Edit tour

Windows Analysis Report
https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20=

Overview

General Information

Sample URL:	https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20=
Analysis ID:	1417004
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains hidden URLs or javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6388 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2212,i,13425400877421573205,15424258316982264938,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20=" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normal

HTTP Parser: Base64 decoded: http://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normal

Source: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20=	HTTP Parser: No favicon
Source: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20=	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normal	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49731 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.56.12.114:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.56.12.114:443 -> 192.168.2.5:49719 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49731 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.12.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?compat=recaptcha HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/dc6b543c1346/api.js?compat=recaptcha HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=86b7a9e43e1657e5 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=86b7aa059c37057f HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1711629346056&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_66.2.dr	String found in binary or memory: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/adobereviewandsignopenagreement4
Source: chromecache_66.2.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha
Source: chromecache_67.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_67.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_66.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723

Source: unknown	HTTPS traffic detected: 23.56.12.114:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.56.12.114:443 -> 192.168.2.5:49719 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@18/17@12/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2212,i,13425400877421573205,15424258316982264938,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2212,i,13425400877421573205,15424258316982264938,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20=	0%	Avira URL Cloud	safe
https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20=	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/adobereviewandsignopenagreement4	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
challenges.cloudflare.com	104.17.2.184	true	false	high
www.google.com	142.251.167.99	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://challenges.cloudflare.com/turnstile/v0/g/dc6b543c1346/api.js?compat=recaptcha	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=86b7a9e43e1657e5	false	high
https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20=	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=86b7aa059c37057f	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normal	false	high
https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css	false	high
https://challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/adobereviewandsignopenagreement4	chromecache_66.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_67.2.dr	false		high
https://getbootstrap.com/)	chromecache_67.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.251.167.99	www.google.com	United States	15169	GOOGLEUS	false
104.17.3.184	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417004
Start date and time:	2024-03-28 13:35:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@18/17@12/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.253.62.100, 172.253.62.102, 172.253.62.139, 172.253.62.101, 172.253.62.138, 172.253.62.113, 172.253.63.84, 172.253.63.94, 34.104.35.123, 172.232.133.61, 172.232.133.64, 172.232.133.56, 172.232.133.59, 172.232.133.63, 172.232.133.55, 20.114.59.183, 72.21.81.240, 192.229.211.108, 13.95.31.18, 172.253.115.94
Excluded domains from analysis (whitelisted): se-sto-1.linodeobjects.com.akadns.net, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 11:36:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9823308041961942
Encrypted:	false
SSDEEP:	48:8CdMTwEqH2idAKZdA19ehwiZUklqehqy+3:8ZPTFy
MD5:	4D3583B64D5A9EAFA968ABAFEAA03B05
SHA1:	CE7AD69CF4C93C7300C4835EC8F5890D2A25EB5C
SHA-256:	8E7AEFEB0DAC8AE3893C0F5D47A584EFAE0D41800F2D2A195653A327E6F8C069
SHA-512:	8B6493F541CA85A79AB9A341D934E1F3C74308B5A7E6667441D145C38F129C191ADDE60FD045A97E8E54C55A85E9926152FE22EAFDE4E39AD4BCC67EF4E6FB32
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....8..}....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\|X}d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X}d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X}d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X}d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\|X.d...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 11:36:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.997670314077112
Encrypted:	false
SSDEEP:	48:84dMTwEqH2idAKZdA1weh/iZUkAQkqeh1y+2:8/Ph9QYy
MD5:	F60498735CDCF5029D684F2C13D61D1E
SHA1:	31BE0B210F08EFF783B88A585E240A28B1A1F737
SHA-256:	5E14E7FCF62DCF83ADBE1BBDC0788C4FE66126E1D58FCFCABFF8D219B408C194
SHA-512:	6F206B78C757D079BBD154A7865E39A97461CDC78880CEA61FB623D2518926820F394AA0C8CD4A627C85FD0C8CAC16547CBD99C0069EA362F1DF4A706C96713E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......}....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\|X}d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X}d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X}d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X}d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\|X.d...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00839326010957
Encrypted:	false
SSDEEP:	48:8xldMTwEsH2idAKZdA14tseh7sFiZUkmgqeh7s7y+BX:8xkP3nBy
MD5:	04F2E4D18D42E929020BC22AB2958333
SHA1:	0292F645EF6395A7A57F44FFE7AFE70877800949
SHA-256:	09B89715A61A39885B681B2A05BCBEF2720FF19438245C10909DA2681C840D47
SHA-512:	87EF23F30EAB28FFEF5F6BDA1B802A5DF1F7F2EACD775F4862C1BFDBF442A4DF80460891037135CE3B23AFAEDAB38C0CC9C46C633E397CED584F9350826F1B28
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\|X}d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X}d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X}d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X}d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 11:36:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.998862971221298
Encrypted:	false
SSDEEP:	48:8kdMTwEqH2idAKZdA1vehDiZUkwqehJy+R:8DPCjy
MD5:	6D14FD5E42D71763ABA793E46D63294D
SHA1:	28AEDB0260B105AA03D022F46222EBA0DCCC0125
SHA-256:	65A0C10CEBE0C6FB7B76041648F6E32C6D8EB58B9D8D7B16DCEEA68D38B7F47F
SHA-512:	3F745F5A0F6ACA206D7AB153D1541C86219FC5DA90FC1EEB53B64A6CCDDB1E880F05AEA8239B89C52D63E0FFF372EEB75B5898F366E8A1F126170363DD908694
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......}....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\|X}d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X}d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X}d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X}d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\|X.d...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 11:36:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.98313877413087
Encrypted:	false
SSDEEP:	48:8MpdMTwEqH2idAKZdA1hehBiZUk1W1qehHy+C:8nPy9ny
MD5:	3D2E19DF8251EB2AF9678827A2991F65
SHA1:	867E20846E20CEF63E2FF0B52E96B245517003CF
SHA-256:	B02311628DBAC185439F11DB4692FA1F5064FD43E929E89F64F1F41BF07786C7
SHA-512:	2EEC942BF1A2EEC58C98494107469C29C3F5A49487AE817C8CB6A7BF52A329E5D7974FBB12239B391C30E73CEC448BEB0574CC5E31E5BAB5750AFFC1D40C631A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....2..}....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\|X}d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X}d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X}d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X}d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\|X.d...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 11:36:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9963380576277094
Encrypted:	false
SSDEEP:	48:83dMTwEqH2idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbBy+yT+:8mPsT/TbxWOvTbBy7T
MD5:	02577B045999D8294C469F307486B5CF
SHA1:	88B0D7FCC970FA702562ABC37ACCDE3DE67CF715
SHA-256:	192E57FD4A5AC3CE95996F8B29D76EF292A2684873903BC7521F96621875A0DF
SHA-512:	B1CD9AC189DFE6C37F7C017D21E760B99C7C35262AE0C5A44705DC9104934FA9D286624B86E4E97E8E1D65BA07A31B8422FE2C508A32CAFB321C8A84FB1E2B1A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....C..}....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I\|X}d....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X}d....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V\|X}d....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V\|X}d..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V\|X.d...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............(.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39928)
Category:	downloaded
Size (bytes):	39929
Entropy (8bit):	5.378411954063623
Encrypted:	false
SSDEEP:	768:CCPxTH8V1DpLjzfdYzeMNDoMHkrcj/iO4LQZ5renAmb0GumH1OPR:9H8V1DpL3FYz9Dbj/n
MD5:	7F3FE50B0F2AD92528FF217C1B608B27
SHA1:	54FC4814C739C7142EF4A5B562140EE764BCBDFC
SHA-256:	D2E584D67A5B1A868363ED5E83A72EA6BC2CAD8A052F64583D0FE95E7FA36E97
SHA-512:	3B4F838B651CC39D8CA8B5C815CCE04B0062A26F8C398CD5D1943995C2C47049D2546407FBE619219EACF417D1D66FEB0AA77512BF52848CF961BB0D3F7A98EE
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/dc6b543c1346/api.js?compat=recaptcha
Preview:	"use strict";(function(){function gt(e,r,t,i,u,s,g){try{var y=e[s](g),m=y.value}catch(f){t(f);return}y.done?r(m):Promise.resolve(m).then(i,u)}function yt(e){return function(){var r=this,t=arguments;return new Promise(function(i,u){var s=e.apply(r,t);function g(m){gt(s,i,u,g,y,"next",m)}function y(m){gt(s,i,u,g,y,"throw",m)}g(void 0)})}}function k(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):k(e,r)}function Ee(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function ze(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},i=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(i=i.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),i.forEach(function(u){Ee(e,u,t[u])})}return e}function ir(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertyS

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4614
Entropy (8bit):	5.176065426696639
Encrypted:	false
SSDEEP:	96:SIPuSB1iXY3Z6+SoRDpejofIfIpP6Z30s68/:SIPJB1I+SGpejofIQpKP/
MD5:	1C2D5145ED67B49BD9114200050F4A8E
SHA1:	C999D97A7D0AD953DB951D570EA1BCB4A049F937
SHA-256:	7197DE2D86905895F5D334BA4BF054695FD6866FF2BA208C0FF86E6A0C789FC9
SHA-512:	9F7CAA1739D17AAEAFF30B1FFAA362DF354A258418B019CF209FCDF8CB0460199B25544D30EB319F110046867D6F780D74D395D5265A621C4801278907279F2B
Malicious:	false
Reputation:	low
URL:	https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />..<title>Redirecting...</title>..<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha" async defer></script>..<link href="https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-ggOyR0iXCbMQv3Xipma34MD+dH/1fQ784/j6cY/iJTQUOhcWr7x9JvoRxT2MZw1T" crossorigin="anonymous">..<script> ..</script>..<style>...h1, .h2 {.. font-weight: 500;..}..* {.. box-sizing: border-box;.. margin: 0;.. padding: 0;..}..html {.. line-height: 1.15;.. -webkit-text-size-adjust: 100%;.. color: #313131;.. font-family: system-ui, -apple-system, BlinkMacSystemFont, Segoe UI, Roboto, Helvetica Neue, Arial, Noto Sans, sans-serif, Apple Color Emoji, Segoe UI Emoji, Segoe UI Symbol, Noto Colo

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65324)
Category:	downloaded
Size (bytes):	155758
Entropy (8bit):	5.06621719317054
Encrypted:	false
SSDEEP:	1536:b/xImT+IcCQYYDnDEBi83NcuSEk/ekX/uKiq3SYiLENM6HN26F:b/Riz7G3q3SYiLENM6HN26F
MD5:	A15C2AC3234AA8F6064EF9C1F7383C37
SHA1:	6E10354828454898FDA80F55F3DECB347FD9ED21
SHA-256:	60B19E5DA6A9234FF9220668A5EC1125C157A268513256188EE80F2D2C8D8D36
SHA-512:	B435CF71A9AE66C59677A3AC285C87EA702A87F32367FE5893CF13E68F9A31FCA0A8D14F6A7D692F23C5027751CE63961CA4FE8D20F35A926FF24AE3EB1D4B30
Malicious:	false
Reputation:	low
URL:	https://stackpath.bootstrapcdn.com/bootstrap/4.3.1/css/bootstrap.min.css
Preview:	/!. Bootstrap v4.3.1 (https://getbootstrap.com/). * Copyright 2011-2019 The Bootstrap Authors. * Copyright 2011-2019 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /:root{--blue:#007bff;--indigo:#6610f2;--purple:#6f42c1;--pink:#e83e8c;--red:#dc3545;--orange:#fd7e14;--yellow:#ffc107;--green:#28a745;--teal:#20c997;--cyan:#17a2b8;--white:#fff;--gray:#6c757d;--gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sans-serif:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Helvetica Neue",Arial,"Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--font-family-monospace:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace},::after,::before{box-sizing:

