Edit tour

Windows Analysis Report
https://05kqatnrj9s0snah9.phish.farm/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MG

Overview

General Information

Sample URL:	https://05kqatnrj9s0snah9.phish.farm/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0
Analysis ID:	1540474
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1848,i,14200194463612556463,7566135678862087948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://05kqatnrj9s0snah9.phish.farm/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09?cid=2252932795" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.8:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.8:49749 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09?cid=2252932795 HTTP/1.1Host: 05kqatnrj9s0snah9.phish.farmConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://05kqatnrj9s0snah9.phish.farm/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09?cid=2252932795Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-3ab7c63a41a8761925d45817a71fb79e0ef7208b59de505ac640c8a2a183ec19.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /helpimg/landing_pages/css/dd.css HTTP/1.1Host: s3.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /packs/js/vendor-69f70dd3792dc7287ac8.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hubfs/241394/html_file/files/img/KB4-logo.png HTTP/1.1Host: cdn2.hubspot.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QRF01zv.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hubfs/241394/html_file/files/img/KB4-logo.png HTTP/1.1Host: cdn2.hubspot.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QRF01zv.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UTwvl6ZTSLSXNKK&MD=cfB9H+Lu HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: secured-login.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UTwvl6ZTSLSXNKK&MD=cfB9H+Lu HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: 05kqatnrj9s0snah9.phish.farm
Source: global traffic	DNS traffic detected: DNS query: secured-login.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: cdn2.hubspot.net
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 18:06:04 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 9060390b-f009-4151-b908-4ab5078b665aX-Runtime: 0.010794Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 18:06:04 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 679d2f64-548a-4b56-9ce2-48c7f3b9a9e8X-Runtime: 0.010815Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 18:06:04 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: cb918b06-4545-4584-9ab3-ea4689d73e47X-Runtime: 0.086213Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 18:06:04 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 4e91ddeb-f281-4fb4-9598-87fbd7c63896X-Runtime: 0.013148Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 23 Oct 2024 18:06:07 GMTContent-Type: text/plain; charset=utf-8Content-Length: 9Connection: closeX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffX-Permitted-Cross-Domain-Policies: noneReferrer-Policy: strict-origin-when-cross-originCache-Control: no-cacheContent-Security-Policy: X-Request-Id: 03b184ad-75c8-49fc-9723-aecd740eb04cX-Runtime: 0.011824Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Source: chromecache_74.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_76.2.dr	String found in binary or memory: https://cdn2.hubspot.net/hubfs/241394/html_file/files/img/KB4-logo.png
Source: chromecache_76.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Open
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_74.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_76.2.dr	String found in binary or memory: https://i.imgur.com/QRF01zv.png
Source: chromecache_76.2.dr	String found in binary or memory: https://s3.amazonaws.com/helpimg/landing_pages/css/dd.css
Source: chromecache_81.2.dr	String found in binary or memory: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUR

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.8:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.8:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.8:49749 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@17/49@20/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1848,i,14200194463612556463,7566135678862087948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://05kqatnrj9s0snah9.phish.farm/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09?cid=2252932795"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1848,i,14200194463612556463,7566135678862087948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
cdn2.hubspot.net	104.18.87.62	true	false	unknown
s3.amazonaws.com	52.216.110.37	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
secured-login.net	3.93.18.143	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
landing.training.knowbe4.com	3.93.18.143	true	false	unknown
ipv4.imgur.map.fastly.net	199.232.192.193	true	false	unknown
i.imgur.com	unknown	unknown	false	unknown
05kqatnrj9s0snah9.phish.farm	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://secured-login.net/assets/application-3ab7c63a41a8761925d45817a71fb79e0ef7208b59de505ac640c8a2a183ec19.js	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css	false	unknown
https://secured-login.net/packs/js/vendor-69f70dd3792dc7287ac8.js	false	unknown
https://secured-login.net/assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css	false	unknown
https://secured-login.net/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css	false	unknown
https://secured-login.net/favicon.ico	false	unknown
https://secured-login.net/assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js	false	unknown
https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09	false	unknown
https://secured-login.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js	false	unknown
https://s3.amazonaws.com/helpimg/landing_pages/css/dd.css	false	unknown
https://05kqatnrj9s0snah9.phish.farm/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09?cid=2252932795	false	unknown
https://cdn2.hubspot.net/hubfs/241394/html_file/files/img/KB4-logo.png	false	unknown
https://i.imgur.com/QRF01zv.png	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://getbootstrap.com)	chromecache_74.2.dr	false	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_74.2.dr	false	unknown
https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUR	chromecache_81.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.87.62	cdn2.hubspot.net	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
3.93.18.143	secured-login.net	United States	14618	AMAZON-AESUS	false
23.22.29.127	unknown	United States	14618	AMAZON-AESUS	false
199.232.192.193	ipv4.imgur.map.fastly.net	United States	54113	FASTLYUS	false
52.216.110.37	s3.amazonaws.com	United States	16509	AMAZON-02US	false
104.18.91.62	unknown	United States	13335	CLOUDFLARENETUS	false
199.232.196.193	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540474
Start date and time:	2024-10-23 20:04:59 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://05kqatnrj9s0snah9.phish.farm/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09?cid=2252932795
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@17/49@20/11

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 172.217.16.206, 64.233.166.84, 34.104.35.123, 172.217.18.106, 142.250.186.163, 20.242.39.171, 192.229.221.95, 40.69.42.241, 142.250.185.195
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://05kqatnrj9s0snah9.phish.farm/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09?cid=2252932795

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SX Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "You clicked on a simulated phishing test!", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SX Model: claude-3-haiku-20240307	```json { "brands": [ "KnowBe4" ] }
	```json { "brands": [ "KnowBe4" ] }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 17:05:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9829343260913967
Encrypted:	false
SSDEEP:	48:870dXTP7ZHtidAKZdA1oehwiZUklqehJy+3:87k/kCy
MD5:	BCA3AA2AFBD55527C86FD12D625D758B
SHA1:	5C8E77B438C0BD8FD9D1C4E881BF7826E86386EC
SHA-256:	F6B3E354B201BDD1EA02D81678DD6A1AE274005DE306017123FD10FF63955A61
SHA-512:	07DB15787BB75532E3A11DEBC297569B21C22D607D96A075C43FD7776CD17F3871D9361D016995C1D38DE0307689863F41DDF04357482960E8B25A48D5065D42
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....0(6v%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IWY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............(Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 17:05:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9976410933031317
Encrypted:	false
SSDEEP:	48:8z0dXTP7ZHtidAKZdA1leh/iZUkAQkqehyy+2:8zk/W9Qjy
MD5:	22ACCCE41090064935CD03BDC44823A3
SHA1:	4201AFE2A8057976F03BC99E35CEDDCD217E3285
SHA-256:	1DBEE4FCF594668F6DCF4867B48A2DEE77E3EC215B0FC4E5D7B8E47A0EA13C6C
SHA-512:	3CA0DF67255F8C5F7D6B2F1F32A1A68E0F1474E6E830FEF7A701B4481FB748CFB8FF25D757A2F7B0B7F846B96F2E06AFB47ADFFDF59D3A8F05D0473F652EE188
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......6v%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IWY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............(Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.010069201856528
Encrypted:	false
SSDEEP:	48:8y0dXTP7bHtidAKZdA14t5eh7sFiZUkmgqeh7sky+BX:8yk/4nmy
MD5:	FD7D672CFF17B9C8E28CCF8C80CAA4B2
SHA1:	E573BC9C78E75DA069A5CBAECF115DF31C3CBB01
SHA-256:	526D4E67ED8FFCEDF6685C0F4D525EFE42363B89BA9782420D3A8BCCD3A2E2CD
SHA-512:	719019D270DB2F1A355A0D46A12289E5C2066940654A8589FD5627D6A7D813AE8D537B4A802E6187590E933B40125BA25DCB8DB827D3B80AA45404857703149E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IWY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............(Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 17:05:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.994752152622838
Encrypted:	false
SSDEEP:	48:8HH0dXTP7ZHtidAKZdA16ehDiZUkwqeh+y+R:8HHk/N8y
MD5:	43BEBF85313E179F350897AADB7341D3
SHA1:	F885741856F112997C1A20EF36988FF30B55FFE5
SHA-256:	182AD1B163A5580BBD5BD57ADC57692044E388B201CE2746ED2CB46A05232F51
SHA-512:	9FFA82E4BF5FF3369292389ECDEC4D8A903CCABA643046A2A007B1C3712507AB4FB9765C6AB53DE8F97D00AEE11F8C87E42F845A1AD8EC518C89B4BEA1FCC631
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....o>.6v%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IWY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............(Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 17:05:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9864418085859192
Encrypted:	false
SSDEEP:	48:8E0dXTP7ZHtidAKZdA1UehBiZUk1W1qeh4y+C:8Ek/t9Yy
MD5:	1C82A20916194EBA75F23D1639F3F3AD
SHA1:	B5B54D2431A63BE058A7E373A81001D57C9F6219
SHA-256:	2B77E49E0F799FD0A7B38EF77B0BC1CE70D799E84C39065DF5EEB91D35C3B306
SHA-512:	5FCFFAE7234FFE101457A1C88F48633FE755F815AF1923E392D945DE0D719F0C00507B4258E5D219B5C390FB1B31D29D80E2756E25D832FD81A88B7111899FBF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....D.6v%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IWY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............(Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 17:05:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.997706844739379
Encrypted:	false
SSDEEP:	48:8g0dXTP7ZHtidAKZdA1duTrehOuTbbiZUk5OjqehOuTbmy+yT+:8gk/qTYTbxWOvTbmy7T
MD5:	D5EC8048B3FF3A606E557533210BF312
SHA1:	8CCE15B73FEECA3AF5A26B3B1727F429A8339E92
SHA-256:	3427ED5295139AAB05745FA035FB64E34ED14CF81C2255CE2E7672EC54C0327C
SHA-512:	CB68DCD7E12ACE915F157B24531707BC25DD3628F57584EB4FE379276CA0322CF88137DF782BA8BE1093DD033502D8C873845A81AE0D2A8F4F21C7332AB32522
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......6v%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IWY......B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWY......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VWY......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VWY............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VWY.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............(Z.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2368
Entropy (8bit):	7.857782123483033
Encrypted:	false
SSDEEP:	48:eN+jd/MwX0F4lR7ZlqMmlNl08Q0+mNUjxulVE2Uh9wg0n:Njd/M62KJZVmlDJQ0+mGxykh9wg0
MD5:	402214A564EAB22101571DF8C6E30B79
SHA1:	D5E452981A5C325383F92BFB964BA28ECEA6FFA6
SHA-256:	8D63A7ED00572C8B418FF91F5B2E5CD667AA7226CE280E48FC8FE9D58A4D98AC
SHA-512:	D7FD2C24B182ACEA57713FB9EFD19371802B1AE748F7B01FA82D822A86F70267D94C5105FB6BD1967BCDBC1FC43DE484F2B647DFD1EC729531BD4E89814CA42C
Malicious:	false
Reputation:	low
URL:	https://cdn2.hubspot.net/hubfs/241394/html_file/files/img/KB4-logo.png
Preview:	RIFF8...WEBPVP8L,.../.@...0..M._.w..1..WVaU.W,K..m..}.J.]...=..:].Dz.=....~......M.O.PneX(.......3.4..........;.f;..I2..L.....$[J....wA.a....,....@.$.].m.m.m..l.N.mcO..l.-....[t...5....-.%.....A.f ..D.`._@+.q.?.....8...(..-.^.i.,...]f..a...i....Tw.p..B....."...J'......O..J9..L.%P...{..H..JP.jP-.Cu...P{jFU..%.P[.%B....3....X.'PO.Y.....bE....P........?J.U...P!......O5.M..rT./LQ"JI..uCR...BR...S...-U.].YR...(..R..t4.....J...c..J1)\|....) ^.C....=`.bR..~+.h.5.T......".....GS.u..\|.._Dj..".D....,.7....<1.PU.t...X}.[8H1;T!+....H...R..I.\..f..V..P.S..+...m..s.659FlS.I....Ph.).....GhV.v+...&......l...K.^Q.)...7....5.<....a..%.t....<.(.....;2.n....K...9.J.B....Lf...T..!a..(....0H....E1......Qn.+.j.....v.R6.1G..?B......~.....&R....F...2.....}.(m.....).....]..I.....~.e.Z.T..U..C.OE.[......Zq..F.hc.W..,E.\|.Bu..SQ;..`.a.......\|..?..}..COX4.....!{'P..J.8:..U...\..S.{8U1......J.P.N*._...9L......#<...v..n...M...8..##.r..]\..e\|.....D.t.@...

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9344, version 1.0
Category:	downloaded
Size (bytes):	9344
Entropy (8bit):	7.975595436620788
Encrypted:	false
SSDEEP:	192:iy1J4xqYLC2akqiC1YV/R582UeGFc/AUGlF0djsT7qWPcC/Cdv:D2J7h5bV/37WUFGT7lPcC/Cdv
MD5:	CBCA61F27F93FD71171FE8D314C66AB9
SHA1:	C46A51672FFFF100945F84C3EB87826B7844A1E2
SHA-256:	F9A9A7A4B9D40BCC3047928DFA60695D53E6AE1D6EE699EA70146E171322ACAD
SHA-512:	7F9E8520DFB64197CE233AF7671A5A5643AE116478C6E2F5F67FBD8A092117126ADF1E2EDDA13FF1C19D68AEA3D04288310A2109D7C81183330F2B8DAD0785D4
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVIGxA.woff2
Preview:	wOF2......$.......A`..$..........................L.. ....`?STAT^.t..\|.......t.Z..N..6.$.... ..x..h....B;%c[.08.@D..=.E...O...q2.0..i......v.p.0......Y. ..P)......N.C...K,.W!.Wutp..I.2...6.....Y..X...W..z.U.nq.j^;.8.zO..gw.d.^U?p.........7.. ....S..d......d./.-.7....$...V(V(\|.........c~........B[H.D(.$2.1<....N7..n.9k...D.@.(.(...H.D....qsQ."..O..{Oh..r.T.Iw..9I...rq.2.n....SW.O..\b5B.n..M.06.j..L.Sx?.........t.\|z}..V...G..J....x..Co].5HC..6p..,.2..&..}`.I.n......S}'....$..iV.[.....W......6...m.I'M...a......c...\|.a.FK.d.zW9xi'Y8v..lWi....T-..F\...^p.<.TT!wvQ.i0.0.f.\.A.. .Hq..J...=/.....\.]..Dq...:..+...W..]4uZ.._.l...e-..........k..."p....c......X..=.9..1.....2.......],.....R\|J......r.x./...pa...ef.......{..&.........=.5..>....5@...x.v..o.Io.L.t[Wu^.=..Z.r?xV..V..jV..`...+.2..8..P....[.r.....4.,Y....&.\|.W<..7..Y.s.=,2..A.i..je..P..`pV..!VW-...`.>YBRJY[...!rY5...l........Z.5_..B.....cP.....v1....(.5...[....n.....vlx=I.*1..9R....=..2..u\..p...iFD...

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.725480556997868
Encrypted:	false
SSDEEP:	3:Y/B:Y/B
MD5:	D8F4A1993546CC4B850CDE3599E27AEC
SHA1:	094B763B4CFCC0B05E5D040581CD513C3CA08067
SHA-256:	907BA78B4545338D3539683E63ECB51CF51C10ADC9DABD86E92BD52339F298B9
SHA-512:	7C696247F98AA6FE4E1DF001FD6029ABBBCCF45B122D65DFDEDE8F8A400CDA775387C657F96BD1E4E52DA7409187892B1F0786C54D835D2E44227B2E1335EAF6
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css
Preview:	not found

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.725480556997868
Encrypted:	false
SSDEEP:	3:Y/B:Y/B
MD5:	D8F4A1993546CC4B850CDE3599E27AEC
SHA1:	094B763B4CFCC0B05E5D040581CD513C3CA08067
SHA-256:	907BA78B4545338D3539683E63ECB51CF51C10ADC9DABD86E92BD52339F298B9
SHA-512:	7C696247F98AA6FE4E1DF001FD6029ABBBCCF45B122D65DFDEDE8F8A400CDA775387C657F96BD1E4E52DA7409187892B1F0786C54D835D2E44227B2E1335EAF6
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/application-3ab7c63a41a8761925d45817a71fb79e0ef7208b59de505ac640c8a2a183ec19.js
Preview:	not found

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	380848
Entropy (8bit):	5.202109831427653
Encrypted:	false
SSDEEP:	3072:sHNwcv9VBQpLl88SMBQ47GKYQa8ITLYI9fB8NJOD3EAjV2Uc9M1U+/uz+rSLyCAV:sHWK9VC78UBQ47GKXIvd9sOVAqtNX
MD5:	67A0C4DBD69561F3226243034423F1ED
SHA1:	88C1B5C7EBBFA24D8196290206BF544F28EEB406
SHA-256:	74B9F1CFE7CAD31AE1C1901200890B76676E6D92AC817641F5EF9BFD552F2110
SHA-512:	D5326C46E2FC443AA0C75DB573B39957514BD025235ADB5F16797133394E1AFD0A6458B38DA8220BF7558333E8F2334532FBCC4CD9DD4DD5811AAC403B498542
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	6193
Entropy (8bit):	5.401714743814202
Encrypted:	false
SSDEEP:	96:ZOEbaJJOEbaiDFZ8OEbaXkOEbahYOEbalOEba5y+aZjzBrWOEbafubqGIFuV4UOQ:aJKAXzhXm5qJ2bqGIwV4jlZYF
MD5:	F2D1D2937C3546E15C471236646AC74E
SHA1:	DD8D90F6D4AC8D72C718C10424788612689D89DB
SHA-256:	719D2FC548145FA8D8361205F6FCB49EEFC54C71FBB18E6320A60A263F40637A
SHA-512:	7B400281407249F805AB4695E0B7D3CDF4F7F5F776F9F7E60872D5208B7324DADDDAD79D76AC9991C74563520FB6BFF3A6343C8C10591C9EB5682733592668A4
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Open+Sans&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVIGxA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVIGxA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext */.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVIGxA.woff2) for

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 10180, version 1.0
Category:	downloaded
Size (bytes):	10180
Entropy (8bit):	7.978606996128046
Encrypted:	false
SSDEEP:	192:TjKCG1yMl5z0LihNuJ/FDGVhh+wixFbjXRvtZ0j99NpI3JWKUOVKB:nKhyMvzOibuVih+7tXBC99NHIKB
MD5:	31C3253C6146D2A15CEDFCFBC975EF7D
SHA1:	11F185BE446D870DDBAA7BFFF3382E428DDDF853
SHA-256:	37C813E5C95A107D3992C300F1B03A488E70570166EB45687FEDAB8D1F3B6C7B
SHA-512:	3F706CA90A78C6970234F1A8EE67C650B8AB264006B77477CAF6B581AF13F0D9B4E64532E47CE9E557518E0D6259DE691CEB6B1B948D560A16E5CB9FEB2B7E16
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVIGxA.woff2
Preview:	wOF2......'.......Il..'^..............................j.`?STAT^.....\|.......`.D..j..6.$..>. ..x.......A........(....i....\| e.L...E.M.w.<3..my.[S.0..]wJ...JL.i...........J.co.a1....BX}..L..k..}..>.../...;k7.a9u......1..IL....7o._..'j..H.E_,..G:...X>..f....6..0..#...AiA.L.B..F..0.#'....U..........{g.._...9.....Z.f.^.....5. ..a...\.,y2.&.m..5....<.O^.......r..LW...%.x_....J~ ..... .U...(U.i.Y..'.VK.j...'..9....(. .L....n@._k.....V2...7e...I.t..).....\...[.MH.......m..,..f..\..K..K.T`N..^g.....P....(............@.....E...s..hB.]a..8.3.8..5A,./.r ..>..yt....+..NA..R.....u..;.....=,X....\.f-.._..........lO...U.;.n..D. X.......E..a@D+...`a.A..@....... s\|[.3.@.....c..v.c....}.....Ra.Y.....?x.'..<.MI.BO......>%..x.....F.}.f.H..&$.H....M..cp<.Rd..eFY1e{..A.H>.D,.:.....'%...Oy....?@6....$......"..K5.........!..u.F.t.YD.].c.~Y..8..3n..S.J?.....Rz.0.M^..@........^...`"t.)@.>.i.W..g)!..d.;.=At.J5P6..Rx.........]7.?..i....=k.....%\^.X?(G.....88...

