Edit tour

Windows Analysis Report
https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password×tamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true

Overview

General Information

Sample URL:	https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password×tamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true
Analysis ID:	1528305
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6700 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1924,i,4031538184830513180,13191325032895617303,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true

LLM: Score: 9 Reasons: The brand 'Cloudflare' is well-known and typically associated with the domain 'cloudflare.com'., The provided URL 'doccloudshareddrive.com' does not match the legitimate domain for Cloudflare., The URL contains no direct reference to Cloudflare, which is suspicious., The domain 'doccloudshareddrive.com' appears generic and unrelated to Cloudflare's services., The input field 'Verify you are human' is commonly used in phishing sites to appear legitimate. DOM: 0.3.pages.csv

Source: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true	HTTP Parser: No favicon
Source: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true	HTTP Parser: No favicon
Source: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true	HTTP Parser: No favicon
Source: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49829 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 52.149.20.212
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203

Source: global traffic	HTTP traffic detected: GET /?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true HTTP/1.1Host: doccloudshareddrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true HTTP/1.1Host: doccloudshareddrive.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8cef69cd4bf56a5c HTTP/1.1Host: doccloudshareddrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true&__cf_chl_rt_tk=ZUUetqJzfrOgTZTRyYkoHuhNBWNkxiwOKuNE.JvS564-1728320068-0.0.1.1-5695Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://doccloudshareddrive.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: doccloudshareddrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8cef69cd4bf56a5c HTTP/1.1Host: doccloudshareddrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1310495476:1728318649:pB1YPIUF28SWt_BWZWhfGh-z19KQZFWcJJIavfqK3kM/8cef69cd4bf56a5c/0adb6525cba31fd HTTP/1.1Host: doccloudshareddrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cef69e1b9780ced&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cef69e1b9780ced&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: doccloudshareddrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1366294320:1728318615:2JjXzTu9lqVz5H8mEaag0ElC5Asvh6dQXlCOiplaCUI/8cef69e1b9780ced/87b66ef02a7c392 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cef69e1b9780ced/1728320073791/q8zKI0n6WTBOyb6 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cef69e1b9780ced/1728320073791/q8zKI0n6WTBOyb6 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8cef69e1b9780ced/1728320073795/ff8556a21c2438eebe39e00f9ea4944944c690ace171b58d1de70c1e2d03e81a/vC_aVt3KXW7ZlTc HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=C+6BPP2fscYLn4K&MD=Kdk5mNk+ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1366294320:1728318615:2JjXzTu9lqVz5H8mEaag0ElC5Asvh6dQXlCOiplaCUI/8cef69e1b9780ced/87b66ef02a7c392 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1366294320:1728318615:2JjXzTu9lqVz5H8mEaag0ElC5Asvh6dQXlCOiplaCUI/8cef69e1b9780ced/87b66ef02a7c392 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1310495476:1728318649:pB1YPIUF28SWt_BWZWhfGh-z19KQZFWcJJIavfqK3kM/8cef69cd4bf56a5c/0adb6525cba31fd HTTP/1.1Host: doccloudshareddrive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: doccloudshareddrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true&__cf_chl_tk=ZUUetqJzfrOgTZTRyYkoHuhNBWNkxiwOKuNE.JvS564-1728320068-0.0.1.1-5695Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: doccloudshareddrive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_clearance=EQjVaIhl5a5jkaXZijJu85d2uwdqqCumhzL5ZQgEn.I-1728320068-1.2.1.1-O1wZF1nAvChmBuDUd40bVlipuAWN4LwLSI3BRb8syCuGrxaB4l4kR9dgYuvA6PMZ168fVoQL3K8trIbCGQyDrafp6RNdibmHoAKOFULXB837kdAEdnjbpzwMAtrKSighlItoqLyH9BxYsFq5bgAokkNwGxHAnMDxNGkoiRUj.f3TAcu1J6GiHdDkhutUv1v71Y9xho2cKRxZ0lgrnYc28tQz8HdYWedF1MY_wuPzcEliH4Sh6vpxiM7tQlFGPYIKBBez0v8YQ8ZEO9rmP6U3GEVuPguayCpZs1OnkTvH7IJaj6K_MmvwgiDZtycDGpe8WzUFevLeaWfmtSmV2jmxF4MIfA1h6hxJzur8j9568nPo7E98pEXqvRGroD1fnmO1oQ5it6AGY_FCYoZG9sjLEN.S39dBP2HZCF2lXqMMWBiI_I74FsTBx9PUDQKxF1B6
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=C+6BPP2fscYLn4K&MD=Kdk5mNk+ HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: doccloudshareddrive.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: portal.office.com
Source: global traffic	DNS traffic detected: DNS query: outlook.office.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: substrate.office.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: officehub.nel.measure.office.net

Source: unknown

HTTP traffic detected: POST /report/v4?s=J6FiaV5selQbWkf3x4UQKDyp2rCO%2Flb9eLdcijpl8akDu8ELlvL0I7kP6V%2FPt2r4uawEumeBjRuztzEobEv0QcFQY8QRbFbf4y9PW6D9KfW6d9txCujWepTCLgYXSe9iekkPSbUrnNC%2Byg%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 527Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 07 Oct 2024 16:54:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 07 Oct 2024 16:54:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 16:54:32 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: BseUye9QjTFSOk2R/g30QSUUooLn1ad3CfI=$77AuwC/wHn5muinacache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7AaAXl1fkKAQZdLjCktGHOvXfSo7lkkyVaYjpCLDMsR4wP8NzLMs3A2FE3kIpmFE1LWKfUp07iiJb78bIDgasJi25u6cfrkaKWLso%2BJ2k3by1NOESr9uwud8mNiUvWq8xLfFP6Z54yGiCA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8cef69e488a05e72-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 16:54:34 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: y0RAii8TrT6UqZMr/wj1O507QAIeSMmz2gg=$0sm9wlH0aFWsZiyzServer: cloudflareCF-RAY: 8cef69f3eeb442ea-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 16:54:38 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: I6Ne7S3ebZasYF1jIFyKAi0VIFUUMM3Ji1I=$yDCPLvVwWOzI3bI9cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8cef6a09ee084325-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 16:54:39 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: qZcizXvGkIMEG6Rz8MX8JtOBHAjMYUKEwNE=$6lZYYUYAoYfgE45Zcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8cef6a13ddfcde9a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 16:54:42 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: MDt/T2fQyvRTNH1AYjPco1A7EGD2On0z/xU=$vNs4xkS9SoJut949cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=atRXaLa0BdUgveq%2BIAZgDWMc3xZeKvJE8XltMJe10QY2Gf7Suh%2BiHiqM4aO%2BAiLVVSxaU%2B4n6UGEnDzu4yO2bQmb6r6l9fZMXnoZEoiH%2B7gxXehlPyQSnZQX%2F%2FAL99woYKe6lXlMF2mqHQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8cef6a208c4c8c12-EWR

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.16:49829 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@22/67@36/9

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1924,i,4031538184830513180,13191325032895617303,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1924,i,4031538184830513180,13191325032895617303,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
ooc-g2.tm-4.office.com	52.98.152.178	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
doccloudshareddrive.com	188.114.97.3	true	true	unknown
challenges.cloudflare.com	104.18.94.41	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
www.office.com	unknown	unknown	false	unknown
outlook.office.com	unknown	unknown	false	unknown
substrate.office.com	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
portal.office.com	unknown	unknown	false	unknown
officehub.nel.measure.office.net	unknown	unknown	false	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://a.nel.cloudflare.com/report/v4?s=atRXaLa0BdUgveq%2BIAZgDWMc3xZeKvJE8XltMJe10QY2Gf7Suh%2BiHiqM4aO%2BAiLVVSxaU%2B4n6UGEnDzu4yO2bQmb6r6l9fZMXnoZEoiH%2B7gxXehlPyQSnZQX%2F%2FAL99woYKe6lXlMF2mqHQ%3D%3D	false	unknown
https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true	true	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cef69e1b9780ced/1728320073791/q8zKI0n6WTBOyb6	false	unknown
https://doccloudshareddrive.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8cef69cd4bf56a5c	false	unknown
https://doccloudshareddrive.com/favicon.ico	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8cef69e1b9780ced/1728320073795/ff8556a21c2438eebe39e00f9ea4944944c690ace171b58d1de70c1e2d03e81a/vC_aVt3KXW7ZlTc	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1366294320:1728318615:2JjXzTu9lqVz5H8mEaag0ElC5Asvh6dQXlCOiplaCUI/8cef69e1b9780ced/87b66ef02a7c392	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	unknown
https://a.nel.cloudflare.com/report/v4?s=gTln%2BVYMkt61TcAGkWSCb09LdwuYddRKOC%2FLJHyDMF9qJOATJjHT%2FETg34tOhLOY77SRhxkU7VA54Sds8Y%2B9mUywjwvNVSynfHFWLrYrU%2Fi5EM%2F6Lfk9Kw%2FTcXxG2%2BzfVLzKl0F1AvxkCg%3D%3D	false	unknown
https://doccloudshareddrive.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1310495476:1728318649:pB1YPIUF28SWt_BWZWhfGh-z19KQZFWcJJIavfqK3kM/8cef69cd4bf56a5c/0adb6525cba31fd	false	unknown
https://a.nel.cloudflare.com/report/v4?s=J6FiaV5selQbWkf3x4UQKDyp2rCO%2Flb9eLdcijpl8akDu8ELlvL0I7kP6V%2FPt2r4uawEumeBjRuztzEobEv0QcFQY8QRbFbf4y9PW6D9KfW6d9txCujWepTCLgYXSe9iekkPSbUrnNC%2Byg%3D%3D	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cef69e1b9780ced&lang=auto	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	doccloudshareddrive.com	European Union	13335	CLOUDFLARENETUS	true
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.15

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528305
Start date and time:	2024-10-07 18:53:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password×tamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@22/67@36/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.67, 216.58.206.46, 142.250.110.84, 34.104.35.123, 93.184.221.240, 13.107.6.156, 23.38.98.102, 23.38.98.84, 184.30.21.171, 88.221.110.179, 88.221.110.176, 40.126.31.71, 40.126.31.73, 20.190.159.71, 20.190.159.75, 20.190.159.73, 20.190.159.64, 20.190.159.68, 20.190.159.0, 20.103.156.88, 20.190.190.102, 20.190.190.101, 20.190.190.103, 20.190.190.99, 20.190.190.96, 20.190.190.100, 52.109.28.50, 104.102.55.235, 23.38.98.97, 142.250.186.99, 2.19.126.89, 2.19.126.84, 2.16.241.15, 2.16.241.17, 142.250.74.206, 2.16.164.49, 2.16.164.19
Excluded domains from analysis (whitelisted): europe.ocws1.live.com.akadns.net, uks-azsc-000.ocws.officeapps.live.com, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, ak.privatelink.msidentity.com, prod.ocws1.live.com.akadns.net, www.microsoft.com-c-3.edgekey.net, iris-de-prod-azsc-v2-weu.westeurope.cloudapp.azure.com, clients2.google.com, shell.cdn.office.net, update.googleapis.com, ags.privatelink.msidentity.com, e40491.dscg.akamaiedge.net, www.tm.prd.ags.akadns.net, osiprod-uks-flax-azsc-000.uksouth.cloudapp.azure.com, fs.microsoft.com, portal-office365-com.b-0004.b-msedge.net, e19254.dscg.akamaiedge.net, shell.cdn.office.net-c.edgekey.net.globalredir.akadns.net, edgedl.me.gvt1.com, res-prod.trafficmanager.net, owamail.public.cdn.office.net.edgekey.net, nel.measure.office.net.edgesuite.net, owamail.public.cdn.office.net.edgekey.net.globalredir.akadns.net, clients.l.google.com, appsforoffice.microsoft.com, home-office365-com.b-0004.b-msedge.net, graph.microsoft.com, a1
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true

Input	Output
URL: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true Model: jbxai	{ "brand":["Cloudflare"], "contains_trigger_text":true, "trigger_text":"Verifying you are human. This may take a few seconds.", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":true, "has_urgent_text":false, "text":"Verifying you are human. This may take a few seconds.", "has_visible_qrcode":false}

URL: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true Model: jbxai	{ "brand":["Cloudflare"], "contains_trigger_text":true, "trigger_text":"Verifying you are human. This may take a few seconds.", "prominent_button_name":"Verifying...", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":true, "has_urgent_text":false, "text":"Verifying you are human. This may take a few seconds.", "has_visible_qrcode":false}

URL: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true Model: jbxai	{ "brand":["Cloudflare"], "contains_trigger_text":true, "trigger_text":"Verify you are human", "prominent_button_name":"Verify you are human", "text_input_field_labels":["Verify you are human"], "pdf_icon_visible":false, "has_visible_captcha":true, "has_urgent_text":false, "text":"Verify you are human by completing the action below.", "has_visible_qrcode":false}

URL: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"The gods are wise, but they do not know what you seeks!", "has_visible_qrcode":false}

URL: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true Model: jbxai	{ "phishing_score":9, "brands":"Cloudflare", "legit_domain":"cloudflare.com", "classification":"wellknown", "reasons":["The brand 'Cloudflare' is well-known and typically associated with the domain 'cloudflare.com'.", "The provided URL 'doccloudshareddrive.com' does not match the legitimate domain for Cloudflare.", "The URL contains no direct reference to Cloudflare, which is suspicious.", "The domain 'doccloudshareddrive.com' appears generic and unrelated to Cloudflare's services.", "The input field 'Verify you are human' is commonly used in phishing sites to appear legitimate."], "brand_matches":[false], "url_match":false, "brand_input":"Cloudflare", "input_fields":"Verify you are human"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 15:54:28 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.991083918810371
Encrypted:	false
SSDEEP:	48:8mdaTm6iHEidAKZdA1FehwiZUklqehey+3:8Tn1ty
MD5:	B1203D76A3E0549557F109567656B061
SHA1:	B4CA1CB33CEA54D4DB6FCA72A4FD2B64ECE415AF
SHA-256:	A951157880D606F1ECACF6716875A13EB9F5C09AC301F5B64A6D832524BF0B66
SHA-512:	2D8C84EBCD1529BE7B16F90107C324D77268EBF19F69CDD4B6E2F7435E4B204B9564CA405A63DCC600086717C1E39F85D0C4F1C601547AC9B3273B9322B252B7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 15:54:28 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.0061645788183835
Encrypted:	false
SSDEEP:	48:8tdaTm6iHEidAKZdA1seh/iZUkAQkqehdy+2:86nr9Q0y
MD5:	319C4AEB7779211E3B00E818AE4C7C6C
SHA1:	53BED39C3A8EBB0992C9ED801AD5FF8C088E6A2E
SHA-256:	F02F8069FD62EAF05EA12AA502D1E57CA0FF241CC4D5B591EED6480B5CBD9062
SHA-512:	F906A97ACB47535BC25B260D93B4A2BC37FFC9ABD471161185581501BC9E8F19BCDC621993A9C4901394D5B57ABCAFD38F177AE6EE0525DB4712239C599B4601
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.014279658928239
Encrypted:	false
SSDEEP:	48:8rdaTm6AHEidAKZdA14meh7sFiZUkmgqeh7s7y+BX:8ontnRy
MD5:	58306FBE40C17FB0FC48D58DEAEFBCB8
SHA1:	32F445882B2F5A214A58D0DF7D90F81F4012CED9
SHA-256:	99637FB9D4EE6DB9B4455AE8F567657D35DF86D3896538293A618332DFEA6402
SHA-512:	92D4D5C8F265BF60E7F77B6089992B1F23CA9C4E9BC7A53C0D7E6B1F91DAA0AEDC0D351D55336916567703979398AC617BDBABFC026A4C1253EDE6C10FD81BA7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 15:54:28 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.004583988151587
Encrypted:	false
SSDEEP:	48:8zdaTm6iHEidAKZdA1TehDiZUkwqehZy+R:8An4jy
MD5:	8A645786CD914EEB8ED4999A3C818DBD
SHA1:	F95467DC7B0FA936B35FA9456AE2474FFA308878
SHA-256:	5B70E944DC7564A2CB57F4DD8120D8F00D3C4E4CF5C2CDBAD35EB75D44BFE5D3
SHA-512:	084748A82B853B91B154773BCE07FBDBA1C21776684145FCCD0A1D612848FF688A5C747DF29ED934AF85875B8272D884960E55567631F5E76F547E2C48F97E25
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....-......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 15:54:28 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9931490207754536
Encrypted:	false
SSDEEP:	48:8RdaTm6iHEidAKZdA1dehBiZUk1W1qeh/y+C:8mnI9fy
MD5:	D09EFDDA7E1EBBA0DDE37B778EE18D02
SHA1:	0D1BEFB3B6E780B9A227376F19B7179B38955F59
SHA-256:	0C1153170CB245F3693F943EEE37602488BFCA9D29B18A4AC63F34B3BA17CCDD
SHA-512:	68DEC954CF7D527FFB55EBB271FBBD211AC0E35E6DAB5FF34DAF0DB1CEA212F2DF22954595DAD014124E2D25C80059553CF929AE63479FED60669714C2FFF963
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....t......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Oct 7 15:54:28 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.003385882510584
Encrypted:	false
SSDEEP:	48:8wdaTm6iHEidAKZdA1duTeehOuTbbiZUk5OjqehOuTbRy+yT+:8ln6TfTbxWOvTbRy7T
MD5:	935387439FFEFB25ACE1CCBEFF90A8DB
SHA1:	7CEB19B9192B6D227DD84827649BAAAEC6FF44F4
SHA-256:	FA5B8A67418C70811F90F5FB73230F13A090DC7135C88FE3FF5537FA3D466FB0
SHA-512:	0EAEA4384E6C13D3D8D3299E3167EFE503B68BB482C30EE1EA162536356072643342077CD58422B07C6080F8C4301DCDA1522A14FCEB8F5C69F721A17A75A145
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IGY.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VGY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VGY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VGY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VGY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4000 x 2238, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10058400
Entropy (8bit):	7.988307130589743
Encrypted:	false
SSDEEP:	196608:5nHCaQivyot0RWDNzjMqV8CoWF6UquVtmS7ycKUkQfaGG9:ZHCavyI0cDN0qV8rmguVwaKUffaGG9
MD5:	7D5C104D8439CC4A1A9618391A52DFC2
SHA1:	1EACDB703238FC270187A1A23AA77315EE475ED2
SHA-256:	2AB1510CDB2FA03A8CAF6F2CC4A40EBB2B8218922A6AD1F640F4EDD9018E9144
SHA-512:	73446F80AC5B2AB4DEE11CAE312D9486CDF1261DE7BB988F55A5C5269825773964857452705CA6B4B165DCA4DFFE7DD13531CA04804E61210DC950CED900C26F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................g....pHYs.................sRGB.........gAMA......a...z5IDATx.....&.&..J........;>..xt..{.....2.I...vu.....T.PJ.Z....K....Ep..16.r..+.........h9......5q.8.?.....0...\|<Y@...y6..B..N./..yI....e\.....d.MzN.X..V_.N..9..2.5.'A.-#...A4.._..S.\|...u_.....J.gd.lR..........i.@y,.?.}[\|..>.$p'..zi.#]emv%.!.cO...>.n8r..5..Ro.5.......h.....4.'...[....X....@[..U...v.?4D..4,;y>....r=..L...4\_p...r...~.,..<..r...3....!t._E....Ai....M3...'......z.hl#..j=...0.e;..F...9..9..._.....0..}..".k......`I.r...A...1....+.>.`.g...E..\|...1.....!..3{=..s@.-1.....343u...)..Z.k..}u.c.....QG.xy.9;. ^...x..!.S....n..z....O.0.l........M..p?..{.o/...?-..?..,.2ur......[....].b.'C..V.&...e.w`..r..\|o..;6.....k..9._.\|.{{...'..O..7.g..zG.'.#...~...]....g.$..F........o..QI..ge{...8w.t.Z.'.:..!./.......x...:.1.s...'.......D....g.Q.*y.>>.-q... ......sH..........G........<H........S..y>.+......_'k...}........i.=e...kN'_I.:..~ZsY..t$o.C..&).0D...S.....

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 973 x 675, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	279269
Entropy (8bit):	7.994566583539726
Encrypted:	true
SSDEEP:	3072:RiwpUTuOsjVbgT94HFlcTY+/+T8tDtnSTFaslpolHpMerO+lMbQfVwv6p1YH:XG+jB894HFGTVw8QgGbMY
MD5:	8548B8B68D33DBF376420E679FC84996
SHA1:	7A277E16B935833A6403DEAD1CF5A7661F20DB24
SHA-256:	CDFE0542BE718F847059F73ABC6EF56387109AB760D5530046F2EF9EDB25ED31
SHA-512:	AED4FD1D6EBACFBBECBCCAE8CF4F4F13319D355723CF16F830C315884FCDE9EDAA929E5EEF78A36006FC0412AB1224AF311906883BA7391DF7165D7F3D808E00
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-2-mreb-8548b8b68d.png
Preview:	.PNG........IHDR.............'?.k....pHYs.........&.:4....sRGB.........gAMA......a...BzIDATx...[...u...1...>..bU.b..)..).%9.":blK.,..0....v...@.h4........~k.../...:p.8.a'...u.,Z$-.WU...?g........"e.UG..<..^...c.o..E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-..'.E........^...D.....J..\|.9}........)}.zq..~..Y.O_........?.....=...}..s<..?....=.q{Vy....o\.=.~t.l~??......@;..s...

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1094 x 761, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	489526
Entropy (8bit):	7.995720041871589
Encrypted:	true
SSDEEP:	6144:aKimPYeigxfUPOwwMSavIHHukSrlKdZmzrC41zbxJa9ZqHqqzM0pZAyeRLqtt3LP:aKPFyOziIHOEgz2izjDANRLsl+4H7
MD5:	708BCC570AD4887E2C1854014B472FC0
SHA1:	768539D7A0EF0061097FF3AE0895EE437D543A13
SHA-256:	88A8CE64B7B33A367FC73338F5E319B3546DD782E0336CCA07D00A54B5C51DA0
SHA-512:	9E35EBDE9BBC942B2F1ECDD7A700D2822B651EC1682B27BB14936A683A5E7288D6F151B3299B2D423B2A2526516519991B7F967F1A466936E91EDAB4CAC13F8B
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-4-mreb-708bcc570a.png
Preview:	.PNG........IHDR...F...........!.....pHYs.........&.:4....sRGB.........gAMA......a...w.IDATx.....$.Y.....O....l..]..*.d...d...X`0.^....{...\s...K...m0..m0`2.e..]m........t.t..}...{...l.vv..nMwW..>U.....=..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 44, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlETXj3t6yxl/k4E08up:6v/lhPyn3t6y7Tp
MD5:	D143A8BF0DA715122B8B2C1C3AA8F91F
SHA1:	0BAAF089FC649F16930112F248AEB51310D20FC6
SHA-256:	27515836E5FA3FDF244DBDD3D8D1294BC37F3DA65F25CE53CF28A8E4FA372094
SHA-512:	E47E768CF24C7BBD837A842C5C4AD7D9FD7C32D935CCE2423FAECA8B6DF034C7902F93E60BA594E587F73C11D1EA80CFD074E2050ABCFDC3F96A1CB206334789
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...)...,.....w.......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 41 x 44, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.068159130770306
Encrypted:	false
SSDEEP:	3:yionv//thPlETXj3t6yxl/k4E08up:6v/lhPyn3t6y7Tp
MD5:	D143A8BF0DA715122B8B2C1C3AA8F91F
SHA1:	0BAAF089FC649F16930112F248AEB51310D20FC6
SHA-256:	27515836E5FA3FDF244DBDD3D8D1294BC37F3DA65F25CE53CF28A8E4FA372094
SHA-512:	E47E768CF24C7BBD837A842C5C4AD7D9FD7C32D935CCE2423FAECA8B6DF034C7902F93E60BA594E587F73C11D1EA80CFD074E2050ABCFDC3F96A1CB206334789
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cef69e1b9780ced/1728320073791/q8zKI0n6WTBOyb6
Preview:	.PNG........IHDR...)...,.....w.......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	dropped
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1094 x 761, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	489526
Entropy (8bit):	7.995720041871589
Encrypted:	true
SSDEEP:	6144:aKimPYeigxfUPOwwMSavIHHukSrlKdZmzrC41zbxJa9ZqHqqzM0pZAyeRLqtt3LP:aKPFyOziIHOEgz2izjDANRLsl+4H7
MD5:	708BCC570AD4887E2C1854014B472FC0
SHA1:	768539D7A0EF0061097FF3AE0895EE437D543A13
SHA-256:	88A8CE64B7B33A367FC73338F5E319B3546DD782E0336CCA07D00A54B5C51DA0
SHA-512:	9E35EBDE9BBC942B2F1ECDD7A700D2822B651EC1682B27BB14936A683A5E7288D6F151B3299B2D423B2A2526516519991B7F967F1A466936E91EDAB4CAC13F8B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...F...........!.....pHYs.........&.:4....sRGB.........gAMA......a...w.IDATx.....$.Y.....O....l..]..*.d...d...X`0.^....{...\s...K...m0..m0`2.e..]m........t.t..}...{...l.vv..nMwW..>U.....=..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1598 x 899, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1236532
Entropy (8bit):	7.99453807364983
Encrypted:	true
SSDEEP:	24576:3IR94Q7f3YaeokAGfdoICPLOHpob3i8/eCsjNKSOyP82Rx7BiVQFMqna:3IR9hz3OyedoZyHpyzer023BieKqa
MD5:	EAFC3935A3559F15248B9409658D978F
SHA1:	46242446924C4DB9208646689119EFACFF1C93FD
SHA-256:	B38F5C1FD010828E2DFC90300D3C2AB93DF49CF75C758BBBFF6B0A987D64C448
SHA-512:	A1F345BFA3D85C7436E5F8EC6DA3147779BC903B6E59B24732C1302AEE8366B6E60D5F3281022485E4580B22D440AF80798010E06B0E2639BEB0DBE357347B7E
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-3-mreb-eafc3935a3.png
Preview:	.PNG........IHDR...>...........x1....pHYs.................sRGB.........gAMA......a.....IDATx...W.m....1W^;.\|.n..n.K...&...).Y.(.l.....a....~1l.O._...~4.`..m..!AjB.(..@R......7T<g..g...XkW..'V........s......WU .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ ..D................o'bl...@ .....@ .....@ .....@ ......M....E.E<'}...r.g..Z...Ws..1.^.~.m.S_..e..{...x.c..4/....x.{\|..gA...s.g.S/.,.2..,.....UAD1...@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ ..../..$-..g...."..#......#.B\|.5.......2........Y..M..bL=...R.g.7y.{U....q...........>.....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ .....@ ......B...\|].}.HO.....Y.,.x......C.....m.j.#.!....{\|.=...S.{<.^.=.km.e.\|Y.H...g}'......<..Mc.E..w..J...w....@ .....@ .....@ .....@ ........E...z..o..._MD.......Q..W.....@ .....@ .....@ .....@ ...^.B/......~.\|].._v.g

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1143 x 794, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	383270
Entropy (8bit):	7.988693191327277
Encrypted:	false
SSDEEP:	6144:TPRLLUNp5X4PgHMt6rH4wJKdPUQ8hR8YXR+JQKFTRvMqtpKyg9N/hTWjrA3S1SmI:hYNTIP/wJuMQ8hR8YXR+JQK3gz/JGA3t
MD5:	7B89E7B9A1E5F0E2AD529D5A85E1ACB7
SHA1:	304ECC4375129D905E70AFE830E998470DADECD9
SHA-256:	1329D493F7D313CA0026EB2664D1AACECBCA82D5BE70F692DD61C980F3BB16BE
SHA-512:	F35C28AC263F1C8A16385D6624D33D0EBCA72F0F959DA654C5B552D5B23EDF41A16D922A9FB6AAFD408AF7E2721D42C0145D99E6B8BC462679FADBEF2C484BA4
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-1-mreb-7b89e7b9a1.png
Preview:	.PNG........IHDR...w..........b......pHYs.........&.:4....sRGB.........gAMA......a....IDATx...{.o.U....~.q.>.z.....W...1.1...$.N...L...%....)..{...J]....i!.-uh!ZJB......4j.....@$l.:..7.....5z.5.s......~.:...~.S..[k..Zk....5.D...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4525)
Category:	downloaded
Size (bytes):	7355
Entropy (8bit):	4.574907159383591
Encrypted:	false
SSDEEP:	192:HtOxp8sJyz/lNY6ZF66H1RBex70+g0o7RWhfltF/:UxHwBN/9J27AX2R
MD5:	D11FF2A555383ADE368A441DBC3F86BB
SHA1:	C6265174727D090BD111E025893B413406FE1170
SHA-256:	ACB6325436A20D0AE92875E1076132FBEEBA1B157E0275349A9B97F4C99B503C
SHA-512:	D4ADAD634B8070595B0F0EFE7205949D2A899FFDAEB5DC0438FF8C810CBB3D93C662795CBA5619E76073F1C2B0D931232041A0ECD4D7AD462D8865031DAECB5B
Malicious:	false
Reputation:	low
URL:	https://doccloudshareddrive.com/favicon.ico
Preview:	. <!DOCTYPE html>. <html lang="en">. <head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. . </head>. <body>. . . <script>. (function() {. var obfuscateCode = function(code) {. var chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';. var newVars = {};. . code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) {. if (!newVars[p1]) {. newVars[p1] = chars[Math.floor(Math.random() chars.length)] + Math.floor(Math.random() * 1000);. }. return 'var ' + newVars[p1];. });. . code = code.replace(/([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) {. return newVars[p1] \|\| p1;. });. . code = code.replace(/ifs((.?))s{(.?)}/gs, function(match, p1, p2) {. var dummyVar = 'dummy' + Math.floor(Math.random() 1000);.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1119 x 704, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	591728
Entropy (8bit):	7.996032737804013
Encrypted:	true
SSDEEP:	12288:BzVysRpODYLFLYXMaM48blnrCrjueL1oETab46OxEdB7ny2Q7e/:rODoSMcImr71eUXEPnBQq/
MD5:	8977DBD5387860CD8344B51DC4F00216
SHA1:	A0BCA65DE5D325B87EBDED22EC2EE9F459EED2DB
SHA-256:	6EA50E423008D71C95B019385D8A3D018DE4B9735870224B49EBA9B2E2A0263B
SHA-512:	EAEC056E681DFAC5CDEFBA16A1AB20CBDBD736AC77D14F018FD6C371F2D6C1F81ED46353B7661BB2E326A89E608D5B2B9097A0AD0F7ADF4DEF682AE835D75B13
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-1-mreb-8977dbd538.png
Preview:	.PNG........IHDR..._.........E:......pHYs.........&.:4....sRGB.........gAMA......a.....IDATx...I.mKr&.....9.{.....H.I1.Y.T.RBB@....h....@....j.Y.......5......T....lX.....\|.........?3...9.y$.n.W.nnnn..,o.&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L...L..:`....~\|s.....UV^IX.)?K).=+.y..w....j.[.e..2..%_...9._IJ...z=.G.Z..`...g...r...[...{....w(..?..1<%r..........w.&...`.~...&L.0a..3..-.................x...X..^...Z.......5.<..'O...+9\.,......9.0....=oN."....b._.{Zy.X.{I.e{.].......!...=.ER.-m.G.y...o...<.V`.?..i-...z.~.5...[.V..0-k*{...2....}J...ij..&%.R...+%.K.wz...r'Fy~....s.ZQ.gMYR}O%C.S)=......GO....\./.Zo...q.x7.dY.......g....w.Y.\x.....R.J..S...\.,.b......S.{J.?..[.M../.s......t....M..\.?P...W.&O8......W.....&u%.....A

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47261)
Category:	downloaded
Size (bytes):	47262
Entropy (8bit):	5.3974731018213795
Encrypted:	false
SSDEEP:	768:+CWIsQ06lHHhw+r9sygguSwodvdq3VE3XYdze9Ddre9eom1CQWpKexThupcubvCR:uQflHBN9sygg1WViPreEM
MD5:	E07E7ED6F75A7D48B3DF3C153EB687EB
SHA1:	4601D83C67CC128D1E75D3E035FB8A3BDFA1EE34
SHA-256:	96BD1C81D59D6AC2EC9F8EBE4937A315E85443667C5728A7CD9053848DD8D3D7
SHA-512:	A0BAF8B8DF121DC9563C5C2E7B6EEE00923A1E684A6C57E3F2A4C73E0D6DD59D7E9952DF5E3CFFFB08195C8475B6ED261769AFB5581F4AB0C0A4CC342EC577C9
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit
Preview:	"use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);function g(p){Vt(l,o,c,g,f,"next",p)}function f(p){Vt(l,o,c,g,f,"throw",p)}g(void 0)})}}function U(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):U(e,r)}function Me(e,r,a){return r in e?Object.defineProperty(e,r,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[r]=a,e}function Fe(e){for(var r=1;r<arguments.length;r++){var a=arguments[r]!=null?arguments[r]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){Me(e,c,a[c])})}return e}function Rr(e,r){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2609 x 470, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	713010
Entropy (8bit):	7.987989282294461
Encrypted:	false
SSDEEP:	12288:U/c+B7hHsXoxmtGQolRbB//k45VaX4P1g+7TX9r4FYyPxquW5:UFhOoeGQwRbB08E4P1gqN4FfP4uW5
MD5:	FA4FE5B56D9FAB46DB542559A3B83E37
SHA1:	87921556BC7E350DEF09A7CBC51465C52383428D
SHA-256:	9872BD2450803A2A52E862DE35CA6FA5F1684AC59174F73C7F80EADFC0B63002
SHA-512:	8E58F7075D015C0280DCF0845A4FD84498E738EA57232E56A152336B611E2681EFB19C5824A31203E84B92E0355AFBE2447AD3CF76AABA1B3DA431471DB4D8D4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...1.........<.9.....pHYs.................sRGB.........gAMA......a.....IDATx..O.uGr.Vu(K.lS$1..b.0.. ."..."..\|.d.u....,.d1...o...0...I...XY.Z.0....Hp..-K...._W...>............}...[.t..._....bfBdp.e..G)-.z...jT....v.62.rxo/.Z.U...t....6~.>.x..<.8.....-.....+.{.3.7..6..g.....4.....Z..;...Y..X/..yC...4....}..Jn.".ej.W<Sn#.3.......o.K.?/.d.C)_.....'...,.P.P.8o.f.+.?....Mu`..u.y.1..A..d..$y;a\|b.Ve.....,oWr.....{....\.U.2.j..4=...?c^.Z......z)....${M>+Yb^.Y.r....0...8N.../[.7.x#.{....+..<...yQF..i.s...._E.JV.a..wY..T.6n>N..-l...=..G^.g.=.Om.r..B=.\|.y.[..[.........u...~...g........._...Ch.;..m#..<.)._..................i..u.......).....=..Lk.v.....N..._.U...._.f..r........_.................L.7N...........v.........?...z..U.....;..........?.G.HnW.W.oy~...o.9..g..g......]..........G..o..V......o..F.}..Q........._}..~...v.g....'.\|b.y....M.6m.i.M.6m..{$..tj..>.L?..S.c..w..~../..B?...TF.:..>...'?.....-\|.=.M......?my.{.=Y.....w.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1037 x 807, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	454211
Entropy (8bit):	7.990991479839813
Encrypted:	true
SSDEEP:	12288:2YIEcwyZJePwC+T+nOpGqxWwuoyTvtkz124TdyKd:5TqDBBAUEY1HHd
MD5:	40F76B47F614919A109A3E36E611B55F
SHA1:	161E1B199DA787D63485E2C0D0B2EAFCAF0A60E8
SHA-256:	0577A7A47D06A9385C6BF2A52E5B5646B73B2A331B31F016EEADC7308370F753
SHA-512:	98F92FAF568AA1F03B8DDD4493DA52E8B095FA3AB518F0B6A606CD423A12D8AB51AA9453211CF10844787A1BFC146E3485A1CF940FB7D73C63B71CC2130B79C5
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-3-mreb-40f76b47f6.png
Preview:	.PNG........IHDR.......'.....U.3....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx.....$.u......u.k;.=..0.o...h."..Q\R\|Z..R.....{.....Oz..J+i..OK.2.$..H..a......7......[.*.s"#+23..n.@"....[...ddVu..9q.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................[...........V.U......APZ.k....G.d.0..6.Agc8(v..Zg......g.x:."...............;.N4........}.k7..q.......\|.Z./....`6.E.....E.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4525)
Category:	downloaded
Size (bytes):	8293
Entropy (8bit):	4.812390479618333
Encrypted:	false
SSDEEP:	192:HtOxp8sJyz/lNY6ZF66H1RBex70+g0o7RWhfltF0nx/k:UxHwBN/9J27AX2Knx/k
MD5:	2D86A4A3191237F28CED9DCC168C88E7
SHA1:	A36D290CA955BC6F581C85AA5B017B2D0A3F4348
SHA-256:	532E042F3D68BCC99995F36D1132214612D7F60AB037358DCA94DE2D33559F1E
SHA-512:	E279FD715C7C0FD8894F56B9F83F0E0158721E6E1E370EDC448B425B8C3CE6971D960085C8CA21592CD594E0100CAA0CDFBDE1A0F38E542DEC9CC646EC87D892
Malicious:	false
Reputation:	low
URL:	https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true
Preview:	. <!DOCTYPE html>. <html lang="en">. <head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. . </head>. <body>. . . <script>. (function() {. var obfuscateCode = function(code) {. var chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ';. var newVars = {};. . code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) {. if (!newVars[p1]) {. newVars[p1] = chars[Math.floor(Math.random() chars.length)] + Math.floor(Math.random() * 1000);. }. return 'var ' + newVars[p1];. });. . code = code.replace(/([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) {. return newVars[p1] \|\| p1;. });. . code = code.replace(/ifs((.?))s{(.?)}/gs, function(match, p1, p2) {. var dummyVar = 'dummy' + Math.floor(Math.random() 1000);.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2501 x 831, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	871456
Entropy (8bit):	7.99321885800314
Encrypted:	true
SSDEEP:	12288:0gKYAG/kgSHCI1lCaBDevD+ht1s996/cZoCCejkEnK3eXJdcKyMn5A+dZLw:rQR/1l9evDGdEZRzgAJdB/DdZE
MD5:	46B510EC8A77F53E8C201F8779D69E42
SHA1:	A21718B5BA16FF1BC10C43FFE9F4823D5EB414B0
SHA-256:	D7315CEF7F382EB88B09A82EB3D5F13564105D5CE8413888963699E4BB523895
SHA-512:	17E5C09882E8700C731AFE807F98D30658058CB9AC74A60CD291C37F0242863A2FB524829D708867529A368463D5949097D25DA5C6E6CF87DE0F9B125CA614AC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......?.......(.....pHYs.................sRGB.........gAMA......a...K.IDATx.......y..>..}.].n-.R.$.%K.,#K.e....6.6.m.a9....0..=}.i...9s.9}.....{`.6....h....j......ZJ.Rm......%3&#3.'.}oI6.H.._.w.\"##"#.'..<".......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1699 x 1181, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	793073
Entropy (8bit):	7.9926326015445595
Encrypted:	true
SSDEEP:	12288:zzR6wui4acRTYbntjQHv/6/nIz78wWDgqzMv0RxvAL+YopRvJl9JsG4VF5Rq5:zzRe+cRTY7+HKKASMRO+X3RJsGeg
MD5:	979FF0DCE1EDA2035552AD1AA4EFACFA
SHA1:	5765B464F4C94028C4D7492159E2B584DDE8E357
SHA-256:	5979E07897CC0115AC1F320D880B419BF59185B8E6C7BCC75011784E90EA1FEF
SHA-512:	623737D9A6493C87C6EE0765A8880AB3E1C1A67E674C3B4AA908049DE34CBC3D1A899BA1B6C644B881490453DD9067953F3AD00E5E335F872E5CB1AE30EEC244
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............&.....pHYs.................sRGB.........gAMA......a.....IDATx...Y.ui~..k.............l..H....K.`.T...!..Yv.... .$... ... 7....A`...A,..e....bsR.U.Mg..Z+..<.w.]...Uu.2).......^k....L..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1017 x 706, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	372407
Entropy (8bit):	7.9920868023509675
Encrypted:	true
SSDEEP:	6144:Qua8gWRQXRaGDBt/Qc8ABKmSzu/8YbOHPiyjcXLVzXDJImOdeEd0YufcqoTU3Xw1:QuaW0bL/QcdBaxjc7xXDOmOdee0DcqU/
MD5:	1B4C66938347FF70F6D2FA1173D0C09B
SHA1:	8766438A8E7EE0E068BABA0042B0D97C7667CAE4
SHA-256:	B59D05AA36BA301347E8E8D711A42452E925F6875ACE1409B056AD2B759C9317
SHA-512:	C9C2733F7C0DCA56B13E9F08CFFCFE0BD836F97D4D8B28EA1BA57896B9B2342A570D1653059BDED922024C10F8842C85504BAFD650CABA52C9DBF380078CBDF7
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-4-mreb-1b4c669383.png
Preview:	.PNG........IHDR.....................pHYs.........&.:4....sRGB.........gAMA......a....LIDATx..[.m[r.V5.\..o.....O...>}w..6.` ..lC0.....F..@..(..<.C.).....!..)....<$J"E....D...0...M.}.n.....9*sT.WUs..6....Q...Zk.9..5... .4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I.&M.4i.I..^b.4.7.q....W........F.mL.~.G..Q..$.X...............,..q.w...W..

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1034 x 719, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	449258
Entropy (8bit):	7.987066102559051
Encrypted:	false
SSDEEP:	12288:d2GTMhzF8cPHvuBGMRBflaF7+smn+i0QuCPSSqjv:d2LZHPHWBrlaw5+HBCqNv
MD5:	1858A1BEB780FEAFE4BBAC77F49ED237
SHA1:	51B892F52A9A288E73578ADC6AA2C3E62C59A63B
SHA-256:	C8119EE0CC14A582FB8BE25EE58C7DFA1D5D4DFE51C8665B03268196D2E5F0C7
SHA-512:	5B2463CFCB7F5FAA4967739AF5D844BE569E22C1103BD7A1AC6DE5DEB42F0AC2E653404294DBE8CE65010E8DD1F4B846557AA16B022ACC4773981EDD754C518D
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-consumer-2-mreb-1858a1beb7.png
Preview:	.PNG........IHDR..............Q".....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx...{.mIv....}...{.o.g.g.{f8.k.")r(.,F4ir..I.$G.L.!dG.%...r..!.8.$..8.......$H.......0lQ.dI.H.!..y.3.wwOw..;.*.j...s.E....5s.;g..kW..Z.[.Z.JdO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=..M...iO{...D.....=[z......{.~>...il.g...,}.......9.>..)..L./.../\.....A...I..g...=.iO{.....?Vi'.......o...;.<y%..?..rG.x.{..\..\.ww.....;O.]...9...>...w...{........x\|..xx.:].s8d....!..,Y.. 9...o.9'..Z..;9.JI.%....'...Z6..j.P........Z......-..Jm..aI.0Ni....._.WW.Z.....R{._/7..{k.Wz.u.P..n..lW)...........]Z.K.7g.w...X..<....I..