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	250
Entropy (8bit):	5.193091257165917
Encrypted:	false
SSDEEP:	6:TMVBd/IqZjZvK7CyTzI00T2hFPowTbh3x52YWxjFan:TMHd1BZKuezz+2vPomRfofa
MD5:	8BE894634E842959EA4FCD47928F338C
SHA1:	AB0DCA177A8729DB5DED966C508BAEE43322F856
SHA-256:	949CA596509611A944C3B6BF92965D55190ABCB1EE3D4F8F2577E433FC08912E
SHA-512:	134B1A9D0800ECB918739B260F27266D3BF6B30DC28697908CE907E363A4AB30D7E7D95159E2E1F4A5A60671C136C51402E0756B631D83F30CEC3DAE2C679644
Malicious:	false
Reputation:	low
URL:	https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/favicon.ico
Preview:	<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><BucketName>adobeacrobatreviewandsigndocumet</BucketName><RequestId>tx000009ea38279070a51e3-0066056439-232a1f9c-default</RequestId><HostId>232a1f9c-default-default</HostId></Error>

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 13:35:56.081815004 CET	49674	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:35:56.082005978 CET	49675	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:35:56.191204071 CET	49673	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:02.466445923 CET	49711	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.466490984 CET	443	49711	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.466555119 CET	49711	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.466773987 CET	49711	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.466784954 CET	443	49711	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.469177961 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.469221115 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.469274044 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.469465017 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.469481945 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.666886091 CET	443	49711	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.667155027 CET	49711	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.667170048 CET	443	49711	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.668015957 CET	443	49711	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.668081045 CET	49711	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.669522047 CET	49711	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.669572115 CET	443	49711	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.669780016 CET	49711	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.669786930 CET	443	49711	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.671716928 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.671894073 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.671909094 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.672861099 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.672930002 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.673803091 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.673870087 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.674110889 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.674118996 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.716903925 CET	49711	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.719120026 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.901720047 CET	443	49711	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.901783943 CET	443	49711	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.901839972 CET	49711	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.902231932 CET	49711	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.902249098 CET	443	49711	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.907439947 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.907480955 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.907551050 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.907833099 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:02.907846928 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:02.909063101 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.909111977 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.909141064 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.909161091 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.909176111 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.909252882 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.909260035 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.909313917 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.909354925 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.909362078 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.909513950 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.909578085 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.909584999 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.909687042 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.909732103 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.909739017 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.910206079 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.910254002 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.910259008 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.910345078 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.910383940 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.910393000 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.910423994 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.910461903 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.910468102 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.911032915 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.911091089 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.911097050 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.911139011 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.911250114 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.911277056 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.911282063 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.911292076 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.911326885 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.911843061 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.911897898 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.911902905 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.912017107 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.912065983 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.912072897 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913005114 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913053989 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.913059950 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913147926 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913187027 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913193941 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.913201094 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913249016 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.913285971 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913399935 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913439035 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.913445950 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913810968 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913857937 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913857937 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.913882971 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.913923025 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.913932085 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.914031029 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.914066076 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.914072037 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.914805889 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.914864063 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:02.914870977 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:02.965585947 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.003330946 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.003340006 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.003401041 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.003412962 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.003456116 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.004074097 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.004112959 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.004125118 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.004132032 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.004194021 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.004214048 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.005155087 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.005198956 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.005220890 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.005228043 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.005254030 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.005269051 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.005582094 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.005631924 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.005697966 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.005748034 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.007246017 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.007302999 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.007308006 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.007323980 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.007350922 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.007366896 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.007428885 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.007483959 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.007764101 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.007819891 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.007875919 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.007925987 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.008991957 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.009048939 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.009053946 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.009061098 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.009092093 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.009668112 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.009718895 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.009726048 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.009764910 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.054609060 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.054668903 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.054713011 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.054724932 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.054749012 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.054761887 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.097657919 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.097733974 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.098040104 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.098092079 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.098329067 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.098377943 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.098946095 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.098985910 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.098995924 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.099000931 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.099025965 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.099672079 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.099699974 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.099720955 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.099726915 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.099740028 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.099797964 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.099839926 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.100054979 CET	49712	443	192.168.2.5	104.18.10.207
Mar 28, 2024 13:36:03.100069046 CET	443	49712	104.18.10.207	192.168.2.5
Mar 28, 2024 13:36:03.102179050 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.102595091 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.102615118 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.102904081 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.103266001 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.103374958 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.103391886 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.148252010 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.154563904 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.361104965 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361190081 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361232042 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361242056 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.361262083 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361304045 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.361308098 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361324072 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361366987 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.361372948 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361612082 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361654997 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.361654997 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361670017 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361704111 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.361721992 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361816883 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361851931 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361862898 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.361870050 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.361906052 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.362566948 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.362637997 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.362677097 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.362684011 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.362693071 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.362734079 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.362741947 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.363807917 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.363847971 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.363862991 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.363873005 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.363907099 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.363912106 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.363954067 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.363995075 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.364001989 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.364314079 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.364357948 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.364361048 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.364371061 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.364413023 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.364418030 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.364475012 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.364523888 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.364530087 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.364547014 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.364598989 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.365288019 CET	49715	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:03.365300894 CET	443	49715	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:03.495160103 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:03.495188951 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:03.495249987 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:03.495585918 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:03.495596886 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:03.690517902 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:03.707302094 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:03.707318068 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:03.708811998 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:03.708884001 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:03.713505983 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:03.713592052 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:03.713768959 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:03.713778019 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:03.757349968 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:03.921171904 CET	49717	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:36:03.921200991 CET	443	49717	142.251.167.99	192.168.2.5
Mar 28, 2024 13:36:03.921255112 CET	49717	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:36:03.921891928 CET	49717	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:36:03.921911955 CET	443	49717	142.251.167.99	192.168.2.5
Mar 28, 2024 13:36:04.188472033 CET	443	49717	142.251.167.99	192.168.2.5
Mar 28, 2024 13:36:04.196810961 CET	49717	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:36:04.196827888 CET	443	49717	142.251.167.99	192.168.2.5
Mar 28, 2024 13:36:04.197736025 CET	443	49717	142.251.167.99	192.168.2.5
Mar 28, 2024 13:36:04.197796106 CET	49717	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:36:04.199193954 CET	49717	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:36:04.199261904 CET	443	49717	142.251.167.99	192.168.2.5
Mar 28, 2024 13:36:04.247289896 CET	49717	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:36:04.247312069 CET	443	49717	142.251.167.99	192.168.2.5
Mar 28, 2024 13:36:04.293643951 CET	49717	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:36:04.999762058 CET	49718	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:04.999805927 CET	443	49718	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:05.000034094 CET	49718	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.002615929 CET	49718	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.002630949 CET	443	49718	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:05.326694965 CET	443	49718	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:05.326771021 CET	49718	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.337805986 CET	49718	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.337811947 CET	443	49718	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:05.338063002 CET	443	49718	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:05.386334896 CET	49718	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.468652010 CET	49718	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.512245893 CET	443	49718	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:05.635565042 CET	443	49718	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:05.635632992 CET	443	49718	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:05.635732889 CET	49718	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.693975925 CET	49674	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:05.693980932 CET	49675	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:05.774207115 CET	49718	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.774228096 CET	443	49718	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:05.774251938 CET	49718	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.774257898 CET	443	49718	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:05.793019056 CET	49673	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:05.998857021 CET	49719	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.998903990 CET	443	49719	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:05.999047041 CET	49719	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.999380112 CET	49719	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:05.999394894 CET	443	49719	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:06.323677063 CET	443	49719	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:06.323765993 CET	49719	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:06.325176954 CET	49719	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:06.325193882 CET	443	49719	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:06.325411081 CET	443	49719	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:06.326601028 CET	49719	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:06.368237972 CET	443	49719	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:06.640053988 CET	443	49719	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:06.640119076 CET	443	49719	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:06.640186071 CET	49719	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:06.646096945 CET	49719	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:06.646120071 CET	443	49719	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:06.646159887 CET	49719	443	192.168.2.5	23.56.12.114
Mar 28, 2024 13:36:06.646167994 CET	443	49719	23.56.12.114	192.168.2.5
Mar 28, 2024 13:36:07.177546978 CET	443	49703	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:07.177639961 CET	49703	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:07.510133028 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.510199070 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.510225058 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.510247946 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.510288000 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.510303974 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.510318995 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.510404110 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.510476112 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.510497093 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.510500908 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.510516882 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.510543108 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.510880947 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.510953903 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.510955095 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.510968924 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.511018991 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.511033058 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.511219978 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.511286020 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.511292934 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.511861086 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.511914968 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.511930943 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.511940002 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.512087107 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.512094021 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.512150049 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.512305021 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.512310982 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.512828112 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.512855053 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.512877941 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.512885094 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.512938023 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.512943983 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.512972116 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.512996912 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.513017893 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.513025999 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.513222933 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.513734102 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.513834000 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.513886929 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.513891935 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.514014959 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.514040947 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.514101028 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.514106989 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.514153004 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.514704943 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.514750957 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.514786005 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.514792919 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.514830112 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.514868975 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.514924049 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.514930964 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.516031981 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.516098976 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.516107082 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.561063051 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.604537010 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.604614019 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.604624033 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.604737043 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.605117083 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.605174065 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.605256081 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.605307102 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.605885029 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.605959892 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.605966091 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.605982065 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.606023073 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.606044054 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.606044054 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.911323071 CET	49716	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.911346912 CET	443	49716	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.937206984 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.937232018 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.937333107 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.938519001 CET	49721	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.938546896 CET	443	49721	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.938608885 CET	49721	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.939018965 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.939032078 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:07.939578056 CET	49721	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:07.939589024 CET	443	49721	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.137172937 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.138720989 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.138727903 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.139029026 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.139344931 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.139398098 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.139646053 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.141221046 CET	443	49721	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.141417980 CET	49721	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.141436100 CET	443	49721	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.141788006 CET	443	49721	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.142133951 CET	49721	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.142190933 CET	443	49721	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.142451048 CET	49721	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.180237055 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.188235044 CET	443	49721	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.381580114 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.381624937 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.381653070 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.381676912 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.381690979 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.381711960 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.381752968 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.382002115 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.382091999 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.382121086 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.382139921 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.382144928 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.382169962 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.382292986 CET	443	49721	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.382385969 CET	443	49721	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.382472038 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.382538080 CET	49721	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.382661104 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.382689953 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.382697105 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.382899046 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.382944107 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.382951021 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.382993937 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.383095026 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.383199930 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.383483887 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.383527040 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.383533001 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.383569002 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.383573055 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.383677959 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.383760929 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.383800030 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.383805990 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.383846998 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.383851051 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.384499073 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.384579897 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.384619951 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.384624958 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.384666920 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.384671926 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.384754896 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.384812117 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.384854078 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.384859085 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.384900093 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.385341883 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.385521889 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.385572910 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.385612011 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.385622978 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.385658979 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.385663033 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.386360884 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.386389017 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.386441946 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.386445999 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.386487961 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.386492014 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.386548042 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.386595964 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.386641979 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.386646986 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.386692047 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.387341022 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.387402058 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.420836926 CET	49721	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.420851946 CET	443	49721	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.476149082 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.476227045 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.476361036 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.476404905 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.476983070 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.477056980 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.477184057 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.477243900 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.477571011 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.477633953 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.477894068 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.477957010 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.478239059 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.478286982 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.478574038 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.478626966 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.479262114 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.479320049 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.479902029 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.479963064 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.480139017 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.480189085 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.480832100 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.480880022 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.481137991 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.481187105 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.481333971 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.481384039 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.481503010 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.481554031 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.482215881 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.482264042 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.522218943 CET	49722	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:08.522252083 CET	443	49722	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:08.522353888 CET	49722	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:08.522547960 CET	49722	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:08.522562027 CET	443	49722	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:08.570895910 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.570966005 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.571075916 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.571130991 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.571635962 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.571695089 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.572011948 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.572067976 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.572300911 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.572361946 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.572480917 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.572532892 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.572695971 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.572742939 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.573463917 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.573514938 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.573748112 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.573797941 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.573924065 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.573971987 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.574580908 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.574644089 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.574784994 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.574834108 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.575408936 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.575472116 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.575714111 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.575773954 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.576380014 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.576450109 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.576553106 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.576620102 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.577048063 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.577120066 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.577162027 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.577207088 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.577929974 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.577996969 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.578253031 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.578310013 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.578943968 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.578996897 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.579180956 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.579232931 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.579869986 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.579927921 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.580648899 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.580657005 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.580691099 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.580732107 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.580744028 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.580777884 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.580790997 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.582500935 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.582519054 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.582559109 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.582565069 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.582600117 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.582622051 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.584239006 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.584253073 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.584314108 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.584320068 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.584357023 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.584371090 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.586431980 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.586447954 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.586498022 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.586503983 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.586549997 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.587462902 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.587477922 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.587531090 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.587537050 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.587579966 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.589265108 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.589277983 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.589323044 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.589328051 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.589356899 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.589382887 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.622467041 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.622481108 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.622551918 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.622558117 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.622628927 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.666326046 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.666341066 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.666479111 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.666486979 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.666532040 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.667247057 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.667356014 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.668304920 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.668319941 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.668401003 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.668406010 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.670106888 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.670129061 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.670182943 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.670192003 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.670219898 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.671552896 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.671566010 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.671613932 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.671621084 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.673813105 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.673830032 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.673881054 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.673887014 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.673921108 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.675101042 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.675113916 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.675179958 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.675184965 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.675983906 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.676048994 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.676054955 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.676095009 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.677551985 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.677566051 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.677624941 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.677629948 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.677668095 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.679646015 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.679658890 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.679725885 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.679732084 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.679773092 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.681628942 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.681643009 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.681736946 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.681741953 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.681791067 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.682663918 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.682677984 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.682743073 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.682748079 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.682787895 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.684286118 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.684299946 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.684369087 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.684372902 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.684408903 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.685347080 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.685376883 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.685410023 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.685415983 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.685425997 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.685446024 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.685462952 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.716571093 CET	443	49722	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:08.761687040 CET	49722	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:08.793082952 CET	49722	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:08.793093920 CET	443	49722	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:08.793389082 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.793975115 CET	443	49722	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:08.794024944 CET	49722	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:08.795444965 CET	49722	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:08.795500040 CET	443	49722	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:08.796828032 CET	49722	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:08.796838045 CET	443	49722	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:08.796860933 CET	49720	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.796868086 CET	443	49720	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.832365036 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.832392931 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.832627058 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.834383011 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:08.834397078 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:08.836921930 CET	49722	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:08.955183983 CET	443	49722	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:08.955326080 CET	443	49722	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:08.955390930 CET	49722	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:08.956330061 CET	49722	443	192.168.2.5	104.17.2.184