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.725480556997868
Encrypted:	false
SSDEEP:	3:Y/B:Y/B
MD5:	D8F4A1993546CC4B850CDE3599E27AEC
SHA1:	094B763B4CFCC0B05E5D040581CD513C3CA08067
SHA-256:	907BA78B4545338D3539683E63ECB51CF51C10ADC9DABD86E92BD52339F298B9
SHA-512:	7C696247F98AA6FE4E1DF001FD6029ABBBCCF45B122D65DFDEDE8F8A400CDA775387C657F96BD1E4E52DA7409187892B1F0786C54D835D2E44227B2E1335EAF6
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js
Preview:	not found

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17576, version 1.0
Category:	downloaded
Size (bytes):	17576
Entropy (8bit):	7.986135354736866
Encrypted:	false
SSDEEP:	384:9FlzBIAFMur/ziLBGLlbxN8j/70j6vmoXB:bIEbXiNhP0+mox
MD5:	EFB3F28447C9EF35FD5882FB763B37C3
SHA1:	158DDD8C0348DEFA3192F26DA60A746727F4A8A3
SHA-256:	6D4370B59E36AC955C8B97F12FD5E86F7D3E80285D6AF2BFF0DAFA8E122D3C3B
SHA-512:	C0521D7C7BE4F635F70F0F466BC7A179C647C43C5AB400C8E490466BDDDE7175809B594C3D7B1A2F2AE9841CDE2F9AABFB8A967618FFB2CC7456A9B3231E0CDD
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVIGxA.woff2
Preview:	wOF2......D.......}...D=.........................N.......`?STAT^.....\|........<.....T..6.$..$. ..x........n'...........#.`.........9IE.LZLJ....Cf.`....0....I.Y\|...`.{j.K....EW..zG=xA..P.6....6..n.+V....+..J.. ........ ..6~.f.....o.........}.H?..1.j^.^..?...z^.J.X.6.._...I....."..5..3<Bc.......oI.av}.s.{>.. z.c...........&@-w.S..P_.~..f..~..'+.....m..s...`D..(.....`.b...U.Vcn:..5.\.j.......v.. .I..K..mS#.=...w.%[.}I..>.O..'.k.k..}Gh...v..eB.....E..'"!.I...I.D...jo2.X.U.....OC.......H......8..[.... @..M.....=U/...E<.BH.I}h.j..H'..R.&O...i...kE%.....oTns.U..9.7...._....fL8....Um.@...g.[...%...0vU_.<.........Mp.."R.l.A....t..&..... X@.P..o..wI..4...c.........n.~9....U.`....gj...pu.... ..'.B,..C.\T!.v.......x.b...(0(....J......2...$...'..+..s.u]..m.E]....QS.......}.Z=.$.....q.0..2.kKK.....[.\|kg.....y....`DZGC.....A8....'.....,.Iy...h.K#........)r.P)~...!o.2t........._AAvQ~.!.@hy;c.-....p.'...:4...5......!..yS4A..........yD...T..A.!......dK

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7728, version 1.0
Category:	downloaded
Size (bytes):	7728
Entropy (8bit):	7.973684421983582
Encrypted:	false
SSDEEP:	192:RqbUht1WYnRpoFA36C6PZgm9hGwy+ymZMcVB:Q4h3WIoKqxPZp9hDy8ZMcVB
MD5:	80210D1FF4DE56C6704607F3831E8F6C
SHA1:	32FB4E1E177D5DE97AAD6E0D57100755D8DD2CFD
SHA-256:	F515A6F8BAE422286936B110653FB8EE0F58FE32D61390EE5DE77029BE23EFD6
SHA-512:	E24520E29F2073F03A0FF1E72EB632CCFB6FC1451BCB0735671EAE03CAFFB1CA6731050318F43544CC99AC7127015664464A0DEF587058535F9F7F743F166713
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVIGxA.woff2
Preview:	wOF2.......0......:..............................V..\..f.`?STAT^..4..\|............$..6.$..D. ..x..,.....4%...<...}G.H..T.0...L.F...._[e.'.B"...).J...55. ).M.u..J}bV.,.q.#.I.C.(O....0.J....$...c...}.E'/.n.k...A..#m..d...9{.fV...!..[qj.,5...P..u..p.T.N\...{...d...f+.pt...+..y.A...Z.3&..H.VuX...^..R9.q@...s...]...c.pMS .GH...z..e?.n.....Z...V........,.8..t......p....X..i.w.....j.....2]sP.%Z.....XQU.....7..3.u.]...+.I.....!......c.ey...b_...M.....aXp: ..$.....^........8+..Z.~.!..BXR..E#WbC....1..P;@...e...c....&<0.(..2..,.e.....n..C.`....n,7\.DV.B..._.=...Ko}..O......A.......@C.}I}.....z.8._J....5.t....&.$....a.PS.}.....^....$..@...;.<.'.F.t.....\........~.w."..w...7...8..-r...r.Z.`.K..Y.R8.#R.....Ijz.vc.Xk....g..E.n...Q.x........>....gH..t...:Z..v..+.z.^H..A.@.....\|W9.}+.Ury.......Q,@...!.. .'kN..X..RA.oHWF$O...<..r.....\|N..!.fT...F.....~.....1..(jD...e..i..!....cD.h.Y.....A....r.dfD5.P..x...g.../@..._g\.h....pH..~..e..../MR.....).]

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371)
Category:	downloaded
Size (bytes):	121200
Entropy (8bit):	5.0982146191887106
Encrypted:	false
SSDEEP:	768:Vy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1FS:nw/a1fIuiHlq5mN8lDbNmPbh
MD5:	EC3BB52A00E176A7181D454DFFAEA219
SHA1:	6527D8BF3E1E9368BAB8C7B60F56BC01FA3AFD68
SHA-256:	F75E846CC83BD11432F4B1E21A45F31BC85283D11D372F7B19ACCD1BF6A2635C
SHA-512:	E8C5DAF01EAE68ED7C1E277A6E544C7AD108A0FA877FB531D6D9F2210769B7DA88E4E002C7B0BE3B72154EBF7CBF01A795C8342CE2DAD368BD6351E956195F8B
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.3.7 (http://getbootstrap.com). * Copyright 2011-2016 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{margin:.67em 0;font-size:2em}mark{color:#000;background:#ff0}small{font-size:80%}sub,sup{position:relative;font-size:75%;line-height:0;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8572, version 1.0
Category:	downloaded
Size (bytes):	8572
Entropy (8bit):	7.968224802101464
Encrypted:	false
SSDEEP:	192:7kVuVBCnQlLJQwaKzxipCMvtCYuZQ9lABAbdsPyY5pfFqC:7+uVKI9OOMnuZQIBcb0Th
MD5:	776FDC253D54124DD63F274BF5EA35F0
SHA1:	7761DAC9A7FBB2814989092003506BA594C6EE45
SHA-256:	0B81CC8358F236821ADA286C94726C7FEBC9CAD8BD4F59FB39C515956B644E99
SHA-512:	4689A0D6723243E796D5DC1B031F5E1E8CE1D038921F1CC612169F179147DFC1B74CCA87CD7E2C8BEB38D9A8ED99F42FF369BDCB2FA9EA80B1BC00CC36CAEB10
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVIGxA.woff2
Preview:	wOF2......!\|......G@..!..........................j..l..&.`?STAT^..8..\|.......$."..&..6.$..H. ..x..T.....A...........ZuVQ.......Kn..`...%.$T6I....\G.Q.X9uK8.ct?..........P.\5..;.I{...r}E......?.E7....8A..R.k."....^.4..^..j?.2h..bg.8.5.....7;..I..JH..j...4B!jI_v....=..S.."+eQX....h...X11........t.....rw-.2..X..J..z@.8@.a.........+JCV..df.p.4..B.U ....]..n. ...u..+..d.C.P8.,.8F.P.L.bL...=..=...5..O..T.<..I...].....O...`.Q.9....WT...r.>.b...3U..`.&.. .<..X-.'.s-....E;?.T."c.%4....ue.>...0A+`.X/.y..T.......O`...sHEE8E>...f...........%.p.t ....RrH.Sy!..)...Z....E...w^....V"..z..=O....B.........&XV..{..B.....>...=........]..Z.._..c.I.....U.^..j...B..A....Z.......T..N.F822.....G......h.(.`'E1..;..)...q.....%........... uK......@...7..DEd....N.l..,.,....oI...z... .eq.t:.HG/;4..3.F+...A........WFNm..._.\|-! Y.Utv.},......,..G.O.#...w.G..?.C..5_.)O{.G<.^.u..b..p,...P.MR.... ./C.)...s..{.,.}..z.....L..A...~..J..W.)}....r/u..:Q..aM......W...

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2164)
Category:	downloaded
Size (bytes):	107493
Entropy (8bit):	6.021808833416954
Encrypted:	false
SSDEEP:	1536:roXPSJWBXtcydjm9aU5JqjtF5FsuqJ0+GutFIDFzFv7aaXVVoi7fyPw+uzukA13N:8/f9yydjrU5m1FBW
MD5:	A513EA5F7AA6CD677A8613C7D1662A82
SHA1:	4A8605FDDFC9264DF8A7CB7C6F9D9572098C71D5
SHA-256:	CFB2F5DCA84A69014F40514E38519920777F9B4B6CCC415DEC3E82B4A221D7E2
SHA-512:	E17CD7ED919DC5B643B9FAF920FC33854C7E10DAF2C5FE7DC9DF81A889286CE3B5100D309F31CDD33165C7F4EDDEFF6336E529CE8FD904C5E7E26D6D41F9EF28
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN". "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">. <meta name="IMPORTANT" content="This page is part of a simulated phishing attack initiated by KnowBe4 on behalf of its customers." />. <meta name="IMPORTANT" content="If you have any questions please contact support@knowbe4.com." />. <meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"/>. <meta name="robots" content="noindex, nofollow" />.. <head>. <script src="/assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js"></script>.. <link rel="stylesheet" href="/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css" media="all" />.. </head>. .<meta name="viewport" content="width=device-width, initial-scale=1.0" charset="UTF-8">.<link href="https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css" rel

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15368, version 1.0
Category:	downloaded
Size (bytes):	15368
Entropy (8bit):	7.986184968554377
Encrypted:	false
SSDEEP:	384:nTJg6Q5K8YWSW9moijiyOckZiSFQsiEVxU1L:nTJH0K7iUoaOfZigxBe
MD5:	BE7B70AB1265B1047BD93422397C655E
SHA1:	E10BBC7D8529AE3E64D8B08C9F7CD55C98F83D60
SHA-256:	B452C0F212E8BF33965905032F5BA1FAE29CD6F9539DCBC673704E66CE943B2B
SHA-512:	A9A913559EFE29685B7C12456326C3F8C7053D639B849261108A69348EEA02C617BA923561C1CDBE36082B2CEC1C0ADCC22511389791DB328ABC99A57F011F5A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2
Preview:	wOF2......<.......x0..;...........................>..\..\|.`?STAT^..J..\|........\.i.....6.$..,. ..x........l..]{N..#R.-...0.Q.%.T.......Q...U...L..R.)KFQ0.)p..L%d......!3..;..v8..9.........A..'..........v5D80.......&...M...}....g.6.'N..M.y......gk....B.{....}.....q>j...].......o!..AL....b.....f......F..FE,@.Q..cF..6n....g.....Ey..O....^.3...P.)U...AH.y..Z...'%.?8/.......T.S............S..8.w 7..>`.5...........0#.._..(_.P.W....s=......i+i.....`Dn.)k.$.....G...]..=.....w.....n..\|."..4.g.....H.2M..P.(oRg..l~G..dJ.<.U..q..u..4%......<...`.-$.....$[..".....TuM.V..7.[.{.l.. ,....>.&...P9].....S.lg.B.tK..B..\..z..RS.i....3.D."u..Bz..T.E^R.=m...U.\.X...IZ....n]....]...}i.......K.kL.D.6.".5..V..u.....?...\|.a.=.;..0..cL..HpU..t.p)1.k.....^G..:.u.q(E.Q5.o.k.1.0..R....c..`.....A..3.g.0&....$....\| .....C.H....(..F.. .::.......&.$Z4...$N....$.<.%.A6..y.1.?.......w...}....~$....V..Q......x..A'......+...I<n. .......t@...w$ ...@...9..H.h..B...Q

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 18668, version 1.0
Category:	downloaded
Size (bytes):	18668
Entropy (8bit):	7.988119248989337
Encrypted:	false
SSDEEP:	384:1stcBfAVaR8i6XzMsb4fcjakBudFyBqrgeU0hipgwfqj09nOt/a:1k0F6Xz1bFjaPbyBqr9hIgkM3Fa
MD5:	8655D20BBCC8CDBFAB17B6BE6CF55DF3
SHA1:	90EDBFA9A7DABB185487B4774076F82EB6412270
SHA-256:	E7AF9D60D875EB1C1B1037BBBFDEC41FCB096D0EBCF98A48717AD8B07906CED6
SHA-512:	47308DE25BD7E4CA27F59A2AE681BA64393FE4070E730C1F00C4053BAC956A9B4F7C0763C04145BC50A5F91C12A0BF80BDD4B03EECC2036CD56B2DB31494CBAF
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
Preview:	wOF2......H...........H..........................\|.....h.`?STAT^..0..\|...........+..2..6.$..`. ..x........z'o..w;....6.E....6....E...'$H.#.....n1X..JU/.d.O..JC.'J".v.v.l.h.....u.S...SY.....B.hz.o.}......W......%m6...A..=....\..m. .]..~.[..........]...I..h.=.....6.xt..F....Lt...Qs-.7..{...~BI.".F.Q......F...P..dMw..#I2........Rq.Q&.0@.;..;...3VG..:c.nki..-Q..2##e.u...8n....\?....T..b....^..#...../.J\|OM..St....e.S.}!.....>..i.T/a.ES%.W.P3..`..a.R.A.....!~g..74.np8o.....d[6?.P.4)P.....AG.3.......;#0.y....M..O/2.@.4..N.vA$.:M&H,.AT".........@..a.~..L->...0@h...~.._..N"......t......C./g7..............2E.N.J...TW.F..."A.B...n.......i.?.{\.L.!.B..x...S..!........?.\,... .@.....y"xw.A8.w..!E..-^P O..+.T.r.R.zz..K..].E.....Ri.)g.P...j..w..c.M.F.v../........Q....'...(....X..;.K.!BZ3.........f.....N.A(....cA`.b'...`.~sa^.....?..../.L.S......t..`@h..C.....>N.W...;>..._h.+~=\|......uOGA{.7.....h....q.d.4$.x<.....^0\|...@....@Q[RC.0....b....'...RID

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1666
Entropy (8bit):	7.843362903299294
Encrypted:	false
SSDEEP:	48:1E3hTvNbvJkGGv0nnr5I2rk5boP0gD6EaTMN:1ERb+cr5Z1P0gD6/a
MD5:	29D583007FCD677AA31CA849478BC17A
SHA1:	F354E323218A450060852C344927C3E79D8E7B66
SHA-256:	120EE096F38C1E21083054C15F0F8CFBB02B6740A01D98068E3BE9581E83D453
SHA-512:	4AFC2641D96D1C372D091FD795D39C1AF12149B5EB30DA7BEE6FBFEA0650841067B7D259473BF65706CDD42D1EDF1CC5673B5F5556D1E91F8AE32976490A7E4D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r...IIDATh..{.VE.....Y.E.......Uv.B....=. {....ee....G.%....H/).UR1[.G...d...._m......~:.\|.13..~.e.;s...;g......&g.@..w.G..K......{.u+..^...k.....s+...e..R.z...."..............l.z......C.......V.#.}.5(..f5.N`.......e&3".x..g..w..C.......T\|...v"w..Q>-(/2.x.A.L..!....r..noB..g\|...\|.\....U.T...<3.N-...rU.bp%.<.CE........k....0C..\|.Sw~.g....!....uf+y.KG.O+Y.h&.....F.......sB...7.\|;.r\|..\o......;.$...i.wC.ICO.n.h....AJ.N.+.T).........)9..y..?.hs%.".B..k....#.S.....:..!o..Z...\|.w2....a..+y.e;..A...x.p+2G/!..1..jTr.S...S.....D.<.G.z.+2..E..>.Z6L.......e.2..R..3...~..%.C.!..f..s.'.;.M...5..k.1..L._B.vA_\|.c{......{.......d...Y.'Q.TS:.7.......\|...,.:..-...#.V.*NA..&...iO.....SEE.kW!.y.p.y.m..6b..@=.,.n..i,....q..W...w.f..bg.`\|......3.:.K.<..I.[....a..}..%_....{...~..j...)......n}m[...u...._....{....,.t.[ ..g.....&.v.j..2.r5.r5.B..jp..v-.j./.....c.s..$q@..z...oo..g?.z...%..gW.......}.6h....U....o.u.])]..@B);.o.V

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11116, version 1.0
Category:	downloaded
Size (bytes):	11116
Entropy (8bit):	7.977966003020195
Encrypted:	false
SSDEEP:	192:c5J6FUS8z9yKW3C62e9A3+t4q965ElM9FxWuPpZ6LpjKQZtX9MRFTj1EHUgaflbN:c5J6FDS9yhyy9Dt4265ElM9FxtPT69H6
MD5:	7E05F5267BBA1AA9FB260096F923BDB7
SHA1:	44E5FE17DC41EB94BB2FE85D77C0904AC766325D
SHA-256:	21E75944D3F77408D1F5F2FAB67C89C7FC43F4A80A3B8E4DCF38185F9D9F46E6
SHA-512:	E3442FC98D171DFE08614751267C2023BF6DE2A2E42BE7B7CB54E15DDBE028534D193D93B086A75549432B2818B0EC1824D2BDBB848B00A9329F22C5DDDE619F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVIGxA.woff2
Preview:	wOF2......+l......Q...+..........................>.....X.`?STAT^.."..\|.......(.%.....6.$..6. ..x..R.....Iu...8@.}.G"....~x5.`....J.......t.Tm.....".......e..........C..9.9..R...F?..x.i...._.x.<%2R...d...y........{.om......Oe..u..3Z.....x...#4.I..ES...8=........,...Y.^ ...2.=@...a...a..0.P..#w3.'F...b.,l.........1..".......IB.....b.......e......X....?D.[...iK.....$.F.......nM......4..@M......u../.#.C.X.TC3z.n.Wx...........=...@...t.I..UR....6.v...3...X.~i+..s..J.V.Y...g..Kun.IZ,....%O.u..3.(.+B~.)....M(6r.m......>x..p.MZL....P.Z>....@.*..M.0..5....@\.D.&..H. 2M...N..f.E.UM....B).).m.1.J......'.=D....Z.6.{.5..q......4.T.$:=...r....5..3s..zD[.i ......x.Mtq.\|.#G......._.9P=}..PG.a......l8V.m...P.#..5..6R....`.<K}k.a..a....D.6..A.l...e.F...Z..0...7.0...^.....n`p..o.`.........4F.....H.1.).lh.....u..3WB4.$.............E......Z.{..{.[]...E.m.{.V^kZ..J.y?.w.m......o.k.j<.}...g. 7...-3}C?....<..\..ld9s..p...p..3%....>...F;...6..h.Z..GKh>...k.S..V....

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (398)
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	5.824863861233166
Encrypted:	false
SSDEEP:	12:3R+xnAJZxhNJLRaGharA1HYWmaQxdjlQz55d4AEdeIQL:3E+FrRaGA04WxQxd41NEkj
MD5:	6FD05CED7748D8421B79F603E88BFD14
SHA1:	2807FD39185FAF3B0ED4622BE3F96E1A7676312F
SHA-256:	2FFB45B31D7BB3D5AB8003F98305D69D6B2326B152C360383CBB4EC862BB17D3
SHA-512:	1C4428B8E1E59326E11820A5F4A0361EA34FDB6C63666F89510D04F5BD39E6AEB7D1D17FBF32B2058B66C27411A9F67DEF63851CCE85C1B969FD1868A4DD9C73
Malicious:	false
Reputation:	low
URL:	https://05kqatnrj9s0snah9.phish.farm/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09?cid=2252932795
Preview:	<html>. <head>. <script>window.location.href = 'https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09';</script>. </head>. <body>. </body>.</html>.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	380848
Entropy (8bit):	5.202109831427653
Encrypted:	false
SSDEEP:	3072:sHNwcv9VBQpLl88SMBQ47GKYQa8ITLYI9fB8NJOD3EAjV2Uc9M1U+/uz+rSLyCAV:sHWK9VC78UBQ47GKXIvd9sOVAqtNX
MD5:	67A0C4DBD69561F3226243034423F1ED
SHA1:	88C1B5C7EBBFA24D8196290206BF544F28EEB406
SHA-256:	74B9F1CFE7CAD31AE1C1901200890B76676E6D92AC817641F5EF9BFD552F2110
SHA-512:	D5326C46E2FC443AA0C75DB573B39957514BD025235ADB5F16797133394E1AFD0A6458B38DA8220BF7558333E8F2334532FBCC4CD9DD4DD5811AAC403B498542
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1471
Entropy (8bit):	4.754611179426391
Encrypted:	false
SSDEEP:	24:y40r8CQo40agx40mC400XLaR404hZYmx40vGk40vG/I40vGhH40VhZ40UrCmn:xdDgCFEiBZgnTOHTn
MD5:	15E89F9684B18EC43EE51F8D62A787C3
SHA1:	9CBAAACEAE96845ECD3497F41EE3B02588ABEC11
SHA-256:	16F13E16A7EF02FB6F94250AA1931DED83DBEE5D9FAD278E33DD5792D085194F
SHA-512:	79E0110A045F28437D192290AC9789270CB0D4E676A985564746DB439992D867BA89639D7738E2A7F7D83BBF37D9A02CAA2AE1DC4E0EE2519797E5840A47FABE
Malicious:	false
Reputation:	low
URL:	https://secured-login.net/assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css
Preview:	/* line 1, app/assets/stylesheets/landing-watermark.scss /..watermark {. -webkit-writing-mode: vertical-rl;. -ms-writing-mode: tb-rl;. writing-mode: vertical-rl;. text-orientation: sideways;.}../ line 4, app/assets/stylesheets/landing-watermark.scss /..watermark.left {. left: 0;.}../ line 7, app/assets/stylesheets/landing-watermark.scss /..watermark.right {. right: 0;.}../ line 10, app/assets/stylesheets/landing-watermark.scss /..watermark.top {. text-align: center;. -webkit-writing-mode: horizontal-tb;. -ms-writing-mode: lr-tb;. writing-mode: horizontal-tb;. top: -38px;.}../ line 15, app/assets/stylesheets/landing-watermark.scss /..watermark h1 {. -webkit-user-select: none;. -moz-user-select: none;. -ms-user-select: none;. user-select: none;. font-size: 15px;. color: #fdfdfa;. font-weight: bold;.}../ line 24, app/assets/stylesheets/landing-watermark.scss /.#template_sei .watermark.left {. margin-left: -10px;.}../ li

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 38, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3014
Entropy (8bit):	7.902919939139106
Encrypted:	false
SSDEEP:	48:vnJJCJaqcfDoxU8qAg6opvwr+FYc1lWO1pPGDfMexqwFYRFlIe9BhGtAHIWVRs:vnJJ8CESXp66vwPuGDfMexqwALvhTFTs
MD5:	E154B58FD2CD3F1F2E2C6C810BB1E65B
SHA1:	CAEF301E8550A910909ECE9471669DA0C32EA6F0
SHA-256:	E8C5A2C9860C1A6CC7C949B9D7C793E5E435D75996DEBEB295A959F3D09831C0
SHA-512:	464EC940E824EAB8B7F83EB40852DD3019E84BE7B1A0F75AF288656605426B2EE386FA7FF102E0144AA065F053E88E8356E7C185B4DC393CC4D8EB0ADC877312
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......&........l....IDATx...{h.U..q...Ms"e.ej,..M.,](&..B...)G.F...2.22oY......L.%...iF......L.e.dsn.Oo.@..?...........y...s...=...D-jQ.D..&C1..Mr_9.n...p.8.W...x....8d..Nl.b..=h...b<.`...W .GI...S.Q....l..b ....G.F2.+ ...C..u...2j.?Z.).....!-...d)2]..d.;p.,.t@>F>.3}9....... ......v@.>4.= ..B.5H..e.....5i.?NP....<.Y.LWx.a.>8..?.M.$S> .C...r...:.,...OLWx.a.v8.....c.....Z../...M........m.,..Rl..1.X.Y........j@.@.%.2l....YJR..?.....5 ..G.d.BF./.L\........,J..~...0]...,...q.7x....h}.m..#...."<...0q....8.9.`...e...EV...m..p.M}H.y...H..l.~...x..0...<.....d..Xh.1.~.Y.M`.].Q....:...8.....M1.'..~.h...g{..OD..f.Hc.g.(..)....,.y.w.\.....HO" /A.\..Z@...$...].,.<.G..WavB...q....\...H..<.t=d...-VWTC.I........jv...!....N@..0..M...."._B....%X.R.q.....W.'WAL..'m].+.j.pF.8,...V.Jc..@....E...\|L...=.[..2&^......y....X..1..(.F..,..f.5..dT...b>..q>.;..d....:.O..)N. ..\.......s..R...UcD..d;ct.,+<.c;.W...!K.$..... .g.../.,5.T..g7l.,...p. .8.]...C_4...?

