Edit tour

Windows Analysis Report
https://cal.frontapp.com/glgroup/abrucia/1c1a930a

Overview

General Information

Sample URL:	https://cal.frontapp.com/glgroup/abrucia/1c1a930a
Analysis ID:	1426988
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3428 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2200 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2028,i,2845457270963885051,8289784317475384035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cal.frontapp.com/glgroup/abrucia/1c1a930a" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49748 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /glgroup/abrucia/1c1a930a HTTP/1.1Host: cal.frontapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/main.329eb71bf02c6b13d18c.js HTTP/1.1Host: cal.frontapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cal.frontapp.com/glgroup/abrucia/1c1a930aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/1/scheduling/companies/glgroup/abrucia/1c1a930a HTTP/1.1Host: cal.frontapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-Front-Scheduling-Build-Timestamp: 1698816556271sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cal.frontapp.com/glgroup/abrucia/1c1a930aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/1/scheduling/link/UN7FNjW_RnaJK2-1yq_AUQe5bEg3_3RNvOFlRzNKjZQ373ufX_4qGtSk6uVssspvimznMQirra5EbfrBfGQob2nc/availability?range_start=1713293999762&range_end=1718477999762&now=1713293999762 HTTP/1.1Host: cal.frontapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /X-Front-Scheduling-Build-Timestamp: 1698816556271sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cal.frontapp.com/glgroup/abrucia/1c1a930aAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/1/scheduling/companies/glgroup/abrucia/1c1a930a HTTP/1.1Host: cal.frontapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /api/1/scheduling/link/UN7FNjW_RnaJK2-1yq_AUQe5bEg3_3RNvOFlRzNKjZQ373ufX_4qGtSk6uVssspvimznMQirra5EbfrBfGQob2nc/availability?range_start=1713293999762&range_end=1718477999762&now=1713293999762 HTTP/1.1Host: cal.frontapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: cal.frontapp.com

Source: unknown

HTTP traffic detected: POST / HTTP/1.1Host: sessions.bugsnag.comConnection: keep-aliveContent-Length: 504sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0Bugsnag-Api-Key: ed2dde39ef27f43adebd4c9e3f309172User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonBugsnag-Payload-Version: 1Bugsnag-Sent-At: 2024-04-16T18:59:58.715Zsec-ch-ua-platform: "Windows"Accept: */*Origin: https://cal.frontapp.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_48.2.dr	String found in binary or memory: https://calendar.frontapp.com/api/1/scheduling/link/UN7FNjW_RnaJK2-1yq_AUQe5bEg3_3RNvOFlRzNKjZQ373uf
Source: chromecache_49.2.dr	String found in binary or memory: https://calendar.frontapp.com/api/1/scheduling/link/vc01Pz_2pVj2d167XYhWVZz1iTxyeQVRjMoeFXBzCJYhATDL
Source: chromecache_45.2.dr	String found in binary or memory: https://front.com/
Source: chromecache_45.2.dr	String found in binary or memory: https://frontapp.com/extra/
Source: chromecache_45.2.dr	String found in binary or memory: https://notify.bugsnag.com
Source: chromecache_45.2.dr	String found in binary or memory: https://sessions.bugsnag.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49748 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/10@8/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2028,i,2845457270963885051,8289784317475384035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cal.frontapp.com/glgroup/abrucia/1c1a930a"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2028,i,2845457270963885051,8289784317475384035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
cal.frontapp.com	18.160.78.87	true	false	high
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
sessions.bugsnag.com	35.190.88.7	true	false	high
www.google.com	64.233.185.99	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://cal.frontapp.com/api/1/scheduling/companies/glgroup/abrucia/1c1a930a	false	high
https://cal.frontapp.com/glgroup/abrucia/1c1a930a	false	high
https://sessions.bugsnag.com/	false	high
https://cal.frontapp.com/api/1/scheduling/link/UN7FNjW_RnaJK2-1yq_AUQe5bEg3_3RNvOFlRzNKjZQ373ufX_4qGtSk6uVssspvimznMQirra5EbfrBfGQob2nc/availability?range_start=1713293999762&range_end=1718477999762&now=1713293999762	false	high
https://cal.frontapp.com/app/main.329eb71bf02c6b13d18c.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://calendar.frontapp.com/api/1/scheduling/link/UN7FNjW_RnaJK2-1yq_AUQe5bEg3_3RNvOFlRzNKjZQ373uf	chromecache_48.2.dr	false	high
https://sessions.bugsnag.com	chromecache_45.2.dr	false	high
https://front.com/	chromecache_45.2.dr	false	unknown
https://calendar.frontapp.com/api/1/scheduling/link/vc01Pz_2pVj2d167XYhWVZz1iTxyeQVRjMoeFXBzCJYhATDL	chromecache_49.2.dr	false	high
https://frontapp.com/extra/	chromecache_45.2.dr	false	high
https://notify.bugsnag.com	chromecache_45.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.85.151.115	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.160.78.87	cal.frontapp.com	United States	3	MIT-GATEWAYSUS	false
35.190.88.7	sessions.bugsnag.com	United States	15169	GOOGLEUS	false
64.233.185.99	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1426988
Start date and time:	2024-04-16 20:59:04 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://cal.frontapp.com/glgroup/abrucia/1c1a930a
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/10@8/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.9.94, 142.250.105.84, 64.233.185.138, 64.233.185.100, 64.233.185.101, 64.233.185.102, 64.233.185.113, 64.233.185.139, 34.104.35.123, 40.68.123.157, 199.232.214.172, 20.242.39.171, 192.229.211.108, 20.3.187.198, 172.217.215.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://cal.frontapp.com/glgroup/abrucia/1c1a930a

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	24282
Entropy (8bit):	3.9189012671717562
Encrypted:	false
SSDEEP:	192:YEIujseW2XdQG+sIVnd6MjtFb/8naVGLRCDpkW:YEtjzvdJ+sIVnAMtFbUn+GLRCDpp
MD5:	16609101B11FFA3F5BF4F09441351F43
SHA1:	D4ECB1689E68DDA001B2156D44108F44C1DF96C4
SHA-256:	9F5FF8113978CEF2298214664A660AA25656FD5EEE8D6945A1899B6C7D403E50
SHA-512:	6352594423BDD3C82045C1DE8F2F3EA7AF2FFE0C1FFE2B348BFE44279BF1CF817020EF1E4A0CF5D96608CDB135D5EADCA2CBB022AD17255BF5CE87F8822809F3
Malicious:	false
Reputation:	low
URL:	https://cal.frontapp.com/api/1/scheduling/link/UN7FNjW_RnaJK2-1yq_AUQe5bEg3_3RNvOFlRzNKjZQ373ufX_4qGtSk6uVssspvimznMQirra5EbfrBfGQob2nc/availability?range_start=1713293999762&range_end=1718477999762&now=1713293999762
Preview:	{"duration_minutes":15,"time_slots":[{"start":1713295200000,"end":1713296100000},{"start":1713296400000,"end":1713297300000},{"start":1713364800000,"end":1713365700000},{"start":1713366000000,"end":1713366900000},{"start":1713367200000,"end":1713368100000},{"start":1713368400000,"end":1713369300000},{"start":1713374400000,"end":1713375300000},{"start":1713375600000,"end":1713376500000},{"start":1713376800000,"end":1713377700000},{"start":1713378000000,"end":1713378900000},{"start":1713379200000,"end":1713380100000},{"start":1713380400000,"end":1713381300000},{"start":1713381600000,"end":1713382500000},{"start":1713382800000,"end":1713383700000},{"start":1713451200000,"end":1713452100000},{"start":1713452400000,"end":1713453300000},{"start":1713453600000,"end":1713454500000},{"start":1713454800000,"end":1713455700000},{"start":1713456000000,"end":1713456900000},{"start":1713460800000,"end":1713461700000},{"start":1713462000000,"end":1713462900000},{"start":1713463200000,"end":1713464100

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65445)
Category:	downloaded
Size (bytes):	1512522
Entropy (8bit):	5.785446358241524
Encrypted:	false
SSDEEP:	24576:1glMKu3xZHcuYlQ9V/S4DKwy6VTKGumj+:1gSxZHpYlQ9V/S42wy6VWG8
MD5:	47AC2DEAFFEFDC849271E00E06FFB03A
SHA1:	62C2AAD454ADC23CDD519F9CF3753AFB07018BD5
SHA-256:	BF0D47723C9A95789085462F330C9EE5D750991E52BB44F71FB76CC412D1FFF7
SHA-512:	574A4218BCA17182944CC87A5002E3BDF2ECCBF72B1F8500195680BB5514B97E174D6D1036766ADFE6A073BF9E0459E6D8D1C3FBC838F855272CB68898371D83
Malicious:	false
Reputation:	low
URL:	https://cal.frontapp.com/app/main.329eb71bf02c6b13d18c.js
Preview:	/! For license information please see main.329eb71bf02c6b13d18c.js.LICENSE.txt /.(()=>{var e={97748:e=>{e.exports=function(){var e=["navigation","request","process","log","user","state","error","manual"],t=function(e,t,n){for(var r=n,i=0,o=e.length;i<o;i++)r=t(r,e[i],i,e);return r},n=function(e,n){return t(e,(function(e,t,r,i){return n(t,r,i)?e.concat(t):e}),[])},r=function(e,n){return t(e,(function(e,t,r,i){return!0===e\|\|t===n}),!1)},i=function(e){return"[object Array]"===Object.prototype.toString.call(e)},o=!{toString:null}.propertyIsEnumerable("toString"),a=["toString","toLocaleString","valueOf","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","constructor"],l=function(e){var t,n=[];for(t in e)Object.prototype.hasOwnProperty.call(e,t)&&n.push(t);if(!o)return n;for(var r=0,i=a.length;r<i;r++)Object.prototype.hasOwnProperty.call(e,a[r])&&n.push(a[r]);return n},s=function(e,t){return void 0===e&&(e=1),void 0===t&&(t=1/0),function(n){return"number"==typeof n&&parseInt(""+n,10)=