Mar 28, 2024 13:36:08.956348896 CET	443	49722	104.17.2.184	192.168.2.5
Mar 28, 2024 13:36:09.029531956 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.069742918 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.069751978 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.070051908 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.079497099 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.079552889 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.080315113 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.128242016 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.227859974 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.227885962 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.227946043 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.239029884 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.239046097 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.278399944 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.278480053 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.278635979 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.278675079 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.278688908 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.278949976 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.278956890 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.279071093 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.279114008 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.279119015 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.279208899 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.279278994 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.279284000 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.280601025 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.280677080 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.280680895 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.280879974 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.280909061 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.280925035 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.280931950 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281100988 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.281142950 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281246901 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281310081 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281349897 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.281354904 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281425953 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281474113 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.281477928 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281516075 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.281519890 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281693935 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281749010 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.281753063 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281783104 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281862020 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.281903982 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.281908035 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.282008886 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.282011986 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.282105923 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.282166004 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.282170057 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.282232046 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.282280922 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.282284975 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.282319069 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.282598019 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.282603025 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.282783985 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.282824993 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.282830000 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.282982111 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.283025026 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.283029079 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.283210039 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.283253908 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.283260107 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.283864975 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.283894062 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.283926010 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.283931971 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.283973932 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.284054041 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.284104109 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.373347044 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.373420954 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.373425961 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.373550892 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.374181986 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.374250889 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.374351025 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.374401093 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.375308037 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.375380039 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.375384092 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.375394106 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.375436068 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.380471945 CET	49723	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.380480051 CET	443	49723	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.383837938 CET	49725	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.383881092 CET	443	49725	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.384022951 CET	49725	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.384365082 CET	49725	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.384378910 CET	443	49725	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.437916040 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.438137054 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.438149929 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.438445091 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.438824892 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.438882113 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.439001083 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.480237007 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.582473040 CET	443	49725	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.582802057 CET	49725	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.582825899 CET	443	49725	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.583110094 CET	443	49725	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.583456039 CET	49725	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.583513975 CET	443	49725	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.630671978 CET	49725	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.676729918 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.676770926 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.676799059 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.676824093 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.676829100 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.676846981 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.676867008 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.676965952 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.677001953 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.677011967 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.677270889 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.677299023 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.677321911 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.677330971 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.677371025 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.677376986 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.677969933 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.678009033 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.678009033 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.678019047 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.678046942 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.678054094 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.678083897 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.678128004 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.678134918 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.678879976 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.678935051 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.678940058 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.678949118 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.678991079 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.678997040 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.679651976 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.679680109 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.679703951 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.679712057 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.679757118 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.679763079 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.679795980 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.679821968 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.679838896 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.679847956 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.679913998 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.680574894 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.680624962 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.680676937 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.680717945 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.680726051 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.680778980 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.680784941 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.681400061 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.681448936 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.681457996 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.681617022 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.681643009 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.681653976 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.681660891 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.681926966 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.681935072 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.682298899 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.682327986 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.682337046 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.682344913 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.682375908 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.682424068 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.682432890 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.730449915 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.770874977 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.770941973 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.770952940 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.770998955 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.771471977 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.771507025 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.771531105 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.771537066 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.771559954 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.771578074 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.772892952 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.772942066 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.773005962 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.773066044 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.773403883 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.773459911 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.773461103 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.773468971 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.773500919 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.773509026 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.774688959 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.774749994 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.774755955 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.774764061 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.774801016 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.775338888 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.775394917 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.775399923 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.775410891 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.775437117 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.775451899 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.776587963 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.776657104 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.776753902 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.776806116 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.777565002 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.777622938 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.818649054 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.818702936 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.818903923 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.818958044 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.865032911 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.865092993 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.865165949 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.865214109 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.865245104 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.865284920 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.866833925 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.866892099 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.867029905 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.867069960 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.867192030 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.867234945 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.867933989 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.867989063 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.868184090 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.868236065 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.868702888 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.868752003 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.869138002 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.869193077 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.869971991 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.870022058 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.870224953 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.870270014 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.870904922 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.870961905 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.871104002 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.871155024 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.871409893 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.871459007 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.871675014 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.871726036 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.872401953 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.872459888 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.872648001 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.872706890 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.873496056 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.873564959 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.873770952 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.873827934 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.874227047 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.874280930 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.874496937 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.874552965 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.874887943 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.874937057 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.876835108 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.876843929 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.876871109 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.876888990 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.876899958 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.876924038 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.876939058 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.880399942 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.880419016 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.880465984 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.880474091 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.880489111 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.880506992 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.880541086 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.880548000 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.880573034 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.882184029 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.882199049 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.882235050 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.882245064 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.882262945 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.884100914 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.884114981 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.884154081 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.884164095 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.884182930 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.885828972 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.885848999 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.885891914 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.885901928 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.885925055 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.913103104 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.913120985 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.913160086 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.913176060 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.913207054 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.914355993 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.914369106 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.914417982 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.914431095 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.960545063 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.960567951 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.960599899 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.960609913 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.960654974 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.962367058 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.962382078 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.962433100 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.962443113 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.964730024 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.964749098 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.964785099 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.964792967 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.964848042 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.966212988 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.966227055 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.966284037 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.966290951 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.966319084 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.968208075 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.968240976 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.968302965 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.968303919 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.968312979 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.969640017 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.969654083 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.969717026 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.969728947 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.971759081 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.971776962 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.971838951 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.971846104 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.971873045 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.973470926 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.973484993 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.973521948 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.973531008 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.973555088 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.975637913 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.975656033 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.975716114 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.975732088 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.977123022 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.977135897 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.977178097 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.977191925 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.978744984 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.978775024 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.978811026 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.978818893 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.978832006 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.978841066 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:09.978857994 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.978885889 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.979108095 CET	49724	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:09.979123116 CET	443	49724	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:14.203757048 CET	443	49717	142.251.167.99	192.168.2.5
Mar 28, 2024 13:36:14.203824997 CET	443	49717	142.251.167.99	192.168.2.5
Mar 28, 2024 13:36:14.203969002 CET	49717	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:36:14.546003103 CET	49717	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:36:14.546027899 CET	443	49717	142.251.167.99	192.168.2.5
Mar 28, 2024 13:36:17.515862942 CET	49703	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:17.515945911 CET	49703	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:17.526458025 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:17.526494026 CET	443	49731	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:17.526551008 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:17.527107954 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:17.527120113 CET	443	49731	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:17.673607111 CET	443	49703	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:17.673624039 CET	443	49703	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:17.852418900 CET	443	49731	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:17.852519035 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:18.345673084 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:18.345701933 CET	443	49731	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:18.345972061 CET	443	49731	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:18.346036911 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:18.346560001 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:18.346587896 CET	443	49731	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:18.346668005 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:18.346673965 CET	443	49731	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:18.737093925 CET	443	49731	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:18.737451077 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:18.737590075 CET	443	49731	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:18.737634897 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:18.737639904 CET	443	49731	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:18.737663984 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:18.737675905 CET	443	49731	23.1.237.91	192.168.2.5
Mar 28, 2024 13:36:18.737685919 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:18.737725019 CET	49731	443	192.168.2.5	23.1.237.91
Mar 28, 2024 13:36:24.576586008 CET	443	49725	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:24.576647043 CET	443	49725	104.17.3.184	192.168.2.5
Mar 28, 2024 13:36:24.576700926 CET	49725	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:24.770164013 CET	49725	443	192.168.2.5	104.17.3.184
Mar 28, 2024 13:36:24.770184040 CET	443	49725	104.17.3.184	192.168.2.5
Mar 28, 2024 13:37:03.873692036 CET	49736	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:37:03.873728991 CET	443	49736	142.251.167.99	192.168.2.5
Mar 28, 2024 13:37:03.873802900 CET	49736	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:37:03.874504089 CET	49736	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:37:03.874517918 CET	443	49736	142.251.167.99	192.168.2.5
Mar 28, 2024 13:37:04.146564960 CET	443	49736	142.251.167.99	192.168.2.5
Mar 28, 2024 13:37:04.147516966 CET	49736	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:37:04.147532940 CET	443	49736	142.251.167.99	192.168.2.5
Mar 28, 2024 13:37:04.147835970 CET	443	49736	142.251.167.99	192.168.2.5
Mar 28, 2024 13:37:04.148416042 CET	49736	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:37:04.148471117 CET	443	49736	142.251.167.99	192.168.2.5
Mar 28, 2024 13:37:04.199549913 CET	49736	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:37:14.178419113 CET	443	49736	142.251.167.99	192.168.2.5
Mar 28, 2024 13:37:14.178488970 CET	443	49736	142.251.167.99	192.168.2.5
Mar 28, 2024 13:37:14.178553104 CET	49736	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:37:14.546684027 CET	49736	443	192.168.2.5	142.251.167.99
Mar 28, 2024 13:37:14.546716928 CET	443	49736	142.251.167.99	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 13:36:00.343202114 CET	53	51368	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:00.400325060 CET	53	55871	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:00.952197075 CET	53	65195	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:01.395756960 CET	55904	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:01.395904064 CET	60027	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:01.515005112 CET	53	60027	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:02.370125055 CET	63842	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:02.370291948 CET	52085	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:02.372363091 CET	58618	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:02.372529030 CET	52285	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:02.465404034 CET	53	52085	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:02.465563059 CET	53	63842	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:02.467082977 CET	53	58618	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:02.468784094 CET	53	52285	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:03.398772955 CET	51653	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:03.398924112 CET	60002	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:03.493653059 CET	53	51653	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:03.494445086 CET	53	60002	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:03.821722031 CET	65221	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:03.822060108 CET	52017	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:03.917143106 CET	53	52017	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:03.919328928 CET	53	65221	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:08.425141096 CET	59399	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:08.425328016 CET	58282	53	192.168.2.5	1.1.1.1
Mar 28, 2024 13:36:08.521441936 CET	53	58282	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:08.521739960 CET	53	59399	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:18.936764956 CET	53	60773	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:37.936914921 CET	53	61053	1.1.1.1	192.168.2.5
Mar 28, 2024 13:36:59.415071964 CET	53	51107	1.1.1.1	192.168.2.5
Mar 28, 2024 13:37:00.468168020 CET	53	49600	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 28, 2024 13:36:01.515081882 CET	192.168.2.5	1.1.1.1	c292	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 28, 2024 13:36:01.395756960 CET	192.168.2.5	1.1.1.1	0x6cf0	Standard query (0)	adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:01.395904064 CET	192.168.2.5	1.1.1.1	0xfb1b	Standard query (0)	adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com	65	IN (0x0001)	false
Mar 28, 2024 13:36:02.370125055 CET	192.168.2.5	1.1.1.1	0x909a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:02.370291948 CET	192.168.2.5	1.1.1.1	0xea88	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 28, 2024 13:36:02.372363091 CET	192.168.2.5	1.1.1.1	0x7525	Standard query (0)	stackpath.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:02.372529030 CET	192.168.2.5	1.1.1.1	0x7cf1	Standard query (0)	stackpath.bootstrapcdn.com	65	IN (0x0001)	false
Mar 28, 2024 13:36:03.398772955 CET	192.168.2.5	1.1.1.1	0xc5c9	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:03.398924112 CET	192.168.2.5	1.1.1.1	0x7ce7	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 28, 2024 13:36:03.821722031 CET	192.168.2.5	1.1.1.1	0x1460	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:03.822060108 CET	192.168.2.5	1.1.1.1	0x329a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 13:36:08.425141096 CET	192.168.2.5	1.1.1.1	0xe663	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:08.425328016 CET	192.168.2.5	1.1.1.1	0x2b2d	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 28, 2024 13:36:01.492623091 CET	1.1.1.1	192.168.2.5	0x6cf0	No error (0)	adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com	se-sto-1.linodeobjects.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 13:36:01.492623091 CET	1.1.1.1	192.168.2.5	0x6cf0	No error (0)	se-sto-1.linodeobjects.com	se-sto-1.linodeobjects.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 13:36:01.515005112 CET	1.1.1.1	192.168.2.5	0xfb1b	No error (0)	adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com	se-sto-1.linodeobjects.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 13:36:01.515005112 CET	1.1.1.1	192.168.2.5	0xfb1b	No error (0)	se-sto-1.linodeobjects.com	se-sto-1.linodeobjects.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 13:36:02.465404034 CET	1.1.1.1	192.168.2.5	0xea88	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Mar 28, 2024 13:36:02.465563059 CET	1.1.1.1	192.168.2.5	0x909a	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:02.465563059 CET	1.1.1.1	192.168.2.5	0x909a	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:02.467082977 CET	1.1.1.1	192.168.2.5	0x7525	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:02.467082977 CET	1.1.1.1	192.168.2.5	0x7525	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:02.468784094 CET	1.1.1.1	192.168.2.5	0x7cf1	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Mar 28, 2024 13:36:03.493653059 CET	1.1.1.1	192.168.2.5	0xc5c9	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:03.493653059 CET	1.1.1.1	192.168.2.5	0xc5c9	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:03.494445086 CET	1.1.1.1	192.168.2.5	0x7ce7	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Mar 28, 2024 13:36:03.917143106 CET	1.1.1.1	192.168.2.5	0x329a	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 13:36:03.919328928 CET	1.1.1.1	192.168.2.5	0x1460	No error (0)	www.google.com		142.251.167.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:03.919328928 CET	1.1.1.1	192.168.2.5	0x1460	No error (0)	www.google.com		142.251.167.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:03.919328928 CET	1.1.1.1	192.168.2.5	0x1460	No error (0)	www.google.com		142.251.167.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:03.919328928 CET	1.1.1.1	192.168.2.5	0x1460	No error (0)	www.google.com		142.251.167.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:03.919328928 CET	1.1.1.1	192.168.2.5	0x1460	No error (0)	www.google.com		142.251.167.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:03.919328928 CET	1.1.1.1	192.168.2.5	0x1460	No error (0)	www.google.com		142.251.167.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:08.521441936 CET	1.1.1.1	192.168.2.5	0x2b2d	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Mar 28, 2024 13:36:08.521739960 CET	1.1.1.1	192.168.2.5	0xe663	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:08.521739960 CET	1.1.1.1	192.168.2.5	0xe663	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:17.218771935 CET	1.1.1.1	192.168.2.5	0xf913	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 13:36:17.218771935 CET	1.1.1.1	192.168.2.5	0xf913	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:30.482975960 CET	1.1.1.1	192.168.2.5	0x50bc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 13:36:30.482975960 CET	1.1.1.1	192.168.2.5	0x50bc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:36:53.029418945 CET	1.1.1.1	192.168.2.5	0xbf4e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 13:36:53.029418945 CET	1.1.1.1	192.168.2.5	0xbf4e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 13:37:12.186711073 CET	1.1.1.1	192.168.2.5	0x111c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 13:37:12.186711073 CET	1.1.1.1	192.168.2.5	0x111c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