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4524
Entropy (8bit):	5.108931295370594
Encrypted:	false
SSDEEP:	96:AG5XS7vBkRVkhmRaM44/HLPRaByA+zBRNI:AG5XABkAhmRaM44/H1CyrBRNI
MD5:	DD05B711E15EF201B07E20CB5C87F5D8
SHA1:	41B818B243140D90DA4CA917D454335B603A6BDA
SHA-256:	617F793D125F780AB7BB7C9E92AB427D9E757083E7368E241E8E8FA69F013E4F
SHA-512:	243C149BB8AAF5376EEBAC49833A59F75BA26BEC098AFD8A167D12BDACD3E80D98EE1DA1D82915CC7E4C7FAC747FBFF5D2D687D97F20BDF5C81D67CFA0620F39
Malicious:	false
Reputation:	low
URL:	https://s3.amazonaws.com/helpimg/landing_pages/css/dd.css
Preview:	.borderRadius{-moz-border-radius:5px; border-radius:5px; }...borderRadiusTp{-moz-border-radius:5px 5px 0 0; border-radius:5px 5px 5px 5px;}...borderRadiusBtm{-moz-border-radius:0 0 5px 5px ; border-radius:5px 5px 5px 5px;}.....ddcommon {position:relative;display:-moz-inline-stack; zoom:1; display:inline-block; display:inline; cursor:default;}...ddcommon ul{padding:0;margin:0;}...ddcommon ul li{list-style-type:none;}...borderRadiusTp ul li:last-child{-moz-border-radius:0 0 5px 5px ; border-radius:0 0 5px 5px;border-bottom:0 none #c3c3c3; }...borderRadiusBtm ul li:first-child{-moz-border-radius:5px 5px 0 0; border-radius:5px 5px 0 0 ;border-bottom:1 solid #c3c3c3; }.....ddcommon .disabled img, .ddcommon .disabled span, .ddcommon.disabledAll{..opacity: .5; / standard: ff gt 1.5, opera, safari /..-ms-filter:"alpha(opacity=50)"; / ie 8 /..filter:alpha(opacity=50); / ie lt 7 /..-khtml-opacity:.5; / safari 1.x /..-moz-opacity:.5; / ff lt 1.5, netscape */..color:#999999;..}...ddcommo

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1666
Entropy (8bit):	7.843362903299294
Encrypted:	false
SSDEEP:	48:1E3hTvNbvJkGGv0nnr5I2rk5boP0gD6EaTMN:1ERb+cr5Z1P0gD6/a
MD5:	29D583007FCD677AA31CA849478BC17A
SHA1:	F354E323218A450060852C344927C3E79D8E7B66
SHA-256:	120EE096F38C1E21083054C15F0F8CFBB02B6740A01D98068E3BE9581E83D453
SHA-512:	4AFC2641D96D1C372D091FD795D39C1AF12149B5EB30DA7BEE6FBFEA0650841067B7D259473BF65706CDD42D1EDF1CC5673B5F5556D1E91F8AE32976490A7E4D
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/QRF01zv.png
Preview:	.PNG........IHDR...<...<.....:..r...IIDATh..{.VE.....Y.E.......Uv.B....=. {....ee....G.%....H/).UR1[.G...d...._m......~:.\|.13..~.e.;s...;g......&g.@..w.G..K......{.u+..^...k.....s+...e..R.z...."..............l.z......C.......V.#.}.5(..f5.N`.......e&3".x..g..w..C.......T\|...v"w..Q>-(/2.x.A.L..!....r..noB..g\|...\|.\....U.T...<3.N-...rU.bp%.<.CE........k....0C..\|.Sw~.g....!....uf+y.KG.O+Y.h&.....F.......sB...7.\|;.r\|..\o......;.$...i.wC.ICO.n.h....AJ.N.+.T).........)9..y..?.hs%.".B..k....#.S.....:..!o..Z...\|.w2....a..+y.e;..A...x.p+2G/!..1..jTr.S...S.....D.<.G.z.+2..E..>.Z6L.......e.2..R..3...~..%.C.!..f..s.'.;.M...5..k.1..L._B.vA_\|.c{......{.......d...Y.'Q.TS:.7.......\|...,.:..-...#.V.*NA..&...iO.....SEE.kW!.y.p.y.m..6b..@=.,.n..i,....q..W...w.f..bg.`\|......3.:.K.<..I.[....a..}..%_....{...~..j...)......n}m[...u...._....{....,.t.[ ..g.....&.v.j..2.r5.r5.B..jp..v-.j./.....c.s..$q@..z...oo..g?.z...%..gW.......}.6h....U....o.u.])]..@B);.o.V

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 20:05:47.713258982 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.714293957 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.714329004 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.714462996 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.714463949 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.714510918 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.716396093 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.716447115 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.716464043 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.716681957 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.716976881 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.717561007 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.718563080 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.719485044 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.721834898 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.722142935 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.723226070 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.724386930 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.725133896 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.857455969 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.857507944 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.857546091 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.857799053 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.857808113 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.857848883 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.857950926 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.858814001 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.858978987 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.861365080 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.861500025 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.862353086 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.862715960 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.862751007 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.866842985 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.867186069 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.867752075 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.868858099 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.989028931 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.989065886 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.989257097 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.989461899 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.990952015 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.990986109 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.991020918 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.991024017 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.991050005 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.991074085 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.992503881 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.993376017 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.993864059 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.994342089 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.995487928 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:47.998111963 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.999095917 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:47.999289036 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.000283957 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.001347065 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.120516062 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.121572971 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.121591091 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.121632099 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.121718884 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.121767998 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.122464895 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.122828007 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.122880936 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.123872995 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.125431061 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.125473976 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.126123905 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.126385927 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.129245996 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.130847931 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.131664991 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.132606030 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.251610994 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.253041029 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.253077984 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.253217936 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.253770113 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.253842115 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.254076004 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.254914045 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.255177975 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.256202936 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.257437944 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.257471085 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.258223057 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.260313034 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.261795044 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.263006926 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.263082981 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.263902903 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.383049011 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.383400917 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.383560896 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.384742975 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.384773970 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.384831905 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.384932041 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.386657953 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.386729956 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.387088060 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.387670994 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.387968063 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.388443947 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.389555931 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.392734051 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.393157005 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.393770933 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.394237995 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.395016909 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.514739037 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.514764071 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.514780045 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.514947891 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.515271902 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.515357018 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.515450954 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.515465021 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.515522003 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.516724110 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.517813921 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.518604040 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.518856049 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.519167900 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.520654917 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.523874044 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.525207996 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.525221109 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.527378082 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.645095110 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.646946907 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.646982908 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.647018909 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.647232056 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.647232056 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.647396088 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.648181915 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.648299932 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.648339987 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.649888039 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.650259972 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.650528908 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.650723934 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.653800011 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.655414104 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.655649900 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.656253099 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.775398970 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.777321100 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.777353048 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.777424097 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.778327942 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.778498888 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.778529882 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.778569937 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.778608084 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.778743029 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.778816938 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.778882027 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.780771017 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.780802965 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.780879974 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.781461000 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.783847094 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.786140919 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.786410093 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.786856890 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.906614065 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.908324003 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.908339024 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.908354998 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.908608913 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.908608913 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.908628941 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.908832073 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.909368038 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.913038015 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.913161039 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.913886070 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.913949966 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:48.914412022 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.919130087 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.919145107 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:48.919368982 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.035670042 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.037573099 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.040157080 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.040168047 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.040177107 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.040246964 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.040913105 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.040983915 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.040988922 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.041033983 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.041085005 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.043054104 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.044378996 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.045125008 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.045756102 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.046112061 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.049742937 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.050602913 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.051203012 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.051428080 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.164488077 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.167892933 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.171119928 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.172810078 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.172852993 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.172857046 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.172904015 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.172904015 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.173274994 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.173855066 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.173918962 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.174873114 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.175250053 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.175337076 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.175647020 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.178262949 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.181688070 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.181695938 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.182558060 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.296730995 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.299618959 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.299705029 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.301726103 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.301836967 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.303117037 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.303183079 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.303360939 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.303416967 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.303591013 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.303829908 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.303891897 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.305635929 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.305994987 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.306099892 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.307533979 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.311191082 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.311367989 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.311510086 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.429330111 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.429344893 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.429358959 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.429469109 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.431766987 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.431869984 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.433291912 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.433355093 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.433365107 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.433379889 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.433417082 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.433443069 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.433485985 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.435460091 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.435532093 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.436085939 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.437242985 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.437257051 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.441450119 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.441507101 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.559369087 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.559385061 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.559398890 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.559503078 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.562052011 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.562504053 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.562521935 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.562561989 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.562599897 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.563224077 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.563277006 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.563436985 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.565659046 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.567858934 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.568599939 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.569338083 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.569768906 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.571276903 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.574297905 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.575347900 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.690310955 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.693386078 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.693460941 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.693528891 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.693701029 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.693769932 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.694067955 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.695578098 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.695884943 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.697263002 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.697333097 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.697570086 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.697624922 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.699995995 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.700004101 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.700148106 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.701463938 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.701910019 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.705811024 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.705960035 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.820960999 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.822464943 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.822479963 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.822495937 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.822571993 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.822571993 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.824287891 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.824647903 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.824928045 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.826798916 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.826873064 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.826941013 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.826996088 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.827020884 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.828876972 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.828948021 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.829847097 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.830173016 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.830312967 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.835138083 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.951622009 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.951647043 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.951706886 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.951741934 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.951997995 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.952052116 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.954685926 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.954790115 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.955123901 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.955867052 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.955882072 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.955935001 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.955940008 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.957715034 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.957813025 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:49.960330963 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.960498095 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:49.963359118 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.082165003 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.082184076 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.082262993 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.082333088 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.082406044 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.082456112 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.084455967 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.084470034 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.084551096 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.084949017 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.085130930 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.085254908 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.086391926 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.087933064 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.088046074 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.091094017 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.091857910 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.093463898 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.093473911 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.213102102 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.213135004 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.213232040 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.213351011 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.213876963 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.213990927 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.217186928 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.217921019 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.218324900 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.218355894 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.218393087 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.218709946 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.218772888 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.221307039 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.221363068 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.222968102 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.223831892 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.223855019 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.226696968 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.227029085 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.261019945 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 23, 2024 20:05:50.344507933 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.345344067 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.345374107 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.345418930 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.345961094 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.346020937 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.348205090 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.348401070 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.348433018 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.348469973 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.348970890 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.350719929 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.351046085 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.351659060 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.352050066 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.354899883 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.356667042 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.356683969 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.357095957 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.357901096 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.496558905 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.496613979 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.496650934 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.496696949 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.496716976 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.496813059 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.500827074 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.500893116 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.501779079 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.501873970 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.502708912 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.506355047 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.507217884 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.507299900 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.508457899 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.632725000 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.632834911 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.632894993 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.633030891 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.633512974 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.633570910 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.633930922 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.637046099 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.637356997 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.638472080 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.640058041 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.641844988 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.642591953 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.644160032 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.645829916 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.647371054 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.763920069 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.765976906 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.765990973 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.766005993 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.766045094 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.766088963 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.766875982 