54.869254112 CEST	49713	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:54.873528957 CEST	80	49712	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:54.873608112 CEST	49712	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:54.873842001 CEST	49712	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:54.874002934 CEST	80	49713	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:54.874078035 CEST	49713	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:54.878554106 CEST	80	49712	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:55.565731049 CEST	80	49712	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:55.618741035 CEST	49712	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:55.724564075 CEST	49714	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:55.724632025 CEST	443	49714	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:55.724694967 CEST	49714	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:55.725286007 CEST	49714	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:55.725306034 CEST	443	49714	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:56.515911102 CEST	443	49714	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:56.516879082 CEST	49714	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:56.516906977 CEST	443	49714	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:56.517927885 CEST	443	49714	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:56.517992973 CEST	49714	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:56.969024897 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:56.969068050 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:56.969229937 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:56.971097946 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:56.971111059 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:57.152069092 CEST	49714	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:57.152184963 CEST	49714	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:57.152199984 CEST	443	49714	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:57.152260065 CEST	443	49714	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:57.194384098 CEST	49714	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:57.194395065 CEST	443	49714	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:57.245254040 CEST	49714	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:57.820521116 CEST	443	49714	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:57.820601940 CEST	443	49714	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:57.820842981 CEST	49714	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:57.823275089 CEST	49714	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:57.823291063 CEST	443	49714	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:57.826529980 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:57.826601028 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:57.835339069 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:57.835357904 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:57.835642099 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:57.881134033 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:57.952385902 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:57.999403954 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:58.151166916 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:58.151252985 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:58.151309967 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:58.202951908 CEST	49715	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:58.202975988 CEST	443	49715	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:58.246601105 CEST	49716	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:58.246644974 CEST	443	49716	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:58.246738911 CEST	49716	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:58.247571945 CEST	49716	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:58.247581959 CEST	443	49716	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:58.299751043 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:58.299806118 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:58.299921989 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:58.300585032 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:58.300594091 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:58.945115089 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:58.945194006 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:58.962349892 CEST	443	49716	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:59.001822948 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:59.001851082 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:59.002181053 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:59.004283905 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:59.005155087 CEST	49716	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:59.005181074 CEST	443	49716	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:59.006328106 CEST	443	49716	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:59.006407022 CEST	49716	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:59.016637087 CEST	49716	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:59.016738892 CEST	443	49716	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:59.017049074 CEST	49716	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:59.017071962 CEST	443	49716	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:59.051399946 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:59.069626093 CEST	49716	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:59.223226070 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:59.223308086 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:59.223481894 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:59.225323915 CEST	49717	443	192.168.2.5	184.28.90.27
Oct 1, 2024 21:52:59.225338936 CEST	443	49717	184.28.90.27	192.168.2.5
Oct 1, 2024 21:52:59.657387972 CEST	443	49716	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:59.657478094 CEST	443	49716	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:59.657648087 CEST	49716	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:59.658454895 CEST	49716	443	192.168.2.5	45.147.195.6
Oct 1, 2024 21:52:59.658478022 CEST	443	49716	45.147.195.6	192.168.2.5
Oct 1, 2024 21:52:59.703850985 CEST	49718	443	192.168.2.5	35.190.6.55
Oct 1, 2024 21:52:59.703952074 CEST	443	49718	35.190.6.55	192.168.2.5
Oct 1, 2024 21:52:59.704045057 CEST	49718	443	192.168.2.5	35.190.6.55
Oct 1, 2024 21:52:59.704539061 CEST	49718	443	192.168.2.5	35.190.6.55
Oct 1, 2024 21:52:59.704575062 CEST	443	49718	35.190.6.55	192.168.2.5
Oct 1, 2024 21:53:00.169572115 CEST	443	49718	35.190.6.55	192.168.2.5
Oct 1, 2024 21:53:00.169874907 CEST	49718	443	192.168.2.5	35.190.6.55
Oct 1, 2024 21:53:00.169910908 CEST	443	49718	35.190.6.55	192.168.2.5
Oct 1, 2024 21:53:00.170972109 CEST	443	49718	35.190.6.55	192.168.2.5
Oct 1, 2024 21:53:00.171045065 CEST	49718	443	192.168.2.5	35.190.6.55
Oct 1, 2024 21:53:00.308389902 CEST	49718	443	192.168.2.5	35.190.6.55
Oct 1, 2024 21:53:00.308583021 CEST	49718	443	192.168.2.5	35.190.6.55
Oct 1, 2024 21:53:00.308594942 CEST	443	49718	35.190.6.55	192.168.2.5
Oct 1, 2024 21:53:00.352839947 CEST	49718	443	192.168.2.5	35.190.6.55
Oct 1, 2024 21:53:00.352861881 CEST	443	49718	35.190.6.55	192.168.2.5
Oct 1, 2024 21:53:00.398350954 CEST	49718	443	192.168.2.5	35.190.6.55
Oct 1, 2024 21:53:00.447557926 CEST	443	49718	35.190.6.55	192.168.2.5
Oct 1, 2024 21:53:00.448040962 CEST	49718	443	192.168.2.5	35.190.6.55
Oct 1, 2024 21:53:00.448081970 CEST	443	49718	35.190.6.55	192.168.2.5
Oct 1, 2024 21:53:00.448193073 CEST	49718	443	192.168.2.5	35.190.6.55
Oct 1, 2024 21:53:00.710236073 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:00.710297108 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:00.710437059 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:00.711011887 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:00.711024046 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:01.348678112 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:01.349112034 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:01.349142075 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:01.350214958 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:01.350286007 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:01.350295067 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:01.350353003 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:01.351505995 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:01.351569891 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:01.351747990 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:01.399406910 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:01.401608944 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:01.401631117 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:01.449068069 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:01.470426083 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:01.470504045 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:01.470890045 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:01.471324921 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:01.471343994 CEST	443	49719	69.172.200.185	192.168.2.5
Oct 1, 2024 21:53:01.471354961 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:01.471400023 CEST	49719	443	192.168.2.5	69.172.200.185
Oct 1, 2024 21:53:01.830781937 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:01.830828905 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:01.831041098 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:01.831274033 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:01.831285000 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.393871069 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.394299030 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.394335985 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.395396948 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.395476103 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.395483971 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.395698071 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.397080898 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.397146940 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.397404909 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.397416115 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.447451115 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.507287979 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.507309914 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.507368088 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.507378101 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.507446051 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.508610010 CEST	49720	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.508625031 CEST	443	49720	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.563415051 CEST	49721	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.563460112 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.563697100 CEST	49721	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.566411018 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.566420078 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.566571951 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.568315029 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.568356037 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.568429947 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.569225073 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.569283962 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.569379091 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.569603920 CEST	49721	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.569619894 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.569849014 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.569869041 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.570105076 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.570120096 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:02.570259094 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:02.570271015 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.118050098 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.120515108 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.143708944 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.151899099 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.170974016 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.173115015 CEST	49721	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.184987068 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.201093912 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.423230886 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.423274994 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.423367977 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.423460960 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.423502922 CEST	49721	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.423528910 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.423727036 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.423779011 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.423962116 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.424015045 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.424521923 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.424617052 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.424628973 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.424685001 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.424912930 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.424928904 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.424978971 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.424990892 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.425041914 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.426014900 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.426100969 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.426501036 CEST	49721	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.426584959 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.427134991 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.427201033 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.427455902 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.427516937 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.427756071 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.427845001 CEST	49721	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.427895069 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.427906990 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.427941084 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.427953959 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.471447945 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.475420952 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.477791071 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.477893114 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.890965939 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.890995026 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.891037941 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.891076088 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.891118050 CEST	49721	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.891190052 CEST	49721	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.893507004 CEST	49721	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.893563032 CEST	443	49721	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.904658079 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.904685974 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.904737949 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.904755116 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.904782057 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.904814959 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.904860020 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.904967070 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.905625105 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.905642033 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.905648947 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.905690908 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.905721903 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.905740976 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.905791998 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.905818939 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.905838966 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.906033039 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.906534910 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.906557083 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.906563997 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.906619072 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.906625986 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.906646967 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.906666040 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.906697989 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.906713963 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.906713963 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.906739950 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.906761885 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.910908937 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.910929918 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.910989046 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.910999060 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.914829969 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.914848089 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.914947033 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.914954901 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.919071913 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.919094086 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.919142962 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.919171095 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.919203043 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.922816992 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.922842026 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.922924995 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.922935963 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.925209999 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.925230026 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.925317049 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.925326109 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.926136971 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.926152945 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.926218987 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.926237106 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.928991079 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.929007053 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.929052114 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.929064035 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.929094076 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.930028915 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.930054903 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.930074930 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.930085897 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.930121899 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.931847095 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.931914091 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.932270050 CEST	49723	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.932285070 CEST	443	49723	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.932703018 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.932722092 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.932765007 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.932773113 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.932826996 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.938407898 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.938424110 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.938487053 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.938494921 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.938530922 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.940221071 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.940237999 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.940287113 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.940293074 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.940335989 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.943034887 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.943048954 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.943106890 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.943115950 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.943151951 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.944729090 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.944749117 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.944793940 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.944799900 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.944833994 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.946774006 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.946789026 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.946855068 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.946862936 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.959214926 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.959235907 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.959307909 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.959323883 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.959343910 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.961456060 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.961482048 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.961539984 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.961549044 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.961590052 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.964037895 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.964056969 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.964124918 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.964133024 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.964154959 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.966125011 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.966149092 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.966211081 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:03.966217995 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:03.987751961 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.019340038 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.030710936 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.030735016 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.030813932 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.030826092 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.030869961 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.031878948 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.031894922 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.031951904 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.031959057 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.032022953 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.033617020 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.033631086 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.033705950 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.033711910 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.033755064 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.035375118 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.035394907 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.035465956 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.035473108 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.035517931 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.037147999 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.037163019 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.037240028 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.037246943 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.037291050 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.038779974 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.038809061 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.038845062 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.038850069 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.038882971 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.038903952 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.040627956 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.040642977 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.040689945 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.040697098 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.040739059 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.041600943 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.041615009 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.041682959 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.041688919 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.041735888 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.049676895 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.049691916 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.049719095 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.049767017 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.049784899 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.049850941 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.051065922 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.051089048 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.051146030 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.051155090 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.051207066 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.051220894 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.052562952 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.052582979 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.052635908 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.052644014 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.052680969 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.052700996 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.054308891 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.054339886 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.054397106 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.054405928 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.054446936 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.054460049 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.055207968 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.055267096 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.055270910 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.055283070 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.055313110 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.055355072 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.055367947 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.057184935 CEST	49722	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.057203054 CEST	443	49722	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.124401093 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.124433994 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.125369072 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.125391960 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.125441074 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.126550913 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.126571894 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.126636028 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.126642942 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.126713037 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.127403975 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.127418995 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.127480030 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.127486944 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.127531052 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.128926039 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.128941059 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.129018068 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.129024029 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.129072905 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.130619049 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.130633116 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.130693913 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.130700111 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.130743980 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.132189035 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.132205963 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.132260084 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.132267952 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.132316113 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.133094072 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.133106947 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.133168936 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.133173943 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.133244038 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.134011984 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.134027004 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.134088993 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.134093046 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.134150028 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.230557919 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.230578899 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.230659008 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.230668068 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.230715990 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.231743097 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.231759071 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.231823921 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.231828928 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.231889009 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.232948065 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.232964039 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.233103037 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.233108997 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.233185053 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.234659910 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.234684944 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.234755039 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.234761953 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.234807968 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.241358042 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.241378069 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.241445065 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.241450071 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.241496086 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.242949963 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.242964029 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.243026018 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.243030071 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.243093014 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.243890047 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.243907928 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.243964911 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.243969917 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.244014025 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.244793892 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.244807959 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.244873047 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.244878054 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.244925022 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.323458910 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.323479891 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.323549032 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.323559046 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.323631048 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.324522018 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.324537039 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.324605942 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.324611902 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.324675083 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.326123953 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.326138973 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.326198101 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.326204062 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.326253891 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.326278925 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.327081919 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.327095985 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.327174902 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.327181101 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.327230930 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.328818083 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.328835011 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.328905106 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.328911066 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.328954935 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.329807043 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.329821110 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.329890966 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.329895973 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.329950094 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.331574917 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.331590891 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.331654072 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.331659079 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.331696033 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.332459927 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.332473993 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.332530022 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.332535028 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.332583904 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.415391922 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.415421963 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.415484905 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.415497065 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.415566921 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.416326046 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.416340113 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.416390896 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.416397095 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.416460037 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.417421103 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.417442083 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.417503119 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.417509079 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.417551041 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.418787956 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.418804884 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.418868065 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.418874025 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.418917894 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.419728041 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.419743061 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.419804096 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.419810057 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.419847012 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.421364069 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.421385050 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.421444893 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.421451092 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.421508074 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.421646118 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.421658993 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.421715975 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.421720028 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.421756029 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.423259020 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.423274040 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.423332930 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.423337936 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.423392057 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.467328072 CEST	443	49709	142.250.184.196	192.168.2.5