https:

challenges.cloudflare.com

stackpath.bootstrapcdn.com

www.bing.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	104.17.2.184	443	2352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:02 UTC	604	OUT	GET /turnstile/v0/api.js?compat=recaptcha HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 12:36:02 UTC	353	IN	HTTP/1.1 302 Found Date: Thu, 28 Mar 2024 12:36:02 GMT Content-Length: 0 Connection: close access-control-allow-origin: * location: /turnstile/v0/g/dc6b543c1346/api.js?compat=recaptcha cross-origin-resource-policy: cross-origin cache-control: max-age=300, public Server: cloudflare CF-RAY: 86b7a9ddcbd89c61-IAD alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49712	104.18.10.207	443	2352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:02 UTC	694	OUT	GET /bootstrap/4.3.1/css/bootstrap.min.css HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 12:36:02 UTC	954	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 12:36:02 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"a15c2ac3234aa8f6064ef9c1f7383c37" Last-Modified: Mon, 25 Jan 2021 22:04:08 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 03/18/2024 12:00:10 CDN-EdgeStorageId: 1068 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 7ae508d3b64e01abece2d3524409c05e CDN-Cache: HIT CF-Cache-Status: HIT Age: 61496 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 86b7a9ddcb129c2b-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 12:36:02 UTC	415	IN	Data Raw: 37 62 66 39 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 33 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 Data Ascii: 7bf9/! Bootstrap v4.3.1 (https://getbootstrap.com/) * Copyright 2011-2019 The Bootstrap Authors * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#661
2024-03-28 12:36:02 UTC	1369	IN	Data Raw: 67 72 61 79 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 70 72 69 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a Data Ascii: gray-dark:#343a40;--primary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:
2024-03-28 12:36:02 UTC	1369	IN	Data Raw: 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 6e 6f 6e 65 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c Data Ascii: line dotted;text-decoration:underline dotted;cursor:help;border-bottom:0;-webkit-text-decoration-skip-ink:none;text-decoration-skip-ink:none}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol
2024-03-28 12:36:02 UTC	1369	IN	Data Raw: 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 73 65 6c 65 63 74 7b 77 6f 72 64 2d 77 72 61 70 3a Data Ascii: n:focus{outline:1px dotted;outline:5px auto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}select{word-wrap:
2024-03-28 12:36:02 UTC	1369	IN	Data Raw: 61 72 79 7b 64 69 73 70 6c 61 79 3a 6c 69 73 74 2d 69 74 65 6d 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d Data Ascii: ary{display:list-item;cursor:pointer}template{display:none}[hidden]{display:none!important}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{margin-bottom:.5rem;font-weight:500;line-height:1.2}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem
2024-03-28 12:36:02 UTC	1369	IN	Data Raw: 72 65 2d 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 66 69 67 75 72 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 Data Ascii: re-img{margin-bottom:.5rem;line-height:1}.figure-caption{font-size:90%;color:#6c757d}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-radius:.2
2024-03-28 12:36:02 UTC	1369	IN	Data Raw: 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 2c 2e 63 6f 6c 2d 73 6d 2d 38 2c 2e 63 6f 6c 2d 73 6d 2d 39 2c 2e 63 6f 6c 2d Data Ascii: -10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7,.col-sm-8,.col-sm-9,.col-
2024-03-28 12:36:02 UTC	1369	IN	Data Raw: 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 66 69 72 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 3a 2d 31 7d 2e 6f 72 64 65 72 2d 6c 61 73 74 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 33 3b 6f 72 64 65 72 3a 31 33 7d 2e 6f 72 64 65 72 2d 30 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 30 3b 6f 72 64 65 72 3a 30 7d 2e 6f 72 64 65 72 2d 31 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 31 3b 6f 72 64 65 72 3a 31 7d 2e 6f 72 64 65 72 2d 32 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 32 3b 6f 72 64 65 72 3a 32 7d 2e 6f 72 64 65 72 2d 33 7b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 33 3b 6f 72 Data Ascii: ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-first{-ms-flex-order:-1;order:-1}.order-last{-ms-flex-order:13;order:13}.order-0{-ms-flex-order:0;order:0}.order-1{-ms-flex-order:1;order:1}.order-2{-ms-flex-order:2;order:2}.order-3{-ms-flex-order:3;or
2024-03-28 12:36:02 UTC	1369	IN	Data Raw: 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 35 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 36 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 7d 2e 63 6f 6c 2d 73 6d 2d 37 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 35 38 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 36 36 2e 36 36 36 36 36 37 25 3b 66 Data Ascii: idth:33.333333%}.col-sm-5{-ms-flex:0 0 41.666667%;flex:0 0 41.666667%;max-width:41.666667%}.col-sm-6{-ms-flex:0 0 50%;flex:0 0 50%;max-width:50%}.col-sm-7{-ms-flex:0 0 58.333333%;flex:0 0 58.333333%;max-width:58.333333%}.col-sm-8{-ms-flex:0 0 66.666667%;f
2024-03-28 12:36:02 UTC	1369	IN	Data Raw: 2d 73 6d 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 73 6d 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 63 6f 6c 2d 6d 64 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 30 3b 66 6c 65 78 2d 62 61 73 69 73 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 70 6f 73 69 74 Data Ascii: -sm-7{margin-left:58.333333%}.offset-sm-8{margin-left:66.666667%}.offset-sm-9{margin-left:75%}.offset-sm-10{margin-left:83.333333%}.offset-sm-11{margin-left:91.666667%}}@media (min-width:768px){.col-md{-ms-flex-preferred-size:0;flex-basis:0;-ms-flex-posit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	104.17.2.184	443	2352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:03 UTC	619	OUT	GET /turnstile/v0/g/dc6b543c1346/api.js?compat=recaptcha HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 12:36:03 UTC	340	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 12:36:03 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 39929 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 86b7a9e08e303b2c-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 12:36:03 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 2c 72 2c 74 2c 69 2c 75 2c 73 2c 67 29 7b 74 72 79 7b 76 61 72 20 79 3d 65 5b 73 5d 28 67 29 2c 6d 3d 79 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 74 28 66 29 3b 72 65 74 75 72 6e 7d 79 2e 64 6f 6e 65 3f 72 28 6d 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6d 29 2e 74 68 65 6e 28 69 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 69 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function gt(e,r,t,i,u,s,g){try{var y=e[s](g),m=y.value}catch(f){t(f);return}y.done?r(m):Promise.resolve(m).then(i,u)}function yt(e){return function(){var r=this,t=arguments;return new Promise(function(i,u){var s=e.apply(r,t);funct
2024-03-28 12:36:03 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 69 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 69 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,i)}return t}function _t(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):ir(Object(r)).forEach(funct
2024-03-28 12:36:03 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 54 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 69 2c 75 2c 73 2c 67 3b 72 65 74 75 72 6e 20 67 3d 7b 6e 65 78 74 3a 79 28 30 29 2c 74 68 72 6f 77 3a 79 28 31 29 2c 72 65 74 75 72 6e 3a 79 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 67 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Te(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},i,u,s,g;return g={next:y(0),throw:y(1),return:y(2)},typeof Symbol=="function"&&(g[Symbo
2024-03-28 12:36:03 UTC	1369	IN	Data Raw: 72 6d 61 6c 22 2c 65 2e 43 4f 4d 50 41 43 54 3d 22 63 6f 6d 70 61 63 74 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 6a 7c 7c 28 6a 3d 7b 7d 29 29 3b 76 61 72 20 49 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 49 65 7c 7c 28 49 65 3d 7b 7d 29 29 3b 76 61 72 20 66 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 66 65 7c 7c 28 66 65 3d 7b 7d 29 29 3b 76 61 72 20 47 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e Data Ascii: rmal",e.COMPACT="compact",e.INVISIBLE="invisible"})(j\|\|(j={}));var Ie;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Ie\|\|(Ie={}));var fe;(function(e){e.NEVER="never",e.AUTO="auto"})(fe\|\|(fe={}));var G;(function(e){e.NEVER="never",e.MANUAL="man