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.767365932 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.767426014 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.770967007 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.771123886 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.772052050 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.772247076 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.772854090 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.775991917 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.777631044 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.778220892 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.778573036 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.782322884 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.784013987 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.893564939 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.896174908 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.898996115 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.899878025 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.899964094 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.900968075 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.901705980 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.902980089 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.906359911 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.907325029 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.908289909 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.908368111 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.908423901 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.908605099 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:50.910375118 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.910523891 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:50.916002035 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.024559975 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.027486086 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.027576923 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.028470993 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.035746098 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.036488056 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.037069082 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.042032003 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.081187963 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.081235886 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.081300020 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.081382990 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.097286940 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.097385883 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.102946997 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.240039110 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.240115881 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.240151882 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.240195036 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.240206957 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.240261078 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.246022940 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.246115923 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.246154070 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.246170998 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.279232025 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.281435966 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.284015894 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.284888029 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.286178112 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.286832094 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.290687084 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.339262009 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.385945082 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 23, 2024 20:05:51.410099983 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.410195112 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.410254002 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.410311937 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.411334038 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.411401987 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.412040949 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.412811995 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.412879944 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.417516947 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.419349909 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.421063900 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.421967983 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.423018932 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.423108101 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.425005913 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.426363945 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.427310944 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.428570986 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.526590109 CEST	49671	443	192.168.2.8	204.79.197.203
Oct 23, 2024 20:05:51.545336008 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.546093941 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.546205997 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.555049896 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.555104971 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.555144072 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.555185080 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.555649996 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.557533026 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.698450089 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 23, 2024 20:05:51.708746910 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.709621906 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.711941004 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.713191986 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.714318991 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.714838028 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.714920998 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.717402935 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.718590021 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.720302105 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.837487936 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.837625027 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.837688923 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.837883949 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.839000940 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.839057922 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.839816093 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.840008020 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.840058088 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.842833042 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.844757080 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.844818115 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.847860098 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.848216057 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.848234892 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.848890066 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.850136042 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.853285074 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.853512049 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.854337931 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.870300055 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 23, 2024 20:05:51.969849110 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.969891071 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.969943047 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.972213984 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.972877979 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.974908113 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.974924088 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.974941969 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.974958897 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.974996090 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.975418091 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.975483894 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.975833893 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.978358984 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.981784105 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.985003948 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.985904932 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.986926079 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:51.990659952 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.991250038 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:51.992602110 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:52.100796938 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:52.102814913 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:52.102971077 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:52.112209082 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:52.113506079 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:52.113610983 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:52.114273071 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:52.114350080 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:52.117779970 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:55.951374054 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:55.953501940 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:55.955759048 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:55.956572056 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:55.956851006 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:55.958048105 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:55.959130049 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:55.961340904 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:55.961993933 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:55.962605953 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.080889940 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.080931902 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.080940008 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.080995083 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.081001043 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.081038952 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.084130049 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.084233999 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.086771965 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.086795092 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.086810112 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.086826086 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.086877108 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.086929083 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.086951017 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.086992979 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.090787888 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.091485023 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.092308998 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.461154938 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.461222887 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.461690903 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.461745024 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.464092970 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.464107037 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.464132071 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.464143038 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.464154959 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.585216999 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.585241079 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.585330009 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.585462093 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.585477114 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.585515976 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.585820913 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.586225986 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.586289883 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.666908979 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.672473907 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.784235954 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.790961981 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.795938969 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.801809072 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.809829950 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.911665916 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.911739111 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.923417091 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:56.941991091 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:56.991401911 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:57.069246054 CEST	443	49705	13.107.246.45	192.168.2.8
Oct 23, 2024 20:05:57.133111000 CEST	49705	443	192.168.2.8	13.107.246.45
Oct 23, 2024 20:05:58.709367037 CEST	49711	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:58.709409952 CEST	443	49711	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:58.709461927 CEST	49711	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:58.710105896 CEST	49712	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:58.710144997 CEST	443	49712	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:58.710190058 CEST	49712	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:58.710580111 CEST	49712	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:58.710592031 CEST	443	49712	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:58.710726976 CEST	49711	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:58.710736036 CEST	443	49711	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:59.556261063 CEST	443	49711	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:59.557687998 CEST	443	49712	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:59.586815119 CEST	49712	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:59.586883068 CEST	443	49712	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:59.586941004 CEST	49711	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:59.586962938 CEST	443	49711	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:59.588210106 CEST	443	49711	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:59.588284016 CEST	49711	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:59.590157032 CEST	443	49712	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:59.590235949 CEST	49712	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:59.592109919 CEST	49711	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:59.592206001 CEST	443	49711	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:59.593468904 CEST	49712	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:59.593686104 CEST	443	49712	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:59.594863892 CEST	49711	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:59.594872952 CEST	443	49711	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:59.646352053 CEST	49712	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:59.646358967 CEST	49711	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:59.646390915 CEST	443	49712	3.93.18.143	192.168.2.8
Oct 23, 2024 20:05:59.691134930 CEST	49712	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:05:59.866785049 CEST	49676	443	192.168.2.8	52.182.143.211
Oct 23, 2024 20:06:00.542839050 CEST	443	49711	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:00.542943001 CEST	443	49711	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:00.543008089 CEST	49711	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:00.543693066 CEST	49711	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:00.543715954 CEST	443	49711	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:00.604607105 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:00.604651928 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:00.604891062 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:00.604975939 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:00.605026007 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:00.605124950 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:00.605137110 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:00.605251074 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:00.605473995 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:00.605489016 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:00.990739107 CEST	49673	443	192.168.2.8	23.206.229.226
Oct 23, 2024 20:06:01.301837921 CEST	49672	443	192.168.2.8	23.206.229.226
Oct 23, 2024 20:06:01.441390991 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:01.442730904 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:01.443681955 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:01.443712950 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:01.443871975 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:01.443905115 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:01.444787979 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:01.444876909 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:01.445622921 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:01.445693016 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:01.446207047 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:01.446280003 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:01.446476936 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:01.446559906 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:01.446731091 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:01.446738958 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:01.486021996 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:01.486061096 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:01.501367092 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:01.532257080 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:01.544168949 CEST	49717	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:06:01.544219017 CEST	443	49717	142.250.186.100	192.168.2.8
Oct 23, 2024 20:06:01.544285059 CEST	49717	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:06:01.544550896 CEST	49717	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:06:01.544564009 CEST	443	49717	142.250.186.100	192.168.2.8
Oct 23, 2024 20:06:02.195863962 CEST	49718	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:02.195894003 CEST	443	49718	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:02.195971966 CEST	49718	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:02.197577000 CEST	49718	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:02.197587013 CEST	443	49718	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:02.409687042 CEST	443	49717	142.250.186.100	192.168.2.8
Oct 23, 2024 20:06:02.423285007 CEST	49717	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:06:02.423343897 CEST	443	49717	142.250.186.100	192.168.2.8
Oct 23, 2024 20:06:02.424566031 CEST	443	49717	142.250.186.100	192.168.2.8
Oct 23, 2024 20:06:02.424634933 CEST	49717	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:06:02.431097984 CEST	49717	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:06:02.431371927 CEST	443	49717	142.250.186.100	192.168.2.8
Oct 23, 2024 20:06:02.473293066 CEST	49717	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:06:02.473318100 CEST	443	49717	142.250.186.100	192.168.2.8
Oct 23, 2024 20:06:02.504678965 CEST	49677	80	192.168.2.8	192.229.211.108
Oct 23, 2024 20:06:02.520344019 CEST	49717	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:06:03.044781923 CEST	443	49718	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:03.044866085 CEST	49718	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:03.047451973 CEST	49718	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:03.047482967 CEST	443	49718	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:03.047790051 CEST	443	49718	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:03.096435070 CEST	49718	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:03.143342018 CEST	443	49718	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:03.339449883 CEST	443	49718	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:03.339513063 CEST	443	49718	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:03.339615107 CEST	49718	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:03.339700937 CEST	49718	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:03.339700937 CEST	49718	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:03.339741945 CEST	443	49718	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:03.339767933 CEST	443	49718	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:03.367594957 CEST	443	49704	23.206.229.226	192.168.2.8
Oct 23, 2024 20:06:03.367815971 CEST	49704	443	192.168.2.8	23.206.229.226
Oct 23, 2024 20:06:03.386603117 CEST	49719	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:03.386657000 CEST	443	49719	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:03.386742115 CEST	49719	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:03.387037039 CEST	49719	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:03.387054920 CEST	443	49719	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:03.615672112 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.615746021 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.615783930 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.615798950 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.615802050 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.615829945 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.615847111 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.615869999 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.615915060 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.615926981 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.615942001 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.615957975 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.645636082 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.646605015 CEST	49720	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.646706104 CEST	443	49720	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.646789074 CEST	49720	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.647814035 CEST	49720	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.647850037 CEST	443	49720	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.649734974 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.649770021 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.649993896 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.650221109 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.650232077 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.650698900 CEST	49722	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.650752068 CEST	443	49722	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.650861979 CEST	49722	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.651056051 CEST	49722	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.651079893 CEST	443	49722	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.651643991 CEST	49723	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.651662111 CEST	443	49723	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.651756048 CEST	49723	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.651961088 CEST	49723	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.651971102 CEST	443	49723	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.657313108 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:03.657341957 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:03.657412052 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:03.657543898 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.658941031 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:03.658955097 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:03.659528971 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:03.659565926 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:03.659898043 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:03.660207987 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:03.660224915 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:03.691332102 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.732604027 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.732639074 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.732667923 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.732677937 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.732702971 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.732708931 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.732723951 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.732728004 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.732752085 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.732754946 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.732789040 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.733295918 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.733309031 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.783682108 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.810956001 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.810987949 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.811077118 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.811162949 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.811162949 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.811844110 CEST	49715	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.811863899 CEST	443	49715	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.812386036 CEST	49727	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.812428951 CEST	443	49727	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.812526941 CEST	49727	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.813004971 CEST	49727	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.813015938 CEST	443	49727	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.849893093 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.849925041 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.849956036 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.849960089 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.849976063 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.849997997 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.850003958 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.850023031 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.850034952 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.850059032 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.850059986 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.850109100 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.966548920 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.966567039 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.966599941 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.966614962 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.966633081 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.966656923 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:03.966669083 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:03.966690063 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.083857059 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.083898067 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.083940983 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.083950043 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.083980083 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.083991051 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.084016085 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.084042072 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.201407909 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.201481104 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.201512098 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.201533079 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.201562881 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.201631069 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.201826096 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.201883078 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.201906919 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.201915979 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.202001095 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.202032089 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.202089071 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.202471018 CEST	49716	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.202486038 CEST	443	49716	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.241199970 CEST	443	49719	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:04.241270065 CEST	49719	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:04.242404938 CEST	49719	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:04.242427111 CEST	443	49719	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:04.242697954 CEST	443	49719	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:04.243650913 CEST	49719	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:04.281274080 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.281656027 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.281714916 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.282763004 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.282826900 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.287341118 CEST	443	49719	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:04.288729906 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.288916111 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.288917065 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.311650038 CEST	443	49723	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.311894894 CEST	49723	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.311911106 CEST	443	49723	