Oct 1, 2024 21:53:04.467407942 CEST	443	49709	142.250.184.196	192.168.2.5
Oct 1, 2024 21:53:04.467474937 CEST	49709	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:53:04.507527113 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.507550001 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.507620096 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.507630110 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.507679939 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.508651018 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.508668900 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.508795023 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.508800983 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.508852959 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.509926081 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.509942055 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.509994984 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.509999990 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.510050058 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.510778904 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.510793924 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.510864973 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.510869980 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.510914087 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.511575937 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.511594057 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.511671066 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.511674881 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.511732101 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.512445927 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.512460947 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.512540102 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.512543917 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.512594938 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.513581038 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.513609886 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.513684034 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.513689041 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.513745070 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.514095068 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.514110088 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.514172077 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.514175892 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.514219999 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.519079924 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.600040913 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.600060940 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.600143909 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.600152016 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.600290060 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.600851059 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.600871086 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.600939989 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.600944042 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.600994110 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.601753950 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.601769924 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.601846933 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.601850986 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.601905107 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.602199078 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.602222919 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.602283001 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.602291107 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.602360010 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.603349924 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.603370905 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.603440046 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.603445053 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.603481054 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.603502989 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.603965998 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.603985071 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.604036093 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.604041100 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.604077101 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.604099035 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.604929924 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.605628967 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.605652094 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.605698109 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.605703115 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.605763912 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.606372118 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.606395006 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.606456041 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.606460094 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.606508017 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.692358971 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.692379951 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.692456961 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.692464113 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.692596912 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.693219900 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.693236113 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.693298101 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.693303108 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.693350077 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.694154024 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.694166899 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.694310904 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.694314957 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.694364071 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.694674969 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.694688082 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.694757938 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.694761992 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.694804907 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.695583105 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.695600033 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.695671082 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.695676088 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.695725918 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.696394920 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.696408987 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.696471930 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.696475983 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.696521997 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.697865963 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.697879076 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.697969913 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.697973967 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.698030949 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.698824883 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.698838949 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.698899984 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.698904991 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.698960066 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.784827948 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.784845114 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.784914017 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.784919024 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.784971952 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.785628080 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.785641909 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.785697937 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.785701990 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.785742044 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.786451101 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.786465883 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.786515951 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.786520958 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.786557913 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.786890030 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.786909103 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.786963940 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.786967993 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.787015915 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.787688971 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.787702084 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.787755966 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.787760973 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.787806034 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.788830996 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.788845062 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.788932085 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.788937092 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.788978100 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.790311098 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.790328026 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.790389061 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.790394068 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.790440083 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.791208029 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.791220903 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.791280985 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.791285038 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.791323900 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.792855024 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.887763977 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.887779951 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.887852907 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.887860060 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.887908936 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.895731926 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.895746946 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.895831108 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.895836115 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.895875931 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.897958040 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.898020029 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.898025036 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.898062944 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.898153067 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.923773050 CEST	49724	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.923785925 CEST	443	49724	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.967782974 CEST	49709	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:53:04.967808008 CEST	443	49709	142.250.184.196	192.168.2.5
Oct 1, 2024 21:53:04.969213009 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.969261885 CEST	443	49728	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.969326973 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.970669031 CEST	49729	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.970716953 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.970787048 CEST	49729	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.972126007 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.972136021 CEST	443	49728	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:04.972949982 CEST	49729	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:04.972974062 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:05.530935049 CEST	443	49728	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:05.531790972 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:05.581614017 CEST	49729	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:05.581624985 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.030383110 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.030416012 CEST	443	49728	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.030813932 CEST	49729	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.030850887 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.031420946 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.031656981 CEST	443	49728	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.031733036 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.031744003 CEST	443	49728	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.031791925 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.032263994 CEST	49729	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.032345057 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.032974005 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.033031940 CEST	443	49728	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.033523083 CEST	49729	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.033670902 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.033683062 CEST	443	49728	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.079406023 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.086128950 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.128552914 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.128576994 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.128648043 CEST	49729	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.128680944 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.128734112 CEST	49729	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.128909111 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.128982067 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.129106045 CEST	49729	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.146686077 CEST	443	49728	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.146759033 CEST	443	49728	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.146821976 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.249164104 CEST	49728	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.249186993 CEST	443	49728	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.258822918 CEST	49729	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.258866072 CEST	443	49729	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.261224031 CEST	49730	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.261257887 CEST	443	49730	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.261336088 CEST	49730	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.265213966 CEST	49730	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.265243053 CEST	443	49730	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.295841932 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.295876026 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.295948029 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.296888113 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.296902895 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.929024935 CEST	49735	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.929068089 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:06.929155111 CEST	49735	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.929742098 CEST	49735	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:06.929754972 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.013430119 CEST	443	49730	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.014524937 CEST	49730	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.014590979 CEST	443	49730	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.014986992 CEST	443	49730	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.015799999 CEST	49730	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.015889883 CEST	443	49730	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.016419888 CEST	49730	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.059432983 CEST	443	49730	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.110775948 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.116487026 CEST	443	49730	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.116513968 CEST	443	49730	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.116584063 CEST	443	49730	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.116592884 CEST	49730	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.116642952 CEST	49730	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.173374891 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.173393965 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.174588919 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.174601078 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.174649000 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.174659014 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.174715996 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.175765038 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.175829887 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.176194906 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.176206112 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.186000109 CEST	49730	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.186048985 CEST	443	49730	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.258735895 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.304649115 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.304671049 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.304678917 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.304696083 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.304703951 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.304707050 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.304725885 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.304745913 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.304790020 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.304792881 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.304821014 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.389550924 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.389604092 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.389621973 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.389643908 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.389648914 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.389681101 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.389697075 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.391129971 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.391138077 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.391148090 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.391174078 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.391196966 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.391207933 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.391257048 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.478260994 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.478327036 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.478343964 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.478377104 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.478384018 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.478401899 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.478419065 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.478425980 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.478456020 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.479106903 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.479137897 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.479163885 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.479173899 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.479208946 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.479222059 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.480660915 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.480675936 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.480742931 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.480751038 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.480792999 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.480792999 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.491333008 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.491349936 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.491405010 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.491414070 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.491432905 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.491457939 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.494606018 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.556483984 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.559267044 CEST	49735	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.559281111 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.560400963 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.560461998 CEST	49735	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.560468912 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.560570002 CEST	49735	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.561177015 CEST	49735	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.561243057 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.561695099 CEST	49735	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.561707020 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.566633940 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.566657066 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.566720009 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.566729069 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.566766977 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.566854954 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.567548990 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.567574978 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.567620039 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.567625046 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.567662954 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.567677975 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.568574905 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.568592072 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.568634033 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.568640947 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.568674088 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.568712950 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.569474936 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.569489002 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.569535017 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.569540977 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.569569111 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.569601059 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.570493937 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.570508003 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.570561886 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.570568085 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.570612907 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.571535110 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.571557999 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.571602106 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.571607113 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.571643114 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.571907997 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.578989983 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.580499887 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.580521107 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.580574989 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.580583096 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.580641985 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.585145950 CEST	49736	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.585191965 CEST	443	49736	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.585329056 CEST	49736	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.585891962 CEST	49736	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.585911036 CEST	443	49736	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.661304951 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.661333084 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.661381006 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.661407948 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.661426067 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.661469936 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.662601948 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.662616968 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.662663937 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.662668943 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.662703037 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.662723064 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.663239956 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.663259029 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.663316011 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.663321972 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.663366079 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.665867090 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.665882111 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.665941000 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.665946960 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.666007042 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.666790962 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.666805983 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.666856050 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.666861057 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.666894913 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.666906118 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.667062998 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.667078018 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.667171001 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.667176008 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.667190075 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.667222023 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.668041945 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.668056011 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.668108940 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.668114901 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.668143034 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.668163061 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.670136929 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.670198917 CEST	49735	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.670216084 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.670227051 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.670273066 CEST	49735	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.686738014 CEST	49735	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.686755896 CEST	443	49735	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.750653982 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.750678062 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.750793934 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.750794888 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.750832081 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.750907898 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.751229048 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.751246929 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.751295090 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.751301050 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.751322031 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.751341105 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.751903057 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.751919985 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.751977921 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.751983881 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.752015114 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.752036095 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.752952099 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.752968073 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.753015041 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.753021002 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.753062010 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.753612995 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.753627062 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.753670931 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.753676891 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.753701925 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.753716946 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.754425049 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.754440069 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.754494905 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.754499912 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.754523993 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.754539013 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.755089045 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.755103111 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.755146027 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.755151987 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.755183935 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.755189896 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.755887032 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.755902052 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.755965948 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.755973101 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.756051064 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.832021952 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:53:07.832144022 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:53:07.832626104 CEST	49738	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:53:07.832659006 CEST	443	49738	23.1.237.91	192.168.2.5