2024-03-28 12:36:03 UTC	1369	IN	Data Raw: 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 44 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 57 3d 22 30 2f 30 22 3b 76 61 72 20 53 74 3d 33 30 30 2c 49 74 3d 31 30 3b 76 61 72 20 69 65 3d 22 63 66 2d 63 68 6c 2d 77 69 64 67 65 74 2d 22 2c 4d 3d 22 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 41 74 3d 22 2e 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 2c 4f 74 3d 22 2e 63 66 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 52 74 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 43 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 6b 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 4e 74 3d 22 67 2d 72 65 63 61 70 74 Data Ascii: y"],e)}function et(e){return D(["render","execute"],e)}var W="0/0";var St=300,It=10;var ie="cf-chl-widget-",M="cloudflare-challenge",At=".cf-turnstile",Ot=".cf-challenge",Rt=".g-recaptcha",Ct="cf_challenge_response",kt="cf-turnstile-response",Nt="g-recapt
2024-03-28 12:36:03 UTC	1369	IN	Data Raw: 72 6e 20 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 7d 2c 65 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 55 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 69 3d 3d 3d 6e 75 6c 6c 7c 7c 21 55 74 28 69 29 29 72 65 74 75 72 6e 20 69 3b 69 66 28 74 79 70 65 6f 66 20 69 21 3d 22 66 75 6e 63 74 Data Ascii: rn t.__proto__\|\|Object.getPrototypeOf(t)},ee(e)}function Ut(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Re(e){var r=typeof Map=="function"?new Map:void 0;return Re=function(i){if(i===null\|\|!Ut(i))return i;if(typeof i!="funct
2024-03-28 12:36:03 UTC	1369	IN	Data Raw: 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 69 3d 30 2c 75 3b 75 3d 74 5b 69 5d 3b 69 2b 2b 29 69 66 28 6b 28 75 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 75 2e 73 72 63 29 29 72 65 74 75 72 6e 20 75 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 29 7b 76 61 72 20 65 3d 72 74 28 29 3b 65 7c 7c 76 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c Data Ascii: MLScriptElement)&&e.test(r.src))return r;for(var t=document.querySelectorAll("script"),i=0,u;u=t[i];i++)if(k(u,HTMLScriptElement)&&e.test(u.src))return u}function Bt(){var e=rt();e\|\|v("Could not find Turnstile script tag, some features may not be availabl
2024-03-28 12:36:03 UTC	1369	IN	Data Raw: 6f 67 28 22 54 75 72 6e 73 74 69 6c 65 20 57 69 64 67 65 74 20 73 65 65 6d 20 74 6f 20 68 61 76 65 20 63 72 61 73 68 65 64 3a 20 22 2c 6d 29 3b 76 61 72 20 6c 3b 69 66 28 28 53 3d 65 2e 6d 73 67 48 61 6e 64 6c 65 72 29 3d 3d 3d 6e 75 6c 6c 7c 7c 53 3d 3d 3d 76 6f 69 64 20 30 7c 7c 53 2e 63 61 6c 6c 28 65 2c 7b 64 61 74 61 3a 7b 73 6f 75 72 63 65 3a 4d 2c 77 69 64 67 65 74 49 64 3a 6d 2c 63 6f 64 65 3a 53 65 2c 65 76 65 6e 74 3a 22 66 61 69 6c 22 2c 72 63 56 3a 28 6c 3d 66 2e 72 63 56 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 57 7d 7d 29 2c 72 29 7b 76 61 72 20 6f 3b 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 73 6f 75 72 63 65 3a 4d 2c 77 69 64 67 65 74 49 64 3a 6d 2c 65 76 65 6e 74 3a 22 72 63 76 2d 75 70 64 61 Data Ascii: og("Turnstile Widget seem to have crashed: ",m);var l;if((S=e.msgHandler)===null\|\|S===void 0\|\|S.call(e,{data:{source:M,widgetId:m,code:Se,event:"fail",rcV:(l=f.rcV)!==null&&l!==void 0?l:W}}),r){var o;window.postMessage({source:M,widgetId:m,event:"rcv-upda
2024-03-28 12:36:03 UTC	1369	IN	Data Raw: 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 6d 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 32 2f 61 76 30 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 69 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 73 69 7a 65 29 2e 63 6f 6e 63 61 74 28 66 29 7d 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 29 7b 76 61 72 20 74 3b 72 2e 75 70 67 72 61 64 65 41 74 74 65 6d 70 74 73 2b 2b 3b 76 61 72 20 69 3d 72 74 28 29 3b 69 66 28 21 28 21 69 7c 7c 21 69 2e 70 61 72 65 6e 74 4e 6f 64 65 29 29 7b 76 61 72 20 75 3d 69 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 69 2e 6e 6f 6e 63 Data Ascii: gi/challenge-platform/").concat(m,"turnstile/if/ov2/av0/rcv").concat(i,"/").concat(e,"/").concat(r,"/").concat(t.theme,"/").concat(t.size).concat(f)}function Vt(e,r){var t;r.upgradeAttempts++;var i=rt();if(!(!i\|\|!i.parentNode)){var u=i==null?void 0:i.nonc
2024-03-28 12:36:03 UTC	1369	IN	Data Raw: 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 4e 6f 64 65 49 74 65 72 61 74 6f 72 28 65 2c 4e 6f 64 65 46 69 6c 74 65 72 2e 53 48 4f 57 5f 45 4c 45 4d 45 4e 54 7c 4e 6f 64 65 46 69 6c 74 65 72 2e 53 48 4f 57 5f 54 45 58 54 2c 7b 61 63 63 65 70 74 4e 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 28 54 29 7b 72 65 74 75 72 6e 20 75 3e 72 7c 7c 69 2e 6c 65 6e 67 74 68 3e 74 3f 4e 6f 64 65 46 69 6c 74 65 72 2e 46 49 4c 54 45 52 5f 52 45 4a 45 43 54 3a 4e 6f 64 65 46 69 6c 74 65 72 2e 46 49 4c 54 45 52 5f 41 43 43 45 50 54 7d 7d 29 2c 67 3b 28 67 3d 73 2e 6e 65 78 74 4e 6f 64 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 69 2e 6c 65 6e 67 74 68 3c 74 3b 29 7b 69 66 28 67 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 29 7b 76 61 72 20 Data Ascii: =document.createNodeIterator(e,NodeFilter.SHOW_ELEMENT\|NodeFilter.SHOW_TEXT,{acceptNode:function(T){return u>r\|\|i.length>t?NodeFilter.FILTER_REJECT:NodeFilter.FILTER_ACCEPT}}),g;(g=s.nextNode())!==null&&i.length<t;){if(g.nodeType===Node.ELEMENT_NODE){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	104.17.3.184	443	2352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:03 UTC	832	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 12:36:07 UTC	1343	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 12:36:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin document-policy: js-profiling origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
2024-03-28 12:36:07 UTC	112	IN	Data Raw: 72 65 66 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 36 62 37 61 39 65 34 33 65 31 36 35 37 65 35 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: referrer-policy: same-originServer: cloudflareCF-RAY: 86b7a9e43e1657e5-IADalt-svc: h3=":443"; ma=86400
2024-03-28 12:36:07 UTC	1283	IN	Data Raw: 37 61 30 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 7a03<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-03-28 12:36:07 UTC	1369	IN	Data Raw: 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 Data Ascii: ng: 0; width: 100%; height: 100%; overflow: hidden;}body { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, bli
2024-03-28 12:36:07 UTC	1369	IN	Data Raw: 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b Data Ascii: f8f8f8; stroke-miterlimit: 10;}#success-icon { display: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both;
2024-03-28 12:36:07 UTC	1369	IN	Data Raw: 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f Data Ascii: hallenge-overlay a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; backgro
2024-03-28 12:36:07 UTC	1369	IN	Data Raw: 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 Data Ascii: a:active, .theme-dark #terms a:focus { color: #949494;}.theme-dark #content { border-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme
2024-03-28 12:36:07 UTC	1369	IN	Data Raw: 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 2c 20 23 63 68 61 6c Data Ascii: ay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:visited,#challenge-error-text a:link { color: #1d1f20;}#challenge-overlay a:active, #challenge-overlay a:hover, #chal
2024-03-28 12:36:07 UTC	1369	IN	Data Raw: 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: s ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:checked ~ .mark { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; background-
2024-03-28 12:36:07 UTC	1369	IN	Data Raw: 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 31 36 70 Data Ascii: margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-left: 0;}.size-compact #branding { display: flex; flex-flow: row-reverse wrap; place-content: center flex-start; align-items: center; margin: 5px 16p