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1119 x 704, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	591728
Entropy (8bit):	7.996032737804013
Encrypted:	true
SSDEEP:	12288:BzVysRpODYLFLYXMaM48blnrCrjueL1oETab46OxEdB7ny2Q7e/:rODoSMcImr71eUXEPnBQq/
MD5:	8977DBD5387860CD8344B51DC4F00216
SHA1:	A0BCA65DE5D325B87EBDED22EC2EE9F459EED2DB
SHA-256:	6EA50E423008D71C95B019385D8A3D018DE4B9735870224B49EBA9B2E2A0263B
SHA-512:	EAEC056E681DFAC5CDEFBA16A1AB20CBDBD736AC77D14F018FD6C371F2D6C1F81ED46353B7661BB2E326A89E608D5B2B9097A0AD0F7ADF4DEF682AE835D75B13
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..._.........E:......pHYs.........&.:4....sRGB.........gAMA......a.....IDATx...I.mKr&.....9.{.....H.I1.Y.T.RBB@....h....@....j.Y.......5......T....lX.....\|.........?3...9.y$.n.W.nnnn..,o.&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L.0a...&L...L..:`....~\|s.....UV^IX.)?K).=+.y..w....j.[.e..2..%_...9._IJ...z=.G.Z..`...g...r...[...{....w(..?..1<%r..........w.&...`.~...&L.0a..3..-.................x...X..^...Z.......5.<..'O...+9\.,......9.0....=oN."....b._.{Zy.X.{I.e{.].......!...=.ER.-m.G.y...o...<.V`.?..i-...z.~.5...[.V..0-k*{...2....}J...ij..&%.R...+%.K.wz...r'Fy~....s.ZQ.gMYR}O%C.S)=......GO....\./.Zo...q.x7.dY.......g....w.Y.\x.....R.J..S...\.,.b......S.{J.?..[.M../.s......t....M..\.?P...W.&O8......W.....&u%.....A

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1037 x 807, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	454211
Entropy (8bit):	7.990991479839813
Encrypted:	true
SSDEEP:	12288:2YIEcwyZJePwC+T+nOpGqxWwuoyTvtkz124TdyKd:5TqDBBAUEY1HHd
MD5:	40F76B47F614919A109A3E36E611B55F
SHA1:	161E1B199DA787D63485E2C0D0B2EAFCAF0A60E8
SHA-256:	0577A7A47D06A9385C6BF2A52E5B5646B73B2A331B31F016EEADC7308370F753
SHA-512:	98F92FAF568AA1F03B8DDD4493DA52E8B095FA3AB518F0B6A606CD423A12D8AB51AA9453211CF10844787A1BFC146E3485A1CF940FB7D73C63B71CC2130B79C5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......'.....U.3....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx.....$.u......u.k;.=..0.o...h."..Q\R\|Z..R.....{.....Oz..J+i..OK.2.$..H..a......7......[.*.s"#+23..n.@"....[...ddVu..9q.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................[...........V.U......APZ.k....G.d.0..6.Agc8(v..Zg......g.x:."...............;.N4........}.k7..q.......\|.Z./....`6.E.....E.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 286 x 41, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7115
Entropy (8bit):	7.963812060299321
Encrypted:	false
SSDEEP:	192:ESBW7OKnwRKKrPq0lxbF4vMU7YzO1gR3C2Wl2:DY7PSrLprUEF3CH2
MD5:	747D2C674F731EDFD2779D83C8532E24
SHA1:	C40A635C160D4CA763D8C86F560CB937A8E1090B
SHA-256:	CA13C3E1EC9B3484F3E6AF002F127C03DE8E5171E76D37A5749A3CD75D098B05
SHA-512:	ED821EAB2956895A140C55AE7F79668F8DBB55D54408251ADED0C57200D8AD04E40DFF95EEBA79D6D149FDF82FE77F21EEEBB235EE7BC12C84A6FF0DD3CB6691
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......).......Fw....pHYs.................sRGB.........gAMA......a....`IDATx.........G.l.$...h..D..(.Jm..HZP.....%YS.d-Q....Fv!.`..y.s.}.;wf.sg.s?..y..=...\|..<.s.M.d..3...{.......sgIcL.......t..>../Y.d..ko.(..g.I.B.J....={Z......H...&o...-.X....;>s_Xr.../..pL.5j...&L.%.IJJ.8r..x....^.4h0.p..W.t.M;".....Uj.....[.y.fQE&q.>(. .r..7'.Y.G.&M....:thO.6$#^..;..\\|$.b....~.i.F...V../Y[..(`Z.l.4x..[....(....}..3$.8......>b...=..F.[.u..5.6l....Cbb...4(Ae..N.:....._..a.r.E5.......(....{.W_}%...\.re.... ..5k.Z.R.....?;.....Byx..Pa).n.........Q....G..{.....y.H6.`...s<....t.I.-.../g.y.\x.r.i.Y"....>....]Z2..n.M.V.Y.K..D...J.#:...]t.....3.\|..F.....9.cR...C."ER....+.~..G.;.<+.~P..\...G:..x..q.....o.bfp.UW.....~Xz..)D.V.(.....}...&...[.:.,..4.$.^{....W\!......n..\|..........7o../..9.h.G.....c...2e.-..&.+s..e).'O......E.1....S..:+V....I.:u.{....~.W_}U>..C...'.h..q.<.....~..g9.O..h.1c...n.....h....f..N{...mq.v..gXk.?..Y.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1699 x 1181, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	793073
Entropy (8bit):	7.9926326015445595
Encrypted:	true
SSDEEP:	12288:zzR6wui4acRTYbntjQHv/6/nIz78wWDgqzMv0RxvAL+YopRvJl9JsG4VF5Rq5:zzRe+cRTY7+HKKASMRO+X3RJsGeg
MD5:	979FF0DCE1EDA2035552AD1AA4EFACFA
SHA1:	5765B464F4C94028C4D7492159E2B584DDE8E357
SHA-256:	5979E07897CC0115AC1F320D880B419BF59185B8E6C7BCC75011784E90EA1FEF
SHA-512:	623737D9A6493C87C6EE0765A8880AB3E1C1A67E674C3B4AA908049DE34CBC3D1A899BA1B6C644B881490453DD9067953F3AD00E5E335F872E5CB1AE30EEC244
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-commercial-5-mreb-979ff0dce1.png
Preview:	.PNG........IHDR...............&.....pHYs.................sRGB.........gAMA......a.....IDATx...Y.ui~..k.............l..H....K.`.T...!..Yv.... .$... ... 7....A`...A,..e....bsR.U.Mg..Z+..<.w.]...Uu.2).......^k....L..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..c.1..

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1409 x 979, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1074513
Entropy (8bit):	7.992502130294777
Encrypted:	true
SSDEEP:	24576:Z5bdLk74D3xyaSraAjS7kyTxnkExgpDUPJ2NNu:ZHL9DhZSrbjSQy1mpQPJ2q
MD5:	86723A74CC0FCAD23D9BF25A8EC33CAC
SHA1:	24579C0CD153ED5B5856520E8B91FB2A61DEE8B3
SHA-256:	CC6DEB15D98EE0D2F63E0FB260700C6579394AB15BC09CBB4B11ED925F701EF7
SHA-512:	F2D60AC241146C08FF92AD548A111F5794321FBB04F70176D8187D38D89F7862D7F3D841DBA4C8138DA7C591897050040BC39EFE3CD4ACBFF1798ACF05E0AF82
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/highlight-edu-4-mreb-86723a74cc.png
Preview:	.PNG........IHDR..............Y.s....pHYs.................sRGB.........gAMA......a...d.IDATx.....v.U...].....lM.$.-....6...6.%.....Mwg.t:C..I_CV.v.Y!.......C.p...1I....c06x.F.%.%..?}.{j.....v..~..K.e.....3T...N.S..g...`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0..

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 4000 x 2238, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10058400
Entropy (8bit):	7.988307130589743
Encrypted:	false
SSDEEP:	196608:5nHCaQivyot0RWDNzjMqV8CoWF6UquVtmS7ycKUkQfaGG9:ZHCavyI0cDN0qV8rmguVwaKUffaGG9
MD5:	7D5C104D8439CC4A1A9618391A52DFC2
SHA1:	1EACDB703238FC270187A1A23AA77315EE475ED2
SHA-256:	2AB1510CDB2FA03A8CAF6F2CC4A40EBB2B8218922A6AD1F640F4EDD9018E9144
SHA-512:	73446F80AC5B2AB4DEE11CAE312D9486CDF1261DE7BB988F55A5C5269825773964857452705CA6B4B165DCA4DFFE7DD13531CA04804E61210DC950CED900C26F
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/unauth-m365-hero-copilot-centric-7d5c104d84.png
Preview:	.PNG........IHDR................g....pHYs.................sRGB.........gAMA......a...z5IDATx.....&.&..J........;>..xt..{.....2.I...vu.....T.PJ.Z....K....Ep..16.r..+.........h9......5q.8.?.....0...\|<Y@...y6..B..N./..yI....e\.....d.MzN.X..V_.N..9..2.5.'A.-#...A4.._..S.\|...u_.....J.gd.lR..........i.@y,.?.}[\|..>.$p'..zi.#]emv%.!.cO...>.n8r..5..Ro.5.......h.....4.'...[....X....@[..U...v.?4D..4,;y>....r=..L...4\_p...r...~.,..<..r...3....!t._E....Ai....M3...'......z.hl#..j=...0.e;..F...9..9..._.....0..}..".k......`I.r...A...1....+.>.`.g...E..\|...1.....!..3{=..s@.-1.....343u...)..Z.k..}u.c.....QG.xy.9;. ^...x..!.S....n..z....O.0.l........M..p?..{.o/...?-..?..,.2ur......[....].b.'C..V.&...e.w`..r..\|o..;6.....k..9._.\|.{{...'..O..7.g..zG.'.#...~...]....g.$..F........o..QI..ge{...8w.t.Z.'.:..!./.......x...:.1.s...'.......D....g.Q.*y.>>.-q... ......sH..........G........<H........S..y>.+......_'k...}........i.=e...kN'_I.:..~ZsY..t$o.C..&).0D...S.....

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 161 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3974
Entropy (8bit):	7.902382111689997
Encrypted:	false
SSDEEP:	96:ISobo+jDMIdb9KWszfIwrotnp7hVzMECexHrI1vuE2nvg5vzHJ3k:ISqo+jRAfTIwEtp7hy2HrA2vgNTVk
MD5:	2BE9B68EED69AE75FBA5ED982D0FF25D
SHA1:	BD6E134C0D87C52AC751555269A59796D5EABC55
SHA-256:	8281E85E9FF70034913A38D9EAA6AF52ED98AB621300F0558E70A9BCEFF7246E
SHA-512:	D72E1C8F52D65BBFE2ECDAF9E7A0C209F4F7C385B470DAB7C0979D3D5F1FF29EC14A5E92334676F560DFD22924B0FB983F43FB936EA23F812ED0C639896F8C60
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/qr-code-2be9b68eed.png
Preview:	.PNG........IHDR.............d.......pHYs.................sRGB.........gAMA......a.....IDATx...u.<..E......B.....X. ... ..T.........X.......G.qf...<..p..u..\[.W#9..zS\|..9s...(.?..R.]..9...>..W.v..gR.yS..={...X..eYo9....0J....2.Fu....?..kW...../_..z......?.....}..UT../N..n..X{........Wn.L9.8.........+W..M...)....................r.q...k.....T.4Q7..j..nhcj.&:.*>ST?...q%.4....Fu.N...!.~........'F}.......Mt3D...l..v..B...1u9.`...\|...b4.~B........9.Q.sB.:..x,.e;..(.......J2.....I..G.Uo.u....~.z........?...I:.T......9.@..??.?.8.e...N..M.N:!~H.i...q,yG.{^.../Zs26{r1.;a.....c{!...`Q.....EyY...u.%<.k2..1....K.......72.Q...n\|.x<."V.{..........w'.W.G.&..L..q.5.'.(8\|..kfQ....!....?....Fulf..........9......l.6....+7a..(.h...a0..&........D ....Wk...4.....hY;'....[a....".NSW3.T.&./....9....1}....S.a{d.e..)..c.:.J\|..f..I....P.\.?..%._X'...4h...%.../^..K....@....J..[..I....../.....x.0..@.%.q?....k.'.i.R...p.`.Ks@......1'.=Md.b%..P..'.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2501 x 832, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1771981
Entropy (8bit):	7.988247142332494
Encrypted:	false
SSDEEP:	49152:4uB7Y0eaS7xe+q6frEduiPaUU48p5fUxGVPaUZUq:bVeaSdPfmtPhU48p54qaUZ3
MD5:	0E10BF7B4FD04ED50A4073604A728FEF
SHA1:	7773AC6F48BD27CED0F82FD58A45F2C923EF87A4
SHA-256:	361AF6EA15689C97588C78A27C25C38C789D9E68B9400AD48B114B05FC285662
SHA-512:	82430B2B1C62635B876CF652FC160F295AB9AEF84D65F310C71BBCD0D44EC6359AFC4FEB70E58CCC8A19F21A2FE2C292F9FF79887C4A17532D21D2835E1624B2
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/m365-copilot-centric-value-consumer-0e10bf7b4f.png
Preview:	.PNG........IHDR.......@.............pHYs.................sRGB.........gAMA......a....bIDATx....,[~...Z.Y...>..{..#Z...DJ....)..MQB........;.a.../..~..~.-.!*.pX. C...e..Hq....F..{...U.ki....2.j..$..8.~...UY.+W....:...s.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 12164, version 1.0
Category:	downloaded
Size (bytes):	12164
Entropy (8bit):	7.974502474637253
Encrypted:	false
SSDEEP:	192:H6HeldTaRsyn12Mg0UuCR3A6dTovEIZmiA6JWqNb6aNBPiGXoGJYrI8tTebCFFvK:aHevMsYHeeqcvpZmiA6JWwfXoIa1vpKF
MD5:	36AC9A2365173B647657AD829AE64FF0
SHA1:	F8966E2EE4C9CFE92B5843D8C27BB7BED98BDFC9
SHA-256:	633894CF845287F205F1B5BD26B7667DDA186695FCE3D789306F30C5FBDB14B5
SHA-512:	9F8C9EC9BB230D577BC751133040EF6FB78185C5310300A420E389879A7ABEE054095C60BA2A66C6FF3A7AC4FB59B7433A733FCEDDB72425D3AEB8229EF590FE
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/versionless/webfonts/segoeui_semilight.woff2
Preview:	wOF2....../.......[.../#........................?FFTM..&..... .`..z......X.+.....6.$.... .....p..O5l[..n...8m.Q.l....d...S..Gk.U..#.S.T...#.....>y.s[t...b...r.....M..u......x......Yj........;...a.....wGH2K.......b.q..@/..Rp.v.................'.T.lA.d.,EED..j.W....kY...e._.......N.6...(.=..0....s.8...4.((..R.tkv.{Q..D....w.?#0.XvTD......8.. .,.......y.T....5..SBr.,h8.G.b..CQ.P...3L.4..~.k\|.X......+......mN..us7.Ksk..........\|......c8@.DF^.\|....!#.B.T..............2...d...2.9.=..@o.8H.2..".....V..C..{.........1.>.F....`....A.Q.:..'.#..zr.sT.P..3...K.'z.....<..L.%...V..y.i.4.;.Xv.1...N$@..n.1....._.\.x...x.x{..:..V.....[.@@..b.....@.9...-.9. :.,...,p...v..H...4..x.B..[.s..M7.X.ww............g....<...q;].'.....UUG.w....4)...Jg.Y.r65.fvn.6_7.....g.w......zU....M.RZV.M{F{.M.8._.)p.6.YwH..Ohk~0. .-.l....A..9g..sC..}m.4...C...QJ.vP._3H{......rwn.<..3I~.v.t.+..'K....@X`..)...........I!Y.B....j.]y>........... .`.5i..4./..../ ..T.fR.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 973 x 675, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	279269
Entropy (8bit):	7.994566583539726
Encrypted:	true
SSDEEP:	3072:RiwpUTuOsjVbgT94HFlcTY+/+T8tDtnSTFaslpolHpMerO+lMbQfVwv6p1YH:XG+jB894HFGTVw8QgGbMY
MD5:	8548B8B68D33DBF376420E679FC84996
SHA1:	7A277E16B935833A6403DEAD1CF5A7661F20DB24
SHA-256:	CDFE0542BE718F847059F73ABC6EF56387109AB760D5530046F2EF9EDB25ED31
SHA-512:	AED4FD1D6EBACFBBECBCCAE8CF4F4F13319D355723CF16F830C315884FCDE9EDAA929E5EEF78A36006FC0412AB1224AF311906883BA7391DF7165D7F3D808E00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............'?.k....pHYs.........&.:4....sRGB.........gAMA......a...BzIDATx...[...u...1...>..bU.b..)..).%9.":blK.,..0....v...@.h4........~k.../...:p.8.a'...u.,Z$-.WU...?g........"e.UG..<..^...c.o..E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-Z.h.E..-..'.E........^...D.....J..\|.9}........)}.zq..~..Y.O_........?.....=...}..s<..?....=.q{Vy....o\.=.~t.l~??......@;..s...

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1409 x 979, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1074513
Entropy (8bit):	7.992502130294777
Encrypted:	true
SSDEEP:	24576:Z5bdLk74D3xyaSraAjS7kyTxnkExgpDUPJ2NNu:ZHL9DhZSrbjSQy1mpQPJ2q
MD5:	86723A74CC0FCAD23D9BF25A8EC33CAC
SHA1:	24579C0CD153ED5B5856520E8B91FB2A61DEE8B3
SHA-256:	CC6DEB15D98EE0D2F63E0FB260700C6579394AB15BC09CBB4B11ED925F701EF7
SHA-512:	F2D60AC241146C08FF92AD548A111F5794321FBB04F70176D8187D38D89F7862D7F3D841DBA4C8138DA7C591897050040BC39EFE3CD4ACBFF1798ACF05E0AF82
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Y.s....pHYs.................sRGB.........gAMA......a...d.IDATx.....v.U...].....lM.$.-....6...6.%.....Mwg.t:C..I_CV.v.Y!.......C.p...1I....c06x.F.%.%..?}.{j.....v..~..K.e.....3T...N.S..g...`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0.....`0..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2609 x 470, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	713010
Entropy (8bit):	7.987989282294461
Encrypted:	false
SSDEEP:	12288:U/c+B7hHsXoxmtGQolRbB//k45VaX4P1g+7TX9r4FYyPxquW5:UFhOoeGQwRbB08E4P1gqN4FfP4uW5
MD5:	FA4FE5B56D9FAB46DB542559A3B83E37
SHA1:	87921556BC7E350DEF09A7CBC51465C52383428D
SHA-256:	9872BD2450803A2A52E862DE35CA6FA5F1684AC59174F73C7F80EADFC0B63002
SHA-512:	8E58F7075D015C0280DCF0845A4FD84498E738EA57232E56A152336B611E2681EFB19C5824A31203E84B92E0355AFBE2447AD3CF76AABA1B3DA431471DB4D8D4
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/more-apps-copilot-centric-mreb-fa4fe5b56d.png
Preview:	.PNG........IHDR...1.........<.9.....pHYs.................sRGB.........gAMA......a.....IDATx..O.uGr.Vu(K.lS$1..b.0.. ."..."..\|.d.u....,.d1...o...0...I...XY.Z.0....Hp..-K...._W...>............}...[.t..._....bfBdp.e..G)-.z...jT....v.62.rxo/.Z.U...t....6~.>.x..<.8.....-.....+.{.3.7..6..g.....4.....Z..;...Y..X/..yC...4....}..Jn.".ej.W<Sn#.3.......o.K.?/.d.C)_.....'...,.P.P.8o.f.+.?....Mu`..u.y.1..A..d..$y;a\|b.Ve.....,oWr.....{....\.U.2.j..4=...?c^.Z......z)....${M>+Yb^.Y.r....0...8N.../[.7.x#.{....+..<...yQF..i.s...._E.JV.a..wY..T.6n>N..-l...=..G^.g.=.Om.r..B=.\|.y.[..[.........u...~...g........._...Ch.;..m#..<.)._..................i..u.......).....=..Lk.v.....N..._.U...._.f..r........_.................L.7N...........v.........?...z..U.....;..........?.G.HnW.W.oy~...o.9..g..g......]..........G..o..V......o..F.}..Q........._}..~...v.g....'.\|b.y....M.6m.i.M.6m..{$..tj..>.L?..S.c..w..~../..B?...TF.:..>...'?.....-\|.=.M......?my.{.=Y.....w.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 286 x 41, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7115
Entropy (8bit):	7.963812060299321
Encrypted:	false
SSDEEP:	192:ESBW7OKnwRKKrPq0lxbF4vMU7YzO1gR3C2Wl2:DY7PSrLprUEF3CH2
MD5:	747D2C674F731EDFD2779D83C8532E24
SHA1:	C40A635C160D4CA763D8C86F560CB937A8E1090B
SHA-256:	CA13C3E1EC9B3484F3E6AF002F127C03DE8E5171E76D37A5749A3CD75D098B05
SHA-512:	ED821EAB2956895A140C55AE7F79668F8DBB55D54408251ADED0C57200D8AD04E40DFF95EEBA79D6D149FDF82FE77F21EEEBB235EE7BC12C84A6FF0DD3CB6691
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/store-buttons-747d2c674f.png
Preview:	.PNG........IHDR.......).......Fw....pHYs.................sRGB.........gAMA......a....`IDATx.........G.l.$...h..D..(.Jm..HZP.....%YS.d-Q....Fv!.`..y.s.}.;wf.sg.s?..y..=...\|..<.s.M.d..3...{.......sgIcL.......t..>../Y.d..ko.(..g.I.B.J....={Z......H...&o...-.X....;>s_Xr.../..pL.5j...&L.%.IJJ.8r..x....^.4h0.p..W.t.M;".....Uj.....[.y.fQE&q.>(. .r..7'.Y.G.&M....:thO.6$#^..;..\\|$.b....~.i.F...V../Y[..(`Z.l.4x..[....(....}..3$.8......>b...=..F.[.u..5.6l....Cbb...4(Ae..N.:....._..a.r.E5.......(....{.W_}%...\.re.... ..5k.Z.R.....?;.....Byx..Pa).n.........Q....G..{.....y.H6.`...s<....t.I.-.../g.y.\x.r.i.Y"....>....]Z2..n.M.V.Y.K..D...J.#:...]t.....3.\|..F.....9.cR...C."ER....+.~..G.;.<+.~P..\...G:..x..q.....o.bfp.UW.....~Xz..)D.V.(.....}...&...[.:.,..4.$.^{....W\!......n..\|..........7o../..9.h.G.....c...2e.-..&.+s..e).'O......E.1....S..:+V....I.:u.{....~.W_}U>..C...'.h..q.<.....~..g9.O..h.1c...n.....h....f..N{...mq.v..gXk.?..Y.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2501 x 831, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	871456
Entropy (8bit):	7.99321885800314
Encrypted:	true
SSDEEP:	12288:0gKYAG/kgSHCI1lCaBDevD+ht1s996/cZoCCejkEnK3eXJdcKyMn5A+dZLw:rQR/1l9evDGdEZRzgAJdB/DdZE
MD5:	46B510EC8A77F53E8C201F8779D69E42
SHA1:	A21718B5BA16FF1BC10C43FFE9F4823D5EB414B0
SHA-256:	D7315CEF7F382EB88B09A82EB3D5F13564105D5CE8413888963699E4BB523895
SHA-512:	17E5C09882E8700C731AFE807F98D30658058CB9AC74A60CD291C37F0242863A2FB524829D708867529A368463D5949097D25DA5C6E6CF87DE0F9B125CA614AC
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/m365-copilot-centric-value-commercial-46b510ec8a.png
Preview:	.PNG........IHDR.......?.......(.....pHYs.................sRGB.........gAMA......a...K.IDATx.......y..>..}.].n-.R.$.%K.,#K.e....6.6.m.a9....0..=}.i...9s.9}.....{`.6....h....j......ZJ.Rm......%3&#3.'.}oI6.H.._.w.\"##"#.'..<".......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1034 x 719, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	449258
Entropy (8bit):	7.987066102559051
Encrypted:	false
SSDEEP:	12288:d2GTMhzF8cPHvuBGMRBflaF7+smn+i0QuCPSSqjv:d2LZHPHWBrlaw5+HBCqNv
MD5:	1858A1BEB780FEAFE4BBAC77F49ED237
SHA1:	51B892F52A9A288E73578ADC6AA2C3E62C59A63B
SHA-256:	C8119EE0CC14A582FB8BE25EE58C7DFA1D5D4DFE51C8665B03268196D2E5F0C7
SHA-512:	5B2463CFCB7F5FAA4967739AF5D844BE569E22C1103BD7A1AC6DE5DEB42F0AC2E653404294DBE8CE65010E8DD1F4B846557AA16B022ACC4773981EDD754C518D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Q".....pHYs.........&.:4....sRGB.........gAMA......a.....IDATx...{.mIv....}...{.o.g.g.{f8.k.")r(.,F4ir..I.$G.L.!dG.%...r..!.8.$..8.......$H.......0lQ.dI.H.!..y.3.wwOw..;.*.j...s.E....5s.;g..kW..Z.[.Z.JdO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=.iO{.....=..M...iO{...D.....=[z......{.~>...il.g...,}.......9.>..)..L./.../\.....A...I..g...=.iO{.....?Vi'.......o...;.<y%..?..rG.x.{..\..\.ww.....;O.]...9...>...w...{........x\|..xx.:].s8d....!..,Y.. 9...o.9'..Z..;9.JI.%....'...Z6..j.P........Z......-..Jm..aI.0Ni....._.WW.Z.....R{._/7..{k.Wz.u.P..n..lW)...........]Z.K.7g.w...X..<....I..

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2609 x 471, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	698616
Entropy (8bit):	7.988990542773947
Encrypted:	false
SSDEEP:	12288:7B7J02MzM8uOZuft67QhY3HZuppyR3l6Pjk48XOIWoXZQikJSPU7NLRlg:s2MzOOZulaQhY39xMrhQWoXaiwSc7/y
MD5:	A907814C618999761488552FF59ABE52
SHA1:	9328DD8911EFD581DAF9F18649B687C683D93787
SHA-256:	A85710F22BD11B8F228D8B7387F87E5A066FF7CAB256D9719D01881A00FD7CE8
SHA-512:	8982B24CFC82EBD3A6E9DC0C6996B2E04963F60A248DF3EA1C89EFBA52D49E2A6660B0321F4A217BA8778B1D301C43C91598D450D22451EC0F393A38EB8786A4
Malicious:	false
Reputation:	low
URL:	https://res.cdn.office.net/officehub/images/content/images/unauth-refresh/more-apps-consumer-mreb-a907814c61.png
Preview:	.PNG........IHDR...1..........Y.....pHYs.................sRGB.........gAMA......a.....IDATx...=.vG.&.E..\|O...E.@. .P.CC#./.<.C{%S...B.d6...\|..]o..b8.Z..5h-.......E.{>{.N......WF....V..p...<....'3.#..h.....?5..<.8..\[\9....oB.. ...8c>.........".~.....{......,w.y-...Q..A..9..#<....M2K..}.,/.x.CiW2U..G...@.t.s."...k%}.4f.F:...C.-Q.#u.?R..."..y../...;~.Wxq}K. .n.Vr.p.W..W=.G..G.n...i...\|..E..,.?........]9.b..}...-../8.">...U\..6..-..i...xo.........e..u.=.............~.\|.n...JZ.M.A_.._.e..7...L........S...O./.\|S..\|."o...........]\.q].jI.}.5.#M).............o....T..2.,......o.j...;...=.KY..t..e............w...W.... .............A..?.m\.=.../...y.....K..6.{._.._p...?.........?.s..?..\................w..O~...~..?..?k?...z...~k.\|..Q.-.@)..o.i.~.a.f.w..>.....O<...+../...o.._....._.j.oso.t^.R..R..bj..M7.t.M7.t.M7.t.M7...D.6.}..g....'...N...../.l......2Wi_..u../~..W...........?w.o+y.tZ.wX.sU..?tL...g....T..j.mG?..C.........k..}..K...5.5.3=.s-.r.._....

