Edit tour

Windows Analysis Report
http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=

Overview

General Information

Sample URL:	http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=
Analysis ID:	1427726
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on favicon image match)

Yara detected HtmlPhish10

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2480 --field-trial-handle=2392,i,11732126496717548433,17344427469454119980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
3.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

Phishing site detected (based on favicon image match)

Source: https://activemxmore.com	Matcher: Template: outlook matched with high similarity
Source: https://activemxmore.com/main/main.php#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?cfg=amy.chen@doubleline.com	Matcher: Template: outlook matched with high similarity

Yara detected HtmlPhish10

Source: Yara match

File source: 3.5.pages.csv, type: HTML

Phishing site detected (based on image similarity)

Source: https://activemxmore.com/main/main.php#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?cfg=amy.chen@doubleline.com

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Matcher: Template: microsoft matched

Source: https://activemxmore.com/main/main.php#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...	HTTP Parser: Number of links: 0
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZLNa9MAAMWbdq1b0dlNET0IEzzIJG2-0xR2SJt-pFuStU0amoOlaZM0bZqkbdK0uYseB8LAgRcPojt6Ei8Kehi7uPP8DwRFPMiObnoeXh7v8d7t_ZLLRBom0lAa2owhaSh3HyMJHMNwFUSRLgFilAqBWVQjQLhHoecVQhLdzmQ9mXr8xL-3_yNTePN8bbO59fnFIbDR9zx3mstkgiBIO7pudrV01xllrI7dM21jhrwDgBMAOIjGNRuUGofRKYFmYZTCYQInYRQlYRhJt0QabslsqAw4TyizGG9CkCJagx25OuTCoseLUtgKhwuuXMQUWYK4cAgrMhcI4tDjRmzIFy72tcWO2B8JIudxTG3BDaSAZySEZ2r4afS6QPteH7kQZ2KG2q_oiu5MRm3XmXoHsf0oa2_LVLkyq3f8Rcjy42q1gpCmQMlwFxs7xZaUX_TC1rRdsn18Z9uFFFrtg9VCXfLl4XAATjhyx9iFbFKCkOliYbCo2K-apqzkLV0k59uUU1B5vcD2XAItBc1i1RBMexdCbdjrBzZfLpXzou808Www5STOmtfAkS_DeAlSF0h7e9jlVa_RbWBzmOk4vR4KVXlZ1gJK1gdsVt015tREwAl80pg3CmatrxqjsSVW8CZV4uyybMrZPO-5TYyzS2irgyjCjDXyltFG9VCv0_zApcJsvUkTSjB383gFZECD7jShRnAYu3PJvTPkbSxxbkaOfRwjHVezzd6GO3F009IuQ2KGZIS_qeKMtDRtWSdLwLelW8uJVOp2ZCPy4CYUyy0vJ1ORi3S2BLyMnxMXxlcTj-4q9OuVr59-j6nIcTzTLNgMjVMGKs_6XmgV8g8JXrJ0oYQTZTxDDOcNX-34vfmYcbbgHLyXAPYSiePEGsu0-aLYEGmeo...	HTTP Parser: Number of links: 0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal

HTTP Parser: Base64 decoded: http://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal

HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://activemxmore.com/main/	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal	HTTP Parser: No favicon

Source: https://activemxmore.com/main/main.php#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	HTTP Parser: No <meta name="author".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZLNa9MAAMWbdq1b0dlNET0IEzzIJG2-0xR2SJt-pFuStU0amoOlaZM0bZqkbdK0uYseB8LAgRcPojt6Ei8Kehi7uPP8DwRFPMiObnoeXh7v8d7t_ZLLRBom0lAa2owhaSh3HyMJHMNwFUSRLgFilAqBWVQjQLhHoecVQhLdzmQ9mXr8xL-3_yNTePN8bbO59fnFIbDR9zx3mstkgiBIO7pudrV01xllrI7dM21jhrwDgBMAOIjGNRuUGofRKYFmYZTCYQInYRQlYRhJt0QabslsqAw4TyizGG9CkCJagx25OuTCoseLUtgKhwuuXMQUWYK4cAgrMhcI4tDjRmzIFy72tcWO2B8JIudxTG3BDaSAZySEZ2r4afS6QPteH7kQZ2KG2q_oiu5MRm3XmXoHsf0oa2_LVLkyq3f8Rcjy42q1gpCmQMlwFxs7xZaUX_TC1rRdsn18Z9uFFFrtg9VCXfLl4XAATjhyx9iFbFKCkOliYbCo2K-apqzkLV0k59uUU1B5vcD2XAItBc1i1RBMexdCbdjrBzZfLpXzou808Www5STOmtfAkS_DeAlSF0h7e9jlVa_RbWBzmOk4vR4KVXlZ1gJK1gdsVt015tREwAl80pg3CmatrxqjsSVW8CZV4uyybMrZPO-5TYyzS2irgyjCjDXyltFG9VCv0_zApcJsvUkTSjB383gFZECD7jShRnAYu3PJvTPkbSxxbkaOfRwjHVezzd6GO3F009IuQ2KGZIS_qeKMtDRtWSdLwLelW8uJVOp2ZCPy4CYUyy0vJ1ORi3S2BLyMnxMXxlcTj-4q9OuVr59-j6nIcTzTLNgMjVMGKs_6XmgV8g8JXrJ0oYQTZTxDDOcNX-34vfmYcbbgHLyXAPYSiePEGsu0-aLYEGmeo	HTTP Parser: No <meta name="author".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZLNa9MAAMWbdq1b0dlNET0IEzzIJG2-0xR2SJt-pFuStU0amoOlaZM0bZqkbdK0uYseB8LAgRcPojt6Ei8Kehi7uPP8DwRFPMiObnoeXh7v8d7t_ZLLRBom0lAa2owhaSh3HyMJHMNwFUSRLgFilAqBWVQjQLhHoecVQhLdzmQ9mXr8xL-3_yNTePN8bbO59fnFIbDR9zx3mstkgiBIO7pudrV01xllrI7dM21jhrwDgBMAOIjGNRuUGofRKYFmYZTCYQInYRQlYRhJt0QabslsqAw4TyizGG9CkCJagx25OuTCoseLUtgKhwuuXMQUWYK4cAgrMhcI4tDjRmzIFy72tcWO2B8JIudxTG3BDaSAZySEZ2r4afS6QPteH7kQZ2KG2q_oiu5MRm3XmXoHsf0oa2_LVLkyq3f8Rcjy42q1gpCmQMlwFxs7xZaUX_TC1rRdsn18Z9uFFFrtg9VCXfLl4XAATjhyx9iFbFKCkOliYbCo2K-apqzkLV0k59uUU1B5vcD2XAItBc1i1RBMexdCbdjrBzZfLpXzou808Www5STOmtfAkS_DeAlSF0h7e9jlVa_RbWBzmOk4vR4KVXlZ1gJK1gdsVt015tREwAl80pg3CmatrxqjsSVW8CZV4uyybMrZPO-5TYyzS2irgyjCjDXyltFG9VCv0_zApcJsvUkTSjB383gFZECD7jShRnAYu3PJvTPkbSxxbkaOfRwjHVezzd6GO3F009IuQ2KGZIS_qeKMtDRtWSdLwLelW8uJVOp2ZCPy4CYUyy0vJ1ORi3S2BLyMnxMXxlcTj-4q9OuVr59-j6nIcTzTLNgMjVMGKs_6XmgV8g8JXrJ0oYQTZTxDDOcNX-34vfmYcbbgHLyXAPYSiePEGsu0-aLYEGmeo	HTTP Parser: No <meta name="author".. found

Source: https://activemxmore.com/main/main.php#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...	HTTP Parser: No <meta name="copyright".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZLNa9MAAMWbdq1b0dlNET0IEzzIJG2-0xR2SJt-pFuStU0amoOlaZM0bZqkbdK0uYseB8LAgRcPojt6Ei8Kehi7uPP8DwRFPMiObnoeXh7v8d7t_ZLLRBom0lAa2owhaSh3HyMJHMNwFUSRLgFilAqBWVQjQLhHoecVQhLdzmQ9mXr8xL-3_yNTePN8bbO59fnFIbDR9zx3mstkgiBIO7pudrV01xllrI7dM21jhrwDgBMAOIjGNRuUGofRKYFmYZTCYQInYRQlYRhJt0QabslsqAw4TyizGG9CkCJagx25OuTCoseLUtgKhwuuXMQUWYK4cAgrMhcI4tDjRmzIFy72tcWO2B8JIudxTG3BDaSAZySEZ2r4afS6QPteH7kQZ2KG2q_oiu5MRm3XmXoHsf0oa2_LVLkyq3f8Rcjy42q1gpCmQMlwFxs7xZaUX_TC1rRdsn18Z9uFFFrtg9VCXfLl4XAATjhyx9iFbFKCkOliYbCo2K-apqzkLV0k59uUU1B5vcD2XAItBc1i1RBMexdCbdjrBzZfLpXzou808Www5STOmtfAkS_DeAlSF0h7e9jlVa_RbWBzmOk4vR4KVXlZ1gJK1gdsVt015tREwAl80pg3CmatrxqjsSVW8CZV4uyybMrZPO-5TYyzS2irgyjCjDXyltFG9VCv0_zApcJsvUkTSjB383gFZECD7jShRnAYu3PJvTPkbSxxbkaOfRwjHVezzd6GO3F009IuQ2KGZIS_qeKMtDRtWSdLwLelW8uJVOp2ZCPy4CYUyy0vJ1ORi3S2BLyMnxMXxlcTj-4q9OuVr59-j6nIcTzTLNgMjVMGKs_6XmgV8g8JXrJ0oYQTZTxDDOcNX-34vfmYcbbgHLyXAPYSiePEGsu0-aLYEGmeo...	HTTP Parser: No <meta name="copyright".. found
Source: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZLNa9MAAMWbdq1b0dlNET0IEzzIJG2-0xR2SJt-pFuStU0amoOlaZM0bZqkbdK0uYseB8LAgRcPojt6Ei8Kehi7uPP8DwRFPMiObnoeXh7v8d7t_ZLLRBom0lAa2owhaSh3HyMJHMNwFUSRLgFilAqBWVQjQLhHoecVQhLdzmQ9mXr8xL-3_yNTePN8bbO59fnFIbDR9zx3mstkgiBIO7pudrV01xllrI7dM21jhrwDgBMAOIjGNRuUGofRKYFmYZTCYQInYRQlYRhJt0QabslsqAw4TyizGG9CkCJagx25OuTCoseLUtgKhwuuXMQUWYK4cAgrMhcI4tDjRmzIFy72tcWO2B8JIudxTG3BDaSAZySEZ2r4afS6QPteH7kQZ2KG2q_oiu5MRm3XmXoHsf0oa2_LVLkyq3f8Rcjy42q1gpCmQMlwFxs7xZaUX_TC1rRdsn18Z9uFFFrtg9VCXfLl4XAATjhyx9iFbFKCkOliYbCo2K-apqzkLV0k59uUU1B5vcD2XAItBc1i1RBMexdCbdjrBzZfLpXzou808Www5STOmtfAkS_DeAlSF0h7e9jlVa_RbWBzmOk4vR4KVXlZ1gJK1gdsVt015tREwAl80pg3CmatrxqjsSVW8CZV4uyybMrZPO-5TYyzS2irgyjCjDXyltFG9VCv0_zApcJsvUkTSjB383gFZECD7jShRnAYu3PJvTPkbSxxbkaOfRwjHVezzd6GO3F009IuQ2KGZIS_qeKMtDRtWSdLwLelW8uJVOp2ZCPy4CYUyy0vJ1ORi3S2BLyMnxMXxlcTj-4q9OuVr59-j6nIcTzTLNgMjVMGKs_6XmgV8g8JXrJ0oYQTZTxDDOcNX-34vfmYcbbgHLyXAPYSiePEGsu0-aLYEGmeo...	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 104.104.126.199:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.104.126.199:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 104.104.126.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /?e=amy.chen@doubleline.com HTTP/1.1Host: activemxmore.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://www.saiengroup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /main/ HTTP/1.1Host: activemxmore.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://www.saiengroup.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=e8fed20s9sarctiah9dfo4cnk6
Source: global traffic	HTTP traffic detected: GET /main/src.js HTTP/1.1Host: activemxmore.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://activemxmore.com/main/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=e8fed20s9sarctiah9dfo4cnk6
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://activemxmore.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/54ea73d52131/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://activemxmore.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://activemxmore.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87607523f9976753 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: activemxmore.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://activemxmore.com/main/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=e8fed20s9sarctiah9dfo4cnk6
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/87607523f9976753/1713399298197/6da8eb24f5f53b8a754917a6951c01ddae1de06f17567f971365618217d1d9e9/yq_oSBvvu_XQiGh HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1520722112:1713395675:Fybv0RgAUcvA2wE1JKV-kLLtV_0tb7lZl_7TvhqJ-Rs/87607523f9976753/573412a78ad2aa1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: activemxmore.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=e8fed20s9sarctiah9dfo4cnk6
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/87607523f9976753/1713399298199/25UtOJ-4PhOhACd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/87607523f9976753/1713399298199/25UtOJ-4PhOhACd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1520722112:1713395675:Fybv0RgAUcvA2wE1JKV-kLLtV_0tb7lZl_7TvhqJ-Rs/87607523f9976753/573412a78ad2aa1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1520722112:1713395675:Fybv0RgAUcvA2wE1JKV-kLLtV_0tb7lZl_7TvhqJ-Rs/87607523f9976753/573412a78ad2aa1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://activemxmore.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mail/favicon.ico HTTP/1.1Host: outlook.office.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://activemxmore.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mail/favicon.ico HTTP/1.1Host: outlook.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v3/auth HTTP/1.1Host: bc1q3jc6cu9q5t33q8gpk7h47pw.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://activemxmore.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://activemxmore.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://activemxmore.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://activemxmore.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://activemxmore.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-j1fx1ggwwalily23vjiuezfn6ijsocdmg58vgda4fdc/logintenantbranding/0/illustration?ts=636716750610080569 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://activemxmore.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-j1fx1ggwwalily23vjiuezfn6ijsocdmg58vgda4fdc/logintenantbranding/0/illustration?ts=636716750610080569 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20= HTTP/1.1Host: t.cm.morganstanley.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /teaz/648c482b60b3906833c9304bab170add/JBVNhz/YW15LmNoZW5AZG91YmxlbGluZS5jb20= HTTP/1.1Host: www.saiengroup.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.saiengroup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.saiengroup.com/teaz/648c482b60b3906833c9304bab170add/JBVNhz/YW15LmNoZW5AZG91YmxlbGluZS5jb20=Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: t.cm.morganstanley.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1520722112:1713395675:Fybv0RgAUcvA2wE1JKV-kLLtV_0tb7lZl_7TvhqJ-Rs/87607523f9976753/573412a78ad2aa1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 2780sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 573412a78ad2aa1sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_71.2.dr

String found in binary or memory: https://account.live.com/resetpassword.aspx

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 104.104.126.199:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.104.126.199:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@21/88@42/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2480 --field-trial-handle=2392,i,11732126496717548433,17344427469454119980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2480 --field-trial-handle=2392,i,11732126496717548433,17344427469454119980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label	Link
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	0%	URL Reputation	safe
https://bc1q3jc6cu9q5t33q8gpk7h47pw.com/api/v3/auth	1%	Virustotal		Browse
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css	0%	Virustotal		Browse
https://aadcdn.msauthimages.net/dbd5a2dd-j1fx1ggwwalily23vjiuezfn6ijsocdmg58vgda4fdc/logintenantbranding/0/illustration?ts=636716750610080569	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bc1q3jc6cu9q5t33q8gpk7h47pw.com	193.222.96.117	true	false	unknown
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
activemxmore.com	198.98.54.45	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
LYH-efz.ms-acdc.office.com	52.96.183.242	true	false	high
morganstanley-mid-prod2-alb-1529755948.us-west-2.elb.amazonaws.com	44.236.226.13	true	false	high
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
sni1gl.wpc.upsiloncdn.net	152.195.19.97	true	false	unknown
challenges.cloudflare.com	104.17.2.184	true	false	high
www.google.com	108.177.122.99	true	false	high
part-0012.t-0009.t-msedge.net	13.107.213.40	true	false	unknown
www.saiengroup.com	120.136.14.8	true	false	unknown
aadcdn.msauthimages.net	unknown	unknown	false	unknown
passwordreset.microsoftonline.com	unknown	unknown	false	high
outlook.office.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
ajax.aspnetcdn.com	unknown	unknown	false	high
t.cm.morganstanley.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.saiengroup.com/teaz/648c482b60b3906833c9304bab170add/JBVNhz/YW15LmNoZW5AZG91YmxlbGluZS5jb20=	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87607523f9976753/1713399298199/25UtOJ-4PhOhACd	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal	false		high
https://aadcdn.msauthimages.net/dbd5a2dd-j1fx1ggwwalily23vjiuezfn6ijsocdmg58vgda4fdc/logintenantbranding/0/illustration?ts=636716750610080569	false	0%, Virustotal, Browse	unknown
https://activemxmore.com/main/	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87607523f9976753	false		high
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css	false	0%, Virustotal, Browse	unknown
https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZLNa9MAAMWbdq1b0dlNET0IEzzIJG2-0xR2SJt-pFuStU0amoOlaZM0bZqkbdK0uYseB8LAgRcPojt6Ei8Kehi7uPP8DwRFPMiObnoeXh7v8d7t_ZLLRBom0lAa2owhaSh3HyMJHMNwFUSRLgFilAqBWVQjQLhHoecVQhLdzmQ9mXr8xL-3_yNTePN8bbO59fnFIbDR9zx3mstkgiBIO7pudrV01xllrI7dM21jhrwDgBMAOIjGNRuUGofRKYFmYZTCYQInYRQlYRhJt0QabslsqAw4TyizGG9CkCJagx25OuTCoseLUtgKhwuuXMQUWYK4cAgrMhcI4tDjRmzIFy72tcWO2B8JIudxTG3BDaSAZySEZ2r4afS6QPteH7kQZ2KG2q_oiu5MRm3XmXoHsf0oa2_LVLkyq3f8Rcjy42q1gpCmQMlwFxs7xZaUX_TC1rRdsn18Z9uFFFrtg9VCXfLl4XAATjhyx9iFbFKCkOliYbCo2K-apqzkLV0k59uUU1B5vcD2XAItBc1i1RBMexdCbdjrBzZfLpXzou808Www5STOmtfAkS_DeAlSF0h7e9jlVa_RbWBzmOk4vR4KVXlZ1gJK1gdsVt015tREwAl80pg3CmatrxqjsSVW8CZV4uyybMrZPO-5TYyzS2irgyjCjDXyltFG9VCv0_zApcJsvUkTSjB383gFZECD7jShRnAYu3PJvTPkbSxxbkaOfRwjHVezzd6GO3F009IuQ2KGZIS_qeKMtDRtWSdLwLelW8uJVOp2ZCPy4CYUyy0vJ1ORi3S2BLyMnxMXxlcTj-4q9OuVr59-j6nIcTzTLNgMjVMGKs_6XmgV8g8JXrJ0oYQTZTxDDOcNX-34vfmYcbbgHLyXAPYSiePEGsu0-aLYEGmeoesM0oZ-JoCnVyLvV_7L8OnVG8mkb7Ytp9uxtOn6P5Y_XoucrR59-fDs1d7R98of0&mkt=en-US&hosted=0&device_platform=Windows+10	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1520722112:1713395675:Fybv0RgAUcvA2wE1JKV-kLLtV_0tb7lZl_7TvhqJ-Rs/87607523f9976753/573412a78ad2aa1	false		high
https://bc1q3jc6cu9q5t33q8gpk7h47pw.com/api/v3/auth	false	1%, Virustotal, Browse	unknown
http://www.saiengroup.com/favicon.ico	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg	false	URL Reputation: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/g/54ea73d52131/api.js?onload=onloadTurnstileCallback	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/87607523f9976753/1713399298197/6da8eb24f5f53b8a754917a6951c01ddae1de06f17567f971365618217d1d9e9/yq_oSBvvu_XQiGh	false		high
https://activemxmore.com/main/src.js	false		unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://activemxmore.com/favicon.ico	false		unknown
https://outlook.office.com/mail/favicon.ico	false		high
http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=	false		high
https://activemxmore.com/main/main.php	false		unknown
https://activemxmore.com/?e=amy.chen@doubleline.com	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://account.live.com/resetpassword.aspx	chromecache_71.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.195.19.97	sni1gl.wpc.upsiloncdn.net	United States	15133	EDGECASTUS	false
44.236.226.13	morganstanley-mid-prod2-alb-1529755948.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.17.3.184	unknown	United States	13335	CLOUDFLARENETUS	false
52.96.173.162	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.213.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
120.136.14.8	www.saiengroup.com	Japan	9371	SAKURA-CSAKURAInternetIncJP	false
52.96.183.242	LYH-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
198.98.54.45	activemxmore.com	United States	53667	PONYNETUS	false
193.222.96.117	bc1q3jc6cu9q5t33q8gpk7h47pw.com	Germany	3303	SWISSCOMSwisscomSwitzerlandLtdCH	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
108.177.122.99	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1427726
Start date and time:	2024-04-18 02:13:52 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@21/88@42/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZLNa9MAAMWbdq1b0dlNET0IEzzIJG2-0xR2SJt-pFuStU0amoOlaZM0bZqkbdK0uYseB8LAgRcPojt6Ei8Kehi7uPP8DwRFPMiObnoeXh7v8d7t_ZLLRBom0lAa2owhaSh3HyMJHMNwFUSRLgFilAqBWVQjQLhHoecVQhLdzmQ9mXr8xL-3_yNTePN8bbO59fnFIbDR9zx3mstkgiBIO7pudrV01xllrI7dM21jhrwDgBMAOIjGNRuUGofRKYFmYZTCYQInYRQlYRhJt0QabslsqAw4TyizGG9CkCJagx25OuTCoseLUtgKhwuuXMQUWYK4cAgrMhcI4tDjRmzIFy72tcWO2B8JIudxTG3BDaSAZySEZ2r4afS6QPteH7kQZ2KG2q_oiu5MRm3XmXoHsf0oa2_LVLkyq3f8Rcjy42q1gpCmQMlwFxs7xZaUX_TC1rRdsn18Z9uFFFrtg9VCXfLl4XAATjhyx9iFbFKCkOliYbCo2K-apqzkLV0k59uUU1B5vcD2XAItBc1i1RBMexdCbdjrBzZfLpXzou808Www5STOmtfAkS_DeAlSF0h7e9jlVa_RbWBzmOk4vR4KVXlZ1gJK1gdsVt015tREwAl80pg3CmatrxqjsSVW8CZV4uyybMrZPO-5TYyzS2irgyjCjDXyltFG9VCv0_zApcJsvUkTSjB383gFZECD7jShRnAYu3PJvTPkbSxxbkaOfRwjHVezzd6GO3F009IuQ2KGZIS_qeKMtDRtWSdLwLelW8uJVOp2ZCPy4CYUyy0vJ1ORi3S2BLyMnxMXxlcTj-4q9OuVr59-j6nIcTzTLNgMjVMGKs_6XmgV8g8JXrJ0oYQTZTxDDOcNX-34vfmYcbbgHLyXAPYSiePEGsu0-aLYEGmeoesM0oZ-JoCnVyLvV_7L8OnVG8mkb7Ytp9uxtOn6P5Y_XoucrR59-fDs1d7R98of0&mkt=en-US&hosted=0&device_platform=Windows+10

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.176.94, 173.194.219.139, 173.194.219.138, 173.194.219.102, 173.194.219.113, 173.194.219.100, 173.194.219.101, 64.233.185.84, 34.104.35.123, 13.85.23.86, 72.21.81.240, 20.166.126.56, 192.229.211.108, 74.125.136.95, 172.217.215.95, 108.177.122.95, 64.233.176.95, 74.125.138.95, 64.233.185.95, 142.251.15.95, 142.250.9.95, 173.194.219.95, 64.233.177.95, 172.253.124.95, 142.250.105.95, 40.126.29.2, 40.126.29.1, 40.126.29.23, 40.126.29.22, 40.126.29.0, 40.126.29.21, 40.126.29.20, 152.199.4.33, 20.190.157.16, 142.250.105.94
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, na.privatelink.msidentity.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, mscomajax.vo.msecnd.net, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, aadcdn.azureedge.net, aadcdn.ec.azureedge.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, client.ppe.repmap.microsoft.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www.ppev6tm.aadg.akadns.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, prdf.aadg.msidentity.com, aadcdnoriginwus2.azureedge.net, cs22.wpc.v0cdn.net, wu.ec.azureedge.net, www.tm.f.prd.aadg.akadns.net, ctldl.windowsupdate.com, aadcdn.msauth.net, wu-bg-shim.trafficmanager.net, passwordreset.mso.msidentity.com, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginw
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1498
Entropy (8bit):	4.81759827491068
Encrypted:	false
SSDEEP:	24:UhvVovixQcvUvED/frfnQYRKYKvZiANncisDmZu7SECywEZS9Y6f:U7ZM8vbA3smgm89CywYkV
MD5:	11FE4E6509513DB245F1F97E37C5D3AB
SHA1:	05322C35B6BFAE84CE8C626BD7B1F8C4A6F15A6D
SHA-256:	78D437B40A85299F96ED9D02E35F23FD3D3EF63D844D8D2523A15516F7E1D09C
SHA-512:	E8A7C3B06C54B671FF6772D6A360DD0B4A65888B4DBD32AE04D14E4971343A71E1B4EC1E58BD45898744A1B0DF4EDE24141FF47E2C0393E18AACFC97E6F10D76
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/css/ltrStyle.css?v=1342177280
Preview:	.paddingright { padding-right: 20px; }...paddingleft { padding-left: 20px; }...paddingright7 { padding-right: 7px; }...paddingleft7 { padding-left: 7px; }...paddingleft10 {padding-left: 10px; }...alignright { text-align: right; }...alignleft { text-align: left; }...leftalign {text-align: left; margin-left:0px;}.....borderRight {border-right: 1px solid black; padding: 0px;}.....userTypeRadioButtonMargin{margin-left: 10px; margin-top:50px;}...userVerificationInputLabel {text-align:left;padding-right: 10px;}...radioButtonMoreInformation { padding-left: 20px }.....header .logo{float:left; padding-left:30px;}.....HelpCallout td.PosRight{padding: 8px 0px 0px 0px; margin: 0px; vertical-align: top; font-size: 1px; border: none !important; background-color: transparent !important;}...HelpCallout td.PosRight > div{font-size: 1px; position: relative; left: 1px; border-bottom: none !important; border-right: none !important; border-left: none !important; width: 15px; background-color: transparent !