Oct 1, 2024 21:53:07.832823992 CEST	49738	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:53:07.833105087 CEST	49738	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:53:07.833117962 CEST	443	49738	23.1.237.91	192.168.2.5
Oct 1, 2024 21:53:07.837186098 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 1, 2024 21:53:07.837637901 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 1, 2024 21:53:07.838001966 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.838028908 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.838088036 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.838113070 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.838129997 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.838219881 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.839524031 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.839539051 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.839595079 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.839602947 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.839637995 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.839662075 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.840352058 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.840367079 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.840406895 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.840413094 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.840440035 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.840459108 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.841073990 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.841089010 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.841135025 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.841167927 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.841172934 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.841275930 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.841706038 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.841718912 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.841792107 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.841799021 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.841839075 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.842509985 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.842525005 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.842675924 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.842683077 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.842725992 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.843291998 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.843312025 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.843411922 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.843417883 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.843461037 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.844145060 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.844158888 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.844228983 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.844234943 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.844276905 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.927124023 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.927146912 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.927206039 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.927229881 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.927293062 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.928809881 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.928828001 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.928895950 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.928903103 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.928940058 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.929074049 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.929089069 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.929138899 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.929150105 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.929188967 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.929965019 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.929984093 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.930030107 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.930036068 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.930066109 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.930104971 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.930316925 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.930381060 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.930391073 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.930449963 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.931528091 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.931554079 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.931586981 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.931592941 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.931629896 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.931643963 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.932279110 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.932293892 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.932339907 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.932344913 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.932368040 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.932387114 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.932748079 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.932761908 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.932833910 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.932833910 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.932840109 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:07.933137894 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:07.958594084 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.024497032 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.024517059 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.024600983 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.024612904 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.024662971 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.024974108 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.024988890 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.025051117 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.025057077 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.025096893 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.026062965 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.026077032 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.026129007 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.026134014 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.026176929 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.026184082 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.026711941 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.026726007 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.026786089 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.026791096 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.026833057 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.027353048 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.027368069 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.027420044 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.027426004 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.027456999 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.027476072 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.028023958 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.028218031 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.028238058 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.028285980 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.028290987 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.028326035 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.028342009 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.029115915 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.029129982 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.029177904 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.029187918 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.029200077 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.029227972 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.029263973 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.030554056 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.113328934 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.113348007 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.113413095 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.113435030 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.114209890 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.114233971 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.114265919 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.114273071 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.114315033 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.115163088 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.115176916 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.115233898 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.115240097 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.115257978 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.115622044 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.115639925 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.115681887 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.115686893 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.115695000 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.115706921 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.115710974 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.115742922 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.115750074 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.115778923 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.116584063 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.116604090 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.116647005 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.116652966 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.116678953 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.117546082 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.117558956 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.117598057 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.117605925 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.117645025 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.118412018 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.118428946 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.118482113 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.118486881 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.118511915 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.143114090 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.157840967 CEST	443	49736	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.158099890 CEST	49736	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.158124924 CEST	443	49736	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.158497095 CEST	443	49736	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.158967018 CEST	49736	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.159034014 CEST	443	49736	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.159404039 CEST	49736	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.162889004 CEST	49738	443	192.168.2.5	23.1.237.91
Oct 1, 2024 21:53:08.201962948 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.201983929 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.202040911 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.202058077 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.202084064 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.202409983 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.202428102 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.202466011 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.202472925 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.202498913 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.203304052 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.203316927 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.203356028 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.203371048 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.203388929 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.203877926 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.203896999 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.203933954 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.203939915 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.203953981 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.204515934 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.204535007 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.204577923 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.204585075 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.204639912 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.205477953 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.205492020 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.205538988 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.205550909 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.205559969 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.205575943 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.205598116 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.205761909 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.206475019 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.206489086 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.206537962 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.206545115 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.206574917 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.206590891 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.207422972 CEST	443	49736	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.256282091 CEST	443	49736	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.256300926 CEST	443	49736	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.256370068 CEST	443	49736	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.256376028 CEST	49736	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.256427050 CEST	49736	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.259422064 CEST	49736	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.259447098 CEST	443	49736	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.290627003 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.290668011 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.290721893 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.290736914 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.290771008 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.290785074 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.291158915 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.291173935 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.291227102 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.291234016 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.291265965 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.291274071 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.291802883 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.291816950 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.291876078 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.291882992 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.291914940 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.291938066 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.292414904 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.292429924 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.292484999 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.292490959 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.292534113 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.293118954 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.293133020 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.293195963 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.293201923 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.293243885 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.293972969 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.293987989 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.294051886 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.294059038 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.294101000 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.294548988 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.294564962 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.294622898 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.294632912 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.294656992 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.294678926 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.295226097 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.295241117 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.295295954 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.295301914 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.295344114 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.313067913 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.379317045 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.379338980 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.379405022 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.379430056 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.379441977 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.380527020 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.380582094 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.380598068 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.380604029 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.380637884 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.380666018 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.380675077 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.380697012 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.380753040 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.380759954 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.380800962 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.381448984 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.381467104 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.381522894 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.381527901 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.381536961 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.381568909 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.381592989 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.381633043 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.381654978 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.381659031 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.381689072 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.381702900 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.382505894 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.382524967 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.382586956 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.382592916 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.382637024 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.383320093 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.383341074 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.383408070 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.383414030 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.383455038 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.383800030 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.383862019 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.383867979 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.383882046 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:08.383929968 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.394332886 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.406055927 CEST	49731	443	192.168.2.5	69.172.201.115
Oct 1, 2024 21:53:08.406064034 CEST	443	49731	69.172.201.115	192.168.2.5
Oct 1, 2024 21:53:33.454408884 CEST	58420	53	192.168.2.5	162.159.36.2
Oct 1, 2024 21:53:33.459362984 CEST	53	58420	162.159.36.2	192.168.2.5
Oct 1, 2024 21:53:33.459475040 CEST	58420	53	192.168.2.5	162.159.36.2
Oct 1, 2024 21:53:33.459753990 CEST	58420	53	192.168.2.5	162.159.36.2
Oct 1, 2024 21:53:33.464799881 CEST	53	58420	162.159.36.2	192.168.2.5
Oct 1, 2024 21:53:33.914947033 CEST	53	58420	162.159.36.2	192.168.2.5
Oct 1, 2024 21:53:33.919939041 CEST	58420	53	192.168.2.5	162.159.36.2
Oct 1, 2024 21:53:33.927160025 CEST	53	58420	162.159.36.2	192.168.2.5
Oct 1, 2024 21:53:33.927237034 CEST	58420	53	192.168.2.5	162.159.36.2
Oct 1, 2024 21:53:39.882045031 CEST	49713	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:53:39.886945963 CEST	80	49713	45.147.195.6	192.168.2.5
Oct 1, 2024 21:53:40.569536924 CEST	49712	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:53:40.574381113 CEST	80	49712	45.147.195.6	192.168.2.5
Oct 1, 2024 21:53:45.479794025 CEST	80	49713	45.147.195.6	192.168.2.5
Oct 1, 2024 21:53:45.479901075 CEST	49713	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:53:45.571965933 CEST	80	49712	45.147.195.6	192.168.2.5
Oct 1, 2024 21:53:45.572029114 CEST	49712	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:53:46.386899948 CEST	49713	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:53:46.386956930 CEST	49712	80	192.168.2.5	45.147.195.6
Oct 1, 2024 21:53:46.394943953 CEST	80	49713	45.147.195.6	192.168.2.5
Oct 1, 2024 21:53:46.395081043 CEST	80	49712	45.147.195.6	192.168.2.5
Oct 1, 2024 21:53:53.934652090 CEST	58424	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:53:53.934683084 CEST	443	58424	142.250.184.196	192.168.2.5
Oct 1, 2024 21:53:53.934751034 CEST	58424	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:53:53.935468912 CEST	58424	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:53:53.935482025 CEST	443	58424	142.250.184.196	192.168.2.5
Oct 1, 2024 21:53:54.696008921 CEST	443	58424	142.250.184.196	192.168.2.5
Oct 1, 2024 21:53:54.696723938 CEST	58424	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:53:54.696742058 CEST	443	58424	142.250.184.196	192.168.2.5
Oct 1, 2024 21:53:54.697077036 CEST	443	58424	142.250.184.196	192.168.2.5
Oct 1, 2024 21:53:54.697634935 CEST	58424	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:53:54.697696924 CEST	443	58424	142.250.184.196	192.168.2.5
Oct 1, 2024 21:53:54.740888119 CEST	58424	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:54:04.609498024 CEST	443	58424	142.250.184.196	192.168.2.5
Oct 1, 2024 21:54:04.609561920 CEST	443	58424	142.250.184.196	192.168.2.5
Oct 1, 2024 21:54:04.609627962 CEST	58424	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:54:06.390666008 CEST	58424	443	192.168.2.5	142.250.184.196
Oct 1, 2024 21:54:06.390686989 CEST	443	58424	142.250.184.196	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 21:52:52.215190887 CEST	53	52410	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:52.230483055 CEST	53	57028	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:53.222299099 CEST	53	55739	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:53.882776022 CEST	55771	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:52:53.882949114 CEST	62583	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:52:53.892232895 CEST	53	62583	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:53.892251968 CEST	53	55771	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:54.474833965 CEST	49965	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:52:54.474989891 CEST	59543	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:52:54.805121899 CEST	53	49965	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:55.572138071 CEST	51955	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:52:55.572458029 CEST	65250	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:52:55.721287012 CEST	53	51955	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:55.722645044 CEST	53	65250	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:56.605915070 CEST	53	59543	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:57.829874039 CEST	58723	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:52:57.830178022 CEST	57913	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:52:58.151999950 CEST	53	57913	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:58.245637894 CEST	53	58723	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:59.661783934 CEST	63118	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:52:59.662071943 CEST	52831	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:52:59.702691078 CEST	53	52831	1.1.1.1	192.168.2.5
Oct 1, 2024 21:52:59.703136921 CEST	53	63118	1.1.1.1	192.168.2.5
Oct 1, 2024 21:53:00.452219009 CEST	51836	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:53:00.452985048 CEST	65534	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:53:00.662975073 CEST	53	51836	1.1.1.1	192.168.2.5
Oct 1, 2024 21:53:00.685627937 CEST	53	65534	1.1.1.1	192.168.2.5
Oct 1, 2024 21:53:01.473797083 CEST	56078	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:53:01.474080086 CEST	52208	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:53:01.686424971 CEST	53	52208	1.1.1.1	192.168.2.5
Oct 1, 2024 21:53:01.830105066 CEST	53	56078	1.1.1.1	192.168.2.5
Oct 1, 2024 21:53:06.061310053 CEST	59797	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:53:06.061980009 CEST	57268	53	192.168.2.5	1.1.1.1
Oct 1, 2024 21:53:06.273029089 CEST	53	59797	1.1.1.1	192.168.2.5
Oct 1, 2024 21:53:06.294841051 CEST	53	57268	1.1.1.1	192.168.2.5
Oct 1, 2024 21:53:10.646600962 CEST	53	57565	1.1.1.1	192.168.2.5
Oct 1, 2024 21:53:29.720226049 CEST	53	59584	1.1.1.1	192.168.2.5
Oct 1, 2024 21:53:33.453579903 CEST	53	53117	162.159.36.2	192.168.2.5
Oct 1, 2024 21:53:33.985717058 CEST	53	54367	1.1.1.1	192.168.2.5
Oct 1, 2024 21:53:49.407922983 CEST	53	49183	1.1.1.1	192.168.2.5
Oct 1, 2024 21:53:52.698684931 CEST	53	58573	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 1, 2024 21:52:56.609217882 CEST	192.168.2.5	1.1.1.1	c228	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 21:52:53.882776022 CEST	192.168.2.5	1.1.1.1	0x884d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:52:53.882949114 CEST	192.168.2.5	1.1.1.1	0x8628	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 21:52:54.474833965 CEST	192.168.2.5	1.1.1.1	0x3189	Standard query (0)	xmu.fastestopt.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:52:54.474989891 CEST	192.168.2.5	1.1.1.1	0x1fac	Standard query (0)	xmu.fastestopt.com	65	IN (0x0001)	false
Oct 1, 2024 21:52:55.572138071 CEST	192.168.2.5	1.1.1.1	0xb1c1	Standard query (0)	xmu.fastestopt.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:52:55.572458029 CEST	192.168.2.5	1.1.1.1	0xd3b2	Standard query (0)	xmu.fastestopt.com	65	IN (0x0001)	false
Oct 1, 2024 21:52:57.829874039 CEST	192.168.2.5	1.1.1.1	0x1d5b	Standard query (0)	xmu.actionprolink.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:52:57.830178022 CEST	192.168.2.5	1.1.1.1	0x2378	Standard query (0)	xmu.actionprolink.com	65	IN (0x0001)	false
Oct 1, 2024 21:52:59.661783934 CEST	192.168.2.5	1.1.1.1	0x38bc	Standard query (0)	www.dpvyw6trk.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:52:59.662071943 CEST	192.168.2.5	1.1.1.1	0x26f0	Standard query (0)	www.dpvyw6trk.com	65	IN (0x0001)	false
Oct 1, 2024 21:53:00.452219009 CEST	192.168.2.5	1.1.1.1	0xb304	Standard query (0)	afflat3a1.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:53:00.452985048 CEST	192.168.2.5	1.1.1.1	0x5cd6	Standard query (0)	afflat3a1.com	65	IN (0x0001)	false
Oct 1, 2024 21:53:01.473797083 CEST	192.168.2.5	1.1.1.1	0x5b11	Standard query (0)	financialaidauthority.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:53:01.474080086 CEST	192.168.2.5	1.1.1.1	0xecea	Standard query (0)	financialaidauthority.com	65	IN (0x0001)	false
Oct 1, 2024 21:53:06.061310053 CEST	192.168.2.5	1.1.1.1	0x5ad6	Standard query (0)	financialaidauthority.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:53:06.061980009 CEST	192.168.2.5	1.1.1.1	0xc68d	Standard query (0)	financialaidauthority.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 1, 2024 21:52:53.892232895 CEST	1.1.1.1	192.168.2.5	0x8628	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 21:52:53.892251968 CEST	1.1.1.1	192.168.2.5	0x884d	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:52:54.805121899 CEST	1.1.1.1	192.168.2.5	0x3189	No error (0)	xmu.fastestopt.com		45.147.195.6	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:52:55.721287012 CEST	1.1.1.1	192.168.2.5	0xb1c1	No error (0)	xmu.fastestopt.com		45.147.195.6	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:52:58.245637894 CEST	1.1.1.1	192.168.2.5	0x1d5b	No error (0)	xmu.actionprolink.com		45.147.195.6	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:52:59.703136921 CEST	1.1.1.1	192.168.2.5	0x38bc	No error (0)	www.dpvyw6trk.com		35.190.6.55	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:53:00.662975073 CEST	1.1.1.1	192.168.2.5	0xb304	No error (0)	afflat3a1.com		69.172.200.185	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:53:01.830105066 CEST	1.1.1.1	192.168.2.5	0x5b11	No error (0)	financialaidauthority.com		69.172.201.115	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:53:06.273029089 CEST	1.1.1.1	192.168.2.5	0x5ad6	No error (0)	financialaidauthority.com		69.172.201.115	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:53:06.372971058 CEST	1.1.1.1	192.168.2.5	0x4c37	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 21:53:06.372971058 CEST	1.1.1.1	192.168.2.5	0x4c37	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:53:21.226608038 CEST	1.1.1.1	192.168.2.5	0x5f2a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 21:53:21.226608038 CEST	1.1.1.1	192.168.2.5	0x5f2a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:53:45.123457909 CEST	1.1.1.1	192.168.2.5	0x4e08	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 21:53:45.123457909 CEST	1.1.1.1	192.168.2.5	0x4e08	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:54:02.550262928 CEST	1.1.1.1	192.168.2.5	0xa0d3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 21:54:02.550262928 CEST	1.1.1.1	192.168.2.5	0xa0d3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:54:07.824033022 CEST	1.1.1.1	192.168.2.5	0xa31e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 21:54:07.824033022 CEST	1.1.1.1	192.168.2.5	0xa31e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