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 161 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3974
Entropy (8bit):	7.902382111689997
Encrypted:	false
SSDEEP:	96:ISobo+jDMIdb9KWszfIwrotnp7hVzMECexHrI1vuE2nvg5vzHJ3k:ISqo+jRAfTIwEtp7hy2HrA2vgNTVk
MD5:	2BE9B68EED69AE75FBA5ED982D0FF25D
SHA1:	BD6E134C0D87C52AC751555269A59796D5EABC55
SHA-256:	8281E85E9FF70034913A38D9EAA6AF52ED98AB621300F0558E70A9BCEFF7246E
SHA-512:	D72E1C8F52D65BBFE2ECDAF9E7A0C209F4F7C385B470DAB7C0979D3D5F1FF29EC14A5E92334676F560DFD22924B0FB983F43FB936EA23F812ED0C639896F8C60
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............d.......pHYs.................sRGB.........gAMA......a.....IDATx...u.<..E......B.....X. ... ..T.........X.......G.qf...<..p..u..\[.W#9..zS\|..9s...(.?..R.]..9...>..W.v..gR.yS..={...X..eYo9....0J....2.Fu....?..kW...../_..z......?.....}..UT../N..n..X{........Wn.L9.8.........+W..M...)....................r.q...k.....T.4Q7..j..nhcj.&:.*>ST?...q%.4....Fu.N...!.~........'F}.......Mt3D...l..v..B...1u9.`...\|...b4.~B........9.Q.sB.:..x,.e;..(.......J2.....I..G.Uo.u....~.z........?...I:.T......9.@..??.?.8.e...N..M.N:!~H.i...q,yG.{^.../Zs26{r1.;a.....c{!...`Q.....EyY...u.%<.k2..1....K.......72.Q...n\|.x<."V.{..........w'.W.G.&..L..q.5.'.(8\|..kfQ....!....?....Fulf..........9......l.6....+7a..(.h...a0..&........D ....Wk...4.....hY;'....[a....".NSW3.T.&./....9....1}....S.a{d.e..)..c.:.J\|..f..I....P.\.?..%._X'...4h...%.../^..K....@....J..[..I....../.....x.0..@.%.q?....k.'.i.R...p.`.Ks@......1'.=Md.b%..P..'.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 18:54:27.532866001 CEST	49700	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:27.532891989 CEST	443	49700	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:27.532943964 CEST	49700	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:27.533570051 CEST	49701	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:27.533593893 CEST	443	49701	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:27.533669949 CEST	49701	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:27.533963919 CEST	49700	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:27.533977032 CEST	443	49700	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:27.534168959 CEST	49701	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:27.534182072 CEST	443	49701	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.028872013 CEST	443	49700	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.030401945 CEST	49700	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.030417919 CEST	443	49700	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.031291008 CEST	443	49700	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.031359911 CEST	49700	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.032679081 CEST	49700	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.032716990 CEST	49700	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.032742023 CEST	443	49700	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.032844067 CEST	49700	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.032883883 CEST	49700	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.033258915 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.033292055 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.034183979 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.034400940 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.034413099 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.100441933 CEST	443	49701	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.102775097 CEST	49701	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.102797031 CEST	443	49701	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.103701115 CEST	443	49701	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.103765965 CEST	49701	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.104041100 CEST	49701	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.104088068 CEST	49701	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.104088068 CEST	49701	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.104103088 CEST	443	49701	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.104244947 CEST	443	49701	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.104314089 CEST	49701	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.104314089 CEST	49701	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.104429007 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.104450941 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.104511023 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.104773998 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.104785919 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.509557962 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.509926081 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.509943008 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.511615038 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.511781931 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.512747049 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.512834072 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.512989044 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.545433044 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.545716047 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.545737982 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.546626091 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.546705961 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.547072887 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.547137976 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.555453062 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.566660881 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.566679955 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.598669052 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.598690033 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.614655972 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.630062103 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.630311012 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.630398989 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.630403042 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.630431890 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.630578995 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.630651951 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.630652905 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.630676031 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.630712032 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.632005930 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.632092953 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.632175922 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.632185936 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.632320881 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.632385969 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.632437944 CEST	49702	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.632448912 CEST	443	49702	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.634761095 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.644699097 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:28.644732952 CEST	443	49704	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:28.644807100 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:28.644982100 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:28.644996881 CEST	443	49704	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:28.675431967 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.746448040 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.746561050 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.746591091 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.746619940 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.746649027 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.746664047 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.746682882 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.746783018 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.746817112 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.746824980 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.746830940 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.747229099 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.747286081 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.747292995 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.747332096 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.747586012 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.747646093 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.747678041 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.747684956 CEST	443	49703	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.747703075 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.747740984 CEST	49703	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.798949957 CEST	49706	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.799010038 CEST	443	49706	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:28.799099922 CEST	49706	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.800323963 CEST	49706	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:28.800342083 CEST	443	49706	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.120121956 CEST	443	49704	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.120495081 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.120517015 CEST	443	49704	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.122153997 CEST	443	49704	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.122247934 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.123192072 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.123286009 CEST	443	49704	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.123373032 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.123380899 CEST	443	49704	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.170758963 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.235687971 CEST	443	49706	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.236119986 CEST	49706	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.236143112 CEST	443	49706	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.237029076 CEST	443	49706	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.237096071 CEST	49706	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.237929106 CEST	49706	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.237951994 CEST	49706	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.237988949 CEST	443	49706	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.238009930 CEST	49706	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.238081932 CEST	49706	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.238476038 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.238506079 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.238578081 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.238782883 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.238795996 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.242347002 CEST	443	49704	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.242460966 CEST	443	49704	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.242517948 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.242603064 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.242613077 CEST	443	49704	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.242643118 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.242657900 CEST	49704	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.243058920 CEST	49709	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.243091106 CEST	443	49709	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.243163109 CEST	49709	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.243320942 CEST	49709	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.243333101 CEST	443	49709	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.786550999 CEST	443	49709	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.786928892 CEST	49709	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.786940098 CEST	443	49709	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.788077116 CEST	443	49709	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.788427114 CEST	49709	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.788542032 CEST	49709	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.788546085 CEST	443	49709	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.788593054 CEST	443	49709	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.796076059 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.796246052 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.796268940 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.796556950 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.797482014 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.797534943 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.797566891 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.840749979 CEST	49709	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.840751886 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.840766907 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.913691998 CEST	443	49709	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.913978100 CEST	49709	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.914066076 CEST	443	49709	35.190.80.1	192.168.2.16
Oct 7, 2024 18:54:29.914141893 CEST	49709	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:54:29.945578098 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.945622921 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.945648909 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.945673943 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.945678949 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.945688963 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.945727110 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.945743084 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.945779085 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.945806980 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.945815086 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.945864916 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.946480989 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.946535110 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:29.946583986 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:29.946590900 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.000673056 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.000690937 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.033133030 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.033195972 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.033202887 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.034039021 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.034085035 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.034096003 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.034101009 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.034159899 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.034163952 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.034627914 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.034672976 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.034679890 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.034683943 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.034734964 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.034739971 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.035439014 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.035486937 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.035496950 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.035501957 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.035538912 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.035543919 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.036375999 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.036426067 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.036427021 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.036438942 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.036475897 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.037158966 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.037231922 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.037277937 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.037283897 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.038074970 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.038129091 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.038132906 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.080683947 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.123027086 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.123084068 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.123128891 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.123132944 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.123143911 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.123204947 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.123210907 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.123827934 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.123857975 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.123883963 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.123889923 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.123931885 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.124054909 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.124130011 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.124567032 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.124639988 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.124644995 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.124679089 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.124727964 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.124732971 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.124783993 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.125314951 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.125375986 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.125572920 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.125642061 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.126358986 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.126421928 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.126615047 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.126666069 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.127161026 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.127224922 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.211354017 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.211412907 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.211466074 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.211493969 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.211512089 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.211540937 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.211857080 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.211889029 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.211932898 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.211940050 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.211965084 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.211980104 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.212045908 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.212115049 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.212852955 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.212913036 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.212999105 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.213047028 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.213310957 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.213342905 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.213371038 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.213376999 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.213390112 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.213466883 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.213509083 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.213515997 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.213557959 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.213577032 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.213637114 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.213680983 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.213715076 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.213737965 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.213743925 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.213759899 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.214359045 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.214422941 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.214428902 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.214478970 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.214478970 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.214490891 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.214534998 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.214627981 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.214679003 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.214683056 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.214751959 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.214793921 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.214803934 CEST	443	49708	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.214818001 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.214818001 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.214840889 CEST	49708	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.232635021 CEST	49710	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.232656002 CEST	443	49710	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.232736111 CEST	49710	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.232979059 CEST	49710	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.232989073 CEST	443	49710	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.234050035 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.234080076 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.234143019 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.234283924 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.234298944 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.277704954 CEST	49712	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.277728081 CEST	443	49712	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:30.277806997 CEST	49712	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.278047085 CEST	49712	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.278059006 CEST	443	49712	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:30.342919111 CEST	49713	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.342956066 CEST	443	49713	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.343041897 CEST	49713	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.343292952 CEST	49713	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.343307018 CEST	443	49713	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.692665100 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.692940950 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.692955971 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.693846941 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.693928003 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.694924116 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.694979906 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.695164919 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.695173025 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.703977108 CEST	443	49710	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.704514027 CEST	49710	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.704530001 CEST	443	49710	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.705964088 CEST	443	49710	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.706047058 CEST	49710	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.706255913 CEST	49710	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.706267118 CEST	49710	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.706305981 CEST	49710	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.706332922 CEST	443	49710	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.706382036 CEST	49710	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.706593037 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.706614017 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.706671953 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.706865072 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.706877947 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.715262890 CEST	443	49712	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:30.725241899 CEST	49712	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.725253105 CEST	443	49712	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:30.726257086 CEST	443	49712	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:30.726325989 CEST	49712	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.728858948 CEST	49712	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.728871107 CEST	49712	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.728909969 CEST	49712	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.728934050 CEST	443	49712	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:30.728995085 CEST	49712	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.729190111 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.729212999 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:30.729264975 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.729532957 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:30.729543924 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:30.748719931 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.795989037 CEST	443	49713	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.798805952 CEST	49713	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.798820019 CEST	443	49713	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.799730062 CEST	443	49713	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.799808979 CEST	49713	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.801743984 CEST	49713	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.801764965 CEST	49713	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.801805973 CEST	443	49713	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.801976919 CEST	443	49713	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.802021027 CEST	49713	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.803081036 CEST	49713	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.803091049 CEST	443	49713	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.803101063 CEST	49713	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.803136110 CEST	49713	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.804764986 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.804781914 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.804842949 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.805686951 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:30.805700064 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:30.855204105 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.855276108 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.855312109 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.855334044 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.855346918 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.855396032 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.855410099 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.855417967 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.855460882 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.855808020 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.855875969 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.855921030 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.855926991 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.856050968 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.856091022 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.856096983 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.908673048 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.908680916 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.942209959 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.942267895 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.942279100 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.942414999 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.942452908 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.942460060 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.942466974 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.942506075 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.942512035 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.942550898 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.942589998 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.942596912 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.943470955 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.943528891 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.943537951 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.944014072 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.944070101 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.944077015 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.944267035 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.944314957 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.944320917 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.944461107 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.944518089 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.944525003 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.944639921 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.944684982 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.944691896 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.945734024 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.945791960 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:30.945799112 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:30.988679886 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.029745102 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.029833078 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.029877901 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.029886007 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.029895067 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.029930115 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.029934883 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.029998064 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.030040979 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.030117035 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.030126095 CEST	443	49711	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.030145884 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.030164957 CEST	49711	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.045655966 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.045691013 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.045754910 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.045932055 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.045944929 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.171989918 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.172285080 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.172305107 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.174551964 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.174666882 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.175034046 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.175120115 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.175225019 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.175235987 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.175261021 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.175270081 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.226681948 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.244332075 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.244626045 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.244654894 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.245570898 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.245671988 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.245908976 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.245976925 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.246037960 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.246054888 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.290683031 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.293246984 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.293373108 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.293436050 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.293456078 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.293536901 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.293586016 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.293591976 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.293699026 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.293752909 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.293757915 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.293853045 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.293894053 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.293900013 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.294013977 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.294068098 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.294073105 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.298254013 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.298329115 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.298333883 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.338766098 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.352318048 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.352579117 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.352588892 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.353457928 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.353543997 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.353796005 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.353848934 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.353909016 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.353914976 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.354058027 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 18:54:31.379538059 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.379620075 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.379673958 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.379793882 CEST	49714	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.379811049 CEST	443	49714	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.382142067 CEST	49718	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.382181883 CEST	443	49718	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.382267952 CEST	49718	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.382540941 CEST	49718	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.382558107 CEST	443	49718	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.401694059 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.420202971 CEST	49719	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:54:31.420249939 CEST	443	49719	142.250.185.196	192.168.2.16
Oct 7, 2024 18:54:31.420330048 CEST	49719	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:54:31.420514107 CEST	49719	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:54:31.420531988 CEST	443	49719	142.250.185.196	192.168.2.16
Oct 7, 2024 18:54:31.425889969 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.425904036 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.425970078 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.426127911 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.426140070 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.486824989 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.487057924 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.487082958 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.487991095 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.488070965 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.488523006 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.488583088 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.488832951 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.488842010 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.498909950 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.498961926 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.498997927 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.499023914 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.499033928 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.499053001 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.499074936 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.499488115 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.499516964 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.499535084 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.499550104 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.499603987 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.499742031 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.500379086 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.500425100 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.500436068 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.503787041 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.503840923 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.503854990 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.517066956 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.517116070 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.517147064 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.517160892 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.517173052 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.517184973 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.517213106 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.517230034 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.517266989 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.517277002 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.517285109 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.517323017 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.517332077 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.517360926 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.517405987 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.518640041 CEST	49716	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:31.518654108 CEST	443	49716	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:31.529659986 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.545671940 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.583895922 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.583950996 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.583972931 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.583990097 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.583997011 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.584005117 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.584032059 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.584177017 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.584208965 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.584304094 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.584594011 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.584647894 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.584656000 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.584933043 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.584984064 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.584990025 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.585012913 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.585043907 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.585048914 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.585499048 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.585536003 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.585542917 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.585614920 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.585638046 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.585654974 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.585661888 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.585699081 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.585742950 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.585791111 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.585823059 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.585829973 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.586425066 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.586482048 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.586488962 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.617352962 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.617563009 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.617584944 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.617602110 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.617607117 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.617619038 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.617651939 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.617661953 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.617700100 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.618130922 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.618433952 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.618455887 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.618469954 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.618478060 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.618509054 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.618520975 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.622468948 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.622519016 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.622525930 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.626698017 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.626746893 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.626758099 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.655700922 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 18:54:31.668559074 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.668610096 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.668612957 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.668623924 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.668665886 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.668672085 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.669045925 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.669106960 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.669112921 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.669271946 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.669296980 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.669302940 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.669313908 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.669349909 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.669950962 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.669976950 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.670001984 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.670006037 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.670032978 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.670047045 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.670089006 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.670133114 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.670661926 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.670717001 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.670834064 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.670864105 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.670881987 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.670886040 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.670907021 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.670921087 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.671664000 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.671673059 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.671691895 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.671710968 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.671715975 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.671745062 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.671753883 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.671858072 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.671902895 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.672528028 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.672584057 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.672638893 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.672677994 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.701172113 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701215982 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701244116 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701258898 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.701282024 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701318026 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.701319933 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701334000 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701370001 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.701379061 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701422930 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701448917 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701456070 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.701462030 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701495886 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701500893 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.701508999 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.701553106 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.702284098 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.702323914 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.702363014 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.702368975 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.702416897 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.702457905 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.702465057 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.703041077 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.703066111 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.703084946 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.703090906 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.703123093 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.703140974 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.703145981 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.703183889 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.703188896 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.703258991 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.703299999 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.703401089 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.703401089 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.703412056 CEST	443	49717	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:31.703452110 CEST	49717	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:31.755513906 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.755578041 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.755592108 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.755656958 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.755790949 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.755836964 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.755976915 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.756015062 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.756021976 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.756038904 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.756067038 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.756370068 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.756401062 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.756422043 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.756427050 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.756445885 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.756846905 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.756870031 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.756891966 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.756897926 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.756916046 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.757045984 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.757086039 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.757090092 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.757096052 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.757123947 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.757133007 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.757137060 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.757167101 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.757184029 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.757189035 CEST	443	49715	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.757198095 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.757213116 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.757271051 CEST	49715	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.862104893 CEST	443	49718	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.862329960 CEST	49718	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.862360954 CEST	443	49718	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.863226891 CEST	443	49718	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.863297939 CEST	49718	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.863533020 CEST	49718	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.863554955 CEST	49718	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.863581896 CEST	49718	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.863596916 CEST	443	49718	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.863656044 CEST	49718	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.863827944 CEST	49722	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.863847971 CEST	443	49722	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.863909006 CEST	49722	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.864118099 CEST	49722	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:31.864128113 CEST	443	49722	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:31.870258093 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.870460987 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.870476961 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.873951912 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.874032974 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.874231100 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.874284983 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.874341011 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:31.874347925 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:31.925690889 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.004654884 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.004719019 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.004750967 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.004771948 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.004774094 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.004784107 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.004821062 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.004828930 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.004867077 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.004874945 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.005151987 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.005186081 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.005193949 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.005198956 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.005238056 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.005244017 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.010893106 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.010958910 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.010965109 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.039022923 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.039052010 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.039174080 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.039417028 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.039423943 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.054127932 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.068278074 CEST	443	49719	142.250.185.196	192.168.2.16
Oct 7, 2024 18:54:32.069137096 CEST	49719	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:54:32.069144964 CEST	443	49719	142.250.185.196	192.168.2.16
Oct 7, 2024 18:54:32.070593119 CEST	443	49719	142.250.185.196	192.168.2.16
Oct 7, 2024 18:54:32.070696115 CEST	49719	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:54:32.071542025 CEST	49719	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:54:32.071629047 CEST	443	49719	142.250.185.196	192.168.2.16
Oct 7, 2024 18:54:32.087493896 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.087798119 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.087882042 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.087958097 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.087960005 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.087990046 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.088011026 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.088150024 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.088224888 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.088231087 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.088424921 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.088514090 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.088576078 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.088582039 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.088622093 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.088735104 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.088915110 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.088994980 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.089056015 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.089061975 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.089111090 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.089114904 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.089942932 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.090023041 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.090085030 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.090090990 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.090126991 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.090131044 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.090239048 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.090697050 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.090758085 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.090764046 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.090802908 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.090806961 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.117688894 CEST	49719	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:54:32.117700100 CEST	443	49719	142.250.185.196	192.168.2.16
Oct 7, 2024 18:54:32.133665085 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.133671045 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.165729046 CEST	49719	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:54:32.170238972 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.170437098 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.170514107 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.170528889 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.170536995 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.170561075 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.170658112 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.170676947 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.170717001 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.170722008 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.170748949 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.171010971 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.171066046 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.171072006 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.171116114 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.171119928 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.171155930 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.171215057 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.171220064 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.171257019 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.171852112 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.171921968 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.171931982 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.171983004 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.172817945 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.172926903 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.172930956 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.172954082 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.172986031 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.173006058 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.173744917 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.173779964 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.173804045 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.173805952 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.173815012 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.173844099 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.173866987 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.174730062 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.174792051 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.174793005 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.174799919 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.174846888 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.175698042 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.175766945 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.253170967 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.253225088 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.253345966 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.253379107 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.253447056 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.253673077 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.253703117 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.253735065 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.253741980 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.253774881 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.253799915 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.254189014 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.254216909 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.254286051 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.254290104 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.254317045 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.254349947 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.254354000 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.254388094 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.254558086 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.254589081 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.254667997 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.254674911 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.254740000 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.254923105 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.254951000 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.254982948 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.254987001 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.254997969 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.255546093 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.255578995 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.255604982 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.255609035 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.255650043 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.256097078 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.256172895 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.256242990 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.256388903 CEST	49720	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.256402969 CEST	443	49720	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.260750055 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 18:54:32.261073112 CEST	49724	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.261099100 CEST	443	49724	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.261187077 CEST	49724	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.261557102 CEST	49724	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.261570930 CEST	443	49724	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.323039055 CEST	443	49722	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:32.324719906 CEST	49722	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:32.324733973 CEST	443	49722	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:32.325062037 CEST	443	49722	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:32.329251051 CEST	49722	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:32.329314947 CEST	443	49722	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:32.329399109 CEST	49722	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:32.375399113 CEST	443	49722	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:32.462445974 CEST	443	49722	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:32.462524891 CEST	443	49722	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:32.462678909 CEST	49722	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:32.463195086 CEST	49722	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:32.463208914 CEST	443	49722	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:32.502616882 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.503005028 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.503026009 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.503313065 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.504132032 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.504210949 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.504319906 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.548789978 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.548796892 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.635435104 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.635474920 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.635571957 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.635591984 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.635662079 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.635694981 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.635725021 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.635729074 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.635735989 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.635780096 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.635791063 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.635845900 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.635848999 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.635857105 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.635896921 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.636279106 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.641310930 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.642338991 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.642355919 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.695689917 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.710020065 CEST	443	49724	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.710654020 CEST	49724	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.710675001 CEST	443	49724	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.710994005 CEST	443	49724	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.711433887 CEST	49724	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.711498022 CEST	443	49724	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.711596966 CEST	49724	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.723506927 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.723571062 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.723602057 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.723706007 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.723715067 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.723928928 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.723932981 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.723983049 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.724066019 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.724106073 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.724112034 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.724159002 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.724754095 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.724805117 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.724965096 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.724993944 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.725023985 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.725033998 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.725074053 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.725651979 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.725682974 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.725703955 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.725708008 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.725769043 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.725773096 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.726502895 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.726538897 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.726577997 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.726593971 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.726598024 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.726649046 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.727579117 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.727615118 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.727706909 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.727713108 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.727929115 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.755403996 CEST	443	49724	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.811831951 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.811916113 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.811948061 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.811985970 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.812020063 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.812040091 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.812053919 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.812203884 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.812254906 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.812258959 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.812391043 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.812424898 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.812441111 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.812444925 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.812921047 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.813106060 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.813154936 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.813571930 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.813642979 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.813941956 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.813975096 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.813999891 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.814006090 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.814017057 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.814042091 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.814640999 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.814671993 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.814704895 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.814711094 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.814733982 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.814753056 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.815486908 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.815550089 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.815634012 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.815680981 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.816298008 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.816349030 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.862889051 CEST	443	49724	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.862955093 CEST	443	49724	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.863023043 CEST	49724	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.863790035 CEST	49724	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.863811016 CEST	443	49724	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.866208076 CEST	49726	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:32.866240025 CEST	443	49726	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:32.866319895 CEST	49726	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:32.866569996 CEST	49726	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:32.866584063 CEST	443	49726	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:32.901245117 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.901339054 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.901349068 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.901365042 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.901506901 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.901523113 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.901777029 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.901818991 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.901828051 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.901832104 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.901906967 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.901927948 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.901940107 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.901945114 CEST	443	49723	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:32.901956081 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.901973009 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.904412031 CEST	49723	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:32.906335115 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:32.906373978 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:32.908283949 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:32.908504009 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:32.908519983 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:32.922861099 CEST	49728	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:32.922888994 CEST	443	49728	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:32.922961950 CEST	49728	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:32.923718929 CEST	49728	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:32.923731089 CEST	443	49728	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:33.070939064 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.070971966 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.071208954 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.071350098 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.071363926 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.426275015 CEST	443	49726	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.426513910 CEST	49726	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.426538944 CEST	443	49726	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.426860094 CEST	443	49726	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.427128077 CEST	49726	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.427190065 CEST	443	49726	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.427262068 CEST	49726	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.437356949 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.437654972 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.437666893 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.437983990 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.438342094 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.438342094 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.438405991 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.464695930 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 18:54:33.467403889 CEST	443	49726	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.480731010 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.490267992 CEST	443	49728	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:33.490451097 CEST	49728	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.490459919 CEST	443	49728	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:33.491355896 CEST	443	49728	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:33.491404057 CEST	49728	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.491705894 CEST	49728	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.491719007 CEST	49728	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.491758108 CEST	443	49728	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:33.491766930 CEST	49728	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.491825104 CEST	49728	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.492017031 CEST	49732	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.492038965 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:33.492099047 CEST	49732	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.492276907 CEST	49732	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.492290020 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:33.655098915 CEST	443	49726	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.655179977 CEST	443	49726	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.655235052 CEST	49726	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.655852079 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.655906916 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.655939102 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.655945063 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.655958891 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.655989885 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.655992031 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.656002045 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.656044960 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.656052113 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.656351089 CEST	49726	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.656364918 CEST	443	49726	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.656750917 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.656780005 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.656805038 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.656806946 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.656814098 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.656869888 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.660818100 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.660875082 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.679644108 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.679867029 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.679876089 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.680155993 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.680409908 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.680461884 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.680517912 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.680567980 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.680669069 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.739373922 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.739444017 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.739494085 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.739509106 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.739769936 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.739800930 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.739813089 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.739820004 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.739861012 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.740142107 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.740591049 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.740621090 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.740645885 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.740652084 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.740660906 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.740698099 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.741084099 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.741128922 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.741132021 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.741143942 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.741190910 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.741657972 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.741718054 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.741758108 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.741767883 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.743860960 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.743894100 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.743913889 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.743923903 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.743957043 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.743978977 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.743985891 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.744019985 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.744026899 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.783724070 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.855438948 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.855474949 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.855542898 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.855556011 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.856069088 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.856092930 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.856118917 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.856141090 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.856149912 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.856170893 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.856172085 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.856239080 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.856245041 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.856285095 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.857639074 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.857686996 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.857697010 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.857702971 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.857764006 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.857767105 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.857817888 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.857825994 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.857860088 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.857908964 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.857950926 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.857973099 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.858010054 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.858015060 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.858021975 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.858062983 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.858138084 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.858187914 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.858266115 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.858309984 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.858994961 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.859050035 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.859200954 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.859253883 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.860409021 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.860465050 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.896217108 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.896255016 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.896281004 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.896306038 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.896306992 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.896317005 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.896351099 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.896358013 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.896365881 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.896392107 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.896392107 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.896425009 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.896430016 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.896775007 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.896823883 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.896828890 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.901209116 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.901263952 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.901271105 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.939291954 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.939347029 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.939374924 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.939392090 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.939413071 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.939431906 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.939574003 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.939609051 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.939624071 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.939630032 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.939665079 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.939678907 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.939719915 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.939824104 CEST	49727	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:33.939831972 CEST	443	49727	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:33.942665100 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.979652882 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:33.979899883 CEST	49732	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.979911089 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:33.980195999 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:33.980452061 CEST	49732	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.980505943 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:33.980593920 CEST	49732	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:33.992000103 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.992172956 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.992228985 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.992239952 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.992324114 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.992369890 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.992376089 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.992432117 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.992470980 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.992470980 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.992482901 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.992518902 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.992526054 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.992595911 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.992635965 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.992640972 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.993272066 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.993299961 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.993321896 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.993326902 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.993362904 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.993367910 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.993427992 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.993463993 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.993469954 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.994189024 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.994237900 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.994244099 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.994328976 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.994365931 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.994368076 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.994374037 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.994410992 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.995080948 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.995188951 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:33.995229006 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:33.995234013 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.027399063 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:34.038723946 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.128593922 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.128643036 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.128693104 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.128703117 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.128902912 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.128958941 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.128964901 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.129303932 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.129327059 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.129354000 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.129359007 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.129375935 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.129718065 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.129766941 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.129770994 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.129815102 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.130047083 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.130095959 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.130168915 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.130215883 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.130883932 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.130945921 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.131052017 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.131094933 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.131195068 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.131239891 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.131856918 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.131907940 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.131969929 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.132011890 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.132077932 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.132118940 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.132689953 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.132735968 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.132841110 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.132882118 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.182137966 CEST	49689	80	192.168.2.16	192.229.211.108
Oct 7, 2024 18:54:34.271872044 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.271935940 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.271975994 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.271989107 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.272023916 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.272042036 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.272094011 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.272140980 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.272188902 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.272233963 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.272449017 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.272507906 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.273052931 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.273111105 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.273220062 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.273273945 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.273659945 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.273690939 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.273708105 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.273711920 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.273726940 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.273796082 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.273843050 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.273849010 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.273881912 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.274467945 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.274523973 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.274530888 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.274540901 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.274570942 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.274590015 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.274727106 CEST	49729	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.274741888 CEST	443	49729	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.277611971 CEST	49734	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:34.277641058 CEST	443	49734	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:34.277724028 CEST	49734	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:34.277920961 CEST	49734	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:34.277931929 CEST	443	49734	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:34.299752951 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:34.299798012 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:34.299859047 CEST	49732	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:34.299868107 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:34.299937963 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:34.299964905 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:34.299978971 CEST	49732	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:34.299983978 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:34.300018072 CEST	49732	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:34.300163984 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:34.300246954 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:34.300293922 CEST	49732	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:34.301268101 CEST	49732	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:34.301278114 CEST	443	49732	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:34.630629063 CEST	49736	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.630654097 CEST	443	49736	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.630728006 CEST	49736	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.631002903 CEST	49736	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:34.631017923 CEST	443	49736	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:34.746316910 CEST	443	49734	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:34.746645927 CEST	49734	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:34.746663094 CEST	443	49734	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:34.746999979 CEST	443	49734	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:34.747294903 CEST	49734	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:34.747356892 CEST	443	49734	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:34.747421026 CEST	49734	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:34.791399956 CEST	443	49734	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:34.949202061 CEST	443	49734	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:34.949276924 CEST	443	49734	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:34.949341059 CEST	49734	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:34.949906111 CEST	49734	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:34.949923038 CEST	443	49734	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:35.181359053 CEST	443	49736	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:35.181669950 CEST	49736	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:35.181696892 CEST	443	49736	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:35.182008982 CEST	443	49736	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:35.182308912 CEST	49736	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:35.182364941 CEST	443	49736	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:35.182446957 CEST	49736	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:35.223401070 CEST	443	49736	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:35.325525999 CEST	443	49736	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:35.325611115 CEST	443	49736	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:35.325800896 CEST	49736	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:35.327254057 CEST	49736	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:35.327271938 CEST	443	49736	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:35.331645012 CEST	49737	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:35.331682920 CEST	443	49737	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:35.331768990 CEST	49737	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:35.331933022 CEST	49737	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:35.331944942 CEST	443	49737	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:35.666476011 CEST	49739	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:35.666539907 CEST	443	49739	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:35.666599035 CEST	49739	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:35.666898966 CEST	49739	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:35.666910887 CEST	443	49739	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:35.820084095 CEST	443	49737	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:35.820333958 CEST	49737	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:35.820350885 CEST	443	49737	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:35.820630074 CEST	443	49737	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:35.820889950 CEST	49737	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:35.820944071 CEST	443	49737	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:35.821007013 CEST	49737	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:35.863403082 CEST	443	49737	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:35.866709948 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 18:54:35.943890095 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:35.943944931 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:35.944017887 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:35.946333885 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:35.946352005 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:36.023087978 CEST	443	49737	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:36.023164034 CEST	443	49737	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:36.023346901 CEST	49737	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:36.024111032 CEST	49737	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:36.024131060 CEST	443	49737	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:36.187424898 CEST	443	49739	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:36.187725067 CEST	49739	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:36.187758923 CEST	443	49739	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:36.188209057 CEST	443	49739	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:36.188497066 CEST	49739	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:36.188576937 CEST	443	49739	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:36.188643932 CEST	49739	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:36.231420994 CEST	443	49739	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:36.319564104 CEST	443	49739	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:36.319658041 CEST	443	49739	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:36.319742918 CEST	443	49739	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:36.319751978 CEST	49739	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:36.319802046 CEST	49739	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:36.320261955 CEST	49739	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:36.320282936 CEST	443	49739	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:36.570167065 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:36.570199966 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:36.570274115 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:36.570549011 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:36.570563078 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:36.736084938 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:36.736306906 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:36.740070105 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:36.740093946 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:36.740370035 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:36.789732933 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:36.814362049 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:36.859414101 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:37.040822029 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.041161060 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.041198969 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.041531086 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.041834116 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.041897058 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.041961908 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.042043924 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.042078972 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.042228937 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.042263985 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.113487959 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:37.113513947 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:37.113521099 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:37.113531113 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:37.113548994 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:37.113661051 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:37.113694906 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:37.113749981 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:37.114183903 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:37.114252090 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:37.114258051 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:37.114298105 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:37.127428055 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:37.127469063 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:37.127490997 CEST	49740	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:54:37.127500057 CEST	443	49740	52.149.20.212	192.168.2.16
Oct 7, 2024 18:54:37.311182976 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.311248064 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.311283112 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.311309099 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.311314106 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.311326981 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.311352968 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.311403036 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.311444044 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.311455965 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.312941074 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.312975883 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.312995911 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.313003063 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.313044071 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.313050985 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.316406012 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.316457033 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.316466093 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.359685898 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.439425945 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.439506054 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.439538002 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.439587116 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.439620972 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.439682007 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.441093922 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.441159964 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.441195965 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.441219091 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.441227913 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.441272974 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.441277027 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.441327095 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.441459894 CEST	49741	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:37.441478968 CEST	443	49741	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:37.443877935 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:37.443937063 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:37.444036007 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:37.444233894 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:37.444256067 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:37.653659105 CEST	49743	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:37.653703928 CEST	443	49743	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:37.653784990 CEST	49743	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:37.655170918 CEST	49743	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:37.655184984 CEST	443	49743	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:38.296529055 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:38.296802044 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:38.296825886 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:38.297171116 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:38.298224926 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:38.298305988 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:38.299197912 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:38.343421936 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:38.440490007 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:38.440567017 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:38.440629005 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:38.441215992 CEST	49742	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:38.441241980 CEST	443	49742	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:38.462929010 CEST	443	49743	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:38.463007927 CEST	49743	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:38.465930939 CEST	49743	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:38.465944052 CEST	443	49743	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:38.466197014 CEST	443	49743	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:38.505522966 CEST	49743	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:38.551413059 CEST	443	49743	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:38.630717993 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:38.630773067 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:38.630836964 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:38.631146908 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:38.631162882 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:38.719326019 CEST	443	49743	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:38.719400883 CEST	443	49743	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:38.719465971 CEST	49743	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:38.719530106 CEST	49743	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:38.719549894 CEST	443	49743	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:38.719563007 CEST	49743	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:38.719568968 CEST	443	49743	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:38.760734081 CEST	49745	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:38.760802031 CEST	443	49745	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:38.760891914 CEST	49745	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:38.761193991 CEST	49745	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:38.761207104 CEST	443	49745	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:39.096859932 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.097148895 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:39.097166061 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.097516060 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.097855091 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:39.097919941 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.098037958 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:39.098114967 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:39.098140955 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.098428011 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:39.098458052 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.344799042 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.344852924 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.344911098 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.344934940 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:39.344958067 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.345010996 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:39.345016956 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.345031977 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.345083952 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:39.346909046 CEST	49744	443	192.168.2.16	104.18.94.41
Oct 7, 2024 18:54:39.346920967 CEST	443	49744	104.18.94.41	192.168.2.16
Oct 7, 2024 18:54:39.349994898 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:39.350022078 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:39.350233078 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:39.350446939 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:39.350465059 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:39.367191076 CEST	49747	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.367217064 CEST	443	49747	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:39.367427111 CEST	49747	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.367749929 CEST	49747	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.367762089 CEST	443	49747	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:39.401103020 CEST	443	49745	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:39.401184082 CEST	49745	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:39.402520895 CEST	49745	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:39.402535915 CEST	443	49745	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:39.402960062 CEST	443	49745	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:39.403954983 CEST	49745	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:39.451406002 CEST	443	49745	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:39.519289017 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 18:54:39.662714958 CEST	443	49745	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:39.662813902 CEST	443	49745	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:39.662935019 CEST	49745	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:39.663827896 CEST	49745	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:39.663846970 CEST	443	49745	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:39.663866997 CEST	49745	443	192.168.2.16	184.28.90.27
Oct 7, 2024 18:54:39.663872957 CEST	443	49745	184.28.90.27	192.168.2.16
Oct 7, 2024 18:54:39.821732044 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 18:54:39.884234905 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:39.884387016 CEST	443	49747	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:39.884623051 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:39.884639025 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:39.884735107 CEST	49747	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.884749889 CEST	443	49747	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:39.884987116 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:39.885405064 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:39.885468960 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:39.885560989 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:39.885842085 CEST	443	49747	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:39.885926008 CEST	49747	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.886322021 CEST	49747	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.886360884 CEST	49747	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.886385918 CEST	443	49747	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:39.886409044 CEST	49747	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.886435986 CEST	49747	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.886704922 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.886730909 CEST	443	49748	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:39.886816025 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.887033939 CEST	49748	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.887047052 CEST	443	49748	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:39.918828964 CEST	443	49748	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:39.919277906 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.919311047 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:39.919549942 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.919775963 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:39.919795036 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:39.931401014 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:40.028346062 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:40.028420925 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:40.028507948 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:40.029742002 CEST	49746	443	192.168.2.16	104.18.95.41
Oct 7, 2024 18:54:40.029755116 CEST	443	49746	104.18.95.41	192.168.2.16
Oct 7, 2024 18:54:40.403986931 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.405469894 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.405497074 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.407047987 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.407136917 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.407546043 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.407632113 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.409092903 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.409092903 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.409117937 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.409152985 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.427968979 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 18:54:40.458789110 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.675426006 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.676127911 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.676175117 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.676206112 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.676235914 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.676378965 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.676563025 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.676676989 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.676723003 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.677445889 CEST	49749	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.677460909 CEST	443	49749	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.681571007 CEST	49750	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:40.681607008 CEST	443	49750	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:40.681670904 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 18:54:40.681710958 CEST	49750	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:40.682087898 CEST	49750	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:40.682097912 CEST	443	49750	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:40.692677975 CEST	49751	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.692728043 CEST	443	49751	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.692785978 CEST	49751	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.693114996 CEST	49752	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.693149090 CEST	443	49752	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.693456888 CEST	49751	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.693473101 CEST	443	49751	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:40.693527937 CEST	49752	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.695048094 CEST	49752	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:40.695060968 CEST	443	49752	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.124083996 CEST	443	49750	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.124412060 CEST	49750	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.124429941 CEST	443	49750	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.125463009 CEST	443	49750	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.125519037 CEST	49750	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.125874043 CEST	49750	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.125916004 CEST	49750	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.125929117 CEST	443	49750	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.125965118 CEST	49750	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.125989914 CEST	49750	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.126260042 CEST	49753	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.126316071 CEST	443	49753	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.126384974 CEST	49753	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.126868963 CEST	49753	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.126888037 CEST	443	49753	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.194875956 CEST	443	49751	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.195173979 CEST	49751	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.195204020 CEST	443	49751	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.196227074 CEST	443	49751	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.196285963 CEST	49751	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.196609974 CEST	49751	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.196625948 CEST	49751	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.196660995 CEST	443	49751	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.196676016 CEST	49751	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.196715117 CEST	49751	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.197016954 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.197061062 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.197161913 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.197413921 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.197424889 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.300380945 CEST	443	49752	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.300714016 CEST	49752	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.300726891 CEST	443	49752	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.301783085 CEST	443	49752	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.302323103 CEST	49752	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.302323103 CEST	49752	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.302383900 CEST	443	49752	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.302393913 CEST	49752	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.302393913 CEST	49752	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.302500963 CEST	49752	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.303406000 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.303435087 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.303736925 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.303736925 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.303762913 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.635708094 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 18:54:41.646110058 CEST	443	49753	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.646497011 CEST	49753	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.646519899 CEST	443	49753	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.647566080 CEST	443	49753	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.647728920 CEST	49753	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.647960901 CEST	49753	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.648021936 CEST	443	49753	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.648148060 CEST	49753	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.691414118 CEST	443	49753	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.699692011 CEST	49753	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.699711084 CEST	443	49753	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:41.747706890 CEST	49753	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:41.966269016 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.966526985 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.966557026 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.967425108 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.967561960 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.967627048 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.967634916 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.967672110 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.967925072 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.967989922 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.968095064 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.968106031 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.968131065 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.968187094 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.968600035 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.968677044 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.968924999 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.968976974 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:41.969089985 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:41.993882895 CEST	443	49719	142.250.185.196	192.168.2.16
Oct 7, 2024 18:54:41.993937016 CEST	443	49719	142.250.185.196	192.168.2.16
Oct 7, 2024 18:54:41.994012117 CEST	49719	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:54:42.015408993 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.018713951 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.018717051 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.018732071 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.066651106 CEST	443	49753	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:42.066692114 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.066734076 CEST	443	49753	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:42.067135096 CEST	49753	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:42.070113897 CEST	49753	443	192.168.2.16	188.114.96.3
Oct 7, 2024 18:54:42.070137978 CEST	443	49753	188.114.96.3	192.168.2.16
Oct 7, 2024 18:54:42.197333097 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.197840929 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.197863102 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.197921038 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.197937012 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.198157072 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.199012995 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.199606895 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.199625969 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.199672937 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.199677944 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.199718952 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.199773073 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.199948072 CEST	49755	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.199959040 CEST	443	49755	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.242095947 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.242789030 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.242818117 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.242861032 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.242899895 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.242964983 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.243724108 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.244539976 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.244594097 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.244602919 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.244899035 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.244952917 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.244961023 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.244991064 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.245034933 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.245158911 CEST	49754	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.245178938 CEST	443	49754	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.280124903 CEST	49719	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:54:42.280158043 CEST	443	49719	142.250.185.196	192.168.2.16
Oct 7, 2024 18:54:42.310765028 CEST	49756	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.310810089 CEST	443	49756	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.310898066 CEST	49756	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.311691999 CEST	49756	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.311705112 CEST	443	49756	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.756680965 CEST	443	49756	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.757011890 CEST	49756	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.757039070 CEST	443	49756	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.758060932 CEST	443	49756	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.758125067 CEST	49756	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.758455038 CEST	49756	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.758497953 CEST	49756	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.758503914 CEST	443	49756	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.758563042 CEST	49756	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.758574963 CEST	443	49756	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.758600950 CEST	49756	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.758615971 CEST	49756	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.759025097 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.759083033 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:42.759370089 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.759603977 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:42.759614944 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.208487034 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.208884954 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:43.208919048 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.209225893 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.209651947 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:43.209698915 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:43.209713936 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.209732056 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.260754108 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:43.459408998 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.459461927 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.459512949 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:43.459547043 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.460197926 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.460242033 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:43.460258007 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.461947918 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.461972952 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.462017059 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:43.462040901 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.462057114 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.462079048 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:43.462110043 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:43.462291002 CEST	49757	443	192.168.2.16	188.114.97.3
Oct 7, 2024 18:54:43.462308884 CEST	443	49757	188.114.97.3	192.168.2.16
Oct 7, 2024 18:54:43.978900909 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 18:54:44.042783022 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 18:54:44.282857895 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 18:54:44.888905048 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 18:54:46.095695019 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 18:54:48.500713110 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 18:54:48.850121021 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 18:54:50.295726061 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 7, 2024 18:54:53.311769009 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 18:54:58.459773064 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 7, 2024 18:55:02.926826000 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 7, 2024 18:55:13.544615984 CEST	49827	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:13.544670105 CEST	443	49827	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:13.544786930 CEST	49827	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:13.545658112 CEST	49827	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:13.545676947 CEST	443	49827	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:13.937361002 CEST	443	49827	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:13.944248915 CEST	49828	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:13.944281101 CEST	443	49828	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:13.944377899 CEST	49828	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:13.944888115 CEST	49828	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:13.944905043 CEST	443	49828	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:14.003737926 CEST	443	49828	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:14.010236025 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:14.010272980 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:14.010360003 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:14.010745049 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:14.010760069 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:14.843622923 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:14.843828917 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:14.845247984 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:14.845263004 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:14.845654964 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:14.846935034 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:14.891397953 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:15.166583061 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:15.166611910 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:15.166682959 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:15.166712046 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:15.166740894 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:15.166798115 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:15.167752981 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:15.167807102 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:15.167824984 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:15.167833090 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:15.167872906 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:15.168281078 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:15.168332100 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:15.168340921 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:15.168392897 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:15.170567989 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:15.170581102 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:15.170595884 CEST	49829	443	192.168.2.16	52.149.20.212
Oct 7, 2024 18:55:15.170602083 CEST	443	49829	52.149.20.212	192.168.2.16
Oct 7, 2024 18:55:28.641380072 CEST	49831	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:28.641411066 CEST	443	49831	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:28.641482115 CEST	49831	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:28.642669916 CEST	49831	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:28.642688036 CEST	443	49831	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:28.649420977 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:28.649470091 CEST	443	49832	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:28.649537086 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:28.649734974 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:28.649746895 CEST	443	49832	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.174686909 CEST	443	49831	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.175060034 CEST	49831	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.175081015 CEST	443	49831	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.176559925 CEST	443	49831	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.176637888 CEST	49831	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.177010059 CEST	49831	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.177092075 CEST	443	49831	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.177169085 CEST	49831	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.177177906 CEST	443	49831	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.213809967 CEST	443	49832	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.214075089 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.214101076 CEST	443	49832	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.215578079 CEST	443	49832	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.215653896 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.215909004 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.215996981 CEST	443	49832	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.216022968 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.228897095 CEST	49831	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.259406090 CEST	443	49832	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.260806084 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.260828972 CEST	443	49832	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.307786942 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.417785883 CEST	443	49831	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.418239117 CEST	49831	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.418299913 CEST	443	49831	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.418374062 CEST	49831	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.418955088 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.419023991 CEST	443	49836	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.419118881 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.419430017 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.419450045 CEST	443	49836	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.426603079 CEST	443	49832	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.426791906 CEST	443	49832	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.426862001 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.426899910 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.426899910 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.426918983 CEST	443	49832	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.426970005 CEST	49832	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.427350044 CEST	49837	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.427401066 CEST	443	49837	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.427472115 CEST	49837	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.427700043 CEST	49837	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.427716017 CEST	443	49837	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.913290977 CEST	443	49836	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.913708925 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.913750887 CEST	443	49836	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.913876057 CEST	443	49837	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.914141893 CEST	49837	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.914172888 CEST	443	49837	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.914644003 CEST	443	49837	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.914942026 CEST	49837	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.915029049 CEST	443	49837	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.915069103 CEST	49837	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.915117025 CEST	49837	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.915123940 CEST	443	49837	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.915222883 CEST	443	49836	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.915287971 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.915565014 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.915649891 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.915652990 CEST	443	49836	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.915671110 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.915740967 CEST	443	49836	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:29.960817099 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:29.960865974 CEST	443	49836	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:30.008812904 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:30.037655115 CEST	443	49837	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:30.037847042 CEST	443	49837	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:30.038017988 CEST	49837	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:30.038053036 CEST	49837	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:30.038069010 CEST	443	49837	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:30.038078070 CEST	49837	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:30.038111925 CEST	49837	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:30.038882971 CEST	443	49836	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:30.039104939 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:30.039182901 CEST	443	49836	35.190.80.1	192.168.2.16
Oct 7, 2024 18:55:30.039246082 CEST	49836	443	192.168.2.16	35.190.80.1
Oct 7, 2024 18:55:31.461035013 CEST	49844	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:55:31.461092949 CEST	443	49844	142.250.185.196	192.168.2.16
Oct 7, 2024 18:55:31.461282969 CEST	49844	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:55:31.461568117 CEST	49844	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:55:31.461600065 CEST	443	49844	142.250.185.196	192.168.2.16
Oct 7, 2024 18:55:32.092469931 CEST	443	49844	142.250.185.196	192.168.2.16
Oct 7, 2024 18:55:32.092901945 CEST	49844	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:55:32.092921972 CEST	443	49844	142.250.185.196	192.168.2.16
Oct 7, 2024 18:55:32.093389988 CEST	443	49844	142.250.185.196	192.168.2.16
Oct 7, 2024 18:55:32.093785048 CEST	49844	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:55:32.093873024 CEST	443	49844	142.250.185.196	192.168.2.16
Oct 7, 2024 18:55:32.142796993 CEST	49844	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:55:41.991751909 CEST	443	49844	142.250.185.196	192.168.2.16
Oct 7, 2024 18:55:41.991905928 CEST	443	49844	142.250.185.196	192.168.2.16
Oct 7, 2024 18:55:41.992197990 CEST	49844	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:55:42.797529936 CEST	49844	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:55:42.797602892 CEST	443	49844	142.250.185.196	192.168.2.16
Oct 7, 2024 18:56:31.549164057 CEST	49851	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:56:31.549216032 CEST	443	49851	142.250.185.196	192.168.2.16
Oct 7, 2024 18:56:31.549299955 CEST	49851	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:56:31.549495935 CEST	49851	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:56:31.549513102 CEST	443	49851	142.250.185.196	192.168.2.16
Oct 7, 2024 18:56:32.168927908 CEST	443	49851	142.250.185.196	192.168.2.16
Oct 7, 2024 18:56:32.169182062 CEST	49851	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:56:32.169205904 CEST	443	49851	142.250.185.196	192.168.2.16
Oct 7, 2024 18:56:32.170317888 CEST	443	49851	142.250.185.196	192.168.2.16
Oct 7, 2024 18:56:32.170581102 CEST	49851	443	192.168.2.16	142.250.185.196
Oct 7, 2024 18:56:32.170752048 CEST	443	49851	142.250.185.196	192.168.2.16
Oct 7, 2024 18:56:32.218034029 CEST	49851	443	192.168.2.16	142.250.185.196

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 18:54:26.551541090 CEST	53	55864	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:26.611247063 CEST	53	62445	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:27.516051054 CEST	55371	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:27.516366005 CEST	53671	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:27.526895046 CEST	53	55371	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:27.532201052 CEST	53	53671	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:27.768928051 CEST	53	51844	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:28.633096933 CEST	63498	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:28.633225918 CEST	56906	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:28.643549919 CEST	53	56906	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:28.644140959 CEST	53	63498	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:30.217842102 CEST	59400	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:30.217956066 CEST	49927	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:30.226052999 CEST	54316	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:30.226196051 CEST	61018	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:30.233606100 CEST	53	54316	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:30.233768940 CEST	53	61018	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:30.258517027 CEST	53	49927	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:30.277239084 CEST	53	59400	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:31.034945965 CEST	59088	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:31.035073996 CEST	64087	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:31.043015957 CEST	53	59088	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:31.045278072 CEST	53	64087	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:31.409962893 CEST	49694	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:31.410094976 CEST	65489	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:31.412249088 CEST	53043	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:31.412437916 CEST	49619	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:31.419153929 CEST	53	49694	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:31.419173002 CEST	53	65489	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:31.423456907 CEST	53	53043	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:31.425487995 CEST	53	49619	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:43.329941034 CEST	60717	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:43.330112934 CEST	54566	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:43.337460995 CEST	53	54566	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:44.252002954 CEST	57274	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:44.252352953 CEST	61544	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:44.252578974 CEST	56096	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:44.252720118 CEST	64698	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:44.252899885 CEST	56803	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:44.253055096 CEST	55586	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:44.260224104 CEST	53	64698	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:44.260243893 CEST	53	56096	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:44.262283087 CEST	55384	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:44.262409925 CEST	57656	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:54:44.268446922 CEST	53	61544	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:44.269311905 CEST	53	57656	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:44.270606041 CEST	53	55384	1.1.1.1	192.168.2.16
Oct 7, 2024 18:54:44.728764057 CEST	53	55833	1.1.1.1	192.168.2.16
Oct 7, 2024 18:55:04.070291996 CEST	53	64653	1.1.1.1	192.168.2.16
Oct 7, 2024 18:55:26.554435015 CEST	53	52376	1.1.1.1	192.168.2.16
Oct 7, 2024 18:55:26.713145018 CEST	53	56729	1.1.1.1	192.168.2.16
Oct 7, 2024 18:55:28.640291929 CEST	51676	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:55:28.640479088 CEST	64766	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:55:28.640850067 CEST	64688	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:55:28.641002893 CEST	61904	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:55:28.641732931 CEST	50207	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:55:28.641899109 CEST	51326	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:55:28.642235041 CEST	64112	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:55:28.642389059 CEST	63765	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:55:28.648791075 CEST	53	64766	1.1.1.1	192.168.2.16
Oct 7, 2024 18:55:28.648951054 CEST	53	51676	1.1.1.1	192.168.2.16
Oct 7, 2024 18:55:35.681360960 CEST	138	138	192.168.2.16	192.168.2.255
Oct 7, 2024 18:55:54.610291958 CEST	53	60385	1.1.1.1	192.168.2.16
Oct 7, 2024 18:56:30.648386955 CEST	49670	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:56:30.648616076 CEST	61864	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:56:30.650892019 CEST	53153	53	192.168.2.16	1.1.1.1
Oct 7, 2024 18:56:30.651012897 CEST	58765	53	192.168.2.16	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 7, 2024 18:54:44.268518925 CEST	192.168.2.16	1.1.1.1	c27d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 18:54:27.516051054 CEST	192.168.2.16	1.1.1.1	0x4736	Standard query (0)	doccloudshareddrive.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:27.516366005 CEST	192.168.2.16	1.1.1.1	0x1b24	Standard query (0)	doccloudshareddrive.com	65	IN (0x0001)	false
Oct 7, 2024 18:54:28.633096933 CEST	192.168.2.16	1.1.1.1	0x3800	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:28.633225918 CEST	192.168.2.16	1.1.1.1	0x12ee	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 18:54:30.217842102 CEST	192.168.2.16	1.1.1.1	0x1772	Standard query (0)	doccloudshareddrive.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:30.217956066 CEST	192.168.2.16	1.1.1.1	0x186f	Standard query (0)	doccloudshareddrive.com	65	IN (0x0001)	false
Oct 7, 2024 18:54:30.226052999 CEST	192.168.2.16	1.1.1.1	0x48f2	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:30.226196051 CEST	192.168.2.16	1.1.1.1	0x7df2	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 18:54:31.034945965 CEST	192.168.2.16	1.1.1.1	0x3e6d	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:31.035073996 CEST	192.168.2.16	1.1.1.1	0x8724	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 18:54:31.409962893 CEST	192.168.2.16	1.1.1.1	0xd514	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:31.410094976 CEST	192.168.2.16	1.1.1.1	0x6925	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 18:54:31.412249088 CEST	192.168.2.16	1.1.1.1	0x960c	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:31.412437916 CEST	192.168.2.16	1.1.1.1	0x5634	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 18:54:43.329941034 CEST	192.168.2.16	1.1.1.1	0xb9ed	Standard query (0)	www.office.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:43.330112934 CEST	192.168.2.16	1.1.1.1	0x7cfb	Standard query (0)	www.office.com	65	IN (0x0001)	false
Oct 7, 2024 18:54:44.252002954 CEST	192.168.2.16	1.1.1.1	0x361	Standard query (0)	portal.office.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.252352953 CEST	192.168.2.16	1.1.1.1	0x6058	Standard query (0)	portal.office.com	65	IN (0x0001)	false
Oct 7, 2024 18:54:44.252578974 CEST	192.168.2.16	1.1.1.1	0x51d4	Standard query (0)	outlook.office.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.252720118 CEST	192.168.2.16	1.1.1.1	0x13f8	Standard query (0)	outlook.office.com	65	IN (0x0001)	false
Oct 7, 2024 18:54:44.252899885 CEST	192.168.2.16	1.1.1.1	0xc0ab	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.253055096 CEST	192.168.2.16	1.1.1.1	0x9fb6	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 7, 2024 18:54:44.262283087 CEST	192.168.2.16	1.1.1.1	0xca3e	Standard query (0)	substrate.office.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.262409925 CEST	192.168.2.16	1.1.1.1	0x3141	Standard query (0)	substrate.office.com	65	IN (0x0001)	false
Oct 7, 2024 18:55:28.640291929 CEST	192.168.2.16	1.1.1.1	0xa111	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:55:28.640479088 CEST	192.168.2.16	1.1.1.1	0x3b85	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 18:55:28.640850067 CEST	192.168.2.16	1.1.1.1	0xbbce	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:55:28.641002893 CEST	192.168.2.16	1.1.1.1	0xfb3c	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Oct 7, 2024 18:55:28.641732931 CEST	192.168.2.16	1.1.1.1	0x5e32	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:55:28.641899109 CEST	192.168.2.16	1.1.1.1	0x4cdb	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Oct 7, 2024 18:55:28.642235041 CEST	192.168.2.16	1.1.1.1	0x6991	Standard query (0)	officehub.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:55:28.642389059 CEST	192.168.2.16	1.1.1.1	0xb8a1	Standard query (0)	officehub.nel.measure.office.net	65	IN (0x0001)	false
Oct 7, 2024 18:56:30.648386955 CEST	192.168.2.16	1.1.1.1	0x8b9f	Standard query (0)	officehub.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:56:30.648616076 CEST	192.168.2.16	1.1.1.1	0x896c	Standard query (0)	officehub.nel.measure.office.net	65	IN (0x0001)	false
Oct 7, 2024 18:56:30.650892019 CEST	192.168.2.16	1.1.1.1	0xa67	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:56:30.651012897 CEST	192.168.2.16	1.1.1.1	0xa983	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 18:54:27.526895046 CEST	1.1.1.1	192.168.2.16	0x4736	No error (0)	doccloudshareddrive.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:27.526895046 CEST	1.1.1.1	192.168.2.16	0x4736	No error (0)	doccloudshareddrive.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:27.532201052 CEST	1.1.1.1	192.168.2.16	0x1b24	No error (0)	doccloudshareddrive.com			65	IN (0x0001)	false
Oct 7, 2024 18:54:28.644140959 CEST	1.1.1.1	192.168.2.16	0x3800	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:30.233606100 CEST	1.1.1.1	192.168.2.16	0x48f2	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:30.233606100 CEST	1.1.1.1	192.168.2.16	0x48f2	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:30.233768940 CEST	1.1.1.1	192.168.2.16	0x7df2	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 18:54:30.258517027 CEST	1.1.1.1	192.168.2.16	0x186f	No error (0)	doccloudshareddrive.com			65	IN (0x0001)	false
Oct 7, 2024 18:54:30.277239084 CEST	1.1.1.1	192.168.2.16	0x1772	No error (0)	doccloudshareddrive.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:30.277239084 CEST	1.1.1.1	192.168.2.16	0x1772	No error (0)	doccloudshareddrive.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:31.043015957 CEST	1.1.1.1	192.168.2.16	0x3e6d	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:31.043015957 CEST	1.1.1.1	192.168.2.16	0x3e6d	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:31.045278072 CEST	1.1.1.1	192.168.2.16	0x8724	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 18:54:31.419153929 CEST	1.1.1.1	192.168.2.16	0xd514	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:31.419173002 CEST	1.1.1.1	192.168.2.16	0x6925	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 18:54:31.423456907 CEST	1.1.1.1	192.168.2.16	0x960c	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:31.423456907 CEST	1.1.1.1	192.168.2.16	0x960c	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:31.425487995 CEST	1.1.1.1	192.168.2.16	0x5634	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 18:54:43.337460995 CEST	1.1.1.1	192.168.2.16	0x7cfb	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:43.337460995 CEST	1.1.1.1	192.168.2.16	0x7cfb	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:43.337831974 CEST	1.1.1.1	192.168.2.16	0xb9ed	No error (0)	www.office.com	home-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:43.337831974 CEST	1.1.1.1	192.168.2.16	0xb9ed	No error (0)	home-portal.office.com	home-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.259970903 CEST	1.1.1.1	192.168.2.16	0x361	No error (0)	portal.office.com	admin-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.259970903 CEST	1.1.1.1	192.168.2.16	0x361	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260224104 CEST	1.1.1.1	192.168.2.16	0x13f8	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260224104 CEST	1.1.1.1	192.168.2.16	0x13f8	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260224104 CEST	1.1.1.1	192.168.2.16	0x13f8	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260224104 CEST	1.1.1.1	192.168.2.16	0x13f8	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260224104 CEST	1.1.1.1	192.168.2.16	0x13f8	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260234118 CEST	1.1.1.1	192.168.2.16	0xc0ab	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260243893 CEST	1.1.1.1	192.168.2.16	0x51d4	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260243893 CEST	1.1.1.1	192.168.2.16	0x51d4	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260243893 CEST	1.1.1.1	192.168.2.16	0x51d4	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260243893 CEST	1.1.1.1	192.168.2.16	0x51d4	No error (0)	ooc-g2.tm-4.office.com		52.98.152.178	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260243893 CEST	1.1.1.1	192.168.2.16	0x51d4	No error (0)	ooc-g2.tm-4.office.com		52.98.175.2	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260243893 CEST	1.1.1.1	192.168.2.16	0x51d4	No error (0)	ooc-g2.tm-4.office.com		40.99.150.98	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260243893 CEST	1.1.1.1	192.168.2.16	0x51d4	No error (0)	ooc-g2.tm-4.office.com		40.99.150.66	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260243893 CEST	1.1.1.1	192.168.2.16	0x51d4	No error (0)	ooc-g2.tm-4.office.com		52.98.179.50	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260243893 CEST	1.1.1.1	192.168.2.16	0x51d4	No error (0)	ooc-g2.tm-4.office.com		52.98.171.242	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260243893 CEST	1.1.1.1	192.168.2.16	0x51d4	No error (0)	ooc-g2.tm-4.office.com		40.99.150.34	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.260243893 CEST	1.1.1.1	192.168.2.16	0x51d4	No error (0)	ooc-g2.tm-4.office.com		52.98.243.18	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.261432886 CEST	1.1.1.1	192.168.2.16	0x9fb6	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.268446922 CEST	1.1.1.1	192.168.2.16	0x6058	No error (0)	portal.office.com	admin-portal.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.268446922 CEST	1.1.1.1	192.168.2.16	0x6058	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.269311905 CEST	1.1.1.1	192.168.2.16	0x3141	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.269311905 CEST	1.1.1.1	192.168.2.16	0x3141	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.269311905 CEST	1.1.1.1	192.168.2.16	0x3141	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.269311905 CEST	1.1.1.1	192.168.2.16	0x3141	No error (0)	outlook.ms-acdc.office.com	HHN-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.270606041 CEST	1.1.1.1	192.168.2.16	0xca3e	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.270606041 CEST	1.1.1.1	192.168.2.16	0xca3e	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.270606041 CEST	1.1.1.1	192.168.2.16	0xca3e	No error (0)	ooc-g2.tm-4.office.com		52.98.152.194	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.270606041 CEST	1.1.1.1	192.168.2.16	0xca3e	No error (0)	ooc-g2.tm-4.office.com		52.98.241.162	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.270606041 CEST	1.1.1.1	192.168.2.16	0xca3e	No error (0)	ooc-g2.tm-4.office.com		52.98.241.178	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.270606041 CEST	1.1.1.1	192.168.2.16	0xca3e	No error (0)	ooc-g2.tm-4.office.com		40.99.150.66	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.270606041 CEST	1.1.1.1	192.168.2.16	0xca3e	No error (0)	ooc-g2.tm-4.office.com		40.99.150.114	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.270606041 CEST	1.1.1.1	192.168.2.16	0xca3e	No error (0)	ooc-g2.tm-4.office.com		52.98.171.226	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.270606041 CEST	1.1.1.1	192.168.2.16	0xca3e	No error (0)	ooc-g2.tm-4.office.com		40.99.150.82	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.270606041 CEST	1.1.1.1	192.168.2.16	0xca3e	No error (0)	ooc-g2.tm-4.office.com		40.99.214.34	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:54:44.279407978 CEST	1.1.1.1	192.168.2.16	0x76dc	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.281161070 CEST	1.1.1.1	192.168.2.16	0x96d	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.281161070 CEST	1.1.1.1	192.168.2.16	0x96d	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:54:44.281161070 CEST	1.1.1.1	192.168.2.16	0x96d	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:55:28.648951054 CEST	1.1.1.1	192.168.2.16	0xa111	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 7, 2024 18:55:28.649187088 CEST	1.1.1.1	192.168.2.16	0xbbce	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:55:28.650229931 CEST	1.1.1.1	192.168.2.16	0xfb3c	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:55:28.651367903 CEST	1.1.1.1	192.168.2.16	0x4cdb	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:55:28.651377916 CEST	1.1.1.1	192.168.2.16	0xb8a1	No error (0)	officehub.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:55:28.652178049 CEST	1.1.1.1	192.168.2.16	0x6991	No error (0)	officehub.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:55:28.653137922 CEST	1.1.1.1	192.168.2.16	0x5e32	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:56:30.658468008 CEST	1.1.1.1	192.168.2.16	0x896c	No error (0)	officehub.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:56:30.658524990 CEST	1.1.1.1	192.168.2.16	0xa983	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:56:30.658869982 CEST	1.1.1.1	192.168.2.16	0xa67	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 18:56:30.679862022 CEST	1.1.1.1	192.168.2.16	0x8b9f	No error (0)	officehub.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