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7282)
Category:	downloaded
Size (bytes):	7458
Entropy (8bit):	5.982268985565099
Encrypted:	false
SSDEEP:	192:/9rHMdtmICWFBs9/AHlmXCBjbHjaomTz284EkKsDN:/9r47CWFBsppCJHOomTYKGN
MD5:	C67E5FE0296B4885B1D76E30D20B3C38
SHA1:	0329E794DA2730DC1C24B7AFD5A987030E526B2E
SHA-256:	6A5A541F12F8CDC15B4555B7B806E688CA5FCF0D13B228922BCD242654121E00
SHA-512:	F6940C3A6877BFE17E4F56A0DC632525CCABBEFA68F9B666551B0649CC9C3BF3D85FBCC1F54471891FEFC2EF7C1CE1319A5088C24AC77D0A50710364EA9B712B
Malicious:	false
Reputation:	low
URL:	https://cal.frontapp.com/glgroup/abrucia/1c1a930a
Preview:	<!doctype html><html lang="en"><head><meta charset="UTF-8"><base href="/"><meta http-equiv="X-UA-Compatible" content="ie=edge"><meta name="google" content="notranslate"/><meta name="robots" content="noindex"/><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no"/><title>Front \| Schedule a meeting</title><link rel="icon" type="image/png" sizes="32x32" href="data:image/png;base64,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

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	24282
Entropy (8bit):	3.9189012671717562
Encrypted:	false
SSDEEP:	192:YEIujseW2XdQG+sIVnd6MjtFb/8naVGLRCDpkW:YEtjzvdJ+sIVnAMtFbUn+GLRCDpp
MD5:	16609101B11FFA3F5BF4F09441351F43
SHA1:	D4ECB1689E68DDA001B2156D44108F44C1DF96C4
SHA-256:	9F5FF8113978CEF2298214664A660AA25656FD5EEE8D6945A1899B6C7D403E50
SHA-512:	6352594423BDD3C82045C1DE8F2F3EA7AF2FFE0C1FFE2B348BFE44279BF1CF817020EF1E4A0CF5D96608CDB135D5EADCA2CBB022AD17255BF5CE87F8822809F3
Malicious:	false
Reputation:	low
Preview:	{"duration_minutes":15,"time_slots":[{"start":1713295200000,"end":1713296100000},{"start":1713296400000,"end":1713297300000},{"start":1713364800000,"end":1713365700000},{"start":1713366000000,"end":1713366900000},{"start":1713367200000,"end":1713368100000},{"start":1713368400000,"end":1713369300000},{"start":1713374400000,"end":1713375300000},{"start":1713375600000,"end":1713376500000},{"start":1713376800000,"end":1713377700000},{"start":1713378000000,"end":1713378900000},{"start":1713379200000,"end":1713380100000},{"start":1713380400000,"end":1713381300000},{"start":1713381600000,"end":1713382500000},{"start":1713382800000,"end":1713383700000},{"start":1713451200000,"end":1713452100000},{"start":1713452400000,"end":1713453300000},{"start":1713453600000,"end":1713454500000},{"start":1713454800000,"end":1713455700000},{"start":1713456000000,"end":1713456900000},{"start":1713460800000,"end":1713461700000},{"start":1713462000000,"end":1713462900000},{"start":1713463200000,"end":1713464100

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	547
Entropy (8bit):	5.23850591667417
Encrypted:	false
SSDEEP:	12:YGK4akhYcM6tD8AW4R6ZzHE3LcH2aJR/ZMif+gZc68:Yd4vqcM6teZeLYDzNWgb8
MD5:	D0F89E19A99174EAA1BA2C01452C20AE
SHA1:	237EF405CC8A6B88F2286B1A371CF1E9F713F70D
SHA-256:	1740658890D387DAF7B7AA39EFCD9ACE3A17E8C063E26619E03EB438DB2E87B1
SHA-512:	87F1A9C3F6E698B34F1C2FFBDB247D4CEABC338007CE0A9CC18F6519E78A3E79F114B7B3FDEF556623B152A8603052699779424E0FB7C0C43BA180ACA8C28A38
Malicious:	false
Reputation:	low
URL:	https://cal.frontapp.com/api/1/scheduling/companies/glgroup/abrucia/1c1a930a
Preview:	{"color":"pink","display_name":"","duration_minutes":15,"greeting":"","meeting_summary":"Project Details - GLG","questions":[{"question":"Best phone number to reach you for the meeting:","question_type":"freeform","selection_options":null}],"scheduling_url":"https://calendar.frontapp.com/api/1/scheduling/link/UN7FNjW_RnaJK2-1yq_AUQe5bEg3_3RNvOFlRzNKjZQ373ufX_4qGtSk6uVssspvimznMQirra5EbfrBfGQob2nc","is_active":true,"organizer_address":"abrucia@glgroup.com","additional_guests":[],"conference_type":null,"availability_range_start":1713294000117}