xmu.fastestopt.com

fs.microsoft.com

xmu.actionprolink.com

www.dpvyw6trk.com

afflat3a1.com

financialaidauthority.com

https:

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	45.147.195.6	80	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 21:52:54.873842001 CEST	433	OUT	GET / HTTP/1.1 Host: xmu.fastestopt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 1, 2024 21:52:55.565731049 CEST	92	IN	HTTP/1.1 301 Moved Permanently content-length: 0 location: https://xmu.fastestopt.com/
Oct 1, 2024 21:53:40.569536924 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	45.147.195.6	80	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 1, 2024 21:53:39.882045031 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49714	45.147.195.6	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:52:57 UTC	661	OUT	GET / HTTP/1.1 Host: xmu.fastestopt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:52:57 UTC	829	IN	HTTP/1.1 302 Found date: Tue, 01 Oct 2024 19:52:57 GMT content-type: text/html; charset=utf-8 content-length: 702 cache-control: no-cache, private location: https://xmu.actionprolink.com/o/BMRHCIOM/c17f9dcc-802e-11ef-afe3-41d921c61080/c18a92fe-802e-11ef-b67c-7554c0c2b318 x-redir: true set-cookie: yredir_session=eyJpdiI6IlBpa0lzckh3NnpZRGVIeklGZWF6Qmc9PSIsInZhbHVlIjoiLzIrZUN0SHV2U3VVcHpFZjBGY2dGRXV0Mk5EWnRXS2xYblhMcDZEUC94Z1pmNWk5Z3ZIK0RuZkwwMFM2akZmVTA1U1lSVDVpYnYrTlpOSVUwTTNXR1c5Qk9PQ0JkaXhIY1Jrbi9ZdUExMm9oYTUvRzExQjhsZEFsU0xoNjcvTUUiLCJtYWMiOiIzMGQyMmFlNTlhY2Y4ZTYzY2M2NGVjYTdjM2RkMDExZWIxY2MxODgyZTI5ZTc1YTljMzBmNTk0ZTMwMDIyZjE3IiwidGFnIjoiIn0%3D; expires=Tue, 01-Oct-2024 21:52:57 GMT; path=/; httponly; samesite=lax server: swoole-http-server strict-transport-security: max-age=15768000 connection: close
2024-10-01 19:52:57 UTC	702	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 78 6d 75 2e 61 63 74 69 6f 6e 70 72 6f 6c 69 6e 6b 2e 63 6f 6d 2f 6f 2f 42 4d 52 48 43 49 4f 4d 2f 63 31 37 66 39 64 63 63 2d 38 30 32 65 2d 31 31 65 66 2d 61 66 65 33 2d 34 31 64 39 32 31 63 36 31 30 38 30 2f 63 31 38 61 39 32 66 65 2d 38 30 32 65 2d 31 31 65 66 2d 62 36 37 63 2d 37 35 35 34 63 30 63 32 62 33 31 38 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://xmu.actionprolink.com/o/BMRHCIOM/c17f9dcc-802e-11ef-afe3-41d921c61080/c18a92fe-802e-11ef-b67c-7554c0c2b318'" /> <title>R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:52:57 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 19:52:58 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=161572 Date: Tue, 01 Oct 2024 19:52:58 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49717	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:52:58 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 19:52:59 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=161515 Date: Tue, 01 Oct 2024 19:52:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-01 19:52:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	45.147.195.6	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:52:59 UTC	748	OUT	GET /o/BMRHCIOM/c17f9dcc-802e-11ef-afe3-41d921c61080/c18a92fe-802e-11ef-b67c-7554c0c2b318 HTTP/1.1 Host: xmu.actionprolink.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:52:59 UTC	810	IN	HTTP/1.1 302 Found date: Tue, 01 Oct 2024 19:52:59 GMT content-type: text/html; charset=utf-8 content-length: 642 cache-control: no-cache, private location: https://www.dpvyw6trk.com/7P4RRF/NFP1N58/?sub1=103989&sub2=c2a743f8-802e-11ef-b186-89c01e76f627 x-redir: true set-cookie: yredir_session=eyJpdiI6Ik1mK0orajNTY0dDNXNnejhmUU1EdEE9PSIsInZhbHVlIjoicnorUEhLZjY4ZjE5Vzh0QW81QUE4UDNnU3Z1QmNCeEVmZUhOS0lOQ1IxTEttaGUzSlhXZVNqL2FzeUtMdGc3b1hsZkV4MVdLbWRZaW1nMXVBTVk4ZHFUYVJzWVk1Q1RFdVAyVXAxNzhCYWE5azFtdG96OUF1VDBUcXpLSmtsUGYiLCJtYWMiOiIxZDFkMTZkMGVjOWNiMjcyMmYwMjVhZWQzMzc2ZGY3NmI2MzQ3ZDkwMWFmMTZmZDA2Y2RiODBmYjk1YzY1YmRjIiwidGFnIjoiIn0%3D; expires=Tue, 01-Oct-2024 21:52:59 GMT; path=/; httponly; samesite=lax server: swoole-http-server strict-transport-security: max-age=15768000 connection: close
2024-10-01 19:52:59 UTC	642	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 70 76 79 77 36 74 72 6b 2e 63 6f 6d 2f 37 50 34 52 52 46 2f 4e 46 50 31 4e 35 38 2f 3f 73 75 62 31 3d 31 30 33 39 38 39 26 61 6d 70 3b 73 75 62 32 3d 63 32 61 37 34 33 66 38 2d 38 30 32 65 2d 31 31 65 66 2d 62 31 38 36 2d 38 39 63 30 31 65 37 36 66 36 32 37 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.dpvyw6trk.com/7P4RRF/NFP1N58/?sub1=103989&sub2=c2a743f8-802e-11ef-b186-89c01e76f627'" /> <title>Redirecting to h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	35.190.6.55	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:00 UTC	729	OUT	GET /7P4RRF/NFP1N58/?sub1=103989&sub2=c2a743f8-802e-11ef-b186-89c01e76f627 HTTP/1.1 Host: www.dpvyw6trk.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:00 UTC	790	IN	HTTP/1.1 302 Found server: nginx date: Tue, 01 Oct 2024 19:53:00 GMT content-type: text/html; charset=utf-8 Content-Length: 188 accept-ch: Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model location: https://afflat3a1.com/lnk.asp?o=23432&c=918277&a=574293&k=6164B8D4713F354A52A936396DEA89D0&l=24395&s1=148&s2=9e6ff42287754e86ae94815cce54499c set-cookie: uniqueClick_NFP1N58=1c637120-cf1d-47ba-b18f-effd1c5b680f:1727812380; Path=/; Expires=Thu, 31 Oct 2024 19:53:00 GMT; Secure; SameSite=None set-cookie: transaction_id=9e6ff42287754e86ae94815cce54499c; Path=/; Expires=Mon, 30 Dec 2024 19:53:00 GMT; Secure; SameSite=None vary: Origin x-eflow-request-id: 7be3bc34-7b81-431c-bed9-f5b55fe2656b Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 19:53:00 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 66 66 6c 61 74 33 61 31 2e 63 6f 6d 2f 6c 6e 6b 2e 61 73 70 3f 6f 3d 32 33 34 33 32 26 61 6d 70 3b 63 3d 39 31 38 32 37 37 26 61 6d 70 3b 61 3d 35 37 34 32 39 33 26 61 6d 70 3b 6b 3d 36 31 36 34 42 38 44 34 37 31 33 46 33 35 34 41 35 32 41 39 33 36 33 39 36 44 45 41 38 39 44 30 26 61 6d 70 3b 6c 3d 32 34 33 39 35 26 61 6d 70 3b 73 31 3d 31 34 38 26 61 6d 70 3b 73 32 3d 39 65 36 66 66 34 32 32 38 37 37 35 34 65 38 36 61 65 39 34 38 31 35 63 63 65 35 34 34 39 39 63 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://afflat3a1.com/lnk.asp?o=23432&c=918277&a=574293&k=6164B8D4713F354A52A936396DEA89D0&l=24395&s1=148&s2=9e6ff42287754e86ae94815cce54499c">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	69.172.200.185	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:01 UTC	775	OUT	GET /lnk.asp?o=23432&c=918277&a=574293&k=6164B8D4713F354A52A936396DEA89D0&l=24395&s1=148&s2=9e6ff42287754e86ae94815cce54499c HTTP/1.1 Host: afflat3a1.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:01 UTC	811	IN	HTTP/1.1 302 Object moved Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:01 GMT Content-Type: text/html Content-Length: 169 Connection: close Cache-Control: private Location: https://financialaidauthority.com?mbi=1607332870 Set-Cookie: mb_23432_SS=AF=574293&AC=1607332870&CS=1607907163; path=/; SameSite=none; Expires=Sat, 30 Nov 2024 15:53:1 GMT<br />; Secure Set-Cookie: I_SS=1607332870; path=/; SameSite=none; Expires=Fri, 29 Sep 2034 15:53:1 GMT<br />; Secure Set-Cookie: I=1607332870; expires=Fri, 29-Sep-2034 04:00:00 GMT; path=/ Set-Cookie: mb%5F23432=AC=1607332870&CS=1607907163&AF=574293; expires=Sat, 30-Nov-2024 05:00:00 GMT; path=/ Set-Cookie: ASPSESSIONIDAWDQRATS=EGGOBCCCFGDAGAHDGDIHBFIA; secure; path=/ X-Powered-By: ASP.NET X-DIS-Request-ID: 11d2564adb79ad7e5440ff97169ab232
2024-10-01 19:53:01 UTC	169	IN	Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 6f 62 6a 65 63 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 66 69 6e 61 6e 63 69 61 6c 61 69 64 61 75 74 68 6f 72 69 74 79 2e 63 6f 6d 3f 6d 62 69 3d 31 36 30 37 33 33 32 38 37 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 62 6f 64 79 3e 0a Data Ascii: <head><title>Object moved</title></head><body><h1>Object Moved</h1>This object may be found <a HREF="https://financialaidauthority.com?mbi=1607332870">here</a>.</body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49720	69.172.201.115	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:02 UTC	683	OUT	GET /?mbi=1607332870 HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:02 UTC	343	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:02 GMT Content-Type: text/html Content-Length: 3009 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "ac453192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: a5adcafbb88fc54785db5df8c9ee7cd1
2024-10-01 19:53:02 UTC	3009	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6c 6f 67 6f 31 39 32 2e 70 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#000000"/><link rel="apple-touch-icon" href="/logo192.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49722	69.172.201.115	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:03 UTC	595	OUT	GET /static/css/2.194bef48.chunk.css HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://financialaidauthority.com/?mbi=1607332870 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:03 UTC	344	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:03 GMT Content-Type: text/css Content-Length: 190916 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "f9903392a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 9a4a4121e276a6a43032752e604fbd57
2024-10-01 19:53:03 UTC	16040	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 66 32 3b 2d 2d 70 75 Data Ascii: /! Bootstrap v4.6.2 (https://getbootstrap.com/) * Copyright 2011-2022 The Bootstrap Authors * Copyright 2011-2022 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue:#007bff;--indigo:#6610f2;--pu
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 68 65 61 64 20 74 68 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 6f 74 74 6f 6d 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 32 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 7d 2e 74 61 62 6c 65 20 74 62 6f 64 79 2b 74 62 6f 64 79 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 32 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 7d 2e 74 61 62 6c 65 2d 73 6d 20 74 64 2c 2e 74 61 62 6c 65 2d 73 6d 20 74 68 7b 70 61 64 64 69 6e 67 3a 2e 33 72 65 6d 7d 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 64 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 68 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 65 65 32 65 36 7d 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 20 74 68 65 61 64 20 74 64 2c 2e Data Ascii: head th{vertical-align:bottom;border-bottom:2px solid #dee2e6}.table tbody+tbody{border-top:2px solid #dee2e6}.table-sm td,.table-sm th{padding:.3rem}.table-bordered,.table-bordered td,.table-bordered th{border:1px solid #dee2e6}.table-bordered thead td,.
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 65 72 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 78 2d 73 68 61 64 6f 77 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 62 74 6e 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 62 74 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 62 74 6e 2e 66 6f 63 75 73 2c 2e 62 74 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 30 2c 31 32 33 2c 32 35 35 2c 2e 32 35 29 7d 2e 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 3a Data Ascii: er-color .15s ease-in-out,box-shadow .15s ease-in-out}@media (prefers-reduced-motion:reduce){.btn{transition:none}}.btn:hover{color:#212529;text-decoration:none}.btn.focus,.btn:focus{outline:0;box-shadow:0 0 0 .2rem rgba(0,123,255,.25)}.btn.disabled,.btn:
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 72 3a 23 31 36 31 38 31 62 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 39 65 63 65 66 7d 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 61 63 74 69 76 65 2c 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 62 66 66 7d 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 2e 64 69 73 61 62 6c 65 64 2c 2e 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 61 64 62 35 62 64 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: r:#16181b;text-decoration:none;background-color:#e9ecef}.dropdown-item.active,.dropdown-item:active{color:#fff;text-decoration:none;background-color:#007bff}.dropdown-item.disabled,.dropdown-item:disabled{color:#adb5bd;pointer-events:none;background-color
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 73 2d 66 69 6c 6c 2d 6c 6f 77 65 72 2c 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 73 2d 66 69 6c 6c 2d 75 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 72 65 6d 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 73 2d 66 69 6c 6c 2d 75 70 70 65 72 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 35 70 78 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 64 69 73 61 62 6c 65 64 3a 3a 2d 77 65 62 6b 69 74 2d 73 6c 69 64 65 72 2d 74 68 75 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 64 62 35 62 64 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 64 69 73 61 62 6c 65 64 3a 3a 2d 77 65 62 6b 69 74 2d Data Ascii: }.custom-range::-ms-fill-lower,.custom-range::-ms-fill-upper{background-color:#dee2e6;border-radius:1rem}.custom-range::-ms-fill-upper{margin-right:15px}.custom-range:disabled::-webkit-slider-thumb{background-color:#adb5bd}.custom-range:disabled::-webkit-
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 65 37 65 33 34 7d 61 2e 62 61 64 67 65 2d 73 75 63 63 65 73 73 2e 66 6f 63 75 73 2c 61 2e 62 61 64 67 65 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 72 65 6d 20 72 67 62 61 28 34 30 2c 31 36 37 2c 36 39 2c 2e 35 29 7d 2e 62 61 64 67 65 2d 69 6e 66 6f 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 37 61 32 62 38 7d 61 2e 62 61 64 67 65 2d 69 6e 66 6f 3a 66 6f 63 75 73 2c 61 2e 62 61 64 67 65 2d 69 6e 66 6f 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 37 61 38 62 7d 61 2e 62 61 64 67 65 2d 69 Data Ascii: ff;background-color:#1e7e34}a.badge-success.focus,a.badge-success:focus{outline:0;box-shadow:0 0 0 .2rem rgba(40,167,69,.5)}.badge-info{color:#fff;background-color:#17a2b8}a.badge-info:focus,a.badge-info:hover{color:#fff;background-color:#117a8b}a.badge-i
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 2e 70 6f 70 6f 76 65 72 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 36 30 3b 6d 61 78 2d 77 69 64 74 68 3a 32 37 36 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 22 53 65 67 6f 65 20 55 49 22 2c 52 6f 62 6f 74 6f 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 41 72 69 61 6c 2c 22 4e 6f 74 6f 20 53 61 6e 73 22 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 53 61 6e 73 22 2c 73 61 6e 73 2d 73 65 72 69 66 2c 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 22 4e 6f 74 Data Ascii: der-radius:.25rem}.popover{top:0;left:0;z-index:1060;max-width:276px;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans","Liberation Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Not
2024-10-01 19:53:04 UTC	16384	IN	Data Raw: 65 2d 61 72 6f 75 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 2d 73 6d 2d 73 74 72 65 74 63 68 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 73 74 72 65 74 63 68 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 73 6d 2d 61 75 74 6f 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 73 6d 2d 73 74 61 72 74 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 73 6d 2d 65 6e 64 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6c 69 67 6e 2d 73 65 6c 66 2d 73 6d 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 73 65 Data Ascii: e-around!important}.align-content-sm-stretch{align-content:stretch!important}.align-self-sm-auto{align-self:auto!important}.align-self-sm-start{align-self:flex-start!important}.align-self-sm-end{align-self:flex-end!important}.align-self-sm-center{align-se
2024-10-01 19:53:04 UTC	16384	IN	Data Raw: 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 6d 64 2d 32 2c 2e 6d 78 2d 6d 64 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 6d 64 2d 33 2c 2e 6d 79 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 6d 64 2d 33 2c 2e 6d 78 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 6d 64 2d 33 2c 2e 6d 79 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 6d 64 2d 33 2c 2e 6d 78 2d 6d 64 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 72 65 6d 21 Data Ascii: ortant}.ml-md-2,.mx-md-2{margin-left:.5rem!important}.m-md-3{margin:1rem!important}.mt-md-3,.my-md-3{margin-top:1rem!important}.mr-md-3,.mx-md-3{margin-right:1rem!important}.mb-md-3,.my-md-3{margin-bottom:1rem!important}.ml-md-3,.mx-md-3{margin-left:1rem!
2024-10-01 19:53:04 UTC	16384	IN	Data Raw: 6c 51 4d 47 77 66 79 5a 33 2f 7a 5a 32 51 4b 39 67 4a 78 73 4a 57 43 42 55 6b 33 32 51 77 71 4f 53 59 4b 52 78 68 36 58 64 6d 33 42 34 6f 4d 57 32 32 45 50 5a 7a 61 77 6e 52 37 32 6b 67 5a 6c 74 43 71 50 78 72 64 48 31 64 6b 42 6b 71 44 64 57 77 77 4d 77 4d 4f 39 4f 32 73 71 4b 58 48 76 69 70 50 47 4a 6b 7a 6c 52 56 4c 68 4a 6a 56 49 73 39 4b 72 41 41 41 41 42 33 52 53 54 6c 4d 41 2f 76 33 2b 2f 50 6e 39 46 6b 30 35 71 41 41 41 55 55 39 4a 52 45 46 55 65 4e 70 30 6e 41 6c 59 56 4e 63 56 78 7a 48 61 7a 6f 72 6f 47 42 6b 58 68 41 67 43 43 6a 4d 73 72 6f 44 6f 4b 49 67 4b 64 46 41 42 42 77 51 55 6e 53 41 6f 43 71 4c 52 46 42 66 63 43 42 49 4d 34 6b 62 71 53 68 4f 31 68 6c 53 72 43 4a 71 51 51 6d 4e 73 73 56 46 71 6a 42 61 72 73 64 6a 46 4a 57 6c 4d 54 4f 4c Data Ascii: lQMGwfyZ3/zZ2QK9gJxsJWCBUk32QwqOSYKRxh6Xdm3B4oMW22EPZzawnR72kgZltCqPxrdH1dkBkqDdWwwMwMO9O2sqKXHvipPGJkzlRVLhJjVIs9KrAAAAB3RSTlMA/v3+/Pn9Fk05qAAAUU9JREFUeNp0nAlYVNcVxzHazoroGBkXhAgCCjMsroDoKIgKdFABBwQUnSAoCqLRFBfcCBIM4kbqShO1hlSrCJqQQmNssVFqjBarsdjFJWlMTOL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49721	69.172.201.115	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:03 UTC	598	OUT	GET /static/css/main.130977d9.chunk.css HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://financialaidauthority.com/?mbi=1607332870 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:03 UTC	342	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:03 GMT Content-Type: text/css Content-Length: 5854 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "bd6c3192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: f5873cfbdd72ce61c9b3f6f426e4f517
2024-10-01 19:53:03 UTC	5854	IN	Data Raw: 62 6f 64 79 2c 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 22 53 65 67 6f 65 20 55 49 22 2c 22 52 6f 62 6f 74 6f 22 2c 22 4f 78 79 67 65 6e 22 2c 22 55 62 75 6e 74 75 22 2c 22 43 61 6e 74 61 72 65 6c 6c 22 2c 22 46 69 72 61 20 53 61 6e 73 22 2c 22 44 72 6f 69 64 20 53 61 6e 73 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 62 61 Data Ascii: body,html{height:100%}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Roboto","Oxygen","Ubuntu","Cantarell","Fira Sans","Droid Sans","Helvetica Neue",sans-serif;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;ba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49724	69.172.201.115	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:03 UTC	579	OUT	GET /static/js/2.76b3d64d.chunk.js HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/?mbi=1607332870 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:03 UTC	359	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:03 GMT Content-Type: application/javascript Content-Length: 1385146 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "d7b63392a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 66506ee202d7cd15060d3f431626f7e8
2024-10-01 19:53:03 UTC	16025	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 32 2e 37 36 62 33 64 36 34 64 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 3d 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 32 32 33 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 Data Ascii: /! For license information please see 2.76b3d64d.chunk.js.LICENSE.txt /(this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[2],[function(t,e,n){"use strict";t.exports=n(223)},function(t,e,n){"use strict";t.export
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 31 22 3a 22 4c 22 2c 22 5c 75 30 31 33 61 22 3a 22 6c 22 2c 22 5c 75 30 31 33 63 22 3a 22 6c 22 2c 22 5c 75 30 31 33 65 22 3a 22 6c 22 2c 22 5c 75 30 31 34 30 22 3a 22 6c 22 2c 22 5c 75 30 31 34 32 22 3a 22 6c 22 2c 22 5c 75 30 31 34 33 22 3a 22 4e 22 2c 22 5c 75 30 31 34 35 22 3a 22 4e 22 2c 22 5c 75 30 31 34 37 22 3a 22 4e 22 2c 22 5c 75 30 31 34 61 22 3a 22 4e 22 2c 22 5c 75 30 31 34 34 22 3a 22 6e 22 2c 22 5c 75 30 31 34 36 22 3a 22 6e 22 2c 22 5c 75 30 31 34 38 22 3a 22 6e 22 2c 22 5c 75 30 31 34 62 22 3a 22 6e 22 2c 22 5c 75 30 31 34 63 22 3a 22 4f 22 2c 22 5c 75 30 31 34 65 22 3a 22 4f 22 2c 22 5c 75 30 31 35 30 22 3a 22 4f 22 2c 22 5c 75 30 31 34 64 22 3a 22 6f 22 2c 22 5c 75 30 31 34 66 22 3a 22 6f 22 2c 22 5c 75 30 31 35 31 22 3a 22 6f 22 2c 22 Data Ascii: 1":"L","\u013a":"l","\u013c":"l","\u013e":"l","\u0140":"l","\u0142":"l","\u0143":"N","\u0145":"N","\u0147":"N","\u014a":"N","\u0144":"n","\u0146":"n","\u0148":"n","\u014b":"n","\u014c":"O","\u014e":"O","\u0150":"O","\u014d":"o","\u014f":"o","\u0151":"o","
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 69 28 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 68 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 21 28 6e 3d 65 28 74 2c 72 2c 69 29 29 7d 29 29 2c 21 21 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 69 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 30 2c 69 3d 6e 75 6c 6c 3d 3d 74 3f 72 3a 74 2e 6c 65 6e 67 74 68 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3d 3d 3d 65 26 26 69 3c 3d 32 31 34 37 34 38 33 36 34 37 29 7b 66 6f 72 28 3b 72 3c 69 3b 29 7b 76 61 72 20 6f 3d 72 2b 69 3e 3e 3e 31 2c 61 3d 74 5b 6f 5d 3b 6e 75 6c 6c 21 3d 3d 61 26 26 21 63 73 28 61 29 26 26 28 6e 3f 61 3c 3d 65 3a 61 3c 65 29 3f 72 3d 6f 2b 31 3a 69 3d 6f 7d 72 65 74 Data Ascii: turn a}function ii(t,e){var n;return hr(t,(function(t,r,i){return!(n=e(t,r,i))})),!!n}function oi(t,e,n){var r=0,i=null==t?r:t.length;if("number"==typeof e&&e===e&&i<=2147483647){for(;r<i;){var o=r+i>>>1,a=t[o];null!==a&&!cs(a)&&(n?a<=e:a<e)?r=o+1:i=o}ret
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 74 29 3f 4e 65 3a 64 72 29 28 74 2c 63 6f 28 65 2c 33 29 29 7d 76 61 72 20 77 61 3d 4e 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 52 74 2e 63 61 6c 6c 28 74 2c 6e 29 3f 74 5b 6e 5d 2e 70 75 73 68 28 65 29 3a 6f 72 28 74 2c 6e 2c 5b 65 5d 29 7d 29 29 3b 76 61 72 20 4d 61 3d 59 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 2d 31 2c 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2c 61 3d 57 61 28 74 29 3f 6e 28 74 2e 6c 65 6e 67 74 68 29 3a 5b 5d 3b 72 65 74 75 72 6e 20 68 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 5b 2b 2b 69 5d 3d 6f 3f 45 65 28 65 2c 74 2c 72 29 3a 4c 72 28 74 2c 65 2c 72 29 7d 29 29 2c 61 7d 29 29 2c 5f 61 3d 4e 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 Data Ascii: t)?Ne:dr)(t,co(e,3))}var wa=Ni((function(t,e,n){Rt.call(t,n)?t[n].push(e):or(t,n,[e])}));var Ma=Yr((function(t,e,r){var i=-1,o="function"==typeof e,a=Wa(t)?n(t.length):[];return hr(t,(function(t){a[++i]=o?Ee(e,t,r):Lr(t,e,r)})),a})),_a=Ni((function(t,e,n)