doccloudshareddrive.com

a.nel.cloudflare.com

https:

challenges.cloudflare.com

slscr.update.microsoft.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49702	188.114.97.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:28 UTC	800	OUT	GET /?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:28 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Mon, 07 Oct 2024 16:54:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-10-07 16:54:28 UTC	750	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 30 37 51 64 48 56 75 4c 37 65 47 77 57 71 4e 61 73 77 37 31 43 54 37 4b 42 76 33 70 58 53 57 4e 52 33 69 79 52 6b 6b 71 5a 70 43 34 50 4b 45 58 4f 31 7a 47 44 37 37 31 4e 72 2f 56 33 6b 42 67 48 68 30 4f 61 7a 35 6f 37 65 2f 77 43 38 5a 38 30 61 45 6f 6a 57 6b 43 71 47 67 42 79 2f 75 62 51 64 57 69 62 69 38 42 57 6b 49 3d 24 4d 4b 79 37 32 38 73 78 77 4e 72 46 2b 4d 44 42 35 61 58 76 42 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: 07QdHVuL7eGwWqNasw71CT7KBv3pXSWNR3iyRkkqZpC4PKEXO1zGD771Nr/V3kBgHh0Oaz5o7e/wC8Z80aEojWkCqGgBy/ubQdWibi8BWkI=$MKy728sxwNrF+MDB5aXvBA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 32 38 65 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 28e5<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 6a 52 6d 4d 32 4a 44 62 43 50 58 34 77 33 35 6b 42 37 4b 35 33 43 43 2e 6a 32 4f 74 33 76 32 51 35 64 38 62 6b 52 53 30 4e 77 47 6b 68 4b 62 54 5a 51 79 71 5a 66 6b 6b 5f 66 48 6b 72 78 49 67 37 38 6c 79 76 4a 73 43 32 33 6d 49 4c 46 5f 5a 57 31 6d 7a 31 79 32 57 5f 73 70 69 4b 49 62 36 42 6d 50 48 6f 68 79 55 4b 39 43 76 34 69 31 71 72 56 6f 63 41 55 74 63 2e 44 6d 61 68 6f 66 6e 7a 35 4a 64 5a 5a 41 44 2e 7a 56 65 49 75 34 6f 6b 41 76 63 38 43 4a 63 51 47 74 55 49 75 36 52 35 30 70 35 2e 65 77 49 70 32 46 41 4f 50 4d 33 53 38 5a 2e 73 31 44 7a 42 5a 44 5f 4a 63 44 47 49 59 47 43 4f 4d 69 47 33 4b 50 7a 4d 47 59 79 72 2e 46 41 57 51 67 7a 46 55 49 4e 31 4a 77 39 6a 72 6c 35 6f 5f 6a 4a 56 70 58 50 6f 43 48 6b 71 74 51 39 39 35 78 54 50 55 36 6d 2e 36 75 Data Ascii: jRmM2JDbCPX4w35kB7K53CC.j2Ot3v2Q5d8bkRS0NwGkhKbTZQyqZfkk_fHkrxIg78lyvJsC23mILF_ZW1mz1y2W_spiKIb6BmPHohyUK9Cv4i1qrVocAUtc.Dmahofnz5JdZZAD.zVeIu4okAvc8CJcQGtUIu6R50p5.ewIp2FAOPM3S8Z.s1DzBZD_JcDGIYGCOMiG3KPzMGYyr.FAWQgzFUIN1Jw9jrl5o_jJVpXPoCHkqtQ995xTPU6m.6u
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 68 36 6b 42 58 43 4c 6d 35 58 42 7a 47 58 74 39 59 54 4a 31 77 7a 42 66 47 44 78 50 6a 69 6f 6d 61 78 79 4a 69 33 6c 47 63 34 70 6c 51 49 49 33 65 6e 75 63 5a 35 33 36 62 50 62 32 38 47 59 2e 38 72 72 78 32 39 7a 57 4f 45 6b 32 69 6f 39 50 45 31 42 76 61 78 6c 64 37 52 53 30 39 36 56 36 50 5a 6a 74 65 31 59 7a 34 42 6f 76 57 74 6f 4b 32 31 63 78 62 73 72 56 57 39 65 72 33 44 75 4c 72 78 72 52 46 63 55 51 56 76 58 59 4a 39 69 6d 55 61 31 43 47 72 36 5a 36 47 42 57 6e 72 4c 4b 44 35 5a 38 53 6a 34 70 50 2e 51 6d 32 53 6e 66 39 63 42 5f 33 41 6a 44 48 56 56 34 63 76 47 69 58 58 6d 6e 62 74 55 78 73 5f 4c 35 30 72 38 58 66 67 37 78 67 36 71 37 71 4d 64 38 57 31 5a 71 46 65 41 79 4f 46 6f 57 30 30 4b 48 45 61 6b 4d 74 33 68 47 45 6c 6e 59 4e 55 79 45 41 48 36 Data Ascii: h6kBXCLm5XBzGXt9YTJ1wzBfGDxPjiomaxyJi3lGc4plQII3enucZ536bPb28GY.8rrx29zWOEk2io9PE1Bvaxld7RS096V6PZjte1Yz4BovWtoK21cxbsrVW9er3DuLrxrRFcUQVvXYJ9imUa1CGr6Z6GBWnrLKD5Z8Sj4pP.Qm2Snf9cB_3AjDHVV4cvGiXXmnbtUxs_L50r8Xfg7xg6q7qMd8W1ZqFeAyOFoW00KHEakMt3hGElnYNUyEAH6
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 2e 6b 47 55 7a 66 4d 39 72 5a 65 6b 54 41 46 36 54 78 54 74 64 34 79 2e 69 4b 69 57 31 44 2e 6d 45 73 39 47 67 43 45 69 61 69 4c 42 79 58 31 73 77 57 4c 74 5a 68 61 5f 44 5a 30 4f 53 54 41 75 56 74 74 50 39 4a 6e 39 68 77 6a 31 6a 37 6a 51 7a 41 59 51 73 53 4a 6c 64 6d 41 39 57 36 31 49 65 6b 70 54 70 42 50 64 42 2e 56 79 34 51 61 4d 41 7a 36 72 61 4b 38 53 6f 59 43 66 77 45 4f 30 4e 44 74 56 4d 76 77 56 6e 62 6b 4b 53 4b 76 77 6b 56 37 46 6b 4b 4e 52 6c 51 43 59 6b 6c 57 52 51 6e 58 37 48 4d 52 71 62 56 47 6d 6f 67 58 30 73 62 30 4b 65 63 78 68 44 35 57 32 2e 51 32 44 31 71 46 72 70 73 33 4e 50 62 74 74 73 54 43 65 6d 5f 50 66 38 68 45 63 6e 5a 35 67 73 78 6c 58 72 33 4c 42 6d 61 50 55 50 4b 6f 57 4e 33 72 58 37 35 43 77 6a 35 39 45 72 67 62 6a 39 54 43 Data Ascii: .kGUzfM9rZekTAF6TxTtd4y.iKiW1D.mEs9GgCEiaiLByX1swWLtZha_DZ0OSTAuVttP9Jn9hwj1j7jQzAYQsSJldmA9W61IekpTpBPdB.Vy4QaMAz6raK8SoYCfwEO0NDtVMvwVnbkKSKvwkV7FkKNRlQCYklWRQnX7HMRqbVGmogX0sb0KecxhD5W2.Q2D1qFrps3NPbttsTCem_Pf8hEcnZ5gsxlXr3LBmaPUPKoWN3rX75Cwj59Ergbj9TC
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 64 56 35 65 55 63 4e 49 6e 50 41 33 56 6a 4c 6f 78 79 5a 74 6f 38 74 47 56 57 76 35 32 50 49 38 46 54 6f 72 56 76 6b 50 58 34 6f 39 51 74 6e 48 74 47 5a 4e 50 5a 4a 35 4e 38 5a 46 7a 4d 71 73 47 48 4e 39 58 51 6f 7a 39 4e 41 49 35 73 32 4c 32 6d 57 50 77 76 74 76 42 37 32 53 6c 43 66 6e 52 49 36 78 71 2e 72 31 50 47 34 4e 61 72 51 76 69 53 6f 58 53 44 73 6e 58 50 55 51 49 50 31 48 5f 58 4f 33 35 44 6c 64 41 55 74 30 56 69 74 73 76 66 6e 61 6d 42 45 67 43 46 70 44 58 37 59 51 6e 34 2e 47 6a 54 70 57 31 71 68 44 52 55 59 52 69 49 57 55 2e 76 6f 72 2e 6c 6b 55 4b 59 4c 54 75 49 79 6b 45 6b 50 6f 4e 38 4c 4a 70 2e 74 77 66 7a 74 62 71 6c 73 4d 67 6e 34 52 4b 47 38 34 62 7a 36 46 33 52 6c 32 79 4a 71 66 75 58 4f 39 66 59 34 79 65 77 64 70 34 32 75 62 35 2e 61 Data Ascii: dV5eUcNInPA3VjLoxyZto8tGVWv52PI8FTorVvkPX4o9QtnHtGZNPZJ5N8ZFzMqsGHN9XQoz9NAI5s2L2mWPwvtvB72SlCfnRI6xq.r1PG4NarQviSoXSDsnXPUQIP1H_XO35DldAUt0VitsvfnamBEgCFpDX7YQn4.GjTpW1qhDRUYRiIWU.vor.lkUKYLTuIykEkPoN8LJp.twfztbqlsMgn4RKG84bz6F3Rl2yJqfuXO9fY4yewdp42ub5.a
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 43 43 63 56 41 57 42 47 33 5a 32 46 44 35 22 2c 63 52 71 3a 20 7b 72 75 3a 20 27 61 48 52 30 63 48 4d 36 4c 79 39 6b 62 32 4e 6a 62 47 39 31 5a 48 4e 6f 59 58 4a 6c 5a 47 52 79 61 58 5a 6c 4c 6d 4e 76 62 53 38 2f 59 58 56 30 61 44 30 78 4a 6e 4e 6f 59 58 4a 6c 59 57 4a 73 5a 54 31 30 63 6e 56 6c 4a 6d 46 6a 59 32 56 7a 63 7a 31 79 5a 58 4e 30 63 6d 6c 6a 64 47 56 6b 4a 6d 4e 6f 5a 57 4e 72 58 33 52 35 63 47 55 39 63 47 46 7a 63 33 64 76 63 6d 51 6d 64 47 6c 74 5a 58 4e 30 59 57 31 77 50 54 49 77 4d 6a 51 74 4d 54 41 74 4d 44 64 55 4d 54 59 6c 4d 30 45 31 4d 79 55 7a 51 54 49 33 4c 6a 59 77 4f 56 6f 6d 63 48 4a 70 62 33 4a 70 64 48 6b 39 61 47 6c 6e 61 43 5a 70 62 6d 4e 73 64 57 52 6c 58 32 52 6c 64 47 46 70 62 48 4d 39 64 48 4a 31 5a 51 3d 3d 27 2c 72 61 Data Ascii: CCcVAWBG3Z2FD5",cRq: {ru: 'aHR0cHM6Ly9kb2NjbG91ZHNoYXJlZGRyaXZlLmNvbS8/YXV0aD0xJnNoYXJlYWJsZT10cnVlJmFjY2Vzcz1yZXN0cmljdGVkJmNoZWNrX3R5cGU9cGFzc3dvcmQmdGltZXN0YW1wPTIwMjQtMTAtMDdUMTYlM0E1MyUzQTI3LjYwOVomcHJpb3JpdHk9aGlnaCZpbmNsdWRlX2RldGFpbHM9dHJ1ZQ==',ra
2024-10-07 16:54:28 UTC	894	IN	Data Raw: 61 79 3d 38 63 65 66 36 39 63 63 39 65 62 30 34 32 65 35 27 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 23 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 65 72 79 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 6c 69 63 65 28 30 2c 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6c 65 6e 67 74 68 20 2d 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f Data Ascii: ay=8cef69cc9eb042e5';window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : location.hash;window._cf_chl_opt.cOgUQuery = location.search === '' && location.href.slice(0, location.href.length - window._cf_chl_opt.cO
2024-10-07 16:54:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49703	188.114.97.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:28 UTC	1072	OUT	GET /?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:28 UTC	1285	IN	HTTP/1.1 403 Forbidden Date: Mon, 07 Oct 2024 16:54:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-10-07 16:54:28 UTC	716	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 48 41 39 49 61 56 65 4e 72 4d 64 37 46 53 75 6a 4a 50 65 58 45 6f 6d 38 55 42 59 6c 30 56 72 32 43 79 34 51 4d 44 79 4c 4b 51 59 75 76 48 46 51 4e 34 31 41 59 42 6d 61 75 45 35 61 78 6e 37 79 6e 6a 4c 39 7a 35 78 57 6e 64 31 5a 4d 42 72 43 4d 2f 45 38 32 38 6b 41 68 47 33 34 36 51 41 72 62 30 2b 69 50 45 65 39 71 35 6b 3d 24 2f 6d 44 31 46 56 57 30 54 77 6b 65 59 6f 68 52 76 38 6f 4a 6d 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: HA9IaVeNrMd7FSujJPeXEom8UBYl0Vr2Cy4QMDyLKQYuvHFQN41AYBmauE5axn7ynjL9z5xWnd1ZMBrCM/E828kAhG346QArb0+iPEe9q5k=$/mD1FVW0TwkeYohRv8oJmA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 32 39 37 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 297b<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 39 67 33 4b 31 58 32 6c 6b 43 32 57 7a 39 45 32 6c 6a 39 71 71 57 51 33 49 41 72 6b 37 65 73 4b 44 57 52 4d 63 48 6a 6a 6d 53 46 6d 52 70 66 64 4e 72 75 34 52 34 37 31 75 34 63 31 4f 55 46 47 4f 6f 46 31 6d 6f 41 59 30 70 49 4b 65 36 45 4f 42 35 52 6c 73 46 37 70 6a 4a 58 55 72 77 44 36 71 49 57 64 51 4a 70 71 30 4b 61 77 48 79 66 54 6f 7a 47 73 35 66 62 6f 76 72 73 6b 77 35 39 4a 75 51 43 64 63 70 73 6f 79 33 78 33 6f 65 30 33 39 36 4e 39 41 7a 41 48 6b 37 6a 41 53 76 2e 62 31 31 54 69 63 72 50 53 2e 64 79 61 31 31 55 56 65 45 50 44 32 31 4f 67 32 56 72 4d 5f 54 46 67 4b 5a 63 78 53 49 52 41 57 31 34 66 77 79 65 44 62 31 67 59 6e 4b 6e 4e 46 56 36 6c 62 48 65 74 30 79 61 65 70 6e 34 41 4e 4e 32 75 6c 42 63 59 54 48 50 76 6b 57 71 48 37 67 33 48 6d 4f 38 Data Ascii: 9g3K1X2lkC2Wz9E2lj9qqWQ3IArk7esKDWRMcHjjmSFmRpfdNru4R471u4c1OUFGOoF1moAY0pIKe6EOB5RlsF7pjJXUrwD6qIWdQJpq0KawHyfTozGs5fbovrskw59JuQCdcpsoy3x3oe0396N9AzAHk7jASv.b11TicrPS.dya11UVeEPD21Og2VrM_TFgKZcxSIRAW14fwyeDb1gYnKnNFV6lbHet0yaepn4ANN2ulBcYTHPvkWqH7g3HmO8
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 33 33 45 57 64 4c 72 38 33 74 62 4b 6d 44 37 51 42 67 39 48 4c 30 63 53 57 45 49 50 41 77 6b 33 36 32 2e 52 41 45 6f 6c 54 4c 77 5a 41 30 4d 4f 66 46 46 79 72 31 35 36 68 5f 44 56 32 68 71 76 65 71 36 4f 47 51 73 35 37 57 75 2e 71 5f 73 65 6e 6c 48 2e 61 57 51 76 58 74 35 35 55 63 6a 53 6e 6f 5a 71 47 55 38 34 58 63 6d 76 4a 63 35 42 33 61 7a 59 44 6f 46 5a 53 55 62 4c 31 67 33 54 45 39 75 4b 7a 77 6b 76 44 48 70 6f 44 53 4d 67 50 75 31 4d 36 54 5a 52 34 53 42 75 45 77 52 47 69 66 6e 37 39 2e 50 42 6d 63 79 51 46 4e 4d 78 43 46 48 34 79 7a 73 47 38 4e 57 77 2e 39 34 57 58 31 6a 38 6c 76 74 35 70 4f 6f 73 33 64 65 6e 79 30 35 67 74 4b 64 75 70 38 4d 4e 52 4c 4f 78 69 69 48 68 6f 69 4e 42 5a 6f 42 4c 6f 6e 2e 30 33 79 55 5f 51 64 6a 41 77 51 6e 74 4c 79 51 Data Ascii: 33EWdLr83tbKmD7QBg9HL0cSWEIPAwk362.RAEolTLwZA0MOfFFyr156h_DV2hqveq6OGQs57Wu.q_senlH.aWQvXt55UcjSnoZqGU84XcmvJc5B3azYDoFZSUbL1g3TE9uKzwkvDHpoDSMgPu1M6TZR4SBuEwRGifn79.PBmcyQFNMxCFH4yzsG8NWw.94WX1j8lvt5pOos3deny05gtKdup8MNRLOxiiHhoiNBZoBLon.03yU_QdjAwQntLyQ
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 6a 46 46 49 72 52 4f 2e 45 31 4d 53 6a 52 4f 52 36 32 6b 75 36 71 6e 67 35 42 44 71 6a 75 59 59 61 4a 71 50 79 58 78 78 4f 53 36 36 39 39 71 54 74 2e 37 6c 56 33 68 4d 50 4a 6d 35 79 67 72 6b 78 52 31 45 54 7a 39 48 67 4e 4b 36 4c 4c 4f 74 6c 4e 52 31 79 76 55 42 58 63 74 68 5f 6c 4c 64 45 52 69 51 73 4f 69 73 55 6b 69 5a 75 73 57 36 61 41 64 6f 6e 64 70 6e 47 67 4e 32 37 4b 6a 32 6e 55 73 53 33 33 54 4b 53 67 68 53 2e 49 75 48 55 67 57 65 55 4a 77 66 56 61 4f 32 6c 54 37 33 6a 55 4d 5f 63 66 32 47 77 37 42 57 76 6b 37 54 73 30 71 32 38 77 67 6d 49 49 58 58 48 66 42 6a 44 61 64 32 66 34 65 55 56 35 6c 43 79 41 38 35 69 66 6f 41 34 72 51 6e 56 4a 57 41 4d 42 78 57 58 69 5f 45 79 78 6d 44 5f 4d 47 6f 79 75 2e 44 67 6b 4e 63 72 39 6a 75 4d 67 58 55 51 34 50 Data Ascii: jFFIrRO.E1MSjROR62ku6qng5BDqjuYYaJqPyXxxOS6699qTt.7lV3hMPJm5ygrkxR1ETz9HgNK6LLOtlNR1yvUBXcth_lLdERiQsOisUkiZusW6aAdondpnGgN27Kj2nUsS33TKSghS.IuHUgWeUJwfVaO2lT73jUM_cf2Gw7BWvk7Ts0q28wgmIIXXHfBjDad2f4eUV5lCyA85ifoA4rQnVJWAMBxWXi_EyxmD_MGoyu.DgkNcr9juMgXUQ4P
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 63 2e 6c 38 4f 6b 4b 4a 33 36 57 35 68 75 55 77 4d 61 4d 4d 71 38 6e 36 78 42 5a 37 48 52 35 4a 75 6c 4a 55 77 5a 57 53 76 43 74 34 30 58 38 48 6d 4a 76 5a 67 30 6a 30 31 79 51 78 54 71 6b 68 45 66 72 33 52 77 56 64 55 54 31 57 32 4b 67 6a 48 65 4a 37 43 34 36 6b 63 65 61 78 76 6f 42 33 4f 56 6c 4c 76 78 32 76 39 6c 49 4d 47 6a 49 33 56 36 4f 42 73 31 57 71 75 63 31 30 4f 34 65 51 67 46 6a 2e 62 62 45 4a 42 62 67 79 4b 77 71 6f 61 7a 38 42 57 32 5f 79 55 5a 6a 68 58 59 4a 6f 6a 31 57 35 38 6a 52 31 55 4d 42 6e 52 6e 5a 38 50 58 36 4e 43 59 6c 46 52 4b 77 6d 77 77 68 6e 47 77 52 39 39 34 73 57 6f 72 51 6e 67 46 6f 68 2e 32 49 76 52 50 35 51 65 5a 58 68 4e 6a 7a 51 4a 5f 43 51 74 73 58 4f 42 74 52 79 38 30 32 68 79 66 6e 59 38 78 59 6d 63 7a 4f 61 67 53 33 Data Ascii: c.l8OkKJ36W5huUwMaMMq8n6xBZ7HR5JulJUwZWSvCt40X8HmJvZg0j01yQxTqkhEfr3RwVdUT1W2KgjHeJ7C46kceaxvoB3OVlLvx2v9lIMGjI3V6OBs1Wquc10O4eQgFj.bbEJBbgyKwqoaz8BW2_yUZjhXYJoj1W58jR1UMBnRnZ8PX6NCYlFRKwmwwhnGwR994sWorQngFoh.2IvRP5QeZXhNjzQJ_CQtsXOBtRy802hyfnY8xYmczOagS3
2024-10-07 16:54:28 UTC	1369	IN	Data Raw: 4b 74 46 5a 38 2e 39 31 6b 4f 78 76 72 44 63 52 63 49 38 5f 4c 75 32 7a 69 39 74 51 65 65 68 70 4c 4d 6c 56 75 68 6b 52 44 73 71 30 77 32 6d 71 66 72 67 41 52 58 4f 33 4b 42 59 75 37 35 66 47 4b 32 59 59 68 53 7a 55 63 69 41 41 4b 64 5f 7a 74 46 72 33 77 59 64 65 33 4a 5a 76 44 68 72 45 51 57 31 65 52 31 49 56 57 54 72 64 37 30 69 6b 6c 44 52 58 50 39 77 4d 42 76 49 4d 2e 45 59 62 45 31 4e 52 53 6a 4b 56 36 33 52 6a 71 58 50 65 5a 5a 49 30 43 74 36 6d 36 77 4a 4f 66 78 6d 5a 7a 48 6f 67 22 2c 63 52 71 3a 20 7b 72 75 3a 20 27 61 48 52 30 63 48 4d 36 4c 79 39 6b 62 32 4e 6a 62 47 39 31 5a 48 4e 6f 59 58 4a 6c 5a 47 52 79 61 58 5a 6c 4c 6d 4e 76 62 53 38 2f 59 58 56 30 61 44 30 78 4a 6e 4e 6f 59 58 4a 6c 59 57 4a 73 5a 54 31 30 63 6e 56 6c 4a 6d 46 6a 59 32 Data Ascii: KtFZ8.91kOxvrDcRcI8_Lu2zi9tQeehpLMlVuhkRDsq0w2mqfrgARXO3KBYu75fGK2YYhSzUciAAKd_ztFr3wYde3JZvDhrEQW1eR1IVWTrd70iklDRXP9wMBvIM.EYbE1NRSjKV63RjqXPeZZI0Ct6m6wJOfxmZzHog",cRq: {ru: 'aHR0cHM6Ly9kb2NjbG91ZHNoYXJlZGRyaXZlLmNvbS8/YXV0aD0xJnNoYXJlYWJsZT10cnVlJmFjY2
2024-10-07 16:54:28 UTC	1044	IN	Data Raw: 37 52 41 77 6f 6e 30 5a 31 33 48 70 54 47 49 4a 7a 62 43 76 31 50 66 57 62 61 69 2b 4b 67 50 56 73 3d 27 2c 7d 7d 3b 76 61 72 20 63 70 6f 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 63 70 6f 2e 73 72 63 20 3d 20 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 67 2f 6f 72 63 68 65 73 74 72 61 74 65 2f 63 68 6c 5f 70 61 67 65 2f 76 31 3f 72 61 79 3d 38 63 65 66 36 39 63 64 34 62 66 35 36 61 35 63 27 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 21 3d 3d Data Ascii: 7RAwon0Z13HpTGIJzbCv1PfWbai+KgPVs=',}};var cpo = document.createElement('script');cpo.src = '/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8cef69cd4bf56a5c';window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !==
2024-10-07 16:54:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49704	35.190.80.1	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:29 UTC	558	OUT	OPTIONS /report/v4?s=J6FiaV5selQbWkf3x4UQKDyp2rCO%2Flb9eLdcijpl8akDu8ELlvL0I7kP6V%2FPt2r4uawEumeBjRuztzEobEv0QcFQY8QRbFbf4y9PW6D9KfW6d9txCujWepTCLgYXSe9iekkPSbUrnNC%2Byg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://doccloudshareddrive.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:29 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 07 Oct 2024 16:54:28 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49709	35.190.80.1	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:29 UTC	492	OUT	POST /report/v4?s=J6FiaV5selQbWkf3x4UQKDyp2rCO%2Flb9eLdcijpl8akDu8ELlvL0I7kP6V%2FPt2r4uawEumeBjRuztzEobEv0QcFQY8QRbFbf4y9PW6D9KfW6d9txCujWepTCLgYXSe9iekkPSbUrnNC%2Byg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 527 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:29 UTC	527	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 31 31 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 63 6c 6f 75 64 73 68 61 72 65 64 64 72 Data Ascii: [{"age":1,"body":{"elapsed_time":1110,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":403,"type":"http.error"},"type":"network-error","url":"https://doccloudshareddr
2024-10-07 16:54:29 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 07 Oct 2024 16:54:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49708	188.114.97.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:29 UTC	1095	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8cef69cd4bf56a5c HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true&__cf_chl_rt_tk=ZUUetqJzfrOgTZTRyYkoHuhNBWNkxiwOKuNE.JvS564-1728320068-0.0.1.1-5695 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:29 UTC	642	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 156791 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RlzNuYCRrVKflq5RE8nKB56DfgyUJfczNF%2B9qOhcmpXSlaJzFOaCRNfpv%2BYDFZSEism%2BQNRfkwD7mp9lQV0BQGxAB2jP7lJWPFzFdUWixrha1ib6vKpe51XaGiQyGSmF1y9fui%2BSAiygeg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cef69d4dfa27c6a-EWR
2024-10-07 16:54:29 UTC	727	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=true;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"}
2024-10-07 16:54:29 UTC	1369	IN	Data Raw: 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 37 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 25 32 37 25 33 45 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 75 6e 73 75 70 70 6f 72 74 65 64 25 33 43 25 32 46 61 25 33 45 25 32 30 61 6e 64 25 32 30 75 6e 61 62 6c 65 25 32 30 74 6f 25 32 30 63 6f 6d 70 6c 65 74 65 25 32 30 76 65 72 69 66 69 63 61 74 69 6f 6e 2e 25 32 30 54 72 79 25 32 30 61 25 32 30 64 69 66 66 65 72 65 6e 74 25 32 30 62 72 6f 77 73 65 72 25 32 30 6f 72 25 32 30 6d 61 6b 65 25 32 30 73 75 72 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 Data Ascii: t%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%27challenge.supported_browsers%27%3Ebrowser%20is%20unsupported%3C%2Fa%3E%20and%20unable%20to%20complete%20verification.%20Try%20a%20different%20browser%20or%20make%20sure%20your%20browser%20is
2024-10-07 16:54:29 UTC	1369	IN	Data Raw: 25 32 30 50 61 67 65 25 33 46 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 Data Ascii: %20Page%3F","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_feedback_descri
2024-10-07 16:54:29 UTC	1369	IN	Data Raw: 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 Data Ascii: Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cb
2024-10-07 16:54:29 UTC	1369	IN	Data Raw: 49 6e 74 28 67 42 28 31 32 31 34 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 67 42 28 39 31 37 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 42 28 31 33 36 33 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 42 28 36 34 34 29 29 2f 38 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 42 28 31 31 31 37 29 29 2f 39 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 42 28 36 32 39 29 29 2f 31 30 2a 28 70 61 72 73 65 49 6e 74 28 67 42 28 35 35 37 29 29 2f 31 31 29 2b 70 61 72 73 65 49 6e 74 28 67 42 28 39 37 39 29 29 2f 31 32 2a 28 70 61 72 73 65 49 6e 74 28 67 42 28 37 34 34 29 29 2f 31 33 29 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 Data Ascii: Int(gB(1214))/5)+parseInt(gB(917))/6(-parseInt(gB(1363))/7)+-parseInt(gB(644))/8(-parseInt(gB(1117))/9)+-parseInt(gB(629))/10(parseInt(gB(557))/11)+parseInt(gB(979))/12(parseInt(gB(744))/13),d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift()
2024-10-07 16:54:29 UTC	1369	IN	Data Raw: 65 4d 5b 67 59 28 37 34 33 29 5d 5b 67 59 28 37 37 36 29 5d 2c 6f 5b 67 59 28 33 32 32 29 5d 3d 65 4d 5b 67 59 28 37 34 33 29 5d 5b 67 59 28 33 32 32 29 5d 2c 73 3d 6f 2c 78 3d 6e 65 77 20 65 4d 5b 28 67 59 28 31 30 38 35 29 29 5d 28 29 2c 21 78 29 72 65 74 75 72 6e 3b 42 3d 6b 5b 67 59 28 36 33 38 29 5d 2c 78 5b 67 59 28 39 36 34 29 5d 28 42 2c 6e 2c 21 21 5b 5d 29 2c 78 5b 67 59 28 31 32 37 39 29 5d 3d 32 35 30 30 2c 78 5b 67 59 28 31 34 30 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 78 5b 67 59 28 31 33 35 37 29 5d 28 6b 5b 67 59 28 33 36 34 29 5d 2c 67 59 28 38 35 39 29 29 2c 43 3d 7b 7d 2c 43 5b 67 59 28 31 30 37 38 29 5d 3d 67 2c 43 2e 63 63 3d 68 2c 43 5b 67 59 28 31 31 30 33 29 5d 3d 6c 2c 43 5b 67 59 28 37 35 36 29 5d 3d 73 2c 44 3d 4a 53 Data Ascii: eM[gY(743)][gY(776)],o[gY(322)]=eM[gY(743)][gY(322)],s=o,x=new eM[(gY(1085))](),!x)return;B=k[gY(638)],x[gY(964)](B,n,!![]),x[gY(1279)]=2500,x[gY(1406)]=function(){},x[gY(1357)](k[gY(364)],gY(859)),C={},C[gY(1078)]=g,C.cc=h,C[gY(1103)]=l,C[gY(756)]=s,D=JS
2024-10-07 16:54:29 UTC	1369	IN	Data Raw: 3d 7b 27 47 63 61 6e 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 6e 51 79 58 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3e 67 7d 2c 27 41 4e 41 6d 61 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2d 67 7d 2c 27 41 49 7a 75 71 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 4e 73 4c 56 68 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 69 61 28 37 34 33 29 5d 5b 69 61 28 31 31 33 38 29 5d 7c 7c 31 65 34 2c 65 3d 63 5b 69 61 28 34 38 36 29 5d 28 66 4a 29 2c 21 65 4d 5b 69 61 28 31 31 39 39 29 5d 26 26 21 66 75 28 29 26 26 21 65 4d 5b 69 61 28 36 39 35 29 5d 5b 69 61 28 33 37 35 29 Data Ascii: ={'GcanK':function(f){return f()},'nQyXz':function(f,g){return f>g},'ANAma':function(f,g){return f-g},'AIzuq':function(f){return f()},'NsLVh':function(f){return f()}},d=eM[ia(743)][ia(1138)]\|\|1e4,e=c[ia(486)](fJ),!eM[ia(1199)]&&!fu()&&!eM[ia(695)][ia(375)
2024-10-07 16:54:29 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 4f 50 69 7a 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 69 4d 66 49 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 6c 6d 6b 67 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 49 52 6b 71 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 62 78 47 62 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 71 78 45 79 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 78 41 49 4a 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e Data Ascii: i){return h<<i},'OPizN':function(h,i){return h(i)},'iMfIq':function(h,i){return h==i},'lmkgE':function(h,i){return i!==h},'IRkqO':function(h,i){return h(i)},'bxGbG':function(h,i){return h<<i},'qxEyR':function(h,i){return h<<i},'xAIJV':function(h,i){return
2024-10-07 16:54:29 UTC	1369	IN	Data Raw: 31 31 32 36 29 5d 28 4b 2c 69 5b 69 46 28 31 32 38 36 29 5d 29 3b 4b 2b 3d 31 29 69 66 28 64 5b 69 46 28 31 31 31 35 29 5d 28 64 5b 69 46 28 34 35 33 29 5d 2c 64 5b 69 46 28 34 35 33 29 5d 29 29 4e 5b 69 46 28 36 39 32 29 5d 28 29 3b 65 6c 73 65 20 69 66 28 4c 3d 69 5b 69 46 28 39 34 38 29 5d 28 4b 29 2c 4f 62 6a 65 63 74 5b 69 46 28 31 33 35 32 29 5d 5b 69 46 28 37 30 36 29 5d 5b 69 46 28 37 31 31 29 5d 28 42 2c 4c 29 7c 7c 28 42 5b 4c 5d 3d 46 2b 2b 2c 43 5b 4c 5d 3d 21 30 29 2c 4d 3d 64 5b 69 46 28 31 32 33 33 29 5d 28 44 2c 4c 29 2c 4f 62 6a 65 63 74 5b 69 46 28 31 33 35 32 29 5d 5b 69 46 28 37 30 36 29 5d 5b 69 46 28 37 31 31 29 5d 28 42 2c 4d 29 29 44 3d 4d 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 69 46 28 31 33 35 32 29 5d 5b 69 46 28 37 30 Data Ascii: 1126)](K,i[iF(1286)]);K+=1)if(d[iF(1115)](d[iF(453)],d[iF(453)]))N[iF(692)]();else if(L=i[iF(948)](K),Object[iF(1352)][iF(706)][iF(711)](B,L)\|\|(B[L]=F++,C[L]=!0),M=d[iF(1233)](D,L),Object[iF(1352)][iF(706)][iF(711)](B,M))D=M;else{if(Object[iF(1352)][iF(70
2024-10-07 16:54:29 UTC	1369	IN	Data Raw: 46 28 31 33 35 32 29 5d 5b 69 46 28 37 30 36 29 5d 5b 69 46 28 37 31 31 29 5d 28 43 2c 44 29 29 7b 69 66 28 64 5b 69 46 28 39 39 30 29 5d 28 32 35 36 2c 44 5b 69 46 28 35 37 33 29 5d 28 30 29 29 29 7b 66 6f 72 28 78 3d 30 3b 78 3c 47 3b 49 3c 3c 3d 31 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 69 46 28 39 30 34 29 5d 28 64 5b 69 46 28 36 31 36 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 69 46 28 35 37 33 29 5d 28 30 29 2c 78 3d 30 3b 38 3e 78 3b 49 3d 64 5b 69 46 28 35 30 37 29 5d 28 49 2c 31 29 7c 31 2e 37 33 26 4e 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 69 46 28 39 30 34 29 5d 28 64 5b 69 46 28 36 31 36 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c Data Ascii: F(1352)][iF(706)][iF(711)](C,D)){if(d[iF(990)](256,D[iF(573)](0))){for(x=0;x<G;I<<=1,J==j-1?(J=0,H[iF(904)](d[iF(616)](o,I)),I=0):J++,x++);for(N=D[iF(573)](0),x=0;8>x;I=d[iF(507)](I,1)\|1.73&N,j-1==J?(J=0,H[iF(904)](d[iF(616)](o,I)),I=0):J++,N>>=1,x++);}el