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	547
Entropy (8bit):	5.2891351237301185
Encrypted:	false
SSDEEP:	12:YGK4akhYcM6tD8AW4R6ZzHW6st/ZMif+gZc6oI:Yd4vqcM6teZW62NWgboI
MD5:	02BE3570ADB6D1F71E65EB7C8AB4DD76
SHA1:	12B963C7BF279D42BD6A96C5A0F94DD8E7D69034
SHA-256:	4D4A67CED8FA6F377EBA841B94075BE3EA54C23CADAA02F5402DB16379E4A3A3
SHA-512:	0AA9C8DC18FAC08134CAF8826D6B7DB1D9582A845042E679B36629A5AB034BC5DA00A83D6B6CEF5596157D2D71FCB25044CC4F4D027056A33FD9BD795C162FB9
Malicious:	false
Reputation:	low
Preview:	{"color":"pink","display_name":"","duration_minutes":15,"greeting":"","meeting_summary":"Project Details - GLG","questions":[{"question":"Best phone number to reach you for the meeting:","question_type":"freeform","selection_options":null}],"scheduling_url":"https://calendar.frontapp.com/api/1/scheduling/link/vc01Pz_2pVj2d167XYhWVZz1iTxyeQVRjMoeFXBzCJYhATDLerhhy4Ear2SYRFIj748mIM4jowwlWum1F_iMamIL","is_active":true,"organizer_address":"abrucia@glgroup.com","additional_guests":[],"conference_type":null,"availability_range_start":1713294001362}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 20:59:50.178908110 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 16, 2024 20:59:57.889470100 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:57.889527082 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:57.889604092 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:57.890077114 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:57.890115976 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:57.890616894 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:57.890702963 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:57.890788078 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:57.891037941 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:57.891077042 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.112924099 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.113405943 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.113464117 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.114130020 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.114459991 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.114516020 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.115122080 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.115360975 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.116179943 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.116292953 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.117002010 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.117098093 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.117919922 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.117937088 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.118493080 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.118596077 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.164239883 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.164341927 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.164397955 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.211144924 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.537511110 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.537539005 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.537579060 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.537602901 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.537664890 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.537733078 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.537770033 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.538269043 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.538337946 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.572983980 CEST	49736	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.573025942 CEST	443	49736	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.583911896 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.624150991 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.742567062 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.757128954 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.757152081 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.757179022 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.757200956 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.757220030 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.757236004 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.757257938 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.757287025 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.757301092 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.757342100 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.759674072 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.759752989 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.777393103 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.777426004 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.777477026 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.777636051 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.777647018 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.777785063 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.819789886 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.859487057 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.859518051 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.859565020 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.859616995 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.859726906 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.859726906 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.859790087 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.859847069 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.873852968 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.873894930 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.873941898 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.873985052 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.874022007 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.874043941 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.894309998 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.894350052 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.894541979 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.894541979 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.894603014 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.894661903 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.924388885 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.924431086 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.924479008 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.924493074 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.924510002 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.924525976 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.924540043 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.963080883 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.963145971 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.963171959 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.963215113 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.963244915 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.977725983 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.977766991 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.977804899 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.977848053 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.977881908 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.991225004 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.991271973 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.991306067 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:58.991345882 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:58.991378069 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.005639076 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.005703926 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.005831003 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.005831003 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.005897045 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.013925076 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.013971090 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.014010906 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.014038086 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.014065981 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.026659966 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.026700974 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.026738882 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.026757956 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.026793003 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.038290024 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.038330078 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.038374901 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.038393021 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.038425922 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.050851107 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.050889015 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.050947905 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.050967932 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.050995111 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.063152075 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.063194036 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.063252926 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.063272953 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.063299894 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.072146893 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.072187901 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.072232008 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.072247028 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.072274923 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.080338955 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.080375910 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.080421925 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.080436945 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.080471992 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.089010000 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.089050055 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.089514971 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.089514971 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.089534044 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.096788883 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.096827030 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.096874952 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.096892118 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.096923113 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.104909897 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.104948044 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.104999065 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.105021000 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.105046034 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.113434076 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.113472939 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.113519907 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.113539934 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.113565922 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.121145964 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.121184111 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.121233940 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.121248960 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.121279955 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.126884937 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.126921892 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.126967907 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.126987934 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.127012968 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.127031088 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.134136915 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.134179115 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.134227037 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.134243011 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.134272099 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.134290934 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.141282082 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.141324997 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.141381979 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.141396046 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.141424894 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.141444921 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.147435904 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.147475958 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.147524118 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.147537947 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.147564888 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.147588968 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.152985096 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.153039932 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.153080940 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.153096914 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.153129101 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.153148890 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.158905983 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.158947945 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.159009933 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.159024000 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.159053087 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.159073114 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.164278030 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.164315939 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.164371967 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.164386034 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.164413929 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.164431095 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.169004917 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.169044018 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.169117928 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.169133902 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.169167042 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.169188023 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.173964977 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.174006939 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.174061060 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.174073935 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.174105883 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.174125910 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.178493023 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.178531885 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.178586006 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.178600073 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.178627014 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.178647995 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.180510998 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.180591106 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.184904099 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.184943914 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.185013056 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.185025930 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.185058117 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.185079098 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.188916922 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.188956022 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.189006090 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.189018965 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.189049006 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.189069986 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.192743063 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.192784071 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.192832947 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.192845106 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.192884922 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.192884922 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.196531057 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.196568966 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.196626902 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.196640015 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.196670055 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.200551033 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.200588942 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.200639009 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.200653076 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.200680971 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.204309940 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.204349041 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.204402924 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.204418898 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.204451084 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.208126068 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.208163023 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.208216906 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.208236933 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.208261967 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.208915949 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.208980083 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.208996058 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.212451935 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.212490082 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.212542057 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.212557077 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.212585926 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.216196060 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.216240883 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.216300011 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.216320038 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.216350079 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.219525099 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.219564915 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.219614983 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.219630003 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.219659090 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.223098040 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.223134995 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.223186970 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.223206043 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.223228931 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.223265886 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.226234913 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.226275921 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.226324081 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.226336956 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.226371050 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.226391077 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.229722023 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.229760885 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.229809999 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.229824066 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.229852915 