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.312959909 CEST	443	49723	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.313009024 CEST	49723	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.313344955 CEST	49723	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.313393116 CEST	443	49723	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.313499928 CEST	49723	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.328025103 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.328223944 CEST	443	49722	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.328283072 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.328324080 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.328398943 CEST	49722	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.328429937 CEST	443	49722	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.328807116 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.329103947 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.329178095 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.329221964 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.329896927 CEST	443	49722	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.329976082 CEST	49722	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.330261946 CEST	49722	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.330341101 CEST	443	49722	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.330383062 CEST	49722	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.331336021 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.331435919 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.331450939 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.333127022 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:04.333441019 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:04.333467960 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:04.333703041 CEST	443	49720	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.333913088 CEST	49720	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.333940029 CEST	443	49720	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.334489107 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:04.334543943 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:04.334553003 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:04.334625959 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:04.335068941 CEST	443	49720	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.335489988 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:04.335560083 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:04.335750103 CEST	49720	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.335887909 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:04.335896015 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:04.335928917 CEST	49720	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.335937977 CEST	443	49720	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.355350971 CEST	443	49723	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.361712933 CEST	49723	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.361752033 CEST	443	49723	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.371336937 CEST	443	49722	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.371340990 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.377501011 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.377516031 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.377516985 CEST	49722	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.377516985 CEST	49720	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.377563953 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:04.377593040 CEST	443	49722	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.377628088 CEST	443	49720	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.410752058 CEST	49723	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.425848007 CEST	49722	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.430244923 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.430295944 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.430330038 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.430355072 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.430365086 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.430387974 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.430419922 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.430432081 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.430457115 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.430476904 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.430489063 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.430998087 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.431068897 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.431082010 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.431140900 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.498167038 CEST	443	49719	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:04.498246908 CEST	443	49719	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:04.498404026 CEST	443	49723	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.498483896 CEST	49719	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:04.498622894 CEST	443	49723	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.498781919 CEST	49723	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.499044895 CEST	49719	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:04.499072075 CEST	443	49719	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:04.499083996 CEST	49719	443	192.168.2.8	184.28.90.27
Oct 23, 2024 20:06:04.499089956 CEST	443	49719	184.28.90.27	192.168.2.8
Oct 23, 2024 20:06:04.499209881 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.499280930 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.499300957 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.499355078 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.499356031 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.499382973 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.499386072 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.499430895 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.500051022 CEST	443	49727	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.500319958 CEST	49723	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.500356913 CEST	443	49723	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.500571966 CEST	49727	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.500607967 CEST	443	49727	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.504187107 CEST	443	49727	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.504277945 CEST	49727	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.504925013 CEST	49727	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.505017042 CEST	443	49727	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.505400896 CEST	49727	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.505415916 CEST	443	49727	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.512105942 CEST	49728	443	192.168.2.8	199.232.192.193
Oct 23, 2024 20:06:04.512141943 CEST	443	49728	199.232.192.193	192.168.2.8
Oct 23, 2024 20:06:04.512299061 CEST	49728	443	192.168.2.8	199.232.192.193
Oct 23, 2024 20:06:04.512473106 CEST	49728	443	192.168.2.8	199.232.192.193
Oct 23, 2024 20:06:04.512480021 CEST	443	49728	199.232.192.193	192.168.2.8
Oct 23, 2024 20:06:04.512824059 CEST	443	49720	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.512993097 CEST	443	49720	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.513047934 CEST	49720	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.514352083 CEST	49720	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.514364004 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:04.514381886 CEST	443	49720	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.514383078 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:04.514570951 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:04.514775038 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:04.514781952 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:04.523751974 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:04.524028063 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:04.524081945 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:04.524085999 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:04.524115086 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:04.524979115 CEST	49726	443	192.168.2.8	52.216.110.37
Oct 23, 2024 20:06:04.525003910 CEST	443	49726	52.216.110.37	192.168.2.8
Oct 23, 2024 20:06:04.549166918 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.549321890 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.549439907 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.549441099 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.549469948 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.549527884 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.549547911 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.549674988 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.549731970 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.549746037 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.550054073 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.550122023 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.550134897 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.552119017 CEST	49727	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.594017029 CEST	443	49722	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.594213009 CEST	443	49722	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.594274044 CEST	49722	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.595046997 CEST	49722	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.595071077 CEST	443	49722	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.597721100 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.597734928 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.619200945 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.619256020 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.619290113 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.619358063 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.619400978 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.619400978 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.646356106 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.668004990 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.668107986 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.668179035 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.668222904 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.668250084 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.668294907 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.668329000 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.668363094 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.668405056 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.668426991 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.668441057 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.668570995 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.669122934 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.681776047 CEST	443	49727	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.681962967 CEST	443	49727	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.682023048 CEST	49727	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.682837009 CEST	49727	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.682899952 CEST	443	49727	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.708940983 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.708956957 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.737936020 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.737987041 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.738034010 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.738056898 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.738081932 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.738104105 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.755495071 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.758886099 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.787520885 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.787640095 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.787642002 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.787736893 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.787839890 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.787859917 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.787955046 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.788013935 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.788028002 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.788121939 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.788209915 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.788224936 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.788244963 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.788295031 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.788306952 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.833040953 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.877963066 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.898741007 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.898806095 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.898839951 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.898861885 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:04.898886919 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.898901939 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:04.905747890 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.905827045 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.905894995 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.905931950 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.906182051 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.906208038 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.906232119 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.906405926 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.906419039 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.906449080 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.906456947 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.906476974 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.958245039 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:04.996495008 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.996512890 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:04.996578932 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.018047094 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.018121958 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.018163919 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.018239975 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.018280983 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.019695044 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.024867058 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.024885893 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.024979115 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.025207043 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.025222063 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.025271893 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.025582075 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.025593996 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.025646925 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.095026970 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.095088959 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.095177889 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.095233917 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.095264912 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.097788095 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.115756989 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.115791082 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.115832090 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.139328957 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.143753052 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.143861055 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.143913031 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.143970013 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.144057989 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.144099951 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.144233942 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.144532919 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.144582987 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.144598007 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.144640923 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.145158052 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.145216942 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.151947021 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:05.151962042 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.153114080 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.153176069 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:05.153184891 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.153222084 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:05.154916048 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:05.154977083 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.155199051 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:05.155204058 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.205513000 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:05.213970900 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.214041948 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.214106083 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.214180946 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.214219093 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.217787981 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.251821995 CEST	443	49728	199.232.192.193	192.168.2.8
Oct 23, 2024 20:06:05.262660980 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.262787104 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.262790918 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.262867928 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.262908936 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.262932062 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.263364077 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.263427973 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.263458967 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.263514996 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.263555050 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.263601065 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.263617039 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.263727903 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.265783072 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.269355059 CEST	49728	443	192.168.2.8	199.232.192.193
Oct 23, 2024 20:06:05.269383907 CEST	443	49728	199.232.192.193	192.168.2.8
Oct 23, 2024 20:06:05.270353079 CEST	49724	443	192.168.2.8	104.17.24.14
Oct 23, 2024 20:06:05.270396948 CEST	443	49724	104.17.24.14	192.168.2.8
Oct 23, 2024 20:06:05.273200035 CEST	443	49728	199.232.192.193	192.168.2.8
Oct 23, 2024 20:06:05.273293972 CEST	49728	443	192.168.2.8	199.232.192.193
Oct 23, 2024 20:06:05.274189949 CEST	49728	443	192.168.2.8	199.232.192.193
Oct 23, 2024 20:06:05.274363995 CEST	49728	443	192.168.2.8	199.232.192.193
Oct 23, 2024 20:06:05.274375916 CEST	443	49728	199.232.192.193	192.168.2.8
Oct 23, 2024 20:06:05.305423021 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.305495977 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.305521011 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.305541992 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:05.305548906 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.305591106 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:05.305593967 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.305628061 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.305670977 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:05.307615042 CEST	49729	443	192.168.2.8	104.18.87.62
Oct 23, 2024 20:06:05.307631016 CEST	443	49729	104.18.87.62	192.168.2.8
Oct 23, 2024 20:06:05.319062948 CEST	49728	443	192.168.2.8	199.232.192.193
Oct 23, 2024 20:06:05.319092989 CEST	443	49728	199.232.192.193	192.168.2.8
Oct 23, 2024 20:06:05.321105957 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:05.321144104 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:05.321243048 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:05.321491957 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:05.321504116 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:05.332792997 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.332858086 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.332874060 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.332885027 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.332916021 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.332930088 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.362397909 CEST	49728	443	192.168.2.8	199.232.192.193
Oct 23, 2024 20:06:05.399902105 CEST	443	49728	199.232.192.193	192.168.2.8
Oct 23, 2024 20:06:05.400080919 CEST	443	49728	199.232.192.193	192.168.2.8
Oct 23, 2024 20:06:05.400244951 CEST	443	49728	199.232.192.193	192.168.2.8
Oct 23, 2024 20:06:05.400291920 CEST	49728	443	192.168.2.8	199.232.192.193
Oct 23, 2024 20:06:05.402595043 CEST	49728	443	192.168.2.8	199.232.192.193
Oct 23, 2024 20:06:05.402612925 CEST	443	49728	199.232.192.193	192.168.2.8
Oct 23, 2024 20:06:05.417454004 CEST	49732	443	192.168.2.8	199.232.196.193
Oct 23, 2024 20:06:05.417483091 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:05.417541027 CEST	49732	443	192.168.2.8	199.232.196.193
Oct 23, 2024 20:06:05.417752981 CEST	49732	443	192.168.2.8	199.232.196.193
Oct 23, 2024 20:06:05.417762041 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:05.451334953 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.451387882 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.451411009 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.451427937 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.451440096 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.451462984 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.570116043 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.570143938 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.570218086 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.570239067 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.570266008 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.570281029 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.657483101 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.657555103 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.657738924 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.657738924 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.657763958 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.659349918 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.737658024 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.737730026 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.737818956 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.737870932 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.737900972 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.741792917 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.811892986 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.811949968 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.812056065 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.812104940 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.812133074 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.812155962 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.927458048 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.927517891 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.927571058 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.927619934 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.927649975 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.929048061 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:05.929131985 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.929271936 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:05.929292917 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:05.930366039 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:05.930432081 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:05.930450916 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:05.930504084 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:05.931081057 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:05.931154013 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:05.931420088 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:05.971172094 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:05.971211910 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:05.977018118 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.977075100 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.977102995 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.977125883 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:05.977155924 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:05.977771997 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.018209934 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:06.305855989 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.305886030 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.305916071 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:06.305927038 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.305952072 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.305973053 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.305989981 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.306000948 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:06.306027889 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:06.306035042 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:06.306042910 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:06.306072950 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:06.306077957 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:06.306142092 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:06.306174040 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:06.306508064 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:06.306579113 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.306592941 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.306632042 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.306637049 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.306653976 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.306658030 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.306674957 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.306678057 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.306688070 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.306718111 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.306751966 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.306787968 CEST	49732	443	192.168.2.8	199.232.196.193
Oct 23, 2024 20:06:06.306811094 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:06.308042049 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:06.308105946 CEST	49732	443	192.168.2.8	199.232.196.193
Oct 23, 2024 20:06:06.309843063 CEST	49732	443	192.168.2.8	199.232.196.193
Oct 23, 2024 20:06:06.309910059 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:06.310188055 CEST	49732	443	192.168.2.8	199.232.196.193
Oct 23, 2024 20:06:06.310194969 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:06.312241077 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.312258005 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.312299013 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.312309027 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.312350988 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.325639009 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:06.325664043 CEST	443	49731	104.18.91.62	192.168.2.8
Oct 23, 2024 20:06:06.325675964 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:06.325706959 CEST	49731	443	192.168.2.8	104.18.91.62
Oct 23, 2024 20:06:06.364559889 CEST	49732	443	192.168.2.8	199.232.196.193
Oct 23, 2024 20:06:06.373130083 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.373183012 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.373218060 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.373233080 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.373255014 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.373275042 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.435163021 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:06.435216904 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:06.435261011 CEST	49732	443	192.168.2.8	199.232.196.193
Oct 23, 2024 20:06:06.435278893 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:06.435291052 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:06.435364962 CEST	49732	443	192.168.2.8	199.232.196.193
Oct 23, 2024 20:06:06.436805010 CEST	49732	443	192.168.2.8	199.232.196.193
Oct 23, 2024 20:06:06.436820984 CEST	443	49732	199.232.196.193	192.168.2.8