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42414)
Category:	downloaded
Size (bytes):	42415
Entropy (8bit):	5.374316408837108
Encrypted:	false
SSDEEP:	768:JC9//LuIHdibSt3JocMjX1yj8S7dYdxoqmNdbyBVnPNAZASyXY1eO4mH19B59:OuIHdibSt3aFyjX1PNd6+9
MD5:	374FEC8B5E50CD6AB980F3FEF21A5AA0
SHA1:	7F474607991A19B6F1B78CC32E0F75B501B60774
SHA-256:	8AF2DA74872F03E058AB79A584176D2086AFC01BBD42DD2ED14259179341BE6A
SHA-512:	3420E0DEF4FA49BD8B67DA80F1C3F56A08B4892BC0373D7BB824F8126713B209116147D4B1E1D5E7B07C6DBC58B1AD411AEB2F5A0DAE99FFC220246311E3808E
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/54ea73d52131/api.js?onload=onloadTurnstileCallback
Preview:	"use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);function m(h){bt(s,o,u,m,b,"next",h)}function b(h){bt(s,o,u,m,b,"throw",h)}m(void 0)})}}function M(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):M(e,r)}function Ie(e,r,t){return r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Ve(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{},o=Object.keys(t);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(t).filter(function(u){return Object.getOwnPropertyDescriptor(t,u).enumerable}))),o.forEach(function(u){Ie(e,u,t[u])})}return e}function fr(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	downloaded
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/ScriptResource.axd?d=aZLH4mSlwVT2bfQsqN_cSwyYyu3ks1oNtEUpMeosxjDyVX_6TB3IW5CEdatXFuv2I4zJTROm0VtmRKop2xS7bo0w-Iix-BcMl2_cNtK35bqyAoFbyXyvBqrmEkdN4A7rfIluoWj_uDzkv387yziPFleU1xPL4uvNI8i9rGQ3gLT9Eo-Z4-W34GRU8l-e4ISM3aOfMGbZKuDklekpBXyFblmjFoJXOxTzBgqF-kp9hX41&t=74258c30
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	7.762338770217686
Encrypted:	false
SSDEEP:	48:c/CeK/fE+XoVldIkPdTWbuf173xX964boBdIhLE:ntcx/Iksbuf17f64borIK
MD5:	8DC34013E911C5F68FC2BCA0400CB06F
SHA1:	16BAFA91AF100D65C4945F04E0C6E1643B98CF00
SHA-256:	795029D360C3D16233FCE96F1BFF13C261535C0885FAE806CFF766F32D96BCEE
SHA-512:	83ACA42A30BFD629BC1E88D3ED154475E7949C1B154D19E6C9EF1DE825BA7967C0B6DA9EE79E7B420668242CCE5931DF344C97278A254F0A72C3D09EABED6051
Malicious:	false
Reputation:	low
URL:	https://client.ppe.repmap.microsoft.com/Images/hipaudioplay.png?vv=100
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....pHYs...........S.....tEXtCreation Time.05/06/16...o....tEXtSoftware.Adobe Fireworks CS6.....qIDATh..=l.E.....H..H*.\|... ...&.D..).@....&...N....)_.E ...(.p...p(H...Ht... ..0............i.}s.....{`ss....;.......:...u..."....Az.r.%.9.\|....wU.j...o....N4...~....g.u.=`.;..9.7.%....Ad#......9....~7.....&.a........`]x^D....&,"..kv.l..K.S+!....#{.xm.;..%.+F<.\..#...bN...2...\.".I..U]..#.dWy$."r.2;Z...w)oD..H..u..M.'.k70.<4aG..`'~......k31W.2!Ue.A"..j....X..C...dNUd.... .j.\|c."..../..P.MXD......C`>7Y.K...n.....U..#..^4....Uu...Q.);.`9q.53..n.@.......A6.E,6.-d; ........nl.>..."..N7..9\6.....p^a..4aG...3...gUu#..j...2............f.....^.)...Udo'&..G.C.Z...L).....".t...pCD..n..a.....E....F...o.k.Y+b...[...gT..... ...]....V..m.!\..SCwh8w..J^.3N........\.W.....3.....lP.Da........-..........@_...i......r..%..)E.Q...3..M..o.$...`...".......-/EHIDZ.q.MC.......D.Q..".. ..#...................1...p.x?dKP.=...{u\.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	405
Entropy (8bit):	6.927238031773719
Encrypted:	false
SSDEEP:	6:6v/lhPGtyR8R/Chm+jnDs9cCXz6fXIpvI+WOcy0f11VTaENo+7PfW3e37zt1afwp:6v/7SyG/HYfXJOvU1zTa8o+W8
MD5:	D4FFE61373F6AA32EEB8CA7CD41AB980
SHA1:	4925FAC4BC73EFB7C7BBC32B11C435ECF1D61674
SHA-256:	D5C54FFC6B8BD44D932BE8F37B1CD5B666205C7574F9D56EF68E56F83E08FFAD
SHA-512:	0F7EDE96F20BB3C053C246FFE1EF8CE739CEF7757FAAED031A365299B88664A046557C2C7FDB3BADED070BA4EBA1A14950D7E3A066B4976BF07142CEFA48BEEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8.......sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<....IDAT8O...0...nf..y.,X4.g.I.h4..H.`.b.bA..f.n....%.=.iS.?N....^....A.(...~.i..m[.Qyz..iB..(...8...<G.........y..$.8....EQ.u]..I..(R.l...a...=..?t...CUU.......-..7.!..@.u0\..y.@..[a...p@.J.......e..>.Y..i..>A...+.,[. X9..z....B.4..+)..`n/..Q..>...y....e<....IEND.B`.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 448x448, components 3
Category:	downloaded
Size (bytes):	17512
Entropy (8bit):	7.388980177870611
Encrypted:	false
SSDEEP:	192:+fqEuVNHAywodY7aaFLococtsOQrR20cQpSWpDHFApIejYfyo26+hW8nsn+U+HxE:+8HTwoEococtsOQaQkWZmI2fZsPIxE
MD5:	9BD7FB937F3E3B9A42B519A3E00F2014
SHA1:	92C14ABD0BDB017613C6064B9A3E48D25712BA80
SHA-256:	52940F1B8CB895AE2552019EB2819706E3470950988E322BCE11963E853C1245
SHA-512:	1609BF39AA7EE16E7B71FB087EAAFCE32726430F3E7E225E484150B85EDC096AB387B884F43F0DE0F408080083D0263A302CC7F98029CFD0F67D84C1E5720C73
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauthimages.net/dbd5a2dd-j1fx1ggwwalily23vjiuezfn6ijsocdmg58vgda4fdc/logintenantbranding/0/illustration?ts=636716750610080569
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	4.14434000076088
Encrypted:	false
SSDEEP:	48:gFLLLLLLBWj2P+W3DS4E4U4R7454y4aR+BddHOlFgWSsjfQeiFzm22lhCa1I/CPP:tjQDdNKevXOl/amZP
MD5:	AC16FA7FC862073B02ACD1187FC6DEF4
SHA1:	F2B9A6255F6293000F30EEE272ABDD372A14E9D3
SHA-256:	E35D94B76894D6ECA96FF5B1A12D94DFE73485EF3C52CB5B4395BE8FFAC1CB45
SHA-512:	FF0884F9F3DED38191C7D1F214545509E80DE614BC824395F3C9412AED8D81DB95BA7E761939AC1F1798C1D39A7969A3DBF373D03A88404345714EDD8165F19D
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..'.....................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(.....~......................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(.."................................................ ... ... ... ... ... ... ... .."..(..(..(..(..(..(..(..(..$.....}...............................................y...y...y...y...y...y...y...y...y...%..(..(..(..(..(..'.....\|..............................

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1525
Entropy (8bit):	4.80220321270831
Encrypted:	false
SSDEEP:	24:jQB6rLbbhhye8jDjpfj/MALSj0eajoq0MgV05SkuVTgEbwe/sT5wiMa3sr6sHr3H:j8eLrynvlwIeyoJMluVEE0B7srH
MD5:	ACA0F1B02DC406E76DDC5F2BDEBEC6CE
SHA1:	594C930BE86B8843377565E349D2A10F1755A13A
SHA-256:	0446C6FD9AEB7DCD7CC089FA25323B1AE9AFA77B4CF8D4449F7D2D1B2467393A
SHA-512:	06887860F73D38799FFF8BF5B2972160B68C303EC904813861190E9A8A6477E4D300882994D661FDFC118C408625C537D8B28287DC9941D50302BD91C88ED98F
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/js/Common.js
Preview:	.....function GetCookieValue(cookieName)..{.. if (document.cookie == undefined \|\| document.cookie == "").. return "";.... var name = cookieName + "=";.. var cookieArray = document.cookie.split(';');.. for (var i = 0; i < cookieArray.length; i++).. {.. var clientCookie = cookieArray[i].trim();.. if (clientCookie.indexOf(name) == 0).. {.. return clientCookie.substring(name.length, clientCookie.length);.. }.. }.. return "";..}....function DeleteCookie(name)..{.. if (GetCookieValue(name).length > 0).. {.. document.cookie = name + "=" + ";expires=Thu, 01 Jan 2000 00:00:01 GMT";.. }..}....function GetUserSessionData(key) {.. var sessionStorage = window.sessionStorage;.. if (sessionStorage[key] == null) {.. return "";.. }.. return sessionStorage.getItem(key);..}....function SetUserSessionData(key, value) {.. var sessionStorage = window.sessionStorage;.. sessionStorage.setItem(key, val

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HiPs:CPs
MD5:	D6B82198AF25D0139723AF9E44D3D23A
SHA1:	D60DEEF1847EEEF1889803E9D3ADC7EDA220F544
SHA-256:	A5C8CC49FA6649BE393EF22C2B31F1C46B671F8D763F783ED6D7B4E33669BDA3
SHA-512:	B21BEE2EEC588308A9DC3C3C2405377704B39B08AA20CBA40BA6E6834E67CF6F2C086E0701F5B05AEE27E2677E9C5C24FF137318275ACA00DD063DF3DCC07D4D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlprOv4-J9VARIFDVd69_0=?alt=proto
Preview:	CgkKBw1Xevf9GgA=

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 448x448, components 3
Category:	dropped
Size (bytes):	17512
Entropy (8bit):	7.388980177870611
Encrypted:	false
SSDEEP:	192:+fqEuVNHAywodY7aaFLococtsOQrR20cQpSWpDHFApIejYfyo26+hW8nsn+U+HxE:+8HTwoEococtsOQaQkWZmI2fZsPIxE
MD5:	9BD7FB937F3E3B9A42B519A3E00F2014
SHA1:	92C14ABD0BDB017613C6064B9A3E48D25712BA80
SHA-256:	52940F1B8CB895AE2552019EB2819706E3470950988E322BCE11963E853C1245
SHA-512:	1609BF39AA7EE16E7B71FB087EAAFCE32726430F3E7E225E484150B85EDC096AB387B884F43F0DE0F408080083D0263A302CC7F98029CFD0F67D84C1E5720C73
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	68
Entropy (8bit):	4.625316929997096
Encrypted:	false
SSDEEP:	3:tpSf4Ck8efFlK5ly:tak8efFlyly
MD5:	D1690731F22021E1466FBCD0DB6326EF
SHA1:	78F95BA0B7F82BBB7067000242DE860594ABD9C3
SHA-256:	490216DF4F089BB5C249BCF4034D0671254CA4236EC3ECA935AAC4B17E0FC7F3
SHA-512:	10B3CE812684D28DC72B74BA220E9A0DEE38550D49D25BB40B9EEB8764EE386E5F530D28A5E7C8E159B5C672D85D8649B102F3F04BD96092F9787ACACA4DBDF1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAnYh4U85ulXExIFDURbFPwSBQ2L4FIoEgUNxK_d4xIFDW1rCkoSBQ2VKJT-?alt=proto
Preview:	CjEKCw1EWxT8GgQIZBgCCgcNi+BSKBoACgcNxK/d4xoACgcNbWsKShoACgcNlSiU/hoA

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	135
Entropy (8bit):	4.730167916533376
Encrypted:	false
SSDEEP:	3:qVv/FTL//rG3oOkADY3LQHEOt8jOkADLWEHsVM7L//+ac4NGb:qF/pO3+mY7QHtSmfHsVI6X4Qb
MD5:	83B862BEAD2D480026254FB2A6EB9969
SHA1:	26BAD9E6C1579172B0E3B6BC1C18918164FF6478
SHA-256:	FB258CB538CA92D61C8CD4EB08CC23DA70C278B8766EAA731CE11E9B2F1DA4D4
SHA-512:	E4AB645251A514EE41457923B7EC8EEE4A8B0A2B77DC046DA5463B2C6020E4E8497268830C3F75387DD6AD02E75C8C71952FA25437D9F53CF20EB433F7B68A33
Malicious:	false
Reputation:	low
Preview:	<html>. <body>. <script>window.location.href="/index.php?" + window.location.href.split("?")[1];</script>. </body>.</html>

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	46376
Entropy (8bit):	4.760560792293901
Encrypted:	false
SSDEEP:	768:QgRN7ChZGd/5zEhQ49zXWV/eTSLtiMK7OQyOYZ:V1d/5edgVrlH
MD5:	DBFAC7887A157C9B73DC42927FC15B74
SHA1:	435FD188BF66F0207EEB298DD13228D17D36E4D1
SHA-256:	FC66E3943BC6EDC7B1F79D952D31DABCBA3BD576190DEEB9A7518CEE6B75C5A1
SHA-512:	C1918B35A03BD2110C2CB4EAD140BA342C54EE7BEE2C1E4B6582B56B86DA93AECDDA92DA626C7B15BDEBC067893ACD354919495551E71EE0C9D5993B43433958
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/js/Webtrends.js
Preview:	// WebTrends SmartSource Data Collector Tag..// Version: 8.6.2..// MS Version: 3.2.5..// Tag Builder Version: 3.0..// Created: 04/01/2011..function WebTrends() {.. var that = this;.. if (typeof (gDcsId) != "undefined" && gDcsId) this.dcsid = gDcsId;.. else this.dcsid = "not_a_valid_dcsid";.. if (typeof (gDomain) != "undefined" && gDomain) this.domain = gDomain;.. else this.domain = "m.webtrends.com";.. if (typeof (gTimeZone) != "undefined" && gTimeZone) this.timezone = gTimeZone;.. else this.timezone = -8;.. if (typeof (gFpcDom) != "undefined" && gFpcDom) this.fpcdom = gFpcDom;.. else {.. if (/microsoft.com$/.test(window.location.hostname)) {.. this.fpcdom = ".microsoft.com";.. } else {.. this.fpcdom = window.location.hostname;.. }.. }.. if (typeof (gOffsite) != "undefined" && gOffsite).. if (gOffsite == true \|\| gOffsite == "true") this.fpcdom = "";.. this.navigationtag = "div,table";.. if (typeof

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	7.072122642964318
Encrypted:	false
SSDEEP:	12:d44xCq3nQQ5Q36sd0Tc/ET4Io9yjPy00EjNF8:d40CqXQQ5E69qEkI4Wy0lNF8
MD5:	309B41EE7A44BD51E5D1B52CCC620E5B
SHA1:	B162CE55DE01BF7C005F8CE4D4D7C32E7AEACA08
SHA-256:	F213507641FD02EC43981535823474ECFDE973D1B33A6CD385F1F0827FD4B528
SHA-512:	9279138126F8FEDD3AEF32BA4BCD78D3D26BBD4E7DE6F3B21014B96C34D7E69BC4C6471CC94772346CB6C7F9020EB5FE1A3A96686A5B250F5CCDEE54A0936F4D
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/hip_text.gif
Preview:	GIF89a.....;....333..........ZZY.........fff.........ssr...........................................................................................MML.........@@@....................................!.....;.,.............p.+.....9.P'..D.`..........t..pB\C.k..n...[..x7hRt..x7-}.92....}%p5.+..8..9552...n2...#.3//...3../33..."..3+.../9..22....3....+./.9.2......9.........3.....}(.).....5..........7......`...........,"J....D>Dlh...F4D(..I..I..@...!..0]B..d%..w...;

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/header_microsoft.png
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	dropped
Size (bytes):	478
Entropy (8bit):	7.072122642964318
Encrypted:	false
SSDEEP:	12:d44xCq3nQQ5Q36sd0Tc/ET4Io9yjPy00EjNF8:d40CqXQQ5E69qEkI4Wy0lNF8
MD5:	309B41EE7A44BD51E5D1B52CCC620E5B
SHA1:	B162CE55DE01BF7C005F8CE4D4D7C32E7AEACA08
SHA-256:	F213507641FD02EC43981535823474ECFDE973D1B33A6CD385F1F0827FD4B528
SHA-512:	9279138126F8FEDD3AEF32BA4BCD78D3D26BBD4E7DE6F3B21014B96C34D7E69BC4C6471CC94772346CB6C7F9020EB5FE1A3A96686A5B250F5CCDEE54A0936F4D
Malicious:	false
Reputation:	low
Preview:	GIF89a.....;....333..........ZZY.........fff.........ssr...........................................................................................MML.........@@@....................................!.....;.,.............p.+.....9.P'..D.`..........t..pB\C.k..n...[..x7hRt..x7-}.92....}%p5.+..8..9552...n2...#.3//...3../33..."..3+.../9..22....3....+./.9.2......9.........3.....}(.).....5..........7......`...........,"J....D>Dlh...F4D(..I..I..@...!..0]B..d%..w...;

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2463
Entropy (8bit):	6.994052150121201
Encrypted:	false
SSDEEP:	48:H0itvnLUG0J3nL8VO2ocia6Dk4MAbpGW4YBE/2p:HfNmT2QDnMAbsWTp
MD5:	93DE6FB07C1382459E473381DA5D0E7E
SHA1:	4E1208D482A7ABA8C86FDCF8E0E92C90BB8C8C8A
SHA-256:	E97FA0CFE4B0A7BB22E9713A67D4667DA064E674A944D607E78F0D3BF48E57A5
SHA-512:	B415DE10B55639DD5DFDD038FD490B675059122373659DD86AA00EBC7F6735FD22360264226F8675741FB76F3B3A16E9AB7FA907F489B377EF16E9222AA26E3B
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/wait_animation.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:BCB95722648AE111A86BB806ED51E581" xmpMM:DocumentID="xmp.did:185F1A028B0511E19AA1A07B5BDC793D" xmpMM:InstanceID="xmp.iid:185F1A018B0511E19AA1A07B5BDC793D" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D7EC7F987A8AE111A86BB806ED51E581" stRef:documentID="xmp.did:BCB95722648AE111A86BB806ED51E581"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......................................................................................................

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/WebResource.axd?d=2_9P-7FWCwUTw0t6PZgNgil7QYOdZv7mV3mTzPl_abY06iJhav3EeS0t3M_odI-eZMnD5CNzdW6tfsv0h7u9R5JWbOmxe47Usx_LRUKjpGi5F2_U3VOPZAXsUn8Iz933LGYQB0e77hidpcjWqh1nCg2&t=638478749639812753
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2463
Entropy (8bit):	6.994052150121201
Encrypted:	false
SSDEEP:	48:H0itvnLUG0J3nL8VO2ocia6Dk4MAbpGW4YBE/2p:HfNmT2QDnMAbsWTp
MD5:	93DE6FB07C1382459E473381DA5D0E7E
SHA1:	4E1208D482A7ABA8C86FDCF8E0E92C90BB8C8C8A
SHA-256:	E97FA0CFE4B0A7BB22E9713A67D4667DA064E674A944D607E78F0D3BF48E57A5
SHA-512:	B415DE10B55639DD5DFDD038FD490B675059122373659DD86AA00EBC7F6735FD22360264226F8675741FB76F3B3A16E9AB7FA907F489B377EF16E9222AA26E3B
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:BCB95722648AE111A86BB806ED51E581" xmpMM:DocumentID="xmp.did:185F1A028B0511E19AA1A07B5BDC793D" xmpMM:InstanceID="xmp.iid:185F1A018B0511E19AA1A07B5BDC793D" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D7EC7F987A8AE111A86BB806ED51E581" stRef:documentID="xmp.did:BCB95722648AE111A86BB806ED51E581"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......................................................................................................

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4020
Entropy (8bit):	7.929907559552797
Encrypted:	false
SSDEEP:	96:1X+Yg6Iet+ZpBmQKEuhA/4oJqNoCkQV+CX8h:Fg69t+YfPhEBPnC+t
MD5:	36AFB641BECFAD75FED5F4E6E8C39268
SHA1:	2495652F017B7A06D796AFE9C4A06ECD54F9CCFE
SHA-256:	5C2192A3932CB78B431A1AC0F3F3D73414A31C63D5CB279F2687E58C72694200
SHA-512:	08C27020CF80A181B941EE144090FFBDD12ED34BA8CBEC037ACECE63F850FF8A69BE6DDB0EC24F7141C46F27779ED59AF84A55FB367C1B6F8893B444F44C5AF5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...H.......}.....pHYs..!8..!8.E.1`....sRGB.........gAMA......a....IIDATx...r....[ZZ..V.'0......].......z....M..U.%........C.....}...s...mIV.O5...... ...U.Hq@b......Y..../)..hy.._S......KzK...O\5EQ...(....B.(......(J ...(.......B.(......(J ...(.......B.(..H..EQ.C...V...7.//...~...?.....h4:.@TH.E....}........k.v....L./.@TH...pGN.;.....'.(s...k.......4GTH...'O.~...g[..o.."....l..>.G...;..~...&.....d..u.^F.........M.h.....>.}>..........[......E.b..?.u..{.B........M._.iAh.>~.<S...=.@`e..e....R....._ViA.E....R.@...@..vm.'Ei.v..\>QD..e..R......;o.p{......./^d..TH;.,F>..6...1?..E.p.}..J.p...XD.........7.^b..../.w...........n0.+R.V).J.a..^.X.S..B(..W+++..W. ..e%"Z.[.{,....JQ.iG`....(5..e..`u.*.=.)J...........C.!.@..;$.i.F...W.[....#............k.(J.z....`.dB..)..-H...R.H..O.#V..%......W.4>.'..aJ9.2Q..+.R..id`.x..1.. .../.(J%..>2d.QJ..7.\|.S`..10>..}.M#.....4......<f}..OWO..m.;C[;u.\|P!......L...S.Egr.....3.k.......i.........O...