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49711	104.18.94.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:30 UTC	591	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://doccloudshareddrive.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:30 UTC	441	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:30 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8cef69da6e0919e7-EWR
2024-10-07 16:54:30 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-10-07 16:54:30 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 72 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 67 2c 66 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Bt(e,r){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,g,f;try{for(a=a.call(e);!(c=(g=a.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2024-10-07 16:54:30 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 73 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 73 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 73 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 73 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 73 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 73 3d 5b 73 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function p(s){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,s[0]&&(a=0)),a;)try{if(o=1,c&&(l=s[0]&2?c.return:s[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,s[1])).done)return l;switch(c=0,l&&(s=[s[0]&2,l.val
2024-10-07 16:54:30 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 56 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 56 65 7c 7c 28 56 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 6c 75 72 65 2d 77 6f 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 6c 75 72 65 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 3d 22 66 61 69 6c 75 72 65 2d 66 65 65 64 62 61 63 6b 22 2c 65 2e 46 41 49 Data Ascii: ));var Ve;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Ve\|\|(Ve={}));var Se;(function(e){e.FAILURE_WO_HAVING_TROUBLES="failure-wo-having-troubles",e.FAILURE_HAVING_TROUBLES="failure-having-troubles",e.FAILURE_FEEDBACK="failure-feedback",e.FAI
2024-10-07 16:54:30 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 4c 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 39 65 35 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3e 30 26 26 65 3c 33 36 65 34 7d 76 61 72 20 41 72 3d 2f 5e 5b 30 2d 39 41 2d 5a 61 2d 7a 5f 2d 5d 7b 33 2c 31 30 30 7d 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 58 74 28 65 29 7b 72 65 74 75 72 6e Data Ascii: unction L(e,r){return e.indexOf(r)!==-1}function nt(e){return L(["auto","dark","light"],e)}function it(e){return L(["auto","never"],e)}function ot(e){return e>0&&e<9e5}function ct(e){return e>0&&e<36e4}var Ar=/^[0-9A-Za-z_-]{3,100}$/;function Xt(e){return
2024-10-07 16:54:30 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 79 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 5f 74 3d 22 67 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 22 2c 65 72 3d 38 65 33 2c 62 74 3d 22 70 72 69 76 61 74 65 2d 74 6f 6b 65 6e 22 2c 74 72 3d 33 2c 72 72 3d 35 30 30 2c 61 72 3d 35 30 30 2c 59 3d 22 30 2f 30 22 3b 76 61 72 20 43 72 3d 5b 22 62 67 2d 62 67 22 2c 22 64 61 2d 64 6b 22 2c 22 64 65 2d 64 65 22 2c 22 65 6c 2d 67 72 22 2c 22 6a 61 2d 6a 70 22 2c 22 6d 73 2d 6d 79 22 2c 22 72 75 2d 72 75 22 2c 22 73 6b 2d 73 6b 22 2c 22 73 6c 2d 73 69 22 2c 22 73 72 2d 62 61 22 2c 22 74 6c 2d 70 68 22 2c 22 75 6b 2d 75 61 22 5d 2c 4e 72 3d 5b 22 61 72 2d 65 67 22 2c 22 65 73 2d 65 73 22 2c 22 63 73 2d 63 7a Data Ascii: allenge_response",yt="cf-turnstile-response",_t="g-recaptcha-response",er=8e3,bt="private-token",tr=3,rr=500,ar=500,Y="0/0";var Cr=["bg-bg","da-dk","de-de","el-gr","ja-jp","ms-my","ru-ru","sk-sk","sl-si","sr-ba","tl-ph","uk-ua"],Nr=["ar-eg","es-es","cs-cz
2024-10-07 16:54:30 UTC	1369	IN	Data Raw: 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 61 26 26 72 3f 22 35 34 30 70 78 22 3a 61 26 26 6f 3f 22 35 30 30 70 78 22 3a 61 3f 22 34 38 30 70 78 22 3a 72 3f 22 36 35 30 70 78 22 3a 6f 3f 22 35 39 30 70 78 22 3a 22 35 37 30 70 78 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 65 28 65 29 7b 69 66 28 65 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6e 72 28 65 2c 72 29 7b 69 66 28 21 55 28 65 2c Data Ascii: rFeedback,o=e.isModeratelyVerbose;return a&&r?"540px":a&&o?"500px":a?"480px":r?"650px":o?"590px":"570px"};function He(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function nr(e,r){if(!U(e,
2024-10-07 16:54:30 UTC	1369	IN	Data Raw: 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 6f 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 74 79 70 65 6f 66 20 72 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 69 66 28 72 2e 68 61 73 28 6f 29 29 72 65 74 75 72 6e 20 72 2e 67 65 74 28 6f 29 3b 72 2e 73 65 74 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 49 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 63 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 72 65 74 75 72 6e 20 Data Ascii: f(o===null\|\|!or(o))return o;if(typeof o!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r!="undefined"){if(r.has(o))return r.get(o);r.set(o,c)}function c(){return Ie(o,arguments,ce(this).constructor)}return
2024-10-07 16:54:30 UTC	1369	IN	Data Raw: 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d 7b 6c 6f 61 64 65 64 41 73 79 6e 63 3a 21 31 2c 70 61 72 61 6d 73 3a 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 7d 3b 28 65 2e 61 73 79 6e 63 7c 7c 65 2e 64 65 66 65 72 29 26 26 28 72 2e 6c 6f 61 64 65 64 41 73 79 6e 63 3d 21 30 29 3b 76 61 72 20 61 3d 65 2e 73 72 63 2c 6f 3d 61 2e 73 70 6c 69 74 28 22 3f 22 29 3b 72 65 74 75 72 6e 20 6f 2e 6c 65 6e 67 74 68 3e 31 26 26 28 72 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 70 Data Ascii: ript tag, some features may not be available",43777);var r={loadedAsync:!1,params:new URLSearchParams};(e.async\|\|e.defer)&&(r.loadedAsync=!0);var a=e.src,o=a.split("?");return o.length>1&&(r.params=new URLSearchParams(o[1])),r}function W(){return typeof p
2024-10-07 16:54:30 UTC	1369	IN	Data Raw: 69 75 73 3d 22 35 70 78 22 2c 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 70 78 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 30 70 78 20 61 75 74 6f 22 3b 76 61 72 20 78 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 78 2e 69 64 3d 65 2b 22 2d 66 72 22 2c 78 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 67 29 2c 78 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 78 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 Data Ascii: ius="5px",s.style.left="0px",s.style.top="0px",s.style.overflow="hidden",s.style.margin="0px auto";var x=document.createElement("iframe");x.id=e+"-fr",x.setAttribute("src",g),x.setAttribute("allow","cross-origin-isolated; fullscreen"),x.setAttribute("sand

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49714	188.114.97.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:31 UTC	1215	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1310495476:1728318649:pB1YPIUF28SWt_BWZWhfGh-z19KQZFWcJJIavfqK3kM/8cef69cd4bf56a5c/0adb6525cba31fd HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive Content-Length: 2128 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: 0adb6525cba31fd sec-ch-ua-platform: "Windows" Accept: / Origin: https://doccloudshareddrive.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:31 UTC	2128	OUT	Data Raw: 76 5f 38 63 65 66 36 39 63 64 34 62 66 35 36 61 35 63 3d 44 4e 38 35 63 35 45 35 4e 35 79 35 71 64 4f 54 64 4f 32 35 41 70 6d 55 43 76 6a 41 64 6a 35 4f 47 38 4f 2d 35 38 38 78 39 4f 38 35 65 4e 2d 65 62 38 56 4f 25 32 62 6d 41 78 70 24 6b 68 4f 61 4f 43 35 75 24 44 69 2d 6a 35 4f 47 4f 64 4c 35 78 69 2b 66 4f 4f 55 79 4e 33 4f 6d 56 4f 50 61 44 4c 38 6b 38 65 35 2d 68 4f 4d 42 31 69 38 4f 33 6d 38 78 47 56 35 30 70 78 76 76 4a 73 32 49 59 51 55 49 41 2d 62 4f 62 70 35 4f 50 4f 24 38 44 30 39 47 49 2b 76 36 64 70 47 66 65 77 4f 6b 6a 2b 39 76 38 4f 74 54 30 4f 6a 48 43 30 68 59 38 4f 64 41 4f 24 2b 64 62 6c 39 39 48 41 4f 64 56 4f 36 47 6a 47 2d 38 43 37 36 41 77 73 55 35 4f 55 65 78 49 4f 72 4d 53 57 4f 2d 53 4f 39 4d 53 43 69 50 65 4f 24 41 77 59 35 6d Data Ascii: v_8cef69cd4bf56a5c=DN85c5E5N5y5qdOTdO25ApmUCvjAdj5OG8O-588x9O85eN-eb8VO%2bmAxp$khOaOC5u$Di-j5OGOdL5xi+fOOUyN3OmVOPaDL8k8e5-hOMB1i8O3m8xGV50pxvvJs2IYQUIA-bObp5OPO$8D09GI+v6dpGfewOkj+9v8OtT0OjHC0hY8OdAO$+dbl99HAOdVO6GjG-8C76AwsU5OUexIOrMSWO-SO9MSCiPeO$AwY5m
2024-10-07 16:54:31 UTC	637	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:31 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16840 Connection: close cf-chl-gen: cMByKFn+gbiD6lgu7S/8QdLWFJOui4c0vxJQuoahmbuPjqoYXBQ+ayBuVBbSYQRKf9BfznCHJQ==$EtEERw+p0K/ftK+g Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UoGovbTmTCcbwiUPseCURgtkAU1AlydMjBCgMM2mPeqzLSTMCer%2FSf1r2nApNTCEbH9CQatw%2Bg0Y%2FnlEA%2BsLYateD28cbF5y5qOZPmF6VMGjaNsQ6F87VR42afHo8hNju3MU5uzYDTrXAQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cef69dd29f343a7-EWR
2024-10-07 16:54:31 UTC	732	IN	Data Raw: 59 34 31 70 5a 4a 6c 70 5a 48 6d 51 66 6e 52 2f 6a 6e 68 33 6c 70 4a 67 57 4a 4e 68 70 4a 61 58 5a 61 68 39 68 4b 57 72 63 49 53 7a 6b 4a 4f 7a 72 48 53 49 64 72 31 37 6a 48 2b 78 77 48 7a 41 6b 73 4f 54 6b 35 6a 4a 70 73 75 59 69 59 6a 4e 6e 73 2b 65 6a 36 69 78 6e 36 4b 6d 75 70 54 61 71 74 75 2f 75 62 65 74 6d 64 36 2b 73 62 36 6d 77 64 76 70 77 4f 48 61 76 74 69 39 76 63 50 45 7a 63 2b 2f 30 4e 4c 44 73 73 76 56 79 50 33 4e 32 38 32 35 37 64 32 38 31 39 58 6a 31 66 58 67 34 39 72 69 7a 75 66 79 7a 4d 76 69 46 4f 49 4a 36 4f 58 71 45 4f 67 56 32 4e 6a 75 49 4f 38 46 38 79 66 79 35 2f 4d 68 35 4f 58 36 4c 41 77 4b 44 41 38 49 42 41 34 33 38 67 67 51 38 53 73 70 48 76 30 65 48 42 77 79 45 67 38 41 48 6a 6b 6a 4a 7a 63 62 43 6b 63 33 43 51 34 66 55 44 4d Data Ascii: Y41pZJlpZHmQfnR/jnh3lpJgWJNhpJaXZah9hKWrcISzkJOzrHSIdr17jH+xwHzAksOTk5jJpsuYiYjNns+ej6ixn6KmupTaqtu/ubetmd6+sb6mwdvpwOHavti9vcPEzc+/0NLDssvVyP3N28257d2819Xj1fXg49rizufyzMviFOIJ6OXqEOgV2NjuIO8F8yfy5/Mh5OX6LAwKDA8IBA438ggQ8SspHv0eHBwyEg8AHjkjJzcbCkc3CQ4fUDM
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 69 71 61 70 73 58 32 2f 6a 38 4f 58 68 4b 61 77 70 37 71 53 74 49 69 38 7a 59 61 6d 75 49 71 4e 6b 71 57 51 7a 4a 4f 74 6f 73 76 4a 6d 4a 69 35 7a 39 72 51 33 4d 2b 37 31 64 76 41 30 39 62 48 75 4d 76 4f 7a 4c 37 4e 72 2b 61 75 76 38 44 33 34 65 48 42 38 73 33 56 38 4c 69 39 36 66 48 64 77 2b 58 42 33 4f 44 44 30 77 6e 6b 79 73 30 4e 36 4d 37 51 45 65 7a 53 78 78 58 77 30 2b 6b 5a 39 4e 66 76 48 66 6a 62 37 69 48 38 33 2f 51 6c 41 65 50 33 4b 51 58 6e 42 79 30 4a 36 77 6f 64 37 68 38 4d 44 52 48 7a 46 52 51 4f 46 43 73 63 4e 68 44 34 49 42 55 31 48 69 67 53 51 7a 68 43 49 6b 59 38 52 69 59 4c 51 45 6f 71 56 6b 52 4f 4c 68 64 49 55 6a 4d 73 54 46 59 33 4f 46 42 61 4f 30 52 55 58 6a 39 57 57 47 4a 44 56 6c 78 6d 52 32 56 4b 50 6a 35 70 50 32 30 75 56 55 56 Data Ascii: iqapsX2/j8OXhKawp7qStIi8zYamuIqNkqWQzJOtosvJmJi5z9rQ3M+71dvA09bHuMvOzL7Nr+auv8D34eHB8s3V8Li96fHdw+XB3ODD0wnkys0N6M7QEezSxxXw0+kZ9NfvHfjb7iH83/QlAeP3KQXnBy0J6wod7h8MDRHzFRQOFCscNhD4IBU1HigSQzhCIkY8RiYLQEoqVkROLhdIUjMsTFY3OFBaO0RUXj9WWGJDVlxmR2VKPj5pP20uVUV
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 73 43 63 66 35 32 77 67 72 4b 66 6f 4b 53 48 71 4b 65 68 70 37 36 76 79 61 4f 52 76 73 65 34 78 63 6d 6e 31 36 57 76 72 64 61 35 72 4c 33 59 72 74 79 5a 75 4c 53 34 33 65 75 2b 76 37 7a 65 37 4c 7a 30 76 4d 4f 77 34 4c 50 59 35 4c 54 49 75 39 54 59 75 39 6f 42 33 4c 2f 64 38 4d 4c 79 33 2b 44 6b 78 2b 6a 6e 34 65 66 2b 37 77 72 67 34 41 45 49 30 39 4c 57 37 52 6b 4d 46 76 55 61 45 42 72 35 4a 68 51 65 2f 65 59 59 49 67 50 37 48 43 59 48 42 77 72 38 44 69 6e 2b 4c 65 6b 4a 42 51 6b 75 50 41 38 51 44 53 38 39 44 55 55 4e 46 41 45 78 42 43 6b 31 42 52 6b 4d 4a 53 6b 4d 49 6c 45 74 45 43 68 56 4d 52 51 6e 57 54 55 59 4c 56 30 35 48 44 74 68 50 53 41 2b 55 53 4e 54 51 45 46 46 4b 45 6c 49 51 6b 68 66 55 47 70 44 51 32 64 71 57 53 78 45 55 48 70 47 55 45 35 34 Data Ascii: sCcf52wgrKfoKSHqKehp76vyaORvse4xcmn16Wvrda5rL3YrtyZuLS43eu+v7ze7Lz0vMOw4LPY5LTIu9TYu9oB3L/d8MLy3+Dkx+jn4ef+7wrg4AEI09LW7RkMFvUaEBr5JhQe/eYYIgP7HCYHBwr8Din+LekJBQkuPA8QDS89DUUNFAExBCk1BRkMJSkMIlEtEChVMRQnWTUYLV05HDthPSA+USNTQEFFKElIQkhfUGpDQ2dqWSxEUHpGUE54
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 65 69 79 63 61 6a 6f 73 2b 6a 76 61 47 4a 7a 59 36 6c 31 4d 32 7a 6f 39 6e 56 79 62 4c 65 73 38 32 31 34 4c 65 65 74 65 58 68 31 4e 2f 68 76 71 4b 6f 36 65 76 42 37 4e 47 7a 39 65 62 30 78 75 69 76 74 50 62 4e 73 37 37 65 39 4e 72 78 77 74 4d 47 32 66 44 69 79 62 7a 6b 42 39 66 6b 45 41 54 63 34 67 54 77 37 2b 6a 70 41 63 76 55 42 51 66 75 31 4f 66 32 33 64 34 65 33 78 2f 77 45 50 66 69 34 50 6e 39 47 67 51 6a 4c 69 33 39 41 68 50 31 36 43 67 6c 4c 41 4d 38 4c 54 30 38 38 52 2f 35 2f 54 41 57 49 53 63 30 47 51 59 61 53 55 34 58 48 6b 30 50 47 79 4a 43 52 68 38 6d 52 6c 49 6a 4b 6b 6f 38 4a 79 35 4f 54 69 73 79 55 6b 34 76 4e 6c 63 34 4d 7a 70 62 4e 6d 39 65 62 69 77 75 51 6d 4e 4b 51 6d 30 34 4f 56 68 70 5a 46 56 61 4f 46 56 4b 64 46 57 45 54 33 68 45 68 Data Ascii: eiycajos+jvaGJzY6l1M2zo9nVybLes8214LeeteXh1N/hvqKo6evB7NGz9eb0xuivtPbNs77e9NrxwtMG2fDiybzkB9fkEATc4gTw7+jpAcvUBQfu1Of23d4e3x/wEPfi4Pn9GgQjLi39AhP16CglLAM8LT088R/5/TAWISc0GQYaSU4XHk0PGyJCRh8mRlIjKko8Jy5OTisyUk4vNlc4MzpbNm9ebiwuQmNKQm04OVhpZFVaOFVKdFWET3hEh
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 71 79 6f 32 68 77 71 4f 65 70 63 61 68 32 73 6e 5a 6c 35 6d 74 7a 72 57 74 32 4b 4f 6b 77 39 54 49 32 2b 47 37 32 71 6d 35 79 4b 61 34 34 39 72 69 76 4d 66 49 31 38 66 52 78 4e 50 4f 79 50 53 78 30 4d 7a 51 39 74 6e 4f 33 4e 54 6f 42 39 50 38 31 4e 76 49 2b 4d 76 77 2f 4d 7a 67 30 2b 7a 77 30 2f 49 5a 39 4e 66 31 43 64 6f 4c 39 2f 6a 38 33 77 45 41 2b 51 41 58 43 43 4c 35 2b 68 38 69 45 65 50 37 43 44 4c 39 43 41 59 77 4b 44 49 53 39 69 77 32 46 6b 49 58 44 6a 6f 6a 51 6a 38 2b 4f 7a 6b 4b 48 45 45 59 46 31 41 6f 51 68 74 54 53 43 77 72 49 69 59 6d 4a 56 30 6c 4e 78 6c 4a 48 45 46 52 4d 46 70 64 5a 55 5a 41 49 54 4e 71 4a 54 74 49 50 47 78 4a 54 57 5a 53 54 6c 4a 56 56 45 68 37 64 6b 70 58 4f 6a 5a 5a 54 56 46 32 67 47 4a 69 56 45 56 5a 61 46 39 33 65 6f Data Ascii: qyo2hwqOepcah2snZl5mtzrWt2KOkw9TI2+G72qm5yKa449rivMfI18fRxNPOyPSx0MzQ9tnO3NToB9P81NvI+Mvw/Mzg0+zw0/IZ9Nf1CdoL9/j83wEA+QAXCCL5+h8iEeP7CDL9CAYwKDIS9iw2FkIXDjojQj8+OzkKHEEYF1AoQhtTSCwrIiYmJV0lNxlJHEFRMFpdZUZAITNqJTtIPGxJTWZSTlJVVEh7dkpXOjZZTVF2gGJiVEVZaF93eo
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 6f 4c 2b 6c 31 38 71 38 74 4b 69 75 6c 62 69 73 73 4e 62 61 34 62 71 30 75 63 47 30 78 72 54 46 71 4e 72 65 30 4f 43 2f 39 65 7a 30 32 4d 44 4b 78 38 76 53 37 72 37 58 31 4f 6e 53 34 4e 48 56 33 74 51 44 30 74 37 55 32 2f 6a 48 36 50 73 54 2f 66 50 71 37 4d 2f 72 44 75 72 53 37 39 4c 36 47 78 76 76 2b 53 51 50 41 64 2f 31 48 2f 37 6f 4a 66 51 41 36 4f 63 4a 47 76 6f 64 37 51 38 42 4a 41 67 75 41 79 6f 6c 4c 66 67 37 45 7a 48 38 50 78 63 31 2f 55 67 46 50 55 68 47 4e 45 6c 4b 54 77 39 53 48 30 4d 6d 50 69 51 4f 46 68 51 31 49 77 34 70 4b 53 30 38 58 44 34 38 51 47 41 75 59 6b 55 69 55 31 6c 57 57 53 31 77 4c 6e 4a 4e 63 57 46 4a 4e 47 31 4c 4d 7a 5a 4a 65 6e 68 5a 56 6b 74 42 58 56 70 52 56 6c 64 51 55 34 68 72 5a 32 68 38 61 57 5a 62 53 6e 31 4e 62 59 39 Data Ascii: oL+l18q8tKiulbissNba4bq0ucG0xrTFqNre0OC/9ez02MDKx8vS7r7X1OnS4NHV3tQD0t7U2/jH6PsT/fPq7M/rDurS79L6Gxvv+SQPAd/1H/7oJfQA6OcJGvod7Q8BJAguAyolLfg7EzH8Pxc1/UgFPUhGNElKTw9SH0MmPiQOFhQ1Iw4pKS08XD48QGAuYkUiU1lWWS1wLnJNcWFJNG1LMzZJenhZVktBXVpRVldQU4hrZ2h8aWZbSn1NbY9
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 5a 6e 5a 32 37 57 38 77 70 36 36 75 70 2f 68 6f 73 6e 71 35 65 54 6f 70 63 50 70 76 73 76 74 39 62 37 50 38 38 2b 78 77 76 72 6e 33 64 76 63 33 72 6e 75 76 77 48 54 76 51 50 58 30 51 6b 46 44 75 6a 39 34 38 72 66 79 66 73 46 43 4d 2f 75 44 64 4c 56 32 39 50 7a 41 42 6a 64 47 52 50 39 38 50 44 6d 37 2f 7a 2b 42 41 67 47 41 51 72 6d 4b 50 34 50 41 4f 77 53 4e 6a 49 32 41 78 63 6f 46 50 51 48 50 7a 67 56 49 42 41 46 49 79 51 55 52 51 51 61 51 79 4d 4e 53 52 6b 63 50 77 77 64 4e 42 39 56 54 53 35 4a 4d 56 31 50 53 69 68 4b 4c 55 34 73 49 7a 46 53 4d 47 49 31 56 6a 64 57 4f 56 6f 37 50 30 64 42 50 6d 56 6e 59 6b 4d 76 55 32 73 31 4e 47 56 48 55 47 42 34 55 46 70 79 59 46 6d 46 55 6d 4b 43 56 31 52 2f 68 58 31 34 61 49 4e 62 6b 34 74 51 63 5a 68 59 57 48 64 6b Data Ascii: ZnZ27W8wp66up/hosnq5eTopcPpvsvt9b7P88+xwvrn3dvc3rnuvwHTvQPX0QkFDuj948rfyfsFCM/uDdLV29PzABjdGRP98PDm7/z+BAgGAQrmKP4PAOwSNjI2AxcoFPQHPzgVIBAFIyQURQQaQyMNSRkcPwwdNB9VTS5JMV1PSihKLU4sIzFSMGI1VjdWOVo7P0dBPmVnYkMvU2s1NGVHUGB4UFpyYFmFUmKCV1R/hX14aINbk4tQcZhYWHdk
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 75 57 76 75 66 49 70 64 37 69 7a 4a 37 61 36 4d 47 6d 76 76 4f 79 76 38 66 71 78 2f 6e 45 2b 65 50 53 75 66 57 38 41 62 2f 2b 31 62 33 77 42 75 2f 61 79 51 72 64 43 74 30 49 7a 41 62 6a 42 4f 62 4e 45 52 51 41 79 68 55 62 32 50 4c 79 46 76 44 75 47 78 6e 67 48 51 41 6e 45 69 45 6b 4a 50 34 70 49 53 30 6f 4d 51 6f 71 48 66 34 4f 4e 44 4d 51 42 53 33 36 48 42 41 32 2f 50 30 41 50 77 45 39 49 55 41 5a 47 30 56 41 4e 53 4d 70 53 43 56 4e 45 45 6f 6e 4a 7a 46 4d 46 52 5a 4d 56 44 46 52 4f 56 68 4b 54 6a 4e 64 58 6a 77 79 57 7a 67 66 4e 57 42 6b 58 55 6c 70 4c 32 46 53 61 7a 49 2f 63 48 68 69 4e 6a 56 30 54 69 39 39 65 58 74 78 59 6f 4e 57 50 6e 4a 37 61 56 4f 43 66 59 5a 73 58 49 68 34 54 32 53 46 6a 4a 5a 2f 6c 6f 4f 4f 5a 4a 74 61 6d 5a 61 64 64 48 74 36 6d Data Ascii: uWvufIpd7izJ7a6MGmvvOyv8fqx/nE+ePSufW8Ab/+1b3wBu/ayQrdCt0IzAbjBObNERQAyhUb2PLyFvDuGxngHQAnEiEkJP4pIS0oMQoqHf4ONDMQBS36HBA2/P0APwE9IUAZG0VANSMpSCVNEEonJzFMFRZMVDFROVhKTjNdXjwyWzgfNWBkXUlpL2FSazI/cHhiNjV0Ti99eXtxYoNWPnJ7aVOCfYZsXIh4T2SFjJZ/loOOZJtamZaddHt6m
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 6c 76 63 66 73 71 63 48 4c 38 71 33 46 7a 36 32 78 79 64 4f 7a 74 63 33 58 74 72 6e 52 32 37 32 39 31 64 2f 43 77 64 6e 6a 79 63 58 64 35 38 7a 4a 34 65 76 44 7a 65 58 73 33 76 62 4e 37 4f 54 6f 30 2f 33 35 39 2f 6e 39 2b 66 33 77 2f 74 30 5a 2b 43 58 31 4a 43 4d 74 4b 79 59 62 4a 67 77 74 48 69 38 68 38 53 63 7a 42 78 59 58 50 42 6b 59 44 44 41 52 47 78 44 37 42 54 77 30 4d 7a 4d 56 54 42 30 4e 48 52 31 41 4b 53 63 75 46 46 49 70 53 42 52 55 4b 54 67 59 4e 6a 74 58 47 31 51 78 59 6d 42 42 50 6a 51 70 4f 45 56 64 61 32 4a 48 4a 32 73 78 53 32 59 73 63 45 74 34 56 32 56 47 65 33 64 53 54 6b 6c 42 61 31 4a 67 64 46 5a 6a 69 46 70 62 5a 33 78 75 61 56 39 49 59 59 5a 71 55 45 2b 45 5a 5a 65 48 61 48 4f 4e 56 57 31 6f 62 48 46 55 66 57 79 47 63 49 47 45 63 6e Data Ascii: lvcfsqcHL8q3Fz62xydOztc3XtrnR27291d/CwdnjycXd58zJ4evDzeXs3vbN7OTo0/359/n9+f3w/t0Z+CX1JCMtKyYbJgwtHi8h8SczBxYXPBkYDDARGxD7BTw0MzMVTB0NHR1AKScuFFIpSBRUKTgYNjtXG1QxYmBBPjQpOEVda2JHJ2sxS2YscEt4V2VGe3dSTklBa1JgdFZjiFpbZ3xuaV9IYYZqUE+EZZeHaHONVW1obHFUfWyGcIGEcn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49716	188.114.97.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:31 UTC	1008	OUT	GET /favicon.ico HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:31 UTC	1051	IN	HTTP/1.1 403 The gods of RaccoonO365 Service are wise, but they do not know what you seeks! Date: Mon, 07 Oct 2024 16:54:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Feature-Policy: camera 'none'; microphone 'none' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Powered-By: RaccoonO365 2FA/MFA Service X-Powered-CMS: RaccoonO365 2FA/MFA Service X-Robots-Tag: noindex, nofollow X-ServerName: RaccoonO365 X-ServerVersion: 3.5 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7kslwJ7PtU2qRDnv%2FLZcFji2kgp51744X2f0ejwvq9qc3YQZVY8X%2FhfuXBi8a2R9oSeLRuYEYfY5vOESwqIVw6cEM%2BHRX0XLu2jTnyoIwy9qcdBgZGg%2BoNKowrE3%2B6fkR88Fkb5wzziZxw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cef69ddbaa8c3f3-EWR
2024-10-07 16:54:31 UTC	318	IN	Data Raw: 31 63 62 62 0d 0a 0a 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 0a 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 76 61 72 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1cbb <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> </head> <body> <script> (function() { var obfuscateCode = function(
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 61 72 73 20 3d 20 7b 7d 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 63 6f 64 65 20 3d 20 63 6f 64 65 2e 72 65 70 6c 61 63 65 28 2f 76 61 72 73 2b 28 5b 61 2d 7a 41 2d 5a 5f 24 5d 5b 30 2d 39 61 2d 7a 41 2d 5a 5f 24 5d 2a 29 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 6d 61 74 63 68 2c 20 70 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 65 77 56 61 72 73 5b 70 31 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 56 61 72 73 5b 70 31 5d 20 3d 20 63 68 61 72 73 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 63 68 61 72 73 2e 6c 65 Data Ascii: FGHIJKLMNOPQRSTUVWXYZ'; var newVars = {}; code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) { if (!newVars[p1]) { newVars[p1] = chars[Math.floor(Math.random() chars.le
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 26 23 34 33 3b 26 23 35 34 3b 26 23 35 39 3b 26 23 35 30 3b 26 23 34 35 3b 26 23 32 30 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 36 35 3b 26 23 36 31 3b 26 23 36 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 36 31 3b 26 23 32 30 3b 26 23 36 65 3b 26 23 36 31 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 33 64 3b 26 23 32 32 3b 26 23 37 32 3b 26 23 36 66 3b 26 23 36 32 3b 26 23 36 66 3b 26 23 37 34 3b 26 23 37 33 3b 26 23 32 32 3b Data Ascii: +6;2-DJ&#6d;&#6c;&#3e;&#0a;&#3c;DJ&#6d;&#6c;&#3e;&#0a;&#3c;DA=@&#3e;&#0a;&#3c;&#6d;AJ=&#6e;=&#6d;A&#3d;H&#6f;>&#6f;JI
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 36 3b 26 23 36 31 3b 26 23 37 32 3b 26 23 32 30 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 30 3b 26 23 33 64 3b 26 23 32 30 3b 26 23 32 32 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 37 34 3b 26 23 37 30 3b 26 23 37 33 3b 26 23 33 61 3b 26 23 32 66 3b 26 23 32 66 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 32 65 3b 26 23 36 66 3b 26 23 36 36 3b 26 23 36 36 3b 26 23 36 39 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 32 65 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 64 3b 26 23 32 66 3b 26 23 32 32 Data Ascii: ;L=HH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3d;DJJFI&#3a;&#2f;&#2f;MMM&#2e;&#6f;BBE?A&#2e;?&#6f;&#6d;&#2f;&#22
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 32 3b 26 23 36 35 3b 26 23 37 30 3b 26 23 36 63 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 32 38 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 32 30 3b 26 23 33 31 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 37 34 3b 26 23 36 Data Ascii: 2;AF&#6c;=?AH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3b;&#7d;&#2c;&#3b;&#7d;&#2c;&#0a;BK&#6e;?J&#6
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 36 65 3b 26 23 36 33 3b 26 23 32 39 3b 26 23 32 30 3b 26 23 37 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 37 33 3b 26 23 36 33 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 37 30 3b 26 23 37 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 36 32 3b 26 23 Data Ascii: 6e;?&#7b;&#0a;BK&#6e;?&#3b;&#0a;&#7d;&#3b;&#0a;&#3c;&#2f;I?HEFJ&#3e;&#0a;&#3c;&#2f;>&#
2024-10-07 16:54:31 UTC	200	IN	Data Raw: 61 74 65 64 43 6f 64 65 20 3d 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 28 63 6f 64 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 6f 62 66 75 73 63 61 74 65 64 43 6f 64 65 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 65 78 65 63 75 74 65 44 65 63 6f 64 65 64 43 6f 6e 74 65 6e 74 28 29 3b 0a 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 7d 29 28 29 3b 0a 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 0a 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 3c 2f 68 74 6d 6c 3e 0a 20 20 20 20 20 20 0d 0a Data Ascii: atedCode = obfuscateCode(code); script.textContent = obfuscatedCode; executeDecodedContent(); }); })(); </script> </body> </html>
2024-10-07 16:54:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49715	188.114.96.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:31 UTC	422	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8cef69cd4bf56a5c HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:31 UTC	674	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:31 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 153723 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4o%2BRACEgvvlnq%2F2yRphWrvemwG5Hss8hokZOeAuR3WfzEHfRnPkq%2BYYcvSTRHWi6XLvhUaIctflfOdkhfujyAvY8Z7fgSwHxkBC8uDt1HMXiP%2FGydwVZXwPrB2thvnCm1doQ%2FSJDz2tygw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cef69de89df42c3-EWR alt-svc: h3=":443"; ma=86400
2024-10-07 16:54:31 UTC	695	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 25 32 30 74 6f 25 32 30 70 72 6f 74 65 63 74 25 32 30 61 67 61 69 6e 73 74 25 32 30 6d 61 6c 69 63 69 6f 75 73 25 32 30 62 6f 74 73 2e 25 32 30 59 6f 75 25 32 30 6d 61 79 25 32 30 73 65 65 25 32 30 74 68 69 73 25 32 30 70 61 67 65 25 32 30 77 68 69 6c 65 25 32 30 74 68 65 25 32 30 73 69 74 65 25 32 30 76 65 72 69 66 69 65 73 25 32 30 79 6f 75 25 32 37 72 65 25 32 30 6e 6f 74 25 32 30 61 25 32 30 62 6f 74 2e 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 Data Ascii: %20to%20protect%20against%20malicious%20bots.%20You%20may%20see%20this%20page%20while%20the%20site%20verifies%20you%27re%20not%20a%20bot.","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 72 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 75 70 64 61 74 65 64 25 32 30 74 6f 25 32 30 74 68 65 25 32 30 6e 65 77 65 73 74 25 32 30 76 65 72 73 69 6f 6e 2e 22 2c 22 72 65 64 69 72 65 63 74 69 6e 67 5f 74 65 78 74 5f 6f 76 65 72 72 75 6e 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 25 32 30 74 6f 25 32 30 72 65 70 6c 79 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 Data Ascii: re%20your%20browser%20is%20updated%20to%20the%20newest%20version.","redirecting_text_overrun":"%25%7Bplaceholder.com%7D%20is%20taking%20longer%20than%20expected%20to%20reply.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 3a 22 25 33 43 61 Data Ascii: noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","time_check_cached_warning_aux":"%3Ca
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 42 28 39 33 30 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 42 28 31 31 37 35 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 42 28 31 31 30 33 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 42 28 39 35 39 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 42 28 33 34 39 29 29 2f 38 2a 28 70 61 72 73 65 49 6e 74 28 67 42 28 34 37 39 29 29 2f 39 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 42 28 33 37 35 29 29 2f 31 30 2b 70 61 72 73 65 49 6e 74 28 67 42 28 31 30 35 31 29 29 2f 31 31 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 36 31 35 32 35 35 29 2c 65 Data Ascii: ))/3(-parseInt(gB(930))/4)+-parseInt(gB(1175))/5(-parseInt(gB(1103))/6)+parseInt(gB(959))/7+parseInt(gB(349))/8*(parseInt(gB(479))/9)+-parseInt(gB(375))/10+parseInt(gB(1051))/11,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,615255),e
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 79 4d 69 48 73 27 3a 67 44 28 32 38 39 29 2c 27 66 74 5a 78 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 56 78 4f 74 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 65 73 67 49 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 64 76 6c 6b 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 53 50 62 56 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 4a 76 4e 62 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4a 4d 45 74 50 27 3a 66 75 6e Data Ascii: ion(h,i){return h&i},'yMiHs':gD(289),'ftZxi':function(h,i){return h(i)},'VxOtE':function(h,i){return h*i},'esgIn':function(h,i){return h<i},'dvlkr':function(h,i){return i!=h},'SPbVn':function(h,i){return h&i},'JvNbO':function(h,i){return h(i)},'JMEtP':fun
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 64 5b 67 47 28 38 39 37 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 67 47 28 39 37 32 29 5d 28 48 3c 3c 31 2e 38 34 2c 64 5b 67 47 28 31 30 31 38 29 5d 28 4d 2c 31 29 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 47 28 35 35 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 43 3d 28 44 2d 2d 2c 64 5b 67 47 28 36 30 34 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 67 47 28 37 37 34 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 64 5b 67 47 28 37 35 33 29 5d 28 53 74 72 69 6e 67 2c 4b 29 29 7d 69 66 28 27 27 21 3d 3d 43 29 7b 69 66 28 4f 62 6a 65 63 74 5b 67 47 28 33 31 35 29 5d 5b 67 47 28 31 31 37 38 29 5d 5b 67 47 28 31 30 33 32 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 67 47 28 35 Data Ascii: d[gG(897)](s,F);H=d[gG(972)](H<<1.84,d[gG(1018)](M,1)),j-1==I?(I=0,G[gG(559)](o(H)),H=0):I++,M>>=1,s++);C=(D--,d[gG(604)](0,D)&&(D=Math[gG(774)](2,F),F++),x[L]=E++,d[gG(753)](String,K))}if(''!==C){if(Object[gG(315)][gG(1178)][gG(1032)](B,C)){if(256>C[gG(5
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4f 2c 4c 2c 4d 2c 4e 2c 51 29 7b 66 6f 72 28 67 4b 3d 67 44 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 4b 28 37 37 34 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 64 5b 67 4b 28 31 30 39 34 29 5d 28 46 2c 4b 29 3b 29 66 6f 72 28 4c 3d 67 4b 28 37 39 38 29 5b 67 4b 28 31 31 33 30 29 5d 28 27 7c 27 29 2c 4d 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 4c 5b 4d 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 4e 3d 47 26 48 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 46 3c 3c 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 Data Ascii: ,B,C,D,E,F,G,H,I,J,K,O,L,M,N,Q){for(gK=gD,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[gK(774)](2,2),F=1;d[gK(1094)](F,K);)for(L=gK(798)[gK(1130)]('\|'),M=0;!![];){switch(L[M++]){case'0':N=G&H;continue;case'1':F<<=1;continue;cas
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 2b 2b 29 2c 73 5b 4f 5d 29 4f 3d 73 5b 4f 5d 3b 65 6c 73 65 20 69 66 28 4f 3d 3d 3d 42 29 4f 3d 45 2b 45 5b 67 4b 28 36 36 35 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 44 5b 67 4b 28 35 35 39 29 5d 28 4f 29 2c 73 5b 42 2b 2b 5d 3d 45 2b 4f 5b 67 4b 28 36 36 35 29 5d 28 30 29 2c 78 2d 2d 2c 45 3d 4f 2c 64 5b 67 4b 28 31 33 36 35 29 5d 28 30 2c 78 29 26 26 28 78 3d 4d 61 74 68 5b 67 4b 28 37 37 34 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 67 44 28 31 33 30 34 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 65 4d 5b 67 43 28 37 31 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 67 58 2c 65 29 7b 65 3d 28 67 58 3d 67 43 2c 7b 27 45 6b 78 76 77 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 3c 68 Data Ascii: ++),s[O])O=s[O];else if(O===B)O=E+E[gK(665)](0);else return null;D[gK(559)](O),s[B++]=E+O[gK(665)](0),x--,E=O,d[gK(1365)](0,x)&&(x=Math[gK(774)](2,C),C++)}}},g={},g[gD(1304)]=f.h,g}(),eM[gC(714)]=function(c,gX,e){e=(gX=gC,{'Ekxvw':function(g,h){return g<h
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 5b 44 5d 29 2c 68 32 28 33 35 36 29 3d 3d 3d 6f 5b 68 32 28 35 34 30 29 5d 28 69 2c 44 29 3f 6f 5b 68 32 28 32 37 31 29 5d 28 73 2c 6f 5b 68 32 28 33 31 37 29 5d 28 69 2c 44 29 2c 45 29 3a 46 7c 7c 73 28 6f 5b 68 32 28 37 39 30 29 5d 28 69 2c 44 29 2c 68 5b 44 5d 29 29 3a 6f 5b 68 32 28 37 31 37 29 5d 28 73 2c 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 68 31 29 7b 68 31 3d 62 2c 4f 62 6a 65 63 74 5b 68 31 28 33 31 35 29 5d 5b 68 31 28 31 31 37 38 29 5d 5b 68 31 28 31 30 33 32 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 68 31 28 35 35 39 29 5d 28 47 29 7d 7d 2c 65 58 3d 67 43 28 33 37 33 29 5b 67 43 28 31 31 33 30 29 5d 28 27 3b 27 29 2c 65 59 3d 65 58 5b 67 43 28 Data Ascii: [D]),h2(356)===o[h2(540)](i,D)?o[h2(271)](s,o[h2(317)](i,D),E):F\|\|s(o[h2(790)](i,D),h[D])):o[h2(717)](s,i+D,E),C++);return j;function s(G,H,h1){h1=b,Object[h1(315)][h1(1178)][h1(1032)](j,H)\|\|(j[H]=[]),j[H][h1(559)](G)}},eX=gC(373)[gC(1130)](';'),eY=eX[gC(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49717	104.18.95.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:31 UTC	413	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:31 UTC	441	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:31 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8cef69df4e8041d9-EWR
2024-10-07 16:54:31 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-10-07 16:54:31 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49720	104.18.94.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:31 UTC	764	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:32 UTC	1369	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164857 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-resource-policy: cross-origin referrer-policy: same-origin cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() document-policy: js-profiling cross-origin-embedder-policy: require-corp content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self'
2024-10-07 16:54:32 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 65 66 36 39 65 31 62 39 37 38 30 63 65 64 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8cef69e1b9780ced-EWR
2024-10-07 16:54:32 UTC	1317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 Data Ascii: %;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-web
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 Data Ascii: ght:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;st
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e Data Ascii: allenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challen
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 Data Ascii: dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: ,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-dasharray:166;stroke-dashoffse
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c Data Ascii: n:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-start;display:flex;flex-flow:col
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 Data Ascii: rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c Data Ascii: challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#chall