2024-03-28 12:36:07 UTC	1369	IN	Data Raw: 3b 0a 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 66 2d 73 74 61 67 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 34 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 Data Ascii: ; width: 90px; text-align: center;}.rtl .size-compact #branding { padding-right: 0; padding-left: 0; text-align: center;}.rtl .size-compact #terms { text-align: center;}.rtl .size-compact #cf-stage { padding-right: 48px;}.rtl .size-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	23.56.12.114	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:05 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 12:36:05 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=239249 Date: Thu, 28 Mar 2024 12:36:05 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	23.56.12.114	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:06 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 12:36:06 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=239339 Date: Thu, 28 Mar 2024 12:36:06 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-28 12:36:06 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49720	104.17.3.184	443	2352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:08 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=86b7a9e43e1657e5 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 12:36:08 UTC	335	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 12:36:08 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 86b7a9ffff8d87a1-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 12:36:08 UTC	1034	IN	Data Raw: 37 65 36 33 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 6a 70 2c 67 35 2c 67 36 2c 67 37 2c 67 65 2c 67 69 2c 67 6d 2c 67 6e 2c 67 51 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6c 2c 68 6d 2c 68 6e 2c 68 6f 2c 68 70 2c 68 71 2c 68 72 2c 68 73 2c 68 74 2c 68 75 2c 68 76 2c 68 77 2c 68 78 2c 68 79 2c 68 7a 2c 68 41 2c 68 42 2c 68 43 2c 68 44 2c 68 45 2c 68 46 2c 68 47 2c 68 48 2c 68 49 2c 68 4a 2c 68 4b 2c 68 4c 2c 68 4d 2c 68 4e 2c 68 4f 2c 68 50 2c 68 51 2c Data Ascii: 7e63window._cf_chl_opt.uaO=false;~function(jp,g5,g6,g7,ge,gi,gm,gn,gQ,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hl,hm,hn,ho,hp,hq,hr,hs,ht,hu,hv,hw,hx,hy,hz,hA,hB,hC,hD,hE,hF,hG,hH,hI,hJ,hK,hL,hM,hN,hO,hP,hQ,
2024-03-28 12:36:08 UTC	1369	IN	Data Raw: 29 7b 6a 72 3d 6a 71 2c 68 5e 3d 6a 5b 6a 72 28 32 39 30 34 29 5d 28 6d 29 7d 29 2c 63 3d 67 35 5b 6a 71 28 31 33 30 30 29 5d 28 63 29 2c 69 3d 5b 5d 2c 67 3d 2d 31 3b 21 66 5b 6a 71 28 35 31 35 29 5d 28 69 73 4e 61 4e 2c 6b 3d 63 5b 6a 71 28 32 39 30 34 29 5d 28 2b 2b 67 29 29 3b 69 5b 6a 71 28 32 39 31 33 29 5d 28 53 74 72 69 6e 67 5b 6a 71 28 33 33 35 39 29 5d 28 28 66 5b 6a 71 28 33 36 38 30 29 5d 28 66 5b 6a 71 28 32 32 32 31 29 5d 28 6b 2c 32 35 35 29 2c 68 29 2d 66 5b 6a 71 28 32 33 38 34 29 5d 28 67 2c 36 35 35 33 35 29 2b 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 69 5b 6a 71 28 32 34 38 32 29 5d 28 27 27 29 7d 2c 67 35 5b 6a 70 28 32 38 39 31 29 5d 3d 21 5b 5d 2c 67 35 5b 6a 70 28 32 31 31 39 29 5d 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ){jr=jq,h^=j[jr(2904)](m)}),c=g5[jq(1300)](c),i=[],g=-1;!f[jq(515)](isNaN,k=c[jq(2904)](++g));i[jq(2913)](String[jq(3359)]((f[jq(3680)](f[jq(2221)](k,255),h)-f[jq(2384)](g,65535)+65535)%255)));return i[jq(2482)]('')},g5[jp(2891)]=![],g5[jp(2119)]=function
2024-03-28 12:36:08 UTC	1369	IN	Data Raw: 28 33 33 32 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 6b 42 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 29 7b 6a 3d 28 6b 42 3d 6a 70 2c 69 3d 7b 7d 2c 69 5b 6b 42 28 33 30 39 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 21 3d 3d 44 7d 2c 69 5b 6b 42 28 38 35 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 7c 7c 44 7d 2c 69 5b 6b 42 28 36 32 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6b 42 28 32 34 37 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6b 42 28 34 34 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 6b 42 Data Ascii: (3323)]=function(f,g,h,kB,i,j,k,l,m,n,o,s,x,B){j=(kB=jp,i={},i[kB(3091)]=function(C,D){return C!==D},i[kB(855)]=function(C,D){return C\|\|D},i[kB(625)]=function(C,D){return C+D},i[kB(2477)]=function(C,D){return C+D},i[kB(447)]=function(C,D){return C+D},i[kB
2024-03-28 12:36:08 UTC	1369	IN	Data Raw: 31 35 36 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2d 6f 7d 2c 69 5b 6b 43 28 31 33 36 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 5e 6e 7d 2c 69 5b 6b 43 28 32 32 37 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 5e 6e 7d 2c 69 5b 6b 43 28 39 30 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2d 6f 7d 2c 69 5b 6b 43 28 32 31 31 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 5e 6f 7d 2c 69 5b 6b 43 28 31 31 35 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 5e 6e 7d 2c 69 5b 6b 43 28 31 30 33 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 Data Ascii: 1565)]=function(n,o){return n-o},i[kC(1367)]=function(n,o){return o^n},i[kC(2275)]=function(n,o){return o^n},i[kC(904)]=function(n,o){return n-o},i[kC(2116)]=function(n,o){return n^o},i[kC(1158)]=function(n,o){return o^n},i[kC(1032)]=function(n,o){return
2024-03-28 12:36:08 UTC	1369	IN	Data Raw: 3d 5b 6b 43 28 31 39 31 36 29 2b 64 2c 6a 5b 6b 43 28 33 31 33 33 29 5d 2b 65 2c 6a 5b 6b 43 28 32 37 31 38 29 5d 2b 66 2c 6a 5b 6b 43 28 36 31 36 29 5d 28 6a 5b 6b 43 28 33 36 31 39 29 5d 2c 67 29 2c 6a 5b 6b 43 28 33 36 33 31 29 5d 28 6b 43 28 33 35 35 30 29 2c 4a 53 4f 4e 5b 6b 43 28 31 38 35 38 29 5d 28 68 29 29 5d 5b 6b 43 28 32 34 38 32 29 5d 28 6a 5b 6b 43 28 32 36 31 38 29 5d 29 2c 67 35 5b 6b 43 28 31 37 38 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6b 45 29 7b 6b 45 3d 6b 43 2c 67 35 5b 6b 45 28 33 33 32 33 29 5d 28 6d 2c 75 6e 64 65 66 69 6e 65 64 2c 6b 45 28 31 39 35 35 29 29 7d 2c 31 30 29 2c 67 35 5b 6b 43 28 31 37 38 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6b 46 29 7b 6b 46 3d 6b 43 2c 67 35 5b 6b 46 28 33 37 32 35 29 5d 28 29 7d 2c 31 65 33 29 Data Ascii: =[kC(1916)+d,j[kC(3133)]+e,j[kC(2718)]+f,j[kC(616)](j[kC(3619)],g),j[kC(3631)](kC(3550),JSON[kC(1858)](h))][kC(2482)](j[kC(2618)]),g5[kC(1780)](function(kE){kE=kC,g5[kE(3323)](m,undefined,kE(1955))},10),g5[kC(1780)](function(kF){kF=kC,g5[kF(3725)]()},1e3)
2024-03-28 12:36:08 UTC	1369	IN	Data Raw: 43 28 32 32 39 38 29 5d 28 31 39 34 2e 31 38 5e 73 2c 74 68 69 73 2e 67 29 5d 26 74 68 69 73 2e 68 5b 6a 5b 6b 43 28 32 34 35 32 29 5d 28 76 5e 32 33 31 2c 74 68 69 73 2e 67 29 5d 29 3a 31 31 39 3d 3d 3d 54 3f 28 78 3d 31 38 36 5e 6f 2c 42 3d 6a 5b 6b 43 28 33 37 32 32 29 5d 28 74 68 69 73 2e 68 5b 73 5e 31 32 37 2e 33 34 5e 74 68 69 73 2e 67 5d 2c 74 68 69 73 2e 68 5b 39 38 2e 38 35 5e 76 5e 74 68 69 73 2e 67 5d 29 29 3a 6a 5b 6b 43 28 31 37 35 37 29 5d 28 32 32 34 2c 55 29 3f 28 78 3d 6a 5b 6b 43 28 31 31 35 38 29 5d 28 6f 2c 32 32 29 2c 42 3d 6a 5b 6b 43 28 32 32 30 31 29 5d 28 74 68 69 73 2e 68 5b 6a 5b 6b 43 28 33 37 37 35 29 5d 28 73 2c 31 35 39 29 5e 74 68 69 73 2e 67 5d 2c 74 68 69 73 2e 68 5b 6a 5b 6b 43 28 32 32 30 31 29 5d 28 6a 5b 6b 43 28 33 Data Ascii: C(2298)](194.18^s,this.g)]&this.h[j[kC(2452)](v^231,this.g)]):119===T?(x=186^o,B=j[kC(3722)](this.h[s^127.34^this.g],this.h[98.85^v^this.g])):j[kC(1757)](224,U)?(x=j[kC(1158)](o,22),B=j[kC(2201)](this.h[j[kC(3775)](s,159)^this.g],this.h[j[kC(2201)](j[kC(3
2024-03-28 12:36:08 UTC	1369	IN	Data Raw: 5d 3d 6a 70 28 33 37 37 30 29 2c 67 53 5b 6a 70 28 32 38 37 35 29 5d 3d 6a 70 28 33 35 39 31 29 2c 67 53 5b 6a 70 28 31 30 39 33 29 5d 3d 6a 70 28 32 36 31 31 29 2c 67 53 5b 6a 70 28 33 35 38 32 29 5d 3d 6a 70 28 37 36 37 29 2c 67 53 5b 6a 70 28 33 36 32 39 29 5d 3d 6a 70 28 31 38 36 33 29 2c 67 53 5b 6a 70 28 33 32 33 30 29 5d 3d 6a 70 28 32 38 35 37 29 2c 67 53 5b 6a 70 28 32 33 35 34 29 5d 3d 6a 70 28 33 30 33 32 29 2c 67 53 5b 6a 70 28 32 38 31 33 29 5d 3d 6a 70 28 33 30 38 31 29 2c 67 53 5b 6a 70 28 31 32 32 39 29 5d 3d 6a 70 28 32 35 34 33 29 2c 67 53 5b 6a 70 28 32 37 32 30 29 5d 3d 6a 70 28 33 30 34 35 29 2c 67 53 5b 6a 70 28 32 37 38 29 5d 3d 6a 70 28 32 35 31 31 29 2c 67 53 5b 6a 70 28 33 32 37 29 5d 3d 6a 70 28 31 34 31 29 2c 67 53 5b 6a 70 28 Data Ascii: ]=jp(3770),gS[jp(2875)]=jp(3591),gS[jp(1093)]=jp(2611),gS[jp(3582)]=jp(767),gS[jp(3629)]=jp(1863),gS[jp(3230)]=jp(2857),gS[jp(2354)]=jp(3032),gS[jp(2813)]=jp(3081),gS[jp(1229)]=jp(2543),gS[jp(2720)]=jp(3045),gS[jp(278)]=jp(2511),gS[jp(327)]=jp(141),gS[jp(
2024-03-28 12:36:08 UTC	1369	IN	Data Raw: 28 31 36 38 36 29 2c 67 54 5b 6a 70 28 31 30 39 33 29 5d 3d 6a 70 28 32 36 30 31 29 2c 67 54 5b 6a 70 28 33 35 38 32 29 5d 3d 6a 70 28 32 39 30 33 29 2c 67 54 5b 6a 70 28 33 36 32 39 29 5d 3d 6a 70 28 31 33 34 36 29 2c 67 54 5b 6a 70 28 33 32 33 30 29 5d 3d 6a 70 28 32 35 37 38 29 2c 67 54 5b 6a 70 28 32 33 35 34 29 5d 3d 6a 70 28 32 30 34 36 29 2c 67 54 5b 6a 70 28 32 38 31 33 29 5d 3d 6a 70 28 32 30 32 36 29 2c 67 54 5b 6a 70 28 31 32 32 39 29 5d 3d 6a 70 28 31 38 39 38 29 2c 67 54 5b 6a 70 28 32 37 32 30 29 5d 3d 6a 70 28 31 35 34 32 29 2c 67 54 5b 6a 70 28 32 37 38 29 5d 3d 6a 70 28 31 35 37 32 29 2c 67 54 5b 6a 70 28 33 32 37 29 5d 3d 6a 70 28 33 38 31 34 29 2c 67 54 5b 6a 70 28 31 30 34 39 29 5d 3d 6a 70 28 32 36 30 32 29 2c 67 54 5b 6a 70 28 33 33 Data Ascii: (1686),gT[jp(1093)]=jp(2601),gT[jp(3582)]=jp(2903),gT[jp(3629)]=jp(1346),gT[jp(3230)]=jp(2578),gT[jp(2354)]=jp(2046),gT[jp(2813)]=jp(2026),gT[jp(1229)]=jp(1898),gT[jp(2720)]=jp(1542),gT[jp(278)]=jp(1572),gT[jp(327)]=jp(3814),gT[jp(1049)]=jp(2602),gT[jp(33