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.229872942 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.232768059 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.232808113 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.232858896 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.232872009 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.232909918 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.232930899 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.236123085 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.236165047 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.236218929 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.236246109 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.236279011 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.236298084 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.236804008 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.236865997 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.239891052 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.239928961 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.240125895 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.240125895 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.240195036 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.240256071 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.243025064 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.243066072 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.243223906 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.243223906 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.243284941 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.243340969 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.245778084 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.245817900 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.245882034 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.245946884 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.245995998 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.245996952 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.248823881 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.248888016 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.249030113 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.249030113 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.249090910 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.250830889 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.251709938 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.251748085 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.251812935 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.251851082 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.251890898 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.251940012 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.254590988 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.254631042 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.254678965 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.254693985 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.254724979 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.255513906 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.255593061 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.255651951 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.255711079 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.258384943 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.258424044 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.258487940 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.258508921 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.258549929 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.258549929 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.260157108 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.260250092 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.260308027 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.262754917 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.262794971 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.262847900 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.262877941 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.262912035 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.265517950 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.265556097 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.265721083 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.265722036 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.265785933 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.268695116 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.268732071 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.268915892 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.268915892 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.268980026 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.271363020 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.271404028 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.271470070 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.271470070 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.271537066 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.273720980 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.273760080 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.273816109 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.273880959 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.273916960 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.275965929 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.276005030 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.276045084 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.276071072 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.276114941 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.278830051 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.278866053 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.279022932 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.279022932 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.279084921 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.280738115 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.280775070 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.280827045 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.280895948 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.280936003 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.283679962 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.283715963 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.283763885 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.283785105 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.283812046 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.285665989 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.285706043 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.285744905 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.285764933 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.285790920 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.288542032 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.288578987 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.288748026 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.288748026 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.288810015 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.289994955 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.290036917 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.290080070 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.290107965 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.290138006 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.292712927 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.292749882 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.292789936 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.292804003 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.292834044 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.294492006 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.294528008 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.294568062 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.294586897 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.294612885 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.296940088 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.296978951 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.297036886 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.297036886 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.297054052 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.298811913 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.298850060 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.299021006 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.299021959 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.299086094 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.301285982 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.301322937 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.301363945 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.301389933 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.301418066 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.303189039 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.303225994 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.303266048 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.303287983 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.303314924 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.305145025 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.305182934 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.305224895 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.305243969 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.305270910 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.307022095 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.307060957 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.307097912 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.307116985 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.307143927 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.309328079 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.309364080 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.309417009 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.309436083 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.309459925 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.311151028 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.311188936 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.311240911 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.311326027 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.311372995 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.313071012 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.313107014 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.313144922 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.313167095 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.313196898 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.314855099 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.314892054 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.314933062 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.314961910 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.314992905 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.316904068 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.316941977 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.316982031 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.317002058 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.317027092 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.318698883 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.318736076 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.318783998 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.318804979 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.318830967 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.320432901 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.320468903 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.320519924 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.320539951 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.320568085 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.322103977 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.322143078 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.322180033 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.322201014 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.322240114 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.324208975 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.324245930 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.324286938 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.324306965 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.324332952 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.325977087 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.326016903 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.326056957 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.326076984 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.326102018 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.327137947 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.327174902 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.327209949 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.327224016 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.327258110 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.328918934 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.328955889 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.328998089 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.329018116 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.329049110 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.330971003 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.331008911 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.331048965 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.331068039 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.331090927 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.332720995 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.332758904 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.332798004 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.332823992 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.332850933 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.334564924 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.334603071 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.334640026 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.334655046 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.334683895 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.335614920 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.335652113 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.335688114 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.335707903 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.335738897 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.337471008 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.337507963 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.337551117 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.337568998 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.337593079 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.338289022 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.338356972 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.338371992 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.338426113 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.338452101 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.338500023 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.339010954 CEST	49735	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.339036942 CEST	443	49735	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.649291992 CEST	49739	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.649383068 CEST	443	49739	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.649487972 CEST	49739	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.649518013 CEST	49740	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.649595976 CEST	443	49740	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.649766922 CEST	49740	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.650130033 CEST	49739	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.650162935 CEST	443	49739	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.650337934 CEST	49740	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.650377989 CEST	443	49740	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.657304049 CEST	49741	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.657345057 CEST	443	49741	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.657409906 CEST	49741	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.665745974 CEST	49741	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.665827036 CEST	443	49741	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.787689924 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 16, 2024 20:59:59.872109890 CEST	443	49739	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.872548103 CEST	49739	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.872607946 CEST	443	49739	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.873060942 CEST	443	49740	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.873439074 CEST	49740	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.873497963 CEST	443	49740	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.874062061 CEST	443	49739	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.874134064 CEST	49739	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.875089884 CEST	443	49740	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.875272036 CEST	49740	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.877569914 CEST	49739	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.877657890 CEST	443	49739	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.878351927 CEST	49740	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.878452063 CEST	443	49740	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.878937960 CEST	49739	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.878953934 CEST	443	49739	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.879283905 CEST	49740	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.879304886 CEST	443	49740	35.190.88.7	192.168.2.4
Apr 16, 2024 20:59:59.886171103 CEST	443	49741	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.886738062 CEST	49741	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.886796951 CEST	443	49741	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.887296915 CEST	443	49741	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.887902975 CEST	49741	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.887996912 CEST	443	49741	18.160.78.87	192.168.2.4
Apr 16, 2024 20:59:59.888338089 CEST	49741	443	192.168.2.4	18.160.78.87
Apr 16, 2024 20:59:59.919711113 CEST	49740	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.920841932 CEST	49739	443	192.168.2.4	35.190.88.7