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49722	188.114.96.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:32 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1310495476:1728318649:pB1YPIUF28SWt_BWZWhfGh-z19KQZFWcJJIavfqK3kM/8cef69cd4bf56a5c/0adb6525cba31fd HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:32 UTC	684	IN	HTTP/1.1 404 Not Found Date: Mon, 07 Oct 2024 16:54:32 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: BseUye9QjTFSOk2R/g30QSUUooLn1ad3CfI=$77AuwC/wHn5muina cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7AaAXl1fkKAQZdLjCktGHOvXfSo7lkkyVaYjpCLDMsR4wP8NzLMs3A2FE3kIpmFE1LWKfUp07iiJb78bIDgasJi25u6cfrkaKWLso%2BJ2k3by1NOESr9uwud8mNiUvWq8xLfFP6Z54yGiCA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cef69e488a05e72-EWR
2024-10-07 16:54:32 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49723	104.18.94.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:32 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cef69e1b9780ced&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:32 UTC	301	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:32 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117437 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cef69e59a8f726e-EWR
2024-10-07 16:54:32 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 Data Ascii: 0of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 65 49 6e 74 28 67 48 28 31 35 34 38 29 29 2f 31 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 48 28 31 32 34 31 29 29 2f 31 32 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 36 33 39 36 30 33 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 38 33 33 29 5d 2c 65 4f 3d 5b 5d 2c 65 50 3d 30 3b 32 35 36 3e 65 50 3b 65 4f 5b 65 50 5d 3d 53 74 72 69 6e 67 5b 67 49 28 31 30 36 36 29 5d 28 65 50 29 2c 65 50 2b 2b 29 3b 65 51 3d 28 30 2c 65 76 61 6c 29 28 67 49 28 36 31 32 29 29 2c 65 52 3d 61 74 6f 62 28 67 49 28 35 34 36 29 29 2c 65 4d 5b 67 49 28 39 31 32 29 5d 3d 21 5b 5d 2c 65 4d 5b Data Ascii: eInt(gH(1548))/11*(-parseInt(gH(1241))/12),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,639603),eM=this\|\|self,eN=eM[gI(833)],eO=[],eP=0;256>eP;eO[eP]=String[gI(1066)](eP),eP++);eQ=(0,eval)(gI(612)),eR=atob(gI(546)),eM[gI(912)]=![],eM[
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4a 44 6e 78 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 57 65 7a 6b 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 57 49 72 6d 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 70 55 41 75 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 64 69 62 61 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 70 69 63 45 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 52 48 75 62 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 Data Ascii: :function(h,i){return h(i)},'JDnxZ':function(h,i){return h\|i},'WezkJ':function(h,i){return h&i},'WIrmu':function(h,i){return h<<i},'pUAux':function(h,i){return h==i},'dibaE':function(h,i){return h-i},'picEH':function(h,i){return h(i)},'RHubB':function(h,i
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 4f 2c 50 29 7d 2c 27 50 61 6e 45 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 69 32 29 7b 72 65 74 75 72 6e 20 69 32 3d 62 2c 64 5b 69 32 28 31 37 31 34 29 5d 28 4f 2c 50 29 7d 2c 27 44 78 6d 6d 61 27 3a 69 33 28 38 32 39 29 2c 27 78 42 48 46 79 27 3a 64 5b 69 33 28 31 31 39 35 29 5d 2c 27 41 41 50 5a 56 27 3a 69 33 28 35 39 34 29 7d 2c 69 33 28 31 33 31 30 29 21 3d 3d 69 33 28 31 33 31 30 29 29 50 3d 73 5b 69 33 28 31 37 31 39 29 5d 28 73 5b 69 33 28 31 37 31 39 29 5d 28 74 68 69 73 2e 68 5b 31 35 32 2e 33 38 5e 74 68 69 73 2e 67 5d 5b 33 5d 2c 31 37 36 2b 74 68 69 73 2e 68 5b 73 5b 69 33 28 31 35 35 38 29 5d 28 31 35 32 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 69 33 28 38 34 30 29 5d 28 74 68 69 73 2e 68 5b 73 5b 69 33 28 37 32 36 29 5d 28 31 35 32 2c Data Ascii: O,P)},'PanEl':function(O,P,i2){return i2=b,d[i2(1714)](O,P)},'Dxmma':i3(829),'xBHFy':d[i3(1195)],'AAPZV':i3(594)},i3(1310)!==i3(1310))P=s[i3(1719)](s[i3(1719)](this.h[152.38^this.g][3],176+this.h[s[i3(1558)](152,this.g)][1][i3(840)](this.h[s[i3(726)](152,
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 5d 28 38 2c 78 29 3b 49 3d 64 5b 69 33 28 31 34 33 34 29 5d 28 49 3c 3c 31 2c 64 5b 69 33 28 38 39 36 29 5d 28 4e 2c 31 29 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 69 33 28 36 37 38 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4e 3d 31 2c 78 3d 30 3b 64 5b 69 33 28 38 31 39 29 5d 28 78 2c 47 29 3b 49 3d 49 3c 3c 31 2e 33 38 7c 4e 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 69 33 28 36 37 38 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 69 33 28 38 34 30 29 5d 28 30 29 2c 78 3d 30 3b 31 36 3e 78 3b 49 3d 49 3c 3c 31 7c 64 5b 69 33 28 38 39 36 29 5d 28 4e 2c 31 29 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 69 33 28 36 Data Ascii: ](8,x);I=d[i3(1434)](I<<1,d[i3(896)](N,1)),J==j-1?(J=0,H[i3(678)](o(I)),I=0):J++,N>>=1,x++);}else{for(N=1,x=0;d[i3(819)](x,G);I=I<<1.38\|N,J==j-1?(J=0,H[i3(678)](o(I)),I=0):J++,N=0,x++);for(N=D[i3(840)](0),x=0;16>x;I=I<<1\|d[i3(896)](N,1),j-1==J?(J=0,H[i3(6
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 28 4a 3d 30 2c 48 5b 69 33 28 36 37 38 29 5d 28 64 5b 69 33 28 37 37 37 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 45 3d 3d 30 26 26 28 45 3d 4d 61 74 68 5b 69 33 28 31 33 38 31 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 64 5b 69 33 28 38 31 39 29 5d 28 78 2c 47 29 3b 49 3d 64 5b 69 33 28 31 31 31 31 29 5d 28 64 5b 69 33 28 31 34 31 38 29 5d 28 49 2c 31 29 2c 64 5b 69 33 28 31 33 34 39 29 5d 28 4e 2c 31 29 29 2c 64 5b 69 33 28 38 35 39 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 69 33 28 36 37 38 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 45 2d 2d 2c 30 3d Data Ascii: (J=0,H[i3(678)](d[i3(777)](o,I)),I=0):J++,N>>=1,x++);}E--,E==0&&(E=Math[i3(1381)](2,G),G++),delete C[D]}else for(N=B[D],x=0;d[i3(819)](x,G);I=d[i3(1111)](d[i3(1418)](I,1),d[i3(1349)](N,1)),d[i3(859)](J,j-1)?(J=0,H[i3(678)](o(I)),I=0):J++,N>>=1,x++);E--,0=
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 46 3d 31 3b 64 5b 69 36 28 31 33 36 39 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 36 28 33 34 38 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4c 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4d 3d 64 5b 69 36 28 31 36 39 34 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 69 36 28 36 37 38 29 5d 28 4d 29 3b 3b 29 7b 69 66 28 64 5b 69 36 28 31 31 35 38 29 5d 28 49 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 36 28 31 33 38 31 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 64 5b 69 36 28 31 36 39 33 29 5d 28 30 2c 48 29 26 Data Ascii: F=1;d[i6(1369)](F,K);L=G&H,H>>=1,H==0&&(H=j,G=d[i6(348)](o,I++)),J\|=(0<L?1:0)*F,F<<=1);M=d[i6(1694)](e,J);break;case 2:return''}for(E=s[3]=M,D[i6(678)](M);;){if(d[i6(1158)](I,i))return'';for(J=0,K=Math[i6(1381)](2,C),F=1;K!=F;L=H&G,H>>=1,d[i6(1693)](0,H)&
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 64 5b 69 61 28 31 33 33 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 69 61 28 31 35 32 33 29 5d 28 31 65 33 2c 65 4d 5b 69 61 28 34 30 38 29 5d 5b 69 61 28 35 37 39 29 5d 28 65 5b 69 61 28 31 33 33 39 29 5d 28 32 2c 66 29 2c 33 32 29 29 2c 65 4d 5b 69 61 28 31 31 34 34 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 62 29 7b 69 62 3d 69 61 2c 65 4d 5b 69 62 28 38 32 39 29 5d 26 26 28 65 4d 5b 69 62 28 31 30 32 39 29 5d 5b 69 62 28 36 34 39 29 5d 28 29 2c 65 4d 5b 69 62 28 31 30 32 39 29 5d 5b 69 62 28 34 34 35 29 5d 28 29 2c 65 4d 5b 69 62 28 31 35 33 35 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 69 62 28 38 32 39 29 5d 5b 69 62 28 31 31 30 37 29 5d 28 Data Ascii: {return h*i},d[ia(1339)]=function(h,i){return h<<i},e=d,f=1,g=e[ia(1523)](1e3,eM[ia(408)][ia(579)](e[ia(1339)](2,f),32)),eM[ia(1144)](function(ib){ib=ia,eM[ib(829)]&&(eM[ib(1029)][ib(649)](),eM[ib(1029)][ib(445)](),eM[ib(1535)]=!![],eM[ib(829)][ib(1107)](
2024-10-07 16:54:32 UTC	1369	IN	Data Raw: 5b 69 63 28 31 37 36 37 29 5d 29 2c 78 5b 69 63 28 31 33 33 35 29 5d 28 6b 5b 69 63 28 31 37 30 35 29 5d 28 27 76 5f 27 2c 65 4d 5b 69 63 28 37 31 33 29 5d 5b 69 63 28 37 36 34 29 5d 29 2b 27 3d 27 2b 45 29 7d 63 61 74 63 68 28 46 29 7b 7d 7d 2c 65 4d 5b 67 49 28 31 32 37 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 2c 66 2c 67 2c 69 64 2c 68 2c 69 2c 6a 2c 6d 2c 6b 29 7b 69 66 28 69 64 3d 67 49 2c 68 3d 7b 27 4c 67 77 6d 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6d 3d 3d 3d 6c 7d 2c 27 75 4a 66 74 79 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 6c 28 29 7d 2c 27 77 62 6d 4c 59 27 3a 69 64 28 38 32 39 29 2c 27 6f 5a 69 64 55 27 3a 69 64 28 34 38 37 29 2c 27 45 77 69 58 76 27 3a 69 64 28 35 39 32 29 Data Ascii: [ic(1767)]),x[ic(1335)](k[ic(1705)]('v_',eM[ic(713)][ic(764)])+'='+E)}catch(F){}},eM[gI(1273)]=function(c,d,e,f,g,id,h,i,j,m,k){if(id=gI,h={'LgwmZ':function(l,m){return m===l},'uJfty':function(l){return l()},'wbmLY':id(829),'oZidU':id(487),'EwiXv':id(592)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49724	104.18.94.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:32 UTC	796	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:32 UTC	210	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:32 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8cef69e70d990cc4-EWR
2024-10-07 16:54:32 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49726	104.18.95.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:33 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:33 UTC	210	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:33 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8cef69ebff39436d-EWR
2024-10-07 16:54:33 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49727	104.18.95.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:33 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cef69e1b9780ced&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:33 UTC	301	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:33 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 121654 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cef69ec0a3080e0-EWR
2024-10-07 16:54:33 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6c 6f 6e 67 65 72 5f 74 68 61 6e 5f 65 78 70 65 63 74 65 64 22 3a 22 25 33 43 61 25 32 30 68 72 65 66 25 33 44 25 32 32 25 32 33 25 32 32 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 52 65 66 72 65 73 68 25 33 43 25 32 46 61 25 33 45 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 Data Ascii: erifying...","turnstile_refresh":"Refresh","turnstile_longer_than_expected":"%3Ca%20href%3D%22%23%22%20class%3D%22refresh_link%22%3ERefresh%3C%2Fa%3E","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20per
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 66 74 28 29 29 7d 7d 28 61 2c 38 30 32 33 35 39 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 49 28 31 32 36 30 29 5d 2c 65 4f 3d 7b 7d 2c 65 4f 5b 67 49 28 31 33 37 31 29 5d 3d 27 6f 27 2c 65 4f 5b 67 49 28 31 30 30 38 29 5d 3d 27 73 27 2c 65 4f 5b 67 49 28 31 32 30 39 29 5d 3d 27 75 27 2c 65 4f 5b 67 49 28 34 39 35 29 5d 3d 27 7a 27 2c 65 4f 5b 67 49 28 31 31 30 38 29 5d 3d 27 6e 27 2c 65 4f 5b 67 49 28 31 31 32 35 29 5d 3d 27 49 27 2c 65 50 3d 65 4f 2c 65 4d 5b 67 49 28 31 35 30 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 67 4e 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 67 4e 3d 67 49 2c 6f 3d 7b 27 66 47 79 6a 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c Data Ascii: ft())}}(a,802359),eM=this\|\|self,eN=eM[gI(1260)],eO={},eO[gI(1371)]='o',eO[gI(1008)]='s',eO[gI(1209)]='u',eO[gI(495)]='z',eO[gI(1108)]='n',eO[gI(1125)]='I',eP=eO,eM[gI(1504)]=function(g,h,i,j,gN,o,x,B,C,D,E,F){if(gN=gI,o={'fGyjo':function(G,H){return G+H},
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 28 67 50 28 38 39 32 29 2c 67 50 28 31 34 36 36 29 29 29 6e 5b 67 50 28 31 33 35 33 29 5d 26 26 28 76 3d 7b 7d 2c 76 5b 67 50 28 31 31 32 39 29 5d 3d 67 50 28 31 33 34 30 29 2c 76 5b 67 50 28 32 37 36 29 5d 3d 6a 5b 67 50 28 37 30 30 29 5d 5b 67 50 28 32 35 30 29 5d 2c 76 5b 67 50 28 39 32 30 29 5d 3d 67 50 28 39 33 32 29 2c 69 5b 6b 5b 67 50 28 36 30 38 29 5d 5d 5b 67 50 28 31 35 32 29 5d 28 76 2c 27 2a 27 29 29 3b 65 6c 73 65 20 69 66 28 6e 3d 6c 5b 6d 5d 2c 6e 3d 3d 3d 27 66 27 26 26 28 6e 3d 27 4e 27 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6f 3c 69 5b 6c 5b 6d 5d 5d 5b 67 50 28 34 39 37 29 5d 3b 2d 31 3d 3d 3d 68 5b 6e 5d 5b 67 50 28 31 36 33 36 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 26 26 28 65 55 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c Data Ascii: (gP(892),gP(1466)))n[gP(1353)]&&(v={},v[gP(1129)]=gP(1340),v[gP(276)]=j[gP(700)][gP(250)],v[gP(920)]=gP(932),i[k[gP(608)]][gP(152)](v,'*'));else if(n=l[m],n==='f'&&(n='N'),h[n]){for(o=0;o<i[l[m]][gP(497)];-1===h[n][gP(1636)](i[l[m]][o])&&(eU(i[l[m]][o])\|\|
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 2c 67 54 28 37 31 30 29 29 2c 6d 3d 65 4d 5b 67 54 28 37 30 30 29 5d 5b 67 54 28 31 31 32 34 29 5d 3f 27 68 2f 27 2b 65 4d 5b 67 54 28 37 30 30 29 5d 5b 67 54 28 31 31 32 34 29 5d 2b 27 2f 27 3a 27 27 2c 6e 3d 6b 5b 67 54 28 31 31 38 32 29 5d 28 6b 5b 67 54 28 31 35 39 36 29 5d 28 6b 5b 67 54 28 37 37 32 29 5d 28 67 54 28 38 37 33 29 2b 6d 2c 6b 5b 67 54 28 34 39 33 29 5d 29 2c 31 29 2b 67 54 28 31 32 39 36 29 2b 65 4d 5b 67 54 28 37 30 30 29 5d 5b 67 54 28 35 37 32 29 5d 2b 27 2f 27 2b 65 4d 5b 67 54 28 37 30 30 29 5d 5b 67 54 28 35 34 39 29 5d 2c 27 2f 27 29 2b 65 4d 5b 67 54 28 37 30 30 29 5d 5b 67 54 28 31 31 35 32 29 5d 2c 6f 3d 7b 7d 2c 6f 5b 67 54 28 31 35 37 36 29 5d 3d 65 4d 5b 67 54 28 37 30 30 29 5d 5b 67 54 28 31 35 37 36 29 5d 2c 6f 5b 67 54 Data Ascii: ,gT(710)),m=eM[gT(700)][gT(1124)]?'h/'+eM[gT(700)][gT(1124)]+'/':'',n=k[gT(1182)](k[gT(1596)](k[gT(772)](gT(873)+m,k[gT(493)]),1)+gT(1296)+eM[gT(700)][gT(572)]+'/'+eM[gT(700)][gT(549)],'/')+eM[gT(700)][gT(1152)],o={},o[gT(1576)]=eM[gT(700)][gT(1576)],o[gT
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 59 3d 7b 7d 2c 65 59 5b 67 49 28 31 31 34 32 29 5d 3d 65 58 2c 65 4d 5b 67 49 28 31 31 32 38 29 5d 3d 65 59 2c 66 30 3d 65 4d 5b 67 49 28 37 30 30 29 5d 5b 67 49 28 32 31 34 29 5d 5b 67 49 28 32 38 38 29 5d 2c 66 31 3d 65 4d 5b 67 49 28 37 30 30 29 5d 5b 67 49 28 32 31 34 29 5d 5b 67 49 28 31 30 37 39 29 5d 2c 66 63 3d 21 5b 5d 2c 66 70 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 49 28 31 33 30 31 29 5d 28 67 49 28 31 36 34 36 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 68 52 2c 64 2c 65 29 7b 68 52 3d 67 49 2c 64 3d 7b 27 48 52 7a 62 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 6d 50 48 72 58 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 2b 67 7d 2c 27 6f 75 42 70 62 27 3a 68 52 28 31 33 34 30 Data Ascii: Y={},eY[gI(1142)]=eX,eM[gI(1128)]=eY,f0=eM[gI(700)][gI(214)][gI(288)],f1=eM[gI(700)][gI(214)][gI(1079)],fc=![],fp=undefined,eM[gI(1301)](gI(1646),function(c,hR,d,e){hR=gI,d={'HRzbj':function(f){return f()},'mPHrX':function(f,g){return f+g},'ouBpb':hR(1340
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 72 41 58 7a 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 7a 79 56 6e 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 43 6d 44 72 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 46 79 73 49 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 58 62 4b 69 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 57 71 77 72 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 66 77 79 4c 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 Data Ascii: on(h,i){return h==i},'rAXzA':function(h,i){return h-i},'zyVnx':function(h,i){return h(i)},'CmDrE':function(h,i){return i==h},'FysIk':function(h,i){return h(i)},'XbKiA':function(h,i){return h<<i},'WqwrX':function(h,i){return h(i)},'fwyLC':function(h,i){ret
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 66 6d 63 70 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 4c 42 45 63 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 68 78 73 4f 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 64 69 66 53 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 6a 4a 77 76 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 69 45 28 31 33 39 37 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 66 2e 67 28 68 2c 36 2c Data Ascii: i){return h(i)},'fmcpq':function(h,i){return i&h},'LBEcb':function(h,i){return h(i)},'hxsOG':function(h,i){return i*h},'difSX':function(h,i){return i==h},'jJwvz':function(h,i){return i===h}},e=String[iE(1397)],f={'h':function(h){return h==null?'':f.g(h,6,
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 44 5d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 64 5b 69 47 28 31 32 37 36 29 5d 28 78 2c 47 29 3b 49 3d 64 5b 69 47 28 31 33 38 37 29 5d 28 49 2c 31 29 7c 64 5b 69 47 28 35 31 31 29 5d 28 4e 2c 31 29 2c 4a 3d 3d 64 5b 69 47 28 34 32 34 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 69 47 28 31 33 30 38 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 44 3d 28 45 2d 2d 2c 45 3d 3d 30 26 26 28 45 3d 4d 61 74 68 5b 69 47 28 31 32 38 32 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 42 5b 4d 5d 3d 46 2b 2b 2c 53 74 72 69 6e 67 28 4c 29 29 7d 69 66 28 27 27 21 3d 3d 44 29 7b 69 66 28 64 5b 69 47 28 38 31 38 29 5d 28 69 47 28 31 35 34 39 29 2c 64 5b 69 47 28 31 33 33 37 29 5d 29 29 43 5b 69 47 28 35 34 36 29 5d Data Ascii: D]}else for(N=B[D],x=0;d[iG(1276)](x,G);I=d[iG(1387)](I,1)\|d[iG(511)](N,1),J==d[iG(424)](j,1)?(J=0,H[iG(1308)](o(I)),I=0):J++,N>>=1,x++);D=(E--,E==0&&(E=Math[iG(1282)](2,G),G++),B[M]=F++,String(L))}if(''!==D){if(d[iG(818)](iG(1549),d[iG(1337)]))C[iG(546)]
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 31 2c 78 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 49 3c 3c 3d 31 2c 64 5b 69 47 28 34 34 33 29 5d 28 4a 2c 6a 2d 31 29 29 7b 69 66 28 64 5b 69 47 28 38 31 38 29 5d 28 69 47 28 36 32 34 29 2c 69 47 28 33 30 39 29 29 29 7b 48 5b 69 47 28 31 33 30 38 29 5d 28 6f 28 49 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 52 3d 6a 5b 69 47 28 38 33 33 29 5d 2c 53 3d 44 2e 69 64 2c 54 3d 69 5b 69 47 28 37 37 35 29 5d 28 69 47 28 34 36 31 29 29 2c 54 5b 69 47 28 36 30 31 29 5d 28 27 69 64 27 2c 69 47 28 39 36 31 29 2b 53 29 2c 55 3d 2f 5b 3f 21 2e 3a 5d 24 2f 2c 56 3d 55 5b 69 47 28 34 35 30 29 5d 28 52 29 2c 56 3f 54 5b 69 47 28 38 33 33 29 5d 3d 27 20 27 3a 54 5b 69 47 28 38 33 33 29 5d 3d 27 2e 20 27 2c 6a 5b 69 47 28 36 31 33 29 5d 28 54 29 7d 65 6c 73 65 20 4a 2b 2b Data Ascii: 1,x++);for(;;)if(I<<=1,d[iG(443)](J,j-1)){if(d[iG(818)](iG(624),iG(309))){H[iG(1308)](o(I));break}else R=j[iG(833)],S=D.id,T=i[iG(775)](iG(461)),T[iG(601)]('id',iG(961)+S),U=/[?!.:]$/,V=U[iG(450)](R),V?T[iG(833)]=' ':T[iG(833)]='. ',j[iG(613)](T)}else J++