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	downloaded
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/ScriptResource.axd?d=rKi1V3VGNYf9Wo4eEjkaEPP-kuASnqlHGD20Welj7KIV3NdO7hWPWT2YNjz_Q67962GGuvSh9a2PBU49MfN31fzXjV7ZIVY8eQeKVfB1MXjxEwjK0MQUJ5A91IX5rub-JCkN4CeWiYuq_NMtX7gL4aLMC2zrA36YBRqcyp19QBnvqBNTHSWUbFlRe3ATp36Z2fLUjTpPRNCswW2M9TrU0Mn0MXArQ5Sm_nIYwJwUU_w1&t=74258c30
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (941), with CRLF line terminators
Category:	dropped
Size (bytes):	51589
Entropy (8bit):	4.644092201413374
Encrypted:	false
SSDEEP:	768:3VBsD8iGxcdwIRoL5IBRe7RMCb9BlQfWGfAlBRsYXzrSSl:3VpUrRfBRe7eCXlQfWGfAlBRsYX6Sl
MD5:	F37FBB9D60F0F596AC811DCD28047770
SHA1:	0860242D78DB7DC2D16D3035B5EB802B1DE11048
SHA-256:	D8D7795E4A6F5CD59E946CD5AA62BDF4716BD98A45659663806204D586CEC4CB
SHA-512:	B35497AE4626A5FD1A0F6C125A5871118D346121CA9AE33FD53C3B4E030BF9B4AEA5C4C52E12513FE56E020E5DAEDD5B8517692798141309FDF52B2BE54ECC47
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">..<head><title>...Microsoft Online Password Reset..</title><meta http-equiv="x-ua-compatible" content="IE=9" /><meta http-equiv="Expires" content="0" /><meta http-equiv="Pragma" content="no-cache" /><meta http-equiv="Cache-Control" content="no-store, no-cache" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta name="robots" content="noindex, nofollow, NOODP, NOYDIR" /><meta name="viewport" content="width=device-width, initial-scale=1" /><link id="FavoriteIcon" rel="Shortcut Icon" type="image/x-icon" href="../favicon.ico?v=1342177280" />.... <script src="//ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js" type="text/javascript"></script>.. <script type="text/javascript">window.jQuery \|\| document.write('<script type="text/javascript" src="../js/jquery-3.6.0.min.js">\

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12980
Entropy (8bit):	4.656952280411437
Encrypted:	false
SSDEEP:	384:QjJmcs01WskN59g1+VW1aEV4xvbw94l1R5SUcZEWajJIcjqTqxBojafes0OPUE9h:t4i7l1rSVajJWjs0O8E9h
MD5:	8EDFCD3F7A179CFF6B123DFF50F29770
SHA1:	7A2D9BB4B9F6072AB3049E6421021A5BA0A3DADF
SHA-256:	D0B747C7F7414A08B0D5107832B2F4BB44A9BB4A3AAD28390F58EDE8BBEA6AE1
SHA-512:	169D1C71078DCB1C65B3CBAFBA3379B94718D6C1E472990666430A6B2C0483CC9B27E13820A29D2DCA2364D3CD3F7D2ECDED48B9ACF406BF74CB505489FB9503
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/js/Button.js?v=1342177280
Preview:	.//------------------------------------------------------------..// Copyright (c) Microsoft Corporation. All rights reserved...//------------------------------------------------------------....var Button = new Object();....Button.ActiveButton = null;..Button.FocusButton = null;..Button.DefaultButton = null;..Button.CancelButton = null;..Button.ActivatedButtonID = null;..Button.Groups = {};....Button.SetText = function(id, text) {.. var button = document.getElementById(id);.. if (button != null) {.. for (var i = 0; i < button.children.length; i++) {.. var ch = button.children[i];.. if (ch.tagName.toLowerCase() == 'span') {.. ch.innerHTML = text; //// TODO: this causes the text wrapped with an <a> tag to get inserted in Firefox, which needs to get fixed... break;.. }.. }.. }.. var span = document.getElementById(id + '_disabled');.. if (span != null) {.. for (var i = 0; i < span.childr

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (33188), with no line terminators
Category:	downloaded
Size (bytes):	33188
Entropy (8bit):	5.145410971164117
Encrypted:	false
SSDEEP:	384:HS4lnkYoJkNTGM+ymFwezJbXon/JW6bB2xO56mJp6QfhXgXIzq0q4xtVBLy8:voJkAk6zkd2Uvf0Ux
MD5:	A63F9AC8E242BF3D868574AAD5732642
SHA1:	C8C4291FEAF6F87E96958933F8193142C35755C2
SHA-256:	3AEC09EBED51282F52B8C2AAD364360FC82D96C018364984DCDE5DDB019C3547
SHA-512:	D70D37C9F24DA233D7B6937069F240D509E58141EC0B2535EC221B3E1B73064FD091AFB4EACB92DFB07D93A0BA7E3F430A24817EE3B3625520F225F49DA0A046
Malicious:	false
Reputation:	low
URL:	https://activemxmore.com/main/src.js
Preview:	document.write("<html lang=\"en-US\" class=\"lang-en-us\"><head><title>Just a moment...<\/title><meta http-equiv=\"Content-Type\" content=\"text\/html; charset=UTF-8\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE=Edge\"><meta name=\"robots\" content=\"noindex,nofollow\">\r\n<script src=\"https:\/\/challenges.cloudflare.com\/turnstile\/v0\/api.js?onload=onloadTurnstileCallback\" defer><\/script>\r\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131}button,html{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}@media (prefers-color-scheme:dark){body{background-color:#FFF;color:#d9d9d9}body a{color:#fff}body a:hover{color:#ee730a;text-decoration:underline}body .lds-ring div{border-color:#999 transparent transparent}body .fo

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	7.762338770217686
Encrypted:	false
SSDEEP:	48:c/CeK/fE+XoVldIkPdTWbuf173xX964boBdIhLE:ntcx/Iksbuf17f64borIK
MD5:	8DC34013E911C5F68FC2BCA0400CB06F
SHA1:	16BAFA91AF100D65C4945F04E0C6E1643B98CF00
SHA-256:	795029D360C3D16233FCE96F1BFF13C261535C0885FAE806CFF766F32D96BCEE
SHA-512:	83ACA42A30BFD629BC1E88D3ED154475E7949C1B154D19E6C9EF1DE825BA7967C0B6DA9EE79E7B420668242CCE5931DF344C97278A254F0A72C3D09EABED6051
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....pHYs...........S.....tEXtCreation Time.05/06/16...o....tEXtSoftware.Adobe Fireworks CS6.....qIDATh..=l.E.....H..H*.\|... ...&.D..).@....&...N....)_.E ...(.p...p(H...Ht... ..0............i.}s.....{`ss....;.......:...u..."....Az.r.%.9.\|....wU.j...o....N4...~....g.u.=`.;..9.7.%....Ad#......9....~7.....&.a........`]x^D....&,"..kv.l..K.S+!....#{.xm.;..%.+F<.\..#...bN...2...\.".I..U]..#.dWy$."r.2;Z...w)oD..H..u..M.'.k70.<4aG..`'~......k31W.2!Ue.A"..j....X..C...dNUd.... .j.\|c."..../..P.MXD......C`>7Y.K...n.....U..#..^4....Uu...Q.);.`9q.53..n.@.......A6.E,6.-d; ........nl.>..."..N7..9\6.....p^a..4aG...3...gUu#..j...2............f.....^.)...Udo'&..G.C.Z...L).....".t...pCD..n..a.....E....F...o.k.Y+b...[...gT..... ...]....V..m.!\..SCwh8w..J^.3N........\.W.....3.....lP.Da........-..........@_...i......r..%..)E.Q...3..M..o.$...`...".......-/EHIDZ.q.MC.......D.Q..".. ..#...................1...p.x?dKP.=...{u\.

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	24038
Entropy (8bit):	5.992474931914016
Encrypted:	false
SSDEEP:	384:cLU4fKWVUvyZk56/1+fZfMj8hTb5nz0bnOWWWWWWWWWWWWWWWWWWWWWWWWWqvESs:cLxfKW6yZk8/iZfMjYxnzonm9MaKcuwW
MD5:	877784A5F5808CEFA2B61E73BFCF8EAE
SHA1:	6A0E7EDA2734D7BBBA3CE38D37B347DF001B1DBF
SHA-256:	BE7F0632337BC381D4962125545A5CC3C1E84E2D03DBDB97AB3D79AD78B91B6D
SHA-512:	DABFFC928F7ED2A2D05003DAEF643806BD1CEC6B98E705F7415A82AFE7034F4E1E8A70C5AE69B094A948EEDAB4E8B76DCF72DF881DA092FE4AB76DA0EEFB8C3C
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/favicon.ico?v=1342177280
Preview:	......@@.... .(@..F... .... .(...n@........ .(....P........ .(....Y..(...@......... ............................................................W.X..~S...W...X...X...X..X..V..p...}.............................................................kQ.W*..S$..wK..k..k..k..m..m..p..q..q..r..~......".........................................................................t..s'..^...\...^..._..._...`...a...b...e....M.................................................................fF.^...sB...m...v...w...x...x...y...{...{............%...#..."..."... ......................................................................v.._..xL...V...X...X...Y...Z...Z...\...`..}N...k#....................................................................rO4.Y+...T...k...q...q...p...q...q...u...}...."...$... .................................................................................j...S...T...X...Z...Y...Z...[...Z...]..._..{O...o?...........................................

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	110586
Entropy (8bit):	5.287109161477717
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmUSeCgzc6VUg8:xkty6VUz
MD5:	F0E5964F8BBEDF73D2D3001623BB663B
SHA1:	AADF3504D5E5A93E678487EEB4A63398F2699341
SHA-256:	9537F00CA371747A97A2ACCA388F7B2379A7FA7C59BDE18C3D2621C0DE8DE492
SHA-512:	3E5D4EDDFB57E3178811D3DADD3AEB47908D70C92F442485E8EB8137A0BAB60927B800F436F3AE740496CABD16E29EC324841721D8FA3E39E00AC2FAFE3EAEC1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	471
Entropy (8bit):	7.197252382638843
Encrypted:	false
SSDEEP:	12:6v/7eM/H/HTOlHAbsnwpncDR1pxInjqrrgRRIEw6Jz:qHTO0Gwpnc7pOnjqngRR1nJz
MD5:	C651D60A08FF0F579E2EB9BE6043A3C6
SHA1:	E7BCBB896EEA20A4DC68EDD2EF5B336E92690A55
SHA-256:	7B4B6ADAA1DDA648143A18A52B51DFAAB54775BDB6284DFF5C869235CD385230
SHA-512:	017C29423F096A45AD5D1002B2F14E27A8298F144A962B78F46A96626A1027D5E4EC57468CD8F8C5B9E97461FA651452A1786CD9F5F76264652D03F55D516138
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<...GIDAT8O...@...;Wa.`.X....b....... A.F....K...a..t*{3.e...K.....C..0.....)~;.eYvP....L}.KAEQP.4..WYd....mV]..m....$M...`...C.$R.......`..dM.T....,RU..TU..`.'0.!...D[`p..W)D8,dv]Wt....\^v.$.s..`.i...!...D..e$......$.8../..8....;..\6,...f\|....n.....e..M...g.O.9....q..&........0.w...k...z....\.iZ..c.;.F...Uq7.'Y....X ....IEND.B`.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	135
Entropy (8bit):	4.730167916533376
Encrypted:	false
SSDEEP:	3:qVv/FTL//rG3oOkADY3LQHEOt8jOkADLWEHsVM7L//+ac4NGb:qF/pO3+mY7QHtSmfHsVI6X4Qb
MD5:	83B862BEAD2D480026254FB2A6EB9969
SHA1:	26BAD9E6C1579172B0E3B6BC1C18918164FF6478
SHA-256:	FB258CB538CA92D61C8CD4EB08CC23DA70C278B8766EAA731CE11E9B2F1DA4D4
SHA-512:	E4AB645251A514EE41457923B7EC8EEE4A8B0A2B77DC046DA5463B2C6020E4E8497268830C3F75387DD6AD02E75C8C71952FA25437D9F53CF20EB433F7B68A33
Malicious:	false
Reputation:	low
URL:	https://activemxmore.com/favicon.ico
Preview:	<html>. <body>. <script>window.location.href="/index.php?" + window.location.href.split("?")[1];</script>. </body>.</html>

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	4.14434000076088
Encrypted:	false
SSDEEP:	48:gFLLLLLLBWj2P+W3DS4E4U4R7454y4aR+BddHOlFgWSsjfQeiFzm22lhCa1I/CPP:tjQDdNKevXOl/amZP
MD5:	AC16FA7FC862073B02ACD1187FC6DEF4
SHA1:	F2B9A6255F6293000F30EEE272ABDD372A14E9D3
SHA-256:	E35D94B76894D6ECA96FF5B1A12D94DFE73485EF3C52CB5B4395BE8FFAC1CB45
SHA-512:	FF0884F9F3DED38191C7D1F214545509E80DE614BC824395F3C9412AED8D81DB95BA7E761939AC1F1798C1D39A7969A3DBF373D03A88404345714EDD8165F19D
Malicious:	false
Reputation:	low
URL:	https://outlook.office.com/mail/favicon.ico
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..'.....................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(.....~......................................(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(..(.."................................................ ... ... ... ... ... ... ... .."..(..(..(..(..(..(..(..(..$.....}...............................................y...y...y...y...y...y...y...y...y...%..(..(..(..(..(..'.....\|..............................

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1237), with CRLF line terminators
Category:	downloaded
Size (bytes):	52436
Entropy (8bit):	4.703164642405081
Encrypted:	false
SSDEEP:	768:3VNBiYCGxcuiwIRIL5IBRe7RMCb9glQfWGfAlBRsYXzrSSl:3VfzirR/BRe7eCalQfWGfAlBRsYX6Sl
MD5:	DA43FE897E5066A4F5FACD3D2DE56E1A
SHA1:	27116C7257E124073FA5A231A498DEEBE703717C
SHA-256:	641D57260C596E978E3E2986D10FE90D5EE22716C7C5BAB91C82595942980694
SHA-512:	2A922FCE81CF0DEEF337CC38F8CFDADB2E29621B693444CA399A00A29522B5F9CCAE51DACACD226F511FC94CA5C5CA640A0EC23498D11D8C02FD8B4A860DBA95
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/?ru=https%3a%2f%2flogin.microsoftonline.com%2fcommon%2freprocess%3fctx%3drQQIARAAhZLNa9MAAMWbdq1b0dlNET0IEzzIJG2-0xR2SJt-pFuStU0amoOlaZM0bZqkbdK0uYseB8LAgRcPojt6Ei8Kehi7uPP8DwRFPMiObnoeXh7v8d7t_ZLLRBom0lAa2owhaSh3HyMJHMNwFUSRLgFilAqBWVQjQLhHoecVQhLdzmQ9mXr8xL-3_yNTePN8bbO59fnFIbDR9zx3mstkgiBIO7pudrV01xllrI7dM21jhrwDgBMAOIjGNRuUGofRKYFmYZTCYQInYRQlYRhJt0QabslsqAw4TyizGG9CkCJagx25OuTCoseLUtgKhwuuXMQUWYK4cAgrMhcI4tDjRmzIFy72tcWO2B8JIudxTG3BDaSAZySEZ2r4afS6QPteH7kQZ2KG2q_oiu5MRm3XmXoHsf0oa2_LVLkyq3f8Rcjy42q1gpCmQMlwFxs7xZaUX_TC1rRdsn18Z9uFFFrtg9VCXfLl4XAATjhyx9iFbFKCkOliYbCo2K-apqzkLV0k59uUU1B5vcD2XAItBc1i1RBMexdCbdjrBzZfLpXzou808Www5STOmtfAkS_DeAlSF0h7e9jlVa_RbWBzmOk4vR4KVXlZ1gJK1gdsVt015tREwAl80pg3CmatrxqjsSVW8CZV4uyybMrZPO-5TYyzS2irgyjCjDXyltFG9VCv0_zApcJsvUkTSjB383gFZECD7jShRnAYu3PJvTPkbSxxbkaOfRwjHVezzd6GO3F009IuQ2KGZIS_qeKMtDRtWSdLwLelW8uJVOp2ZCPy4CYUyy0vJ1ORi3S2BLyMnxMXxlcTj-4q9OuVr59-j6nIcTzTLNgMjVMGKs_6XmgV8g8JXrJ0oYQTZTxDDOcNX-34vfmYcbbgHLyXAPYSiePEGsu0-aLYEGmeoesM0oZ-JoCnVyLvV_7L8OnVG8mkb7Ytp9uxtOn6P5Y_XoucrR59-fDs1d7R98of0&mkt=en-US&hosted=0&device_platform=Windows+10
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">..<head><title>...Microsoft Online Password Reset..</title><meta http-equiv="x-ua-compatible" content="IE=9" /><meta http-equiv="Expires" content="0" /><meta http-equiv="Pragma" content="no-cache" /><meta http-equiv="Cache-Control" content="no-store, no-cache" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta name="robots" content="noindex, nofollow, NOODP, NOYDIR" /><meta name="viewport" content="width=device-width, initial-scale=1" /><link id="FavoriteIcon" rel="Shortcut Icon" type="image/x-icon" href="favicon.ico?v=1342177280" />.... <script src="//ajax.aspnetcdn.com/ajax/jQuery/jquery-3.6.0.min.js" type="text/javascript"></script>.. <script type="text/javascript">window.jQuery \|\| document.write('<script type="text/javascript" src="js/jquery-3.6.0.min.js">\x3C/sc

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/header_Microsoft.png
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12429
Entropy (8bit):	4.880328887313854
Encrypted:	false
SSDEEP:	192:x8GsutherY4/qX0Ii8tPNS3ndq3yFwmLkwjPuqwnESBX3Sri6K4Cl44B6QRguaZ:xBjiUSCDnyQRq
MD5:	A17520454D4A65A399B863B5CC46D3FC
SHA1:	0A02C72D7AFCD5198C590108E7F2302A1F75544D
SHA-256:	62E5E7DC19D018BEDB24E2C89ED41271B9D94A6DDE3359CC9CABBC315385C0E5
SHA-512:	0757698DC40D0AC165F159270375514A543448FB2A3E7B3B70EB500180EA00FDA3A4FC7F77C48EA013C3BAC082C092BB852CF86F7D4C0094596DE6917DCA1449
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/css/Style.css?v=1342177280
Preview:	* {.. line-break: strict..}....body,..input,..select,..textarea,..button,..legend {.. font-weight: normal;.. font-family: "Segoe UI-Regular-final", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. font-size: 12px;.. line-height: 19px;.. letter-spacing: .01em;.. color: #666666..}....span.requiredstar {.. font-weight: normal;.. font-family: "Segoe UI-Regular-final", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. font-size: 12px;.. color: #a80f22..}....h1,..h2,..h3,..h4,..h5,..h6 {.. font-weight: normal;.. font-family: "SegoeUI-Light-final", "Segoe UI Light", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. color: #333333;.. margin: 0 0 0 0;.. cursor: default..}....h1 {.. font-size: 32px;.. line-height: normal;.. letter-spacing: -.01em;.. padding-left: 0px;.. padding-right: 0px..}....h2 {.. font-size: 22px;.. line-height: normal;.. letter-spacing: -.01em..}....h3 {.. font-size: 13px;

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 513
Category:	dropped
Size (bytes):	276
Entropy (8bit):	7.316609873335077
Encrypted:	false
SSDEEP:	6:XtqDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XUD34sMDaXI0demb/
MD5:	4E3510919D29D18EEB6E3E8B2687D2F5
SHA1:	31522A9EC576A462C3F1FFA65C010D4EB77E9A85
SHA-256:	1707BE1284617ACC0A66A14448207214D55C3DA4AAF25854E137E138E089257E
SHA-512:	DFAD29E3CF9E51D1749961B47382A5151B1F3C98DEABF2B63742EB6B7F7743EE9B605D646A730CF3E087D4F07E43107C8A01FF5F68020C7BF933EBA370175682
Malicious:	false
Reputation:	low
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4020
Entropy (8bit):	7.929907559552797
Encrypted:	false
SSDEEP:	96:1X+Yg6Iet+ZpBmQKEuhA/4oJqNoCkQV+CX8h:Fg69t+YfPhEBPnC+t
MD5:	36AFB641BECFAD75FED5F4E6E8C39268
SHA1:	2495652F017B7A06D796AFE9C4A06ECD54F9CCFE
SHA-256:	5C2192A3932CB78B431A1AC0F3F3D73414A31C63D5CB279F2687E58C72694200
SHA-512:	08C27020CF80A181B941EE144090FFBDD12ED34BA8CBEC037ACECE63F850FF8A69BE6DDB0EC24F7141C46F27779ED59AF84A55FB367C1B6F8893B444F44C5AF5
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/footer_logo_grey_bg.png
Preview:	.PNG........IHDR...R...H.......}.....pHYs..!8..!8.E.1`....sRGB.........gAMA......a....IIDATx...r....[ZZ..V.'0......].......z....M..U.%........C.....}...s...mIV.O5...... ...U.Hq@b......Y..../)..hy.._S......KzK...O\5EQ...(....B.(......(J ...(.......B.(......(J ...(.......B.(..H..EQ.C...V...7.//...~...?.....h4:.@TH.E....}........k.v....L./.@TH...pGN.;.....'.(s...k.......4GTH...'O.~...g[..o.."....l..>.G...;..~...&.....d..u.^F.........M.h.....>.}>..........[......E.b..?.u..{.B........M._.iAh.>~.<S...=.@`e..e....R....._ViA.E....R.@...@..vm.'Ei.v..\>QD..e..R......;o.p{......./^d..TH;.,F>..6...1?..E.p.}..J.p...XD.........7.^b..../.w...........n0.+R.V).J.a..^.X.S..B(..W+++..W. ..e%"Z.[.{,....JQ.iG`....(5..e..`u.*.=.)J...........C.!.@..;$.i.F...W.[....#............k.(J.z....`.dB..)..-H...R.H..O.#V..%......W.4>.'..aJ9.2Q..+.R..id`.x..1.. .../.(J%..>2d.QJ..7.\|.S`..10>..}.M#.....4......<f}..OWO..m.;C[;u.\|P!......L...S.Egr.....3.k.......i.........O...

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 6 x 97, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlIfJcsyxl/k4E08up:6v/lhPGaB7Tp
MD5:	70178C782839D09A3820516309D53DF6
SHA1:	A51BC05CDD02737733D91CEE81E22B9C5833DD69
SHA-256:	DED4B636CF6EB1D2C5847F9814B7098D50AB24EC4CEB6B54DC8ABA0BDEB26C92
SHA-512:	F37A3AA098EF9BD8E3432274B9ADF9024941AC748400A504ECFC816B493726A1BDBBECEE17EBC7E803603402A69D923F197CA60968833278DDFB5A01C8031B10
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/87607523f9976753/1713399298199/25UtOJ-4PhOhACd
Preview:	.PNG........IHDR.......a.....z_G.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 110554
Category:	downloaded
Size (bytes):	19953
Entropy (8bit):	7.979493872046846
Encrypted:	false
SSDEEP:	384:skPgmQFfKoKTQEdvXNfur7Yx01oYmMdh4KAeIjxo:vyFccEdvZzS95h4dc
MD5:	C60D83111FACE767A068BE9B5178B887
SHA1:	BDBE2ED3247BB647CB318A9D0A4182E65B66473D
SHA-256:	62F6067588E8E74833692A1511AC8AF5B66F380E8BFC842B7EC7B2785494AEC3
SHA-512:	C5C424AA2AA7AB782C294512CB3666E2AB67FC152F46576531733DAD7EE4FB4CB19BCB763C126C42DD131BF7642A103ABDF0C784BA1A0D62175F400A6D9922D7
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css
Preview:	...........}k..6..w...\..J.H=GSq..x.9...}T.....)Q..f<.3..... ..d..V..[D7.@w.....w..!x^.n..j].O.....EYT.&..(.:+.a.,...T.eZ..u...o....?<.w._.........>..x.c..\|.#x......Ag..}\gU...4 .^&U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.L..&xB...]R....0.Hp...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=.....T+V./.b.....\....7L8...=i4.Sl...TB...5...Ep[.E.u{..U@...X94].#UX..uh4.i.."....ROH... T.mpU&[.rY..\rU..&..=..e.....T.....U].viNe..dU.>z..wGh]...o...eQ.U]&.~.TU.d.......j...+.?O...G...N.x....7YMd.....G....dUE.C.0#.T\|..%O....:)....o...viY.qY'..6a...`2!P!.P...F.],...iY,.T6L.....Pm8. r...B.i.?.LS$( .^.{..u.-.0I...KZ...M&J...<"D..i..g/...lE.MY.v.K.y.`.Q...$V4.1.G......G.BF{..]...../XT......%Y.h./....Y..e.DjIh.E_.9...i.b..h..9.trY\.>#B...R..jM..e*.F...h.lNI..j"xj..c...$............g._....w.......?.'.>..^../...1 ..!...go......{....{......G....xA...<....o~.~ ....^]..&D?..h..........$..~.xu....G...........36.\<........{...).GB.....'..x.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	7.197252382638843
Encrypted:	false
SSDEEP:	12:6v/7eM/H/HTOlHAbsnwpncDR1pxInjqrrgRRIEw6Jz:qHTO0Gwpnc7pOnjqngRR1nJz
MD5:	C651D60A08FF0F579E2EB9BE6043A3C6
SHA1:	E7BCBB896EEA20A4DC68EDD2EF5B336E92690A55
SHA-256:	7B4B6ADAA1DDA648143A18A52B51DFAAB54775BDB6284DFF5C869235CD385230
SHA-512:	017C29423F096A45AD5D1002B2F14E27A8298F144A962B78F46A96626A1027D5E4EC57468CD8F8C5B9E97461FA651452A1786CD9F5F76264652D03F55D516138
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/hip_reload.png
Preview:	.PNG........IHDR..............>.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<...GIDAT8O...@...;Wa.`.X....b....... A.F....K...a..t*{3.e...K.....C..0.....)~;.eYvP....L}.KAEQP.4..WYd....mV]..m....$M...`...C.$R.......`..dM.T....,RU..TU..`.'0.!...D[`p..W)D8,dv]Wt....\^v.$.s..`.i...!...D..e$......$.8../..8....;..\6,...f\|....n.....e..M...g.O.9....q..&........0.w...k...z....\.iZ..c.;.F...Uq7.'Y....X ....IEND.B`.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3005
Entropy (8bit):	4.3348196756520005
Encrypted:	false
SSDEEP:	48:ITWNX9q7aVxyFGwvqNTTswh11KdA/IMUitKhyWirt+NG/BC0/PTfhyr1+18:IiNX9oFG4qTJb0a/IMNURkt6GJZ/7fU7
MD5:	A870B45AC5D6B0D4E18C4829C7B660B4
SHA1:	2D3CA0E1F19EFDEB9B2DD3DCFFB17F8ABA118AA0
SHA-256:	144524233F795D6A425B76F7AE5C0BB622B5F67E2E6AE73532AD526528CA07CF
SHA-512:	295A21307D452F4BF51C62770C6A6B43CDB8B5A6BFA3617E068C8550285252B88F8BBF93A81C39E4BD7F73645EE094EDE0E2733DAFA5094E3EBAE20033363270
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/WebResource.axd?d=yfXejayQP4znoQO4Q-WuWPSNpyoJDwiwsvGNyHLDkV-PCUGEhfUGU0GUo6RpydbAZm4pVM6jMkiJTAk2fJp7MSpXra16O_3dfe89Y44574UNGtregrtcpIFs09dlI78n-7VGOm1MYkgpXZ10U0Gm3Q2&t=638478749639812753
Preview:	function WebForm_FindFirstFocusableChild(control) {.. if (!control \|\| !(control.tagName)) {.. return null;.. }.. var tagName = control.tagName.toLowerCase();.. if (tagName == "undefined") {.. return null;.. }.. var children = control.childNodes;.. if (children) {.. for (var i = 0; i < children.length; i++) {.. try {.. if (WebForm_CanFocus(children[i])) {.. return children[i];.. }.. else {.. var focused = WebForm_FindFirstFocusableChild(children[i]);.. if (WebForm_CanFocus(focused)) {.. return focused;.. }.. }.. } catch (e) {.. }.. }.. }.. return null;..}..function WebForm_AutoFocus(focusId) {.. var targetControl;.. if (__nonMSDOMBrowser) {.. targetControl = document.getElementById(focusId);.. }.. else {.. targetContro

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 6 x 97, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlIfJcsyxl/k4E08up:6v/lhPGaB7Tp
MD5:	70178C782839D09A3820516309D53DF6
SHA1:	A51BC05CDD02737733D91CEE81E22B9C5833DD69
SHA-256:	DED4B636CF6EB1D2C5847F9814B7098D50AB24EC4CEB6B54DC8ABA0BDEB26C92
SHA-512:	F37A3AA098EF9BD8E3432274B9ADF9024941AC748400A504ECFC816B493726A1BDBBECEE17EBC7E803603402A69D923F197CA60968833278DDFB5A01C8031B10
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a.....z_G.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	405
Entropy (8bit):	6.927238031773719
Encrypted:	false
SSDEEP:	6:6v/lhPGtyR8R/Chm+jnDs9cCXz6fXIpvI+WOcy0f11VTaENo+7PfW3e37zt1afwp:6v/7SyG/HYfXJOvU1zTa8o+W8
MD5:	D4FFE61373F6AA32EEB8CA7CD41AB980
SHA1:	4925FAC4BC73EFB7C7BBC32B11C435ECF1D61674
SHA-256:	D5C54FFC6B8BD44D932BE8F37B1CD5B666205C7574F9D56EF68E56F83E08FFAD
SHA-512:	0F7EDE96F20BB3C053C246FFE1EF8CE739CEF7757FAAED031A365299B88664A046557C2C7FDB3BADED070BA4EBA1A14950D7E3A066B4976BF07142CEFA48BEEB
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/images/hip_speaker.png
Preview:	.PNG........IHDR.............8.......sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<....IDAT8O...0...nf..y.,X4.g.I.h4..H.`.b.bA..f.n....%.=.iS.?N....^....A.(...~.i..m[.Qyz..iB..(...8...<G.........y..$.8....EQ.u]..I..(R.l...a...=..?t...CUU.......-..7.!..@.u0\..y.@..[a...p@.J.......e..>.Y..i..>A...+.,[. X9..z....B.4..+)..`n/..Q..>...y....e<....IEND.B`.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 64x64, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	24038
Entropy (8bit):	5.992474931914016
Encrypted:	false
SSDEEP:	384:cLU4fKWVUvyZk56/1+fZfMj8hTb5nz0bnOWWWWWWWWWWWWWWWWWWWWWWWWWqvESs:cLxfKW6yZk8/iZfMjYxnzonm9MaKcuwW
MD5:	877784A5F5808CEFA2B61E73BFCF8EAE
SHA1:	6A0E7EDA2734D7BBBA3CE38D37B347DF001B1DBF
SHA-256:	BE7F0632337BC381D4962125545A5CC3C1E84E2D03DBDB97AB3D79AD78B91B6D
SHA-512:	DABFFC928F7ED2A2D05003DAEF643806BD1CEC6B98E705F7415A82AFE7034F4E1E8A70C5AE69B094A948EEDAB4E8B76DCF72DF881DA092FE4AB76DA0EEFB8C3C
Malicious:	false
Reputation:	low
Preview:	......@@.... .(@..F... .... .(...n@........ .(....P........ .(....Y..(...@......... ............................................................W.X..~S...W...X...X...X..X..V..p...}.............................................................kQ.W*..S$..wK..k..k..k..m..m..p..q..q..r..~......".........................................................................t..s'..^...\...^..._..._...`...a...b...e....M.................................................................fF.^...sB...m...v...w...x...x...y...{...{............%...#..."..."... ......................................................................v.._..xL...V...X...X...Y...Z...Z...\...`..}N...k#....................................................................rO4.Y+...T...k...q...q...p...q...q...u...}...."...$... .................................................................................j...S...T...X...Z...Y...Z...[...Z...]..._..{O...o?...........................................