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 75 72 28 74 2c 65 2c 4e 73 28 65 29 29 7d 2c 42 6e 2e 64 65 62 75 72 72 3d 55 73 2c 42 6e 2e 64 65 66 61 75 6c 74 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 74 21 3d 3d 74 3f 65 3a 74 7d 2c 42 6e 2e 64 69 76 69 64 65 3d 79 63 2c 42 6e 2e 65 6e 64 73 57 69 74 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 3d 67 73 28 74 29 2c 65 3d 75 69 28 65 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 6e 3d 6e 3d 3d 3d 6f 3f 72 3a 73 72 28 70 73 28 6e 29 2c 30 2c 72 29 3b 72 65 74 75 72 6e 28 6e 2d 3d 65 2e 6c 65 6e 67 74 68 29 3e 3d 30 26 26 74 2e 73 6c 69 63 65 28 6e 2c 69 29 3d 3d 65 7d 2c 42 6e 2e 65 71 3d 42 61 2c 42 6e 2e 65 73 Data Ascii: ,e){return null==e\|\|ur(t,e,Ns(e))},Bn.deburr=Us,Bn.defaultTo=function(t,e){return null==t\|\|t!==t?e:t},Bn.divide=yc,Bn.endsWith=function(t,e,n){t=gs(t),e=ui(e);var r=t.length,i=n=n===o?r:sr(ps(n),0,r);return(n-=e.length)>=0&&t.slice(n,i)==e},Bn.eq=Ba,Bn.es
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 6e 67 74 68 29 3b 74 3d 73 28 74 2c 6e 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 3d 31 29 74 5b 72 5d 3d 32 35 35 26 65 5b 72 5d 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 69 66 28 74 3e 3d 61 28 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 41 74 74 65 6d 70 74 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 42 75 66 66 65 72 20 6c 61 72 67 65 72 20 74 68 61 6e 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 3a 20 30 78 22 2b 61 28 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 62 79 74 65 73 22 29 3b 72 65 74 75 72 6e 20 30 7c 74 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 69 66 28 63 2e 69 73 42 75 66 66 65 72 28 74 29 29 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3b 69 66 28 22 75 6e Data Ascii: ngth);t=s(t,n);for(var r=0;r<n;r+=1)t[r]=255&e[r];return t}function d(t){if(t>=a())throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+a().toString(16)+" bytes");return 0\|t}function p(t,e){if(c.isBuffer(t))return t.length;if("un
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 3b 69 66 28 65 3e 3e 3e 3d 30 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 2e 6c 65 6e 67 74 68 3a 6e 3e 3e 3e 30 2c 74 7c 7c 28 74 3d 30 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 29 66 6f 72 28 6f 3d 65 3b 6f 3c 6e 3b 2b 2b 6f 29 74 68 69 73 5b 6f 5d 3d 74 3b 65 6c 73 65 7b 76 61 72 20 61 3d 63 2e 69 73 42 75 66 66 65 72 28 74 29 3f 74 3a 44 28 6e 65 77 20 63 28 74 2c 72 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 73 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 2d 65 3b 2b 2b 6f 29 74 68 69 73 5b 6f 2b 65 5d 3d 61 5b 6f 25 73 5d 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 76 61 72 20 56 3d 2f 5b 5e 2b 5c 2f 30 2d 39 41 2d 5a 61 2d 7a 2d 5f 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e Data Ascii: ;if(e>>>=0,n=void 0===n?this.length:n>>>0,t\|\|(t=0),"number"===typeof t)for(o=e;o<n;++o)this[o]=t;else{var a=c.isBuffer(t)?t:D(new c(t,r).toString()),s=a.length;for(o=0;o<n-e;++o)this[o+e]=a[o%s]}return this};var V=/[^+\/0-9A-Za-z-_]/g;function B(t){return
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 74 69 63 61 6c 22 3d 3d 3d 62 7c 7c 22 62 6f 74 68 22 3d 3d 3d 62 7d 2c 22 66 61 2d 22 2e 63 6f 6e 63 61 74 28 67 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 26 26 6e 75 6c 6c 21 3d 3d 67 29 2c 6c 28 65 2c 22 66 61 2d 72 6f 74 61 74 65 2d 22 2e 63 6f 6e 63 61 74 28 79 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 79 26 26 6e 75 6c 6c 21 3d 3d 79 26 26 30 21 3d 3d 79 29 2c 6c 28 65 2c 22 66 61 2d 70 75 6c 6c 2d 22 2e 63 6f 6e 63 61 74 28 77 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 26 26 6e 75 6c 6c 21 3d 3d 77 29 2c 6c 28 65 2c 22 66 61 2d 73 77 61 70 2d 6f 70 61 63 69 74 79 22 2c 74 2e 73 77 61 70 4f 70 61 63 69 74 79 29 2c 65 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e Data Ascii: tical"===b\|\|"both"===b},"fa-".concat(g),"undefined"!==typeof g&&null!==g),l(e,"fa-rotate-".concat(y),"undefined"!==typeof y&&null!==y&&0!==y),l(e,"fa-pull-".concat(w),"undefined"!==typeof w&&null!==w),l(e,"fa-swap-opacity",t.swapOpacity),e);return Object.
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 74 69 76 65 3d 30 3b 76 61 72 20 65 3d 74 68 69 73 2e 69 61 64 64 28 74 29 3b 72 65 74 75 72 6e 20 74 2e 6e 65 67 61 74 69 76 65 3d 31 2c 65 2e 5f 6e 6f 72 6d 53 69 67 6e 28 29 7d 69 66 28 30 21 3d 3d 74 68 69 73 2e 6e 65 67 61 74 69 76 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 30 2c 74 68 69 73 2e 69 61 64 64 28 74 29 2c 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 31 2c 74 68 69 73 2e 5f 6e 6f 72 6d 53 69 67 6e 28 29 3b 76 61 72 20 6e 2c 72 2c 69 3d 74 68 69 73 2e 63 6d 70 28 74 29 3b 69 66 28 30 3d 3d 3d 69 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 30 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 2c 74 68 69 73 2e 77 6f 72 64 73 5b 30 5d 3d 30 2c 74 68 69 73 3b 69 3e 30 3f 28 6e 3d 74 68 69 73 2c 72 3d 74 29 Data Ascii: tive=0;var e=this.iadd(t);return t.negative=1,e._normSign()}if(0!==this.negative)return this.negative=0,this.iadd(t),this.negative=1,this._normSign();var n,r,i=this.cmp(t);if(0===i)return this.negative=0,this.length=1,this.words[0]=0,this;i>0?(n=this,r=t)
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 70 65 2e 75 73 68 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 6f 6e 65 28 29 2e 69 75 73 68 72 6e 28 74 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 74 65 73 74 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 3d 30 29 3b 76 61 72 20 65 3d 74 25 32 36 2c 6e 3d 28 74 2d 65 29 2f 32 36 2c 69 3d 31 3c 3c 65 3b 72 65 74 75 72 6e 21 28 74 68 69 73 2e 6c 65 6e 67 74 68 3c 3d 6e 29 26 26 21 21 28 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 26 69 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6d 61 73 6b 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 3d 30 29 3b 76 61 72 20 65 3d 74 25 32 Data Ascii: pe.ushrn=function(t){return this.clone().iushrn(t)},o.prototype.testn=function(t){r("number"===typeof t&&t>=0);var e=t%26,n=(t-e)/26,i=1<<e;return!(this.length<=n)&&!!(this.words[n]&i)},o.prototype.imaskn=function(t){r("number"===typeof t&&t>=0);var e=t%2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49723	69.172.201.115	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:03 UTC	582	OUT	GET /static/js/main.d809321a.chunk.js HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://financialaidauthority.com/?mbi=1607332870 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:03 UTC	357	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:03 GMT Content-Type: application/javascript Content-Length: 84348 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "d2933192a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 203149d0581cee0420009e73c2025244
2024-10-01 19:53:03 UTC	16027	IN	Data Raw: 28 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 3d 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 31 30 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 61 3d 73 28 31 29 2c 6e 3d 73 28 35 29 2c 6f 3d 73 28 31 30 39 29 2c 63 3d 73 2e 6e 28 6f 29 2c 69 3d 73 28 31 31 30 29 2c 72 3d 73 2e 6e 28 69 29 2c 64 3d 73 28 34 35 29 2c 6c 3d 73 28 31 31 31 29 2c 6d 3d 73 2e 6e 28 6c 29 2c 75 3d 28 73 28 32 32 32 29 2c 73 28 36 29 29 2c 68 3d 73 2e 6e 28 75 29 2c 70 3d 73 28 32 33 29 Data Ascii: (this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[0],{108:function(e,t,s){"use strict";(function(e){var a=s(1),n=s(5),o=s(109),c=s.n(o),i=s(110),r=s.n(i),d=s(45),l=s(111),m=s.n(l),u=(s(222),s(6)),h=s.n(u),p=s(23)
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 28 29 7b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 2e 2e 2e 74 68 69 73 2e 73 74 61 74 65 2c 64 61 74 61 4c 6f 61 64 65 64 3a 21 30 7d 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 2e 64 61 74 61 4c 6f 61 64 65 64 3f 4f 62 6a 65 63 74 28 75 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 68 69 73 2e 67 65 74 53 75 72 76 65 79 43 6c 61 73 73 28 74 68 69 73 2e 70 72 6f 70 73 2e 6d 62 43 6c 61 73 73 29 2c 63 68 69 6c 64 72 65 6e 3a 5b 4f 62 6a 65 63 74 28 75 2e 6a 73 78 29 28 79 2c 7b 6a 6f 72 6e 61 79 61 54 6f 6b 65 6e 3a 22 64 32 66 62 30 65 63 38 2d 31 65 38 63 2d 61 34 30 32 2d 65 34 61 63 2d 39 32 30 35 66 65 39 38 66 36 32 32 22 2c 6f 6e 47 65 Data Ascii: ponentDidMount(){this.setState({...this.state,dataLoaded:!0})}render(){return this.state.dataLoaded?Object(u.jsxs)("div",{className:this.getSurveyClass(this.props.mbClass),children:[Object(u.jsx)(y,{jornayaToken:"d2fb0ec8-1e8c-a402-e4ac-9205fe98f622",onGe
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 69 6f 6e 3a 74 2c 6f 70 74 69 6f 6e 73 3a 73 2c 72 65 73 70 6f 6e 73 65 3a 61 7d 3d 74 68 69 73 2e 70 72 6f 70 73 2e 64 61 74 61 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 64 2e 6a 73 78 73 29 28 22 64 69 76 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 68 33 22 2c 7b 63 68 69 6c 64 72 65 6e 3a 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 73 70 61 6e 22 2c 7b 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 3a 7b 5f 5f 68 74 6d 6c 3a 72 28 74 2c 74 68 69 73 2e 70 72 6f 70 73 2e 66 75 6c 6c 53 75 72 76 65 79 29 7d 7d 29 7d 29 2c 4f 62 6a 65 63 74 28 64 2e 6a 73 78 29 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 61 6c 65 72 74 20 61 6c 65 72 74 2d 69 6e 66 6f 22 2c 63 68 69 6c 64 72 65 Data Ascii: ion:t,options:s,response:a}=this.props.data;return Object(d.jsxs)("div",{children:[Object(d.jsx)("h3",{children:Object(d.jsx)("span",{dangerouslySetInnerHTML:{__html:r(t,this.props.fullSurvey)}})}),Object(d.jsx)("div",{className:"alert alert-info",childre
2024-10-01 19:53:03 UTC	16384	IN	Data Raw: 6f 6c 6f 6d 6f 6e 20 49 73 6c 61 6e 64 73 22 2c 63 6f 64 65 3a 22 53 42 22 2c 63 6f 64 65 5f 33 3a 22 53 4c 42 22 2c 63 6f 64 65 6e 75 6d 3a 39 30 7d 2c 7b 6e 61 6d 65 3a 22 53 65 79 63 68 65 6c 6c 65 73 22 2c 63 6f 64 65 3a 22 53 43 22 2c 63 6f 64 65 5f 33 3a 22 53 59 43 22 2c 63 6f 64 65 6e 75 6d 3a 36 39 30 7d 2c 7b 6e 61 6d 65 3a 22 53 75 64 61 6e 22 2c 63 6f 64 65 3a 22 53 44 22 2c 63 6f 64 65 5f 33 3a 22 53 44 4e 22 2c 63 6f 64 65 6e 75 6d 3a 37 32 39 7d 2c 7b 6e 61 6d 65 3a 22 53 77 65 64 65 6e 22 2c 63 6f 64 65 3a 22 53 45 22 2c 63 6f 64 65 5f 33 3a 22 53 57 45 22 2c 63 6f 64 65 6e 75 6d 3a 37 35 32 7d 2c 7b 6e 61 6d 65 3a 22 53 69 6e 67 61 70 6f 72 65 22 2c 63 6f 64 65 3a 22 53 47 22 2c 63 6f 64 65 5f 33 3a 22 53 47 50 22 2c 63 6f 64 65 6e 75 6d Data Ascii: olomon Islands",code:"SB",code_3:"SLB",codenum:90},{name:"Seychelles",code:"SC",code_3:"SYC",codenum:690},{name:"Sudan",code:"SD",code_3:"SDN",codenum:729},{name:"Sweden",code:"SE",code_3:"SWE",codenum:752},{name:"Singapore",code:"SG",code_3:"SGP",codenum