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49729	104.18.94.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:33 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1366294320:1728318615:2JjXzTu9lqVz5H8mEaag0ElC5Asvh6dQXlCOiplaCUI/8cef69e1b9780ced/87b66ef02a7c392 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3882 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 87b66ef02a7c392 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:33 UTC	3882	OUT	Data Raw: 76 5f 38 63 65 66 36 39 65 31 62 39 37 38 30 63 65 64 3d 70 52 6a 25 32 62 44 2b 39 2b 52 2b 6d 2b 4c 6b 49 61 6b 49 54 2b 6b 72 33 4e 42 62 6b 50 49 42 49 76 57 72 66 38 74 49 58 4f 31 49 74 74 6b 4a 49 56 49 32 72 50 4e 36 74 73 6c 30 49 33 2b 4f 32 31 57 74 47 49 66 72 6b 6d 49 63 74 73 38 48 66 67 74 49 58 49 73 56 72 49 79 31 69 2b 49 37 66 30 74 33 38 49 4c 6d 79 36 48 64 6a 41 2b 33 4a 49 57 77 4b 45 6a 49 2d 70 72 73 62 43 6f 2b 73 4e 49 44 41 4c 63 5a 43 4d 43 6c 72 69 73 39 49 67 49 49 4e 2b 6b 57 6e 6a 6d 4b 6f 45 59 6d 4c 79 66 6c 79 36 54 37 66 49 6b 58 4b 2b 33 6b 33 49 6d 6a 4d 73 74 49 4f 45 2b 49 35 77 36 49 65 45 54 6a 69 49 73 30 49 41 47 38 30 33 36 62 77 6d 67 62 49 31 4e 49 53 2b 49 57 43 2b 73 57 2d 4a 36 49 47 2b 49 63 33 49 73 58 Data Ascii: v_8cef69e1b9780ced=pRj%2bD+9+R+m+LkIakIT+kr3NBbkPIBIvWrf8tIXO1IttkJIVI2rPN6tsl0I3+O21WtGIfrkmIcts8HfgtIXIsVrIy1i+I7f0t38ILmy6HdjA+3JIWwKEjI-prsbCo+sNIDALcZCMClris9IgIIN+kWnjmKoEYmLyfly6T7fIkXK+3k3ImjMstIOE+I5w6IeETjiIs0IAG8036bwmgbI1NIS+IWC+sW-J6IG+Ic3IsX
2024-10-07 16:54:33 UTC	749	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:33 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 155084 Connection: close cf-chl-gen: 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$IZx88MOna5dmRXVk Server: cloudflare CF-RAY: 8cef69ecda848c24-EWR
2024-10-07 16:54:33 UTC	620	IN	Data Raw: 6d 63 4c 46 77 70 75 64 77 72 65 45 75 4a 2b 4b 76 36 72 4a 69 73 4b 30 73 36 61 31 7a 38 2b 61 74 39 32 76 32 73 32 2f 6f 5a 33 4e 32 64 6d 76 75 4d 62 43 74 4f 44 4d 36 4f 44 58 34 38 2b 70 77 4e 37 65 35 75 54 4d 39 65 2f 74 39 4c 75 32 79 4c 33 52 77 72 6b 43 37 76 76 44 30 63 62 43 2b 2b 62 66 44 75 77 45 36 67 72 76 43 51 6e 77 39 74 44 36 44 50 44 38 46 41 38 64 2f 66 50 73 41 52 73 69 42 50 77 4a 4b 42 73 6d 35 69 45 69 45 41 41 6c 4a 68 30 70 4c 66 49 67 46 68 73 56 45 52 33 34 4c 7a 33 35 48 7a 6f 73 45 69 4d 2b 4d 44 30 66 47 45 45 34 51 79 38 4e 49 6b 78 55 48 7a 52 49 56 69 52 48 51 7a 4d 30 57 52 51 6e 47 46 64 4b 51 46 6c 63 48 7a 39 61 4a 53 67 35 59 47 52 71 58 6a 68 5a 5a 46 35 52 52 46 59 70 53 6b 45 7a 4d 30 67 37 64 44 39 58 4d 33 42 Data Ascii: mcLFwpudwreEuJ+Kv6rJisK0s6a1z8+at92v2s2/oZ3N2dmvuMbCtODM6ODX48+pwN7e5uTM9e/t9Lu2yL3RwrkC7vvD0cbC++bfDuwE6grvCQnw9tD6DPD8FA8d/fPsARsiBPwJKBsm5iEiEAAlJh0pLfIgFhsVER34Lz35HzosEiM+MD0fGEE4Qy8NIkxUHzRIViRHQzM0WRQnGFdKQFlcHz9aJSg5YGRqXjhZZF5RRFYpSkEzM0g7dD9XM3B
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 67 33 56 74 55 47 6c 33 57 35 78 33 6c 32 70 59 6c 49 42 36 66 71 64 2f 6d 34 4f 47 66 48 64 2b 72 34 43 4e 68 71 57 41 62 32 65 6f 6f 71 4b 59 70 58 56 31 70 37 32 72 65 59 32 59 66 6f 4e 2b 74 63 57 32 71 72 69 68 71 36 75 4c 6f 70 33 4e 79 4c 75 2b 30 61 43 33 7a 64 62 51 30 38 57 72 71 63 6e 49 7a 35 76 62 74 4e 48 65 78 37 75 35 77 4d 4c 65 71 63 7a 61 78 73 4c 48 72 63 33 4f 74 63 44 72 74 75 2f 4e 32 39 6e 72 33 74 66 33 30 38 36 37 32 41 51 48 31 73 62 6a 2b 65 33 56 41 4e 6e 74 44 65 6a 6b 30 77 33 6e 36 52 41 52 31 77 55 54 2b 66 72 33 44 39 73 61 4a 66 34 41 2f 42 59 68 35 78 72 32 46 66 77 62 2b 4f 30 76 41 2f 76 78 35 2b 30 43 39 53 59 31 42 76 6b 71 4b 51 72 39 4c 68 63 4f 41 6a 46 42 45 67 59 31 4e 52 59 4b 4f 53 4d 61 44 6a 77 4d 52 79 56 Data Ascii: g3VtUGl3W5x3l2pYlIB6fqd/m4OGfHd+r4CNhqWAb2eooqKYpXV1p72reY2YfoN+tcW2qrihq6uLop3NyLu+0aC3zdbQ08WrqcnIz5vbtNHex7u5wMLeqczaxsLHrc3OtcDrtu/N29nr3tf308672AQH1sbj+e3VANntDejk0w3n6RAR1wUT+fr3D9saJf4A/BYh5xr2Ffwb+O0vA/vx5+0C9SY1BvkqKQr9LhcOAjFBEgY1NRYKOSMaDjwMRyV
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 56 69 64 6e 59 78 79 6f 32 75 4e 65 5a 31 32 65 32 4b 67 61 4b 69 6d 66 36 75 6d 70 57 35 39 72 4c 47 74 73 35 69 75 64 37 65 57 74 62 56 39 71 35 2f 44 6c 35 32 42 66 71 57 52 70 37 69 48 6c 6f 32 59 6f 73 75 66 6d 73 71 67 6c 4a 2f 51 73 36 4f 79 79 73 72 53 30 63 66 4c 31 73 4b 77 6e 64 7a 69 76 39 32 31 31 4d 76 64 76 39 66 74 32 63 66 61 37 73 66 54 7a 75 37 78 37 64 62 76 39 63 76 6f 36 76 48 35 2b 38 48 4f 7a 2b 66 43 32 75 59 44 2b 38 55 45 2b 4e 6e 50 2f 76 37 4e 42 39 37 49 37 4e 44 32 36 66 7a 34 33 51 7a 74 45 66 55 66 37 68 33 69 45 76 4d 69 35 68 63 64 48 75 55 45 43 79 55 53 48 2b 6b 44 4c 43 6f 72 4a 52 6b 49 4b 50 51 30 4b 44 63 58 44 51 34 65 4e 53 38 2b 4e 68 73 6a 4f 42 51 31 42 68 6b 62 44 69 5a 54 53 53 55 6d 4c 42 59 33 4b 54 51 56 Data Ascii: VidnYxyo2uNeZ12e2KgaKimf6umpW59rLGts5iud7eWtbV9q5/Dl52BfqWRp7iHlo2YosufmsqglJ/Qs6OyysrS0cfL1sKwndziv9211Mvdv9ft2cfa7sfTzu7x7dbv9cvo6vH5+8HOz+fC2uYD+8UE+NnP/v7NB97I7ND26fz43QztEfUf7h3iEvMi5hcdHuUECyUSH+kDLCorJRkIKPQ0KDcXDQ4eNS8+NhsjOBQ1BhkbDiZTSSUmLBY3KTQV
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 2b 5a 62 70 5a 5a 70 48 4b 57 66 35 5a 38 71 6d 6c 74 62 71 32 62 6e 36 74 73 69 4c 4f 79 65 59 57 77 74 37 53 48 72 59 6c 30 78 4b 79 37 70 48 36 46 77 4c 36 7a 6e 36 79 73 69 38 54 53 77 6f 32 66 6a 4d 75 70 75 64 44 53 77 37 33 55 73 4c 48 52 31 62 4f 56 31 39 76 64 6d 63 58 48 70 73 6e 4e 34 63 44 42 33 65 58 45 79 64 50 72 37 61 6e 5a 37 63 76 62 7a 4f 37 75 33 4d 69 33 38 37 2b 37 77 67 50 41 2b 74 7a 39 39 2b 51 49 42 74 63 51 41 67 44 4d 46 41 6b 55 31 51 54 7a 37 77 6a 55 32 52 51 59 32 79 49 62 37 75 30 6e 47 76 55 5a 34 51 6a 33 36 50 73 51 36 43 38 74 35 42 45 68 2f 75 34 4f 42 79 59 73 43 68 49 4d 4f 54 63 38 49 50 73 38 46 79 50 2b 48 54 49 6d 4b 55 64 46 4b 68 68 4c 4a 79 78 47 55 7a 55 6d 51 46 49 7a 55 54 67 77 58 42 30 77 45 69 38 31 49 Data Ascii: +ZbpZZpHKWf5Z8qmltbq2bn6tsiLOyeYWwt7SHrYl0xKy7pH6FwL6zn6ysi8TSwo2fjMupudDSw73UsLHR1bOV19vdmcXHpsnN4cDB3eXEydPr7anZ7cvbzO7u3Mi387+7wgPA+tz99+QIBtcQAgDMFAkU1QTz7wjU2RQY2yIb7u0nGvUZ4Qj36PsQ6C8t5BEh/u4OByYsChIMOTc8IPs8FyP+HTImKUdFKhhLJyxGUzUmQFIzUTgwXB0wEi81I
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 65 58 5a 32 75 67 6d 70 75 70 6f 57 4f 67 58 2b 67 6f 70 6d 6d 6a 6f 52 37 70 72 4b 66 74 35 36 69 6b 6e 71 69 73 71 61 6b 78 37 6d 4a 74 6f 75 38 71 73 4f 4f 77 37 43 71 76 73 75 51 77 73 6a 5a 6f 37 53 58 73 36 6d 32 79 37 69 34 75 62 76 6d 32 74 4c 44 34 64 4f 32 33 61 6d 35 77 64 33 6f 33 4f 6e 6e 72 4d 62 4e 35 37 57 7a 75 75 58 70 2f 76 76 53 33 75 54 77 38 75 37 42 33 65 44 35 30 2b 59 46 44 75 50 50 37 4f 59 51 30 51 38 4f 36 76 6e 77 44 78 58 55 38 68 34 4f 30 76 4d 65 46 66 50 64 4a 42 59 41 4a 41 76 69 46 53 30 6b 4b 41 67 62 45 2b 38 30 4c 53 72 7a 4a 76 4c 34 47 68 59 7a 48 50 77 54 4c 54 54 37 4f 52 6f 2f 41 45 59 34 47 53 31 4e 54 43 51 43 48 7a 6f 67 45 30 51 2f 53 46 42 4e 4f 31 42 45 4e 45 30 5a 59 53 39 50 55 6d 52 4f 4a 6d 49 30 58 69 Data Ascii: eXZ2ugmpupoWOgX+gopmmjoR7prKft56iknqisqakx7mJtou8qsOOw7CqvsuQwsjZo7SXs6m2y7i4ubvm2tLD4dO23am5wd3o3OnnrMbN57WzuuXp/vvS3uTw8u7B3eD50+YFDuPP7OYQ0Q8O6vnwDxXU8h4O0vMeFfPdJBYAJAviFS0kKAgbE+80LSrzJvL4GhYzHPwTLTT7ORo/AEY4GS1NTCQCHzogE0Q/SFBNO1BENE0ZYS9PUmROJmI0Xi
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 73 4b 75 30 68 4c 4f 4a 6b 48 4b 6f 74 62 6d 4f 6b 4b 75 71 65 4b 47 68 76 4a 71 32 68 4b 47 34 71 63 47 35 6e 71 65 37 6c 37 69 4b 6e 4a 36 52 71 73 53 66 6c 5a 6d 32 70 5a 6e 49 73 71 6d 64 79 35 76 57 74 4e 75 7a 70 63 61 34 77 36 53 31 32 4f 62 59 34 73 57 74 36 4f 44 68 72 4f 72 79 77 37 72 76 7a 37 71 36 38 74 4c 35 41 76 6a 56 31 77 62 38 31 77 4c 7a 44 4f 51 4c 2f 63 67 44 33 75 38 53 41 74 30 54 47 51 54 33 30 68 66 54 44 65 6b 54 34 50 4d 63 41 51 38 57 34 41 45 65 48 78 50 71 43 69 50 34 47 65 67 41 43 51 44 7a 35 79 73 5a 4d 67 62 78 2b 41 34 4a 4d 78 49 32 45 51 77 53 46 6a 6b 59 46 78 34 68 4b 69 51 48 53 53 42 51 53 79 51 4a 54 54 45 52 54 6b 77 4c 46 31 42 45 47 31 38 77 55 54 42 67 56 6b 56 69 57 55 41 68 58 46 56 45 58 56 78 4c 4b 47 59 Data Ascii: sKu0hLOJkHKotbmOkKuqeKGhvJq2hKG4qcG5nqe7l7iKnJ6RqsSflZm2pZnIsqmdy5vWtNuzpca4w6S12ObY4sWt6ODhrOryw7rvz7q68tL5AvjV1wb81wLzDOQL/cgD3u8SAt0TGQT30hfTDekT4PMcAQ8W4AEeHxPqCiP4GegACQDz5ysZMgbx+A4JMxI2EQwSFjkYFx4hKiQHSSBQSyQJTTERTkwLF1BEG18wUTBgVkViWUAhXFVEXVxLKGY
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 6f 57 43 74 37 52 79 68 62 61 63 6d 5a 6d 35 74 72 6d 30 74 73 65 2f 6b 71 43 54 74 70 72 50 6f 4d 53 44 77 5a 76 4a 70 73 58 42 78 36 72 61 32 37 58 63 32 4e 44 67 77 4d 72 59 74 62 57 77 31 64 4b 6b 76 38 54 48 77 39 32 6c 34 4b 33 65 37 75 48 51 37 63 54 78 35 63 6e 72 7a 2b 65 77 31 66 6e 2b 2b 39 50 56 2b 74 37 2b 35 41 72 64 44 64 55 4d 7a 73 59 46 2b 77 38 4f 43 4f 6e 4e 36 51 62 69 37 77 55 4b 32 42 44 62 36 76 48 76 44 4f 50 30 39 79 45 6f 34 66 51 6a 49 77 41 72 45 41 6e 71 49 68 4d 6a 49 6a 41 53 41 52 41 34 45 7a 51 59 45 51 6b 74 2b 54 4c 36 4d 44 51 6d 4d 44 30 47 48 53 70 49 4a 45 59 50 51 45 30 63 4b 53 5a 4b 57 46 4d 56 46 31 46 5a 50 6b 35 4c 58 45 49 37 49 46 35 47 5a 56 64 69 53 6d 6c 46 5a 6b 35 74 51 57 56 4f 5a 46 52 6f 50 53 78 7a Data Ascii: oWCt7RyhbacmZm5trm0tse/kqCTtprPoMSDwZvJpsXBx6ra27Xc2NDgwMrYtbWw1dKkv8THw92l4K3e7uHQ7cTx5cnrz+ew1fn++9PV+t7+5ArdDdUMzsYF+w8OCOnN6Qbi7wUK2BDb6vHvDOP09yEo4fQjIwArEAnqIhMjIjASARA4EzQYEQkt+TL6MDQmMD0GHSpIJEYPQE0cKSZKWFMVF1FZPk5LXEI7IF5GZVdiSmlFZk5tQWVOZFRoPSxz
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 4e 33 76 59 43 61 74 5a 69 64 6b 5a 2b 6f 6c 4a 57 4b 6d 59 33 4b 6e 73 66 4e 77 72 7a 55 68 34 79 69 6c 4b 50 58 76 4c 76 49 7a 61 7a 57 31 36 47 63 6c 71 57 63 74 4d 48 44 78 2b 47 35 77 4d 6a 6c 35 62 33 68 37 38 6d 39 73 73 6a 4d 73 76 58 77 33 4c 54 58 75 74 47 36 7a 66 7a 35 34 75 4c 76 36 50 51 41 42 77 33 38 44 74 37 6a 79 67 6b 51 2f 41 6e 54 30 50 51 53 31 75 55 49 46 68 59 4d 2b 52 54 76 42 65 41 4f 2b 68 38 49 4a 64 77 4e 35 79 37 72 4d 41 38 72 4a 54 44 6d 4c 79 38 4c 47 68 45 76 4e 66 6b 57 4c 79 6f 73 45 44 55 79 4e 42 55 52 48 45 59 59 52 54 6b 70 42 42 63 43 55 45 49 77 44 53 73 6a 52 30 38 73 52 31 42 57 4c 43 6f 76 53 55 6b 37 4c 78 74 6a 51 52 34 38 49 6b 5a 48 4e 56 55 71 59 47 35 51 52 57 4d 76 56 45 68 6e 5a 56 52 4a 52 45 68 35 55 Data Ascii: N3vYCatZidkZ+olJWKmY3KnsfNwrzUh4yilKPXvLvIzazW16GclqWctMHDx+G5wMjl5b3h78m9ssjMsvXw3LTXutG6zfz54uLv6PQABw38Dt7jygkQ/AnT0PQS1uUIFhYM+RTvBeAO+h8IJdwN5y7rMA8rJTDmLy8LGhEvNfkWLyosEDUyNBURHEYYRTkpBBcCUEIwDSsjR08sR1BWLCovSUk7LxtjQR48IkZHNVUqYG5QRWMvVEhnZVRJREh5U
2024-10-07 16:54:33 UTC	1369	IN	Data Raw: 38 70 61 4f 6f 68 4b 65 32 78 4a 62 45 71 34 75 61 77 64 4f 52 70 73 57 68 78 4e 57 73 32 4d 6d 6e 79 62 4c 4d 73 4c 69 39 72 75 62 62 31 72 71 79 78 62 58 55 79 72 37 68 77 4e 48 70 72 39 4c 71 72 2f 62 34 39 65 50 75 7a 64 54 74 34 4e 7a 65 76 73 32 38 39 39 48 56 33 64 63 46 38 39 6a 34 41 67 2f 51 2b 77 76 4c 36 51 55 4b 39 51 58 6b 46 68 72 53 37 50 76 62 49 51 7a 39 32 78 6e 64 43 43 6a 69 2b 53 50 69 43 76 59 4b 37 76 34 42 42 75 6f 70 41 67 55 34 44 78 51 62 38 54 41 50 50 6a 34 35 49 68 51 64 50 6a 49 6b 4b 53 59 59 4e 42 55 69 50 43 30 43 4b 79 46 4c 54 77 30 6c 43 54 6b 34 51 6c 6b 71 4b 6a 56 64 53 6b 74 66 50 55 51 39 56 69 4d 79 59 69 4d 35 58 6c 31 47 59 31 67 2b 5a 56 4d 6d 52 44 56 67 61 54 64 49 66 46 56 48 66 44 46 2b 54 55 4a 74 64 6e Data Ascii: 8paOohKe2xJbEq4uawdORpsWhxNWs2MmnybLMsLi9rubb1rqyxbXUyr7hwNHpr9Lqr/b49ePuzdTt4Nzevs2899HV3dcF89j4Ag/Q+wvL6QUK9QXkFhrS7PvbIQz92xndCCji+SPiCvYK7v4BBuopAgU4DxQb8TAPPj45IhQdPjIkKSYYNBUiPC0CKyFLTw0lCTk4QlkqKjVdSktfPUQ9ViMyYiM5Xl1GY1g+ZVMmRDVgaTdIfFVHfDF+TUJtdn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49732	188.114.97.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:33 UTC	1008	OUT	GET /favicon.ico HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:34 UTC	1051	IN	HTTP/1.1 403 The gods of RaccoonO365 Service are wise, but they do not know what you seeks! Date: Mon, 07 Oct 2024 16:54:34 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Feature-Policy: camera 'none'; microphone 'none' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Powered-By: RaccoonO365 2FA/MFA Service X-Powered-CMS: RaccoonO365 2FA/MFA Service X-Robots-Tag: noindex, nofollow X-ServerName: RaccoonO365 X-ServerVersion: 3.5 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cPJCVGuyY4OiYdDAp7cgjC4x8Cl5gKUoMftB1XGr244u1caMC1C1isW2VZWfZMjztLJHOkIe5rE3D%2BibknmGjMdf2%2FZeR%2B2qGfuQRyp5sAI7O%2BHNA7Qw%2BKopsDZ9ahk4tw08izMS343vdA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cef69ef1c2642b5-EWR
2024-10-07 16:54:34 UTC	318	IN	Data Raw: 31 63 62 62 0d 0a 0a 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 0a 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 76 61 72 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1cbb <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> </head> <body> <script> (function() { var obfuscateCode = function(
2024-10-07 16:54:34 UTC	1369	IN	Data Raw: 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 61 72 73 20 3d 20 7b 7d 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 63 6f 64 65 20 3d 20 63 6f 64 65 2e 72 65 70 6c 61 63 65 28 2f 76 61 72 73 2b 28 5b 61 2d 7a 41 2d 5a 5f 24 5d 5b 30 2d 39 61 2d 7a 41 2d 5a 5f 24 5d 2a 29 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 6d 61 74 63 68 2c 20 70 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 65 77 56 61 72 73 5b 70 31 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 56 61 72 73 5b 70 31 5d 20 3d 20 63 68 61 72 73 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 63 68 61 72 73 2e 6c 65 Data Ascii: FGHIJKLMNOPQRSTUVWXYZ'; var newVars = {}; code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) { if (!newVars[p1]) { newVars[p1] = chars[Math.floor(Math.random() chars.le
2024-10-07 16:54:34 UTC	1369	IN	Data Raw: 26 23 34 33 3b 26 23 35 34 3b 26 23 35 39 3b 26 23 35 30 3b 26 23 34 35 3b 26 23 32 30 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 36 35 3b 26 23 36 31 3b 26 23 36 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 36 31 3b 26 23 32 30 3b 26 23 36 65 3b 26 23 36 31 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 33 64 3b 26 23 32 32 3b 26 23 37 32 3b 26 23 36 66 3b 26 23 36 32 3b 26 23 36 66 3b 26 23 37 34 3b 26 23 37 33 3b 26 23 32 32 3b Data Ascii: +6;2-DJ&#6d;&#6c;&#3e;&#0a;&#3c;DJ&#6d;&#6c;&#3e;&#0a;&#3c;DA=@&#3e;&#0a;&#3c;&#6d;AJ=&#6e;=&#6d;A&#3d;H&#6f;>&#6f;JI
2024-10-07 16:54:34 UTC	1369	IN	Data Raw: 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 36 3b 26 23 36 31 3b 26 23 37 32 3b 26 23 32 30 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 30 3b 26 23 33 64 3b 26 23 32 30 3b 26 23 32 32 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 37 34 3b 26 23 37 30 3b 26 23 37 33 3b 26 23 33 61 3b 26 23 32 66 3b 26 23 32 66 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 32 65 3b 26 23 36 66 3b 26 23 36 36 3b 26 23 36 36 3b 26 23 36 39 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 32 65 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 64 3b 26 23 32 66 3b 26 23 32 32 Data Ascii: ;L=HH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3d;DJJFI&#3a;&#2f;&#2f;MMM&#2e;&#6f;BBE?A&#2e;?&#6f;&#6d;&#2f;&#22
2024-10-07 16:54:34 UTC	1369	IN	Data Raw: 32 3b 26 23 36 35 3b 26 23 37 30 3b 26 23 36 63 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 32 38 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 32 30 3b 26 23 33 31 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 37 34 3b 26 23 36 Data Ascii: 2;AF&#6c;=?AH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3b;&#7d;&#2c;&#3b;&#7d;&#2c;&#0a;BK&#6e;?J&#6
2024-10-07 16:54:34 UTC	1369	IN	Data Raw: 36 65 3b 26 23 36 33 3b 26 23 32 39 3b 26 23 32 30 3b 26 23 37 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 37 33 3b 26 23 36 33 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 37 30 3b 26 23 37 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 36 32 3b 26 23 Data Ascii: 6e;?&#7b;&#0a;BK&#6e;?&#3b;&#0a;&#7d;&#3b;&#0a;&#3c;&#2f;I?HEFJ&#3e;&#0a;&#3c;&#2f;>&#
2024-10-07 16:54:34 UTC	200	IN	Data Raw: 61 74 65 64 43 6f 64 65 20 3d 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 28 63 6f 64 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 6f 62 66 75 73 63 61 74 65 64 43 6f 64 65 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 65 78 65 63 75 74 65 44 65 63 6f 64 65 64 43 6f 6e 74 65 6e 74 28 29 3b 0a 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 7d 29 28 29 3b 0a 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 0a 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 3c 2f 68 74 6d 6c 3e 0a 20 20 20 20 20 20 0d 0a Data Ascii: atedCode = obfuscateCode(code); script.textContent = obfuscatedCode; executeDecodedContent(); }); })(); </script> </body> </html>
2024-10-07 16:54:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49734	104.18.95.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:34 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1366294320:1728318615:2JjXzTu9lqVz5H8mEaag0ElC5Asvh6dQXlCOiplaCUI/8cef69e1b9780ced/87b66ef02a7c392 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:34 UTC	349	IN	HTTP/1.1 404 Not Found Date: Mon, 07 Oct 2024 16:54:34 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: y0RAii8TrT6UqZMr/wj1O507QAIeSMmz2gg=$0sm9wlH0aFWsZiyz Server: cloudflare CF-RAY: 8cef69f3eeb442ea-EWR
2024-10-07 16:54:34 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49736	104.18.94.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:35 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8cef69e1b9780ced/1728320073791/q8zKI0n6WTBOyb6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:35 UTC	170	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:35 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8cef69f668f34271-EWR
2024-10-07 16:54:35 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 00 2c 08 02 00 00 00 77 cf 06 12 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR),wIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49737	104.18.95.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:35 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8cef69e1b9780ced/1728320073791/q8zKI0n6WTBOyb6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:36 UTC	170	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:35 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8cef69fadb4678db-EWR
2024-10-07 16:54:36 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 00 2c 08 02 00 00 00 77 cf 06 12 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR),wIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49739	104.18.94.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:36 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8cef69e1b9780ced/1728320073795/ff8556a21c2438eebe39e00f9ea4944944c690ace171b58d1de70c1e2d03e81a/vC_aVt3KXW7ZlTc HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:36 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 07 Oct 2024 16:54:36 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-10-07 16:54:36 UTC	1985	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 5f 34 56 57 6f 68 77 6b 4f 4f 36 2d 4f 65 41 50 6e 71 53 55 53 55 54 47 6b 4b 7a 68 63 62 57 4e 48 65 63 4d 48 69 30 44 36 42 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g_4VWohwkOO6-OeAPnqSUSUTGkKzhcbWNHecMHi0D6BoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-10-07 16:54:36 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49740	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:36 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=C+6BPP2fscYLn4K&MD=Kdk5mNk+ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-07 16:54:37 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 915d805c-6e25-48e9-bdb1-8d930d32c774 MS-RequestId: eb5737fe-be28-40f5-a9a1-4fcd983d5836 MS-CV: PQvYtIVPSE+x6+zD.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 07 Oct 2024 16:54:36 GMT Connection: close Content-Length: 24490
2024-10-07 16:54:37 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-07 16:54:37 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49741	104.18.94.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:37 UTC	928	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1366294320:1728318615:2JjXzTu9lqVz5H8mEaag0ElC5Asvh6dQXlCOiplaCUI/8cef69e1b9780ced/87b66ef02a7c392 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32795 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 87b66ef02a7c392 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:37 UTC	16384	OUT	Data Raw: 76 5f 38 63 65 66 36 39 65 31 62 39 37 38 30 63 65 64 3d 70 52 6a 25 32 62 79 6b 73 4b 69 41 69 33 4e 42 4a 49 63 49 30 41 6a 33 76 49 4c 49 4c 49 4f 74 49 4b 49 54 49 41 72 50 4f 76 4a 73 35 49 66 74 42 4b 73 4c 4f 5a 49 58 72 4f 4a 73 63 33 36 49 50 67 33 69 33 41 49 43 54 4e 36 49 2d 30 2b 6b 63 49 4a 72 33 30 5a 46 79 6c 36 49 6e 73 49 50 32 62 6b 2b 6b 4e 49 4d 49 4f 6a 73 54 33 32 33 73 6d 64 46 49 6e 32 47 49 37 2b 6a 45 56 59 6a 4f 2b 4f 38 49 50 48 6a 33 50 49 43 6d 6d 2b 49 33 66 49 49 78 6d 73 72 62 7a 2b 49 35 2b 49 55 57 2b 48 30 6c 66 79 76 49 4f 52 6a 59 7a 48 56 38 46 66 65 49 73 6e 76 59 55 42 41 36 74 77 63 6d 74 54 72 4b 41 52 41 73 49 6b 50 52 24 41 55 43 49 73 45 33 53 6e 76 67 61 59 66 39 61 49 49 45 39 4a 64 62 7a 78 70 59 58 64 66 Data Ascii: v_8cef69e1b9780ced=pRj%2byksKiAi3NBJIcI0Aj3vILILIOtIKITIArPOvJs5IftBKsLOZIXrOJsc36IPg3i3AICTN6I-0+kcIJr30ZFyl6InsIP2bk+kNIMIOjsT323smdFIn2GI7+jEVYjO+O8IPHj3PICmm+I3fIIxmsrbz+I5+IUW+H0lfyvIORjYzHV8FfeIsnvYUBA6twcmtTrKARAsIkPR$AUCIsE3SnvgaYf9aIIE9JdbzxpYXdf
2024-10-07 16:54:37 UTC	16384	OUT	Data Raw: 46 45 59 49 68 46 73 6a 62 6a 4b 30 74 2b 73 69 73 61 67 42 74 49 49 41 7a 48 56 72 4f 31 38 65 6a 6b 4e 2b 49 49 6e 35 31 37 56 49 31 5a 6b 76 74 69 49 70 68 73 24 49 48 2b 50 72 33 50 49 4d 57 41 69 79 76 49 6a 49 6c 49 66 30 2b 5a 2b 6b 49 33 72 49 57 49 6e 75 49 2d 47 71 74 50 74 6b 57 49 74 53 42 2b 49 5a 6a 58 61 48 55 65 52 49 4b 49 65 72 33 4b 49 66 6f 37 6a 6b 6d 49 34 2b 6b 49 49 57 49 75 62 42 74 73 41 49 77 2b 37 4e 49 2b 49 78 2b 31 69 73 50 49 4a 49 50 49 6b 6c 49 70 2b 42 4e 73 74 49 79 2b 6b 52 33 55 49 4d 2b 66 6a 73 73 72 77 49 4b 4e 6b 72 49 6d 49 41 2b 33 69 49 33 74 65 6a 33 37 49 6d 6a 50 49 33 37 49 38 71 73 2b 73 47 49 79 49 6b 67 56 36 49 41 78 66 72 33 4f 62 43 49 63 6a 73 6b 73 34 49 4e 72 42 77 49 45 2b 6a 50 73 38 73 54 2b 49 Data Ascii: FEYIhFsjbjK0t+sisagBtIIAzHVrO18ejkN+IIn517VI1ZkvtiIphs$IH+Pr3PIMWAiyvIjIlIf0+Z+kI3rIWInuI-GqtPtkWItSB+IZjXaHUeRIKIer3KIfo7jkmI4+kIIWIubBtsAIw+7NI+Ix+1isPIJIPIklIp+BNstIy+kR3UIM+fjssrwIKNkrImIA+3iI3tej37ImjPI37I8qs+sGIyIkgV6IAxfr3ObCIcjsks4INrBwIE+jPs8sT+I
2024-10-07 16:54:37 UTC	27	OUT	Data Raw: 78 70 73 50 4d 65 4a 48 43 57 30 2b 76 6a 41 6d 33 69 2b 48 63 76 49 66 49 49 49 Data Ascii: xpsPMeJHCW0+vjAm3i+HcvIfIII
2024-10-07 16:54:37 UTC	300	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:37 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26812 Connection: close cf-chl-gen: wM4WD2PiOsguVLINC+sx1m+uUWXM0PuGVNnmDd3n+MuBhPb8WgB+wmPQayv47cQhbR+cfw3FJQ73MD9V$mxXasoxvML/PC8OI Server: cloudflare CF-RAY: 8cef6a01debb8cc5-EWR
2024-10-07 16:54:37 UTC	1069	IN	Data Raw: 6d 63 4c 46 77 70 76 44 67 37 75 48 6f 6f 76 42 69 62 6e 46 6f 36 58 4e 30 4e 58 41 74 73 6a 5a 78 4c 71 2b 7a 73 6d 2b 72 73 37 42 31 5a 33 42 75 2b 43 6c 33 64 6e 69 78 71 54 62 76 37 33 6c 31 4d 44 48 7a 75 58 75 37 63 66 6c 74 2f 6e 4a 37 38 2f 52 33 77 4d 42 31 73 58 2b 32 76 33 36 41 63 4c 70 33 51 59 43 79 77 7a 63 33 41 2f 4f 35 4f 76 33 36 2b 73 57 31 64 54 37 37 77 4d 54 46 75 38 45 2b 50 63 69 34 64 77 58 49 52 6b 68 4a 53 49 51 42 77 51 75 38 53 4d 6a 38 69 55 34 4b 54 51 4b 39 6a 45 78 46 45 4d 68 49 78 73 68 4d 6a 30 4b 52 43 77 47 51 53 6f 73 51 7a 41 2b 44 55 42 48 54 55 78 61 4c 6a 42 49 4f 43 6f 35 4b 56 77 72 4c 43 49 6b 4d 55 56 58 59 45 68 58 59 55 34 34 53 6d 56 72 57 6c 74 6f 4d 6b 4a 41 63 46 49 79 56 32 64 75 4f 58 56 4c 61 6c 35 Data Ascii: mcLFwpvDg7uHoovBibnFo6XN0NXAtsjZxLq+zsm+rs7B1Z3Bu+Cl3dnixqTbv73l1MDHzuXu7cflt/nJ78/R3wMB1sX+2v36AcLp3QYCywzc3A/O5Ov36+sW1dT77wMTFu8E+Pci4dwXIRkhJSIQBwQu8SMj8iU4KTQK9jExFEMhIxshMj0KRCwGQSosQzA+DUBHTUxaLjBIOCo5KVwrLCIkMUVXYEhXYU44SmVrWltoMkJAcFIyV2duOXVLal5
2024-10-07 16:54:37 UTC	1369	IN	Data Raw: 36 66 64 36 63 54 6f 74 36 6a 67 79 62 7a 4c 39 4e 48 47 30 4d 6d 33 39 4e 58 47 7a 38 32 33 75 72 33 56 39 66 57 2f 30 4e 6e 6d 78 76 76 59 44 65 54 47 2f 68 44 4e 7a 66 77 45 44 63 77 47 35 74 48 69 43 65 4d 49 42 77 34 57 39 43 45 53 2f 42 37 32 45 41 59 67 4a 41 6a 6a 39 51 38 4d 35 79 41 6e 44 68 51 76 45 44 67 73 45 68 55 59 39 42 6f 66 48 52 63 42 46 78 59 4e 46 6a 55 43 42 6a 38 2b 41 6a 6c 4f 42 51 45 47 43 43 51 77 44 55 42 4b 4e 30 63 6e 4f 78 52 52 4d 7a 39 54 48 56 6c 68 57 30 55 77 50 47 41 35 4e 32 5a 66 4b 57 31 6d 5a 69 34 37 58 32 55 77 63 58 46 43 55 48 56 55 56 6e 68 59 57 54 63 79 59 47 4d 38 55 30 56 58 57 6c 46 5a 69 6f 64 38 58 31 39 37 5a 49 35 38 54 57 46 6c 55 6d 52 4b 63 49 71 48 62 59 35 73 67 48 4f 65 57 4a 79 56 63 4a 4a 65 Data Ascii: 6fd6cTot6jgybzL9NHG0Mm39NXGz823ur3V9fW/0NnmxvvYDeTG/hDNzfwEDcwG5tHiCeMIBw4W9CES/B72EAYgJAjj9Q8M5yAnDhQvEDgsEhUY9BofHRcBFxYNFjUCBj8+AjlOBQEGCCQwDUBKN0cnOxRRMz9THVlhW0UwPGA5N2ZfKW1mZi47X2UwcXFCUHVUVnhYWTcyYGM8U0VXWlFZiod8X197ZI58TWFlUmRKcIqHbY5sgHOeWJyVcJJe
2024-10-07 16:54:37 UTC	1369	IN	Data Raw: 33 4a 36 74 4c 78 76 65 37 57 39 50 6a 30 38 39 58 36 2b 66 72 79 33 50 76 39 34 75 34 41 38 38 62 79 42 50 6e 72 78 76 37 71 36 67 50 4d 2f 74 41 41 37 4f 62 53 44 76 62 30 34 67 2f 56 45 42 62 65 2f 68 6b 4f 2f 65 4d 57 41 76 49 67 34 66 67 43 46 2b 7a 67 4a 42 49 6a 42 4f 38 41 4c 78 62 75 39 52 6b 61 38 79 77 79 2b 66 77 35 38 7a 30 79 4f 53 45 52 4f 2f 6f 4a 53 77 6f 2b 46 30 34 36 54 55 46 55 4b 44 41 70 57 45 46 52 51 31 41 75 4d 45 6b 79 4c 7a 52 64 4d 43 31 50 48 6a 56 41 52 31 63 30 51 6d 35 4c 4c 6d 45 37 4c 43 6f 71 5a 45 52 4f 4d 30 4a 31 61 58 68 4d 64 33 74 77 59 49 46 44 54 48 5a 36 59 57 56 30 69 6d 70 61 67 34 46 42 58 48 35 38 61 59 78 39 68 30 31 68 68 35 4e 55 68 6c 68 33 61 48 68 73 59 56 71 56 58 5a 65 67 66 49 4e 68 64 59 32 66 67 Data Ascii: 3J6tLxve7W9Pj089X6+fry3Pv94u4A88byBPnrxv7q6gPM/tAA7ObSDvb04g/VEBbe/hkO/eMWAvIg4fgCF+zgJBIjBO8ALxbu9Rka8ywy+fw58z0yOSERO/oJSwo+F046TUFUKDApWEFRQ1AuMEkyLzRdMC1PHjVAR1c0Qm5LLmE7LCoqZEROM0J1aXhMd3twYIFDTHZ6YWV0impag4FBXH58aYx9h01hh5NUhlh3aHhsYVqVXZegfINhdY2fg
2024-10-07 16:54:37 UTC	1369	IN	Data Raw: 68 72 75 61 76 35 4f 6a 61 35 50 47 36 7a 73 76 51 7a 74 62 67 32 75 54 65 76 76 6a 30 79 2b 50 65 33 41 6b 4d 7a 63 2f 7a 45 76 59 47 30 41 76 59 35 75 62 5a 43 52 62 6f 2f 51 7a 78 49 76 63 67 34 41 55 6b 45 78 62 37 42 65 6b 63 43 69 6e 73 45 51 45 6f 4a 43 49 46 4a 43 77 5a 43 2f 6b 37 44 43 45 2f 4e 67 4d 64 4e 6a 55 65 48 30 41 2b 4e 44 6f 4a 4a 44 38 6f 44 55 4a 4b 55 31 4d 79 4e 52 51 7a 4d 31 77 33 46 52 55 30 48 6a 74 4d 58 43 35 69 49 78 38 2b 4f 30 74 6f 61 47 51 6d 62 53 30 37 4b 32 5a 6e 4d 58 4e 71 55 54 4a 74 5a 6c 56 75 62 56 77 35 64 31 42 79 58 33 4e 55 56 6c 74 2f 66 6c 36 43 69 55 6d 48 55 46 42 6a 53 6f 39 51 67 46 4e 6f 62 48 43 48 61 4a 4e 72 63 33 47 59 66 70 4e 38 6c 4a 61 63 6d 35 47 58 6c 48 74 2f 61 71 75 4d 6f 32 53 41 70 34 Data Ascii: hruav5Oja5PG6zsvQztbg2uTevvj0y+Pe3AkMzc/zEvYG0AvY5ubZCRbo/QzxIvcg4AUkExb7BekcCinsEQEoJCIFJCwZC/k7DCE/NgMdNjUeH0A+NDoJJD8oDUJKU1MyNRQzM1w3FRU0HjtMXC5iIx8+O0toaGQmbS07K2ZnMXNqUTJtZlVubVw5d1ByX3NUVlt/fl6CiUmHUFBjSo9QgFNobHCHaJNrc3GYfpN8lJacm5GXlHt/aquMo2SAp4
2024-10-07 16:54:37 UTC	1369	IN	Data Raw: 33 64 37 6d 7a 4f 2f 66 36 76 7a 35 2b 76 6a 46 78 74 33 54 35 76 72 62 33 65 49 48 42 75 58 39 33 76 4d 4c 46 77 6a 68 36 4f 34 51 33 50 41 5a 2b 52 6f 4d 32 78 77 6a 37 39 2f 35 36 42 77 48 2b 76 37 38 4b 68 6b 44 48 77 51 6c 42 43 4d 77 4c 76 4d 50 4f 79 73 30 47 78 7a 34 4b 67 77 64 49 53 63 69 4f 66 35 43 52 67 6f 31 4c 30 67 59 51 67 73 6b 4b 56 42 58 49 77 34 6b 55 44 45 57 4e 68 6c 41 57 56 63 7a 55 44 49 36 47 43 46 43 52 53 4a 49 52 55 59 32 50 6d 78 53 62 7a 45 7a 51 32 52 55 52 6d 56 34 63 30 39 46 62 59 42 55 57 46 68 57 62 6d 35 67 65 46 6c 62 61 59 47 44 64 30 53 4e 69 4a 46 2f 54 6f 42 53 55 32 69 56 61 46 42 6c 63 70 4e 31 65 6e 32 4d 57 34 46 79 5a 48 2b 6f 6b 36 46 33 6e 6f 32 69 68 4b 78 70 70 32 79 74 63 4c 57 77 68 59 75 56 74 6f 79 Data Ascii: 3d7mzO/f6vz5+vjFxt3T5vrb3eIHBuX93vMLFwjh6O4Q3PAZ+RoM2xwj79/56BwH+v78KhkDHwQlBCMwLvMPOys0Gxz4KgwdISciOf5CRgo1L0gYQgskKVBXIw4kUDEWNhlAWVczUDI6GCFCRSJIRUY2PmxSbzEzQ2RURmV4c09FbYBUWFhWbm5geFlbaYGDd0SNiJF/ToBSU2iVaFBlcpN1en2MW4FyZH+ok6F3no2ihKxpp2ytcLWwhYuVtoy
2024-10-07 16:54:37 UTC	1369	IN	Data Raw: 2b 2f 4e 7a 72 37 33 33 67 4c 79 33 72 37 56 79 4d 7a 4b 79 76 50 79 38 63 63 4c 45 65 66 6a 46 39 59 4a 37 51 6f 4e 44 2f 72 72 46 66 72 69 41 66 7a 6e 47 79 6a 64 35 65 59 41 49 51 33 6a 37 67 6e 71 4c 75 34 7a 41 67 49 56 42 78 76 34 4d 53 41 70 51 78 6b 32 4e 6a 4d 59 4d 66 34 34 52 6b 45 70 4f 79 51 6f 45 53 4d 65 4b 79 30 6c 44 53 38 6c 4b 41 30 53 46 78 30 31 55 56 73 7a 49 79 78 53 4a 53 5a 41 55 69 67 68 57 57 74 75 4c 33 46 6e 50 55 6c 79 61 69 31 41 4c 6e 70 35 52 48 6c 36 50 6a 56 4c 55 55 70 5a 63 6d 55 34 55 46 4f 44 57 31 52 6a 59 56 5a 6a 66 6d 35 70 61 59 5a 75 5a 58 42 50 5a 6d 6c 77 5a 48 31 63 64 58 75 58 62 6e 68 77 66 6e 57 41 58 33 5a 35 67 57 4f 66 64 6d 2b 75 6b 59 46 37 69 37 4e 7a 67 4b 71 34 6a 70 4e 7a 6c 58 32 59 73 71 47 41 Data Ascii: +/Nzr733gLy3r7VyMzKyvPy8ccLEefjF9YJ7QoND/rrFfriAfznGyjd5eYAIQ3j7gnqLu4zAgIVBxv4MSApQxk2NjMYMf44RkEpOyQoESMeKy0lDS8lKA0SFx01UVszIyxSJSZAUighWWtuL3FnPUlyai1ALnp5RHl6PjVLUUpZcmU4UFODW1RjYVZjfm5paYZuZXBPZmlwZH1cdXuXbnhwfnWAX3Z5gWOfdm+ukYF7i7NzgKq4jpNzlX2YsqGA
2024-10-07 16:54:37 UTC	1369	IN	Data Raw: 4c 68 2f 65 48 63 35 67 49 49 35 4f 76 76 35 65 6a 77 7a 75 54 4c 38 75 66 39 37 50 62 37 2b 65 72 37 32 67 4c 7a 41 52 6e 6b 38 51 55 65 43 76 63 49 44 41 72 36 43 77 44 39 41 51 34 71 42 67 59 54 43 42 34 48 47 54 49 57 44 42 30 32 46 66 63 66 4a 42 34 55 4a 41 4e 49 49 43 68 43 49 68 30 71 52 69 34 67 4d 44 51 69 49 6a 51 54 4a 69 73 35 55 52 30 74 50 46 59 75 4d 6b 46 61 59 44 56 46 49 32 51 37 52 6d 4a 47 52 55 74 41 59 45 42 51 56 48 42 44 56 57 35 7a 4d 46 64 4d 56 6b 35 62 55 46 5a 54 59 58 70 53 56 47 52 58 53 56 5a 6f 58 47 5a 67 62 59 61 4d 61 47 39 50 61 6d 4e 79 6a 6d 70 6d 65 4a 4b 59 61 6e 74 77 62 6e 57 42 6d 6e 6c 63 67 34 69 6b 64 34 68 6e 66 6f 57 4c 70 70 61 41 6a 37 6c 31 69 4a 4f 75 68 6f 61 58 6a 49 71 51 6e 4b 43 69 6c 4a 36 36 6b Data Ascii: Lh/eHc5gII5Ovv5ejwzuTL8uf97Pb7+er72gLzARnk8QUeCvcIDAr6CwD9AQ4qBgYTCB4HGTIWDB02FfcfJB4UJANIIChCIh0qRi4gMDQiIjQTJis5UR0tPFYuMkFaYDVFI2Q7RmJGRUtAYEBQVHBDVW5zMFdMVk5bUFZTYXpSVGRXSVZoXGZgbYaMaG9PamNyjmpmeJKYantwbnWBmnlcg4ikd4hnfoWLppaAj7l1iJOuhoaXjIqQnKCilJ66k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49742	104.18.95.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:38 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1366294320:1728318615:2JjXzTu9lqVz5H8mEaag0ElC5Asvh6dQXlCOiplaCUI/8cef69e1b9780ced/87b66ef02a7c392 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:38 UTC	349	IN	HTTP/1.1 404 Not Found Date: Mon, 07 Oct 2024 16:54:38 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: I6Ne7S3ebZasYF1jIFyKAi0VIFUUMM3Ji1I=$yDCPLvVwWOzI3bI9 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cef6a09ee084325-EWR
2024-10-07 16:54:38 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:38 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 16:54:38 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=172287 Date: Mon, 07 Oct 2024 16:54:38 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49744	104.18.94.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:39 UTC	928	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1366294320:1728318615:2JjXzTu9lqVz5H8mEaag0ElC5Asvh6dQXlCOiplaCUI/8cef69e1b9780ced/87b66ef02a7c392 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 35218 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 87b66ef02a7c392 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/25q4q/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:39 UTC	16384	OUT	Data Raw: 76 5f 38 63 65 66 36 39 65 31 62 39 37 38 30 63 65 64 3d 70 52 6a 25 32 62 79 6b 73 4b 69 41 69 33 4e 42 4a 49 63 49 30 41 6a 33 76 49 4c 49 4c 49 4f 74 49 4b 49 54 49 41 72 50 4f 76 4a 73 35 49 66 74 42 4b 73 4c 4f 5a 49 58 72 4f 4a 73 63 33 36 49 50 67 33 69 33 41 49 43 54 4e 36 49 2d 30 2b 6b 63 49 4a 72 33 30 5a 46 79 6c 36 49 6e 73 49 50 32 62 6b 2b 6b 4e 49 4d 49 4f 6a 73 54 33 32 33 73 6d 64 46 49 6e 32 47 49 37 2b 6a 45 56 59 6a 4f 2b 4f 38 49 50 48 6a 33 50 49 43 6d 6d 2b 49 33 66 49 49 78 6d 73 72 62 7a 2b 49 35 2b 49 55 57 2b 48 30 6c 66 79 76 49 4f 52 6a 59 7a 48 56 38 46 66 65 49 73 6e 76 59 55 42 41 36 74 77 63 6d 74 54 72 4b 41 52 41 73 49 6b 50 52 24 41 55 43 49 73 45 33 53 6e 76 67 61 59 66 39 61 49 49 45 39 4a 64 62 7a 78 70 59 58 64 66 Data Ascii: v_8cef69e1b9780ced=pRj%2byksKiAi3NBJIcI0Aj3vILILIOtIKITIArPOvJs5IftBKsLOZIXrOJsc36IPg3i3AICTN6I-0+kcIJr30ZFyl6InsIP2bk+kNIMIOjsT323smdFIn2GI7+jEVYjO+O8IPHj3PICmm+I3fIIxmsrbz+I5+IUW+H0lfyvIORjYzHV8FfeIsnvYUBA6twcmtTrKARAsIkPR$AUCIsE3SnvgaYf9aIIE9JdbzxpYXdf
2024-10-07 16:54:39 UTC	16384	OUT	Data Raw: 46 45 59 49 68 46 73 6a 62 6a 4b 30 74 2b 73 69 73 61 67 42 74 49 49 41 7a 48 56 72 4f 31 38 65 6a 6b 4e 2b 49 49 6e 35 31 37 56 49 31 5a 6b 76 74 69 49 70 68 73 24 49 48 2b 50 72 33 50 49 4d 57 41 69 79 76 49 6a 49 6c 49 66 30 2b 5a 2b 6b 49 33 72 49 57 49 6e 75 49 2d 47 71 74 50 74 6b 57 49 74 53 42 2b 49 5a 6a 58 61 48 55 65 52 49 4b 49 65 72 33 4b 49 66 6f 37 6a 6b 6d 49 34 2b 6b 49 49 57 49 75 62 42 74 73 41 49 77 2b 37 4e 49 2b 49 78 2b 31 69 73 50 49 4a 49 50 49 6b 6c 49 70 2b 42 4e 73 74 49 79 2b 6b 52 33 55 49 4d 2b 66 6a 73 73 72 77 49 4b 4e 6b 72 49 6d 49 41 2b 33 69 49 33 74 65 6a 33 37 49 6d 6a 50 49 33 37 49 38 71 73 2b 73 47 49 79 49 6b 67 56 36 49 41 78 66 72 33 4f 62 43 49 63 6a 73 6b 73 34 49 4e 72 42 77 49 45 2b 6a 50 73 38 73 54 2b 49 Data Ascii: FEYIhFsjbjK0t+sisagBtIIAzHVrO18ejkN+IIn517VI1ZkvtiIphs$IH+Pr3PIMWAiyvIjIlIf0+Z+kI3rIWInuI-GqtPtkWItSB+IZjXaHUeRIKIer3KIfo7jkmI4+kIIWIubBtsAIw+7NI+Ix+1isPIJIPIklIp+BNstIy+kR3UIM+fjssrwIKNkrImIA+3iI3tej37ImjPI37I8qs+sGIyIkgV6IAxfr3ObCIcjsks4INrBwIE+jPs8sT+I
2024-10-07 16:54:39 UTC	2450	OUT	Data Raw: 38 42 5a 56 62 43 59 2d 38 78 79 70 49 65 74 70 2d 43 4d 49 41 2b 42 30 49 37 30 6c 6f 42 24 32 53 37 4e 36 49 36 49 6c 36 31 37 66 42 70 79 74 74 34 33 65 67 7a 73 74 4e 33 54 61 6b 62 4b 45 66 61 45 6b 67 69 77 63 35 73 46 49 6a 76 6f 62 57 33 52 46 30 6c 4a 66 69 2b 33 4c 6b 68 2b 58 74 4b 57 6b 72 4c 59 6a 65 4b 42 59 73 6f 6a 64 79 7a 58 74 71 61 77 2b 50 37 74 63 49 32 4b 66 39 73 56 30 75 61 73 70 67 49 74 42 72 49 48 48 53 72 33 74 4f 73 75 74 46 6d 42 4c 71 2d 52 46 38 76 31 37 4a 50 39 59 42 35 54 75 56 74 37 48 62 72 54 47 49 42 69 6d 64 49 4f 76 66 2b 33 69 67 79 50 75 2b 6b 58 42 6c 4f 65 72 6c 6c 65 56 35 61 65 61 54 56 42 64 49 4e 38 36 49 24 49 37 72 66 77 49 4d 71 4b 6e 56 72 33 4e 2b 66 61 31 4f 64 4c 59 65 6b 52 37 44 4e 4a 76 24 55 2d Data Ascii: 8BZVbCY-8xypIetp-CMIA+B0I70loB$2S7N6I6Il617fBpytt43egzstN3TakbKEfaEkgiwc5sFIjvobW3RF0lJfi+3Lkh+XtKWkrLYjeKBYsojdyzXtqaw+P7tcI2Kf9sV0uaspgItBrIHHSr3tOsutFmBLq-RF8v17JP9YB5TuVt7HbrTGIBimdIOvf+3igyPu+kXBlOerlleV5aeaTVBdIN86I$I7rfwIMqKnVr3N+fa1OdLYekR7DNJv$U-
2024-10-07 16:54:39 UTC	1291	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:39 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4632 Connection: close cf-chl-out: usrC4K2Ctx3bWvGEnm1anxluoayoTcTkf0+1F/mduHfppa3Ye72mDBVnKvFprRw5zlQvvU6LXc6+zKlbLf4Ndc93N7k7SbWMhkZOq2ild15ugSMxUm2lgw0=$5OqlL8baVMz3M+Vx cf-chl-out-s: ObdC0YOmf3zzccu9lvaXRsCY+a20KI/Hy8yS3btOq3+r438b3pmXyR7TIDNzbVSptOwZ92z/ZHY7MBXjyLetZPOf7dZt/Z2cUn6BVY+Yt2mYd90RgA0nQEnDrgdM6PfVjanWT1fei57rPXSfAj/X00JQnj6qBNhDe4NKv9P1NrwM8QGX58mV11p7NbGZoTVCTpc+SLm93tgwFrT3ihkL2F1GV5b/I8YtZ3tsHzYSyADGbkBThcMh+kWc++KUS9w5Kj9llSd3HPgb0czqTySShEl3DEjqBFokALWStSRIGNNn7fzbppwdJ0uSg5utd7uOXm9axx3xuOl4mEGx8D3eiYzAtYf+78pmgGc9qlnqjy8/vtG8cpIz/rwaEwK5G2+7f6g+lgmQGj95tVYVFcWryGWtyLPIomo6ApbH711Bimm/Z5fjF0UaHZvLR5uE4Y8tZUvpEg9Z3xFHD6k68pl0SxXpm8qrjXKpozdI3n360TQxUofJo49thPj8saUJmQWAvHUrYY5PR7AZCq4asZfvoGC4cuanZ6tFq0yyT06OxdWt8KvCIIjHlQfMD5O0KhDxbMcCStCoMDHogvtP8qa0/jl0YXtiRlW8YVXj7hzqR9OBLPQEAOI0fk3QE7xt3vmqR9f8ZCadAWIzt8uQZZkFpxn7w4o2MtB/zJWmU/UFJYn2jUSIj//cfK5KllHTpODf/aBUVGX/QWXS97+6/diNpQb4QI9oGORCutaqrNond5ABxXX4+etuMaSZGZbXGu9pQl6gr2APs/L0e3aPrOZDnlHoIqImz6ea/8J/Q0EHNIhPD29ZPYz/J443P7HlrVQVaoWiwCVMXdA81G7tRYX+HZ11z3wqmUKNSEJPL5m8ZSQ/z4Ep81Ab+ItMOetS8pyz09EpS18rYvWEtEuLph2hpOU=$ipwypaUEoAVzQUoX Server: cloudflare CF-RAY: 8cef6a0ebb2c19df-EWR
2024-10-07 16:54:39 UTC	78	IN	Data Raw: 6d 63 4c 46 77 70 76 44 67 37 75 48 6f 6f 76 42 69 62 6e 46 6f 36 58 4e 74 73 4c 41 6b 4e 6a 54 75 36 6e 54 6e 72 76 68 73 39 33 4d 6e 36 37 61 30 65 4b 78 33 63 79 34 76 38 6e 4e 30 4d 2b 36 30 64 54 54 7a 4f 66 72 37 63 76 6d 38 63 Data Ascii: mcLFwpvDg7uHoovBibnFo6XNtsLAkNjTu6nTnrvhs93Mn67a0eKx3cy4v8nN0M+60dTTzOfr7cvm8c
2024-10-07 16:54:39 UTC	1369	IN	Data Raw: 33 62 2f 76 7a 53 41 66 58 73 74 2f 62 39 38 4e 2f 6b 44 63 6e 67 78 74 6a 4e 34 64 4c 4b 45 51 73 53 30 73 6f 4b 30 67 7a 32 37 39 44 37 46 52 72 30 41 66 54 65 41 2f 77 4a 49 42 73 70 49 41 73 6d 44 4f 67 4c 4a 68 51 32 46 41 73 49 4d 67 73 59 48 50 51 50 50 79 6e 35 50 54 51 73 49 68 73 68 48 53 6b 46 4f 30 59 46 4c 30 59 74 4c 69 51 6d 4e 41 30 7a 4e 44 6b 53 4a 30 77 6e 46 6a 38 59 55 44 30 75 58 46 42 68 52 6b 51 36 61 6b 4a 4b 52 56 73 6c 62 55 39 52 4c 30 5a 78 64 58 46 6d 54 33 42 55 4c 58 31 4f 64 54 39 66 62 48 68 56 52 47 56 78 59 33 56 59 55 31 69 49 67 31 78 35 6a 46 74 79 68 34 2b 54 68 58 42 67 6c 47 32 57 6b 33 70 7a 61 5a 57 56 57 6e 36 56 63 32 5a 5a 6f 34 6d 4b 70 71 53 72 68 5a 36 52 69 33 71 72 6a 6f 46 78 72 49 53 6a 6d 71 79 4f 70 Data Ascii: 3b/vzSAfXst/b98N/kDcngxtjN4dLKEQsS0soK0gz279D7FRr0AfTeA/wJIBspIAsmDOgLJhQ2FAsIMgsYHPQPPyn5PTQsIhshHSkFO0YFL0YtLiQmNA0zNDkSJ0wnFj8YUD0uXFBhRkQ6akJKRVslbU9RL0ZxdXFmT3BULX1OdT9fbHhVRGVxY3VYU1iIg1x5jFtyh4+ThXBglG2Wk3pzaZWVWn6Vc2ZZo4mKpqSrhZ6Ri3qrjoFxrISjmqyOp
2024-10-07 16:54:39 UTC	1369	IN	Data Raw: 45 37 2f 37 55 76 39 48 70 31 2b 58 70 44 4f 50 62 36 52 54 6f 41 41 33 71 38 50 50 77 42 4f 6a 54 39 51 37 33 2b 74 67 61 39 76 41 55 33 76 73 5a 46 66 62 6b 4c 75 54 6c 35 6a 49 4b 44 41 41 50 4e 42 4d 4b 4f 67 4d 49 46 77 6a 30 4e 78 73 77 4f 50 6b 51 4d 44 41 6a 47 55 6b 69 51 52 38 2f 42 51 77 68 51 42 6f 76 4c 43 38 69 4d 53 59 51 51 31 67 31 53 45 68 55 4f 47 42 44 4e 6a 78 6b 56 47 64 44 61 6a 70 72 52 32 31 4b 61 6b 6b 39 53 6d 38 74 5a 31 46 30 52 57 68 61 56 45 68 4a 61 48 31 61 54 54 6d 43 57 58 52 33 59 32 42 41 69 49 4e 66 59 6e 68 4d 5a 6c 32 4e 57 32 4a 71 67 57 6c 74 57 59 53 55 64 58 6c 35 68 33 68 74 65 6e 78 38 66 32 47 45 66 70 71 56 64 33 70 33 6e 58 79 47 66 47 6d 70 6a 62 43 74 6a 4a 4a 35 6a 71 35 30 6c 70 61 6f 6d 35 79 73 77 70 Data Ascii: E7/7Uv9Hp1+XpDOPb6RToAA3q8PPwBOjT9Q73+tga9vAU3vsZFfbkLuTl5jIKDAAPNBMKOgMIFwj0NxswOPkQMDAjGUkiQR8/BQwhQBovLC8iMSYQQ1g1SEhUOGBDNjxkVGdDajprR21Kakk9Sm8tZ1F0RWhaVEhJaH1aTTmCWXR3Y2BAiINfYnhMZl2NW2JqgWltWYSUdXl5h3htenx8f2GEfpqVd3p3nXyGfGmpjbCtjJJ5jq50lpaom5yswp
2024-10-07 16:54:39 UTC	1369	IN	Data Raw: 34 77 77 48 37 4f 6b 51 33 65 33 4b 37 78 50 75 36 77 6e 30 39 2f 55 4f 37 76 54 31 45 76 45 65 38 43 41 47 2f 74 34 59 2b 65 6a 37 34 77 49 6c 41 69 50 6f 4c 77 73 50 39 50 41 53 45 69 55 45 44 79 67 53 4a 78 4d 61 48 68 30 58 4d 44 45 56 48 41 6b 54 48 53 51 6d 4f 7a 63 71 48 45 38 37 44 43 38 68 4e 44 41 69 4e 54 51 55 4f 43 70 5a 4c 46 4d 63 4f 7a 5a 6b 4e 69 63 66 51 79 55 6b 52 31 78 43 59 6b 42 4d 53 30 45 73 4c 44 4a 48 54 45 35 61 62 56 52 6f 56 6c 70 53 53 33 56 53 57 56 39 65 5a 44 2b 45 55 6d 64 6d 61 47 4a 49 59 59 46 51 61 32 2b 55 66 33 4e 71 59 33 5a 36 63 59 35 32 65 48 4e 59 64 6f 4a 30 66 70 78 2f 67 6e 4f 56 66 6d 70 74 71 4b 4f 4b 72 57 69 52 69 59 2b 77 71 59 69 44 73 4b 39 31 66 62 52 36 6a 4d 43 73 67 35 42 38 6a 6e 2b 57 78 4d 65 Data Ascii: 4wwH7OkQ3e3K7xPu6wn09/UO7vT1EvEe8CAG/t4Y+ej74wIlAiPoLwsP9PASEiUEDygSJxMaHh0XMDEVHAkTHSQmOzcqHE87DC8hNDAiNTQUOCpZLFMcOzZkNicfQyUkR1xCYkBMS0EsLDJHTE5abVRoVlpSS3VSWV9eZD+EUmdmaGJIYYFQa2+Uf3NqY3Z6cY52eHNYdoJ0fpx/gnOVfmptqKOKrWiRiY+wqYiDsK91fbR6jMCsg5B8jn+WxMe
2024-10-07 16:54:39 UTC	447	IN	Data Raw: 51 6a 6f 46 51 7a 4f 36 4f 37 5a 35 75 6e 54 39 52 54 33 39 66 72 71 2b 67 44 30 42 74 2f 78 2f 76 4c 34 47 53 7a 6f 43 79 77 4c 42 67 59 6e 44 69 77 4d 44 67 59 33 43 52 63 31 45 68 51 4b 44 69 45 55 48 68 49 39 46 55 67 61 50 67 6f 69 4b 6a 30 49 4a 6a 73 76 43 30 42 54 4d 79 6b 6a 4b 55 4d 56 48 53 35 55 46 30 77 74 51 42 73 76 54 30 41 67 4b 56 4e 46 49 30 64 43 58 53 68 68 54 55 38 72 54 7a 35 70 4d 48 52 47 62 44 52 6f 56 6e 42 52 53 31 6c 65 50 45 57 44 62 7a 39 30 59 57 56 64 54 59 53 42 59 5a 46 68 63 55 79 41 67 32 39 6f 57 57 61 4a 56 4a 69 59 6b 58 46 32 67 5a 75 50 6d 49 39 76 68 32 61 4a 5a 4a 53 57 66 47 79 74 71 4b 35 73 62 36 46 76 64 49 53 46 6f 33 74 75 63 36 32 50 6d 58 65 39 6d 6e 71 52 73 5a 69 68 75 34 69 4c 66 6f 50 45 69 4d 33 4a Data Ascii: QjoFQzO6O7Z5unT9RT39frq+gD0Bt/x/vL4GSzoCywLBgYnDiwMDgY3CRc1EhQKDiEUHhI9FUgaPgoiKj0IJjsvC0BTMykjKUMVHS5UF0wtQBsvT0AgKVNFI0dCXShhTU8rTz5pMHRGbDRoVnBRS1lePEWDbz90YWVdTYSBYZFhcUyAg29oWWaJVJiYkXF2gZuPmI9vh2aJZJSWfGytqK5sb6FvdISFo3tuc62PmXe9mnqRsZihu4iLfoPEiM3J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:39 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 16:54:39 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=172329 Date: Mon, 07 Oct 2024 16:54:39 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 16:54:39 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49746	104.18.95.41	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:39 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1366294320:1728318615:2JjXzTu9lqVz5H8mEaag0ElC5Asvh6dQXlCOiplaCUI/8cef69e1b9780ced/87b66ef02a7c392 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:40 UTC	349	IN	HTTP/1.1 404 Not Found Date: Mon, 07 Oct 2024 16:54:39 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: qZcizXvGkIMEG6Rz8MX8JtOBHAjMYUKEwNE=$6lZYYUYAoYfgE45Z cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cef6a13ddfcde9a-EWR
2024-10-07 16:54:40 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49749	188.114.97.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:40 UTC	1215	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1310495476:1728318649:pB1YPIUF28SWt_BWZWhfGh-z19KQZFWcJJIavfqK3kM/8cef69cd4bf56a5c/0adb6525cba31fd HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive Content-Length: 4300 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: 0adb6525cba31fd sec-ch-ua-platform: "Windows" Accept: / Origin: https://doccloudshareddrive.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:40 UTC	4300	OUT	Data Raw: 76 5f 38 63 65 66 36 39 63 64 34 62 66 35 36 61 35 63 3d 44 4e 38 35 33 64 78 56 43 39 43 2d 6a 6d 68 4f 4b 4f 76 39 38 64 79 4f 50 4f 54 35 30 41 30 49 64 4f 63 4f 6a 41 4f 49 78 63 4f 4b 6f 38 64 30 72 4f 77 30 4f 69 7a 4f 6d 56 78 67 4f 36 70 69 49 4f 57 4f 30 77 43 4f 63 35 6b 44 39 57 2d 35 78 68 50 37 78 4f 69 55 47 6a 35 65 6a 78 45 4f 69 57 49 4f 71 6d 41 2d 79 71 4f 38 4e 4f 74 4f 69 71 49 4f 24 6d 30 71 49 4f 2d 35 4f 6e 62 73 2d 69 42 6a 78 71 24 6b 79 65 78 78 72 4c 66 74 68 65 2d 43 39 45 4f 41 47 4a 76 70 4f 25 32 62 64 43 4f 42 4f 4f 46 4a 4f 4f 61 4f 39 70 4f 2d 6d 7a 5a 51 78 43 4f 30 63 35 4f 37 35 78 62 4f 30 45 38 51 6b 66 4c 46 53 31 41 59 35 64 56 4d 55 6b 49 4f 24 55 47 4f 2d 39 56 70 45 4f 39 2b 75 70 30 52 45 41 31 4d 4b 79 45 4f Data Ascii: v_8cef69cd4bf56a5c=DN853dxVC9C-jmhOKOv98dyOPOT50A0IdOcOjAOIxcOKo8d0rOw0OizOmVxgO6piIOWO0wCOc5kD9W-5xhP7xOiUGj5ejxEOiWIOqmA-yqO8NOtOiqIO$m0qIO-5Onbs-iBjxq$kyexxrLfthe-C9EOAGJvpO%2bdCOBOOFJOOaO9pO-mzZQxCO0c5O75xbO0E8QkfLFS1AY5dVMUkIO$UGO-9VpEO9+up0REA1MKyEO
2024-10-07 16:54:40 UTC	1251	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 16:54:40 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4312 Connection: close cf-chl-out: 8u9zfnJjTGuT+QqvE3WQxPi54SXDtosX3k/BgJeJJpgCu1VxJNGPr1IB9+RxlO8Gfn1scGDibm0mm6Er6rWK2snZkb7p$xxHSZ/D/dqepv5YS cf-chl-out-s: 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$c2bJqKiZhTWidmrg set-cookie: cf_chl_rc_m=;Expires=Sun, 06 Oct 2024 16:54:40 GMT;SameSite=Strict
2024-10-07 16:54:40 UTC	395	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4c 49 55 52 35 77 33 6b 76 69 4d 30 4d 4a 39 4c 65 4c 6a 69 57 44 64 75 74 65 33 6e 55 74 67 31 31 69 55 6d 75 74 62 58 49 46 44 4f 47 46 77 38 54 79 6c 73 46 44 45 6b 4a 34 71 48 25 32 42 56 46 63 6a 77 71 6d 66 51 75 78 39 53 4a 53 70 4c 4f 65 50 6f 31 51 30 42 25 32 42 25 32 42 4f 78 43 62 68 36 78 52 41 71 6a 4b 46 6f 72 58 69 6b 42 64 69 61 6c 50 4f 59 49 77 58 32 62 70 25 32 42 75 37 4b 63 4e 4e 51 6c 69 4a 46 49 25 32 42 73 73 5a 6e 38 39 48 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LIUR5w3kviM0MJ9LeLjiWDdute3nUtg11iUmutbXIFDOGFw8TylsFDEkJ4qH%2BVFcjwqmfQux9SJSpLOePo1Q0B%2B%2BOxCbh6xRAqjKForXikBdialPOYIwX2bp%2Bu7KcNNQliJFI%2BssZn89HQ%3D%3D"}],"group":"cf-nel
2024-10-07 16:54:40 UTC	1092	IN	Data Raw: 59 34 31 70 5a 4a 6c 70 5a 48 6d 51 66 6e 52 2f 6a 6e 68 33 6c 70 4a 68 63 58 6c 67 66 59 68 6d 71 35 65 4e 67 6d 65 47 72 33 2b 7a 6f 49 35 76 6f 62 43 32 69 72 65 33 6b 48 57 37 75 35 57 55 77 36 36 76 6c 58 2b 7a 67 62 61 4b 7a 4d 69 62 70 36 32 7a 6e 61 2b 68 72 70 61 78 6b 4a 50 47 6d 36 62 59 73 4c 6a 55 74 71 4b 38 73 5a 32 6d 74 37 58 47 71 73 57 34 37 62 37 4c 30 71 7a 79 77 76 50 68 76 39 54 57 78 72 72 56 2f 72 58 76 32 74 33 78 30 4e 76 6d 77 41 6a 57 43 4e 66 69 35 4e 6e 72 34 2b 66 69 7a 4d 76 69 46 4e 2f 73 39 75 62 6d 32 68 49 4c 2f 67 6e 6f 37 51 37 72 2f 66 41 6e 45 2b 67 70 4a 66 51 48 2b 52 6f 4a 44 50 33 72 49 52 62 31 4a 42 54 77 4a 53 4d 45 48 69 30 50 47 6a 6b 75 47 42 49 6a 41 78 6b 35 41 78 39 4b 42 52 73 48 49 44 35 4e 4c 52 41 Data Ascii: Y41pZJlpZHmQfnR/jnh3lpJhcXlgfYhmq5eNgmeGr3+zoI5vobC2ire3kHW7u5WUw66vlX+zgbaKzMibp62zna+hrpaxkJPGm6bYsLjUtqK8sZ2mt7XGqsW47b7L0qzywvPhv9TWxrrV/rXv2t3x0NvmwAjWCNfi5Nnr4+fizMviFN/s9ubm2hIL/gno7Q7r/fAnE+gpJfQH+RoJDP3rIRb1JBTwJSMEHi0PGjkuGBIjAxk5Ax9KBRsHID5NLRA
2024-10-07 16:54:40 UTC	1369	IN	Data Raw: 78 59 61 65 71 4d 69 4b 6f 71 7a 4f 31 4b 7a 56 6f 39 54 46 7a 38 4f 6e 70 62 58 47 70 37 71 36 71 73 47 38 76 64 53 2b 32 65 66 47 74 4c 58 62 7a 72 32 35 33 39 4c 42 76 65 50 57 7a 75 58 31 73 37 48 32 75 50 62 4a 36 4d 2f 4e 77 38 7a 5a 35 39 66 55 38 77 4c 6f 35 50 72 63 45 66 72 69 36 38 37 4b 41 4f 48 6c 43 65 62 6d 38 51 30 51 44 75 6b 4b 2f 67 30 59 34 41 2f 77 4a 79 4d 54 2f 43 77 41 4c 77 6b 66 42 67 54 78 4d 69 38 33 45 6a 55 4a 46 52 51 36 45 68 55 55 51 42 58 37 45 30 4d 2f 4d 67 5a 46 4d 54 70 41 42 54 70 4b 43 42 41 65 43 54 4a 4e 42 79 77 32 4a 53 4a 44 49 78 55 74 57 6c 51 37 55 43 49 2f 51 57 4d 79 52 31 64 6a 58 57 4a 45 61 55 55 6e 4f 47 39 78 53 45 39 6f 62 56 64 52 56 6b 4e 52 56 7a 78 6e 55 33 35 65 54 58 52 45 58 56 70 62 59 6d 57 Data Ascii: xYaeqMiKoqzO1KzVo9TFz8OnpbXGp7q6qsG8vdS+2efGtLXbzr2539LBvePWzuX1s7H2uPbJ6M/Nw8zZ59fU8wLo5PrcEfri687KAOHlCebm8Q0QDukK/g0Y4A/wJyMT/CwALwkfBgTxMi83EjUJFRQ6EhUUQBX7E0M/MgZFMTpABTpKCBAeCTJNByw2JSJDIxUtWlQ7UCI/QWMyR1djXWJEaUUnOG9xSE9obVdRVkNRVzxnU35eTXREXVpbYmW
2024-10-07 16:54:40 UTC	1369	IN	Data Raw: 71 65 61 72 59 62 4b 6e 38 6d 67 31 36 58 4a 6d 62 53 57 70 39 2f 51 74 73 44 41 34 4d 50 6d 34 75 62 47 78 37 72 4f 33 65 44 68 35 4f 58 4a 35 63 76 45 74 2b 61 79 73 72 66 31 7a 76 7a 77 30 76 50 4d 2b 76 6e 78 31 74 7a 57 36 51 6a 54 77 75 58 5a 33 51 54 65 36 76 44 78 38 76 4c 79 47 75 48 79 31 52 63 51 2b 78 30 4d 2b 69 51 50 39 50 77 44 34 42 2f 7a 2f 42 6f 59 47 76 30 67 4c 42 45 53 4a 42 55 69 43 66 44 34 4b 79 54 30 2f 42 30 66 2b 50 73 71 45 6a 51 56 4c 68 6b 41 42 44 49 55 42 52 30 64 4b 77 6c 48 4c 43 56 45 4b 6b 38 30 45 45 51 30 4b 6b 78 49 54 30 68 51 4d 53 30 2f 55 30 56 53 4e 53 41 35 58 6a 63 6b 50 56 34 37 4b 45 46 65 52 69 31 72 51 56 4d 77 54 6e 64 6a 62 47 5a 47 56 7a 70 37 64 47 43 42 67 46 2b 49 63 31 6c 66 51 6b 56 49 61 58 65 41 Data Ascii: qearYbKn8mg16XJmbSWp9/QtsDA4MPm4ubGx7rO3eDh5OXJ5cvEt+aysrf1zvzw0vPM+vnx1tzW6QjTwuXZ3QTe6vDx8vLyGuHy1RcQ+x0M+iQP9PwD4B/z/BoYGv0gLBESJBUiCfD4KyT0/B0f+PsqEjQVLhkABDIUBR0dKwlHLCVEKk80EEQ0KkxIT0hQMS0/U0VSNSA5XjckPV47KEFeRi1rQVMwTndjbGZGVzp7dGCBgF+Ic1lfQkVIaXeA
2024-10-07 16:54:40 UTC	482	IN	Data Raw: 4b 31 7a 39 61 34 7a 4c 58 55 75 4b 32 36 74 62 75 34 7a 72 76 6c 6f 4c 75 31 70 71 72 6e 74 38 33 64 76 61 33 75 37 61 2b 7a 78 66 62 4f 79 39 58 4a 7a 74 50 59 38 39 62 69 42 66 53 38 31 2f 37 44 34 4d 54 54 44 4e 62 68 37 4e 77 46 35 2f 48 68 44 66 4c 70 43 2f 62 36 39 50 6e 33 31 67 77 50 49 41 37 56 33 79 66 38 2b 2f 41 65 47 68 62 38 4c 67 2f 33 4d 51 6e 76 2b 7a 51 78 48 77 6b 44 4c 44 55 52 46 78 73 5a 50 7a 77 4e 48 78 39 45 44 69 45 61 4b 52 6b 6a 46 78 5a 47 47 6b 59 44 55 42 34 66 49 6b 78 54 4e 55 6b 79 57 6a 6f 70 56 54 68 66 58 44 55 2f 51 6b 55 39 48 6d 4d 66 4a 57 6b 33 57 6d 4e 59 50 55 56 46 50 69 78 46 50 30 6f 31 59 30 68 54 52 6d 74 55 53 6e 59 7a 56 6b 35 50 55 6e 79 44 5a 58 6c 69 69 6d 70 5a 68 57 69 50 69 35 4e 64 62 5a 46 74 68 Data Ascii: K1z9a4zLXUuK26tbu4zrvloLu1pqrnt83dva3u7a+zxfbOy9XJztPY89biBfS81/7D4MTTDNbh7NwF5/HhDfLpC/b69Pn31gwPIA7V3yf8+/AeGhb8Lg/3MQnv+zQxHwkDLDURFxsZPzwNHx9EDiEaKRkjFxZGGkYDUB4fIkxTNUkyWjopVThfXDU/QkU9HmMfJWk3WmNYPUVFPixFP0o1Y0hTRmtUSnYzVk5PUnyDZXliimpZhWiPi5NdbZFth