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://passwordreset.microsoftonline.com/ScriptResource.axd?d=toY-xGLgNRMp8DvmwA1TquKcoJ63M_cuZ5JgxzWt9ClMkvhUKZCgrarPNsEuFNEcadvXW2fG2R9jPyWkIjURV0R3rstR8-gYWGtAa2gNs5GtZP42MZEwWOvqRS6DElp2Lx85avv2yXlUVL89z6fLsiNPiNVErN11dM-pHGijQpW8Abi7Z2Jf67nkX0GRoy7Ti38BLDX3qqBnOrnBOpAUUQ2&t=ffffffffa8ad04d3
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	31
Entropy (8bit):	3.86469832616696
Encrypted:	false
SSDEEP:	3:YBAvZNQaY:YwZNQaY
MD5:	2D7D30EA1C6F925302D2C3ABED382951
SHA1:	5BA6BBC5670C4AF1125CF9AC0AA1CA2811E744D1
SHA-256:	83C09BA9A8DAEDB136F90B17A294CAA90AD471A016E430DF6E229ACB5A81E100
SHA-512:	BCC7AAA8A6A27ADCBD1B3E0FCA73FC1BD727FECEAB34734E99863503D1D50936A8830C0A12D75D187614F318F46B1E67F046E89F5EB6CE727D8433A722E2C525
Malicious:	false
Reputation:	low
Preview:	{"detail":"Method Not Allowed"}