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	69.172.201.115	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:06 UTC	621	OUT	GET /favicon.ico HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://financialaidauthority.com/?mbi=1607332870 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:06 UTC	345	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:06 GMT Content-Type: image/x-icon Content-Length: 3870 Connection: close Last-Modified: Thu, 21 Jan 2021 15:30:32 GMT ETag: "b6975b5baf0d61:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 2e01e8cdb3a64af2cc859bf4a376b284 Accept-Ranges: bytes
2024-10-01 19:53:06 UTC	3870	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 e3 01 00 00 46 00 00 00 18 18 00 00 01 00 20 00 0c 03 00 00 29 02 00 00 20 20 00 00 01 00 20 00 39 03 00 00 35 05 00 00 40 40 00 00 01 00 20 00 b0 06 00 00 6e 08 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 e4 50 4c 54 45 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 32 50 58 3d 72 80 29 37 3b 2a 3a 3e 48 90 a4 2d 42 47 45 88 9a 38 64 6f 35 58 62 36 5b 65 4b 99 ae 4b 9a af 31 4d 55 39 67 73 33 53 5c 49 93 a7 3a 67 74 27 30 33 40 7b 8b 56 b9 d4 54 b4 cf 41 7d 8d 56 bb d6 40 79 89 36 5c 66 48 92 a6 2d 43 49 49 94 a8 45 88 9b 2b 3b 40 37 5f 69 37 5f 6a 46 8a 9d 4a 96 ab 4b 9b b0 48 90 a3 2d 42 48 61 da fb 2c 40 46 43 83 94 4c 9d b3 26 2e 30 Data Ascii: F ) 95@@ nPNGIHDR(-SPLTE""""""""""""""""""2PX=r)7;*:>H-BGE8do5Xb6[eKK1MU9gs3S\I:gt'03@{VTA}V@y6\fH-CIIE+;@7_i7_jFJKH-BHa,@FCL&.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49728	69.172.201.115	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:06 UTC	562	OUT	GET /manifest.json HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://financialaidauthority.com/?mbi=1607332870 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:06 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:06 GMT Content-Type: application/json Content-Length: 648 Connection: close Last-Modified: Tue, 28 Jun 2022 17:16:35 GMT Accept-Ranges: bytes ETag: "5f128d2128bd81:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 9c89b5fa966d3b6c8ac30031810f114a
2024-10-01 19:53:06 UTC	648	IN	Data Raw: 7b 0d 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 2c 0d 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 36 34 78 36 34 20 33 32 78 33 32 20 32 34 78 32 34 20 31 36 78 31 36 22 2c 0d 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 6c 6f 67 6f 31 39 32 2e 70 6e 67 22 2c 0d 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 2c 0d 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 39 32 78 31 39 32 22 0d 0a 20 20 20 20 7d 2c 0d 0a 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 6c 6f Data Ascii: { "icons": [ { "src": "favicon.ico", "sizes": "64x64 32x32 24x24 16x16", "type": "image/x-icon" }, { "src": "logo192.png", "type": "image/png", "sizes": "192x192" }, { "src": "lo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49730	69.172.201.115	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:07 UTC	621	OUT	GET /logo192.png HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://financialaidauthority.com/?mbi=1607332870 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:07 UTC	342	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:07 GMT Content-Type: image/png Content-Length: 5347 Connection: close Last-Modified: Thu, 21 Jan 2021 15:30:32 GMT ETag: "abbe5b5baf0d61:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: a26a22d97054a8296f60af163fbdb874 Accept-Ranges: bytes
2024-10-01 19:53:07 UTC	5347	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 00 87 50 4c 54 45 00 00 00 64 da fb 61 da fc 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fc 61 db fc 61 da fc 61 da fc 61 db fc 61 da fc 61 da fc 61 da fb 61 da fb 61 da fb 61 da fc 60 da fb 61 da fb 61 db fb 61 da fc 61 da fc 61 da fc 61 da fc 61 da fb 60 da fb 61 da fb 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fb 61 db fb 61 da fb 61 da fb 66 e8 ff 61 dc fe 63 df ff 65 e3 ff 68 eb ff 48 d5 c6 94 00 00 00 27 74 52 4e 53 00 08 fb 23 f6 0f 2c e0 d8 eb 5f 93 80 ac f1 9c 45 c0 d0 4c 1c 17 6e 3f 58 e5 b3 34 51 67 b9 79 74 ca 3a a4 c5 87 8c 8c 8d 21 cd 00 00 13 e4 49 44 41 54 78 da ec 5b e9 72 9b 30 10 2e 02 1b 6c 2e 1b 3b Data Ascii: PNGIHDRe5PLTEdaaaaaaaaaaaaaaaaaa`aaaaaaa`aaaaaaaaaaafacehH'tRNS#,_ELn?X4Qgyt:!IDATx[r0.l.;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49731	69.172.201.115	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:07 UTC	378	OUT	GET /static/js/2.76b3d64d.chunk.js HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:07 UTC	359	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:07 GMT Content-Type: application/javascript Content-Length: 1385146 Connection: close Last-Modified: Tue, 30 Jul 2024 17:40:30 GMT Accept-Ranges: bytes ETag: "d7b63392a7e2da1:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: fe2445ddc22ca71694f4f0224f767034
2024-10-01 19:53:07 UTC	16025	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 32 2e 37 36 62 33 64 36 34 64 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 3d 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 61 76 61 74 61 72 2d 73 69 74 65 2d 62 75 69 6c 64 65 72 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 28 32 32 33 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 65 78 70 6f 72 74 Data Ascii: /! For license information please see 2.76b3d64d.chunk.js.LICENSE.txt /(this["webpackJsonpavatar-site-builder"]=this["webpackJsonpavatar-site-builder"]\|\|[]).push([[2],[function(t,e,n){"use strict";t.exports=n(223)},function(t,e,n){"use strict";t.export
2024-10-01 19:53:07 UTC	16384	IN	Data Raw: 31 22 3a 22 4c 22 2c 22 5c 75 30 31 33 61 22 3a 22 6c 22 2c 22 5c 75 30 31 33 63 22 3a 22 6c 22 2c 22 5c 75 30 31 33 65 22 3a 22 6c 22 2c 22 5c 75 30 31 34 30 22 3a 22 6c 22 2c 22 5c 75 30 31 34 32 22 3a 22 6c 22 2c 22 5c 75 30 31 34 33 22 3a 22 4e 22 2c 22 5c 75 30 31 34 35 22 3a 22 4e 22 2c 22 5c 75 30 31 34 37 22 3a 22 4e 22 2c 22 5c 75 30 31 34 61 22 3a 22 4e 22 2c 22 5c 75 30 31 34 34 22 3a 22 6e 22 2c 22 5c 75 30 31 34 36 22 3a 22 6e 22 2c 22 5c 75 30 31 34 38 22 3a 22 6e 22 2c 22 5c 75 30 31 34 62 22 3a 22 6e 22 2c 22 5c 75 30 31 34 63 22 3a 22 4f 22 2c 22 5c 75 30 31 34 65 22 3a 22 4f 22 2c 22 5c 75 30 31 35 30 22 3a 22 4f 22 2c 22 5c 75 30 31 34 64 22 3a 22 6f 22 2c 22 5c 75 30 31 34 66 22 3a 22 6f 22 2c 22 5c 75 30 31 35 31 22 3a 22 6f 22 2c 22 Data Ascii: 1":"L","\u013a":"l","\u013c":"l","\u013e":"l","\u0140":"l","\u0142":"l","\u0143":"N","\u0145":"N","\u0147":"N","\u014a":"N","\u0144":"n","\u0146":"n","\u0148":"n","\u014b":"n","\u014c":"O","\u014e":"O","\u0150":"O","\u014d":"o","\u014f":"o","\u0151":"o","
2024-10-01 19:53:07 UTC	16384	IN	Data Raw: 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 69 28 74 2c 65 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 68 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 69 29 7b 72 65 74 75 72 6e 21 28 6e 3d 65 28 74 2c 72 2c 69 29 29 7d 29 29 2c 21 21 6e 7d 66 75 6e 63 74 69 6f 6e 20 6f 69 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 30 2c 69 3d 6e 75 6c 6c 3d 3d 74 3f 72 3a 74 2e 6c 65 6e 67 74 68 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3d 3d 3d 65 26 26 69 3c 3d 32 31 34 37 34 38 33 36 34 37 29 7b 66 6f 72 28 3b 72 3c 69 3b 29 7b 76 61 72 20 6f 3d 72 2b 69 3e 3e 3e 31 2c 61 3d 74 5b 6f 5d 3b 6e 75 6c 6c 21 3d 3d 61 26 26 21 63 73 28 61 29 26 26 28 6e 3f 61 3c 3d 65 3a 61 3c 65 29 3f 72 3d 6f 2b 31 3a 69 3d 6f 7d 72 65 74 Data Ascii: turn a}function ii(t,e){var n;return hr(t,(function(t,r,i){return!(n=e(t,r,i))})),!!n}function oi(t,e,n){var r=0,i=null==t?r:t.length;if("number"==typeof e&&e===e&&i<=2147483647){for(;r<i;){var o=r+i>>>1,a=t[o];null!==a&&!cs(a)&&(n?a<=e:a<e)?r=o+1:i=o}ret
2024-10-01 19:53:07 UTC	16384	IN	Data Raw: 74 29 3f 4e 65 3a 64 72 29 28 74 2c 63 6f 28 65 2c 33 29 29 7d 76 61 72 20 77 61 3d 4e 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 52 74 2e 63 61 6c 6c 28 74 2c 6e 29 3f 74 5b 6e 5d 2e 70 75 73 68 28 65 29 3a 6f 72 28 74 2c 6e 2c 5b 65 5d 29 7d 29 29 3b 76 61 72 20 4d 61 3d 59 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 69 3d 2d 31 2c 6f 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2c 61 3d 57 61 28 74 29 3f 6e 28 74 2e 6c 65 6e 67 74 68 29 3a 5b 5d 3b 72 65 74 75 72 6e 20 68 72 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 5b 2b 2b 69 5d 3d 6f 3f 45 65 28 65 2c 74 2c 72 29 3a 4c 72 28 74 2c 65 2c 72 29 7d 29 29 2c 61 7d 29 29 2c 5f 61 3d 4e 69 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 Data Ascii: t)?Ne:dr)(t,co(e,3))}var wa=Ni((function(t,e,n){Rt.call(t,n)?t[n].push(e):or(t,n,[e])}));var Ma=Yr((function(t,e,r){var i=-1,o="function"==typeof e,a=Wa(t)?n(t.length):[];return hr(t,(function(t){a[++i]=o?Ee(e,t,r):Lr(t,e,r)})),a})),_a=Ni((function(t,e,n)