Apr 16, 2024 20:59:59.932209969 CEST	443	49741	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:00.135179043 CEST	443	49740	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.135256052 CEST	443	49740	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.135318041 CEST	49740	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.145955086 CEST	443	49739	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.146193027 CEST	443	49739	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.146260023 CEST	49739	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.151097059 CEST	49740	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.151130915 CEST	443	49740	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.151667118 CEST	49739	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.151705980 CEST	443	49739	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.153223038 CEST	49742	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.153301001 CEST	443	49742	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.153388977 CEST	49742	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.154310942 CEST	49743	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.154387951 CEST	443	49743	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.154459000 CEST	49743	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.154908895 CEST	49742	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.154989004 CEST	443	49742	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.155524015 CEST	49743	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.155602932 CEST	443	49743	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.201057911 CEST	443	49741	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:00.201153994 CEST	443	49741	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:00.201330900 CEST	49741	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:00.201594114 CEST	49741	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:00.201631069 CEST	443	49741	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:00.374223948 CEST	443	49743	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.374603987 CEST	49743	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.374661922 CEST	443	49743	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.375206947 CEST	443	49743	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.375639915 CEST	49743	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.375741005 CEST	443	49743	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.375852108 CEST	49743	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.377063036 CEST	443	49742	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.377371073 CEST	49742	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.377430916 CEST	443	49742	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.378578901 CEST	443	49742	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.378926992 CEST	49742	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.379106045 CEST	49742	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.379118919 CEST	443	49742	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.379142046 CEST	443	49742	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.416191101 CEST	443	49743	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.431737900 CEST	49742	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.611788988 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:00.611840010 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:00.613065004 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:00.616133928 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:00.616169930 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:00.652546883 CEST	443	49743	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.652628899 CEST	443	49743	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.653384924 CEST	49743	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.658576012 CEST	443	49742	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.659403086 CEST	443	49742	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.661586046 CEST	49742	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.698020935 CEST	49742	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.698079109 CEST	443	49742	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.698328972 CEST	49743	443	192.168.2.4	35.190.88.7
Apr 16, 2024 21:00:00.698386908 CEST	443	49743	35.190.88.7	192.168.2.4
Apr 16, 2024 21:00:00.713707924 CEST	49745	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:00:00.713785887 CEST	443	49745	64.233.185.99	192.168.2.4
Apr 16, 2024 21:00:00.713895082 CEST	49745	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:00:00.714749098 CEST	49745	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:00:00.714828014 CEST	443	49745	64.233.185.99	192.168.2.4
Apr 16, 2024 21:00:00.728414059 CEST	49746	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:00.728491068 CEST	443	49746	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:00.728646994 CEST	49746	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:00.728882074 CEST	49746	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:00.728919983 CEST	443	49746	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:00.831737041 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:00.835578918 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:00.835602999 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:00.836427927 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:00.838423967 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:00.838423967 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:00.838437080 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:00.838603973 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:00.892127037 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:00.947946072 CEST	443	49745	64.233.185.99	192.168.2.4
Apr 16, 2024 21:00:00.961304903 CEST	49745	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:00:00.961334944 CEST	443	49745	64.233.185.99	192.168.2.4
Apr 16, 2024 21:00:00.963848114 CEST	443	49745	64.233.185.99	192.168.2.4
Apr 16, 2024 21:00:00.964063883 CEST	49745	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:00:00.967226982 CEST	49745	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:00:00.967458010 CEST	443	49745	64.233.185.99	192.168.2.4
Apr 16, 2024 21:00:00.976739883 CEST	443	49746	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:00.977408886 CEST	49746	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:00.977468014 CEST	443	49746	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:00.978929996 CEST	443	49746	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:00.979141951 CEST	49746	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:00.979718924 CEST	49746	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:00.979809046 CEST	443	49746	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:00.980051994 CEST	49746	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:01.018373013 CEST	49745	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:00:01.018400908 CEST	443	49745	64.233.185.99	192.168.2.4
Apr 16, 2024 21:00:01.024126053 CEST	443	49746	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:01.033709049 CEST	49746	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:01.033765078 CEST	443	49746	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:01.067919970 CEST	49745	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:00:01.083012104 CEST	49746	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:01.343193054 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:01.343225002 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:01.343234062 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:01.343260050 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:01.343276024 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:01.343291044 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:01.343295097 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:01.343314886 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:01.343327999 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:01.343341112 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:01.343446970 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:01.394552946 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:01.394645929 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:01.394690037 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:01.394764900 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:01.448476076 CEST	443	49746	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:01.448556900 CEST	443	49746	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:01.452285051 CEST	49746	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:01.458138943 CEST	49744	443	192.168.2.4	18.160.78.87
Apr 16, 2024 21:00:01.458184958 CEST	443	49744	18.160.78.87	192.168.2.4
Apr 16, 2024 21:00:01.458231926 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:01.458271980 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:01.458648920 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:01.460732937 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:01.460809946 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:01.464921951 CEST	49746	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:01.464979887 CEST	443	49746	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:01.680617094 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:01.680808067 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:01.684814930 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:01.684865952 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:01.685244083 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:01.725357056 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:01.772114038 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:01.880441904 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:01.880521059 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:01.880662918 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:02.457875013 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:02.457875013 CEST	49747	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:02.457937002 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:02.457974911 CEST	443	49747	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:02.632966995 CEST	49748	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:02.632999897 CEST	443	49748	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:02.633081913 CEST	49748	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:02.634164095 CEST	49748	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:02.634171963 CEST	443	49748	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:02.659341097 CEST	49749	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:02.659370899 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:02.659447908 CEST	49749	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:02.659894943 CEST	49749	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:02.659908056 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:02.845635891 CEST	443	49748	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:02.845716953 CEST	49748	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:02.847424030 CEST	49748	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:02.847428083 CEST	443	49748	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:02.847629070 CEST	443	49748	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:02.850313902 CEST	49748	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:02.896111012 CEST	443	49748	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:02.913604975 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:02.913810968 CEST	49749	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:02.913826942 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:02.914294958 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:02.914995909 CEST	49749	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:02.915072918 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:02.915147066 CEST	49749	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:02.956193924 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:03.053358078 CEST	443	49748	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:03.053406000 CEST	443	49748	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:03.053448915 CEST	49748	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:03.054471016 CEST	49748	443	192.168.2.4	184.31.62.93
Apr 16, 2024 21:00:03.054481030 CEST	443	49748	184.31.62.93	192.168.2.4
Apr 16, 2024 21:00:03.472002029 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:03.472065926 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:03.472131968 CEST	49749	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:03.472146988 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:03.472206116 CEST	49749	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:03.472212076 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:03.522083998 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:03.522156954 CEST	49749	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:03.522162914 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:03.522278070 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:03.522330999 CEST	49749	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:03.522506952 CEST	49749	443	192.168.2.4	52.85.151.115
Apr 16, 2024 21:00:03.522517920 CEST	443	49749	52.85.151.115	192.168.2.4
Apr 16, 2024 21:00:10.931694984 CEST	443	49745	64.233.185.99	192.168.2.4
Apr 16, 2024 21:00:10.931844950 CEST	443	49745	64.233.185.99	192.168.2.4
Apr 16, 2024 21:00:10.931982040 CEST	49745	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:00:12.639045000 CEST	49745	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:00:12.639106035 CEST	443	49745	64.233.185.99	192.168.2.4
Apr 16, 2024 21:01:00.663039923 CEST	49757	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:01:00.663079023 CEST	443	49757	64.233.185.99	192.168.2.4
Apr 16, 2024 21:01:00.663213015 CEST	49757	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:01:00.663424969 CEST	49757	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:01:00.663440943 CEST	443	49757	64.233.185.99	192.168.2.4
Apr 16, 2024 21:01:00.883661032 CEST	443	49757	64.233.185.99	192.168.2.4
Apr 16, 2024 21:01:00.883944035 CEST	49757	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:01:00.883960962 CEST	443	49757	64.233.185.99	192.168.2.4
Apr 16, 2024 21:01:00.884650946 CEST	443	49757	64.233.185.99	192.168.2.4
Apr 16, 2024 21:01:00.884994030 CEST	49757	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:01:00.885230064 CEST	443	49757	64.233.185.99	192.168.2.4
Apr 16, 2024 21:01:00.927787066 CEST	49757	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:01:05.522043943 CEST	49723	80	192.168.2.4	199.232.210.172
Apr 16, 2024 21:01:05.522177935 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 16, 2024 21:01:05.626247883 CEST	80	49723	199.232.210.172	192.168.2.4
Apr 16, 2024 21:01:05.626308918 CEST	80	49723	199.232.210.172	192.168.2.4
Apr 16, 2024 21:01:05.626389980 CEST	49723	80	192.168.2.4	199.232.210.172
Apr 16, 2024 21:01:05.626749039 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 16, 2024 21:01:05.626806974 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 16, 2024 21:01:05.626869917 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 16, 2024 21:01:10.881145954 CEST	443	49757	64.233.185.99	192.168.2.4
Apr 16, 2024 21:01:10.881294012 CEST	443	49757	64.233.185.99	192.168.2.4
Apr 16, 2024 21:01:10.881361008 CEST	49757	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:01:12.814152956 CEST	49757	443	192.168.2.4	64.233.185.99
Apr 16, 2024 21:01:12.814178944 CEST	443	49757	64.233.185.99	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 20:59:56.491215944 CEST	53	63828	1.1.1.1	192.168.2.4
Apr 16, 2024 20:59:57.109074116 CEST	53	53624	1.1.1.1	192.168.2.4
Apr 16, 2024 20:59:57.780939102 CEST	49834	53	192.168.2.4	1.1.1.1
Apr 16, 2024 20:59:57.781156063 CEST	57839	53	192.168.2.4	1.1.1.1
Apr 16, 2024 20:59:57.888420105 CEST	53	57839	1.1.1.1	192.168.2.4
Apr 16, 2024 20:59:57.888499022 CEST	53	49834	1.1.1.1	192.168.2.4
Apr 16, 2024 20:59:59.522224903 CEST	51284	53	192.168.2.4	1.1.1.1
Apr 16, 2024 20:59:59.522471905 CEST	65514	53	192.168.2.4	1.1.1.1
Apr 16, 2024 20:59:59.627239943 CEST	53	51284	1.1.1.1	192.168.2.4
Apr 16, 2024 20:59:59.627742052 CEST	53	65514	1.1.1.1	192.168.2.4
Apr 16, 2024 21:00:00.605777979 CEST	53179	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:00:00.605923891 CEST	58917	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:00:00.619293928 CEST	52610	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:00:00.619817019 CEST	60770	53	192.168.2.4	1.1.1.1
Apr 16, 2024 21:00:00.711231947 CEST	53	53179	1.1.1.1	192.168.2.4
Apr 16, 2024 21:00:00.712300062 CEST	53	58917	1.1.1.1	192.168.2.4
Apr 16, 2024 21:00:00.726855040 CEST	53	52610	1.1.1.1	192.168.2.4
Apr 16, 2024 21:00:00.727554083 CEST	53	60770	1.1.1.1	192.168.2.4
Apr 16, 2024 21:00:14.581245899 CEST	53	65351	1.1.1.1	192.168.2.4
Apr 16, 2024 21:00:17.075315952 CEST	138	138	192.168.2.4	192.168.2.255
Apr 16, 2024 21:00:33.584233046 CEST	53	58986	1.1.1.1	192.168.2.4
Apr 16, 2024 21:00:56.022512913 CEST	53	51706	1.1.1.1	192.168.2.4
Apr 16, 2024 21:00:56.562482119 CEST	53	59898	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 16, 2024 20:59:57.780939102 CEST	192.168.2.4	1.1.1.1	0x36d2	Standard query (0)	cal.frontapp.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 20:59:57.781156063 CEST	192.168.2.4	1.1.1.1	0x8190	Standard query (0)	cal.frontapp.com	65	IN (0x0001)	false
Apr 16, 2024 20:59:59.522224903 CEST	192.168.2.4	1.1.1.1	0x9346	Standard query (0)	sessions.bugsnag.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 20:59:59.522471905 CEST	192.168.2.4	1.1.1.1	0x331a	Standard query (0)	sessions.bugsnag.com	65	IN (0x0001)	false
Apr 16, 2024 21:00:00.605777979 CEST	192.168.2.4	1.1.1.1	0x4243	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.605923891 CEST	192.168.2.4	1.1.1.1	0x8a4f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 21:00:00.619293928 CEST	192.168.2.4	1.1.1.1	0x9a7f	Standard query (0)	cal.frontapp.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.619817019 CEST	192.168.2.4	1.1.1.1	0xb77d	Standard query (0)	cal.frontapp.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 16, 2024 20:59:57.888499022 CEST	1.1.1.1	192.168.2.4	0x36d2	No error (0)	cal.frontapp.com		18.160.78.87	A (IP address)	IN (0x0001)	false
Apr 16, 2024 20:59:57.888499022 CEST	1.1.1.1	192.168.2.4	0x36d2	No error (0)	cal.frontapp.com		18.160.78.124	A (IP address)	IN (0x0001)	false
Apr 16, 2024 20:59:57.888499022 CEST	1.1.1.1	192.168.2.4	0x36d2	No error (0)	cal.frontapp.com		18.160.78.19	A (IP address)	IN (0x0001)	false
Apr 16, 2024 20:59:57.888499022 CEST	1.1.1.1	192.168.2.4	0x36d2	No error (0)	cal.frontapp.com		18.160.78.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 20:59:59.627239943 CEST	1.1.1.1	192.168.2.4	0x9346	No error (0)	sessions.bugsnag.com		35.190.88.7	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.711231947 CEST	1.1.1.1	192.168.2.4	0x4243	No error (0)	www.google.com		64.233.185.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.711231947 CEST	1.1.1.1	192.168.2.4	0x4243	No error (0)	www.google.com		64.233.185.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.711231947 CEST	1.1.1.1	192.168.2.4	0x4243	No error (0)	www.google.com		64.233.185.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.711231947 CEST	1.1.1.1	192.168.2.4	0x4243	No error (0)	www.google.com		64.233.185.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.711231947 CEST	1.1.1.1	192.168.2.4	0x4243	No error (0)	www.google.com		64.233.185.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.711231947 CEST	1.1.1.1	192.168.2.4	0x4243	No error (0)	www.google.com		64.233.185.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.712300062 CEST	1.1.1.1	192.168.2.4	0x8a4f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 21:00:00.726855040 CEST	1.1.1.1	192.168.2.4	0x9a7f	No error (0)	cal.frontapp.com		52.85.151.115	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.726855040 CEST	1.1.1.1	192.168.2.4	0x9a7f	No error (0)	cal.frontapp.com		52.85.151.73	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.726855040 CEST	1.1.1.1	192.168.2.4	0x9a7f	No error (0)	cal.frontapp.com		52.85.151.107	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:00.726855040 CEST	1.1.1.1	192.168.2.4	0x9a7f	No error (0)	cal.frontapp.com		52.85.151.102	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:13.418313980 CEST	1.1.1.1	192.168.2.4	0xbfa3	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:13.418313980 CEST	1.1.1.1	192.168.2.4	0xbfa3	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:14.328783989 CEST	1.1.1.1	192.168.2.4	0xcfc0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 21:00:14.328783989 CEST	1.1.1.1	192.168.2.4	0xcfc0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:29.678308010 CEST	1.1.1.1	192.168.2.4	0x6827	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 21:00:29.678308010 CEST	1.1.1.1	192.168.2.4	0x6827	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:00:48.643260956 CEST	1.1.1.1	192.168.2.4	0xa4fd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 21:00:48.643260956 CEST	1.1.1.1	192.168.2.4	0xa4fd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 16, 2024 21:01:09.003326893 CEST	1.1.1.1	192.168.2.4	0xb7f7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 21:01:09.003326893 CEST	1.1.1.1	192.168.2.4	0xb7f7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cal.frontapp.com