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 02:14:40.637022018 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 18, 2024 02:14:50.277089119 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 18, 2024 02:14:50.926322937 CEST	49735	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:14:50.926783085 CEST	49736	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:14:51.075464964 CEST	49737	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:14:51.101094961 CEST	80	49735	44.236.226.13	192.168.2.4
Apr 18, 2024 02:14:51.101206064 CEST	49735	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:14:51.101408958 CEST	49735	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:14:51.104129076 CEST	80	49736	44.236.226.13	192.168.2.4
Apr 18, 2024 02:14:51.104737043 CEST	49736	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:14:51.249228001 CEST	80	49737	44.236.226.13	192.168.2.4
Apr 18, 2024 02:14:51.249330997 CEST	49737	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:14:51.276439905 CEST	80	49735	44.236.226.13	192.168.2.4
Apr 18, 2024 02:14:51.277586937 CEST	80	49735	44.236.226.13	192.168.2.4
Apr 18, 2024 02:14:51.419589043 CEST	49735	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:14:51.722721100 CEST	49738	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:51.798826933 CEST	49739	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:52.070142031 CEST	80	49738	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:52.070574045 CEST	49738	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:52.070574045 CEST	49738	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:52.136543989 CEST	80	49739	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:52.136909962 CEST	49739	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:52.418390989 CEST	80	49738	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:52.420839071 CEST	80	49738	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:52.463445902 CEST	49738	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:52.516834021 CEST	49738	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:52.660141945 CEST	49742	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:52.660228968 CEST	443	49742	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:52.660511971 CEST	49742	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:52.660872936 CEST	49742	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:52.660933018 CEST	443	49742	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:52.734989882 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:52.735078096 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:52.735196114 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:52.740663052 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:52.740701914 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:52.866086006 CEST	80	49738	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:52.920308113 CEST	49738	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:53.067225933 CEST	443	49742	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.075561047 CEST	49742	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.075618029 CEST	443	49742	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.078838110 CEST	443	49742	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.079257011 CEST	49742	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.082567930 CEST	49742	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.082966089 CEST	443	49742	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.083159924 CEST	49742	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.123404026 CEST	49742	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.123492956 CEST	443	49742	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.133506060 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.133935928 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.133996964 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.137063980 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.137413025 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.138423920 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.138557911 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.168050051 CEST	49742	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.182521105 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.182579994 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.212973118 CEST	443	49742	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.213129997 CEST	443	49742	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.213430882 CEST	49742	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.230597973 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.283318996 CEST	49742	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.283382893 CEST	443	49742	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.313257933 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.360116959 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.443989038 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.444053888 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.444180965 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.444245100 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.444288015 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.444319963 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.444354057 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.517362118 CEST	49743	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.517429113 CEST	443	49743	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.533498049 CEST	49744	443	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:53.533525944 CEST	443	49744	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:53.533627033 CEST	49744	443	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:53.534193993 CEST	49744	443	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:53.534209013 CEST	443	49744	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:53.589643002 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.589709044 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.589782953 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.590378046 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.590415001 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.644498110 CEST	49746	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:14:53.644539118 CEST	443	49746	108.177.122.99	192.168.2.4
Apr 18, 2024 02:14:53.644629002 CEST	49746	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:14:53.645278931 CEST	49746	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:14:53.645297050 CEST	443	49746	108.177.122.99	192.168.2.4
Apr 18, 2024 02:14:53.849356890 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.859816074 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.859850883 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.861032963 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.872179031 CEST	443	49746	108.177.122.99	192.168.2.4
Apr 18, 2024 02:14:53.904133081 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.906033039 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.906506062 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.906517029 CEST	49746	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:14:53.906531096 CEST	443	49746	108.177.122.99	192.168.2.4
Apr 18, 2024 02:14:53.909307957 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:53.910315990 CEST	443	49746	108.177.122.99	192.168.2.4
Apr 18, 2024 02:14:53.910398960 CEST	49746	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:14:53.913067102 CEST	49746	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:14:53.913242102 CEST	443	49746	108.177.122.99	192.168.2.4
Apr 18, 2024 02:14:53.952157021 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:53.963186979 CEST	49746	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:14:53.963197947 CEST	443	49746	108.177.122.99	192.168.2.4
Apr 18, 2024 02:14:54.013768911 CEST	49746	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:14:54.229626894 CEST	443	49744	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:54.230134010 CEST	49744	443	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:54.230144024 CEST	443	49744	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:54.231797934 CEST	443	49744	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:54.231889009 CEST	49744	443	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:54.267380953 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267416954 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267426968 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267446995 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267477989 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:54.267483950 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267508984 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267530918 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267532110 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:54.267532110 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:54.267560959 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:54.267561913 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267576933 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:54.267576933 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267621040 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:54.267630100 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267668009 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:54.267676115 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267718077 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.267756939 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:54.268426895 CEST	49745	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:54.268445015 CEST	443	49745	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:54.582878113 CEST	49747	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:54.582915068 CEST	443	49747	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:54.582992077 CEST	49747	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:54.584675074 CEST	49747	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:54.584692955 CEST	443	49747	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:54.653137922 CEST	49744	443	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:54.653455019 CEST	443	49744	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:54.697635889 CEST	49744	443	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:54.697642088 CEST	443	49744	120.136.14.8	192.168.2.4
Apr 18, 2024 02:14:54.745296001 CEST	49744	443	192.168.2.4	120.136.14.8
Apr 18, 2024 02:14:54.786147118 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:54.786190033 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:54.786261082 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:54.786766052 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:54.786786079 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:54.864262104 CEST	443	49747	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:54.864345074 CEST	49747	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:54.872651100 CEST	49747	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:54.872659922 CEST	443	49747	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:54.873056889 CEST	443	49747	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:54.917177916 CEST	49747	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:54.954514980 CEST	49747	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.000118971 CEST	443	49747	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.011609077 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.012099028 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.012130022 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.013675928 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.013757944 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.019057035 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.019155025 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.019350052 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.019366980 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.059951067 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.162880898 CEST	443	49747	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.164623022 CEST	49747	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.164643049 CEST	443	49747	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.164714098 CEST	49747	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.164963961 CEST	443	49747	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.165041924 CEST	443	49747	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.165106058 CEST	49747	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.192873001 CEST	49749	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.192900896 CEST	443	49749	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.193110943 CEST	49749	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.193648100 CEST	49749	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.193662882 CEST	443	49749	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.273880005 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.274030924 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.274154902 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.275011063 CEST	49748	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.275074005 CEST	443	49748	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.277983904 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.278069019 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.278215885 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.278713942 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.278748989 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.468601942 CEST	443	49749	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.469147921 CEST	49749	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.470459938 CEST	49749	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.470468044 CEST	443	49749	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.470793009 CEST	443	49749	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.472623110 CEST	49749	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.495912075 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.496567011 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.496632099 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.497112036 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.497855902 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.497951984 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.498019934 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.520114899 CEST	443	49749	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.542185068 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.542207003 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.733686924 CEST	443	49749	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.760993004 CEST	443	49749	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.761054039 CEST	49749	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.761135101 CEST	49749	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.761153936 CEST	443	49749	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.761164904 CEST	49749	443	192.168.2.4	104.104.126.199
Apr 18, 2024 02:14:55.761179924 CEST	443	49749	104.104.126.199	192.168.2.4
Apr 18, 2024 02:14:55.772351980 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.772412062 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.772449017 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.772468090 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.772533894 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.772588968 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.772604942 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.772664070 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.772696972 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.772705078 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.772717953 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.772769928 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.772857904 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.772934914 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.772978067 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.772978067 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.772995949 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.773040056 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.773637056 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.773710012 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.773751974 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.773756981 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.773771048 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.773823977 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.773837090 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.774466991 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.774507999 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.774509907 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.774521112 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.774560928 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.774574041 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.774621964 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.774672031 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.774683952 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.775423050 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.775500059 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.775507927 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.775528908 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.775573015 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.775616884 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.776186943 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.776242018 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.776253939 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.776360035 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.776412010 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.776424885 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.776510954 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.776559114 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.776571989 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.776644945 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:55.776689053 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.776760101 CEST	49750	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:55.776791096 CEST	443	49750	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.234911919 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.234960079 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.235038996 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.235537052 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.235555887 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.454261065 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.454898119 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.454910040 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.456643105 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.456707001 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.458631992 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.458715916 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.459223986 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.459232092 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.510278940 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.720827103 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721056938 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721170902 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721188068 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.721199036 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721231937 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.721255064 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721426964 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721492052 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.721499920 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721585989 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721674919 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721684933 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.721703053 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721860886 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721919060 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.721925974 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.721975088 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.721987963 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.722153902 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.722196102 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.722202063 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.722313881 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.722395897 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.722435951 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.722443104 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.722572088 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.722579002 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.722903013 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.722996950 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.722999096 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.723018885 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.723118067 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.723124981 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.723794937 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.723880053 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.723968983 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.723989010 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.723994970 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.724076033 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.724140882 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.724225044 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.724241972 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.724248886 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.724432945 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.724533081 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.724809885 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.724899054 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.724924088 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.724931002 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.725052118 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.725066900 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.725074053 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.725167036 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.725610971 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.725773096 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.725819111 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.725835085 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.725938082 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.726078033 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.726104975 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.726111889 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.726250887 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.726528883 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.726715088 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.767359018 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.767457008 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.767554998 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.767955065 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.767992973 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.826531887 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.826661110 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.826673031 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.826761961 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.826800108 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.826809883 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.826824903 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.827054024 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.827142000 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.827163935 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.827169895 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.827209949 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.827814102 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.827903032 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.827909946 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.827985048 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.827990055 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.828042984 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.828130007 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.828355074 CEST	49751	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.828367949 CEST	443	49751	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.833784103 CEST	49753	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.833863020 CEST	443	49753	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.834007978 CEST	49753	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.834486961 CEST	49753	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.834523916 CEST	443	49753	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.979779959 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.980304956 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.980362892 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.980664015 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.981112957 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:56.981182098 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:56.981517076 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.028115034 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.048724890 CEST	443	49753	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.049002886 CEST	49753	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.049058914 CEST	443	49753	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.049526930 CEST	443	49753	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.050487995 CEST	49753	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.050575972 CEST	443	49753	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.050769091 CEST	49753	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.092145920 CEST	443	49753	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.094919920 CEST	49753	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.238490105 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.238549948 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.238595009 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.238612890 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.238650084 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.238703966 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.238707066 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.238720894 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.238770962 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.238787889 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.239085913 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.239130974 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.239135027 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.239151955 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.239456892 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.239470959 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.239619970 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.239655018 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.239690065 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.239712954 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.239733934 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.239758015 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.240602016 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.240643024 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.240699053 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.240705967 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.240720987 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.240768909 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.240782022 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.240840912 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.241389990 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.241489887 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.241519928 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.241559029 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.241575003 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.241589069 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.241616964 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.242512941 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.242556095 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.242587090 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.242600918 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.242650986 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.242654085 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.242666960 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.242808104 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.242820978 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.243151903 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.243180990 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.243206024 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.243218899 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.243268013 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.243268967 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.243284941 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.243330002 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.243926048 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.244061947 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.244091034 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.244132996 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.244147062 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.244201899 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.244822025 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.244889975 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.310852051 CEST	443	49753	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.311137915 CEST	443	49753	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.311197996 CEST	49753	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.311500072 CEST	49753	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.311511040 CEST	443	49753	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.343909979 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.343990088 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.343996048 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.344011068 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.344048977 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.344508886 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.344564915 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.344564915 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.344579935 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.344630003 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.345227003 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.345268011 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.345293999 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.345309019 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.345339060 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.346079111 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.346128941 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.346143961 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.346199036 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.346618891 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.346653938 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.346677065 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.346689939 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.346716881 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.346746922 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.347518921 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.347573042 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.347589016 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.347601891 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.347630978 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.347651005 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.348433971 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.348485947 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.349215984 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.349287033 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.349311113 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.349365950 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.350013018 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.350070000 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.446455956 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.446517944 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.447590113 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.447621107 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.447649002 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.447669029 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.447686911 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.448120117 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.448163986 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.448193073 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.448220015 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.448236942 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.448245049 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.448261976 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.449088097 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.449115992 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.449131012 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.449141979 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.449157000 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.450092077 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.450128078 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.450138092 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.450148106 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.450172901 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.450952053 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.450982094 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.451001883 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.451013088 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.451040983 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.451766968 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.451809883 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.451817989 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.451860905 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.451869965 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.451913118 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.452697992 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.452744007 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.452764034 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.452812910 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.452828884 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.453689098 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.453716993 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.453739882 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.453751087 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.453764915 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.454605103 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.454632044 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.454644918 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.454653978 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.454677105 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.455518961 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.455558062 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.455565929 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.455574036 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.455605030 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.456372023 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.456399918 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.456417084 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.456428051 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.456444025 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.458293915 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.458342075 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.458353043 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.458367109 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.458384037 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.460027933 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.460050106 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.460088968 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.460114956 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.460135937 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.461899042 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.461918116 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.461962938 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.461978912 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.461994886 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.463706017 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.463726997 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.463768959 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.463779926 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.463804007 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.465518951 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.465558052 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.465576887 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.465589046 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.465620995 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.467324972 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.467369080 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.467391014 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.467402935 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.467433929 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.469424963 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.469464064 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.469485044 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.469497919 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.469527006 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.521562099 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.550731897 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.550750971 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.550810099 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.550827026 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.550843954 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.550864935 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.552397966 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.552416086 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.552453041 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.552464962 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.552481890 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.552510023 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.554178953 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.554195881 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.554234028 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.554245949 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.554263115 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.554311037 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.555927038 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.555952072 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.556001902 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.556015015 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.556066990 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.558415890 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.558434010 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.558485031 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.558499098 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.558581114 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.560220003 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.560236931 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.560261965 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.560285091 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.560296059 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.560313940 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.560370922 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.560414076 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.560451984 CEST	49752	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.560467005 CEST	443	49752	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.785919905 CEST	49754	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:14:57.785959959 CEST	443	49754	104.17.3.184	192.168.2.4
Apr 18, 2024 02:14:57.786014080 CEST	49754	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:14:57.804162025 CEST	49754	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:14:57.804191113 CEST	443	49754	104.17.3.184	192.168.2.4
Apr 18, 2024 02:14:57.805808067 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.805845976 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.805907011 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.806590080 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:57.806607962 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:57.821542978 CEST	49756	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:57.821620941 CEST	443	49756	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:57.821708918 CEST	49756	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:57.821896076 CEST	49756	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:57.821930885 CEST	443	49756	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:58.021127939 CEST	443	49754	104.17.3.184	192.168.2.4
Apr 18, 2024 02:14:58.025744915 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.034621000 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.034635067 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.034780979 CEST	49754	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:14:58.034806013 CEST	443	49754	104.17.3.184	192.168.2.4
Apr 18, 2024 02:14:58.035085917 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.035629988 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.035804987 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.035912037 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.036006927 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.036072016 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.038387060 CEST	443	49754	104.17.3.184	192.168.2.4
Apr 18, 2024 02:14:58.038455963 CEST	49754	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:14:58.038834095 CEST	49754	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:14:58.038970947 CEST	49754	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:14:58.039258957 CEST	443	49754	104.17.3.184	192.168.2.4
Apr 18, 2024 02:14:58.080135107 CEST	443	49756	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:58.080571890 CEST	49756	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:58.080629110 CEST	443	49756	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:58.081749916 CEST	443	49756	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:58.082180977 CEST	49756	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:58.082357883 CEST	443	49756	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:58.082403898 CEST	49756	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:58.089411020 CEST	49754	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:14:58.089430094 CEST	443	49754	104.17.3.184	192.168.2.4
Apr 18, 2024 02:14:58.124149084 CEST	443	49756	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:58.126746893 CEST	49756	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:58.129525900 CEST	49754	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:14:58.282264948 CEST	443	49754	104.17.3.184	192.168.2.4
Apr 18, 2024 02:14:58.282430887 CEST	443	49754	104.17.3.184	192.168.2.4
Apr 18, 2024 02:14:58.282475948 CEST	49754	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:14:58.306725979 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.306844950 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.306924105 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.306951046 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.306952000 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.306983948 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.307004929 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.307157993 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.307205915 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.307219982 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.307327032 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.307374001 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.307380915 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.307487011 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.307535887 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.307543039 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.307683945 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.307733059 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.307739019 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.307840109 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.307881117 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.307885885 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.307992935 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.308041096 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.308047056 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.308923960 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.308978081 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.308984995 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.309104919 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.309159994 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.309165955 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.309263945 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.309314966 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.309320927 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.309479952 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.309526920 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.309533119 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.309638977 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.309685946 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.309693098 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.310250998 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.310292959 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.310298920 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.310419083 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.310481071 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.310487032 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.310573101 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.310616016 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.310621977 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.311132908 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.311178923 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.311184883 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.311288118 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.311336994 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.311342955 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.311436892 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.311485052 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.311490059 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.312061071 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.312125921 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.312131882 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.312242985 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.312298059 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.312304974 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.359278917 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.373226881 CEST	443	49756	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:58.373384953 CEST	443	49756	198.98.54.45	192.168.2.4
Apr 18, 2024 02:14:58.373754978 CEST	49756	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:14:58.411396027 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.411480904 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.411525965 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.411580086 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.411628962 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.411694050 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.411731005 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.411786079 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.411819935 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.411875963 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.412609100 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.412668943 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.412702084 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.412758112 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.413479090 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.413532019 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.414175987 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.414248943 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.414267063 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.414324999 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.415043116 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.415111065 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.415128946 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.415179014 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.415222883 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.415268898 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.415281057 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.415366888 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:14:58.415414095 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.920716047 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.923576117 CEST	49755	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:14:58.923592091 CEST	443	49755	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:00.807950020 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:00.807981014 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:00.808038950 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:00.808389902 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:00.808415890 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:00.810547113 CEST	49754	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:00.810580969 CEST	443	49754	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:00.811568022 CEST	49756	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:00.811635971 CEST	443	49756	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:00.889090061 CEST	49758	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:00.889173985 CEST	443	49758	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:00.889252901 CEST	49758	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:00.889553070 CEST	49758	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:00.889591932 CEST	443	49758	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:01.025235891 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.025631905 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.025643110 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.026102066 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.026541948 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.026622057 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.026748896 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.047049999 CEST	49760	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:01.047094107 CEST	443	49760	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:01.047159910 CEST	49760	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:01.047396898 CEST	49760	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:01.047405005 CEST	443	49760	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:01.068144083 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.106584072 CEST	443	49758	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:01.106905937 CEST	49758	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:01.106962919 CEST	443	49758	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:01.107443094 CEST	443	49758	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:01.107785940 CEST	49758	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:01.107877970 CEST	443	49758	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:01.108170986 CEST	49758	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:01.152141094 CEST	443	49758	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:01.285774946 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.286076069 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.286128044 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.286140919 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.286199093 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.286251068 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.305670023 CEST	443	49760	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:01.320555925 CEST	49760	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:01.320575953 CEST	443	49760	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:01.320656061 CEST	49757	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.320667028 CEST	443	49757	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.324182034 CEST	443	49760	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:01.324249983 CEST	49760	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:01.325243950 CEST	49760	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:01.325414896 CEST	443	49760	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:01.325905085 CEST	49760	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:01.325912952 CEST	443	49760	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:01.363136053 CEST	443	49758	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:01.363430023 CEST	443	49758	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:01.363492966 CEST	49758	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:01.365865946 CEST	49758	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:01.365907907 CEST	443	49758	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:01.399946928 CEST	49760	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:01.518405914 CEST	49761	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.518484116 CEST	443	49761	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.518562078 CEST	49761	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.518958092 CEST	49761	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.518994093 CEST	443	49761	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.599030972 CEST	443	49760	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:01.599215984 CEST	443	49760	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:01.599273920 CEST	49760	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:01.601083040 CEST	49760	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:01.601100922 CEST	443	49760	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:01.736954927 CEST	443	49761	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.737415075 CEST	49761	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.737476110 CEST	443	49761	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.738185883 CEST	443	49761	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.738595009 CEST	49761	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.738692999 CEST	443	49761	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.738756895 CEST	49761	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:01.780139923 CEST	443	49761	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.995851994 CEST	443	49761	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.996200085 CEST	443	49761	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:01.996284962 CEST	49761	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:02.021400928 CEST	49761	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:02.021445036 CEST	443	49761	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:02.868448019 CEST	80	49738	120.136.14.8	192.168.2.4
Apr 18, 2024 02:15:02.868659019 CEST	49738	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:15:03.872572899 CEST	443	49746	108.177.122.99	192.168.2.4
Apr 18, 2024 02:15:03.872653961 CEST	443	49746	108.177.122.99	192.168.2.4
Apr 18, 2024 02:15:03.872706890 CEST	49746	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:15:04.332168102 CEST	49672	443	192.168.2.4	173.222.162.32
Apr 18, 2024 02:15:04.332257986 CEST	443	49672	173.222.162.32	192.168.2.4
Apr 18, 2024 02:15:04.580862045 CEST	49738	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:15:04.580909014 CEST	49746	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:15:04.580929995 CEST	443	49746	108.177.122.99	192.168.2.4
Apr 18, 2024 02:15:04.581688881 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:04.581712961 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:04.581892014 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:04.582128048 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:04.582146883 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:04.595098972 CEST	49764	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:04.595129967 CEST	443	49764	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:04.595184088 CEST	49764	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:04.595779896 CEST	49764	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:04.595796108 CEST	443	49764	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:04.795804024 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:04.796355009 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:04.796375990 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:04.796845913 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:04.797561884 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:04.797652960 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:04.797944069 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:04.798008919 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:04.798038960 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:04.798104048 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:04.798116922 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:04.809006929 CEST	443	49764	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:04.809187889 CEST	49764	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:04.809211969 CEST	443	49764	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:04.809678078 CEST	443	49764	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:04.810302973 CEST	49764	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:04.810391903 CEST	443	49764	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:04.810606956 CEST	49764	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:04.856116056 CEST	443	49764	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:04.928299904 CEST	80	49738	120.136.14.8	192.168.2.4
Apr 18, 2024 02:15:05.047144890 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.047316074 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.047384024 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:05.047396898 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.047513962 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.047616959 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.047647953 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:05.047656059 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.047796965 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.047853947 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:05.047888041 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.047980070 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:05.047986031 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.048152924 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.048207045 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:05.048213959 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.048321962 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.048366070 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:05.048381090 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.048496008 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.048574924 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:05.048582077 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.048675060 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.048736095 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:05.048742056 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.049089909 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.049180984 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:05.061197042 CEST	49763	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:05.061220884 CEST	443	49763	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:05.066910028 CEST	443	49764	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.067187071 CEST	443	49764	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.067238092 CEST	49764	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:05.209803104 CEST	49764	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:05.209831953 CEST	443	49764	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.329943895 CEST	49766	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:05.330035925 CEST	443	49766	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.330178022 CEST	49766	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:05.330816984 CEST	49766	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:05.330852032 CEST	443	49766	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.549098969 CEST	443	49766	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.549424887 CEST	49766	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:05.549458027 CEST	443	49766	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.550549030 CEST	443	49766	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.550858021 CEST	49766	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:05.551008940 CEST	49766	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:05.551034927 CEST	443	49766	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.669390917 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 18, 2024 02:15:05.756131887 CEST	443	49766	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.756203890 CEST	49766	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:05.773205996 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 18, 2024 02:15:05.773330927 CEST	80	49723	199.232.214.172	192.168.2.4
Apr 18, 2024 02:15:05.773385048 CEST	49723	80	192.168.2.4	199.232.214.172