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49753	188.114.96.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:41 UTC	485	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1310495476:1728318649:pB1YPIUF28SWt_BWZWhfGh-z19KQZFWcJJIavfqK3kM/8cef69cd4bf56a5c/0adb6525cba31fd HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:42 UTC	696	IN	HTTP/1.1 404 Not Found Date: Mon, 07 Oct 2024 16:54:42 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: MDt/T2fQyvRTNH1AYjPco1A7EGD2On0z/xU=$vNs4xkS9SoJut949 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=atRXaLa0BdUgveq%2BIAZgDWMc3xZeKvJE8XltMJe10QY2Gf7Suh%2BiHiqM4aO%2BAiLVVSxaU%2B4n6UGEnDzu4yO2bQmb6r6l9fZMXnoZEoiH%2B7gxXehlPyQSnZQX%2F%2FAL99woYKe6lXlMF2mqHQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cef6a208c4c8c12-EWR
2024-10-07 16:54:42 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49754	188.114.97.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:41 UTC	1475	OUT	POST /?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive Content-Length: 6161 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 Origin: https://doccloudshareddrive.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true&__cf_chl_tk=ZUUetqJzfrOgTZTRyYkoHuhNBWNkxiwOKuNE.JvS564-1728320068-0.0.1.1-5695 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:41 UTC	6161	OUT	Data Raw: 64 63 38 35 62 61 33 30 65 39 30 34 39 64 62 32 39 64 31 38 66 66 38 32 63 31 62 39 37 65 34 38 64 33 33 37 38 65 36 36 66 63 62 31 31 38 32 32 38 65 30 64 36 61 62 61 34 65 63 30 30 33 30 31 3d 71 61 2e 51 57 79 61 76 48 4a 50 52 79 6a 71 70 67 37 58 6e 55 7a 41 79 4c 49 79 74 54 66 4a 76 5f 75 50 37 49 74 30 6b 4b 43 51 2d 31 37 32 38 33 32 30 30 36 38 2d 31 2e 31 2e 31 2e 31 2d 63 39 67 33 4b 31 58 32 6c 6b 43 32 57 7a 39 45 32 6c 6a 39 71 71 57 51 33 49 41 72 6b 37 65 73 4b 44 57 52 4d 63 48 6a 6a 6d 53 46 6d 52 70 66 64 4e 72 75 34 52 34 37 31 75 34 63 31 4f 55 46 47 4f 6f 46 31 6d 6f 41 59 30 70 49 4b 65 36 45 4f 42 35 52 6c 73 46 37 70 6a 4a 58 55 72 77 44 36 71 49 57 64 51 4a 70 71 30 4b 61 77 48 79 66 54 6f 7a 47 73 35 66 62 6f 76 72 73 6b 77 35 Data Ascii: dc85ba30e9049db29d18ff82c1b97e48d3378e66fcb118228e0d6aba4ec00301=qa.QWyavHJPRyjqpg7XnUzAyLIytTfJv_uP7It0kKCQ-1728320068-1.1.1.1-c9g3K1X2lkC2Wz9E2lj9qqWQ3IArk7esKDWRMcHjjmSFmRpfdNru4R471u4c1OUFGOoF1moAY0pIKe6EOB5RlsF7pjJXUrwD6qIWdQJpq0KawHyfTozGs5fbovrskw5
2024-10-07 16:54:42 UTC	1358	IN	HTTP/1.1 403 The gods of RaccoonO365 Service are wise, but they do not know what you seeks! Date: Mon, 07 Oct 2024 16:54:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.doccloudshareddrive.com; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=EQjVaIhl5a5jkaXZijJu85d2uwdqqCumhzL5ZQgEn.I-1728320068-1.2.1.1-O1wZF1nAvChmBuDUd40bVlipuAWN4LwLSI3BRb8syCuGrxaB4l4kR9dgYuvA6PMZ168fVoQL3K8trIbCGQyDrafp6RNdibmHoAKOFULXB837kdAEdnjbpzwMAtrKSighlItoqLyH9BxYsFq5bgAokkNwGxHAnMDxNGkoiRUj.f3TAcu1J6GiHdDkhutUv1v71Y9xho2cKRxZ0lgrnYc28tQz8HdYWedF1MY_wuPzcEliH4Sh6vpxiM7tQlFGPYIKBBez0v8YQ8ZEO9rmP6U3GEVuPguayCpZs1OnkTvH7IJaj6K_MmvwgiDZtycDGpe8WzUFevLeaWfmtSmV2jmxF4MIfA1h6hxJzur8j9568nPo7E98pEXqvRGroD1fnmO1oQ5it6AGY_FCYoZG9sjLEN.S39dBP2HZCF2lXqMMWBiI_I74FsTBx9PUDQKxF1B6; Path=/; Expires=Tue, 07-Oct-25 16:54:42 GMT; Domain=.doccloudshareddrive.com; HttpOnly; Secure; SameSite=None; Partitioned Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Feature-Policy: camera 'none'; microphone 'none' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Powered-By: RaccoonO365 2FA/MFA Service X-Powered-CMS: RaccoonO365 2FA/MFA Service X-Robots-Tag: noindex, nofollow X-ServerName: RaccoonO365
2024-10-07 16:54:42 UTC	487	IN	Data Raw: 58 2d 53 65 72 76 65 72 56 65 72 73 69 6f 6e 3a 20 33 2e 35 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 61 41 31 4d 57 70 67 43 67 49 37 69 49 4b 67 41 67 25 32 46 50 4f 50 37 6a 6e 45 46 45 67 42 50 6f 68 76 42 4f 79 31 79 7a 4e 4e 77 39 4d 4e 65 6d 72 74 68 50 7a 56 32 59 58 4b 69 45 4e 48 4a 62 74 46 6f 34 59 53 64 44 37 33 53 41 4a 4a 75 4b 45 58 4c 5a 34 46 33 72 25 32 46 79 36 48 76 42 67 49 53 30 45 46 63 6b 36 6c 6e 62 66 6f 6d 77 33 7a 68 61 7a 7a 65 77 Data Ascii: X-ServerVersion: 3.5X-XSS-Protection: 1; mode=blockReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kaA1MWpgCgI7iIKgAg%2FPOP7jnEFEgBPohvBOy1yzNNw9MNemrthPzV2YXKiENHJbtFo4YSdD73SAJJuKEXLZ4F3r%2Fy6HvBgIS0EFck6lnbfomw3zhazzew
2024-10-07 16:54:42 UTC	1369	IN	Data Raw: 32 30 36 35 0d 0a 0a 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 0a 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 76 61 72 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 2065 <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> </head> <body> <script> (function() { var obfuscateCode = function(
2024-10-07 16:54:42 UTC	1369	IN	Data Raw: 72 61 79 20 3d 20 65 6e 63 6f 64 65 64 53 74 72 2e 73 70 6c 69 74 28 27 3b 26 23 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 68 65 78 41 72 72 61 79 2e 66 6f 72 45 61 63 68 28 68 65 78 20 3d 3e 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 65 63 6f 64 65 64 53 74 72 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 70 61 72 73 65 49 6e 74 28 68 65 78 2c 20 31 36 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 65 63 6f 64 65 64 53 74 72 3b 0a 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 76 61 72 20 65 78 65 63 75 74 65 44 65 63 6f 64 65 64 43 6f 6e 74 65 6e 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 Data Ascii: ray = encodedStr.split(';&#'); hexArray.forEach(hex => { decodedStr += String.fromCharCode(parseInt(hex, 16)); }); return decodedStr; }; var executeDecodedContent = function() {
2024-10-07 16:54:42 UTC	1369	IN	Data Raw: 23 32 30 3b 26 23 37 37 3b 26 23 36 39 3b 26 23 37 33 3b 26 23 36 35 3b 26 23 32 63 3b 26 23 32 30 3b 26 23 36 32 3b 26 23 37 35 3b 26 23 37 34 3b 26 23 32 30 3b 26 23 37 34 3b 26 23 36 38 3b 26 23 36 35 3b 26 23 37 39 3b 26 23 32 30 3b 26 23 36 34 3b 26 23 36 66 3b 26 23 32 30 3b 26 23 36 65 3b 26 23 36 66 3b 26 23 37 34 3b 26 23 32 30 3b 26 23 36 62 3b 26 23 36 65 3b 26 23 36 66 3b 26 23 37 37 3b 26 23 32 30 3b 26 23 37 37 3b 26 23 36 38 3b 26 23 36 31 3b 26 23 37 34 3b 26 23 32 30 3b 26 23 37 39 3b 26 23 36 66 3b 26 23 37 35 3b 26 23 32 30 3b 26 23 37 33 3b 26 23 36 35 3b 26 23 36 35 3b 26 23 36 62 3b 26 23 37 33 3b 26 23 32 31 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 37 30 3b 26 23 37 32 3b 26 23 36 35 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 Data Ascii: #20;MEIA&#2c;>KJJDAO@&#6f;&#6e;&#6f;J&#6b;&#6e;&#6f;MMD=JO&#6f;KIAA&#6b;I&#3c;&#2f;FHA&#3e;&#0a;&
2024-10-07 16:54:42 UTC	1369	IN	Data Raw: 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 32 30 3b 26 23 37 62 3b 26 23 32 30 3b 26 23 37 33 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 35 34 3b 26 23 36 39 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 36 66 3b 26 23 37 35 3b 26 23 37 34 3b 26 23 32 38 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 32 30 3b 26 23 37 62 3b 26 23 32 30 3b 26 23 37 37 3b 26 23 36 39 3b 26 23 36 65 3b 26 23 36 34 3b 26 23 36 66 3b 26 23 37 37 3b 26 23 32 65 3b 26 23 37 34 3b Data Ascii: BK&#6e;?JE&#6f;&#6e;&#7b;IAJ6E&#6d;A&#6f;KJBK&#6e;?JE&#6f;&#6e;&#7b;ME&#6e;@&#6f;M&#2e;J
2024-10-07 16:54:42 UTC	1369	IN	Data Raw: 3b 26 23 36 63 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 32 30 3b 26 23 33 31 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 35 64 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 37 33 3b 26 23 32 65 3b 26 23 36 36 3b 26 23 36 66 3b 26 23 37 32 3b 26 23 34 35 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 38 Data Ascii: ;&#6c;&#3b;&#7d;&#2c;&#3b;&#7d;&#0a;&#5d;&#3b;&#0a;&#0a;BK&#6e;?JE&#6f;&#6e;I&#2e;B&#6f;H-=?&#68
2024-10-07 16:54:42 UTC	1369	IN	Data Raw: 72 20 64 75 6d 6d 79 41 72 72 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 31 30 30 30 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 75 6d 6d 79 41 72 72 2e 70 75 73 68 28 27 64 75 6d 6d 79 27 20 2b 20 69 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 73 63 72 69 70 74 27 29 3b 0a Data Ascii: r dummyArr = []; for (var i = 0; i < 1000; i++) { dummyArr.push('dummy' + i); } }; document.addEventListener("DOMContentLoaded", function() { var script = document.querySelector('script');
2024-10-07 16:54:42 UTC	87	IN	Data Raw: 79 53 74 61 74 65 26 26 28 64 6f 63 75 6d 65 6e 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 65 2c 63 28 29 29 7d 7d 7d 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 0a 20 20 20 3c 2f 68 74 6d 6c 3e 0a 20 20 20 20 20 20 0d 0a Data Ascii: yState&&(document.onreadystatechange=e,c())}}}})();</script></body> </html>
2024-10-07 16:54:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49755	188.114.97.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:41 UTC	1088	OUT	GET /favicon.ico HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true&__cf_chl_tk=ZUUetqJzfrOgTZTRyYkoHuhNBWNkxiwOKuNE.JvS564-1728320068-0.0.1.1-5695 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:54:42 UTC	1043	IN	HTTP/1.1 403 The gods of RaccoonO365 Service are wise, but they do not know what you seeks! Date: Mon, 07 Oct 2024 16:54:42 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Feature-Policy: camera 'none'; microphone 'none' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Powered-By: RaccoonO365 2FA/MFA Service X-Powered-CMS: RaccoonO365 2FA/MFA Service X-Robots-Tag: noindex, nofollow X-ServerName: RaccoonO365 X-ServerVersion: 3.5 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oZ9seZ37zhZmFzRsdlxqoyuQweYquakjuPQ5CIsYNbnvWApt41TYv40st50XKgl3t8FIQwK7g1G7snQ%2BKlczP6BEgv3JXoxRbPEjb9Xe0ccTahiskktNg1sDYMxQkMRaY7v2NiamQ0j3dQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cef6a20ea0a184d-EWR
2024-10-07 16:54:42 UTC	326	IN	Data Raw: 31 63 62 62 0d 0a 0a 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 0a 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 76 61 72 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1cbb <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> </head> <body> <script> (function() { var obfuscateCode = function(
2024-10-07 16:54:42 UTC	1369	IN	Data Raw: 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 61 72 73 20 3d 20 7b 7d 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 63 6f 64 65 20 3d 20 63 6f 64 65 2e 72 65 70 6c 61 63 65 28 2f 76 61 72 73 2b 28 5b 61 2d 7a 41 2d 5a 5f 24 5d 5b 30 2d 39 61 2d 7a 41 2d 5a 5f 24 5d 2a 29 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 6d 61 74 63 68 2c 20 70 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 65 77 56 61 72 73 5b 70 31 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 56 61 72 73 5b 70 31 5d 20 3d 20 63 68 61 72 73 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 63 68 61 72 73 2e 6c 65 6e 67 74 68 29 5d 20 2b Data Ascii: NOPQRSTUVWXYZ'; var newVars = {}; code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$])/g, function(match, p1) { if (!newVars[p1]) { newVars[p1] = chars[Math.floor(Math.random() chars.length)] +
2024-10-07 16:54:42 UTC	1369	IN	Data Raw: 34 3b 26 23 35 39 3b 26 23 35 30 3b 26 23 34 35 3b 26 23 32 30 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 36 35 3b 26 23 36 31 3b 26 23 36 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 36 31 3b 26 23 32 30 3b 26 23 36 65 3b 26 23 36 31 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 33 64 3b 26 23 32 32 3b 26 23 37 32 3b 26 23 36 66 3b 26 23 36 32 3b 26 23 36 66 3b 26 23 37 34 3b 26 23 37 33 3b 26 23 32 32 3b 26 23 32 30 3b 26 23 36 Data Ascii: 4;;2-DJ&#6d;&#6c;&#3e;&#0a;&#3c;DJ&#6d;&#6c;&#3e;&#0a;&#3c;DA=@&#3e;&#0a;&#3c;&#6d;AJ=&#6e;=&#6d;A&#3d;H&#6f;>&#6f;JI&#6
2024-10-07 16:54:42 UTC	1369	IN	Data Raw: 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 36 3b 26 23 36 31 3b 26 23 37 32 3b 26 23 32 30 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 30 3b 26 23 33 64 3b 26 23 32 30 3b 26 23 32 32 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 37 34 3b 26 23 37 30 3b 26 23 37 33 3b 26 23 33 61 3b 26 23 32 66 3b 26 23 32 66 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 32 65 3b 26 23 36 66 3b 26 23 36 36 3b 26 23 36 36 3b 26 23 36 39 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 32 65 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 64 3b 26 23 32 66 3b 26 23 32 32 3b 26 23 33 62 3b 26 23 Data Ascii: 20;L=HH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3d;DJJFI&#3a;&#2f;&#2f;MMM&#2e;&#6f;BBE?A&#2e;?&#6f;&#6d;&#2f;&#3b;&#
2024-10-07 16:54:42 UTC	1369	IN	Data Raw: 23 37 30 3b 26 23 36 63 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 32 38 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 32 30 3b 26 23 33 31 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 36 66 3b 26 Data Ascii: #70;&#6c;=?AH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3b;&#7d;&#2c;&#3b;&#7d;&#2c;&#0a;BK&#6e;?JE&#6f;&
2024-10-07 16:54:42 UTC	1369	IN	Data Raw: 26 23 32 39 3b 26 23 32 30 3b 26 23 37 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 37 33 3b 26 23 36 33 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 37 30 3b 26 23 37 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 36 32 3b 26 23 36 66 3b 26 23 36 34 3b Data Ascii: &#7b;&#0a;BK&#6e;?&#3b;&#0a;&#7d;&#3b;&#0a;&#3c;&#2f;I?HEFJ&#3e;&#0a;&#3c;&#2f;>&#6f;@
2024-10-07 16:54:42 UTC	192	IN	Data Raw: 20 3d 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 28 63 6f 64 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 6f 62 66 75 73 63 61 74 65 64 43 6f 64 65 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 65 78 65 63 75 74 65 44 65 63 6f 64 65 64 43 6f 6e 74 65 6e 74 28 29 3b 0a 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 7d 29 28 29 3b 0a 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 0a 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 3c 2f 68 74 6d 6c 3e 0a 20 20 20 20 20 20 0d 0a Data Ascii: = obfuscateCode(code); script.textContent = obfuscatedCode; executeDecodedContent(); }); })(); </script> </body> </html>
2024-10-07 16:54:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49757	188.114.97.3	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:54:43 UTC	1365	OUT	GET /favicon.ico HTTP/1.1 Host: doccloudshareddrive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_clearance=EQjVaIhl5a5jkaXZijJu85d2uwdqqCumhzL5ZQgEn.I-1728320068-1.2.1.1-O1wZF1nAvChmBuDUd40bVlipuAWN4LwLSI3BRb8syCuGrxaB4l4kR9dgYuvA6PMZ168fVoQL3K8trIbCGQyDrafp6RNdibmHoAKOFULXB837kdAEdnjbpzwMAtrKSighlItoqLyH9BxYsFq5bgAokkNwGxHAnMDxNGkoiRUj.f3TAcu1J6GiHdDkhutUv1v71Y9xho2cKRxZ0lgrnYc28tQz8HdYWedF1MY_wuPzcEliH4Sh6vpxiM7tQlFGPYIKBBez0v8YQ8ZEO9rmP6U3GEVuPguayCpZs1OnkTvH7IJaj6K_MmvwgiDZtycDGpe8WzUFevLeaWfmtSmV2jmxF4MIfA1h6hxJzur8j9568nPo7E98pEXqvRGroD1fnmO1oQ5it6AGY_FCYoZG9sjLEN.S39dBP2HZCF2lXqMMWBiI_I74FsTBx9PUDQKxF1B6
2024-10-07 16:54:43 UTC	1087	IN	HTTP/1.1 403 The gods of RaccoonO365 Service are wise, but they do not know what you seeks! Date: Mon, 07 Oct 2024 16:54:43 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Feature-Policy: camera 'none'; microphone 'none' Referrer-Policy: no-referrer X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Powered-By: RaccoonO365 2FA/MFA Service X-Powered-CMS: RaccoonO365 2FA/MFA Service X-Robots-Tag: noindex, nofollow X-ServerName: RaccoonO365 X-ServerVersion: 3.5 X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gTln%2BVYMkt61TcAGkWSCb09LdwuYddRKOC%2FLJHyDMF9qJOATJjHT%2FETg34tOhLOY77SRhxkU7VA54Sds8Y%2B9mUywjwvNVSynfHFWLrYrU%2Fi5EM%2F6Lfk9Kw%2FTcXxG2%2BzfVLzKl0F1AvxkCg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cef6a28ab9c4257-EWR alt-svc: h3=":443"; ma=86400
2024-10-07 16:54:43 UTC	282	IN	Data Raw: 31 63 62 62 0d 0a 0a 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 0a 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 76 61 72 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1cbb <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> </head> <body> <script> (function() { var obfuscateCode = function(
2024-10-07 16:54:43 UTC	1369	IN	Data Raw: 73 20 3d 20 27 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 61 72 73 20 3d 20 7b 7d 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 63 6f 64 65 20 3d 20 63 6f 64 65 2e 72 65 70 6c 61 63 65 28 2f 76 61 72 73 2b 28 5b 61 2d 7a 41 2d 5a 5f 24 5d 5b 30 2d 39 61 2d 7a 41 2d 5a 5f 24 5d 2a 29 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 6d 61 74 63 68 2c 20 70 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 6e 65 77 56 61 72 73 5b 70 31 5d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 65 77 56 61 72 73 5b 70 31 5d 20 3d 20 63 68 61 72 73 Data Ascii: s = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'; var newVars = {}; code = code.replace(/vars+([a-zA-Z_$][0-9a-zA-Z_$]*)/g, function(match, p1) { if (!newVars[p1]) { newVars[p1] = chars
2024-10-07 16:54:43 UTC	1369	IN	Data Raw: 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 31 3b 26 23 34 34 3b 26 23 34 66 3b 26 23 34 33 3b 26 23 35 34 3b 26 23 35 39 3b 26 23 35 30 3b 26 23 34 35 3b 26 23 32 30 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 36 64 3b 26 23 36 63 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 38 3b 26 23 36 35 3b 26 23 36 31 3b 26 23 36 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 37 34 3b 26 23 36 31 3b 26 23 32 30 3b 26 23 36 65 3b 26 23 36 31 3b 26 23 36 64 3b 26 23 36 35 3b 26 23 33 64 3b 26 23 32 32 Data Ascii: ;&#3c;,&#4f;+6;2-DJ&#6d;&#6c;&#3e;&#0a;&#3c;DJ&#6d;&#6c;&#3e;&#0a;&#3c;DA=@&#3e;&#0a;&#3c;&#6d;AJ=&#6e;=&#6d;A&#3d;&#22
2024-10-07 16:54:43 UTC	1369	IN	Data Raw: 33 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 37 30 3b 26 23 37 34 3b 26 23 33 65 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 36 3b 26 23 36 31 3b 26 23 37 32 3b 26 23 32 30 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 30 3b 26 23 33 64 3b 26 23 32 30 3b 26 23 32 32 3b 26 23 36 38 3b 26 23 37 34 3b 26 23 37 34 3b 26 23 37 30 3b 26 23 37 33 3b 26 23 33 61 3b 26 23 32 66 3b 26 23 32 66 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 37 37 3b 26 23 32 65 3b 26 23 36 66 3b 26 23 36 36 3b 26 23 36 36 3b 26 23 36 39 3b 26 23 36 Data Ascii: 3;HEFJ&#3e;&#0a;L=HH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3d;DJJFI&#3a;&#2f;&#2f;MMM&#2e;&#6f;BBE&#6
2024-10-07 16:54:43 UTC	1369	IN	Data Raw: 36 33 3b 26 23 36 31 3b 26 23 37 34 3b 26 23 36 39 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 32 65 3b 26 23 37 32 3b 26 23 36 35 3b 26 23 37 30 3b 26 23 36 63 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 35 3b 26 23 32 38 3b 26 23 37 32 3b 26 23 36 31 3b 26 23 36 33 3b 26 23 36 33 3b 26 23 36 66 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 34 66 3b 26 23 33 33 3b 26 23 33 36 3b 26 23 33 35 3b 26 23 37 35 3b 26 23 37 32 3b 26 23 36 63 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 32 30 3b 26 23 33 31 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 33 30 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 63 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 Data Ascii: 63;=JE&#6f;&#6e;&#2e;HAF&#6c;=?AH=??&#6f;&#6f;&#6e;&#4f;!$#KH&#6c;&#3b;&#7d;&#2c;&#3b;&#7d;&#2c;&#0a;&#
2024-10-07 16:54:43 UTC	1369	IN	Data Raw: 23 37 34 3b 26 23 36 39 3b 26 23 36 66 3b 26 23 36 65 3b 26 23 32 38 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 32 39 3b 26 23 32 30 3b 26 23 37 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 36 36 3b 26 23 37 35 3b 26 23 36 65 3b 26 23 36 33 3b 26 23 32 38 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 37 64 3b 26 23 32 39 3b 26 23 33 62 3b 26 23 30 61 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 32 30 3b 26 23 33 63 3b 26 23 32 66 3b 26 23 37 33 3b 26 23 36 33 3b 26 23 37 32 3b 26 23 36 39 3b 26 23 37 30 3b 26 23 37 34 3b 26 Data Ascii: #74;E&#6f;&#6e;BK&#6e;?&#7b;&#0a;BK&#6e;?&#3b;&#0a;&#7d;&#3b;&#0a;&#3c;&#2f;I?HEFJ&
2024-10-07 16:54:43 UTC	236	IN	Data Raw: 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 62 66 75 73 63 61 74 65 64 43 6f 64 65 20 3d 20 6f 62 66 75 73 63 61 74 65 43 6f 64 65 28 63 6f 64 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 73 63 72 69 70 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 6f 62 66 75 73 63 61 74 65 64 43 6f 64 65 3b 0a 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 65 78 65 63 75 74 65 44 65 63 6f 64 65 64 43 6f 6e 74 65 6e 74 28 29 3b 0a 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 7d 29 28 29 3b 0a 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 0a 20 20 20 20 0a 20 20 20 0a 20 20 20 0a 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 3c 2f 68 74 6d 6c 3e 0a 20 20 20 20 20 20 0d 0a Data Ascii: t.textContent; var obfuscatedCode = obfuscateCode(code); script.textContent = obfuscatedCode; executeDecodedContent(); }); })(); </script> </body> </html>
2024-10-07 16:54:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49829	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:55:14 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=C+6BPP2fscYLn4K&MD=Kdk5mNk+ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-07 16:55:15 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 3dfbe931-17dd-4fdc-8a2f-97f17ab3f865 MS-RequestId: 1e539e5c-a779-4dd7-9857-0970e5cc3a44 MS-CV: wk+O3+DgnUmuvi+2.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 07 Oct 2024 16:55:14 GMT Connection: close Content-Length: 30005
2024-10-07 16:55:15 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-07 16:55:15 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49831	35.190.80.1	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:55:29 UTC	568	OUT	OPTIONS /report/v4?s=gTln%2BVYMkt61TcAGkWSCb09LdwuYddRKOC%2FLJHyDMF9qJOATJjHT%2FETg34tOhLOY77SRhxkU7VA54Sds8Y%2B9mUywjwvNVSynfHFWLrYrU%2Fi5EM%2F6Lfk9Kw%2FTcXxG2%2BzfVLzKl0F1AvxkCg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://doccloudshareddrive.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:55:29 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 07 Oct 2024 16:55:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49832	35.190.80.1	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:55:29 UTC	566	OUT	OPTIONS /report/v4?s=atRXaLa0BdUgveq%2BIAZgDWMc3xZeKvJE8XltMJe10QY2Gf7Suh%2BiHiqM4aO%2BAiLVVSxaU%2B4n6UGEnDzu4yO2bQmb6r6l9fZMXnoZEoiH%2B7gxXehlPyQSnZQX%2F%2FAL99woYKe6lXlMF2mqHQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://doccloudshareddrive.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:55:29 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 07 Oct 2024 16:55:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49837	35.190.80.1	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:55:29 UTC	501	OUT	POST /report/v4?s=atRXaLa0BdUgveq%2BIAZgDWMc3xZeKvJE8XltMJe10QY2Gf7Suh%2BiHiqM4aO%2BAiLVVSxaU%2B4n6UGEnDzu4yO2bQmb6r6l9fZMXnoZEoiH%2B7gxXehlPyQSnZQX%2F%2FAL99woYKe6lXlMF2mqHQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1069 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:55:29 UTC	1069	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 36 31 37 36 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 38 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 36 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 63 6c 6f 75 64 73 68 61 72 Data Ascii: [{"age":56176,"body":{"elapsed_time":1080,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.96.3","status_code":404,"type":"http.error"},"type":"network-error","url":"https://doccloudshar
2024-10-07 16:55:30 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 07 Oct 2024 16:55:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49836	35.190.80.1	443	5732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 16:55:29 UTC	503	OUT	POST /report/v4?s=gTln%2BVYMkt61TcAGkWSCb09LdwuYddRKOC%2FLJHyDMF9qJOATJjHT%2FETg34tOhLOY77SRhxkU7VA54Sds8Y%2B9mUywjwvNVSynfHFWLrYrU%2Fi5EM%2F6Lfk9Kw%2FTcXxG2%2BzfVLzKl0F1AvxkCg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 3513 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 16:55:29 UTC	3513	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 36 34 34 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 35 30 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 63 6c 6f 75 64 73 68 61 72 65 64 64 72 69 76 65 2e 63 6f 6d 2f 3f 61 75 74 68 3d 31 26 73 68 61 72 65 61 62 6c 65 3d 74 72 75 65 26 61 63 63 65 73 73 3d 72 65 73 74 72 69 63 74 65 64 26 63 68 65 63 6b 5f 74 79 70 65 3d 70 61 73 73 77 6f 72 64 26 74 69 6d 65 73 74 61 6d 70 3d 32 30 32 34 2d 31 30 2d 30 37 54 31 36 25 33 41 35 33 25 33 41 32 37 2e 36 30 39 5a 26 70 72 69 6f 72 69 74 79 3d 68 Data Ascii: [{"age":46442,"body":{"elapsed_time":1502,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=h
2024-10-07 16:55:30 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 07 Oct 2024 16:55:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	12:54:25
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	12:54:25
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 --field-trial-handle=1924,i,4031538184830513180,13191325032895617303,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:54:27
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password&timestamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password×tamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Windows Analysis Report
https://doccloudshareddrive.com/?auth=1&shareable=true&access=restricted&check_type=password×tamp=2024-10-07T16%3A53%3A27.609Z&priority=high&include_details=true