2024-03-28 12:36:08 UTC	1369	IN	Data Raw: 6a 70 28 32 37 33 34 29 2c 67 55 5b 6a 70 28 33 35 38 32 29 5d 3d 6a 70 28 32 35 35 37 29 2c 67 55 5b 6a 70 28 33 36 32 39 29 5d 3d 6a 70 28 38 31 30 29 2c 67 55 5b 6a 70 28 33 32 33 30 29 5d 3d 6a 70 28 34 31 32 29 2c 67 55 5b 6a 70 28 32 33 35 34 29 5d 3d 6a 70 28 31 35 31 34 29 2c 67 55 5b 6a 70 28 32 38 31 33 29 5d 3d 6a 70 28 33 37 31 38 29 2c 67 55 5b 6a 70 28 31 32 32 39 29 5d 3d 6a 70 28 36 31 39 29 2c 67 55 5b 6a 70 28 32 37 32 30 29 5d 3d 6a 70 28 32 33 31 29 2c 67 55 5b 6a 70 28 32 37 38 29 5d 3d 6a 70 28 34 34 34 29 2c 67 55 5b 6a 70 28 33 32 37 29 5d 3d 6a 70 28 33 34 36 32 29 2c 67 55 5b 6a 70 28 31 30 34 39 29 5d 3d 6a 70 28 33 36 30 35 29 2c 67 55 5b 6a 70 28 33 33 33 34 29 5d 3d 6a 70 28 31 31 31 31 29 2c 67 55 5b 6a 70 28 32 35 34 32 29 Data Ascii: jp(2734),gU[jp(3582)]=jp(2557),gU[jp(3629)]=jp(810),gU[jp(3230)]=jp(412),gU[jp(2354)]=jp(1514),gU[jp(2813)]=jp(3718),gU[jp(1229)]=jp(619),gU[jp(2720)]=jp(231),gU[jp(278)]=jp(444),gU[jp(327)]=jp(3462),gU[jp(1049)]=jp(3605),gU[jp(3334)]=jp(1111),gU[jp(2542)
2024-03-28 12:36:08 UTC	1369	IN	Data Raw: 30 39 37 29 2c 67 56 5b 6a 70 28 33 36 32 39 29 5d 3d 6a 70 28 33 35 39 38 29 2c 67 56 5b 6a 70 28 33 32 33 30 29 5d 3d 6a 70 28 32 37 35 35 29 2c 67 56 5b 6a 70 28 32 33 35 34 29 5d 3d 6a 70 28 33 36 38 31 29 2c 67 56 5b 6a 70 28 32 38 31 33 29 5d 3d 6a 70 28 33 33 32 36 29 2c 67 56 5b 6a 70 28 31 32 32 39 29 5d 3d 6a 70 28 31 33 38 34 29 2c 67 56 5b 6a 70 28 32 37 32 30 29 5d 3d 6a 70 28 31 37 32 36 29 2c 67 56 5b 6a 70 28 32 37 38 29 5d 3d 6a 70 28 31 39 37 33 29 2c 67 56 5b 6a 70 28 33 32 37 29 5d 3d 6a 70 28 31 34 32 36 29 2c 67 56 5b 6a 70 28 31 30 34 39 29 5d 3d 6a 70 28 34 38 34 29 2c 67 56 5b 6a 70 28 33 33 33 34 29 5d 3d 6a 70 28 33 34 30 29 2c 67 56 5b 6a 70 28 32 35 34 32 29 5d 3d 6a 70 28 32 33 30 35 29 2c 67 56 5b 6a 70 28 33 35 34 38 29 5d Data Ascii: 097),gV[jp(3629)]=jp(3598),gV[jp(3230)]=jp(2755),gV[jp(2354)]=jp(3681),gV[jp(2813)]=jp(3326),gV[jp(1229)]=jp(1384),gV[jp(2720)]=jp(1726),gV[jp(278)]=jp(1973),gV[jp(327)]=jp(1426),gV[jp(1049)]=jp(484),gV[jp(3334)]=jp(340),gV[jp(2542)]=jp(2305),gV[jp(3548)]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49721	104.17.3.184	443	2352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:08 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 12:36:08 UTC	248	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 12:36:08 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 86b7aa0008bc82db-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 12:36:08 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2024-03-28 12:36:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49722	104.17.2.184	443	2352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:08 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 12:36:08 UTC	248	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 12:36:08 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 86b7aa039871081b-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 12:36:08 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2024-03-28 12:36:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49723	104.17.3.184	443	2352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:09 UTC	832	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 12:36:09 UTC	1343	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 12:36:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin document-policy: js-profiling origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
2024-03-28 12:36:09 UTC	112	IN	Data Raw: 72 65 66 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 36 62 37 61 61 30 35 39 63 33 37 30 35 37 66 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: referrer-policy: same-originServer: cloudflareCF-RAY: 86b7aa059c37057f-IADalt-svc: h3=":443"; ma=86400
2024-03-28 12:36:09 UTC	1283	IN	Data Raw: 37 61 30 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 7a03<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 Data Ascii: ng: 0; width: 100%; height: 100%; overflow: hidden;}body { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, bli
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b Data Ascii: f8f8f8; stroke-miterlimit: 10;}#success-icon { display: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both;
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f Data Ascii: hallenge-overlay a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; backgro
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 Data Ascii: a:active, .theme-dark #terms a:focus { color: #949494;}.theme-dark #content { border-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 2c 20 23 63 68 61 6c Data Ascii: ay a,#challenge-error-text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:visited,#challenge-error-text a:link { color: #1d1f20;}#challenge-overlay a:active, #challenge-overlay a:hover, #chal
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: s ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:focus ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:checked ~ .mark { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; background-
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 66 6c 6f 77 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 20 77 72 61 70 3b 0a 20 20 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 66 6c 65 78 2d 73 74 61 72 74 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 31 36 70 Data Ascii: margin-bottom: 0; height: 22px;}.size-compact .cb-container { margin-top: 3px; margin-left: 0;}.size-compact #branding { display: flex; flex-flow: row-reverse wrap; place-content: center flex-start; align-items: center; margin: 5px 16p
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 3b 0a 20 20 77 69 64 74 68 3a 20 39 30 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 66 2d 73 74 61 67 65 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 34 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 2e 73 69 7a 65 2d 63 Data Ascii: ; width: 90px; text-align: center;}.rtl .size-compact #branding { padding-right: 0; padding-left: 0; text-align: center;}.rtl .size-compact #terms { text-align: center;}.rtl .size-compact #cf-stage { padding-right: 48px;}.rtl .size-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49724	104.17.3.184	443	2352	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:09 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=86b7aa059c37057f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2fkis/0x4AAAAAAAVxD-iQ5yCy4N0a/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 12:36:09 UTC	335	IN	HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 12:36:09 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 86b7aa081a28061d-IAD alt-svc: h3=":443"; ma=86400
2024-03-28 12:36:09 UTC	1034	IN	Data Raw: 37 65 36 33 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 6a 70 2c 67 35 2c 67 36 2c 67 61 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c Data Ascii: 7e63window._cf_chl_opt.uaO=false;~function(jp,g5,g6,ga,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 75 72 63 65 27 3a 6a 72 28 32 32 39 39 29 2c 27 77 69 64 67 65 74 49 64 27 3a 67 35 5b 6a 72 28 34 37 37 29 5d 5b 6a 72 28 33 30 32 32 29 5d 2c 27 65 76 65 6e 74 27 3a 6a 72 28 33 32 37 38 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 67 35 5b 6a 72 28 34 37 37 29 5d 5b 6a 72 28 32 32 35 35 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 67 35 5b 6a 72 28 34 37 37 29 5d 5b 6a 72 28 36 32 33 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 6a 72 28 32 39 32 38 29 5d 2c 27 72 63 56 27 3a 67 35 5b 6a 72 28 34 37 37 29 5d 5b 6a 72 28 31 37 39 37 29 5d 7d 2c 27 2a 27 29 29 3a 65 28 66 29 29 7d 2c 67 29 7d 2c 67 35 5b 6a 70 28 32 34 36 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 6a 73 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 29 7b 6a 3d 28 Data Ascii: urce':jr(2299),'widgetId':g5[jr(477)][jr(3022)],'event':jr(3278),'cfChlOut':g5[jr(477)][jr(2255)],'cfChlOutS':g5[jr(477)][jr(623)],'code':e[jr(2928)],'rcV':g5[jr(477)][jr(1797)]},'*')):e(f))},g)},g5[jp(2469)]=function(f,g,h,js,i,j,k,l,m,n,o,s,x,B,C,D){j=(
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 6a 74 28 33 31 35 31 29 5d 3d 6a 74 28 32 32 39 39 29 2c 69 5b 6a 74 28 32 35 32 38 29 5d 3d 6a 74 28 33 32 37 38 29 2c 69 5b 6a 74 28 31 37 30 31 29 5d 3d 6a 74 28 31 38 32 37 29 2c 69 5b 6a 74 28 35 34 31 29 5d 3d 6a 74 28 32 37 39 30 29 2c 69 5b 6a 74 28 33 30 39 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2b 6f 7d 2c 69 5b 6a 74 28 33 38 37 39 29 5d 3d 6a 74 28 32 37 35 30 29 2c 6a 3d 69 2c 6b 3d 64 5b 6a 74 28 32 35 36 35 29 5d 28 29 2c 6c 3d 6a 74 28 34 35 37 29 2c 6b 5b 6a 74 28 38 35 37 29 5d 28 6c 29 3e 2d 31 29 3f 67 35 5b 6a 74 28 31 30 32 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6a 75 29 7b 6a 75 3d 6a 74 2c 67 35 5b 6a 75 28 39 34 31 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6d 3d 5b 6a 74 28 32 39 34 32 29 2b 64 2c Data Ascii: jt(3151)]=jt(2299),i[jt(2528)]=jt(3278),i[jt(1701)]=jt(1827),i[jt(541)]=jt(2790),i[jt(3099)]=function(n,o){return n+o},i[jt(3879)]=jt(2750),j=i,k=d[jt(2565)](),l=jt(457),k[jt(857)](l)>-1)?g5[jt(1025)](function(ju){ju=jt,g5[ju(941)]()},1e3):(m=[jt(2942)+d,