Apr 18, 2024 02:15:05.821183920 CEST	443	49766	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.821314096 CEST	443	49766	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:05.821403027 CEST	49766	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:05.822146893 CEST	49766	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:05.822158098 CEST	443	49766	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:19.461945057 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.462023020 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.462502003 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.462697029 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.462714911 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.682317972 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.682593107 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.682609081 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.683681011 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.683991909 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.684143066 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.684149027 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.684195042 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.684211969 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.684297085 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.684379101 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.684447050 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.940741062 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.940877914 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.941004038 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.941013098 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.941051006 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.941217899 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.941236019 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.941278934 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:19.941391945 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.943093061 CEST	49771	443	192.168.2.4	104.17.2.184
Apr 18, 2024 02:15:19.943121910 CEST	443	49771	104.17.2.184	192.168.2.4
Apr 18, 2024 02:15:20.023508072 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.023540974 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.023756981 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.024225950 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.024240971 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.026246071 CEST	49773	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.026298046 CEST	443	49773	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.026384115 CEST	49773	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.026684999 CEST	49773	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.026705027 CEST	443	49773	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.029695034 CEST	49774	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:20.029772043 CEST	443	49774	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:20.029936075 CEST	49774	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:20.030184984 CEST	49774	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:20.030222893 CEST	443	49774	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:20.249007940 CEST	443	49774	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:20.249358892 CEST	49774	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:20.249394894 CEST	443	49774	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:20.250478983 CEST	443	49774	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:20.250895023 CEST	49774	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:20.251074076 CEST	49774	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:20.251075029 CEST	443	49774	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:20.282963991 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.283260107 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.283271074 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.283663988 CEST	443	49773	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.283900023 CEST	49773	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.283927917 CEST	443	49773	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.284437895 CEST	443	49773	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.284440994 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.284944057 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.285111904 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.285475016 CEST	49773	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.285558939 CEST	443	49773	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.285710096 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.285825014 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.285830021 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.292146921 CEST	443	49774	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:20.292527914 CEST	49774	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:20.325248957 CEST	49773	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.508857012 CEST	443	49774	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:20.509116888 CEST	443	49774	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:20.509195089 CEST	49774	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:20.511454105 CEST	49774	443	192.168.2.4	104.17.3.184
Apr 18, 2024 02:15:20.511488914 CEST	443	49774	104.17.3.184	192.168.2.4
Apr 18, 2024 02:15:20.951498032 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.951561928 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.951606989 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.951670885 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.951685905 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.951730013 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.951730013 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.951746941 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.951778889 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.951827049 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.951827049 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.951838017 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.951925039 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:20.952069044 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.952902079 CEST	49772	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:15:20.952918053 CEST	443	49772	198.98.54.45	192.168.2.4
Apr 18, 2024 02:15:21.094722986 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.094791889 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.094903946 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.095185995 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.095207930 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.314884901 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.315217972 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.315285921 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.316737890 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.316828012 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.318357944 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.318448067 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.318742990 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.318759918 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.359775066 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.571194887 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.571275949 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.571310997 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.571350098 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.571388960 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.571394920 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.571459055 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.571516991 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.571523905 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.571523905 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.571548939 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.571598053 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.571607113 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.571620941 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.571705103 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.571719885 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.572173119 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.572226048 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.572237968 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.572252989 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.572299957 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.572351933 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.572366953 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.572423935 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.572824955 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.572904110 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.572940111 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.572988987 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.572992086 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.573005915 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.573039055 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.573616982 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.573676109 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.573683023 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.573697090 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.573750973 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.573753119 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.573765993 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.573829889 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.573843956 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.574465990 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.574506998 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.574536085 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.574548960 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.574601889 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.574604988 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.574616909 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.574692965 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.574704885 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.575378895 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.575439930 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.575445890 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.575459957 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.575505972 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.575561047 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.575576067 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.576181889 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.576244116 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.576255083 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.576268911 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.576344013 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.576358080 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.576543093 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.577075958 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.577157974 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.677076101 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.677170038 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.677220106 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.677308083 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.677323103 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.677386045 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.677422047 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.677548885 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.677555084 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.677587032 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.677628994 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.678227901 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.678293943 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.678303003 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.678345919 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.678352118 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.678385973 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.678409100 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.678683043 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.678751945 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.678759098 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.678904057 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.678932905 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.678970098 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.679516077 CEST	49775	443	192.168.2.4	104.17.25.14
Apr 18, 2024 02:15:21.679534912 CEST	443	49775	104.17.25.14	192.168.2.4
Apr 18, 2024 02:15:21.820116997 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:21.820143938 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:21.820211887 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:21.820571899 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:21.820585966 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.196079969 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.196515083 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:22.196578026 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.198234081 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.198323011 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:22.198343039 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.198405981 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:22.199784040 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:22.199877977 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.203814983 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:22.203830957 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.255994081 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:22.496903896 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.496984959 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.497004032 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.497062922 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.497057915 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:22.497131109 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.497169018 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:22.497169018 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:22.497278929 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.497344971 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:22.498971939 CEST	49776	443	192.168.2.4	52.96.183.242
Apr 18, 2024 02:15:22.499005079 CEST	443	49776	52.96.183.242	192.168.2.4
Apr 18, 2024 02:15:22.613533974 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:22.613614082 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:22.613711119 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:22.614195108 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:22.614222050 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:22.987011909 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:22.987329006 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:22.987344980 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:22.988791943 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:22.988867044 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:22.988878012 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:22.988938093 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:22.989409924 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:22.989476919 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:22.989590883 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:22.989598036 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:23.039071083 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:23.286408901 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:23.286489010 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:23.286560059 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:23.286571980 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:23.286608934 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:23.286638021 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:23.286672115 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:23.286818981 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:23.286880970 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:23.287820101 CEST	49777	443	192.168.2.4	52.96.173.162
Apr 18, 2024 02:15:23.287844896 CEST	443	49777	52.96.173.162	192.168.2.4
Apr 18, 2024 02:15:24.073229074 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.073304892 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:24.073385954 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.073676109 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.073694944 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:24.500125885 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:24.500490904 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.500524998 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:24.502165079 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:24.502259970 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.504579067 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.504679918 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:24.505037069 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.548141956 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:24.557832003 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.557889938 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:24.605690956 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.905795097 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:24.920958042 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.921006918 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:24.921072960 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.921449900 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:24.921471119 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:24.948009014 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:25.150254965 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:25.150417089 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:25.150481939 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:25.150547981 CEST	443	49778	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:25.150609970 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:25.150609970 CEST	49778	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:25.342616081 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:25.342935085 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:25.342957020 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:25.344063044 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:25.344441891 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:25.344600916 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:25.344605923 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:25.344645023 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:25.388808966 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:28.805607080 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:28.854902983 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.008011103 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.008044958 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.008090019 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.008140087 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.008157969 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.008208990 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.008209944 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.008287907 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.008326054 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.008332968 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.008332968 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.008400917 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.009067059 CEST	49779	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.009099007 CEST	443	49779	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.393116951 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.393218040 CEST	443	49780	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.393285990 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.393613100 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.393649101 CEST	443	49780	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.820940971 CEST	443	49780	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.821337938 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.821373940 CEST	443	49780	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.825067043 CEST	443	49780	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.825263977 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.825644016 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.825644016 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.825741053 CEST	443	49780	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.870066881 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:29.870095968 CEST	443	49780	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:29.915040970 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:30.138968945 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.138994932 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.139051914 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.139074087 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.139156103 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.139179945 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.139394999 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.139420986 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.139683008 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.139713049 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.141968966 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.141979933 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.141985893 CEST	49784	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.142064095 CEST	443	49784	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.142106056 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.142326117 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.142339945 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.142376900 CEST	49784	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.142574072 CEST	49784	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.142601013 CEST	443	49784	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.232975006 CEST	443	49780	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:30.285504103 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:30.467061996 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.467407942 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.467444897 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.469116926 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.469225883 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.470519066 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.470519066 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.470550060 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.470757008 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.472215891 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.472409964 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.472423077 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.474081039 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.474386930 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.474812984 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.474817038 CEST	443	49784	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.475089073 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.475089073 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.475106001 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.475248098 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.475285053 CEST	49784	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.475306988 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.475313902 CEST	443	49784	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.476763964 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.476932049 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.477001905 CEST	443	49784	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.477077007 CEST	49784	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.477826118 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.477868080 CEST	443	49780	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:30.477902889 CEST	49784	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.477924109 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.477961063 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.477998018 CEST	443	49784	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.478059053 CEST	443	49780	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:30.478102922 CEST	49784	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.478188038 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:30.478503942 CEST	49780	443	192.168.2.4	193.222.96.117
Apr 18, 2024 02:15:30.478533983 CEST	443	49780	193.222.96.117	192.168.2.4
Apr 18, 2024 02:15:30.510317087 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.510335922 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.520114899 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.520133018 CEST	443	49784	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.520143986 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.525603056 CEST	49784	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.525635958 CEST	443	49784	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.525902987 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.525902987 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.525912046 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.525923967 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.557303905 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.572822094 CEST	49784	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.572853088 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.572853088 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.671420097 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.671601057 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.671623945 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.671717882 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.671719074 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.671732903 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.671746969 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.671758890 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.671777964 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.671786070 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.671809912 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.671822071 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.671837091 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.671925068 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.671976089 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.672014952 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.672019005 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.672036886 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.672050953 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.672068119 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.683119059 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.683243036 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.683404922 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.683446884 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.683618069 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.684555054 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.684585094 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.685762882 CEST	443	49784	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.685951948 CEST	443	49784	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.686188936 CEST	49784	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.691735983 CEST	49784	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.691778898 CEST	443	49784	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.713413954 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.775763988 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.775825977 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.775868893 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.775883913 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.775911093 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.775944948 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.775957108 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.776066065 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.776139975 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.776182890 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.776191950 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.776216030 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.784559011 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.784636974 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.784657955 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.784693956 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.784723997 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.784734964 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.784751892 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.784759998 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.784779072 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.784797907 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.784822941 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.784832954 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.784853935 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.784914017 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.785048008 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.785073996 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.785351992 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.786027908 CEST	49783	443	192.168.2.4	13.107.213.40
Apr 18, 2024 02:15:30.786056042 CEST	443	49783	13.107.213.40	192.168.2.4
Apr 18, 2024 02:15:30.809714079 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.809747934 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.809900999 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.810405016 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.810411930 CEST	49786	443	192.168.2.4	13.107.246.41
Apr 18, 2024 02:15:30.810421944 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.810460091 CEST	443	49786	13.107.246.41	192.168.2.4
Apr 18, 2024 02:15:30.810698032 CEST	49786	443	192.168.2.4	13.107.246.41
Apr 18, 2024 02:15:30.810698032 CEST	49786	443	192.168.2.4	13.107.246.41
Apr 18, 2024 02:15:30.810762882 CEST	443	49786	13.107.246.41	192.168.2.4
Apr 18, 2024 02:15:30.815979958 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.816054106 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.816112041 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.816124916 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.816159010 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.816276073 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.816318989 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.816369057 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.816380024 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.816407919 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.858083963 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.880069017 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.880132914 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.880141020 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.880182028 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.880194902 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.880248070 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.880264044 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.880305052 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.880352020 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.880405903 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.880517006 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.880531073 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:30.880548000 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.880568027 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:30.905072927 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:30.905112028 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:30.905179024 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:30.905548096 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:30.905560970 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.135443926 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:31.135816097 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:31.135874033 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:31.136718988 CEST	443	49786	13.107.246.41	192.168.2.4
Apr 18, 2024 02:15:31.137104988 CEST	49786	443	192.168.2.4	13.107.246.41
Apr 18, 2024 02:15:31.137150049 CEST	443	49786	13.107.246.41	192.168.2.4
Apr 18, 2024 02:15:31.137542009 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:31.137625933 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:31.138792992 CEST	443	49786	13.107.246.41	192.168.2.4
Apr 18, 2024 02:15:31.138868093 CEST	49786	443	192.168.2.4	13.107.246.41
Apr 18, 2024 02:15:31.140651941 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:31.140898943 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:31.141364098 CEST	49786	443	192.168.2.4	13.107.246.41
Apr 18, 2024 02:15:31.141469002 CEST	443	49786	13.107.246.41	192.168.2.4
Apr 18, 2024 02:15:31.141839027 CEST	49786	443	192.168.2.4	13.107.246.41
Apr 18, 2024 02:15:31.141854048 CEST	443	49786	13.107.246.41	192.168.2.4
Apr 18, 2024 02:15:31.141861916 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:31.141890049 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:31.186877966 CEST	49786	443	192.168.2.4	13.107.246.41
Apr 18, 2024 02:15:31.186959982 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:31.241086006 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.241293907 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.241350889 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.242995024 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.243065119 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.244237900 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.244239092 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.244318962 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.244507074 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.293404102 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.293457985 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.334435940 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.343627930 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:31.343782902 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:31.343943119 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:31.343955040 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:31.344022989 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:31.344780922 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 18, 2024 02:15:31.344819069 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 18, 2024 02:15:31.347351074 CEST	443	49786	13.107.246.41	192.168.2.4
Apr 18, 2024 02:15:31.347518921 CEST	443	49786	13.107.246.41	192.168.2.4
Apr 18, 2024 02:15:31.347564936 CEST	49786	443	192.168.2.4	13.107.246.41
Apr 18, 2024 02:15:31.349267006 CEST	49786	443	192.168.2.4	13.107.246.41
Apr 18, 2024 02:15:31.349293947 CEST	443	49786	13.107.246.41	192.168.2.4
Apr 18, 2024 02:15:31.701217890 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.701351881 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.701374054 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.701404095 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.701420069 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.701438904 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.701448917 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.701457977 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.701472998 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.701484919 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.701489925 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.701514959 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.701536894 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.701590061 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.701724052 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.701869965 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.701869965 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.702353954 CEST	49787	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.702411890 CEST	443	49787	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.814604998 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.814660072 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:31.814716101 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.815067053 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:31.815093040 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.135999918 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.136951923 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.136965036 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.138577938 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.138968945 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.138968945 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.139219046 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.139388084 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.180160999 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.182951927 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.182959080 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.232830048 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.410152912 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.410330057 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.410352945 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.410419941 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.410469055 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.410473108 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.410495996 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.410528898 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.410566092 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.410566092 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.410567045 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.410633087 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.410772085 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:32.410777092 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.411053896 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.819039106 CEST	49789	443	192.168.2.4	152.195.19.97
Apr 18, 2024 02:15:32.819071054 CEST	443	49789	152.195.19.97	192.168.2.4
Apr 18, 2024 02:15:36.104934931 CEST	49736	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:15:36.250911951 CEST	49737	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:15:36.281254053 CEST	80	49736	44.236.226.13	192.168.2.4
Apr 18, 2024 02:15:36.294722080 CEST	49735	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:15:36.425448895 CEST	80	49737	44.236.226.13	192.168.2.4
Apr 18, 2024 02:15:36.469845057 CEST	80	49735	44.236.226.13	192.168.2.4
Apr 18, 2024 02:15:37.151381016 CEST	49739	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:15:37.489248037 CEST	80	49739	120.136.14.8	192.168.2.4
Apr 18, 2024 02:15:39.698097944 CEST	49744	443	192.168.2.4	120.136.14.8
Apr 18, 2024 02:15:39.698108912 CEST	443	49744	120.136.14.8	192.168.2.4
Apr 18, 2024 02:15:52.110454082 CEST	49736	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:15:52.110474110 CEST	49737	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:15:52.284303904 CEST	80	49737	44.236.226.13	192.168.2.4
Apr 18, 2024 02:15:52.284370899 CEST	49737	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:15:52.286642075 CEST	80	49736	44.236.226.13	192.168.2.4
Apr 18, 2024 02:15:52.286715031 CEST	49736	80	192.168.2.4	44.236.226.13
Apr 18, 2024 02:15:52.478955030 CEST	80	49739	120.136.14.8	192.168.2.4
Apr 18, 2024 02:15:52.479041100 CEST	49739	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:15:53.512609005 CEST	49739	80	192.168.2.4	120.136.14.8
Apr 18, 2024 02:15:53.512903929 CEST	49825	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:15:53.512959957 CEST	443	49825	108.177.122.99	192.168.2.4
Apr 18, 2024 02:15:53.513231993 CEST	49825	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:15:53.513231993 CEST	49825	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:15:53.513309002 CEST	443	49825	108.177.122.99	192.168.2.4
Apr 18, 2024 02:15:53.732728958 CEST	443	49825	108.177.122.99	192.168.2.4
Apr 18, 2024 02:15:53.750541925 CEST	49825	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:15:53.750600100 CEST	443	49825	108.177.122.99	192.168.2.4
Apr 18, 2024 02:15:53.752075911 CEST	443	49825	108.177.122.99	192.168.2.4
Apr 18, 2024 02:15:53.752679110 CEST	49825	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:15:53.753160954 CEST	443	49825	108.177.122.99	192.168.2.4
Apr 18, 2024 02:15:53.811007977 CEST	49825	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:15:53.850593090 CEST	80	49739	120.136.14.8	192.168.2.4
Apr 18, 2024 02:15:54.211936951 CEST	443	49744	120.136.14.8	192.168.2.4
Apr 18, 2024 02:15:54.212127924 CEST	443	49744	120.136.14.8	192.168.2.4
Apr 18, 2024 02:15:54.212172985 CEST	49744	443	192.168.2.4	120.136.14.8
Apr 18, 2024 02:15:56.044622898 CEST	49744	443	192.168.2.4	120.136.14.8
Apr 18, 2024 02:15:56.044646978 CEST	443	49744	120.136.14.8	192.168.2.4
Apr 18, 2024 02:16:03.769813061 CEST	443	49825	108.177.122.99	192.168.2.4
Apr 18, 2024 02:16:03.769954920 CEST	443	49825	108.177.122.99	192.168.2.4
Apr 18, 2024 02:16:03.770190954 CEST	49825	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:16:04.087766886 CEST	49825	443	192.168.2.4	108.177.122.99
Apr 18, 2024 02:16:04.087830067 CEST	443	49825	108.177.122.99	192.168.2.4
Apr 18, 2024 02:16:05.291913033 CEST	49773	443	192.168.2.4	198.98.54.45
Apr 18, 2024 02:16:05.291939974 CEST	443	49773	198.98.54.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 02:14:49.922090054 CEST	53	63478	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:49.965444088 CEST	53	49773	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:50.655395985 CEST	53	49561	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:50.803790092 CEST	54721	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:50.804380894 CEST	55705	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:50.925120115 CEST	53	54721	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:50.925667048 CEST	53	55705	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:51.281769037 CEST	63151	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:51.281994104 CEST	61456	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:51.721152067 CEST	53	61456	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:51.722137928 CEST	53	63151	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:52.508183956 CEST	62006	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:52.508280039 CEST	58540	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:52.643115997 CEST	53	58540	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:52.659248114 CEST	53	62006	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:52.873212099 CEST	56106	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:52.873512983 CEST	54975	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:53.505393028 CEST	53	54975	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:53.525863886 CEST	53	56106	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:53.531902075 CEST	55175	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:53.532599926 CEST	54207	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:53.636419058 CEST	53	55175	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:53.636847973 CEST	53	54207	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:54.679847002 CEST	50001	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:54.680121899 CEST	65444	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:54.784724951 CEST	53	50001	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:54.784789085 CEST	53	65444	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:56.128396034 CEST	63734	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:56.129390955 CEST	56875	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:56.233140945 CEST	53	63734	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:56.234168053 CEST	53	56875	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:57.611042976 CEST	61131	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:57.611542940 CEST	57241	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:14:57.715445042 CEST	53	61131	1.1.1.1	192.168.2.4
Apr 18, 2024 02:14:57.715668917 CEST	53	57241	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:00.891561985 CEST	57987	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:00.891731024 CEST	56670	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:01.030877113 CEST	53	56670	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:01.045969009 CEST	53	57987	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:06.263735056 CEST	138	138	192.168.2.4	192.168.2.255
Apr 18, 2024 02:15:08.009103060 CEST	53	55224	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:20.987210989 CEST	54743	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:20.987477064 CEST	57185	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:21.092061043 CEST	53	54743	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:21.093476057 CEST	53	57185	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:21.713715076 CEST	54654	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:21.714188099 CEST	65197	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:21.818660975 CEST	53	54654	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:21.819437981 CEST	53	65197	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:22.505800009 CEST	51632	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:22.506083965 CEST	60454	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:22.610816002 CEST	53	60454	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:22.612925053 CEST	53	51632	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:23.699471951 CEST	54559	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:23.699665070 CEST	58897	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:24.069797039 CEST	53	54559	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:24.072650909 CEST	53	58897	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:26.932751894 CEST	53	50023	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:29.023441076 CEST	58055	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:29.023663998 CEST	62848	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:29.379415989 CEST	53	62848	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:29.392357111 CEST	53	58055	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:30.031898975 CEST	61732	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:30.032089949 CEST	57735	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:30.137623072 CEST	53	61732	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:30.138391972 CEST	53	57735	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:30.701570034 CEST	50435	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:30.701746941 CEST	56634	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:30.796148062 CEST	64391	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:30.796506882 CEST	61692	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:30.806529999 CEST	53	50435	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:30.807396889 CEST	53	56634	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:30.928323984 CEST	53	64401	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:31.706177950 CEST	54046	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:31.706350088 CEST	52380	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:40.071758032 CEST	63681	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:40.074805975 CEST	54262	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:40.812772989 CEST	52759	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:40.813452959 CEST	60237	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:42.635032892 CEST	56414	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:42.635658026 CEST	49621	53	192.168.2.4	1.1.1.1
Apr 18, 2024 02:15:42.689353943 CEST	53	52011	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:49.180922031 CEST	53	60807	1.1.1.1	192.168.2.4
Apr 18, 2024 02:15:50.212204933 CEST	53	52664	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 18, 2024 02:15:40.207276106 CEST	192.168.2.4	1.1.1.1	c2c3	(Port unreachable)	Destination Unreachable
Apr 18, 2024 02:15:41.924915075 CEST	192.168.2.4	1.1.1.1	c28e	(Port unreachable)	Destination Unreachable
Apr 18, 2024 02:15:42.826134920 CEST	192.168.2.4	1.1.1.1	c2c3	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 02:14:50.803790092 CEST	192.168.2.4	1.1.1.1	0x1174	Standard query (0)	t.cm.morganstanley.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:50.804380894 CEST	192.168.2.4	1.1.1.1	0x151f	Standard query (0)	t.cm.morganstanley.com	65	IN (0x0001)	false
Apr 18, 2024 02:14:51.281769037 CEST	192.168.2.4	1.1.1.1	0x98ae	Standard query (0)	www.saiengroup.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:51.281994104 CEST	192.168.2.4	1.1.1.1	0x1eeb	Standard query (0)	www.saiengroup.com	65	IN (0x0001)	false
Apr 18, 2024 02:14:52.508183956 CEST	192.168.2.4	1.1.1.1	0x80b7	Standard query (0)	activemxmore.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:52.508280039 CEST	192.168.2.4	1.1.1.1	0x6c4a	Standard query (0)	activemxmore.com	65	IN (0x0001)	false
Apr 18, 2024 02:14:52.873212099 CEST	192.168.2.4	1.1.1.1	0x6775	Standard query (0)	www.saiengroup.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:52.873512983 CEST	192.168.2.4	1.1.1.1	0x402e	Standard query (0)	www.saiengroup.com	65	IN (0x0001)	false
Apr 18, 2024 02:14:53.531902075 CEST	192.168.2.4	1.1.1.1	0xcee1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:53.532599926 CEST	192.168.2.4	1.1.1.1	0xc8b4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 02:14:54.679847002 CEST	192.168.2.4	1.1.1.1	0x9096	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:54.680121899 CEST	192.168.2.4	1.1.1.1	0x960b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 02:14:56.128396034 CEST	192.168.2.4	1.1.1.1	0x22f5	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:56.129390955 CEST	192.168.2.4	1.1.1.1	0xaef7	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 02:14:57.611042976 CEST	192.168.2.4	1.1.1.1	0x66f3	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:57.611542940 CEST	192.168.2.4	1.1.1.1	0x5279	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 02:15:00.891561985 CEST	192.168.2.4	1.1.1.1	0xd315	Standard query (0)	activemxmore.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:00.891731024 CEST	192.168.2.4	1.1.1.1	0xf91b	Standard query (0)	activemxmore.com	65	IN (0x0001)	false
Apr 18, 2024 02:15:20.987210989 CEST	192.168.2.4	1.1.1.1	0x41e9	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:20.987477064 CEST	192.168.2.4	1.1.1.1	0x4e07	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 02:15:21.713715076 CEST	192.168.2.4	1.1.1.1	0x3e3c	Standard query (0)	outlook.office.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:21.714188099 CEST	192.168.2.4	1.1.1.1	0x33eb	Standard query (0)	outlook.office.com	65	IN (0x0001)	false
Apr 18, 2024 02:15:22.505800009 CEST	192.168.2.4	1.1.1.1	0x4425	Standard query (0)	outlook.office.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:22.506083965 CEST	192.168.2.4	1.1.1.1	0xa5a0	Standard query (0)	outlook.office.com	65	IN (0x0001)	false
Apr 18, 2024 02:15:23.699471951 CEST	192.168.2.4	1.1.1.1	0x781e	Standard query (0)	bc1q3jc6cu9q5t33q8gpk7h47pw.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:23.699665070 CEST	192.168.2.4	1.1.1.1	0x376	Standard query (0)	bc1q3jc6cu9q5t33q8gpk7h47pw.com	65	IN (0x0001)	false
Apr 18, 2024 02:15:29.023441076 CEST	192.168.2.4	1.1.1.1	0xe493	Standard query (0)	bc1q3jc6cu9q5t33q8gpk7h47pw.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:29.023663998 CEST	192.168.2.4	1.1.1.1	0xa2f6	Standard query (0)	bc1q3jc6cu9q5t33q8gpk7h47pw.com	65	IN (0x0001)	false
Apr 18, 2024 02:15:30.031898975 CEST	192.168.2.4	1.1.1.1	0xe681	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:30.032089949 CEST	192.168.2.4	1.1.1.1	0xd885	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 18, 2024 02:15:30.701570034 CEST	192.168.2.4	1.1.1.1	0xf21a	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:30.701746941 CEST	192.168.2.4	1.1.1.1	0xfbe4	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 18, 2024 02:15:30.796148062 CEST	192.168.2.4	1.1.1.1	0x5070	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:30.796506882 CEST	192.168.2.4	1.1.1.1	0xcf46	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Apr 18, 2024 02:15:31.706177950 CEST	192.168.2.4	1.1.1.1	0xe9e9	Standard query (0)	aadcdn.msauthimages.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:31.706350088 CEST	192.168.2.4	1.1.1.1	0x80f0	Standard query (0)	aadcdn.msauthimages.net	65	IN (0x0001)	false
Apr 18, 2024 02:15:40.071758032 CEST	192.168.2.4	1.1.1.1	0xdd5c	Standard query (0)	passwordreset.microsoftonline.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:40.074805975 CEST	192.168.2.4	1.1.1.1	0x1945	Standard query (0)	passwordreset.microsoftonline.com	65	IN (0x0001)	false
Apr 18, 2024 02:15:40.812772989 CEST	192.168.2.4	1.1.1.1	0xec2e	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:40.813452959 CEST	192.168.2.4	1.1.1.1	0x21b5	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Apr 18, 2024 02:15:42.635032892 CEST	192.168.2.4	1.1.1.1	0x61f0	Standard query (0)	passwordreset.microsoftonline.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:42.635658026 CEST	192.168.2.4	1.1.1.1	0x130b	Standard query (0)	passwordreset.microsoftonline.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 02:14:50.925120115 CEST	1.1.1.1	192.168.2.4	0x1174	No error (0)	t.cm.morganstanley.com	morganstanley-mid-prod2-alb-1529755948.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:14:50.925120115 CEST	1.1.1.1	192.168.2.4	0x1174	No error (0)	morganstanley-mid-prod2-alb-1529755948.us-west-2.elb.amazonaws.com		44.236.226.13	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:50.925120115 CEST	1.1.1.1	192.168.2.4	0x1174	No error (0)	morganstanley-mid-prod2-alb-1529755948.us-west-2.elb.amazonaws.com		54.244.70.226	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:50.925667048 CEST	1.1.1.1	192.168.2.4	0x151f	No error (0)	t.cm.morganstanley.com	morganstanley-mid-prod2-alb-1529755948.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:14:51.722137928 CEST	1.1.1.1	192.168.2.4	0x98ae	No error (0)	www.saiengroup.com		120.136.14.8	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:52.659248114 CEST	1.1.1.1	192.168.2.4	0x80b7	No error (0)	activemxmore.com		198.98.54.45	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:53.525863886 CEST	1.1.1.1	192.168.2.4	0x6775	No error (0)	www.saiengroup.com		120.136.14.8	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:53.636419058 CEST	1.1.1.1	192.168.2.4	0xcee1	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:53.636419058 CEST	1.1.1.1	192.168.2.4	0xcee1	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:53.636419058 CEST	1.1.1.1	192.168.2.4	0xcee1	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:53.636419058 CEST	1.1.1.1	192.168.2.4	0xcee1	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:53.636419058 CEST	1.1.1.1	192.168.2.4	0xcee1	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:53.636419058 CEST	1.1.1.1	192.168.2.4	0xcee1	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:53.636847973 CEST	1.1.1.1	192.168.2.4	0xc8b4	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 02:14:54.784724951 CEST	1.1.1.1	192.168.2.4	0x9096	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:54.784724951 CEST	1.1.1.1	192.168.2.4	0x9096	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:54.784789085 CEST	1.1.1.1	192.168.2.4	0x960b	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 02:14:56.233140945 CEST	1.1.1.1	192.168.2.4	0x22f5	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:56.233140945 CEST	1.1.1.1	192.168.2.4	0x22f5	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:56.234168053 CEST	1.1.1.1	192.168.2.4	0xaef7	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 02:14:57.715445042 CEST	1.1.1.1	192.168.2.4	0x66f3	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:57.715445042 CEST	1.1.1.1	192.168.2.4	0x66f3	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:14:57.715668917 CEST	1.1.1.1	192.168.2.4	0x5279	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 02:15:01.045969009 CEST	1.1.1.1	192.168.2.4	0xd315	No error (0)	activemxmore.com		198.98.54.45	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:06.535419941 CEST	1.1.1.1	192.168.2.4	0xd896	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:06.535419941 CEST	1.1.1.1	192.168.2.4	0xd896	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:21.092061043 CEST	1.1.1.1	192.168.2.4	0x41e9	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:21.092061043 CEST	1.1.1.1	192.168.2.4	0x41e9	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:21.093476057 CEST	1.1.1.1	192.168.2.4	0x4e07	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 02:15:21.818660975 CEST	1.1.1.1	192.168.2.4	0x3e3c	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:21.818660975 CEST	1.1.1.1	192.168.2.4	0x3e3c	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:21.818660975 CEST	1.1.1.1	192.168.2.4	0x3e3c	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:21.818660975 CEST	1.1.1.1	192.168.2.4	0x3e3c	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:21.818660975 CEST	1.1.1.1	192.168.2.4	0x3e3c	No error (0)	outlook.ms-acdc.office.com	LYH-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:21.818660975 CEST	1.1.1.1	192.168.2.4	0x3e3c	No error (0)	LYH-efz.ms-acdc.office.com		52.96.183.242	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:21.818660975 CEST	1.1.1.1	192.168.2.4	0x3e3c	No error (0)	LYH-efz.ms-acdc.office.com		52.96.165.50	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:21.818660975 CEST	1.1.1.1	192.168.2.4	0x3e3c	No error (0)	LYH-efz.ms-acdc.office.com		52.96.40.114	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:21.818660975 CEST	1.1.1.1	192.168.2.4	0x3e3c	No error (0)	LYH-efz.ms-acdc.office.com		52.96.186.162	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:21.819437981 CEST	1.1.1.1	192.168.2.4	0x33eb	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:21.819437981 CEST	1.1.1.1	192.168.2.4	0x33eb	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:21.819437981 CEST	1.1.1.1	192.168.2.4	0x33eb	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:22.610816002 CEST	1.1.1.1	192.168.2.4	0xa5a0	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:22.610816002 CEST	1.1.1.1	192.168.2.4	0xa5a0	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:22.610816002 CEST	1.1.1.1	192.168.2.4	0xa5a0	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:22.612925053 CEST	1.1.1.1	192.168.2.4	0x4425	No error (0)	outlook.office.com	substrate.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:22.612925053 CEST	1.1.1.1	192.168.2.4	0x4425	No error (0)	substrate.office.com	outlook.office365.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:22.612925053 CEST	1.1.1.1	192.168.2.4	0x4425	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:22.612925053 CEST	1.1.1.1	192.168.2.4	0x4425	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:22.612925053 CEST	1.1.1.1	192.168.2.4	0x4425	No error (0)	outlook.ms-acdc.office.com	LYH-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:22.612925053 CEST	1.1.1.1	192.168.2.4	0x4425	No error (0)	LYH-efz.ms-acdc.office.com		52.96.173.162	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:22.612925053 CEST	1.1.1.1	192.168.2.4	0x4425	No error (0)	LYH-efz.ms-acdc.office.com		52.96.104.50	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:22.612925053 CEST	1.1.1.1	192.168.2.4	0x4425	No error (0)	LYH-efz.ms-acdc.office.com		52.96.37.210	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:22.612925053 CEST	1.1.1.1	192.168.2.4	0x4425	No error (0)	LYH-efz.ms-acdc.office.com		52.96.97.130	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:23.115657091 CEST	1.1.1.1	192.168.2.4	0xa6fc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:23.115657091 CEST	1.1.1.1	192.168.2.4	0xa6fc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:24.069797039 CEST	1.1.1.1	192.168.2.4	0x781e	No error (0)	bc1q3jc6cu9q5t33q8gpk7h47pw.com		193.222.96.117	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:29.392357111 CEST	1.1.1.1	192.168.2.4	0xe493	No error (0)	bc1q3jc6cu9q5t33q8gpk7h47pw.com		193.222.96.117	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:30.137623072 CEST	1.1.1.1	192.168.2.4	0xe681	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:30.137623072 CEST	1.1.1.1	192.168.2.4	0xe681	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:30.138391972 CEST	1.1.1.1	192.168.2.4	0xd885	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:30.139194012 CEST	1.1.1.1	192.168.2.4	0xeb97	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:30.139194012 CEST	1.1.1.1	192.168.2.4	0xeb97	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:30.139194012 CEST	1.1.1.1	192.168.2.4	0xeb97	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:30.806529999 CEST	1.1.1.1	192.168.2.4	0xf21a	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:30.806529999 CEST	1.1.1.1	192.168.2.4	0xf21a	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:30.807396889 CEST	1.1.1.1	192.168.2.4	0xfbe4	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:30.807840109 CEST	1.1.1.1	192.168.2.4	0x24ca	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:30.807840109 CEST	1.1.1.1	192.168.2.4	0x24ca	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:30.807840109 CEST	1.1.1.1	192.168.2.4	0x24ca	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:30.904293060 CEST	1.1.1.1	192.168.2.4	0x5070	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:30.904293060 CEST	1.1.1.1	192.168.2.4	0x5070	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:30.904293060 CEST	1.1.1.1	192.168.2.4	0x5070	No error (0)	sni1gl.wpc.upsiloncdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:30.904351950 CEST	1.1.1.1	192.168.2.4	0xcf46	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:30.904351950 CEST	1.1.1.1	192.168.2.4	0xcf46	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:31.811943054 CEST	1.1.1.1	192.168.2.4	0x80f0	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:31.811943054 CEST	1.1.1.1	192.168.2.4	0x80f0	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:31.813939095 CEST	1.1.1.1	192.168.2.4	0xe9e9	No error (0)	aadcdn.msauthimages.net	aadcdn.azureedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:31.813939095 CEST	1.1.1.1	192.168.2.4	0xe9e9	No error (0)	scdn3514c.wpc.9e730.upsiloncdn.net	sni1gl.wpc.upsiloncdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:31.813939095 CEST	1.1.1.1	192.168.2.4	0xe9e9	No error (0)	sni1gl.wpc.upsiloncdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:40.177165985 CEST	1.1.1.1	192.168.2.4	0xdd5c	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:40.207207918 CEST	1.1.1.1	192.168.2.4	0x1945	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:40.917870045 CEST	1.1.1.1	192.168.2.4	0xec2e	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:40.917911053 CEST	1.1.1.1	192.168.2.4	0x21b5	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:42.038680077 CEST	1.1.1.1	192.168.2.4	0xef52	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:42.038680077 CEST	1.1.1.1	192.168.2.4	0xef52	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 02:15:42.741878033 CEST	1.1.1.1	192.168.2.4	0x61f0	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:15:42.826050997 CEST	1.1.1.1	192.168.2.4	0x130b	No error (0)	passwordreset.microsoftonline.com	passwordreset.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:16:02.024369955 CEST	1.1.1.1	192.168.2.4	0xf5f1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 02:16:02.024369955 CEST	1.1.1.1	192.168.2.4	0xf5f1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.saiengroup.com