https:

sessions.bugsnag.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	18.160.78.87	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 18:59:58 UTC	683	OUT	GET /glgroup/abrucia/1c1a930a HTTP/1.1 Host: cal.frontapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 18:59:58 UTC	936	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 7458 Connection: close Date: Tue, 16 Apr 2024 18:59:58 GMT X-RateLimit-Limit: 90 X-RateLimit-Remaining: 89 X-RateLimit-Reset: 1713294058 Strict-Transport-Security: max-age=31536000; includeSubDomains X-XSS-Protection: 1 Referrer-Policy: same-origin Access-Control-Allow-Origin: * last-modified: Wed, 01 Nov 2023 05:29:37 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: qxOb8d_WAGgaEc1wWoGTNaV8MlVW14hL accept-ranges: bytes server: AmazonS3 cache-control: no-cache etag: "c67e5fe0296b4885b1d76e30d20b3c38" vary: Accept-Encoding via: 1.1 9b64e6d3539557e166b875a71dd8ecf4.cloudfront.net (CloudFront), 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront) x-amz-cf-pop: SFO53-P2 X-Front-Time: 21 X-Cache: Miss from cloudfront X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: iBy6x7EpmwVQyYxd8JexvyBrX8o8wW2_1xCZIJKs6D42Jds-uUBmYw==
2024-04-16 18:59:58 UTC	7458	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 74 72 61 6e 73 6c 61 74 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 Data Ascii: <!doctype html><html lang="en"><head><meta charset="UTF-8"><base href="/"><meta http-equiv="X-UA-Compatible" content="ie=edge"><meta name="google" content="notranslate"/><meta name="robots" content="noindex"/><meta name="viewport" content="width=device-wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	18.160.78.87	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 18:59:58 UTC	573	OUT	GET /app/main.329eb71bf02c6b13d18c.js HTTP/1.1 Host: cal.frontapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cal.frontapp.com/glgroup/abrucia/1c1a930a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 18:59:58 UTC	679	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 1512522 Connection: close Date: Tue, 26 Mar 2024 22:19:00 GMT Last-Modified: Wed, 01 Nov 2023 05:29:33 GMT ETag: "47ac2deaffefdc849271e00e06ffb03a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate Expires: Thu, 31 Oct 2024 05:29:30 GMT x-amz-version-id: j13.JY7lX0_TrslfdfpV3cbMCbehgkeT Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 41f8c6fc5ecc90733716d11cef10efe0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: 8D68sZ_B5OF9jO1hwhYrFS61xjv54LIj0RR1Wqq10fratgwLqvsGmA== Age: 1802458
2024-04-16 18:59:58 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 33 32 39 65 62 37 31 62 66 30 32 63 36 62 31 33 64 31 38 63 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 39 37 37 34 38 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 22 6e 61 76 69 67 61 74 69 6f 6e 22 2c 22 72 65 71 75 65 73 74 22 2c 22 70 72 6f 63 65 73 73 22 2c 22 6c 6f 67 22 2c 22 75 73 65 72 22 2c 22 73 74 61 74 65 22 2c 22 65 72 72 6f 72 22 2c 22 6d 61 6e 75 61 6c 22 5d 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 6e 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 69 3c 6f 3b Data Ascii: /! For license information please see main.329eb71bf02c6b13d18c.js.LICENSE.txt /(()=>{var e={97748:e=>{e.exports=function(){var e=["navigation","request","process","log","user","state","error","manual"],t=function(e,t,n){for(var r=n,i=0,o=e.length;i<o;
2024-04-16 18:59:58 UTC	1514	IN	Data Raw: 28 65 2c 6e 2c 72 2c 69 29 7b 72 65 74 75 72 6e 7b 65 72 72 6f 72 43 6c 61 73 73 3a 7a 28 65 29 2c 65 72 72 6f 72 4d 65 73 73 61 67 65 3a 7a 28 6e 29 2c 74 79 70 65 3a 72 2c 73 74 61 63 6b 74 72 61 63 65 3a 74 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 50 28 74 29 3b 74 72 79 7b 72 65 74 75 72 6e 22 7b 7d 22 3d 3d 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 3f 65 3a 65 2e 63 6f 6e 63 61 74 28 6e 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 65 7d 7d 29 2c 5b 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 61 75 73 65 3f 5b 65 5d 2e 63 6f 6e 63 61 74 28 59 28 65 2e 63 61 75 73 65 29 29 3a 5b 65 5d 7d 48 2e 67 65 74 53 74 61 63 6b 74 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: (e,n,r,i){return{errorClass:z(e),errorMessage:z(n),type:r,stacktrace:t(i,(function(e,t){var n=P(t);try{return"{}"===JSON.stringify(n)?e:e.concat(n)}catch(t){return e}}),[])}}function Y(e){return e.cause?[e].concat(Y(e.cause)):[e]}H.getStacktrace=function(
2024-04-16 18:59:58 UTC	16384	IN	Data Raw: 69 3d 61 28 6e 75 6c 6c 3d 3d 3d 65 3f 22 6e 75 6c 6c 22 3a 22 75 6e 73 75 70 70 6f 72 74 65 64 20 6f 62 6a 65 63 74 22 29 2c 6f 2b 3d 32 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 69 3d 61 28 22 6e 6f 74 68 69 6e 67 22 29 2c 6f 2b 3d 32 7d 65 6c 73 65 20 5a 28 65 29 3f 69 3d 65 3a 28 69 3d 61 28 74 79 70 65 6f 66 20 65 29 2c 6f 2b 3d 32 29 3b 69 66 28 21 56 28 69 29 29 74 72 79 7b 74 68 72 6f 77 20 69 7d 63 61 74 63 68 28 65 29 7b 56 28 65 29 26 26 28 69 3d 65 2c 6f 3d 31 29 7d 72 65 74 75 72 6e 5b 69 2c 6f 5d 7d 3b 48 2e 5f 5f 74 79 70 65 3d 22 62 72 6f 77 73 65 72 6a 73 22 3b 76 61 72 20 47 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 61 6d 65 26 26 22 73 74 72 69 6e 67 Data Ascii: i=a(null===e?"null":"unsupported object"),o+=2);break;default:i=a("nothing"),o+=2}else Z(e)?i=e:(i=a(typeof e),o+=2);if(!V(i))try{throw i}catch(e){V(e)&&(i=e,o=1)}return[i,o]};H.__type="browserjs";var G=function(e){return!("string"!=typeof e.name&&"string
2024-04-16 18:59:58 UTC	16384	IN	Data Raw: 67 75 6d 65 6e 74 73 29 3b 74 72 79 7b 76 61 72 20 69 3d 74 28 72 29 2c 6f 3d 69 2e 67 65 74 28 29 3b 69 66 28 6e 26 26 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 72 29 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 72 29 3b 69 66 28 6f 2e 5f 5f 74 72 61 63 65 5f 5f 29 69 2e 72 65 70 6c 61 63 65 28 6f 2e 5f 5f 74 72 61 63 65 5f 5f 29 3b 65 6c 73 65 7b 76 61 72 20 61 3d 64 28 29 3b 6f 2e 5f 5f 74 72 61 63 65 5f 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 68 28 61 29 2c 70 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 28 6e 75 6c 6c 29 7d 29 2c 30 29 3b 76 61 72 20 65 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 68 28 6e 75 6c 6c 29 2c 65 7d Data Ascii: guments);try{var i=t(r),o=i.get();if(n&&e.apply(this,r),"function"!=typeof o)return e.apply(this,r);if(o.__trace__)i.replace(o.__trace__);else{var a=d();o.__trace__=function(){h(a),p((function(){h(null)}),0);var e=o.apply(this,arguments);return h(null),e}
2024-04-16 18:59:58 UTC	13727	IN	Data Raw: 3d 69 7d 2c 38 30 37 38 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 36 34 38 36 37 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 3d 5b 5d 7d 69 2e 70 72 6f 74 6f 74 79 70 65 2e 75 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 2e 70 75 73 68 28 7b 66 75 6c 66 69 6c 6c 65 64 3a 65 2c 72 65 6a 65 63 74 65 64 3a 74 2c 73 79 6e 63 68 72 6f 6e 6f 75 73 3a 21 21 6e 26 26 6e 2e 73 79 6e 63 68 72 6f 6e 6f 75 73 2c 72 75 6e 57 68 65 6e 3a 6e 3f 6e 2e 72 75 6e 57 68 65 6e 3a 6e 75 6c 6c 7d 29 2c 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 2e 6c 65 6e 67 74 68 2d 31 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 65 Data Ascii: =i},80782:(e,t,n)=>{"use strict";var r=n(64867);function i(){this.handlers=[]}i.prototype.use=function(e,t,n){return this.handlers.push({fulfilled:e,rejected:t,synchronous:!!n&&n.synchronous,runWhen:n?n.runWhen:null}),this.handlers.length-1},i.prototype.e
2024-04-16 18:59:58 UTC	16384	IN	Data Raw: 3a 6e 7d 7d 2c 35 35 35 35 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 35 38 36 31 32 29 2c 69 3d 6e 28 34 30 32 31 30 29 2c 6f 3d 69 28 22 25 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 6c 79 25 22 29 2c 61 3d 69 28 22 25 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 25 22 29 2c 6c 3d 69 28 22 25 52 65 66 6c 65 63 74 2e 61 70 70 6c 79 25 22 2c 21 30 29 7c 7c 72 2e 63 61 6c 6c 28 61 2c 6f 29 2c 73 3d 69 28 22 25 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 25 22 2c 21 30 29 2c 75 3d 69 28 22 25 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 25 22 2c 21 30 29 2c 63 3d 69 28 22 25 4d 61 74 68 2e Data Ascii: :n}},55559:(e,t,n)=>{"use strict";var r=n(58612),i=n(40210),o=i("%Function.prototype.apply%"),a=i("%Function.prototype.call%"),l=i("%Reflect.apply%",!0)\|\|r.call(a,o),s=i("%Object.getOwnPropertyDescriptor%",!0),u=i("%Object.defineProperty%",!0),c=i("%Math.
2024-04-16 18:59:58 UTC	16384	IN	Data Raw: 75 3d 21 31 2c 63 3d 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 29 2c 68 3d 61 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 64 3d 61 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 69 66 28 22 73 74 61 74 69 63 22 3d 3d 3d 63 2e 70 6f 73 69 74 69 6f 6e 29 7b 61 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 22 70 6f 73 69 74 69 6f 6e 22 2c 22 72 65 6c 61 74 69 76 65 22 2c 65 2e 69 6d 70 6f 72 74 61 6e 74 3f 22 69 6d 70 6f 72 74 61 6e 74 22 3a 22 22 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 69 29 7b 76 61 72 20 6f 3d 72 5b 69 5d 3b 22 61 75 74 6f 22 21 3d 3d 6f 26 26 22 30 22 21 3d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: u=!1,c=window.getComputedStyle(a),h=a.offsetWidth,d=a.offsetHeight;function f(){function n(){if("static"===c.position){a.style.setProperty("position","relative",e.important?"important":"");var n=function(t,n,r,i){var o=r[i];"auto"!==o&&"0"!==function(e){r
2024-04-16 18:59:58 UTC	1514	IN	Data Raw: 73 3d 7b 61 74 74 72 69 62 75 74 65 73 3a 7b 77 69 64 74 68 3a 22 31 32 22 2c 68 65 69 67 68 74 3a 22 31 32 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 32 20 31 32 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 64 69 6d 65 6e 73 69 6f 6e 73 46 72 6f 6d 56 69 65 77 62 6f 78 3a 7b 6d 69 6e 58 3a 30 2c 6d 69 6e 59 3a 30 2c 77 69 64 74 68 3a 31 32 2c 68 65 69 67 68 74 3a 31 32 7d 7d 2c 63 6f 6e 74 65 6e 74 3a 27 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 39 2e 33 35 34 20 35 2e 33 35 34 41 2e 35 2e 35 20 30 20 30 20 30 20 39 20 34 2e 35 48 33 61 2e 35 Data Ascii: s={attributes:{width:"12",height:"12",viewBox:"0 0 12 12",fill:"none",xmlns:"http://www.w3.org/2000/svg",dimensionsFromViewbox:{minX:0,minY:0,width:12,height:12}},content:'<path fill-rule="evenodd" clip-rule="evenodd" d="M9.354 5.354A.5.5 0 0 0 9 4.5H3a.5
2024-04-16 18:59:58 UTC	16384	IN	Data Raw: 2e 31 34 36 2d 32 2e 31 34 37 5a 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2f 3e 27 7d 7d 2c 38 33 38 37 30 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 61 74 74 72 69 62 75 74 65 73 3a 7b 77 69 64 74 68 3a 22 31 32 22 2c 68 65 69 67 68 74 3a 22 31 32 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 32 20 31 32 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 64 69 6d 65 6e 73 69 6f 6e 73 46 72 6f 6d 56 69 65 77 62 6f 78 3a 7b 6d 69 6e 58 3a 30 2c 6d 69 6e 59 3a 30 2c 77 69 64 74 68 3a 31 32 2c 68 65 69 67 68 74 3a 31 32 7d 7d 2c 63 6f 6e 74 65 6e 74 3a 27 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 Data Ascii: .146-2.147Z" fill="currentColor"/>'}},83870:e=>{e.exports={attributes:{width:"12",height:"12",viewBox:"0 0 12 12",fill:"none",xmlns:"http://www.w3.org/2000/svg",dimensionsFromViewbox:{minX:0,minY:0,width:12,height:12}},content:'<path fill-rule="evenodd" c
2024-04-16 18:59:58 UTC	16384	IN	Data Raw: 2e 32 38 32 2e 39 32 2e 35 34 32 2e 36 32 32 2e 37 36 33 20 31 2e 34 39 2e 36 39 38 20 32 2e 35 30 36 2d 2e 31 31 32 20 31 2e 37 36 33 2d 31 2e 30 36 34 20 32 2e 39 38 2d 32 2e 33 35 20 33 2e 32 38 38 61 2e 35 2e 35 20 30 20 31 20 31 2d 2e 32 33 34 2d 2e 39 37 32 63 2e 37 36 2d 2e 31 38 32 20 31 2e 34 39 35 2d 2e 39 34 33 20 31 2e 35 38 36 2d 32 2e 33 38 2e 30 35 34 2d 2e 38 34 35 2d 2e 31 33 39 2d 31 2e 34 32 33 2d 2e 34 35 34 2d 31 2e 37 38 34 2d 2e 33 31 2d 2e 33 35 36 2d 2e 38 30 36 2d 2e 35 37 38 2d 31 2e 35 32 38 2d 2e 35 37 38 2d 2e 37 35 20 30 2d 31 2e 32 34 38 2e 32 34 2d 31 2e 35 35 34 2e 36 32 33 61 2e 35 2e 35 20 30 20 31 20 31 2d 2e 37 38 32 2d 2e 36 32 33 5a 4d 33 2e 38 35 33 20 34 2e 30 37 31 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 30 37 Data Ascii: .282.92.542.622.763 1.49.698 2.506-.112 1.763-1.064 2.98-2.35 3.288a.5.5 0 1 1-.234-.972c.76-.182 1.495-.943 1.586-2.38.054-.845-.139-1.423-.454-1.784-.31-.356-.806-.578-1.528-.578-.75 0-1.248.24-1.554.623a.5.5 0 1 1-.782-.623ZM3.853 4.071a.5.5 0 0 1 .707