Oct 23, 2024 20:06:06.452379942 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.452425003 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.452475071 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.452529907 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.452545881 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.452567101 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.522085905 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.522140980 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.522165060 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.522190094 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.522203922 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.522219896 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.571223974 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.571244955 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.571305037 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.571326017 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.571357965 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.610371113 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.610426903 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.610444069 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.610450029 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.610487938 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.611321926 CEST	49721	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.611337900 CEST	443	49721	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.677500963 CEST	49733	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.677557945 CEST	443	49733	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:06.677619934 CEST	49733	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.678131104 CEST	49733	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:06.678145885 CEST	443	49733	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:07.155585051 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:07.155631065 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:07.155693054 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:07.156168938 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:07.156179905 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:07.362062931 CEST	443	49733	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:07.373542070 CEST	49733	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:07.373589993 CEST	443	49733	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:07.374646902 CEST	443	49733	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:07.375632048 CEST	49733	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:07.375816107 CEST	443	49733	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:07.375999928 CEST	49733	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:07.419353962 CEST	443	49733	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:07.552654982 CEST	443	49733	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:07.552753925 CEST	443	49733	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:07.552819967 CEST	49733	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:07.587748051 CEST	49733	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:07.587780952 CEST	443	49733	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:07.981755972 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:07.982520103 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:07.982548952 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:07.983601093 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:07.983669043 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:07.984574080 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:07.984622955 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:07.984816074 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.025861025 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.025901079 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.072988033 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.262448072 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.262473106 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.262494087 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.262543917 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.262554884 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.262592077 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.262623072 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.262654066 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.262674093 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.262674093 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.262674093 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.262681961 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.262696981 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.262701035 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.262718916 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.311264992 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.379468918 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.379478931 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.379513025 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.379533052 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.379543066 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.379570007 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.379582882 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.379604101 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.501607895 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.501626968 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.501682997 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.501720905 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.501758099 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.614613056 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.614633083 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.614676952 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.614702940 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.614737034 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.614763975 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.662767887 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.662787914 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.662846088 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.662870884 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.662909031 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.778649092 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.778673887 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.778732061 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.778759956 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.778794050 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.848678112 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.848697901 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.848758936 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.848787069 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.848828077 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.965023041 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.965040922 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.965080976 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.965106964 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:08.965132952 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:08.965147018 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.081418991 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.081434965 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.081496000 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.081506968 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.081542969 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.130201101 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.130225897 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.130265951 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.130295038 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.130310059 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.130338907 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.199465036 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.199485064 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.199536085 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.199557066 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.199610949 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.315393925 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.315412998 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.315476894 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.315507889 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.315555096 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.432274103 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.432292938 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.432369947 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.432400942 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.432436943 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.433293104 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.433306932 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.433360100 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.433377028 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.433399916 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.433414936 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.549742937 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.549762011 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.549845934 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.549879074 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.549920082 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.615516901 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.615536928 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.615642071 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.615679979 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.615721941 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.667598009 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.667617083 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.667725086 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.667742968 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.667798996 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.783504963 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.783521891 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.783581018 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.783595085 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.783631086 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.831541061 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.831557035 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.831717968 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.831727028 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.831773043 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.900317907 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.900336981 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.900440931 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.900475979 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.900526047 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.948750973 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.948780060 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.948822021 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.948847055 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:09.948863983 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:09.948908091 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:10.017642021 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:10.017663956 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:10.017733097 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:10.017754078 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:10.017771959 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:10.017785072 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:10.066225052 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:10.066253901 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:10.066288948 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:10.066307068 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:10.066338062 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:10.066365004 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:10.086716890 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:10.086792946 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:10.086808920 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:10.086823940 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:10.086877108 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:10.212009907 CEST	49734	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:10.212049007 CEST	443	49734	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:10.512603998 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:10.512645960 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:10.512967110 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:10.515115023 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:10.515125990 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.423142910 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.423223972 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:11.425930977 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:11.425939083 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.426266909 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.468081951 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:11.636538982 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:11.679341078 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.934417963 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.934446096 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.934456110 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.934482098 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.934503078 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:11.934510946 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.934519053 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.934552908 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:11.934573889 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:11.934775114 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.934966087 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:11.934971094 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.935168028 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:11.935353041 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:11.997144938 CEST	49741	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:11.997172117 CEST	443	49741	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:12.006813049 CEST	49744	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:12.006854057 CEST	443	49744	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:12.006905079 CEST	49744	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:12.007328987 CEST	49744	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:12.007343054 CEST	443	49744	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:12.395859003 CEST	443	49717	142.250.186.100	192.168.2.8
Oct 23, 2024 20:06:12.396003962 CEST	443	49717	142.250.186.100	192.168.2.8
Oct 23, 2024 20:06:12.396672964 CEST	49717	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:06:12.600495100 CEST	49717	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:06:12.600574017 CEST	443	49717	142.250.186.100	192.168.2.8
Oct 23, 2024 20:06:12.685971022 CEST	443	49744	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:12.686269999 CEST	49744	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:12.686302900 CEST	443	49744	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:12.686815977 CEST	443	49744	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:12.687180042 CEST	49744	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:12.687264919 CEST	443	49744	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:12.687495947 CEST	49744	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:12.731375933 CEST	443	49744	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:13.283442020 CEST	443	49744	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:13.283539057 CEST	443	49744	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:13.283591032 CEST	49744	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:13.284734964 CEST	49744	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:13.284754038 CEST	443	49744	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:13.288459063 CEST	49747	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:13.288501024 CEST	443	49747	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:13.288559914 CEST	49747	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:13.288769960 CEST	49747	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:13.288779020 CEST	443	49747	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:13.966528893 CEST	443	49747	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:13.970381975 CEST	49747	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:13.970407009 CEST	443	49747	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:13.970907927 CEST	443	49747	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:13.971236944 CEST	49747	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:13.971323967 CEST	443	49747	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:13.971467972 CEST	49747	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:14.015342951 CEST	443	49747	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:14.134325981 CEST	443	49747	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:14.134404898 CEST	443	49747	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:14.134448051 CEST	49747	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:14.138691902 CEST	49747	443	192.168.2.8	23.22.29.127
Oct 23, 2024 20:06:14.138710022 CEST	443	49747	23.22.29.127	192.168.2.8
Oct 23, 2024 20:06:40.909661055 CEST	49703	80	192.168.2.8	217.20.57.35
Oct 23, 2024 20:06:40.915821075 CEST	80	49703	217.20.57.35	192.168.2.8
Oct 23, 2024 20:06:40.916085005 CEST	49703	80	192.168.2.8	217.20.57.35
Oct 23, 2024 20:06:44.659779072 CEST	49712	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:44.659796953 CEST	443	49712	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:48.735219002 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:48.735323906 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:48.735682011 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:48.735972881 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:48.736008883 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:49.626507044 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:49.626595020 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:49.627867937 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:49.627904892 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:49.628174067 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:49.629549026 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:49.671372890 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:49.923202038 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:49.923261881 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:49.923305988 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:49.923459053 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:49.923460007 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:49.923532009 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:49.923608065 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:50.038326979 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:50.038425922 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:50.038460970 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:50.038472891 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:50.038541079 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:50.038664103 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:50.038711071 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:50.038742065 CEST	49749	443	192.168.2.8	52.149.20.212
Oct 23, 2024 20:06:50.038758993 CEST	443	49749	52.149.20.212	192.168.2.8
Oct 23, 2024 20:06:54.262926102 CEST	443	49712	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:54.263117075 CEST	443	49712	3.93.18.143	192.168.2.8
Oct 23, 2024 20:06:54.263371944 CEST	49712	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:55.864958048 CEST	49712	443	192.168.2.8	3.93.18.143
Oct 23, 2024 20:06:55.864995003 CEST	443	49712	3.93.18.143	192.168.2.8
Oct 23, 2024 20:07:01.683213949 CEST	49751	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:07:01.683330059 CEST	443	49751	142.250.186.100	192.168.2.8
Oct 23, 2024 20:07:01.683614016 CEST	49751	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:07:01.683850050 CEST	49751	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:07:01.683892965 CEST	443	49751	142.250.186.100	192.168.2.8
Oct 23, 2024 20:07:02.549889088 CEST	443	49751	142.250.186.100	192.168.2.8
Oct 23, 2024 20:07:02.550187111 CEST	49751	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:07:02.550245047 CEST	443	49751	142.250.186.100	192.168.2.8
Oct 23, 2024 20:07:02.551450014 CEST	443	49751	142.250.186.100	192.168.2.8
Oct 23, 2024 20:07:02.551806927 CEST	49751	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:07:02.551992893 CEST	443	49751	142.250.186.100	192.168.2.8
Oct 23, 2024 20:07:02.597244024 CEST	49751	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:07:12.536626101 CEST	443	49751	142.250.186.100	192.168.2.8
Oct 23, 2024 20:07:12.536720991 CEST	443	49751	142.250.186.100	192.168.2.8
Oct 23, 2024 20:07:12.536781073 CEST	49751	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:07:13.864131927 CEST	49751	443	192.168.2.8	142.250.186.100
Oct 23, 2024 20:07:13.864190102 CEST	443	49751	142.250.186.100	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 20:05:57.160536051 CEST	53	49375	1.1.1.1	192.168.2.8
Oct 23, 2024 20:05:57.249224901 CEST	53	56867	1.1.1.1	192.168.2.8
Oct 23, 2024 20:05:58.600016117 CEST	52085	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:05:58.600179911 CEST	60399	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:05:58.650707006 CEST	53	62486	1.1.1.1	192.168.2.8
Oct 23, 2024 20:05:58.652348042 CEST	53	60399	1.1.1.1	192.168.2.8
Oct 23, 2024 20:05:58.708051920 CEST	53	52085	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:00.588327885 CEST	64115	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:00.588814974 CEST	61282	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:00.601449966 CEST	53	64115	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:00.603441000 CEST	53	61282	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:01.533679008 CEST	53107	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:01.533807039 CEST	50308	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:01.543176889 CEST	53	53107	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:01.543219090 CEST	53	50308	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:03.647113085 CEST	58396	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:03.647572041 CEST	56263	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:03.649012089 CEST	55843	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:03.649308920 CEST	62936	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:03.655442953 CEST	53	58396	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:03.656497002 CEST	53	56263	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:03.657373905 CEST	53	62936	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:03.657573938 CEST	53	63889	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:03.658499002 CEST	53	55843	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:04.502398014 CEST	64272	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:04.502527952 CEST	54879	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:04.502914906 CEST	62909	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:04.503557920 CEST	54726	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:04.510063887 CEST	53	62909	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:04.510898113 CEST	53	54879	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:04.511594057 CEST	53	54726	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:04.513173103 CEST	53	64272	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:05.312011957 CEST	62565	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:05.312324047 CEST	50174	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:05.320308924 CEST	53	62565	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:05.320501089 CEST	53	50174	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:05.408441067 CEST	65176	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:05.408777952 CEST	51794	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:05.416028023 CEST	53	65176	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:05.416841984 CEST	53	51794	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:07.142194986 CEST	61904	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:07.142508030 CEST	60874	53	192.168.2.8	1.1.1.1
Oct 23, 2024 20:06:07.154480934 CEST	53	61904	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:07.154860020 CEST	53	60874	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:15.746077061 CEST	53	55590	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:34.718799114 CEST	53	64846	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:40.680557013 CEST	138	138	192.168.2.8	192.168.2.255
Oct 23, 2024 20:06:57.608831882 CEST	53	61098	1.1.1.1	192.168.2.8
Oct 23, 2024 20:06:57.762937069 CEST	53	50047	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 20:05:58.600016117 CEST	192.168.2.8	1.1.1.1	0xec92	Standard query (0)	05kqatnrj9s0snah9.phish.farm	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:05:58.600179911 CEST	192.168.2.8	1.1.1.1	0xe9ac	Standard query (0)	05kqatnrj9s0snah9.phish.farm	65	IN (0x0001)	false
Oct 23, 2024 20:06:00.588327885 CEST	192.168.2.8	1.1.1.1	0xee7a	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:00.588814974 CEST	192.168.2.8	1.1.1.1	0xe316	Standard query (0)	secured-login.net	65	IN (0x0001)	false
Oct 23, 2024 20:06:01.533679008 CEST	192.168.2.8	1.1.1.1	0x6a6f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:01.533807039 CEST	192.168.2.8	1.1.1.1	0x4813	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 23, 2024 20:06:03.647113085 CEST	192.168.2.8	1.1.1.1	0xef89	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:03.647572041 CEST	192.168.2.8	1.1.1.1	0x3204	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 23, 2024 20:06:03.649012089 CEST	192.168.2.8	1.1.1.1	0xa31d	Standard query (0)	s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:03.649308920 CEST	192.168.2.8	1.1.1.1	0x19f0	Standard query (0)	s3.amazonaws.com	65	IN (0x0001)	false
Oct 23, 2024 20:06:04.502398014 CEST	192.168.2.8	1.1.1.1	0x4e69	Standard query (0)	cdn2.hubspot.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:04.502527952 CEST	192.168.2.8	1.1.1.1	0xad22	Standard query (0)	cdn2.hubspot.net	65	IN (0x0001)	false
Oct 23, 2024 20:06:04.502914906 CEST	192.168.2.8	1.1.1.1	0x83d9	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:04.503557920 CEST	192.168.2.8	1.1.1.1	0x1a47	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Oct 23, 2024 20:06:05.312011957 CEST	192.168.2.8	1.1.1.1	0x46fa	Standard query (0)	cdn2.hubspot.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:05.312324047 CEST	192.168.2.8	1.1.1.1	0x8402	Standard query (0)	cdn2.hubspot.net	65	IN (0x0001)	false
Oct 23, 2024 20:06:05.408441067 CEST	192.168.2.8	1.1.1.1	0x6b6	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:05.408777952 CEST	192.168.2.8	1.1.1.1	0x3ef	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Oct 23, 2024 20:06:07.142194986 CEST	192.168.2.8	1.1.1.1	0x9cdb	Standard query (0)	secured-login.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:07.142508030 CEST	192.168.2.8	1.1.1.1	0xdfa5	Standard query (0)	secured-login.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 20:05:58.652348042 CEST	1.1.1.1	192.168.2.8	0xe9ac	No error (0)	05kqatnrj9s0snah9.phish.farm	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:05:58.708051920 CEST	1.1.1.1	192.168.2.8	0xec92	No error (0)	05kqatnrj9s0snah9.phish.farm	landing.training.knowbe4.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:05:58.708051920 CEST	1.1.1.1	192.168.2.8	0xec92	No error (0)	landing.training.knowbe4.com		3.93.18.143	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:05:58.708051920 CEST	1.1.1.1	192.168.2.8	0xec92	No error (0)	landing.training.knowbe4.com		3.223.170.205	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:05:58.708051920 CEST	1.1.1.1	192.168.2.8	0xec92	No error (0)	landing.training.knowbe4.com		23.22.29.127	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:05:58.708051920 CEST	1.1.1.1	192.168.2.8	0xec92	No error (0)	landing.training.knowbe4.com		23.23.248.100	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:05:58.708051920 CEST	1.1.1.1	192.168.2.8	0xec92	No error (0)	landing.training.knowbe4.com		35.175.39.3	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:05:58.708051920 CEST	1.1.1.1	192.168.2.8	0xec92	No error (0)	landing.training.knowbe4.com		52.54.198.53	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:00.601449966 CEST	1.1.1.1	192.168.2.8	0xee7a	No error (0)	secured-login.net		3.93.18.143	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:00.601449966 CEST	1.1.1.1	192.168.2.8	0xee7a	No error (0)	secured-login.net		52.54.198.53	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:00.601449966 CEST	1.1.1.1	192.168.2.8	0xee7a	No error (0)	secured-login.net		35.175.39.3	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:00.601449966 CEST	1.1.1.1	192.168.2.8	0xee7a	No error (0)	secured-login.net		23.22.29.127	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:00.601449966 CEST	1.1.1.1	192.168.2.8	0xee7a	No error (0)	secured-login.net		3.223.170.205	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:00.601449966 CEST	1.1.1.1	192.168.2.8	0xee7a	No error (0)	secured-login.net		23.23.248.100	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:01.543176889 CEST	1.1.1.1	192.168.2.8	0x6a6f	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:01.543219090 CEST	1.1.1.1	192.168.2.8	0x4813	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 23, 2024 20:06:03.655442953 CEST	1.1.1.1	192.168.2.8	0xef89	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:03.655442953 CEST	1.1.1.1	192.168.2.8	0xef89	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:03.656497002 CEST	1.1.1.1	192.168.2.8	0x3204	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 23, 2024 20:06:03.658499002 CEST	1.1.1.1	192.168.2.8	0xa31d	No error (0)	s3.amazonaws.com		52.216.110.37	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:03.658499002 CEST	1.1.1.1	192.168.2.8	0xa31d	No error (0)	s3.amazonaws.com		52.217.225.152	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:03.658499002 CEST	1.1.1.1	192.168.2.8	0xa31d	No error (0)	s3.amazonaws.com		52.216.32.104	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:03.658499002 CEST	1.1.1.1	192.168.2.8	0xa31d	No error (0)	s3.amazonaws.com		16.15.178.32	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:03.658499002 CEST	1.1.1.1	192.168.2.8	0xa31d	No error (0)	s3.amazonaws.com		52.217.231.152	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:03.658499002 CEST	1.1.1.1	192.168.2.8	0xa31d	No error (0)	s3.amazonaws.com		54.231.137.32	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:03.658499002 CEST	1.1.1.1	192.168.2.8	0xa31d	No error (0)	s3.amazonaws.com		52.216.240.254	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:03.658499002 CEST	1.1.1.1	192.168.2.8	0xa31d	No error (0)	s3.amazonaws.com		16.182.98.72	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:04.510063887 CEST	1.1.1.1	192.168.2.8	0x83d9	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:06:04.510063887 CEST	1.1.1.1	192.168.2.8	0x83d9	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:04.510063887 CEST	1.1.1.1	192.168.2.8	0x83d9	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:04.510898113 CEST	1.1.1.1	192.168.2.8	0xad22	No error (0)	cdn2.hubspot.net			65	IN (0x0001)	false