activemxmore.com

https:

challenges.cloudflare.com

cdnjs.cloudflare.com

outlook.office.com

bc1q3jc6cu9q5t33q8gpk7h47pw.com

aadcdn.msftauth.net

aadcdn.msauth.net

aadcdn.msauthimages.net

fs.microsoft.com

t.cm.morganstanley.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	44.236.226.13	80	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 02:14:51.101408958 CEST	581	OUT	GET /r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20= HTTP/1.1 Host: t.cm.morganstanley.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 02:14:51.277586937 CEST	727	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 00:14:51 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 17 Connection: keep-alive Server: Apache X-Robots-Tag: noindex P3P: CP="CAO DSP COR CURa DEVa TAIa OUR BUS IND UNI COM NAV" Location: http://www.saiengroup.com/teaz/648c482b60b3906833c9304bab170add/JBVNhz/YW15LmNoZW5AZG91YmxlbGluZS5jb20= Set-Cookie: AMCV_9355F0CC5405D58C0A4C98A1%40AdobeOrg=MCMID%7C77087496681249832951004302716903620607; Domain=morganstanley.com; Path=/; Expires=Tue, 13-May-2025 00:14:51 GMT Set-Cookie: nlid=1b92d14\|134cc33c; Domain=morganstanley.com; Path=/ Set-Cookie: nllastdelid=134cc33c; Domain=morganstanley.com; Path=/; Expires=Tue, 13-May-2025 00:14:51 GMT Data Raw: 54 65 6d 70 6f 72 61 72 69 6c 79 20 6d 6f 76 65 64 Data Ascii: Temporarily moved
Apr 18, 2024 02:15:36.294722080 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	120.136.14.8	80	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 02:14:52.070574045 CEST	510	OUT	GET /teaz/648c482b60b3906833c9304bab170add/JBVNhz/YW15LmNoZW5AZG91YmxlbGluZS5jb20= HTTP/1.1 Host: www.saiengroup.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 02:14:52.420839071 CEST	310	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 00:14:52 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive refresh: 0;url=https://activemxmore.com/?e=amy.chen@doubleline.com Cache-Control: max-age=1 Expires: Thu, 18 Apr 2024 00:14:53 GMT Accept-Ranges: bytes
Apr 18, 2024 02:14:52.516834021 CEST	457	OUT	GET /favicon.ico HTTP/1.1 Host: www.saiengroup.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.saiengroup.com/teaz/648c482b60b3906833c9304bab170add/JBVNhz/YW15LmNoZW5AZG91YmxlbGluZS5jb20= Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 18, 2024 02:14:52.866086006 CEST	538	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 18 Apr 2024 00:14:52 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 246 Connection: keep-alive Location: https://www.saiengroup.com/favicon.ico Cache-Control: max-age=1 Expires: Thu, 18 Apr 2024 00:14:53 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 61 69 65 6e 67 72 6f 75 70 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.saiengroup.com/favicon.ico">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49736	44.236.226.13	80	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 02:15:36.104934931 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49737	44.236.226.13	80	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 02:15:36.250911951 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49739	120.136.14.8	80	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 18, 2024 02:15:37.151381016 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	198.98.54.45	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:53 UTC	708	OUT	GET /?e=amy.chen@doubleline.com HTTP/1.1 Host: activemxmore.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://www.saiengroup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:14:53 UTC	390	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 18 Apr 2024 00:14:53 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close X-Powered-By: PHP/5.4.16 Set-Cookie: PHPSESSID=e8fed20s9sarctiah9dfo4cnk6; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache location: main/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	198.98.54.45	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:53 UTC	733	OUT	GET /main/ HTTP/1.1 Host: activemxmore.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://www.saiengroup.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8fed20s9sarctiah9dfo4cnk6
2024-04-18 00:14:53 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 00:14:53 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 3137 Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.16 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache
2024-04-18 00:14:53 UTC	3137	IN	Data Raw: 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 6d 61 69 6e 2e 70 68 70 23 5a 30 4a 57 34 78 43 38 6f 35 72 6d 67 51 68 4d 46 5a 66 66 5a 38 65 4e 50 39 34 71 32 4a 73 31 4b 62 58 50 49 41 58 37 46 6f 74 57 66 4b 49 56 4b 59 61 4a 36 6f 77 57 78 42 6d 41 6b 4f 43 35 5a 7a 55 49 39 52 50 50 67 69 4c 77 33 75 72 4e 73 43 77 7a 31 32 76 79 45 52 39 59 46 4c 33 45 6c 59 6e 75 51 64 6b 37 76 36 44 7a 41 34 6d 33 47 54 43 49 57 37 67 41 59 71 7a 45 62 44 6a 77 42 47 31 72 54 6c 79 70 73 62 59 32 67 6c 36 58 65 4a 46 61 51 57 4c 50 6d 6b 75 78 58 4e 34 79 75 36 5a 6f 73 79 4f 55 4b 4e 57 30 38 33 59 6e 4d 44 79 44 41 6a 74 57 44 58 75 41 4c 7a 39 67 46 38 45 37 48 73 31 72 67 59 73 6f 31 71 4c 4f 34 6a 73 45 44 56 41 67 54 35 52 46 45 30 56 6b 39 7a 72 51 32 73 68 Data Ascii: <form action="main.php#Z0JW4xC8o5rmgQhMFZffZ8eNP94q2Js1KbXPIAX7FotWfKIVKYaJ6owWxBmAkOC5ZzUI9RPPgiLw3urNsCwz12vyER9YFL3ElYnuQdk7v6DzA4m3GTCIW7gAYqzEbDjwBG1rTlypsbY2gl6XeJFaQWLPmkuxXN4yu6ZosyOUKNW083YnMDyDAjtWDXuALz9gF8E7Hs1rgYso1qLO4jsEDVAgT5RFE0Vk9zrQ2sh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	198.98.54.45	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:53 UTC	579	OUT	GET /main/src.js HTTP/1.1 Host: activemxmore.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://activemxmore.com/main/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8fed20s9sarctiah9dfo4cnk6
2024-04-18 00:14:54 UTC	339	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 00:14:54 GMT Content-Type: application/javascript Content-Length: 33188 Last-Modified: Wed, 17 Apr 2024 19:46:44 GMT Connection: close Vary: Accept-Encoding ETag: "66202724-81a4" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Accept-Ranges: bytes
2024-04-18 00:14:54 UTC	16045	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 22 3c 68 74 6d 6c 20 6c 61 6e 67 3d 5c 22 65 6e 2d 55 53 5c 22 20 63 6c 61 73 73 3d 5c 22 6c 61 6e 67 2d 65 6e 2d 75 73 5c 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 5c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 74 65 78 74 5c 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 5c 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 49 45 3d 45 64 67 65 5c 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 5c 22 72 6f 62 6f 74 73 5c 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: document.write("<html lang=\"en-US\" class=\"lang-en-us\"><head><title>Just a moment...<\/title><meta http-equiv=\"Content-Type\" content=\"text\/html; charset=UTF-8\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE=Edge\"><meta name=\"robots\" content=
2024-04-18 00:14:54 UTC	16384	IN	Data Raw: 2f 74 75 30 76 5c 2f 37 72 35 4c 5c 2f 2b 5c 2f 41 53 5c 2f 54 77 76 30 74 45 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 4f 4b 41 6c 79 7a 67 66 70 79 2b 34 58 36 66 5c 2f 2b 46 2b 70 50 5c 2f 68 66 36 6a 5c 2f 34 6e 2b 73 5c 2f 39 31 38 70 76 2b 50 53 44 4c 5c 2f 70 31 67 34 5c 2f 37 78 6f 50 76 5c 2f 4c 64 6b 4c 5c 2f 31 59 4e 45 5c 2f 39 71 4e 52 76 5c 2f 63 6b 30 66 5c 2f 33 35 6c 48 5c 2f 2b 47 65 53 50 5c 2f 6a 70 45 6e 5c 2f 35 61 68 4a 5c 2f 2b 65 74 53 76 5c 2f 70 73 55 72 5c 2f 36 72 56 4b 5c 2f 2b 79 34 53 5c 2f 5c 2f 75 75 30 75 2b 37 72 39 4c 4c 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 Data Ascii: /tu0v\/7r5L\/+\/AS\/Twv0tEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKAlyzgfpy+4X6f\/+F+pP\/hf6j\/4n+s\/918pv+PSDL\/p1g4\/7xoPv\/LdkL\/1YNE\/9qNRv\/ck0f\/35lH\/+GeSP\/jpEn\/5ahJ\/+etSv\/psUr\/6rVK\/+y4S\/\/uu0u+7r9LLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
2024-04-18 00:14:54 UTC	759	IN	Data Raw: 62 61 63 6b 3d 5c 22 72 65 63 61 70 74 63 68 61 43 61 6c 6c 62 61 63 6b 5c 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 5c 22 30 78 34 41 41 41 41 41 41 41 51 5f 61 6a 4c 59 4a 2d 6f 53 4b 53 49 4e 5c 22 3e 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 64 69 76 3e 3c 64 69 76 3e 3c 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 5c 22 63 68 61 6c 6c 65 6e 67 65 2d 62 6f 64 79 2d 74 65 78 74 5c 22 20 63 6c 61 73 73 3d 5c 22 63 6f 72 65 2d 6d 73 67 20 73 70 61 63 65 72 5c 22 20 73 74 79 6c 65 3d 5c 22 63 6f 6c 6f 72 3a 23 30 30 30 30 30 30 3b 5c 22 3e 77 77 77 2e 6f 66 66 69 63 65 Data Ascii: back=\"recaptchaCallback\" data-sitekey=\"0x4AAAAAAAQ_ajLYJ-oSKSIN\"><\/div><\/div><\/div><div><div><div><\/div><div><\/div><div><\/div><div><\/div><\/div><\/div><div id=\"challenge-body-text\" class=\"core-msg spacer\" style=\"color:#000000;\">www.office