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 70 28 33 37 39 32 29 5d 3d 6a 70 28 31 33 38 34 29 2c 67 63 5b 6a 70 28 31 35 38 31 29 5d 3d 6a 70 28 31 36 39 36 29 2c 67 63 5b 6a 70 28 33 38 39 38 29 5d 3d 6a 70 28 33 39 33 37 29 2c 67 63 5b 6a 70 28 33 35 37 38 29 5d 3d 6a 70 28 38 32 35 29 2c 67 63 5b 6a 70 28 32 31 34 31 29 5d 3d 6a 70 28 31 37 36 32 29 2c 67 63 5b 6a 70 28 32 32 36 30 29 5d 3d 6a 70 28 31 37 32 36 29 2c 67 63 5b 6a 70 28 33 38 36 30 29 5d 3d 6a 70 28 33 36 33 37 29 2c 67 63 5b 6a 70 28 31 35 32 34 29 5d 3d 6a 70 28 32 31 34 32 29 2c 67 63 5b 6a 70 28 33 30 30 37 29 5d 3d 6a 70 28 31 34 33 33 29 2c 67 63 5b 6a 70 28 39 36 30 29 5d 3d 6a 70 28 36 35 30 29 2c 67 63 5b 6a 70 28 33 34 37 36 29 5d 3d 6a 70 28 31 38 31 31 29 2c 67 63 5b 6a 70 28 33 38 35 35 29 5d 3d 6a 70 28 32 36 36 39 Data Ascii: p(3792)]=jp(1384),gc[jp(1581)]=jp(1696),gc[jp(3898)]=jp(3937),gc[jp(3578)]=jp(825),gc[jp(2141)]=jp(1762),gc[jp(2260)]=jp(1726),gc[jp(3860)]=jp(3637),gc[jp(1524)]=jp(2142),gc[jp(3007)]=jp(1433),gc[jp(960)]=jp(650),gc[jp(3476)]=jp(1811),gc[jp(3855)]=jp(2669
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 64 5b 6a 70 28 31 35 38 31 29 5d 3d 6a 70 28 34 31 39 29 2c 67 64 5b 6a 70 28 33 38 39 38 29 5d 3d 6a 70 28 33 38 34 29 2c 67 64 5b 6a 70 28 33 35 37 38 29 5d 3d 6a 70 28 32 38 32 35 29 2c 67 64 5b 6a 70 28 32 31 34 31 29 5d 3d 6a 70 28 34 35 33 29 2c 67 64 5b 6a 70 28 32 32 36 30 29 5d 3d 6a 70 28 32 36 33 38 29 2c 67 64 5b 6a 70 28 33 38 36 30 29 5d 3d 6a 70 28 31 31 33 36 29 2c 67 64 5b 6a 70 28 31 35 32 34 29 5d 3d 6a 70 28 33 38 30 31 29 2c 67 64 5b 6a 70 28 33 30 30 37 29 5d 3d 6a 70 28 32 39 36 33 29 2c 67 64 5b 6a 70 28 39 36 30 29 5d 3d 6a 70 28 31 35 39 38 29 2c 67 64 5b 6a 70 28 33 34 37 36 29 5d 3d 6a 70 28 32 32 35 34 29 2c 67 64 5b 6a 70 28 33 38 35 35 29 5d 3d 6a 70 28 31 30 30 37 29 2c 67 64 5b 6a 70 28 34 31 35 29 5d 3d 6a 70 28 32 33 30 Data Ascii: d[jp(1581)]=jp(419),gd[jp(3898)]=jp(384),gd[jp(3578)]=jp(2825),gd[jp(2141)]=jp(453),gd[jp(2260)]=jp(2638),gd[jp(3860)]=jp(1136),gd[jp(1524)]=jp(3801),gd[jp(3007)]=jp(2963),gd[jp(960)]=jp(1598),gd[jp(3476)]=jp(2254),gd[jp(3855)]=jp(1007),gd[jp(415)]=jp(230
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 29 2c 67 65 5b 6a 70 28 33 38 39 38 29 5d 3d 6a 70 28 33 30 35 38 29 2c 67 65 5b 6a 70 28 33 35 37 38 29 5d 3d 6a 70 28 31 31 35 38 29 2c 67 65 5b 6a 70 28 32 31 34 31 29 5d 3d 6a 70 28 39 35 35 29 2c 67 65 5b 6a 70 28 32 32 36 30 29 5d 3d 6a 70 28 32 39 30 35 29 2c 67 65 5b 6a 70 28 33 38 36 30 29 5d 3d 6a 70 28 33 37 33 34 29 2c 67 65 5b 6a 70 28 31 35 32 34 29 5d 3d 6a 70 28 32 35 31 39 29 2c 67 65 5b 6a 70 28 33 30 30 37 29 5d 3d 6a 70 28 32 38 31 37 29 2c 67 65 5b 6a 70 28 39 36 30 29 5d 3d 6a 70 28 32 36 34 39 29 2c 67 65 5b 6a 70 28 33 34 37 36 29 5d 3d 6a 70 28 32 30 36 38 29 2c 67 65 5b 6a 70 28 33 38 35 35 29 5d 3d 6a 70 28 31 36 37 38 29 2c 67 65 5b 6a 70 28 34 31 35 29 5d 3d 6a 70 28 33 39 35 38 29 2c 67 65 5b 6a 70 28 33 36 38 33 29 5d 3d 6a Data Ascii: ),ge[jp(3898)]=jp(3058),ge[jp(3578)]=jp(1158),ge[jp(2141)]=jp(955),ge[jp(2260)]=jp(2905),ge[jp(3860)]=jp(3734),ge[jp(1524)]=jp(2519),ge[jp(3007)]=jp(2817),ge[jp(960)]=jp(2649),ge[jp(3476)]=jp(2068),ge[jp(3855)]=jp(1678),ge[jp(415)]=jp(3958),ge[jp(3683)]=j
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 34 33 29 2c 67 66 5b 6a 70 28 33 35 37 38 29 5d 3d 6a 70 28 33 34 37 35 29 2c 67 66 5b 6a 70 28 32 31 34 31 29 5d 3d 6a 70 28 33 31 38 36 29 2c 67 66 5b 6a 70 28 32 32 36 30 29 5d 3d 6a 70 28 32 31 32 35 29 2c 67 66 5b 6a 70 28 33 38 36 30 29 5d 3d 6a 70 28 31 38 31 37 29 2c 67 66 5b 6a 70 28 31 35 32 34 29 5d 3d 6a 70 28 33 36 34 34 29 2c 67 66 5b 6a 70 28 33 30 30 37 29 5d 3d 6a 70 28 33 35 39 38 29 2c 67 66 5b 6a 70 28 39 36 30 29 5d 3d 6a 70 28 32 33 36 37 29 2c 67 66 5b 6a 70 28 33 34 37 36 29 5d 3d 6a 70 28 32 35 34 32 29 2c 67 66 5b 6a 70 28 33 38 35 35 29 5d 3d 6a 70 28 33 33 31 30 29 2c 67 66 5b 6a 70 28 34 31 35 29 5d 3d 6a 70 28 33 38 30 30 29 2c 67 66 5b 6a 70 28 33 36 38 33 29 5d 3d 6a 70 28 32 37 36 38 29 2c 67 66 5b 6a 70 28 32 32 30 37 29 Data Ascii: 43),gf[jp(3578)]=jp(3475),gf[jp(2141)]=jp(3186),gf[jp(2260)]=jp(2125),gf[jp(3860)]=jp(1817),gf[jp(1524)]=jp(3644),gf[jp(3007)]=jp(3598),gf[jp(960)]=jp(2367),gf[jp(3476)]=jp(2542),gf[jp(3855)]=jp(3310),gf[jp(415)]=jp(3800),gf[jp(3683)]=jp(2768),gf[jp(2207)
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 70 28 31 39 31 34 29 2c 67 67 5b 6a 70 28 32 31 34 31 29 5d 3d 6a 70 28 32 33 36 30 29 2c 67 67 5b 6a 70 28 32 32 36 30 29 5d 3d 6a 70 28 33 38 32 34 29 2c 67 67 5b 6a 70 28 33 38 36 30 29 5d 3d 6a 70 28 31 39 32 32 29 2c 67 67 5b 6a 70 28 31 35 32 34 29 5d 3d 6a 70 28 33 35 35 32 29 2c 67 67 5b 6a 70 28 33 30 30 37 29 5d 3d 6a 70 28 33 30 32 39 29 2c 67 67 5b 6a 70 28 39 36 30 29 5d 3d 6a 70 28 31 31 33 37 29 2c 67 67 5b 6a 70 28 33 34 37 36 29 5d 3d 6a 70 28 31 31 33 33 29 2c 67 67 5b 6a 70 28 33 38 35 35 29 5d 3d 6a 70 28 32 39 32 34 29 2c 67 67 5b 6a 70 28 34 31 35 29 5d 3d 6a 70 28 34 35 30 29 2c 67 67 5b 6a 70 28 33 36 38 33 29 5d 3d 6a 70 28 32 36 37 32 29 2c 67 67 5b 6a 70 28 32 32 30 37 29 5d 3d 6a 70 28 33 38 32 38 29 2c 67 67 5b 6a 70 28 39 34 Data Ascii: p(1914),gg[jp(2141)]=jp(2360),gg[jp(2260)]=jp(3824),gg[jp(3860)]=jp(1922),gg[jp(1524)]=jp(3552),gg[jp(3007)]=jp(3029),gg[jp(960)]=jp(1137),gg[jp(3476)]=jp(1133),gg[jp(3855)]=jp(2924),gg[jp(415)]=jp(450),gg[jp(3683)]=jp(2672),gg[jp(2207)]=jp(3828),gg[jp(94
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 5d 3d 6a 70 28 39 36 32 29 2c 67 68 5b 6a 70 28 32 32 36 30 29 5d 3d 6a 70 28 32 32 35 36 29 2c 67 68 5b 6a 70 28 33 38 36 30 29 5d 3d 6a 70 28 32 37 34 30 29 2c 67 68 5b 6a 70 28 31 35 32 34 29 5d 3d 6a 70 28 32 36 37 35 29 2c 67 68 5b 6a 70 28 33 30 30 37 29 5d 3d 6a 70 28 31 35 35 38 29 2c 67 68 5b 6a 70 28 39 36 30 29 5d 3d 6a 70 28 33 36 36 33 29 2c 67 68 5b 6a 70 28 33 34 37 36 29 5d 3d 6a 70 28 35 38 35 29 2c 67 68 5b 6a 70 28 33 38 35 35 29 5d 3d 6a 70 28 33 36 34 39 29 2c 67 68 5b 6a 70 28 34 31 35 29 5d 3d 6a 70 28 31 31 33 39 29 2c 67 68 5b 6a 70 28 33 36 38 33 29 5d 3d 6a 70 28 31 38 36 37 29 2c 67 68 5b 6a 70 28 32 32 30 37 29 5d 3d 6a 70 28 31 39 30 33 29 2c 67 68 5b 6a 70 28 39 34 36 29 5d 3d 6a 70 28 33 33 37 39 29 2c 67 68 5b 6a 70 28 31 Data Ascii: ]=jp(962),gh[jp(2260)]=jp(2256),gh[jp(3860)]=jp(2740),gh[jp(1524)]=jp(2675),gh[jp(3007)]=jp(1558),gh[jp(960)]=jp(3663),gh[jp(3476)]=jp(585),gh[jp(3855)]=jp(3649),gh[jp(415)]=jp(1139),gh[jp(3683)]=jp(1867),gh[jp(2207)]=jp(1903),gh[jp(946)]=jp(3379),gh[jp(1
2024-03-28 12:36:09 UTC	1369	IN	Data Raw: 32 32 36 30 29 5d 3d 6a 70 28 31 30 35 39 29 2c 67 69 5b 6a 70 28 33 38 36 30 29 5d 3d 6a 70 28 31 35 30 31 29 2c 67 69 5b 6a 70 28 31 35 32 34 29 5d 3d 6a 70 28 32 38 36 31 29 2c 67 69 5b 6a 70 28 33 30 30 37 29 5d 3d 6a 70 28 31 30 36 37 29 2c 67 69 5b 6a 70 28 39 36 30 29 5d 3d 6a 70 28 33 33 37 33 29 2c 67 69 5b 6a 70 28 33 34 37 36 29 5d 3d 6a 70 28 31 35 34 30 29 2c 67 69 5b 6a 70 28 33 38 35 35 29 5d 3d 6a 70 28 32 32 36 31 29 2c 67 69 5b 6a 70 28 34 31 35 29 5d 3d 6a 70 28 31 38 32 38 29 2c 67 69 5b 6a 70 28 33 36 38 33 29 5d 3d 6a 70 28 32 39 30 32 29 2c 67 69 5b 6a 70 28 32 32 30 37 29 5d 3d 6a 70 28 33 30 34 35 29 2c 67 69 5b 6a 70 28 39 34 36 29 5d 3d 6a 70 28 36 33 30 29 2c 67 69 5b 6a 70 28 31 36 39 33 29 5d 3d 6a 70 28 31 38 39 37 29 2c 67 Data Ascii: 2260)]=jp(1059),gi[jp(3860)]=jp(1501),gi[jp(1524)]=jp(2861),gi[jp(3007)]=jp(1067),gi[jp(960)]=jp(3373),gi[jp(3476)]=jp(1540),gi[jp(3855)]=jp(2261),gi[jp(415)]=jp(1828),gi[jp(3683)]=jp(2902),gi[jp(2207)]=jp(3045),gi[jp(946)]=jp(630),gi[jp(1693)]=jp(1897),g

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49731	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 12:36:18 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1711629346056&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-03-28 12:36:18 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-03-28 12:36:18 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-03-28 12:36:18 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: EFD874E969CB4E36BC06B06286E9D895 Ref B: LAX311000110049 Ref C: 2024-03-28T12:36:18Z Date: Thu, 28 Mar 2024 12:36:18 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1711629378.81a3a759

Target ID:	0
Start time:	13:35:56
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:35:58
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2212,i,13425400877421573205,15424258316982264938,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:36:00
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20="
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20=

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 6388, Parent PID: 5464

Windows Analysis Report
https://adobeacrobatreviewandsigndocumet.se-sto-1.linodeobjects.com/outlook-office-com-automailerbj-7634-3434-234-2324-azure4324-office3653-7644-4443-434.html#aG1hcnRpbkBoZWFkcmVzb3VyY2luZy5jb20=