Oct 23, 2024 20:06:04.511594057 CEST	1.1.1.1	192.168.2.8	0x1a47	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:06:04.513173103 CEST	1.1.1.1	192.168.2.8	0x4e69	No error (0)	cdn2.hubspot.net		104.18.87.62	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:04.513173103 CEST	1.1.1.1	192.168.2.8	0x4e69	No error (0)	cdn2.hubspot.net		104.18.88.62	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:04.513173103 CEST	1.1.1.1	192.168.2.8	0x4e69	No error (0)	cdn2.hubspot.net		104.18.89.62	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:04.513173103 CEST	1.1.1.1	192.168.2.8	0x4e69	No error (0)	cdn2.hubspot.net		104.18.90.62	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:04.513173103 CEST	1.1.1.1	192.168.2.8	0x4e69	No error (0)	cdn2.hubspot.net		104.18.91.62	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:05.320308924 CEST	1.1.1.1	192.168.2.8	0x46fa	No error (0)	cdn2.hubspot.net		104.18.91.62	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:05.320308924 CEST	1.1.1.1	192.168.2.8	0x46fa	No error (0)	cdn2.hubspot.net		104.18.90.62	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:05.320308924 CEST	1.1.1.1	192.168.2.8	0x46fa	No error (0)	cdn2.hubspot.net		104.18.88.62	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:05.320308924 CEST	1.1.1.1	192.168.2.8	0x46fa	No error (0)	cdn2.hubspot.net		104.18.87.62	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:05.320308924 CEST	1.1.1.1	192.168.2.8	0x46fa	No error (0)	cdn2.hubspot.net		104.18.89.62	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:05.320501089 CEST	1.1.1.1	192.168.2.8	0x8402	No error (0)	cdn2.hubspot.net			65	IN (0x0001)	false
Oct 23, 2024 20:06:05.416028023 CEST	1.1.1.1	192.168.2.8	0x6b6	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:06:05.416028023 CEST	1.1.1.1	192.168.2.8	0x6b6	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:05.416028023 CEST	1.1.1.1	192.168.2.8	0x6b6	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:05.416841984 CEST	1.1.1.1	192.168.2.8	0x3ef	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:06:07.154480934 CEST	1.1.1.1	192.168.2.8	0x9cdb	No error (0)	secured-login.net		23.22.29.127	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:07.154480934 CEST	1.1.1.1	192.168.2.8	0x9cdb	No error (0)	secured-login.net		3.93.18.143	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:07.154480934 CEST	1.1.1.1	192.168.2.8	0x9cdb	No error (0)	secured-login.net		52.54.198.53	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:07.154480934 CEST	1.1.1.1	192.168.2.8	0x9cdb	No error (0)	secured-login.net		23.23.248.100	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:07.154480934 CEST	1.1.1.1	192.168.2.8	0x9cdb	No error (0)	secured-login.net		3.223.170.205	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:07.154480934 CEST	1.1.1.1	192.168.2.8	0x9cdb	No error (0)	secured-login.net		35.175.39.3	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:12.788047075 CEST	1.1.1.1	192.168.2.8	0x2dae	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:06:12.788047075 CEST	1.1.1.1	192.168.2.8	0x2dae	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:30.825273037 CEST	1.1.1.1	192.168.2.8	0x2429	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:06:30.825273037 CEST	1.1.1.1	192.168.2.8	0x2429	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:06:49.763417959 CEST	1.1.1.1	192.168.2.8	0x65a8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:06:49.763417959 CEST	1.1.1.1	192.168.2.8	0x65a8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:07:11.209883928 CEST	1.1.1.1	192.168.2.8	0x4ef8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:07:11.209883928 CEST	1.1.1.1	192.168.2.8	0x4ef8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

05kqatnrj9s0snah9.phish.farm

https:

secured-login.net

cdnjs.cloudflare.com

s3.amazonaws.com

cdn2.hubspot.net

i.imgur.com

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49711	3.93.18.143	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:05:59 UTC	991	OUT	GET /XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09?cid=2252932795 HTTP/1.1 Host: 05kqatnrj9s0snah9.phish.farm Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:00 UTC	574	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 18:06:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 452 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade ETag: W/"2ffb45b31d7bb3d5ab8003f98305d69d" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: 3aa60e67-b1a4-40a7-95db-522948f1b703 X-Runtime: 0.371843 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-10-23 18:06:00 UTC	452	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 27 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 64 2d 6c 6f 67 69 6e 2e 6e 65 74 2f 70 61 67 65 73 2f 63 33 39 35 35 62 31 63 34 38 61 2f 58 4e 57 6f 76 4d 31 46 47 57 47 39 57 55 54 4a 68 5a 45 49 34 53 44 46 61 59 57 5a 5a 62 54 56 42 56 32 78 45 65 6d 70 73 4e 47 68 52 4c 33 6c 6b 51 55 74 35 56 55 52 4f 54 45 52 36 4b 32 68 6c 61 6d 35 6a 4b 33 68 6a 61 33 56 46 4e 32 46 31 64 32 6c 6e 65 6b 4a 71 56 6e 70 76 57 6b 5a 72 4e 44 64 73 4d 6a 46 49 52 31 4e 72 4e 57 74 75 63 54 4a 52 65 55 63 35 5a 57 6c 31 4b 30 39 48 5a 6a 68 68 65 48 4a 4a 56 30 68 72 59 6d 5a 74 62 6a 4a 70 53 54 68 73 64 45 77 72 Data Ascii: <html> <head> <script>window.location.href = 'https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49716	3.93.18.143	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:01 UTC	1337	OUT	GET /pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://05kqatnrj9s0snah9.phish.farm/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09?cid=2252932795 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:03 UTC	834	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 18:06:03 GMT Content-Type: text/html; charset=utf-8 Content-Length: 107493 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer-when-downgrade Link: </assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css>; rel=preload; as=style; nopush,</assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js>; rel=preload; as=script; nopush ETag: W/"cfb2f5dca84a69014f40514e38519920" Cache-Control: max-age=0, private, must-revalidate Content-Security-Policy: X-Request-Id: 62c5170a-ebd1-4b78-abbe-c9672ee926a6 X-Runtime: 1.871157 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-10-23 18:06:03 UTC	15550	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 49 4d 50 4f 52 54 41 4e 54 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 69 73 20 70 61 67 65 20 69 73 20 70 61 72 74 20 6f 66 20 61 20 73 69 6d 75 6c 61 74 65 64 20 70 68 69 73 68 69 6e 67 20 61 74 74 61 63 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"> <meta name="IMPORTANT" content="This page is part of a simulated phishing attac
2024-10-23 18:06:03 UTC	16384	IN	Data Raw: 09 09 09 09 09 09 63 37 2e 31 36 2d 34 2e 37 31 2c 31 34 2e 39 2d 38 2e 34 37 2c 32 32 2e 38 35 2d 31 31 2e 36 34 63 2d 30 2e 39 32 2c 30 2e 33 36 2d 31 2e 38 34 2c 30 2e 37 33 2d 32 2e 37 36 2c 31 2e 30 39 63 31 32 2e 31 31 2d 34 2e 37 39 2c 32 34 2e 37 34 2d 38 2e 32 34 2c 33 37 2e 35 32 2d 31 30 2e 37 33 0a 09 09 09 09 09 09 09 63 33 2e 31 36 2d 30 2e 36 32 2c 36 2e 33 33 2d 31 2e 31 36 2c 39 2e 35 32 2d 31 2e 36 63 2d 30 2e 39 2c 30 2e 31 32 2d 31 2e 38 2c 30 2e 32 35 2d 32 2e 37 2c 30 2e 33 37 63 31 36 2e 31 2d 32 2e 32 31 2c 33 32 2e 34 36 2d 33 2e 31 34 2c 34 38 2e 36 38 2d 32 2e 30 35 63 34 2e 37 35 2c 30 2e 33 32 2c 39 2e 34 39 2c 30 2e 38 33 2c 31 34 2e 31 39 2c 31 2e 35 35 0a 09 09 09 09 09 09 09 63 2d 30 2e 38 33 2d 30 2e 31 33 2d 31 2e 36 36 Data Ascii: c7.16-4.71,14.9-8.47,22.85-11.64c-0.92,0.36-1.84,0.73-2.76,1.09c12.11-4.79,24.74-8.24,37.52-10.73c3.16-0.62,6.33-1.16,9.52-1.6c-0.9,0.12-1.8,0.25-2.7,0.37c16.1-2.21,32.46-3.14,48.68-2.05c4.75,0.32,9.49,0.83,14.19,1.55c-0.83-0.13-1.66
2024-10-23 18:06:03 UTC	56	IN	Data Raw: 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 74 64 3e 0a 09 09 09 09 09 3c 2f 74 72 3e 0a 09 09 09 09 09 3c 74 72 3e 0a 09 09 09 09 09 09 3c 74 64 20 63 6f 6c 73 70 61 6e Data Ascii: /div></td></tr><tr><td colspan
2024-10-23 18:06:03 UTC	16384	IN	Data Raw: 3d 22 35 22 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 70 6f 72 74 22 3e 44 65 6e 6b 65 6e 20 53 69 65 20 64 61 72 61 6e 3a 20 4d 65 6c 64 65 6e 20 53 69 65 20 76 65 72 64 c3 a4 63 68 74 69 67 65 20 45 2d 4d 61 69 6c 73 20 73 74 65 74 73 20 49 68 72 65 6d 20 56 6f 72 67 65 73 65 74 7a 74 65 6e 20 6f 64 65 72 20 64 65 6d 20 49 54 2d 54 65 61 6d 2e 20 43 79 62 65 72 6b 72 69 6d 69 6e 65 6c 6c 65 20 6b 65 6e 6e 65 6e 20 76 69 65 6c 65 20 54 72 69 63 6b 73 2c 20 75 6d 20 53 69 65 20 68 69 6e 74 65 72 73 20 4c 69 63 68 74 20 7a 75 20 66 c3 bc 68 72 65 6e 2e 20 42 6c 65 69 62 65 6e 20 53 69 65 20 77 61 63 68 73 61 6d 2c 20 64 65 6e 6e 20 53 69 65 20 73 69 6e 64 20 64 69 65 20 6c 65 74 7a 74 65 20 56 65 72 74 65 69 64 69 67 75 6e 67 73 6c Data Ascii: ="5"><div class="report">Denken Sie daran: Melden Sie verdchtige E-Mails stets Ihrem Vorgesetzten oder dem IT-Team. Cyberkriminelle kennen viele Tricks, um Sie hinters Licht zu fhren. Bleiben Sie wachsam, denn Sie sind die letzte Verteidigungsl
2024-10-23 18:06:03 UTC	16384	IN	Data Raw: 20 61 7a 20 65 2d 6d 61 69 6c 62 65 6e 20 6b 61 70 6f 74 74 20 68 69 76 61 74 6b 6f 7a c3 a1 73 6f 6b 72 61 20 76 61 67 79 20 6d 65 67 6e 79 69 74 6e c3 a1 20 61 20 63 73 61 74 6f 6c 6d c3 a1 6e 79 6f 6b 61 74 2c 20 c3 a1 6c 6c 6a 6f 6e 20 6d 65 67 20 65 67 79 20 70 69 6c 6c 61 6e 61 74 72 61 2c 20 66 69 67 79 65 6c 6d 65 73 65 6e 20 6e c3 a9 7a 7a 65 20 6d 65 67 20 c5 91 6b 65 74 2c 20 c3 a9 73 20 67 6f 6e 64 6f 6c 6b 6f 7a 7a 6f 6e 20 65 6c 2e 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 74 64 3e 0a 09 09 09 09 09 09 3c 74 64 3e 26 6e 62 73 70 3b 3c 2f 74 64 3e 0a 09 09 09 09 09 09 3c 74 64 20 76 61 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 33 30 25 22 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 Data Ascii: az e-mailben kapott hivatkozsokra vagy megnyitn a csatolmnyokat, lljon meg egy pillanatra, figyelmesen nzze meg ket, s gondolkozzon el.</div></div></td><td> </td><td valign="top" width="30%"><div clas
2024-10-23 18:06:04 UTC	16384	IN	Data Raw: 65 7a 70 69 65 63 7a 65 c5 84 73 74 77 61 20 77 26 6e 62 73 70 3b 73 69 65 63 69 3a 3c 2f 68 32 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 09 3c 74 61 62 6c 65 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 30 70 78 3b 22 3e 0a 09 09 09 09 3c 74 62 6f 64 79 3e 0a 09 09 09 09 09 3c 74 72 3e 0a 09 09 09 09 09 09 3c 74 64 20 76 61 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 33 30 25 22 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 75 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 75 6c 65 2d 6e 75 6d 62 65 72 2d 31 22 3e 30 31 3c 2f 64 69 76 3e 0a 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 75 6c 65 2d 74 65 78 74 22 3e 5a 61 6e Data Ascii: ezpieczestwa w sieci:</h2></div><table style="padding-bottom: 100px;"><tbody><tr><td valign="top" width="30%"><div class="rule-container"><div class="rule-number-1">01</div><div class="rule-text">Zan
2024-10-23 18:06:04 UTC	16384	IN	Data Raw: 68 32 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 09 3c 74 61 62 6c 65 20 73 74 79 6c 65 3d 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 30 30 70 78 3b 22 3e 0a 09 09 09 09 3c 74 62 6f 64 79 3e 0a 09 09 09 09 09 3c 74 72 3e 0a 09 09 09 09 09 09 3c 74 64 20 76 61 6c 69 67 6e 3d 22 74 6f 70 22 20 77 69 64 74 68 3d 22 33 30 25 22 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 75 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 75 6c 65 2d 6e 75 6d 62 65 72 2d 31 22 3e 30 31 3c 2f 64 69 76 3e 0a 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 75 6c 65 2d 74 65 78 74 22 3e d0 91 d1 83 d0 b4 d1 8c d1 82 d0 b5 20 d1 83 d0 b2 d0 b0 d0 b6 d0 bd d1 96 20 d0 b7 20 d0 bf d0 be Data Ascii: h2></div><table style="padding-bottom: 100px;"><tbody><tr><td valign="top" width="30%"><div class="rule-container"><div class="rule-number-1">01</div><div class="rule-text">
2024-10-23 18:06:04 UTC	9967	IN	Data Raw: 9d 98 20 eb aa a9 ec a0 81 ec 9d 80 20 ed 94 bc ec 8b b1 20 ea b3 b5 ea b2 a9 ec 9d b4 20 ec 96 b4 eb 96 bb ea b2 8c 20 eb 84 90 eb a6 ac 20 ec 95 8c eb a0 a4 ec a7 84 20 ed 9a 8c ec 82 ac eb a1 9c eb b6 80 ed 84 b0 20 ec 98 a8 20 ed 95 a9 eb b2 95 ec a0 81 ec 9d b8 20 ec 9d b4 eb a9 94 ec 9d bc eb a1 9c 20 eb 91 94 ea b0 91 ed 95 a0 20 ec 88 98 20 ec 9e 88 eb 8a 94 ec a7 80 eb a5 bc 20 eb b3 b4 ec 97 ac ec a3 bc ea b8 b0 20 ec 9c 84 ed 95 9c 20 ea b2 83 ec 9e 85 eb 8b 88 eb 8b a4 2e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 09 09 09 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 6f 70 74 69 6f 6e 73 20 6d 79 22 3e 0a 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 73 63 6c 61 69 6d Data Ascii: .</span></p></div></section><section class="options my"><div class="disclaim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49718	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 18:06:03 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=81609 Date: Wed, 23 Oct 2024 18:06:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49715	3.93.18.143	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:03 UTC	949	OUT	GET /assets/landing-watermark-8487e36eef1bec74f06631f19fea0aa171c208e2976373cda5bd0a4b9e230903.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:03 UTC	263	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 18:06:03 GMT Content-Type: text/css Content-Length: 1471 Connection: close Last-Modified: Wed, 23 Oct 2024 17:22:39 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-10-23 18:06:03 UTC	1471	IN	Data Raw: 2f 2a 20 6c 69 6e 65 20 31 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 74 65 72 6d 61 72 6b 2e 73 63 73 73 20 2a 2f 0a 2e 77 61 74 65 72 6d 61 72 6b 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 74 62 2d 72 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 77 72 69 74 69 6e 67 2d 6d 6f 64 65 3a 20 76 65 72 74 69 63 61 6c 2d 72 6c 3b 0a 20 20 74 65 78 74 2d 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 73 69 64 65 77 61 79 73 3b 0a 7d 0a 0a 2f 2a 20 6c 69 6e 65 20 34 2c 20 61 70 70 2f 61 73 73 65 74 73 2f 73 74 79 6c 65 73 68 65 65 74 73 2f 6c 61 6e 64 69 6e 67 2d 77 61 Data Ascii: /* line 1, app/assets/stylesheets/landing-watermark.scss /.watermark { -webkit-writing-mode: vertical-rl; -ms-writing-mode: tb-rl; writing-mode: vertical-rl; text-orientation: sideways;}/ line 4, app/assets/stylesheets/landing-wa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49719	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 18:06:04 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=81577 Date: Wed, 23 Oct 2024 18:06:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 18:06:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49724	104.17.24.14	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:04 UTC	913	OUT	GET /ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:04 UTC	944	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 18:06:04 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb04010-1d970" Last-Modified: Mon, 04 May 2020 16:17:20 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 36108 Expires: Mon, 13 Oct 2025 18:06:04 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TRj2hqodxyBVnwXbiDix26758IH%2FZEdWYh0QtbmE3SZjbcwU7gMKC0i0hGaZ%2BD4QR4M4u9dkyivfUePsHGHP7aXeVpbxHNPzOzH4v8LNefhHw2di2dPqJPNUCEkBeg7%2BJnPWfBE8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d73a8ad39d347a8-DFW alt-svc: h3=":443"; ma=86400
2024-10-23 18:06:04 UTC	425	IN	Data Raw: 37 63 30 30 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 37 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b Data Ascii: 7c00/! Bootstrap v3.3.7 (http://getbootstrap.com) * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{
2024-10-23 18:06:04 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 2c 73 75 6d 6d 61 72 79 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 61 75 64 69 6f 2c 63 61 6e 76 61 73 2c 70 72 6f 67 72 65 73 73 2c 76 69 64 65 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f Data Ascii: ction,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bo
2024-10-23 18:06:04 UTC	1369	IN	Data Raw: 61 75 74 6f 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 66 Data Ascii: auto}input[type=search]{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;-webkit-appearance:textfield}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration{-webkit-appearance:none}f
2024-10-23 18:06:04 UTC	1369	IN	Data Raw: 69 64 20 23 64 64 64 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6c 79 70 68 69 63 6f 6e 73 20 48 61 6c 66 6c 69 6e 67 73 27 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 29 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 67 6c 79 70 68 69 63 6f 6e 73 2d 68 61 6c 66 6c 69 6e 67 73 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d Data Ascii: id #ddd!important}}@font-face{font-family:'Glyphicons Halflings';src:url(../fonts/glyphicons-halflings-regular.eot);src:url(../fonts/glyphicons-halflings-regular.eot?#iefix) format('embedded-opentype'),url(../fonts/glyphicons-halflings-regular.woff2) form
2024-10-23 18:06:04 UTC	1369	IN	Data Raw: 67 6c 79 70 68 69 63 6f 6e 2d 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 68 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 7a 6f 6f 6d 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6f 66 66 Data Ascii: glyphicon-th:before{content:"\e011"}.glyphicon-th-list:before{content:"\e012"}.glyphicon-ok:before{content:"\e013"}.glyphicon-remove:before{content:"\e014"}.glyphicon-zoom-in:before{content:"\e015"}.glyphicon-zoom-out:before{content:"\e016"}.glyphicon-off
2024-10-23 18:06:04 UTC	1369	IN	Data Raw: 6d 61 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 72 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6f 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 62 6f 6c 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 69 74 61 6c 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 65 78 74 2d 68 65 69 67 68 74 3a 62 65 66 6f Data Ascii: mark:before{content:"\e044"}.glyphicon-print:before{content:"\e045"}.glyphicon-camera:before{content:"\e046"}.glyphicon-font:before{content:"\e047"}.glyphicon-bold:before{content:"\e048"}.glyphicon-italic:before{content:"\e049"}.glyphicon-text-height:befo
2024-10-23 18:06:04 UTC	1369	IN	Data Raw: 74 65 70 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 38 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 Data Ascii: tep-forward:before{content:"\e077"}.glyphicon-eject:before{content:"\e078"}.glyphicon-chevron-left:before{content:"\e079"}.glyphicon-chevron-right:before{content:"\e080"}.glyphicon-plus-sign:before{content:"\e081"}.glyphicon-minus-sign:before{content:"\e0
2024-10-23 18:06:04 UTC	1369	IN	Data Raw: 69 63 6f 6e 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 74 77 65 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 31 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 6f 70 70 69 6e 67 2d 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 Data Ascii: icon-comment:before{content:"\e111"}.glyphicon-magnet:before{content:"\e112"}.glyphicon-chevron-up:before{content:"\e113"}.glyphicon-chevron-down:before{content:"\e114"}.glyphicon-retweet:before{content:"\e115"}.glyphicon-shopping-cart:before{content:"\e1
2024-10-23 18:06:04 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 61 70 65 72 63 6c 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 72 74 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 6e 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 75 73 68 70 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 34 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 75 73 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: e{content:"\e141"}.glyphicon-paperclip:before{content:"\e142"}.glyphicon-heart-empty:before{content:"\e143"}.glyphicon-link:before{content:"\e144"}.glyphicon-phone:before{content:"\e145"}.glyphicon-pushpin:before{content:"\e146"}.glyphicon-usd:before{cont
2024-10-23 18:06:04 UTC	1369	IN	Data Raw: 6e 74 3a 22 5c 65 31 37 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 73 61 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 6f 70 70 79 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 61 6e 73 66 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 37 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 75 74 6c Data Ascii: nt:"\e173"}.glyphicon-floppy-remove:before{content:"\e174"}.glyphicon-floppy-save:before{content:"\e175"}.glyphicon-floppy-open:before{content:"\e176"}.glyphicon-credit-card:before{content:"\e177"}.glyphicon-transfer:before{content:"\e178"}.glyphicon-cutl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49723	3.93.18.143	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:04 UTC	949	OUT	GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:04 UTC	514	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 18:06:04 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy: X-Request-Id: 9060390b-f009-4151-b908-4ab5078b665a X-Runtime: 0.010794 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-10-23 18:06:04 UTC	9	IN	Data Raw: 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49721	3.93.18.143	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:04 UTC	928	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:04 UTC	279	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 18:06:04 GMT Content-Type: application/javascript Content-Length: 380848 Connection: close Last-Modified: Wed, 23 Oct 2024 17:22:39 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-10-23 18:06:04 UTC	8726	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-23 18:06:04 UTC	16384	IN	Data Raw: 72 2c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 79 65 21 3d 54 26 26 28 74 3d 54 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 74 2e 74 6f 70 21 3d 3d 74 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 4d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 63 65 2e 65 78 70 61 6e 64 6f 29 2e 6c 65 6e 67 74 68 7d 29 2c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 Data Ascii: r,r.msMatchesSelector&&ye!=T&&(t=T.defaultView)&&t.top!==t&&t.addEventListener("unload",M),le.getById=$(function(e){return r.appendChild(e).id=ce.expando,!T.getElementsByName\|\|!T.getElementsByName(ce.expando).length}),le.disconnectedMatch=$(function(e){re
2024-10-23 18:06:04 UTC	16384	IN	Data Raw: 29 29 7d 63 61 74 63 68 28 65 29 7b 6e 2e 61 70 70 6c 79 28 76 6f 69 64 20 30 2c 5b 65 5d 29 7d 7d 63 65 2e 43 61 6c 6c 62 61 63 6b 73 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 65 2c 6e 3b 72 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 3f 28 65 3d 72 2c 6e 3d 7b 7d 2c 63 65 2e 65 61 63 68 28 65 2e 6d 61 74 63 68 28 44 29 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 5b 74 5d 3d 21 30 7d 29 2c 6e 29 3a 63 65 2e 65 78 74 65 6e 64 28 7b 7d 2c 72 29 3b 76 61 72 20 69 2c 74 2c 6f 2c 61 2c 73 3d 5b 5d 2c 75 3d 5b 5d 2c 6c 3d 2d 31 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 61 3d 61 7c 7c 72 2e 6f 6e 63 65 2c 6f 3d 69 3d 21 30 3b 75 2e 6c 65 6e 67 74 68 3b 6c 3d 2d 31 29 7b 74 3d 75 2e 73 68 69 66 74 28 29 3b 77 68 Data Ascii: ))}catch(e){n.apply(void 0,[e])}}ce.Callbacks=function(r){var e,n;r="string"==typeof r?(e=r,n={},ce.each(e.match(D)\|\|[],function(e,t){n[t]=!0}),n):ce.extend({},r);var i,t,o,a,s=[],u=[],l=-1,c=function(){for(a=a\|\|r.once,o=i=!0;u.length;l=-1){t=u.shift();wh
2024-10-23 18:06:04 UTC	16384	IN	Data Raw: 44 69 73 70 61 74 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 6f 69 64 20 30 21 3d 3d 65 2e 72 65 73 75 6c 74 26 26 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 26 26 28 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 65 2e 72 65 73 75 6c 74 29 7d 7d 7d 7d 2c 63 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 29 7d 2c 63 65 2e 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 65 2e 45 76 65 6e 74 29 29 72 65 74 75 72 6e 20 6e 65 77 20 63 65 2e 45 76 65 6e 74 Data Ascii: Dispatch:function(e){void 0!==e.result&&e.originalEvent&&(e.originalEvent.returnValue=e.result)}}}},ce.removeEvent=function(e,t,n){e.removeEventListener&&e.removeEventListener(t,n)},ce.Event=function(e,t){if(!(this instanceof ce.Event))return new ce.Event
2024-10-23 18:06:05 UTC	16384	IN	Data Raw: 2c 30 5d 29 2c 73 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 6f 2c 5b 6c 5d 29 2c 21 31 29 7d 2c 6c 3d 73 2e 70 72 6f 6d 69 73 65 28 7b 65 6c 65 6d 3a 6f 2c 70 72 6f 70 73 3a 63 65 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 29 2c 6f 70 74 73 3a 63 65 2e 65 78 74 65 6e 64 28 21 30 2c 7b 73 70 65 63 69 61 6c 45 61 73 69 6e 67 3a 7b 7d 2c 65 61 73 69 6e 67 3a 63 65 2e 65 61 73 69 6e 67 2e 5f 64 65 66 61 75 6c 74 7d 2c 74 29 2c 6f 72 69 67 69 6e 61 6c 50 72 6f 70 65 72 74 69 65 73 3a 65 2c 6f 72 69 67 69 6e 61 6c 4f 70 74 69 6f 6e 73 3a 74 2c 73 74 61 72 74 54 69 6d 65 3a 73 74 7c 7c 68 74 28 29 2c 64 75 72 61 74 69 6f 6e 3a 74 2e 64 75 72 61 74 69 6f 6e 2c 74 77 65 65 6e 73 3a 5b 5d 2c 63 72 65 61 74 65 54 77 65 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 Data Ascii: ,0]),s.resolveWith(o,[l]),!1)},l=s.promise({elem:o,props:ce.extend({},e),opts:ce.extend(!0,{specialEasing:{},easing:ce.easing._default},t),originalProperties:e,originalOptions:t,startTime:st\|\|ht(),duration:t.duration,tweens:[],createTween:function(e,t){va
2024-10-23 18:06:05 UTC	16384	IN	Data Raw: 43 61 73 65 28 29 5d 7c 7c 65 2c 61 5b 65 5d 3d 74 29 2c 74 68 69 73 7d 2c 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 68 26 26 28 76 2e 6d 69 6d 65 54 79 70 65 3d 65 29 2c 74 68 69 73 7d 2c 73 74 61 74 75 73 43 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 69 66 28 65 29 69 66 28 68 29 54 2e 61 6c 77 61 79 73 28 65 5b 54 2e 73 74 61 74 75 73 5d 29 3b 65 6c 73 65 20 66 6f 72 28 74 20 69 6e 20 65 29 77 5b 74 5d 3d 5b 77 5b 74 5d 2c 65 5b 74 5d 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 7c 7c 75 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 61 62 6f 72 74 28 74 29 2c 6c 28 30 2c 74 29 2c Data Ascii: Case()]\|\|e,a[e]=t),this},overrideMimeType:function(e){return null==h&&(v.mimeType=e),this},statusCode:function(e){var t;if(e)if(h)T.always(e[T.status]);else for(t in e)w[t]=[w[t],e[t]];return this},abort:function(e){var t=e\|\|u;return c&&c.abort(t),l(0,t),
2024-10-23 18:06:05 UTC	16384	IN	Data Raw: 5d 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 74 68 69 73 2e 64 6f 63 75 6d 65 6e 74 5b 30 5d 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 56 2e 77 69 64 67 65 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 74 68 69 73 2e 5f 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 28 29 2c 74 29 2c 74 68 69 73 2e 5f 63 72 65 61 74 65 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 69 73 2e 5f 73 65 74 4f 70 74 69 6f 6e 44 69 73 61 62 6c 65 64 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 69 73 61 62 6c 65 64 29 2c 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 22 63 72 65 61 74 65 22 2c 6e 75 6c 6c 2c 74 68 69 73 2e 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 Data Ascii: ].defaultView\|\|this.document[0].parentWindow)),this.options=V.widget.extend({},this.options,this._getCreateOptions(),t),this._create(),this.options.disabled&&this._setOptionDisabled(this.options.disabled),this._trigger("create",null,this._getCreateEventDa
2024-10-23 18:06:05 UTC	16384	IN	Data Raw: 4d 69 73 73 69 6e 67 57 68 69 63 68 3d 21 30 3b 65 6c 73 65 20 69 66 28 21 74 68 69 73 2e 69 67 6e 6f 72 65 4d 69 73 73 69 6e 67 57 68 69 63 68 29 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 6d 6f 75 73 65 55 70 28 74 29 7d 72 65 74 75 72 6e 28 74 2e 77 68 69 63 68 7c 7c 74 2e 62 75 74 74 6f 6e 29 26 26 28 74 68 69 73 2e 5f 6d 6f 75 73 65 4d 6f 76 65 64 3d 21 30 29 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 3f 28 74 68 69 73 2e 5f 6d 6f 75 73 65 44 72 61 67 28 74 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 29 3a 28 74 68 69 73 2e 5f 6d 6f 75 73 65 44 69 73 74 61 6e 63 65 4d 65 74 28 74 29 26 26 74 68 69 73 2e 5f 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 28 74 29 26 26 28 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 3d 21 31 Data Ascii: MissingWhich=!0;else if(!this.ignoreMissingWhich)return this._mouseUp(t)}return(t.which\|\|t.button)&&(this._mouseMoved=!0),this._mouseStarted?(this._mouseDrag(t),t.preventDefault()):(this._mouseDistanceMet(t)&&this._mouseDelayMet(t)&&(this._mouseStarted=!1
2024-10-23 18:06:05 UTC	16384	IN	Data Raw: 76 65 72 66 6c 6f 77 4f 66 66 73 65 74 2e 6c 65 66 74 3c 73 2e 73 63 72 6f 6c 6c 53 65 6e 73 69 74 69 76 69 74 79 26 26 28 6f 2e 73 63 72 6f 6c 6c 4c 65 66 74 3d 6e 3d 6f 2e 73 63 72 6f 6c 6c 4c 65 66 74 2d 73 2e 73 63 72 6f 6c 6c 53 70 65 65 64 29 29 29 3a 28 73 2e 61 78 69 73 26 26 22 78 22 3d 3d 3d 73 2e 61 78 69 73 7c 7c 28 74 2e 70 61 67 65 59 2d 56 28 61 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 3c 73 2e 73 63 72 6f 6c 6c 53 65 6e 73 69 74 69 76 69 74 79 3f 6e 3d 56 28 61 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 56 28 61 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 2d 73 2e 73 63 72 6f 6c 6c 53 70 65 65 64 29 3a 56 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 2d 28 74 2e 70 61 67 65 59 2d 56 28 61 29 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 29 3c 73 2e 73 63 72 Data Ascii: verflowOffset.left<s.scrollSensitivity&&(o.scrollLeft=n=o.scrollLeft-s.scrollSpeed))):(s.axis&&"x"===s.axis\|\|(t.pageY-V(a).scrollTop()<s.scrollSensitivity?n=V(a).scrollTop(V(a).scrollTop()-s.scrollSpeed):V(window).height()-(t.pageY-V(a).scrollTop())<s.scr
2024-10-23 18:06:05 UTC	16384	IN	Data Raw: 30 5d 2c 22 6c 65 66 74 22 29 3f 30 3a 6f 2e 73 69 7a 65 44 69 66 66 2e 68 65 69 67 68 74 2c 69 3d 65 3f 30 3a 6f 2e 73 69 7a 65 44 69 66 66 2e 77 69 64 74 68 2c 65 3d 7b 77 69 64 74 68 3a 6f 2e 68 65 6c 70 65 72 2e 77 69 64 74 68 28 29 2d 69 2c 68 65 69 67 68 74 3a 6f 2e 68 65 6c 70 65 72 2e 68 65 69 67 68 74 28 29 2d 73 7d 2c 69 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 6c 65 66 74 22 29 29 2b 28 6f 2e 70 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 2d 6f 2e 6f 72 69 67 69 6e 61 6c 50 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 29 7c 7c 6e 75 6c 6c 2c 73 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 74 6f 70 22 29 29 2b 28 6f 2e 70 6f 73 69 74 69 6f 6e 2e 74 6f 70 2d 6f 2e 6f 72 69 67 69 6e 61 6c Data Ascii: 0],"left")?0:o.sizeDiff.height,i=e?0:o.sizeDiff.width,e={width:o.helper.width()-i,height:o.helper.height()-s},i=parseFloat(o.element.css("left"))+(o.position.left-o.originalPosition.left)\|\|null,s=parseFloat(o.element.css("top"))+(o.position.top-o.original