2024-10-01 19:53:07 UTC	16384	IN	Data Raw: 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 7c 7c 75 72 28 74 2c 65 2c 4e 73 28 65 29 29 7d 2c 42 6e 2e 64 65 62 75 72 72 3d 55 73 2c 42 6e 2e 64 65 66 61 75 6c 74 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 74 21 3d 3d 74 3f 65 3a 74 7d 2c 42 6e 2e 64 69 76 69 64 65 3d 79 63 2c 42 6e 2e 65 6e 64 73 57 69 74 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 74 3d 67 73 28 74 29 2c 65 3d 75 69 28 65 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 2c 69 3d 6e 3d 6e 3d 3d 3d 6f 3f 72 3a 73 72 28 70 73 28 6e 29 2c 30 2c 72 29 3b 72 65 74 75 72 6e 28 6e 2d 3d 65 2e 6c 65 6e 67 74 68 29 3e 3d 30 26 26 74 2e 73 6c 69 63 65 28 6e 2c 69 29 3d 3d 65 7d 2c 42 6e 2e 65 71 3d 42 61 2c 42 6e 2e 65 73 Data Ascii: ,e){return null==e\|\|ur(t,e,Ns(e))},Bn.deburr=Us,Bn.defaultTo=function(t,e){return null==t\|\|t!==t?e:t},Bn.divide=yc,Bn.endsWith=function(t,e,n){t=gs(t),e=ui(e);var r=t.length,i=n=n===o?r:sr(ps(n),0,r);return(n-=e.length)>=0&&t.slice(n,i)==e},Bn.eq=Ba,Bn.es
2024-10-01 19:53:07 UTC	16384	IN	Data Raw: 6e 67 74 68 29 3b 74 3d 73 28 74 2c 6e 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 3d 31 29 74 5b 72 5d 3d 32 35 35 26 65 5b 72 5d 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 69 66 28 74 3e 3d 61 28 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 41 74 74 65 6d 70 74 20 74 6f 20 61 6c 6c 6f 63 61 74 65 20 42 75 66 66 65 72 20 6c 61 72 67 65 72 20 74 68 61 6e 20 6d 61 78 69 6d 75 6d 20 73 69 7a 65 3a 20 30 78 22 2b 61 28 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 62 79 74 65 73 22 29 3b 72 65 74 75 72 6e 20 30 7c 74 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 69 66 28 63 2e 69 73 42 75 66 66 65 72 28 74 29 29 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 3b 69 66 28 22 75 6e Data Ascii: ngth);t=s(t,n);for(var r=0;r<n;r+=1)t[r]=255&e[r];return t}function d(t){if(t>=a())throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+a().toString(16)+" bytes");return 0\|t}function p(t,e){if(c.isBuffer(t))return t.length;if("un
2024-10-01 19:53:07 UTC	16384	IN	Data Raw: 3b 69 66 28 65 3e 3e 3e 3d 30 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 2e 6c 65 6e 67 74 68 3a 6e 3e 3e 3e 30 2c 74 7c 7c 28 74 3d 30 29 2c 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 29 66 6f 72 28 6f 3d 65 3b 6f 3c 6e 3b 2b 2b 6f 29 74 68 69 73 5b 6f 5d 3d 74 3b 65 6c 73 65 7b 76 61 72 20 61 3d 63 2e 69 73 42 75 66 66 65 72 28 74 29 3f 74 3a 44 28 6e 65 77 20 63 28 74 2c 72 29 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 73 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 2d 65 3b 2b 2b 6f 29 74 68 69 73 5b 6f 2b 65 5d 3d 61 5b 6f 25 73 5d 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 76 61 72 20 56 3d 2f 5b 5e 2b 5c 2f 30 2d 39 41 2d 5a 61 2d 7a 2d 5f 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e Data Ascii: ;if(e>>>=0,n=void 0===n?this.length:n>>>0,t\|\|(t=0),"number"===typeof t)for(o=e;o<n;++o)this[o]=t;else{var a=c.isBuffer(t)?t:D(new c(t,r).toString()),s=a.length;for(o=0;o<n-e;++o)this[o+e]=a[o%s]}return this};var V=/[^+\/0-9A-Za-z-_]/g;function B(t){return
2024-10-01 19:53:07 UTC	16384	IN	Data Raw: 74 69 63 61 6c 22 3d 3d 3d 62 7c 7c 22 62 6f 74 68 22 3d 3d 3d 62 7d 2c 22 66 61 2d 22 2e 63 6f 6e 63 61 74 28 67 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 26 26 6e 75 6c 6c 21 3d 3d 67 29 2c 6c 28 65 2c 22 66 61 2d 72 6f 74 61 74 65 2d 22 2e 63 6f 6e 63 61 74 28 79 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 79 26 26 6e 75 6c 6c 21 3d 3d 79 26 26 30 21 3d 3d 79 29 2c 6c 28 65 2c 22 66 61 2d 70 75 6c 6c 2d 22 2e 63 6f 6e 63 61 74 28 77 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 77 26 26 6e 75 6c 6c 21 3d 3d 77 29 2c 6c 28 65 2c 22 66 61 2d 73 77 61 70 2d 6f 70 61 63 69 74 79 22 2c 74 2e 73 77 61 70 4f 70 61 63 69 74 79 29 2c 65 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e Data Ascii: tical"===b\|\|"both"===b},"fa-".concat(g),"undefined"!==typeof g&&null!==g),l(e,"fa-rotate-".concat(y),"undefined"!==typeof y&&null!==y&&0!==y),l(e,"fa-pull-".concat(w),"undefined"!==typeof w&&null!==w),l(e,"fa-swap-opacity",t.swapOpacity),e);return Object.
2024-10-01 19:53:07 UTC	16384	IN	Data Raw: 74 69 76 65 3d 30 3b 76 61 72 20 65 3d 74 68 69 73 2e 69 61 64 64 28 74 29 3b 72 65 74 75 72 6e 20 74 2e 6e 65 67 61 74 69 76 65 3d 31 2c 65 2e 5f 6e 6f 72 6d 53 69 67 6e 28 29 7d 69 66 28 30 21 3d 3d 74 68 69 73 2e 6e 65 67 61 74 69 76 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 30 2c 74 68 69 73 2e 69 61 64 64 28 74 29 2c 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 31 2c 74 68 69 73 2e 5f 6e 6f 72 6d 53 69 67 6e 28 29 3b 76 61 72 20 6e 2c 72 2c 69 3d 74 68 69 73 2e 63 6d 70 28 74 29 3b 69 66 28 30 3d 3d 3d 69 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 65 67 61 74 69 76 65 3d 30 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 2c 74 68 69 73 2e 77 6f 72 64 73 5b 30 5d 3d 30 2c 74 68 69 73 3b 69 3e 30 3f 28 6e 3d 74 68 69 73 2c 72 3d 74 29 Data Ascii: tive=0;var e=this.iadd(t);return t.negative=1,e._normSign()}if(0!==this.negative)return this.negative=0,this.iadd(t),this.negative=1,this._normSign();var n,r,i=this.cmp(t);if(0===i)return this.negative=0,this.length=1,this.words[0]=0,this;i>0?(n=this,r=t)
2024-10-01 19:53:07 UTC	16384	IN	Data Raw: 70 65 2e 75 73 68 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 6f 6e 65 28 29 2e 69 75 73 68 72 6e 28 74 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 74 65 73 74 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 3d 30 29 3b 76 61 72 20 65 3d 74 25 32 36 2c 6e 3d 28 74 2d 65 29 2f 32 36 2c 69 3d 31 3c 3c 65 3b 72 65 74 75 72 6e 21 28 74 68 69 73 2e 6c 65 6e 67 74 68 3c 3d 6e 29 26 26 21 21 28 74 68 69 73 2e 77 6f 72 64 73 5b 6e 5d 26 69 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6d 61 73 6b 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 3e 3d 30 29 3b 76 61 72 20 65 3d 74 25 32 Data Ascii: pe.ushrn=function(t){return this.clone().iushrn(t)},o.prototype.testn=function(t){r("number"===typeof t&&t>=0);var e=t%26,n=(t-e)/26,i=1<<e;return!(this.length<=n)&&!!(this.words[n]&i)},o.prototype.imaskn=function(t){r("number"===typeof t&&t>=0);var e=t%2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49735	69.172.201.115	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:07 UTC	360	OUT	GET /favicon.ico HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:07 UTC	345	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:07 GMT Content-Type: image/x-icon Content-Length: 3870 Connection: close Last-Modified: Thu, 21 Jan 2021 15:30:32 GMT ETag: "b6975b5baf0d61:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 0b073369e8dc8ebf1374ef3ec6ae2d7d Accept-Ranges: bytes
2024-10-01 19:53:07 UTC	3870	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 e3 01 00 00 46 00 00 00 18 18 00 00 01 00 20 00 0c 03 00 00 29 02 00 00 20 20 00 00 01 00 20 00 39 03 00 00 35 05 00 00 40 40 00 00 01 00 20 00 b0 06 00 00 6e 08 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 e4 50 4c 54 45 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 32 50 58 3d 72 80 29 37 3b 2a 3a 3e 48 90 a4 2d 42 47 45 88 9a 38 64 6f 35 58 62 36 5b 65 4b 99 ae 4b 9a af 31 4d 55 39 67 73 33 53 5c 49 93 a7 3a 67 74 27 30 33 40 7b 8b 56 b9 d4 54 b4 cf 41 7d 8d 56 bb d6 40 79 89 36 5c 66 48 92 a6 2d 43 49 49 94 a8 45 88 9b 2b 3b 40 37 5f 69 37 5f 6a 46 8a 9d 4a 96 ab 4b 9b b0 48 90 a3 2d 42 48 61 da fb 2c 40 46 43 83 94 4c 9d b3 26 2e 30 Data Ascii: F ) 95@@ nPNGIHDR(-SPLTE""""""""""""""""""2PX=r)7;*:>H-BGE8do5Xb6[eKK1MU9gs3S\I:gt'03@{VTA}V@y6\fH-CIIE+;@7_i7_jFJKH-BHa,@FCL&.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49736	69.172.201.115	443	768	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 19:53:08 UTC	360	OUT	GET /logo192.png HTTP/1.1 Host: financialaidauthority.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 19:53:08 UTC	342	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 01 Oct 2024 19:53:08 GMT Content-Type: image/png Content-Length: 5347 Connection: close Last-Modified: Thu, 21 Jan 2021 15:30:32 GMT ETag: "abbe5b5baf0d61:0" X-Powered-By: ASP.NET X-Frame-Options: SAMEORIGIN X-DIS-Request-ID: 80b50c8a08103891ecca88d7928fb490 Accept-Ranges: bytes
2024-10-01 19:53:08 UTC	5347	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 00 87 50 4c 54 45 00 00 00 64 da fb 61 da fc 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fc 61 db fc 61 da fc 61 da fc 61 db fc 61 da fc 61 da fc 61 da fb 61 da fb 61 da fb 61 da fc 60 da fb 61 da fb 61 db fb 61 da fc 61 da fc 61 da fc 61 da fc 61 da fb 60 da fb 61 da fb 61 db fc 61 da fc 61 db fc 61 da fb 61 db fc 61 da fb 61 da fb 61 db fb 61 da fb 61 da fb 66 e8 ff 61 dc fe 63 df ff 65 e3 ff 68 eb ff 48 d5 c6 94 00 00 00 27 74 52 4e 53 00 08 fb 23 f6 0f 2c e0 d8 eb 5f 93 80 ac f1 9c 45 c0 d0 4c 1c 17 6e 3f 58 e5 b3 34 51 67 b9 79 74 ca 3a a4 c5 87 8c 8c 8d 21 cd 00 00 13 e4 49 44 41 54 78 da ec 5b e9 72 9b 30 10 2e 02 1b 6c 2e 1b 3b Data Ascii: PNGIHDRe5PLTEdaaaaaaaaaaaaaaaaaa`aaaaaaa`aaaaaaaaaaafacehH'tRNS#,_ELn?X4Qgyt:!IDATx[r0.l.;

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2296, Parent PID: 5464

General

Target ID:	0
Start time:	15:52:44
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 768, Parent PID: 2296

General

Target ID:	2
Start time:	15:52:48
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 --field-trial-handle=2232,i,5948912565030126564,16594465241854581273,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6332, Parent PID: 5464

General

Target ID:	3
Start time:	15:52:53
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://xmu.fastestopt.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://xmu.fastestopt.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

Windows Analysis Report
http://xmu.fastestopt.com