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	35.190.88.7	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 18:59:59 UTC	527	OUT	OPTIONS / HTTP/1.1 Host: sessions.bugsnag.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: bugsnag-api-key,bugsnag-payload-version,bugsnag-sent-at,content-type Origin: https://cal.frontapp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:00:00 UTC	408	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, Content-Type, Accept, Authorization, User-Agent, Referer, X-Forwarded-For, Bugsnag-Api-Key, Bugsnag-Payload-Version, Bugsnag-Sent-At Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 19:00:00 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	35.190.88.7	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 18:59:59 UTC	527	OUT	OPTIONS / HTTP/1.1 Host: sessions.bugsnag.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: bugsnag-api-key,bugsnag-payload-version,bugsnag-sent-at,content-type Origin: https://cal.frontapp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:00:00 UTC	408	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, Content-Type, Accept, Authorization, User-Agent, Referer, X-Forwarded-For, Bugsnag-Api-Key, Bugsnag-Payload-Version, Bugsnag-Sent-At Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: * Date: Tue, 16 Apr 2024 19:00:00 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49741	18.160.78.87	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 18:59:59 UTC	669	OUT	GET /api/1/scheduling/companies/glgroup/abrucia/1c1a930a HTTP/1.1 Host: cal.frontapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Front-Scheduling-Build-Timestamp: 1698816556271 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cal.frontapp.com/glgroup/abrucia/1c1a930a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:00:00 UTC	496	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 547 Connection: close Date: Tue, 16 Apr 2024 19:00:00 GMT X-RateLimit-Limit: 90 X-RateLimit-Remaining: 88 X-RateLimit-Reset: 1713294058 Vary: Origin ETag: W/"223-I370BcyKa4jyKGsaNxzx6fcT9w0" X-Front-Time: 33 X-Cache: Miss from cloudfront Via: 1.1 12133e5e898091b4367287a0ecfc7038.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: w5oJw5RAvQP-NbJi4V08xUsn18c6w9t3W00qfZ8V6aGw3Jr7V3_f9g==
2024-04-16 19:00:00 UTC	547	IN	Data Raw: 7b 22 63 6f 6c 6f 72 22 3a 22 70 69 6e 6b 22 2c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 22 22 2c 22 64 75 72 61 74 69 6f 6e 5f 6d 69 6e 75 74 65 73 22 3a 31 35 2c 22 67 72 65 65 74 69 6e 67 22 3a 22 22 2c 22 6d 65 65 74 69 6e 67 5f 73 75 6d 6d 61 72 79 22 3a 22 50 72 6f 6a 65 63 74 20 44 65 74 61 69 6c 73 20 2d 20 47 4c 47 22 2c 22 71 75 65 73 74 69 6f 6e 73 22 3a 5b 7b 22 71 75 65 73 74 69 6f 6e 22 3a 22 42 65 73 74 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 74 6f 20 72 65 61 63 68 20 79 6f 75 20 66 6f 72 20 74 68 65 20 6d 65 65 74 69 6e 67 3a 22 2c 22 71 75 65 73 74 69 6f 6e 5f 74 79 70 65 22 3a 22 66 72 65 65 66 6f 72 6d 22 2c 22 73 65 6c 65 63 74 69 6f 6e 5f 6f 70 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 5d 2c 22 73 63 68 65 64 75 6c 69 6e 67 5f 75 72 Data Ascii: {"color":"pink","display_name":"","duration_minutes":15,"greeting":"","meeting_summary":"Project Details - GLG","questions":[{"question":"Best phone number to reach you for the meeting:","question_type":"freeform","selection_options":null}],"scheduling_ur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	35.190.88.7	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:00:00 UTC	690	OUT	POST / HTTP/1.1 Host: sessions.bugsnag.com Connection: keep-alive Content-Length: 504 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 Bugsnag-Api-Key: ed2dde39ef27f43adebd4c9e3f309172 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Bugsnag-Payload-Version: 1 Bugsnag-Sent-At: 2024-04-16T18:59:58.715Z sec-ch-ua-platform: "Windows" Accept: / Origin: https://cal.frontapp.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:00:00 UTC	504	OUT	Data Raw: 7b 22 6e 6f 74 69 66 69 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 42 75 67 73 6e 61 67 20 4a 61 76 61 53 63 72 69 70 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 37 2e 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 75 67 73 6e 61 67 2f 62 75 67 73 6e 61 67 2d 6a 73 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 Data Ascii: {"notifier":{"name":"Bugsnag JavaScript","version":"7.17.4","url":"https://github.com/bugsnag/bugsnag-js"},"device":{"locale":"en-US","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537
2024-04-16 19:00:00 UTC	299	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Origin: * Bugsnag-Session-Uuid: 789bd4de-4e90-4d66-a85e-2d8bf144c80c Content-Type: application/json Date: Tue, 16 Apr 2024 19:00:00 GMT Content-Length: 21 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 19:00:00 UTC	21	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 61 63 63 65 70 74 65 64 22 7d Data Ascii: {"status":"accepted"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49742	35.190.88.7	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:00:00 UTC	690	OUT	POST / HTTP/1.1 Host: sessions.bugsnag.com Connection: keep-alive Content-Length: 504 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 Bugsnag-Api-Key: ed2dde39ef27f43adebd4c9e3f309172 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Bugsnag-Payload-Version: 1 Bugsnag-Sent-At: 2024-04-16T18:59:58.671Z sec-ch-ua-platform: "Windows" Accept: / Origin: https://cal.frontapp.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:00:00 UTC	504	OUT	Data Raw: 7b 22 6e 6f 74 69 66 69 65 72 22 3a 7b 22 6e 61 6d 65 22 3a 22 42 75 67 73 6e 61 67 20 4a 61 76 61 53 63 72 69 70 74 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 37 2e 31 37 2e 34 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 75 67 73 6e 61 67 2f 62 75 67 73 6e 61 67 2d 6a 73 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 Data Ascii: {"notifier":{"name":"Bugsnag JavaScript","version":"7.17.4","url":"https://github.com/bugsnag/bugsnag-js"},"device":{"locale":"en-US","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537
2024-04-16 19:00:00 UTC	299	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Origin: * Bugsnag-Session-Uuid: 0bbfb19b-a939-4056-a5af-ff41c65539b3 Content-Type: application/json Date: Tue, 16 Apr 2024 19:00:00 GMT Content-Length: 21 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 19:00:00 UTC	21	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 61 63 63 65 70 74 65 64 22 7d Data Ascii: {"status":"accepted"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	18.160.78.87	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:00:00 UTC	809	OUT	GET /api/1/scheduling/link/UN7FNjW_RnaJK2-1yq_AUQe5bEg3_3RNvOFlRzNKjZQ373ufX_4qGtSk6uVssspvimznMQirra5EbfrBfGQob2nc/availability?range_start=1713293999762&range_end=1718477999762&now=1713293999762 HTTP/1.1 Host: cal.frontapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / X-Front-Scheduling-Build-Timestamp: 1698816556271 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cal.frontapp.com/glgroup/abrucia/1c1a930a Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:00:01 UTC	500	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 24282 Connection: close Date: Tue, 16 Apr 2024 19:00:01 GMT X-RateLimit-Limit: 90 X-RateLimit-Remaining: 87 X-RateLimit-Reset: 1713294058 Vary: Origin ETag: W/"5eda-1OyxaJ5o3aABshVtRBCPRMHflsQ" X-Front-Time: 228 X-Cache: Miss from cloudfront Via: 1.1 10f3d2d5324392ed1372a7a61355b5ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P2 X-Amz-Cf-Id: L7ZIs8B2Abf9vX3__PbIlp7jLdL-wMTHS8KlljXJ6Vz6EIrxioW2wg==
2024-04-16 19:00:01 UTC	15884	IN	Data Raw: 7b 22 64 75 72 61 74 69 6f 6e 5f 6d 69 6e 75 74 65 73 22 3a 31 35 2c 22 74 69 6d 65 5f 73 6c 6f 74 73 22 3a 5b 7b 22 73 74 61 72 74 22 3a 31 37 31 33 32 39 35 32 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 33 32 39 36 31 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 33 32 39 36 34 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 33 32 39 37 33 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 33 33 36 34 38 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 33 33 36 35 37 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 33 33 36 36 30 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 33 33 36 36 39 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 33 33 36 37 32 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 33 33 36 38 31 30 30 30 30 30 Data Ascii: {"duration_minutes":15,"time_slots":[{"start":1713295200000,"end":1713296100000},{"start":1713296400000,"end":1713297300000},{"start":1713364800000,"end":1713365700000},{"start":1713366000000,"end":1713366900000},{"start":1713367200000,"end":1713368100000
2024-04-16 19:00:01 UTC	192	IN	Data Raw: 22 3a 31 37 31 36 35 36 38 38 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 36 39 37 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 30 30 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 30 39 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 31 32 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 32 31 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 32 34 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 33 33 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 33 36 30 30 30 30 30 2c Data Ascii: ":1716568800000,"end":1716569700000},{"start":1716570000000,"end":1716570900000},{"start":1716571200000,"end":1716572100000},{"start":1716572400000,"end":1716573300000},{"start":1716573600000,
2024-04-16 19:00:01 UTC	8206	IN	Data Raw: 22 65 6e 64 22 3a 31 37 31 36 35 37 34 35 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 34 38 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 35 37 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 36 30 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 36 39 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 37 32 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 38 31 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 38 32 30 38 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 38 32 31 37 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 38 32 32 30 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 38 32 32 39 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 38 Data Ascii: "end":1716574500000},{"start":1716574800000,"end":1716575700000},{"start":1716576000000,"end":1716576900000},{"start":1716577200000,"end":1716578100000},{"start":1716820800000,"end":1716821700000},{"start":1716822000000,"end":1716822900000},{"start":17168