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49722	3.93.18.143	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:04 UTC	928	OUT	GET /assets/application-3ab7c63a41a8761925d45817a71fb79e0ef7208b59de505ac640c8a2a183ec19.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:04 UTC	514	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 18:06:04 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy: X-Request-Id: cb918b06-4545-4584-9ab3-ea4689d73e47 X-Runtime: 0.086213 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-10-23 18:06:04 UTC	9	IN	Data Raw: 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49726	52.216.110.37	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:04 UTC	886	OUT	GET /helpimg/landing_pages/css/dd.css HTTP/1.1 Host: s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:04 UTC	436	IN	HTTP/1.1 200 OK x-amz-id-2: mk8Ykj+MxN6/+NQZ12vWRgD2rjfS9U94ABkMXpQZ9Zlbn996in1yPMNuth2gnB74lvC6EccfVmQ= x-amz-request-id: HJAPM8T3THXXBT17 Date: Wed, 23 Oct 2024 18:06:05 GMT x-amz-replication-status: COMPLETED Last-Modified: Tue, 08 Aug 2017 20:12:22 GMT ETag: "dd05b711e15ef201b07e20cb5c87f5d8" x-amz-version-id: null Accept-Ranges: bytes Content-Type: text/css Content-Length: 4524 Server: AmazonS3 Connection: close
2024-10-23 18:06:04 UTC	4524	IN	Data Raw: 2e 62 6f 72 64 65 72 52 61 64 69 75 73 7b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 20 7d 0d 0a 2e 62 6f 72 64 65 72 52 61 64 69 75 73 54 70 7b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 35 70 78 20 35 70 78 3b 7d 0d 0a 2e 62 6f 72 64 65 72 52 61 64 69 75 73 42 74 6d 7b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 35 70 78 20 35 70 78 20 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 35 70 78 20 35 70 78 3b 7d 0d 0a 0d 0a 2e 64 64 63 6f 6d 6d 6f 6e 20 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b Data Ascii: .borderRadius{-moz-border-radius:5px; border-radius:5px; }.borderRadiusTp{-moz-border-radius:5px 5px 0 0; border-radius:5px 5px 5px 5px;}.borderRadiusBtm{-moz-border-radius:0 0 5px 5px ; border-radius:5px 5px 5px 5px;}.ddcommon {position:relative;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49720	3.93.18.143	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:04 UTC	881	OUT	GET /packs/js/vendor-69f70dd3792dc7287ac8.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:04 UTC	514	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 18:06:04 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy: X-Request-Id: 679d2f64-548a-4b56-9ce2-48c7f3b9a9e8 X-Runtime: 0.010815 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-10-23 18:06:04 UTC	9	IN	Data Raw: 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49727	3.93.18.143	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:04 UTC	926	OUT	GET /assets/modernizr-654222debe8018b12f1993ceddff30dc163a7d5008d79869c399d6d167321f97.js HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:04 UTC	514	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 18:06:04 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy: X-Request-Id: 4e91ddeb-f281-4fb4-9598-87fbd7c63896 X-Runtime: 0.013148 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-10-23 18:06:04 UTC	9	IN	Data Raw: 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49729	104.18.87.62	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:05 UTC	945	OUT	GET /hubfs/241394/html_file/files/img/KB4-logo.png HTTP/1.1 Host: cdn2.hubspot.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:05 UTC	1329	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 18:06:05 GMT Content-Type: image/webp Content-Length: 2368 Connection: close CF-Ray: 8d73a8b2adf1cb75-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 1597 Cache-Control: s-maxage=2592000, max-age=1209600, stale-while-revalidate=900 Content-Disposition: inline; filename="KB4-logo.webp" ETag: "ddf47be00ad3eebaabd63fec4c5733f2" Last-Modified: Fri, 29 Mar 2024 19:46:11 GMT Vary: Accept Via: 1.1 27fc50e60026c8530ee4d90073929962.cloudfront.net (CloudFront) Access-Control-Allow-Methods: GET cache-tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=3873 Edge-Cache-Tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL Timing-Allow-Origin: cdn2.hubspot.net X-Amz-Cf-Id: hLWwX9T-UpddbApod0qo--4yL1oWWHcQ3PP_xFRoO7D86CET4eqZ3Q== X-Amz-Cf-Pop: DFW57-P8 x-amz-id-2: kSJCdfMak94p7eFlyIEvzv/waskxWw/U0daziJV+mErjYBAYncTPCiw8+YPIFY+kGgodmuZYgus= x-amz-meta-access-tag: public-not-indexable x-amz-meta-cache-tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL x-amz-meta-created-unix-time-millis: 1447343595191 x-amz-meta-index-tag: none x-amz-replication-status: COMPLETED x-amz-request-id: 5N0RHM3037W1334C x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING
2024-10-23 18:06:05 UTC	593	IN	Data Raw: 78 2d 61 6d 7a 2d 76 65 72 73 69 6f 6e 2d 69 64 3a 20 47 4f 75 41 4a 7a 41 31 2e 62 6f 31 76 6a 6f 74 5f 48 73 71 30 6f 77 45 59 39 38 58 6a 59 48 39 0d 0a 58 2d 43 61 63 68 65 3a 20 52 65 66 72 65 73 68 48 69 74 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 2d 45 6e 66 6f 72 63 65 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 6e 65 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c Data Ascii: x-amz-version-id: GOuAJzA1.bo1vjot_Hsq0owEY98XjYH9X-Cache: RefreshHit from cloudfrontX-HS-CF-Lambda: us-east-1.EnforceAclForReads 3X-HS-CF-Lambda-Enforce: us-east-1.EnforceAclForReads 3X-Robots-Tag: noneReport-To: {"endpoints":[{"url":"https:\/\
2024-10-23 18:06:05 UTC	816	IN	Data Raw: 52 49 46 46 38 09 00 00 57 45 42 50 56 50 38 4c 2c 09 00 00 2f c7 40 09 10 e2 30 90 b6 4d e3 5f f8 77 07 11 31 01 e9 57 56 61 55 0f 57 2c 4b db b6 fe 6d 93 a3 7d bc 4a da 5d 8f 80 97 3d 83 ee 3a 5d f7 44 7a 0e 3d 80 9e 01 fd 7e bf ef f7 fd ff 1e 4d b7 4f c9 50 6e 65 58 28 0c e6 e0 bf 0c f2 84 99 93 7f 33 d6 34 cc cc cc cc 8c 8a 03 0a 93 1c 86 3b 8c 66 3b 9c 98 49 32 d3 df 4c 1a cf fc b3 89 24 5b 4a ff 1f df f9 77 41 91 61 00 1d e4 97 05 2c e1 04 11 d8 40 02 24 db a6 5d d9 b6 6d db b6 6d db b6 6d db b6 ed a4 6c db 4e be 6d 63 4f 00 d4 6c db 96 2d db fe b8 bb 5b 74 a9 ae dd 35 b9 bb d3 dc 2d b9 25 97 01 fe 01 d8 82 41 1c 66 20 f9 0a 44 16 60 02 5f 40 2b c7 71 b5 3f fd 03 e0 f5 e9 38 0c d0 7f 28 b6 b5 2d ab 5e dc 69 96 2c b9 0e c0 5d 66 a0 c9 61 0c d0 a0 d1 Data Ascii: RIFF8WEBPVP8L,/@0M_w1WVaUW,Km}J]=:]Dz=~MOPneX(34;f;I2L$[JwAa,@$]mmmlNmcOl-[t5-%Af D`_@+q?8(-^i,]fa
2024-10-23 18:06:05 UTC	1369	IN	Data Raw: a8 c7 90 06 f5 1d 7e 1e 65 84 5a 04 54 a0 03 55 06 c0 43 aa 4f 45 be 5b bb f8 86 0b 01 f5 5a 71 06 a9 46 e8 a0 68 63 cd 57 df e0 2c 45 e5 7c aa 42 75 c1 8e 2a 53 51 3b b9 c9 60 e0 61 02 c5 f5 10 f0 8d 0b 7c ff 0b 3f fc c3 84 7d 0f df be 43 4f 58 34 c0 f6 e6 c0 95 21 7b 27 50 c2 01 4a 05 38 3a 86 e2 55 eb 80 9a ac 04 5c 00 b4 53 b1 7b 38 55 31 dd 00 a8 cb 11 01 4a 02 50 f1 4e 2a 8a 5f d5 fd a9 39 4c e1 1e 0e bd 95 b2 23 3c 03 83 8f 76 a6 e2 6e 07 bd f6 4d b9 e5 13 38 1e fb 23 23 df 72 8a fc 5d 5c 14 9c 65 7c ed e2 12 ba af 44 ce 74 89 40 01 b7 ad b4 d5 19 fc a3 92 a5 68 80 87 40 25 07 a8 3c 50 77 ce ea 38 25 f9 b6 d2 53 71 6a 19 60 d6 08 67 5f 7f 2d 5c bb 89 b3 2b aa 1a 50 69 59 95 db 41 3d 28 cc 94 c5 40 a7 a0 d2 c6 80 8a 76 0c e8 35 c0 81 fd 80 ba 94 71 Data Ascii: ~eZTUCOE[ZqFhcW,E\|BuSQ;`a\|?}COX4!{'PJ8:U\S{8U1JPN_9L#<vnM8##r]\e\|Dt@h@%<Pw8%Sqj`g_-\+PiYA=(@v5q
2024-10-23 18:06:05 UTC	183	IN	Data Raw: 3e 1c 55 38 57 7e ff 61 98 fa d6 54 72 68 d7 83 80 83 1a 42 2a ea 05 f0 bf 9a 3c 79 a7 2b ff 8a 03 1b 17 b7 23 ef 93 c5 e7 ad 81 df 6d 54 38 bb d3 bc fa ac b5 4f 1b ef 9c 6f 01 c3 1c 7c 14 a0 fa 5d 08 b5 d3 34 d4 39 37 bf 75 c7 b0 ab ff 5a a0 07 4f 79 f7 bc 7c a5 41 e5 6a 65 bf d2 1e d4 a5 cb c4 3c 75 b5 17 cc 0e b1 f7 b8 b4 e3 84 05 0b 0e bd 73 d7 11 ce 3d a0 ed bd 6d 15 63 d8 f5 17 ec 5e 7b 7a d0 bf 94 d3 f1 aa fa 93 1e 6d d4 dd 67 87 b7 f9 db 95 6f 28 a3 8d 56 01 21 e6 d0 33 3b aa e1 3f 9f bc 41 9b 35 97 76 ec f9 b1 e3 de ab d5 5b 9b e3 00 Data Ascii: >U8W~aTrhB*<y+#mT8Oo\|]497uZOy\|Aje<us=mc^{zmgo(V!3;?A5v[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49728	199.232.192.193	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:05 UTC	906	OUT	GET /QRF01zv.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:05 UTC	725	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1666 Content-Type: image/png Last-Modified: Wed, 17 Jul 2019 19:34:43 GMT ETag: "29d583007fcd677aa31ca849478bc17a" X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: _hKeuoxVkYw2QVgTw3r9CekWpMNFy7-2eWH7Tb40OtTj_WUPnqXoZQ== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Wed, 23 Oct 2024 18:06:05 GMT Age: 1934891 X-Served-By: cache-iad-kiad7000070-IAD, cache-dfw-kdal2120084-DFW X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 31794, 5 X-Timer: S1729706765.335819,VS0,VE0 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-10-23 18:06:05 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 06 49 49 44 41 54 68 81 e5 9b 7b 88 56 45 14 c0 7f fb ed aa 59 a2 45 b9 bd b4 a7 95 8f b4 55 76 15 42 c9 f2 91 d4 1a 3d a8 20 2a 7b a8 f5 a7 19 65 65 a4 a5 92 f9 47 12 25 84 9a 88 a6 48 2f 29 92 55 52 31 5b c9 47 99 94 99 64 c6 1a be 12 5f 6d 19 d5 da d6 1f e7 7e 3a f7 7c f7 31 33 f7 1a 7e f4 83 65 ef 99 3b 73 ee 9c ef de 3b 67 e6 cc b9 15 0b 17 2e 26 67 0a 40 05 f0 77 c4 b9 47 81 e7 81 4b 81 7f 80 ef 80 c9 c0 7b 11 75 2b 81 d6 a0 5e ae 9d cb 93 6b 80 c5 c0 c0 88 73 2b 81 b9 c0 65 c8 0f 52 00 7a 01 ef 02 8b 22 ea 8f 04 16 00 17 e4 d9 c1 bc 0c be 05 d8 04 6c 07 7a 00 9f aa f3 ef 03 43 12 da df 07 bc a9 ca 56 01 23 80 7d c8 8f 35 28 8f 8e 66 35 f8 4e 60 Data Ascii: PNGIHDR<<:rIIDATh{VEYEUvB= *{eeG%H/)UR1[Gd_m~:\|13~e;s;g.&g@wGK{u+^ks+eRz"lzCV#}5(f5N`
2024-10-23 18:06:05 UTC	295	IN	Data Raw: 65 c8 bb 93 94 4c 52 4f 78 cb 66 11 fe 81 05 90 dc 2f 33 f3 6e 10 c9 23 f4 7e e0 5a 2c 26 3e b6 8b 87 46 e4 5b 85 6f 13 ea 3c a4 e4 59 96 ba a3 78 55 c9 a3 13 ea ae 21 bd 6f 27 70 59 2d 1d 42 7e c5 39 31 e7 47 23 33 a1 22 6f 10 5e b8 db b2 81 70 b2 ea 25 c8 37 11 51 4c 41 e6 ee d6 e1 25 9f e5 e1 58 64 4f 59 af 88 3a 13 76 05 2d 44 24 86 59 a0 13 e3 9e a0 74 dd be 17 71 87 2f b8 2a f7 5d 0f 7f 88 84 4c c6 10 0e f5 4c 25 1c 6f 5a 80 7c ba 63 cb 8b 48 0a 70 91 de 84 3f fc d8 03 dc 8b ec 17 af 75 d0 7b 82 ac 01 80 b9 48 6e d7 38 64 0b f3 4c 60 a1 aa 33 06 f8 cc 42 d7 52 4a 13 42 df 0e fe 37 21 af 4c 17 82 65 9e 2f 79 45 3c 5e 43 ee ec 08 a0 1d a5 33 a2 7a 24 4d 3f 8e 46 4a 3f f5 a9 47 fc ea 40 24 9f e3 ad 3c 3a 9a 77 88 67 05 32 88 68 f7 d0 8c 2c 25 a7 23 91 Data Ascii: eLROxf/3n#~Z,&>F[o<YxU!o'pY-B~91G#3"o^p%7QLA%XdOY:v-D$Ytq/*]LL%oZ\|cHp?u{Hn8dL`3BRJB7!Le/yE<^C3z$M?FJ?G@$<:wg2h,%#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49731	104.18.91.62	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:05 UTC	385	OUT	GET /hubfs/241394/html_file/files/img/KB4-logo.png HTTP/1.1 Host: cdn2.hubspot.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:06 UTC	1349	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 18:06:06 GMT Content-Type: image/png Content-Length: 3014 Connection: close CF-Ray: 8d73a8b778ff2c87-DFW CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 1598 Cache-Control: s-maxage=2592000, max-age=1209600, stale-while-revalidate=900 ETag: "ddf47be00ad3eebaabd63fec4c5733f2" Last-Modified: Fri, 29 Mar 2024 19:46:11 GMT Vary: Accept Via: 1.1 27fc50e60026c8530ee4d90073929962.cloudfront.net (CloudFront) Access-Control-Allow-Methods: GET cache-tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=3873 Edge-Cache-Tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL Timing-Allow-Origin: cdn2.hubspot.net X-Amz-Cf-Id: hLWwX9T-UpddbApod0qo--4yL1oWWHcQ3PP_xFRoO7D86CET4eqZ3Q== X-Amz-Cf-Pop: DFW57-P8 x-amz-id-2: kSJCdfMak94p7eFlyIEvzv/waskxWw/U0daziJV+mErjYBAYncTPCiw8+YPIFY+kGgodmuZYgus= x-amz-meta-access-tag: public-not-indexable x-amz-meta-cache-tag: F-3711502880,FD-3711502755,P-241394,FLS-ALL x-amz-meta-created-unix-time-millis: 1447343595191 x-amz-meta-index-tag: none x-amz-replication-status: COMPLETED x-amz-request-id: 5N0RHM3037W1334C x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING x-amz-version-id: GOuAJzA1.bo1vjot_Hsq0owEY98XjYH9 X-Cache: RefreshHit from cloudfront
2024-10-23 18:06:06 UTC	506	IN	Data Raw: 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 2d 45 6e 66 6f 72 63 65 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 6e 65 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 7a 62 4c 4d 36 78 6a 71 58 42 36 35 47 45 66 30 68 78 4e 30 62 4d 47 42 6a 64 32 38 5a 7a 75 5a 72 34 61 30 6f 56 55 6d 32 50 39 78 4a 73 6e 31 64 51 6c 33 66 Data Ascii: X-HS-CF-Lambda: us-east-1.EnforceAclForReads 3X-HS-CF-Lambda-Enforce: us-east-1.EnforceAclForReads 3X-Robots-Tag: noneReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zbLM6xjqXB65GEf0hxN0bMGBjd28ZzuZr4a0oVUm2P9xJsn1dQl3f
2024-10-23 18:06:06 UTC	883	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 26 08 06 00 00 00 81 16 d4 6c 00 00 0b 8d 49 44 41 54 78 da ec da 7b 68 97 55 1c c7 71 f7 9b b7 4d 73 22 65 a9 65 6a 2c bb 98 4d cc 2c 5d 28 26 d4 e8 42 17 b0 12 29 47 e2 46 9a b8 84 32 f3 32 32 6f 59 ce d4 c2 14 91 d4 4c 12 25 c3 b4 0b 16 69 46 a6 a5 2e 99 97 92 4c a7 65 da 98 64 73 6e ce 4f 6f f0 40 a7 83 3f f7 9c df cf 07 f6 1b cf 81 d7 1f db 79 be cf d9 73 9e f3 f9 3d 97 fd 9a 44 2d 6a 51 bb 44 d3 c8 26 43 31 dc c8 4d 72 5f 39 18 6e e9 1e cd 70 83 38 c7 57 a1 00 c5 78 17 eb b0 05 a5 38 64 ec c7 4e 6c c2 62 8c c5 3d 68 d6 08 e7 62 3c 16 60 06 ba d7 57 20 cb 47 49 0c 9c 8d 53 90 51 8e f6 d1 f2 6c 10 8b 62 20 94 a0 0a cc 47 e7 46 32 17 2b 20 a3 12 ed 43 0f 08 75 99 f8 09 32 6a d1 3f 5a Data Ascii: PNGIHDR&lIDATx{hUqMs"eej,M,](&B)GF222oYL%iF.LedsnOo@?ys=D-jQD&C1Mr_9np8Wx8dNlb=hb<`W GISQlb GF2+ Cu2j?Z
2024-10-23 18:06:06 UTC	1369	IN	Data Raw: 3e e1 fe 71 3e b9 3b 9a ee 64 03 b2 10 1f 3a b7 4f b3 d0 29 4e ed 20 94 fb 5c c9 e8 bf 05 95 10 80 d7 73 a5 f2 52 d5 db aa 2a a5 55 63 44 98 dc 90 64 3b 63 74 87 2c 2b 3c e6 63 3b 04 57 ef 80 f5 83 21 4b cf 24 02 e2 d6 dd 86 ef 20 cb 67 88 05 ac 2f 80 2c 35 98 54 cf f3 67 37 6c 84 2c 07 90 19 70 cc bb 20 cb 94 38 db 5d 83 fe c8 43 5f 34 f7 0e 08 3f 5f 81 03 90 51 87 7b 4d 77 d2 01 71 1e f8 cb d1 33 40 fd ad a8 81 8c 0a b4 8c b3 6d 2b ec 83 00 b0 e0 75 be 4e 12 ed 5c 8d b4 ed 7d 69 c9 30 69 6a 2f e9 d5 db a5 f9 0f 48 1b a6 4b 15 47 64 da 85 2b ca e8 4c 7b 9e 76 a3 a5 33 d6 5e e7 53 2f 16 e0 58 ae 85 2c 76 90 a7 06 9c cf 39 90 f1 6b c0 b7 58 b3 91 03 57 2e 1e c6 64 7c 03 39 d6 7a 2c d4 6e ce 6d 59 35 06 05 ac 8d 61 31 64 99 1e a4 ce 79 4e fe 0d 19 71 b6 2d Data Ascii: >q>;d:O)N \sR*UcDd;ct,+<c;W!K$ g/,5Tg7l,p 8]C_4?_Q{Mwq3@m+uN\}i0ij/HKGd+L{v3^S/X,v9kXW.d\|9z,nmY5a1dyNq-
2024-10-23 18:06:06 UTC	762	IN	Data Raw: 05 92 85 81 44 b0 a7 c1 b7 df b1 00 c4 71 17 6c 31 08 8a 4e 13 81 e0 3c b3 07 da be 9c 22 02 c1 11 d8 9e cd 25 24 c5 f9 bb 9a 9b e4 96 1e 0e 7d dc ef 92 b3 35 3d 46 34 9a 14 66 2b f1 a9 6e 86 84 82 04 0b 24 0f 63 63 9a 3a 2d ea ba 81 c9 f0 51 1c 69 90 40 19 24 5d c6 02 01 9f ff 15 98 0b cf 49 21 81 2c 64 c8 0e f1 84 75 b6 93 53 7e fa 8a 0c e2 1c 27 21 e3 18 b3 7e ff 62 42 31 9e f1 18 ba d6 c5 93 44 c2 d9 44 6d b9 1d 22 d6 f3 9d a6 4e 0d d4 99 e6 f3 01 70 1b 99 1a 4b 50 64 3b 35 75 d6 d9 9e 8b b5 1a da f7 32 85 29 22 90 0c e6 17 6b 81 bc 75 df 60 8a 49 f7 ef 4e 2c c4 6b 7e 91 44 ab 49 38 a5 f1 ba 6c f3 f0 8c 6b 21 cd 3e 04 fd 56 27 41 20 75 d0 d7 6b 1e 72 e5 f6 5e 93 f4 12 fc 22 dd ad fd 2e e8 a3 95 19 9b 24 81 60 9d 79 0c 59 b3 63 11 d1 c6 22 fc f9 8c 18 Data Ascii: Dql1N<"%$}5=F4f+n$cc:-Qi@$]I!,duS~'!~bB1DDm"NpKPd;5u2)"ku`IN,k~DI8lk!>V'A ukr^".$`yYc"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49732	199.232.196.193	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:06 UTC	346	OUT	GET /QRF01zv.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:06 UTC	725	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1666 Content-Type: image/png Last-Modified: Wed, 17 Jul 2019 19:34:43 GMT ETag: "29d583007fcd677aa31ca849478bc17a" X-Amz-Cf-Pop: IAD12-P2 X-Amz-Cf-Id: _hKeuoxVkYw2QVgTw3r9CekWpMNFy7-2eWH7Tb40OtTj_WUPnqXoZQ== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Wed, 23 Oct 2024 18:06:06 GMT Age: 1934892 X-Served-By: cache-iad-kiad7000070-IAD, cache-dfw-ktki8620047-DFW X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 31794, 1 X-Timer: S1729706766.372255,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-10-23 18:06:06 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 00 00 06 49 49 44 41 54 68 81 e5 9b 7b 88 56 45 14 c0 7f fb ed aa 59 a2 45 b9 bd b4 a7 95 8f b4 55 76 15 42 c9 f2 91 d4 1a 3d a8 20 2a 7b a8 f5 a7 19 65 65 a4 a5 92 f9 47 12 25 84 9a 88 a6 48 2f 29 92 55 52 31 5b c9 47 99 94 99 64 c6 1a be 12 5f 6d 19 d5 da d6 1f e7 7e 3a f7 7c f7 31 33 f7 1a 7e f4 83 65 ef 99 3b 73 ee 9c ef de 3b 67 e6 cc b9 15 0b 17 2e 26 67 0a 40 05 f0 77 c4 b9 47 81 e7 81 4b 81 7f 80 ef 80 c9 c0 7b 11 75 2b 81 d6 a0 5e ae 9d cb 93 6b 80 c5 c0 c0 88 73 2b 81 b9 c0 65 c8 0f 52 00 7a 01 ef 02 8b 22 ea 8f 04 16 00 17 e4 d9 c1 bc 0c be 05 d8 04 6c 07 7a 00 9f aa f3 ef 03 43 12 da df 07 bc a9 ca 56 01 23 80 7d c8 8f 35 28 8f 8e 66 35 f8 4e 60 Data Ascii: PNGIHDR<<:rIIDATh{VEYEUvB= *{eeG%H/)UR1[Gd_m~:\|13~e;s;g.&g@wGK{u+^ks+eRz"lzCV#}5(f5N`
2024-10-23 18:06:06 UTC	295	IN	Data Raw: 65 c8 bb 93 94 4c 52 4f 78 cb 66 11 fe 81 05 90 dc 2f 33 f3 6e 10 c9 23 f4 7e e0 5a 2c 26 3e b6 8b 87 46 e4 5b 85 6f 13 ea 3c a4 e4 59 96 ba a3 78 55 c9 a3 13 ea ae 21 bd 6f 27 70 59 2d 1d 42 7e c5 39 31 e7 47 23 33 a1 22 6f 10 5e b8 db b2 81 70 b2 ea 25 c8 37 11 51 4c 41 e6 ee d6 e1 25 9f e5 e1 58 64 4f 59 af 88 3a 13 76 05 2d 44 24 86 59 a0 13 e3 9e a0 74 dd be 17 71 87 2f b8 2a f7 5d 0f 7f 88 84 4c c6 10 0e f5 4c 25 1c 6f 5a 80 7c ba 63 cb 8b 48 0a 70 91 de 84 3f fc d8 03 dc 8b ec 17 af 75 d0 7b 82 ac 01 80 b9 48 6e d7 38 64 0b f3 4c 60 a1 aa 33 06 f8 cc 42 d7 52 4a 13 42 df 0e fe 37 21 af 4c 17 82 65 9e 2f 79 45 3c 5e 43 ee ec 08 a0 1d a5 33 a2 7a 24 4d 3f 8e 46 4a 3f f5 a9 47 fc ea 40 24 9f e3 ad 3c 3a 9a 77 88 67 05 32 88 68 f7 d0 8c 2c 25 a7 23 91 Data Ascii: eLROxf/3n#~Z,&>F[o<YxU!o'pY-B~91G#3"o^p%7QLA%XdOY:v-D$Ytq/*]LL%oZ\|cHp?u{Hn8dL`3BRJB7!Le/yE<^C3z$M?FJ?G@$<:wg2h,%#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49733	3.93.18.143	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:07 UTC	949	OUT	GET /assets/landing-watermark-16f13e16a7ef02fb6f94250aa1931ded83dbee5d9fad278e33dd5792d085194f.css HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:07 UTC	514	IN	HTTP/1.1 404 Not Found Date: Wed, 23 Oct 2024 18:06:07 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 9 Connection: close X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin Cache-Control: no-cache Content-Security-Policy: X-Request-Id: 03b184ad-75c8-49fc-9723-aecd740eb04c X-Runtime: 0.011824 Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-10-23 18:06:07 UTC	9	IN	Data Raw: 6e 6f 74 20 66 6f 75 6e 64 Data Ascii: not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.8	49734	23.22.29.127	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:07 UTC	427	OUT	GET /assets/application-237cb5c4f318687625f8ccf2f42de3fc20238bfe267384653491a6bba8c8f6f5.js HTTP/1.1 Host: secured-login.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:08 UTC	279	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 18:06:08 GMT Content-Type: application/javascript Content-Length: 380848 Connection: close Last-Modified: Wed, 23 Oct 2024 17:22:39 GMT Vary: accept-encoding Strict-Transport-Security: max-age=63113904; includeSubDomains; preload
2024-10-23 18:06:08 UTC	16105	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-23 18:06:08 UTC	1570	IN	Data Raw: 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 62 75 74 74 6f 6e 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 22 74 65 78 74 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 75 6c 6c 3d 3d 28 74 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 7c 7c 22 74 65 78 74 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 2c 66 69 72 Data Ascii: Name)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe(e,"input")&&"button"===e.type\|\|fe(e,"button")},text:function(e){var t;return fe(e,"input")&&"text"===e.type&&(null==(t=e.getAttribute("type"))\|\|"text"===t.toLowerCase())},fir
2024-10-23 18:06:08 UTC	16384	IN	Data Raw: 21 30 7d 65 6c 73 65 20 77 68 69 6c 65 28 65 3d 65 5b 73 5d 29 69 66 28 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 63 29 69 66 28 69 3d 65 5b 53 5d 7c 7c 28 65 5b 53 5d 3d 7b 7d 29 2c 75 26 26 66 65 28 65 2c 75 29 29 65 3d 65 5b 73 5d 7c 7c 65 3b 65 6c 73 65 7b 69 66 28 28 72 3d 69 5b 6c 5d 29 26 26 72 5b 30 5d 3d 3d 3d 45 26 26 72 5b 31 5d 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6f 5b 32 5d 3d 72 5b 32 5d 3b 69 66 28 28 69 5b 6c 5d 3d 6f 29 5b 32 5d 3d 61 28 65 2c 74 2c 6e 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 69 29 7b 72 65 74 75 72 6e 20 31 3c 69 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 69 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 69 Data Ascii: !0}else while(e=e[s])if(1===e.nodeType\|\|c)if(i=e[S]\|\|(e[S]={}),u&&fe(e,u))e=e[s]\|\|e;else{if((r=i[l])&&r[0]===E&&r[1]===f)return o[2]=r[2];if((i[l]=o)[2]=a(e,t,n))return!0}return!1}}function K(i){return 1<i.length?function(e,t,n){var r=i.length;while(r--)i
2024-10-23 18:06:08 UTC	16384	IN	Data Raw: 6e 5b 31 5d 2b 31 29 2a 6e 5b 32 5d 3a 2b 6e 5b 32 5d 2c 72 26 26 28 72 2e 75 6e 69 74 3d 6c 2c 72 2e 73 74 61 72 74 3d 63 2c 72 2e 65 6e 64 3d 69 29 29 2c 69 7d 76 61 72 20 6e 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 5b 5d 2c 63 3d 30 2c 66 3d 65 2e 6c 65 6e 67 74 68 3b 63 3c 66 3b 63 2b 2b 29 28 72 3d 65 5b 63 5d 29 2e 73 74 79 6c 65 26 26 28 6e 3d 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 2c 74 3f 28 22 6e 6f 6e 65 22 3d 3d 3d 6e 26 26 28 6c 5b 63 5d 3d 5f 2e 67 65 74 28 72 2c 22 64 69 73 70 6c 61 79 22 29 7c 7c 6e 75 6c 6c 2c 6c 5b 63 5d 7c 7c 28 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 22 29 29 2c 22 22 3d 3d 3d 72 2e 73 74 79 6c 65 2e 64 69 Data Ascii: n[1]+1)*n[2]:+n[2],r&&(r.unit=l,r.start=c,r.end=i)),i}var ne={};function re(e,t){for(var n,r,i,o,a,s,u,l=[],c=0,f=e.length;c<f;c++)(r=e[c]).style&&(n=r.style.display,t?("none"===n&&(l[c]=_.get(r,"display")\|\|null,l[c]\|\|(r.style.display="")),""===r.style.di
2024-10-23 18:06:08 UTC	16384	IN	Data Raw: 69 6e 4c 65 66 74 29 2c 6c 2e 73 74 79 6c 65 2e 72 69 67 68 74 3d 22 36 30 25 22 2c 6f 3d 33 36 3d 3d 3d 74 28 65 2e 72 69 67 68 74 29 2c 72 3d 33 36 3d 3d 3d 74 28 65 2e 77 69 64 74 68 29 2c 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 69 3d 31 32 3d 3d 3d 74 28 6c 2e 6f 66 66 73 65 74 57 69 64 74 68 2f 33 29 2c 4a 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 75 29 2c 6c 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 70 61 72 73 65 46 6c 6f 61 74 28 65 29 29 7d 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 75 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 6c 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 Data Ascii: inLeft),l.style.right="60%",o=36===t(e.right),r=36===t(e.width),l.style.position="absolute",i=12===t(l.offsetWidth/3),J.removeChild(u),l=null}}function t(e){return Math.round(parseFloat(e))}var n,r,i,o,a,s,u=C.createElement("div"),l=C.createElement("div")
2024-10-23 18:06:08 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 63 65 28 74 68 69 73 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 43 74 28 74 68 69 73 29 2c 6e 29 2c 6e 29 7d 29 3a 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 73 3f 6e 3f 74 68 69 73 2e 61 64 64 43 6c 61 73 73 28 74 29 3a 74 68 69 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 74 29 3a 28 65 3d 6b 74 28 74 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 29 66 6f 72 28 6f 3d 63 65 28 74 68 69 73 29 2c 69 3d 30 3b 69 3c 65 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 3d 65 5b 69 5d 2c 6f 2e 68 61 73 43 6c 61 73 73 28 72 29 3f 6f 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 72 29 3a 6f 2e 61 64 64 43 6c 61 73 73 28 72 29 3b 65 6c 73 65 20 76 6f 69 64 Data Ascii: unction(e){ce(this).toggleClass(t.call(this,e,Ct(this),n),n)}):"boolean"==typeof n&&s?n?this.addClass(t):this.removeClass(t):(e=kt(t),this.each(function(){if(s)for(o=ce(this),i=0;i<e.length;i++)r=e[i],o.hasClass(r)?o.removeClass(r):o.addClass(r);else void
2024-10-23 18:06:08 UTC	16384	IN	Data Raw: 29 3a 65 29 7d 29 2e 61 6c 77 61 79 73 28 6e 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 6f 7c 7c 5b 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 74 2c 65 5d 29 7d 29 7d 29 2c 74 68 69 73 7d 2c 63 65 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 61 6e 69 6d 61 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 63 65 2e 67 72 65 70 28 63 65 2e 74 69 6d 65 72 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 65 6c 65 6d 7d 29 2e 6c 65 6e 67 74 68 7d 2c 63 65 2e 6f 66 66 73 65 74 3d 7b 73 65 74 4f 66 66 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 63 Data Ascii: ):e)}).always(n&&function(e,t){a.each(function(){n.apply(this,o\|\|[e.responseText,t,e])})}),this},ce.expr.pseudos.animated=function(t){return ce.grep(ce.timers,function(e){return t===e.elem}).length},ce.offset={setOffset:function(e,t,n){var r,i,o,a,s,u,l=c
2024-10-23 18:06:08 UTC	16384	IN	Data Raw: 3d 7b 66 69 74 3a 7b 6c 65 66 74 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 65 2e 77 69 74 68 69 6e 2c 73 3d 69 2e 69 73 57 69 6e 64 6f 77 3f 69 2e 73 63 72 6f 6c 6c 4c 65 66 74 3a 69 2e 6f 66 66 73 65 74 2e 6c 65 66 74 2c 6e 3d 69 2e 77 69 64 74 68 2c 6f 3d 74 2e 6c 65 66 74 2d 65 2e 63 6f 6c 6c 69 73 69 6f 6e 50 6f 73 69 74 69 6f 6e 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 61 3d 73 2d 6f 2c 72 3d 6f 2b 65 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 2d 6e 2d 73 3b 65 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 3e 6e 3f 30 3c 61 26 26 72 3c 3d 30 3f 28 69 3d 74 2e 6c 65 66 74 2b 61 2b 65 2e 63 6f 6c 6c 69 73 69 6f 6e 57 69 64 74 68 2d 6e 2d 73 2c 74 2e 6c 65 66 74 2b 3d 61 2d 69 29 3a 74 2e 6c 65 66 74 3d 21 28 30 3c 72 26 26 61 3c 3d 30 Data Ascii: ={fit:{left:function(t,e){var i=e.within,s=i.isWindow?i.scrollLeft:i.offset.left,n=i.width,o=t.left-e.collisionPosition.marginLeft,a=s-o,r=o+e.collisionWidth-n-s;e.collisionWidth>n?0<a&&r<=0?(i=t.left+a+e.collisionWidth-n-s,t.left+=a-i):t.left=!(0<r&&a<=0
2024-10-23 18:06:08 UTC	16384	IN	Data Raw: 6f 76 65 72 66 6c 6f 77 22 29 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 3d 5b 28 70 61 72 73 65 49 6e 74 28 65 2e 63 73 73 28 22 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 22 29 2c 31 30 29 7c 7c 30 29 2b 28 70 61 72 73 65 49 6e 74 28 65 2e 63 73 73 28 22 70 61 64 64 69 6e 67 4c 65 66 74 22 29 2c 31 30 29 7c 7c 30 29 2c 28 70 61 72 73 65 49 6e 74 28 65 2e 63 73 73 28 22 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 22 29 2c 31 30 29 7c 7c 30 29 2b 28 70 61 72 73 65 49 6e 74 28 65 2e 63 73 73 28 22 70 61 64 64 69 6e 67 54 6f 70 22 29 2c 31 30 29 7c 7c 30 29 2c 28 74 3f 4d 61 74 68 2e 6d 61 78 28 69 2e 73 63 72 6f 6c 6c 57 69 64 74 68 2c 69 2e 6f 66 66 73 65 74 57 69 64 74 68 29 3a 69 2e 6f 66 66 73 65 74 57 69 64 74 68 29 2d 28 70 61 72 73 65 49 Data Ascii: overflow")),this.containment=[(parseInt(e.css("borderLeftWidth"),10)\|\|0)+(parseInt(e.css("paddingLeft"),10)\|\|0),(parseInt(e.css("borderTopWidth"),10)\|\|0)+(parseInt(e.css("paddingTop"),10)\|\|0),(t?Math.max(i.scrollWidth,i.offsetWidth):i.offsetWidth)-(parseI
2024-10-23 18:06:09 UTC	16384	IN	Data Raw: 70 70 61 62 6c 65 22 29 2c 74 2e 6f 70 74 69 6f 6e 73 2e 72 65 66 72 65 73 68 50 6f 73 69 74 69 6f 6e 73 7c 7c 56 2e 75 69 2e 64 64 6d 61 6e 61 67 65 72 2e 70 72 65 70 61 72 65 4f 66 66 73 65 74 73 28 74 2c 65 29 7d 7d 29 21 3d 3d 56 2e 75 69 42 61 63 6b 43 6f 6d 70 61 74 26 26 56 2e 77 69 64 67 65 74 28 22 75 69 2e 64 72 6f 70 70 61 62 6c 65 22 2c 56 2e 75 69 2e 64 72 6f 70 70 61 62 6c 65 2c 7b 6f 70 74 69 6f 6e 73 3a 7b 68 6f 76 65 72 43 6c 61 73 73 3a 21 31 2c 61 63 74 69 76 65 43 6c 61 73 73 3a 21 31 7d 2c 5f 61 64 64 41 63 74 69 76 65 43 6c 61 73 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 73 75 70 65 72 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 63 74 69 76 65 43 6c 61 73 73 26 26 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 61 64 64 Data Ascii: ppable"),t.options.refreshPositions\|\|V.ui.ddmanager.prepareOffsets(t,e)}})!==V.uiBackCompat&&V.widget("ui.droppable",V.ui.droppable,{options:{hoverClass:!1,activeClass:!1},_addActiveClass:function(){this._super(),this.options.activeClass&&this.element.add

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.8	49741	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:11 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UTwvl6ZTSLSXNKK&MD=cfB9H+Lu HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 18:06:11 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 90769ee0-4c56-4e68-b179-827880d673c3 MS-RequestId: 409e2d50-4756-4e1a-8f32-6d4b11c38467 MS-CV: qH3WVyHz0U6BIb/q.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 18:06:11 GMT Connection: close Content-Length: 24490
2024-10-23 18:06:11 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 18:06:11 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.8	49744	3.93.18.143	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:12 UTC	913	OUT	GET /favicon.ico HTTP/1.1 Host: secured-login.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://secured-login.net/pages/c3955b1c48a/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:13 UTC	253	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 18:06:13 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Wed, 23 Oct 2024 17:23:57 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.8	49747	23.22.29.127	443	7120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:13 UTC	352	OUT	GET /favicon.ico HTTP/1.1 Host: secured-login.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:06:14 UTC	253	IN	HTTP/1.1 200 OK Date: Wed, 23 Oct 2024 18:06:14 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 0 Connection: close Last-Modified: Wed, 23 Oct 2024 17:23:57 GMT Strict-Transport-Security: max-age=63113904; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.8	49749	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:06:49 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=UTwvl6ZTSLSXNKK&MD=cfB9H+Lu HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 18:06:49 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 3b6ad35f-15f7-4765-a35c-bb916a86fe7a MS-RequestId: 8df106a8-a459-4632-9c92-d522a53227bc MS-CV: KJzIQ3WcKEyPZw6T.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 18:06:49 GMT Connection: close Content-Length: 30005
2024-10-23 18:06:49 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-23 18:06:50 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4832, Parent PID: 5968

General

Target ID:	0
Start time:	14:05:51
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7120, Parent PID: 4832

General

Target ID:	2
Start time:	14:05:55
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1848,i,14200194463612556463,7566135678862087948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3392, Parent PID: 5968

General

Target ID:	3
Start time:	14:05:57
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://05kqatnrj9s0snah9.phish.farm/XNWovM1FGWG9WUTJhZEI4SDFaYWZZbTVBV2xEempsNGhRL3lkQUt5VUROTER6K2hlam5jK3hja3VFN2F1d2lnekJqVnpvWkZrNDdsMjFIR1NrNWtucTJReUc5ZWl1K09HZjhheHJJV0hrYmZtbjJpSThsdEwrZUZyN0JMMk5SN3lrSXhqaWZ0S3RaOG93b2t5RTd6OU1XZnJKQU05SXNRTGtzaG5xbE52dWMzOFlzaG9nbDFIckFQQy0tV0NacTU3Ymp2MGlpcUtCWS0tWVltL0pBUk43cVRMV2l2Y0tvc3VIUT09?cid=2252932795"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85