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	52.85.151.115	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:00:00 UTC	391	OUT	GET /api/1/scheduling/companies/glgroup/abrucia/1c1a930a HTTP/1.1 Host: cal.frontapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:00:01 UTC	496	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 547 Connection: close Date: Tue, 16 Apr 2024 19:00:01 GMT X-RateLimit-Limit: 90 X-RateLimit-Remaining: 88 X-RateLimit-Reset: 1713294009 Vary: Origin ETag: W/"223-Erljx78nnUK9apbFoPlN2OfWkDQ" X-Front-Time: 50 X-Cache: Miss from cloudfront Via: 1.1 db72f6ab1d9d27534c6158ca17e3af1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 X-Amz-Cf-Id: 4DAmXfjDrhAgUenz6mq2FJvxD3DJ1xtazz7UiBzhfVzS9jZ61yCwBQ==
2024-04-16 19:00:01 UTC	547	IN	Data Raw: 7b 22 63 6f 6c 6f 72 22 3a 22 70 69 6e 6b 22 2c 22 64 69 73 70 6c 61 79 5f 6e 61 6d 65 22 3a 22 22 2c 22 64 75 72 61 74 69 6f 6e 5f 6d 69 6e 75 74 65 73 22 3a 31 35 2c 22 67 72 65 65 74 69 6e 67 22 3a 22 22 2c 22 6d 65 65 74 69 6e 67 5f 73 75 6d 6d 61 72 79 22 3a 22 50 72 6f 6a 65 63 74 20 44 65 74 61 69 6c 73 20 2d 20 47 4c 47 22 2c 22 71 75 65 73 74 69 6f 6e 73 22 3a 5b 7b 22 71 75 65 73 74 69 6f 6e 22 3a 22 42 65 73 74 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 74 6f 20 72 65 61 63 68 20 79 6f 75 20 66 6f 72 20 74 68 65 20 6d 65 65 74 69 6e 67 3a 22 2c 22 71 75 65 73 74 69 6f 6e 5f 74 79 70 65 22 3a 22 66 72 65 65 66 6f 72 6d 22 2c 22 73 65 6c 65 63 74 69 6f 6e 5f 6f 70 74 69 6f 6e 73 22 3a 6e 75 6c 6c 7d 5d 2c 22 73 63 68 65 64 75 6c 69 6e 67 5f 75 72 Data Ascii: {"color":"pink","display_name":"","duration_minutes":15,"greeting":"","meeting_summary":"Project Details - GLG","questions":[{"question":"Best phone number to reach you for the meeting:","question_type":"freeform","selection_options":null}],"scheduling_ur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:00:01 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 19:00:01 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=129858 Date: Tue, 16 Apr 2024 19:00:01 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:00:02 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 19:00:03 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=129793 Date: Tue, 16 Apr 2024 19:00:03 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-16 19:00:03 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	52.85.151.115	443	2200	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 19:00:02 UTC	531	OUT	GET /api/1/scheduling/link/UN7FNjW_RnaJK2-1yq_AUQe5bEg3_3RNvOFlRzNKjZQ373ufX_4qGtSk6uVssspvimznMQirra5EbfrBfGQob2nc/availability?range_start=1713293999762&range_end=1718477999762&now=1713293999762 HTTP/1.1 Host: cal.frontapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 19:00:03 UTC	500	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 24282 Connection: close Date: Tue, 16 Apr 2024 19:00:03 GMT X-RateLimit-Limit: 90 X-RateLimit-Remaining: 84 X-RateLimit-Reset: 1713294010 Vary: Origin ETag: W/"5eda-1OyxaJ5o3aABshVtRBCPRMHflsQ" X-Front-Time: 218 X-Cache: Miss from cloudfront Via: 1.1 de2ed3c94563fee614f35f9bc3f52d1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C3 X-Amz-Cf-Id: JzH4gA_sYHu713gsvE4sgIjcCb8j1g3gGLjWf08sGA2FtXwwFBKmjw==
2024-04-16 19:00:03 UTC	15884	IN	Data Raw: 7b 22 64 75 72 61 74 69 6f 6e 5f 6d 69 6e 75 74 65 73 22 3a 31 35 2c 22 74 69 6d 65 5f 73 6c 6f 74 73 22 3a 5b 7b 22 73 74 61 72 74 22 3a 31 37 31 33 32 39 35 32 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 33 32 39 36 31 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 33 32 39 36 34 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 33 32 39 37 33 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 33 33 36 34 38 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 33 33 36 35 37 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 33 33 36 36 30 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 33 33 36 36 39 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 33 33 36 37 32 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 33 33 36 38 31 30 30 30 30 30 Data Ascii: {"duration_minutes":15,"time_slots":[{"start":1713295200000,"end":1713296100000},{"start":1713296400000,"end":1713297300000},{"start":1713364800000,"end":1713365700000},{"start":1713366000000,"end":1713366900000},{"start":1713367200000,"end":1713368100000
2024-04-16 19:00:03 UTC	192	IN	Data Raw: 22 3a 31 37 31 36 35 36 38 38 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 36 39 37 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 30 30 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 30 39 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 31 32 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 32 31 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 32 34 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 33 33 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 33 36 30 30 30 30 30 2c Data Ascii: ":1716568800000,"end":1716569700000},{"start":1716570000000,"end":1716570900000},{"start":1716571200000,"end":1716572100000},{"start":1716572400000,"end":1716573300000},{"start":1716573600000,
2024-04-16 19:00:03 UTC	8206	IN	Data Raw: 22 65 6e 64 22 3a 31 37 31 36 35 37 34 35 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 34 38 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 35 37 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 36 30 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 36 39 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 35 37 37 32 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 35 37 38 31 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 38 32 30 38 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 38 32 31 37 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 38 32 32 30 30 30 30 30 30 2c 22 65 6e 64 22 3a 31 37 31 36 38 32 32 39 30 30 30 30 30 7d 2c 7b 22 73 74 61 72 74 22 3a 31 37 31 36 38 Data Ascii: "end":1716574500000},{"start":1716574800000,"end":1716575700000},{"start":1716576000000,"end":1716576900000},{"start":1716577200000,"end":1716578100000},{"start":1716820800000,"end":1716821700000},{"start":1716822000000,"end":1716822900000},{"start":17168

Target ID:	0
Start time:	20:59:52
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:59:54
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=2028,i,2845457270963885051,8289784317475384035,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:59:56
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cal.frontapp.com/glgroup/abrucia/1c1a930a"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cal.frontapp.com/glgroup/abrucia/1c1a930a

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 44

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 3428, Parent PID: 5500

General

Chronological Activities

Analysis Process: chrome.exePID: 2200, Parent PID: 3428

General

Chronological Activities

Analysis Process: chrome.exePID: 6396, Parent PID: 5500

General

Chronological Activities

Disassembly

Windows Analysis Report
https://cal.frontapp.com/glgroup/abrucia/1c1a930a