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49747	104.104.126.199	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:54 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 00:14:55 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/07A7) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=24510 Date: Thu, 18 Apr 2024 00:14:55 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49748	104.17.2.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:55 UTC	575	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:14:55 UTC	367	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 00:14:55 GMT Content-Length: 0 Connection: close cross-origin-resource-policy: cross-origin access-control-allow-origin: * location: /turnstile/v0/g/54ea73d52131/api.js?onload=onloadTurnstileCallback cache-control: max-age=300, public Server: cloudflare CF-RAY: 8760751afecaadb3-ATL alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49749	104.104.126.199	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:55 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 00:14:55 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=24492 Date: Thu, 18 Apr 2024 00:14:55 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 00:14:55 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49750	104.17.2.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:55 UTC	590	OUT	GET /turnstile/v0/g/54ea73d52131/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:14:55 UTC	340	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:14:55 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 42415 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8760751dfa974523-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:14:55 UTC	1029	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 62 74 28 65 2c 72 2c 74 2c 6f 2c 75 2c 73 2c 6d 29 7b 74 72 79 7b 76 61 72 20 62 3d 65 5b 73 5d 28 6d 29 2c 68 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 64 29 7b 74 28 64 29 3b 72 65 74 75 72 6e 7d 62 2e 64 6f 6e 65 3f 72 28 68 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 68 29 2e 74 68 65 6e 28 6f 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 72 2c 74 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function bt(e,r,t,o,u,s,m){try{var b=e[s](m),h=b.value}catch(d){t(d);return}b.done?r(h):Promise.resolve(h).then(o,u)}function Et(e){return function(){var r=this,t=arguments;return new Promise(function(o,u){var s=e.apply(r,t);funct
2024-04-18 00:14:55 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 75 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 75 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 74 2e 70 75 73 68 2e 61 70 70 6c 79 28 74 2c 6f 29 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 77 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 66 72 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 Data Ascii: tion(u){return Object.getOwnPropertyDescriptor(e,u).enumerable})),t.push.apply(t,o)}return t}function wt(e,r){return r=r!=null?r:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):fr(Object(r)).forEach(funct
2024-04-18 00:14:55 UTC	1369	IN	Data Raw: 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 72 29 7b 76 61 72 20 74 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 75 2c 73 2c 6d 3b 72 65 74 75 72 6e 20 6d 3d 7b 6e 65 78 74 3a 62 28 30 29 2c 74 68 72 6f 77 3a 62 28 31 29 2c 72 65 74 75 72 6e 3a 62 28 32 29 7d 2c 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 6d 5b 53 79 6d 62 6f Data Ascii: &typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,r){var t={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,u,s,m;return m={next:b(0),throw:b(1),return:b(2)},typeof Symbol=="function"&&(m[Symbo
2024-04-18 00:14:55 UTC	1369	IN	Data Raw: 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4f 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 76 61 72 20 44 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 3d 22 69 6e 76 69 73 69 62 6c 65 22 7d 29 28 44 7c 7c 28 44 3d 7b 7d 29 29 3b 76 Data Ascii: me parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Ot=300020;var Oe=300030;function N(e,r){return e.indexOf(r)!==-1}var D;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE="invisible"})(D\|\|(D={}));v
2024-04-18 00:14:55 UTC	1369	IN	Data Raw: 6e 67 22 26 26 70 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 76 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 4a 65 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 76 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 65 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 5b 22 61 Data Ascii: ng"&&pr.test(e)}var vr=/^[a-z0-9_\-=]{0,255}$/i;function Je(e){return e===void 0?!0:typeof e=="string"&&vr.test(e)}function Ze(e){return N(["normal","compact","invisible"],e)}function et(e){return N(["auto","manual","never"],e)}function tt(e){return N(["a
2024-04-18 00:14:55 UTC	1369	IN	Data Raw: 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 72 2c 74 29 7b 72 65 74 75 72 6e 20 4e 65 28 29 3f 78 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 78 65 3d 66 75 6e 63 74 69 6f 6e 28 75 2c 73 2c 6d 29 7b 76 61 72 20 62 3d 5b 6e 75 6c 6c 5d 3b 62 2e 70 75 73 68 2e 61 70 70 6c 79 28 62 2c 73 29 3b 76 61 72 20 68 3d 46 75 6e 63 Data Ascii: (typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function xe(e,r,t){return Ne()?xe=Reflect.construct:xe=function(u,s,m){var b=[null];b.push.apply(b,s);var h=Func
2024-04-18 00:14:55 UTC	1369	IN	Data Raw: 6b 65 28 73 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 73 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 73 2e 63 6f 64 65 3d 75 2c 73 7d 72 65 74 75 72 6e 20 74 7d 28 4c 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 59 74 28 74 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 Data Ascii: ke(s),"code",void 0),s.name="TurnstileError",s.code=u,s}return t}(Le(Error));function v(e,r){var t="[Cloudflare Turnstile] ".concat(e,".");throw new Yt(t,r)}function _(e){console.warn("[Cloudflare Turnstile] ".concat(e,"."))}function be(e){return e.starts
2024-04-18 00:14:55 UTC	1369	IN	Data Raw: 2e 63 6f 6e 63 61 74 28 53 29 29 3b 69 66 28 21 55 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 7c 7c 28 5f 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 57 69 64 67 65 74 20 22 2e 63 6f 6e 63 61 74 28 53 2c 22 2c 20 63 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 6d 6f 76 65 28 29 20 74 6f 20 63 6c 65 61 6e 20 75 70 20 61 20 77 69 64 67 65 74 2e 22 29 29 2c 64 2e 77 61 74 63 68 63 61 74 2e 6d 69 73 73 69 6e 67 57 69 64 67 65 74 57 61 72 6e 69 6e 67 3d 21 30 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 Data Ascii: .concat(S));if(!U){d.watchcat.missingWidgetWarning\|\|(_("Cannot find Widget ".concat(S,", consider using turnstile.remove() to clean up a widget.")),d.watchcat.missingWidgetWarning=!0);continue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isSta
2024-04-18 00:14:55 UTC	1369	IN	Data Raw: 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 2c 72 29 7b 76 61 72 20 74 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 72 29 7b 76 61 Data Ascii: eyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}function st(e,r){var t="https://challenges.cloudflare.com";if(r){va
2024-04-18 00:14:55 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 76 6f 69 64 20 30 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 33 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 72 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 72 29 3a 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 29 7b 69 66 28 21 74 7c 7c 74 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 42 4f 44 59 22 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 75 3d 31 2c 73 3d 74 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 73 3b 29 73 2e 74 61 67 4e 61 6d 65 3d 3d 3d 74 2e 74 61 67 4e 61 6d 65 26 26 75 2b 2b 2c 73 3d 73 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e Data Ascii: ments.length>1&&arguments[1]!==void 0?arguments[1]:3;return e.length>r?e.substring(0,r):e};function Jt(e){var r=function(t,o){if(!t\|\|t.tagName==="BODY")return o;for(var u=1,s=t.previousElementSibling;s;)s.tagName===t.tagName&&u++,s=s.previousElementSiblin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	104.17.2.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:56 UTC	789	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:14:56 UTC	1343	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:14:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin document-policy: js-profiling origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
2024-04-18 00:14:56 UTC	112	IN	Data Raw: 72 65 66 65 72 72 65 72 2d 70 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 37 36 30 37 35 32 33 66 39 39 37 36 37 35 33 2d 41 54 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: referrer-policy: same-originServer: cloudflareCF-RAY: 87607523f9976753-ATLalt-svc: h3=":443"; ma=86400
2024-04-18 00:14:56 UTC	1283	IN	Data Raw: 37 61 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 7a00<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2024-04-18 00:14:56 UTC	1369	IN	Data Raw: 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 62 6c 69 Data Ascii: ng: 0; width: 100%; height: 100%; overflow: hidden;}body { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, system-ui, bli
2024-04-18 00:14:56 UTC	1369	IN	Data Raw: 66 38 66 38 66 38 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 7d 0a 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b Data Ascii: f8f8f8; stroke-miterlimit: 10;}#success-icon { display: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both;
2024-04-18 00:14:56 UTC	1369	IN	Data Raw: 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f Data Ascii: hallenge-overlay a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .ctp-checkbox-label .mark { border: 2px solid #dadada; backgro
2024-04-18 00:14:56 UTC	1369	IN	Data Raw: 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 65 72 6d 73 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 71 72 20 7b 0a 20 20 66 69 6c 6c 3a 20 72 67 62 28 32 34 33 2c 20 31 32 38 2c 20 33 32 29 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 20 7b 0a 20 20 66 69 6c 6c 3a 20 23 66 66 66 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 Data Ascii: a:active, .theme-dark #terms a:focus { color: #949494;}.theme-dark #content { border-color: #666; background-color: #222;}.theme-dark #qr { fill: rgb(243, 128, 32);}.theme-dark .logo-text { fill: #fff;}.theme-dark #fr-helper-link,.theme
2024-04-18 00:14:56 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 61 66 61 66 61 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 65 31 33 30 33 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 70 78 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 0a 23 63 68 61 6c 6c 65 Data Ascii: challenge-overlay { position: absolute; top: 0; z-index: 9999; background-color: #fafafa;}#challenge-overlay,#challenge-error-text { text-align: center; line-height: 10px; color: #de1303; font-size: 9px;}#challenge-overlay a,#challe
2024-04-18 00:14:56 UTC	1369	IN	Data Raw: 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 Data Ascii: ; cursor: pointer; width: 24px; height: 24px;}.ctp-checkbox-label input:active ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark {
2024-04-18 00:14:56 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 31 38 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d Data Ascii: ontent: center center; align-items: center; height: 118px;}.size-compact .link-spacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom
2024-04-18 00:14:56 UTC	1369	IN	Data Raw: 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 66 61 69 6c 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 63 6f 6e 2c 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 36 70 78 3b 0a 20 20 70 61 64 64 Data Ascii: argin-left: 8px;}.rtl #fail-icon { left: 255px; margin-left: 8px;}.rtl #spinner-icon { left: 255px; margin-left: 8px;}.rtl #timeout-icon,.rtl #expired-icon { left: 255px; margin-left: 8px;}.rtl #branding { margin: 0 0 0 16px; padd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49752	104.17.2.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:56 UTC	710	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=87607523f9976753 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:14:57 UTC	335	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:14:57 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8760752749cd53e1-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:14:57 UTC	1034	IN	Data Raw: 37 65 36 30 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 78 2c 66 45 2c 66 46 2c 66 47 2c 66 48 2c 66 49 2c 66 4d 2c 66 4e 2c 66 54 2c 66 55 2c 67 6b 2c 67 6f 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 41 2c 67 42 2c 67 43 2c 67 44 2c 67 45 2c 67 46 2c 67 47 2c 67 48 2c 67 49 2c 67 4a 2c 67 4b 2c 67 4c 2c 67 4d 2c 67 4e 2c 67 4f 2c 67 50 2c 67 51 2c 67 52 2c 67 53 2c 67 54 2c 67 55 2c 67 56 2c 67 57 2c 67 58 2c 67 59 2c 67 5a 2c 68 30 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 37 2c 68 38 2c 68 39 2c 68 61 2c 68 62 2c 68 63 2c 68 64 2c 68 65 2c 68 66 2c 68 67 2c 68 68 2c 68 69 2c 68 6a 2c 68 6b 2c 68 6d 2c Data Ascii: 7e60window._cf_chl_opt.uaO=false;~function(ix,fE,fF,fG,fH,fI,fM,fN,fT,fU,gk,go,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,gA,gB,gC,gD,gE,gF,gG,gH,gI,gJ,gK,gL,gM,gN,gO,gP,gQ,gR,gS,gT,gU,gV,gW,gX,gY,gZ,h0,h1,h2,h3,h4,h5,h6,h7,h8,h9,ha,hb,hc,hd,he,hf,hg,hh,hi,hj,hk,hm,
2024-04-18 00:14:57 UTC	1369	IN	Data Raw: 69 79 28 37 30 36 29 5d 28 69 2c 36 35 35 33 35 29 2c 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 69 79 28 31 32 36 31 29 5d 28 27 27 29 7d 2c 66 48 3d 7b 7d 2c 66 48 5b 69 78 28 31 30 34 36 29 5d 3d 27 6f 27 2c 66 48 5b 69 78 28 35 37 36 29 5d 3d 27 73 27 2c 66 48 5b 69 78 28 32 31 32 32 29 5d 3d 27 75 27 2c 66 48 5b 69 78 28 32 34 32 33 29 5d 3d 27 7a 27 2c 66 48 5b 69 78 28 34 31 34 29 5d 3d 27 6e 27 2c 66 48 5b 69 78 28 39 39 31 29 5d 3d 27 49 27 2c 66 49 3d 66 48 2c 66 45 5b 69 78 28 33 37 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 69 45 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 69 45 3d 69 78 2c 6f 3d 7b 27 59 49 71 6e 41 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 Data Ascii: iy(706)](i,65535),65535)%255)));return k[iy(1261)]('')},fH={},fH[ix(1046)]='o',fH[ix(576)]='s',fH[ix(2122)]='u',fH[ix(2423)]='z',fH[ix(414)]='n',fH[ix(991)]='I',fI=fH,fE[ix(372)]=function(g,h,i,j,iE,o,x,B,C,D,E,F){if(iE=ix,o={'YIqnA':function(G,H){return
2024-04-18 00:14:57 UTC	1369	IN	Data Raw: 26 28 6e 3d 27 4e 27 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6b 5b 69 47 28 32 31 32 36 29 5d 28 6f 2c 69 5b 6c 5b 6d 5d 5d 5b 69 47 28 32 32 39 31 29 5d 29 3b 2d 31 3d 3d 3d 68 5b 6e 5d 5b 69 47 28 36 31 33 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 26 26 28 66 4e 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 69 47 28 31 65 33 29 5d 28 27 6f 2e 27 2b 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 47 28 32 37 34 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 2c 69 48 29 7b 72 65 74 75 72 6e 20 69 48 3d 69 47 2c 6b 5b 69 48 28 32 39 31 32 29 5d 28 27 6f 2e 27 2c 73 29 7d 29 7d 2c 66 45 5b 69 78 28 32 32 30 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 69 58 2c 65 2c 69 29 7b 65 Data Ascii: &(n='N'),h[n]){for(o=0;k[iG(2126)](o,i[l[m]][iG(2291)]);-1===h[n][iG(613)](i[l[m]][o])&&(fN(i[l[m]][o])\|\|h[n][iG(1e3)]('o.'+i[l[m]][o])),o++);}else h[n]=i[l[m]][iG(2743)](function(s,iH){return iH=iG,k[iH(2912)]('o.',s)})},fE[ix(2201)]=function(c,iX,e,i){e
2024-04-18 00:14:57 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 69 26 68 7d 2c 27 65 68 56 6f 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 57 5a 6f 41 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 45 74 54 67 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 45 43 65 54 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 6d 54 47 68 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 72 41 7a 42 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 50 65 57 77 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 75 Data Ascii: eturn i&h},'ehVoY':function(h,i){return h\|i},'WZoAu':function(h,i){return h<<i},'EtTgb':function(h,i){return i&h},'ECeTX':function(h,i){return i==h},'mTGhl':function(h,i){return h\|i},'rAzBf':function(h,i){return h<<i},'PeWwp':function(h,i){return h(i)},'u
2024-04-18 00:14:57 UTC	1369	IN	Data Raw: 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 6a 42 28 33 34 33 29 5d 28 48 2c 31 29 7c 4d 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 6a 42 28 31 65 33 29 5d 28 64 5b 6a 42 28 32 31 34 35 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 6a 42 28 31 37 36 31 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 6a 42 28 36 33 36 29 5d 28 31 36 2c 73 29 3b 48 3d 48 3c 3c 31 7c 4d 26 31 2e 30 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 6a 42 28 31 65 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 30 3d 3d 44 26 26 28 44 3d 4d 61 74 68 5b 6a 42 28 Data Ascii: (o,H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=d[jB(343)](H,1)\|M,I==j-1?(I=0,G[jB(1e3)](d[jB(2145)](o,H)),H=0):I++,M=0,s++);for(M=C[jB(1761)](0),s=0;d[jB(636)](16,s);H=H<<1\|M&1.01,I==j-1?(I=0,G[jB(1e3)](o(H)),H=0):I++,M>>=1,s++);}D--,0==D&&(D=Math[jB(
2024-04-18 00:14:57 UTC	1369	IN	Data Raw: 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 29 7b 47 5b 6a 42 28 31 65 33 29 5d 28 64 5b 6a 42 28 32 34 33 29 5d 28 6f 2c 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 6a 42 28 31 32 36 31 29 5d 28 27 27 29 7d 65 6c 73 65 20 4f 3d 74 68 69 73 2e 68 5b 64 5b 6a 42 28 32 39 37 39 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 32 32 39 5d 5b 33 5d 2c 64 5b 6a 42 28 32 32 36 33 29 5d 28 64 5b 6a 42 28 31 37 39 32 29 5d 28 64 5b 6a 42 28 31 35 34 34 29 5d 28 74 68 69 73 2e 68 5b 64 5b 6a 42 28 31 31 35 38 29 5d 28 32 32 39 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 6a 42 28 31 37 36 31 29 5d 28 74 68 69 73 2e 68 5b 32 32 39 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 2c 31 33 39 29 2c 32 35 Data Ascii: ++);for(;;)if(H<<=1,I==j-1){G[jB(1e3)](d[jB(243)](o,H));break}else I++;return G[jB(1261)]('')}else O=this.h[d[jB(2979)](this.h[this.g^229][3],d[jB(2263)](d[jB(1792)](d[jB(1544)](this.h[d[jB(1158)](229,this.g)][1][jB(1761)](this.h[229^this.g][0]++),139),25
2024-04-18 00:14:57 UTC	1369	IN	Data Raw: 34 37 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4c 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4d 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 6a 46 28 31 39 36 38 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 64 5b 6a 46 28 33 30 31 31 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 64 5b 6a 46 28 31 32 31 32 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 6a 46 28 31 35 30 36 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 6a 46 28 31 36 30 34 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 64 5b 6a 46 28 31 36 35 37 29 5d 28 42 2c 31 Data Ascii: 47)](F,K);L=G&H,H>>=1,H==0&&(H=j,G=o(I++)),J\|=(0<L?1:0)*F,F<<=1);switch(M=J){case 0:for(J=0,K=Math[jF(1968)](2,8),F=1;F!=K;L=d[jF(3011)](G,H),H>>=1,d[jF(1212)](0,H)&&(H=j,G=d[jF(1506)](o,I++)),J\|=d[jF(1604)](0<L?1:0,F),F<<=1);s[B++]=e(J),M=d[jF(1657)](B,1
2024-04-18 00:14:57 UTC	1369	IN	Data Raw: 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 6a 48 28 32 30 35 33 29 2c 27 77 69 64 67 65 74 49 64 27 3a 66 45 5b 6a 48 28 32 39 30 35 29 5d 5b 6a 48 28 31 30 39 31 29 5d 2c 27 65 76 65 6e 74 27 3a 6a 48 28 32 34 30 34 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 66 45 5b 6a 48 28 32 39 30 35 29 5d 5b 6a 48 28 31 30 31 32 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 66 45 5b 6a 48 28 32 39 30 35 29 5d 5b 6a 48 28 32 31 30 37 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 6a 48 28 31 31 34 39 29 5d 2c 27 72 63 56 27 3a 66 45 5b 6a 48 28 32 39 30 35 29 5d 5b 6a 48 28 33 30 34 38 29 5d 7d 2c 27 2a 27 29 29 29 7d 2c 67 29 7d 2c 66 45 5b 69 78 28 35 30 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 6a 49 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 29 7b 6a Data Ascii: )]({'source':jH(2053),'widgetId':fE[jH(2905)][jH(1091)],'event':jH(2404),'cfChlOut':fE[jH(2905)][jH(1012)],'cfChlOutS':fE[jH(2905)][jH(2107)],'code':e[jH(1149)],'rcV':fE[jH(2905)][jH(3048)]},'*')))},g)},fE[ix(509)]=function(f,g,h,jI,i,j,k,l,m,n,o,s,x,B){j
2024-04-18 00:14:57 UTC	1369	IN	Data Raw: 4c 29 7b 6a 4c 3d 6a 4a 2c 66 45 5b 6a 4c 28 35 30 39 29 5d 28 6d 2c 75 6e 64 65 66 69 6e 65 64 2c 6a 4c 28 32 34 34 36 29 29 7d 2c 31 30 29 2c 66 45 5b 6a 4a 28 32 38 37 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6a 4d 29 7b 6a 4d 3d 6a 4a 2c 66 45 5b 6a 4d 28 31 35 33 31 29 5d 28 29 7d 2c 31 65 33 29 2c 66 45 5b 6a 4a 28 31 36 36 31 29 5d 5b 6a 4a 28 32 38 39 38 29 5d 28 6a 5b 6a 4a 28 35 31 30 29 5d 2c 6d 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 67 6f 3d 7b 7d 2c 67 6f 5b 69 78 28 39 33 35 29 5d 3d 67 6e 2c 66 45 5b 69 78 28 31 32 34 36 29 5d 3d 67 6f 2c 67 71 3d 7b 7d 2c 67 71 5b 69 78 28 31 35 38 31 29 5d 3d 69 78 28 37 34 36 29 2c 67 71 5b 69 78 28 31 30 37 38 29 5d 3d 69 78 28 33 32 38 29 2c 67 71 5b 69 78 28 31 31 30 31 29 5d 3d 69 78 28 36 31 38 29 Data Ascii: L){jL=jJ,fE[jL(509)](m,undefined,jL(2446))},10),fE[jJ(2870)](function(jM){jM=jJ,fE[jM(1531)]()},1e3),fE[jJ(1661)][jJ(2898)](j[jJ(510)],m));return![]},go={},go[ix(935)]=gn,fE[ix(1246)]=go,gq={},gq[ix(1581)]=ix(746),gq[ix(1078)]=ix(328),gq[ix(1101)]=ix(618)
2024-04-18 00:14:57 UTC	1369	IN	Data Raw: 33 34 31 29 5d 3d 69 78 28 33 30 34 35 29 2c 67 72 5b 69 78 28 31 33 35 35 29 5d 3d 69 78 28 31 30 32 36 29 2c 67 72 5b 69 78 28 31 38 32 37 29 5d 3d 69 78 28 38 35 34 29 2c 67 72 5b 69 78 28 31 31 31 31 29 5d 3d 69 78 28 33 30 34 39 29 2c 67 72 5b 69 78 28 31 38 30 34 29 5d 3d 69 78 28 32 32 39 38 29 2c 67 72 5b 69 78 28 32 30 38 30 29 5d 3d 69 78 28 32 39 35 39 29 2c 67 72 5b 69 78 28 36 38 30 29 5d 3d 69 78 28 31 31 34 35 29 2c 67 72 5b 69 78 28 32 37 37 38 29 5d 3d 69 78 28 31 37 34 36 29 2c 67 72 5b 69 78 28 38 35 37 29 5d 3d 69 78 28 33 30 39 29 2c 67 72 5b 69 78 28 31 38 31 37 29 5d 3d 69 78 28 31 33 36 35 29 2c 67 72 5b 69 78 28 31 38 30 30 29 5d 3d 69 78 28 31 35 33 38 29 2c 67 72 5b 69 78 28 31 38 37 34 29 5d 3d 69 78 28 32 38 32 37 29 2c 67 72 Data Ascii: 341)]=ix(3045),gr[ix(1355)]=ix(1026),gr[ix(1827)]=ix(854),gr[ix(1111)]=ix(3049),gr[ix(1804)]=ix(2298),gr[ix(2080)]=ix(2959),gr[ix(680)]=ix(1145),gr[ix(2778)]=ix(1746),gr[ix(857)]=ix(309),gr[ix(1817)]=ix(1365),gr[ix(1800)]=ix(1538),gr[ix(1874)]=ix(2827),gr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49753	104.17.2.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:57 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:14:57 UTC	248	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:14:57 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 87607527bd6e44d1-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:14:57 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2024-04-18 00:14:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49755	104.17.2.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:58 UTC	916	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1520722112:1713395675:Fybv0RgAUcvA2wE1JKV-kLLtV_0tb7lZl_7TvhqJ-Rs/87607523f9976753/573412a78ad2aa1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2780 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 573412a78ad2aa1 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:14:58 UTC	2780	OUT	Data Raw: 76 5f 38 37 36 30 37 35 32 33 66 39 39 37 36 37 35 33 3d 46 56 79 67 69 67 30 67 59 67 4e 67 58 67 57 6f 75 6d 67 4e 6d 67 76 73 6d 63 73 4f 25 32 62 47 72 53 63 67 43 4a 5a 67 67 53 2b 79 53 4d 67 76 65 47 78 53 73 65 6d 53 61 65 67 63 24 53 37 53 79 6d 63 76 53 74 58 65 67 53 47 67 63 76 53 56 67 4e 58 64 52 6b 24 76 73 53 6b 42 6f 75 64 53 77 6c 79 47 24 4a 4e 6c 33 65 79 53 37 67 72 59 61 53 43 4b 56 52 77 53 49 68 53 75 39 53 4f 79 6e 64 55 53 4f 6f 53 44 53 4c 52 54 51 58 30 6b 4d 77 6f 77 53 47 31 53 63 64 64 73 46 6c 6f 7a 32 35 54 73 7a 7a 31 58 74 30 65 61 4e 6f 6f 53 74 2d 65 62 46 75 56 77 51 6c 24 6f 78 63 30 6f 50 66 49 6f 64 6d 75 6e 32 45 6d 65 47 75 73 76 53 75 59 53 51 6d 76 53 72 74 32 50 49 65 75 46 53 4f 66 4e 53 72 36 59 37 24 2b 53 Data Ascii: v_87607523f9976753=FVygig0gYgNgXgWoumgNmgvsmcsO%2bGrScgCJZggS+ySMgveGxSsemSaegc$S7SymcvStXegSGgcvSVgNXdRk$vsSkBoudSwlyG$JNl3eyS7grYaSCKVRwSIhSu9SOyndUSOoSDSLRTQX0kMwowSG1ScddsFloz25Tszz1Xt0eaNooSt-ebFuVwQl$oxc0oPfIodmun2EmeGusvSuYSQmvSrt2PIeuFSOfNSr6Y7$+S
2024-04-18 00:14:58 UTC	691	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:14:58 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: 9PNd8agv1xrCfDYIxhlmwtFMcVxhi1r36HPSSKhG7VpHHeqlf++sv289Hu44ijmDI2UHjA1DRRSn2fAd7vMmf4qcDEFS69smTbF/X+g/dN2Otw7ekqNN/T5vNjnyNRCWa/JXZUNL+FMJ9b8kLSw7ZQkSF8OFGmVBq8f6kW147m2vq+FI3G70n72rLX+Vnfc/dRzZV/LjS54gOiUS3XLaCY7bQ8AH6wSnvZfHYoUTc1LMgwUdQ3yznOOA+fM9jEOiBnPbC/emFFklDmL9a2yQz7CeMYrW4q/1huXI+tKNQTtqSo/rNqD8XNf3v1lum/KqW8mKvCgN0o19eFd5OcxQNG8e9I3RIiZZoTvMMOJwk+tnLtxCYg53nHJdDqAqZCIMCM2XIdbDZhIOpUJU2pVgyURXxzKowd8e6Ru0FQfHf5c=$5J4GIERzLIyOMw+DmDsBjw== Server: cloudflare CF-RAY: 8760752cfeb717ff-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:14:58 UTC	678	IN	Data Raw: 37 63 65 66 0d 0a 52 30 74 69 58 6b 32 47 57 34 78 2b 64 59 57 47 59 57 79 47 65 33 4e 34 69 46 68 7a 62 48 35 6a 63 49 2b 46 59 57 42 68 70 61 47 56 5a 4b 70 35 6a 6e 32 68 6a 4c 4f 79 6f 35 61 54 72 36 6d 57 6d 34 71 35 6d 70 5a 35 6b 5a 4f 45 68 62 58 48 6f 6f 47 6a 71 62 61 45 6c 36 6a 51 76 72 2b 79 76 72 53 7a 6b 4d 61 34 74 35 4c 45 6c 61 32 78 6f 4b 44 64 31 73 37 44 6f 74 72 53 79 4e 6d 69 7a 63 7a 4d 74 39 32 2b 77 4c 47 30 74 65 58 55 34 75 37 78 39 4f 62 63 2f 64 6a 39 32 4f 2f 69 38 4c 38 44 32 66 54 6f 31 2f 62 6a 41 64 7a 50 30 4e 44 4b 7a 50 33 50 30 74 45 43 39 39 72 61 43 50 33 75 32 4f 44 72 34 53 4c 62 41 41 38 42 4a 69 49 57 48 77 48 2b 35 65 6e 36 45 79 30 4d 46 75 38 34 49 2f 51 51 47 69 7a 32 37 78 6f 36 2f 52 67 77 48 51 30 6c 41 Data Ascii: 7cefR0tiXk2GW4x+dYWGYWyGe3N4iFhzbH5jcI+FYWBhpaGVZKp5jn2hjLOyo5aTr6mWm4q5mpZ5kZOEhbXHooGjqbaEl6jQvr+yvrSzkMa4t5LEla2xoKDd1s7DotrSyNmizczMt92+wLG0teXU4u7x9Obc/dj92O/i8L8D2fTo1/bjAdzP0NDKzP3P0tEC99raCP3u2ODr4SLbAA8BJiIWHwH+5en6Ey0MFu84I/QQGiz27xo6/RgwHQ0lA
2024-04-18 00:14:58 UTC	1369	IN	Data Raw: 59 6e 42 69 56 57 65 47 5a 33 75 47 59 58 71 41 6b 34 78 7a 62 33 4e 31 5a 6e 56 35 6d 59 2b 50 65 6e 71 56 6a 35 78 63 6f 32 53 53 67 58 68 39 69 6f 74 70 69 36 47 4d 69 34 65 64 73 49 53 30 6c 34 32 6b 6d 71 4e 31 76 4c 75 33 69 5a 50 42 76 70 74 38 6e 59 44 49 6e 72 68 38 78 70 64 2f 70 61 53 34 78 61 72 50 72 38 72 4a 6b 71 6d 53 7a 4d 62 57 76 64 69 52 71 74 66 5a 34 37 2f 54 74 4f 61 78 33 74 72 6e 76 38 47 71 32 71 62 4d 77 2b 6e 74 31 63 71 30 79 74 62 43 39 4e 72 4b 2f 50 7a 56 7a 67 45 42 33 64 49 46 42 64 58 57 43 51 6a 4d 32 67 30 4e 32 64 34 52 45 4d 7a 69 46 52 54 55 35 68 6b 59 47 4f 6f 64 44 68 54 75 49 52 49 51 38 69 55 57 47 4f 50 71 4a 65 76 36 4c 52 34 4f 37 69 6f 47 38 7a 59 6f 4f 44 54 72 47 79 77 34 37 78 31 41 50 50 4d 69 44 6b 44 Data Ascii: YnBiVWeGZ3uGYXqAk4xzb3N1ZnV5mY+PenqVj5xco2SSgXh9iotpi6GMi4edsIS0l42kmqN1vLu3iZPBvpt8nYDInrh8xpd/paS4xarPr8rJkqmSzMbWvdiRqtfZ47/TtOax3trnv8Gq2qbMw+nt1cq0ytbC9NrK/PzVzgEB3dIFBdXWCQjM2g0N2d4REMziFRTU5hkYGOodDhTuIRIQ8iUWGOPqJev6LR4O7ioG8zYoODTrGyw47x1APPMiDkD
2024-04-18 00:14:58 UTC	1369	IN	Data Raw: 30 68 46 58 49 5a 2f 65 31 75 45 66 33 64 50 54 6d 6d 53 6a 34 61 58 6c 31 32 4c 6b 58 36 59 58 5a 75 51 6e 59 47 64 6d 4a 79 58 70 47 70 72 6d 35 2b 63 66 6f 46 2f 6f 57 36 32 67 6e 64 78 76 61 64 2b 64 5a 65 36 67 72 44 42 68 4a 53 6e 6c 34 4b 4b 6c 4c 36 63 69 6f 6d 6a 67 37 4c 41 69 73 71 6b 6a 71 2b 74 30 63 72 56 6c 72 79 59 73 38 79 7a 7a 71 79 74 35 4d 61 6e 6f 37 69 39 70 63 54 67 35 75 44 4e 71 50 43 74 36 75 44 74 7a 63 4c 6f 37 4f 62 64 39 76 66 34 37 76 53 2f 34 38 50 34 38 4c 37 44 78 4e 72 71 31 66 7a 65 37 74 73 41 34 68 44 4f 41 74 4c 6c 32 41 62 56 36 42 38 4a 2f 76 33 61 45 50 49 51 33 68 50 67 36 4f 67 57 35 51 72 6d 48 65 45 5a 4a 67 45 78 43 69 59 74 47 50 55 59 4c 79 51 71 46 43 6f 39 45 66 73 72 4c 52 70 43 4a 41 51 37 45 68 6f 31 Data Ascii: 0hFXIZ/e1uEf3dPTmmSj4aXl12LkX6YXZuQnYGdmJyXpGprm5+cfoF/oW62gndxvad+dZe6grDBhJSnl4KKlL6ciomjg7LAisqkjq+t0crVlryYs8yzzqyt5Mano7i9pcTg5uDNqPCt6uDtzcLo7Obd9vf47vS/48P48L7DxNrq1fze7tsA4hDOAtLl2AbV6B8J/v3aEPIQ3hPg6OgW5QrmHeEZJgExCiYtGPUYLyQqFCo9EfsrLRpCJAQ7Eho1
2024-04-18 00:14:58 UTC	1369	IN	Data Raw: 71 43 56 45 32 41 53 6f 35 37 64 6d 61 4c 63 35 79 63 69 6d 31 63 6b 48 5a 6a 58 58 68 31 6e 71 4e 31 6e 4b 4f 69 6e 6e 70 2b 6e 47 61 71 6c 36 69 43 70 34 2b 34 75 4b 61 4a 65 4b 79 52 69 35 6d 78 75 58 2b 44 77 4c 65 71 72 49 69 74 6c 72 36 65 68 38 6d 4d 71 4e 50 4d 6f 73 47 58 7a 74 6d 63 30 73 76 4e 72 39 53 65 74 2b 48 57 6f 74 37 67 31 38 72 4d 71 4d 32 6b 37 72 36 6e 36 61 7a 4d 38 2b 7a 43 34 62 66 75 2b 62 7a 79 37 4e 62 39 32 37 6b 41 34 39 2f 38 33 65 66 35 78 77 63 4b 2f 42 44 67 43 51 44 61 38 2b 54 50 35 41 38 52 43 51 37 38 42 74 30 50 31 2b 72 76 2b 67 4d 42 33 2f 45 53 39 75 67 70 4a 52 6e 6d 4b 42 6b 64 4c 6a 4c 79 44 43 34 70 4a 2f 49 37 47 78 55 4d 4b 41 30 54 48 68 74 41 41 54 41 39 47 78 6f 52 41 77 45 6e 4c 43 45 75 54 68 38 63 4b Data Ascii: qCVE2ASo57dmaLc5ycim1ckHZjXXh1nqN1nKOinnp+nGaql6iCp4+4uKaJeKyRi5mxuX+DwLeqrIitlr6eh8mMqNPMosGXztmc0svNr9Set+HWot7g18rMqM2k7r6n6azM8+zC4bfu+bzy7Nb927kA49/83ef5xwcK/BDgCQDa8+TP5A8RCQ78Bt0P1+rv+gMB3/ES9ugpJRnmKBkdLjLyDC4pJ/I7GxUMKA0THhtAATA9GxoRAwEnLCEuTh8cK
2024-04-18 00:14:58 UTC	1369	IN	Data Raw: 76 6d 56 6c 39 6b 5a 56 65 63 35 70 30 64 6c 2b 69 6c 48 4b 58 66 35 69 6f 6c 6e 71 6a 6e 49 42 38 6e 71 32 30 66 72 47 31 75 61 79 77 6e 5a 4e 37 69 59 2b 71 77 6f 50 45 6e 71 46 2f 71 5a 32 53 68 70 65 6d 7a 4b 47 37 78 4b 6d 37 77 39 58 46 6f 4b 7a 50 77 72 44 47 6c 4d 69 36 6d 35 32 33 77 37 54 68 72 39 47 37 34 73 50 56 76 4c 37 48 32 63 44 41 79 39 33 45 78 65 47 74 34 4b 2f 44 35 63 7a 4b 36 76 66 61 2f 74 62 35 77 39 6e 46 32 77 72 53 39 2f 34 48 42 2f 73 44 44 77 73 41 42 38 38 50 42 41 73 48 45 77 67 50 44 78 63 4d 45 78 63 62 45 42 66 34 48 78 51 62 41 53 4d 59 48 77 30 6e 48 43 4c 76 4b 79 41 6e 2f 43 38 6b 4b 77 6b 7a 4b 43 34 2b 39 76 34 4b 41 50 34 39 2f 41 45 6c 4f 6a 41 59 41 55 59 49 51 30 63 6d 51 42 41 4a 48 7a 34 6e 45 6a 4e 43 4a 42 Data Ascii: vmVl9kZVec5p0dl+ilHKXf5iolnqjnIB8nq20frG1uaywnZN7iY+qwoPEnqF/qZ2ShpemzKG7xKm7w9XFoKzPwrDGlMi6m523w7Thr9G74sPVvL7H2cDAy93ExeGt4K/D5czK6vfa/tb5w9nF2wrS9/4HB/sDDwsAB88PBAsHEwgPDxcMExcbEBf4HxQbASMYHw0nHCLvKyAn/C8kKwkzKC4+9v4KAP49/AElOjAYAUYIQ0cmQBAJHz4nEjNCJB
2024-04-18 00:14:58 UTC	1369	IN	Data Raw: 58 34 71 6b 65 47 57 55 6d 6e 43 70 6b 71 6c 36 71 33 65 6a 72 49 79 4b 72 47 32 71 6e 36 79 33 67 71 61 47 70 71 64 77 76 59 69 4a 69 6f 75 4d 6a 59 36 50 6b 4a 47 53 6b 35 53 56 6c 70 65 59 6d 5a 71 62 6e 4a 32 65 6e 36 43 68 6f 71 4f 6b 70 61 61 6e 71 72 72 66 6d 64 48 44 70 63 54 51 79 63 44 44 76 63 58 43 34 2b 79 76 7a 4b 76 75 30 4d 4c 46 34 63 7a 4f 75 4d 7a 6f 7a 37 47 2b 77 41 48 69 77 37 2f 54 2b 4e 58 6c 2f 74 59 43 35 67 76 39 36 76 49 48 43 65 48 6e 42 68 62 7a 39 4f 54 37 37 66 58 79 46 42 76 71 48 65 73 47 48 78 6e 65 2b 75 6b 69 35 4f 6a 73 42 77 38 66 36 77 45 68 4d 53 2f 6f 45 41 7a 33 4c 53 58 79 39 2f 59 39 44 69 41 33 44 7a 67 36 49 6a 49 49 4b 30 45 6e 46 78 77 4d 54 79 67 63 4b 6a 78 41 55 6b 51 6b 4a 68 55 77 57 31 49 63 56 78 5a Data Ascii: X4qkeGWUmnCpkql6q3ejrIyKrG2qn6y3gqaGpqdwvYiJiouMjY6PkJGSk5SVlpeYmZqbnJ2en6ChoqOkpaanqrrfmdHDpcTQycDDvcXC4+yvzKvu0MLF4czOuMzoz7G+wAHiw7/T+NXl/tYC5gv96vIHCeHnBhbz9OT77fXyFBvqHesGHxne+uki5OjsBw8f6wEhMS/oEAz3LSXy9/Y9DiA3Dzg6IjIIK0EnFxwMTygcKjxAUkQkJhUwW1IcVxZ
2024-04-18 00:14:58 UTC	1369	IN	Data Raw: 70 57 47 6b 31 31 2f 62 5a 5a 2b 68 49 57 7a 6b 62 53 6b 64 6e 57 6b 6c 6f 31 35 69 61 57 78 77 4d 47 61 76 58 6d 78 70 62 43 37 69 4b 65 7a 67 36 33 4b 69 73 47 4f 70 71 43 6c 6f 4e 48 41 30 39 4b 30 32 4c 61 56 73 4d 66 55 33 36 72 4e 31 4d 37 46 33 2b 44 47 6f 64 33 6a 6e 73 76 67 32 62 75 72 71 61 79 77 72 65 48 55 78 72 4f 36 75 39 48 39 35 37 72 54 38 62 6a 31 78 41 66 57 75 66 4d 44 31 2f 33 4b 34 74 7a 68 33 41 37 38 45 41 2f 77 46 66 4c 52 37 41 51 52 48 41 38 59 32 42 51 4d 43 78 66 35 49 67 4d 54 48 77 6b 6f 39 67 48 36 39 69 33 6f 4b 44 49 7a 49 76 4c 6f 39 77 34 33 4d 78 6b 53 4e 68 76 34 2b 42 76 37 4e 41 38 45 47 2f 6b 45 46 41 45 2b 2f 67 77 76 43 43 74 53 43 55 59 4c 4a 53 63 76 55 68 6b 6e 52 31 4d 39 58 43 73 31 4c 79 38 64 49 6c 31 45 Data Ascii: pWGk11/bZZ+hIWzkbSkdnWklo15iaWxwMGavXmxpbC7iKezg63KisGOpqCloNHA09K02LaVsMfU36rN1M7F3+DGod3jnsvg2burqaywreHUxrO6u9H957rT8bj1xAfWufMD1/3K4tzh3A78EA/wFfLR7AQRHA8Y2BQMCxf5IgMTHwko9gH69i3oKDIzIvLo9w43MxkSNhv4+Bv7NA8EG/kEFAE+/gwvCCtSCUYLJScvUhknR1M9XCs1Ly8dIl1E
2024-04-18 00:14:58 UTC	1369	IN	Data Raw: 32 41 61 32 4e 79 6a 70 4f 6d 6c 61 4b 4a 6b 49 32 4a 65 58 75 5a 6a 4c 36 63 6a 62 61 58 6d 4a 71 45 6c 4c 53 55 66 59 71 4d 7a 4b 36 36 69 36 43 6b 76 4a 50 51 6c 61 72 53 32 4e 4b 72 70 64 71 2f 74 37 66 69 30 70 72 6d 78 74 43 30 6f 36 53 6b 7a 63 50 76 79 4f 48 61 38 38 6a 30 30 4d 48 71 79 38 7a 4f 75 4d 6a 6f 79 4c 47 2b 77 41 48 69 38 72 2f 52 41 74 49 48 43 51 62 61 42 77 4c 4e 2b 4e 41 46 2f 64 2f 50 7a 64 44 54 31 67 67 50 36 74 63 57 31 2f 37 73 4a 42 34 62 46 4f 59 63 39 52 49 6c 42 78 63 6a 36 66 30 53 43 44 51 4e 4a 53 55 4b 4c 51 77 7a 42 2f 6f 4a 2f 53 2f 34 2f 41 45 62 49 7a 4d 41 45 6b 49 54 52 30 6c 47 47 30 64 43 44 6a 6b 52 52 54 34 67 45 46 68 4c 52 42 4e 45 55 55 67 58 53 68 70 68 4d 54 39 4e 55 56 74 46 49 30 42 41 61 31 77 34 4a Data Ascii: 2Aa2NyjpOmlaKJkI2JeXuZjL6cjbaXmJqElLSUfYqMzK66i6CkvJPQlarS2NKrpdq/t7fi0prmxtC0o6SkzcPvyOHa88j00MHqy8zOuMjoyLG+wAHi8r/RAtIHCQbaBwLN+NAF/d/PzdDT1ggP6tcW1/7sJB4bFOYc9RIlBxcj6f0SCDQNJSUKLQwzB/oJ/S/4/AEbIzMAEkITR0lGG0dCDjkRRT4gEFhLRBNEUUgXShphMT9NUVtFI0BAa1w4J
2024-04-18 00:14:58 UTC	1369	IN	Data Raw: 30 74 4a 65 44 69 6f 53 6d 74 5a 46 37 6e 4c 2b 35 6b 6e 70 2f 6e 37 61 42 6e 37 69 70 6f 38 6e 4a 68 4b 4f 64 69 72 4f 51 74 4d 57 57 79 5a 54 4c 6a 4b 69 6c 73 64 76 50 79 4d 71 7a 31 4e 47 65 77 39 76 46 31 38 50 43 32 2b 4c 61 77 61 6d 73 38 38 62 69 36 73 7a 4a 73 62 53 73 2b 66 50 4d 37 38 6a 30 36 2f 72 37 39 2b 33 68 31 66 76 7a 38 76 76 68 34 39 6f 47 44 42 50 4e 38 4d 76 6f 31 42 55 61 34 67 66 6d 42 2f 4d 64 38 64 62 72 49 51 77 68 42 53 49 68 4b 51 4d 70 38 77 58 31 47 68 38 67 41 52 34 71 4a 7a 55 54 46 51 66 7a 4d 76 4d 35 43 55 41 36 4e 7a 41 44 4f 42 49 75 51 53 4d 7a 50 77 68 41 4c 69 52 51 4b 55 46 42 4a 6b 6b 6f 54 79 4d 58 4a 52 70 4c 46 52 6b 64 4e 7a 39 42 48 44 42 4e 4e 7a 39 69 48 6c 5a 48 56 43 49 36 57 47 52 4c 63 6b 74 75 63 57 Data Ascii: 0tJeDioSmtZF7nL+5knp/n7aBn7ipo8nJhKOdirOQtMWWyZTLjKilsdvPyMqz1NGew9vF18PC2+Lawams88bi6szJsbSs+fPM78j06/r79+3h1fvz8vvh49oGDBPN8Mvo1BUa4gfmB/Md8dbrIQwhBSIhKQMp8wX1Gh8gAR4qJzUTFQfzMvM5CUA6NzADOBIuQSMzPwhALiRQKUFBJkkoTyMXJRpLFRkdNz9BHDBNNz9iHlZHVCI6WGRLcktucW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	104.17.3.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:58 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:14:58 UTC	248	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:14:58 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8760752dceaa07ce-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:14:58 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2024-04-18 00:14:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	198.98.54.45	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:14:58 UTC	639	OUT	GET /favicon.ico HTTP/1.1 Host: activemxmore.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://activemxmore.com/main/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8fed20s9sarctiah9dfo4cnk6
2024-04-18 00:14:58 UTC	245	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 00:14:58 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 135 Connection: close Last-Modified: Wed, 17 Apr 2024 19:46:42 GMT ETag: "87-616501d28c438" Accept-Ranges: bytes
2024-04-18 00:14:58 UTC	135	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 3f 22 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 3b 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html> <body> <script>window.location.href="/index.php?" + window.location.href.split("?")[1];</script> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49757	104.17.2.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:01 UTC	804	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/87607523f9976753/1713399298197/6da8eb24f5f53b8a754917a6951c01ddae1de06f17567f971365618217d1d9e9/yq_oSBvvu_XQiGh HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:01 UTC	152	IN	HTTP/1.1 401 Unauthorized Date: Thu, 18 Apr 2024 00:15:01 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close
2024-04-18 00:15:01 UTC	1382	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 62 61 6a 72 4a 50 58 31 4f 34 70 31 53 52 65 6d 6c 52 77 42 33 61 34 64 34 47 38 58 56 6e 2d 58 45 32 56 68 67 68 66 52 32 65 6b 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gbajrJPX1O4p1SRemlRwB3a4d4G8XVn-XE2VhghfR2ekAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-04-18 00:15:01 UTC	6	IN	Data Raw: 31 0d 0a 4a 0d 0a Data Ascii: 1J
2024-04-18 00:15:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49758	104.17.3.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:01 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1520722112:1713395675:Fybv0RgAUcvA2wE1JKV-kLLtV_0tb7lZl_7TvhqJ-Rs/87607523f9976753/573412a78ad2aa1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:01 UTC	386	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 00:15:01 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 4b0qS20XLzGzOmtv3g7CZA==$TXC7tnLAk7rRiaScx6qAMg== Server: cloudflare CF-RAY: 876075411eb28bb9-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:15:01 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2024-04-18 00:15:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	198.98.54.45	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:01 UTC	397	OUT	GET /favicon.ico HTTP/1.1 Host: activemxmore.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8fed20s9sarctiah9dfo4cnk6
2024-04-18 00:15:01 UTC	245	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 00:15:01 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 135 Connection: close Last-Modified: Wed, 17 Apr 2024 19:46:42 GMT ETag: "87-616501d28c438" Accept-Ranges: bytes
2024-04-18 00:15:01 UTC	135	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 2f 69 6e 64 65 78 2e 70 68 70 3f 22 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 3b 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html> <body> <script>window.location.href="/index.php?" + window.location.href.split("?")[1];</script> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	104.17.2.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:01 UTC	775	OUT	GET /cdn-cgi/challenge-platform/h/g/i/87607523f9976753/1713399298199/25UtOJ-4PhOhACd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:01 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:15:01 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: cloudflare CF-RAY: 876075450f3053c6-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:15:01 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 06 00 00 00 61 08 02 00 00 00 7a 5f 47 fd 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRaz_GIDAT$IENDB`
2024-04-18 00:15:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49763	104.17.2.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:04 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1520722112:1713395675:Fybv0RgAUcvA2wE1JKV-kLLtV_0tb7lZl_7TvhqJ-Rs/87607523f9976753/573412a78ad2aa1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 28973 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 573412a78ad2aa1 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:04 UTC	16384	OUT	Data Raw: 76 5f 38 37 36 30 37 35 32 33 66 39 39 37 36 37 35 33 3d 46 56 79 67 48 47 75 36 65 72 73 47 73 53 25 32 62 53 62 53 7a 53 6f 67 4c 78 78 53 73 67 75 6f 59 58 75 66 53 32 6f 4e 59 53 44 53 4a 6d 53 73 53 6e 53 32 6d 4e 56 6f 53 4a 59 53 47 6d 53 58 75 48 53 43 6d 47 36 35 53 43 56 75 74 53 76 5a 24 6f 4a 53 4e 65 53 49 53 4f 79 75 46 72 6f 63 4c 24 64 67 4e 79 53 6b 37 6f 63 64 53 30 6a 59 6a 67 53 50 53 79 47 24 50 79 67 67 47 72 4c 6b 6c 6d 53 36 64 63 62 6d 64 75 4c 33 6d 65 47 62 57 52 47 53 2b 64 53 63 4a 79 53 53 35 65 67 75 35 53 62 4c 2b 4f 4e 79 53 6c 4d 72 49 65 45 6d 58 47 6e 75 61 78 36 44 4d 6e 42 79 43 2b 49 61 2b 64 70 57 31 53 6b 4c 6a 73 6f 6a 30 30 57 37 49 65 67 67 53 31 48 53 6d 56 77 57 4e 50 42 66 31 4e 33 4e 42 46 6e 33 78 30 24 35 Data Ascii: v_87607523f9976753=FVygHGu6ersGsS%2bSbSzSogLxxSsguoYXufS2oNYSDSJmSsSnS2mNVoSJYSGmSXuHSCmG65SCVutSvZ$oJSNeSISOyuFrocL$dgNySk7ocdS0jYjgSPSyG$PyggGrLklmS6dcbmduL3meGbWRGS+dScJySS5egu5SbL+ONySlMrIeEmXGnuax6DMnByC+Ia+dpW1SkLjsoj00W7IeggS1HSmVwWNPBf1N3NBFn3x0$5
2024-04-18 00:15:04 UTC	12589	OUT	Data Raw: 6d 75 59 53 54 53 30 65 4e 68 61 6f 53 64 63 49 53 33 53 50 53 37 67 6b 6d 59 6d 67 67 53 73 67 46 69 47 4b 53 78 67 47 65 63 50 67 79 53 4e 65 47 52 53 6a 67 76 73 53 33 53 4c 67 46 73 75 35 53 63 67 76 56 47 70 53 50 67 4e 56 47 71 53 55 67 76 48 30 53 6d 56 67 62 42 53 5a 67 46 53 75 53 53 7a 71 49 55 4d 63 53 6b 71 52 53 59 44 53 67 53 56 36 63 53 47 4a 53 24 73 47 6f 63 4a 53 76 53 42 73 53 43 53 30 67 46 55 5a 30 53 41 55 65 79 53 78 53 49 78 47 53 4f 42 53 4a 67 75 65 63 24 53 62 67 6b 65 75 72 53 64 53 72 53 47 43 71 31 53 41 73 47 62 53 55 67 72 56 53 67 53 32 53 72 67 75 65 53 62 53 43 49 53 30 6d 64 36 4f 4a 61 36 53 42 53 46 4b 53 58 53 2d 2b 47 6c 52 44 53 55 53 73 4f 67 6f 53 78 73 57 73 47 31 6f 4e 53 47 59 6a 66 6f 72 53 59 56 53 47 53 4f Data Ascii: muYSTS0eNhaoSdcIS3SPS7gkmYmggSsgFiGKSxgGecPgySNeGRSjgvsS3SLgFsu5ScgvVGpSPgNVGqSUgvH0SmVgbBSZgFSuSSzqIUMcSkqRSYDSgSV6cSGJS$sGocJSvSBsSCS0gFUZ0SAUeySxSIxGSOBSJguec$SbgkeurSdSrSGCq1SAsGbSUgrVSgS2SrgueSbSCIS0md6OJa6SBSFKSXS-+GlRDSUSsOgoSxsWsG1oNSGYjforSYVSGSO
2024-04-18 00:15:05 UTC	327	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:15:04 GMT Content-Type: text/plain; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-gen: acbQSoWm5LnhhcObHWA4M4qK6foA5pQtdEHRXilh67PbiMWgG+mZ4lDba0JE4nCr$YNvsUv2jL4qhSbx7FHg0/A== Server: cloudflare CF-RAY: 876075573835ada4-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:15:05 UTC	1042	IN	Data Raw: 35 38 36 38 0d 0a 52 30 74 69 58 6b 31 66 53 32 4b 44 69 70 5a 6b 67 58 64 6d 5a 35 64 59 6d 4a 4a 30 65 31 32 57 65 49 43 55 58 6e 6d 45 68 33 4f 44 64 6e 31 38 63 48 47 68 72 6f 39 74 68 35 65 56 68 48 61 55 75 37 71 72 6e 70 35 36 73 63 43 65 67 4a 65 6e 6f 70 61 5a 6d 34 79 4e 75 61 58 41 6e 71 65 39 73 6f 32 71 6c 62 54 44 7a 35 58 64 72 61 76 59 7a 61 37 68 6e 63 36 65 34 5a 2f 55 6f 2b 6e 45 37 4f 72 62 7a 39 76 6d 73 75 33 67 31 65 53 31 31 4f 4c 33 74 62 58 78 2f 66 7a 74 7a 38 4c 63 41 74 7a 7a 38 2f 4c 6f 2b 63 4c 6e 79 4e 66 4a 37 2b 44 39 46 66 7a 50 38 39 55 47 35 52 62 55 42 2f 7a 37 33 51 77 58 49 68 30 54 47 69 49 69 42 52 50 6b 35 65 55 67 4c 69 30 65 41 43 33 73 39 41 44 31 4e 75 38 55 49 78 55 36 4e 69 6f 7a 46 52 50 35 2f 51 38 39 51 Data Ascii: 5868R0tiXk1fS2KDipZkgXdmZ5dYmJJ0e12WeICUXnmEh3ODdn18cHGhro9th5eVhHaUu7qrnp56scCegJenopaZm4yNuaXAnqe9so2qlbTDz5XdravYza7hnc6e4Z/Uo+nE7Orbz9vmsu3g1eS11OL3tbXx/fztz8LcAtzz8/Lo+cLnyNfJ7+D9FfzP89UG5RbUB/z73QwXIh0TGiIiBRPk5eUgLi0eAC3s9AD1Nu8UIxU6NiozFRP5/Q89Q
2024-04-18 00:15:05 UTC	1369	IN	Data Raw: 69 33 70 32 61 31 64 61 62 57 6c 76 59 58 70 31 62 70 35 77 59 5a 2b 6a 6e 59 42 69 69 34 4e 72 69 71 2b 78 6f 5a 4f 52 63 49 4f 50 68 33 6d 35 74 62 47 78 75 37 71 50 77 62 2b 57 64 33 32 2b 73 63 4b 54 79 63 43 69 6d 72 6d 59 70 71 36 30 79 4b 32 6f 7a 4e 53 6f 6b 5a 66 63 75 70 37 51 31 4f 44 67 75 38 50 46 6f 4c 6e 56 74 2b 6e 6b 36 63 50 74 36 38 4b 6a 71 65 37 47 38 61 2f 77 34 50 62 37 2b 66 58 35 74 2f 72 35 37 62 76 38 37 74 62 33 32 63 48 4a 79 73 6f 43 41 65 62 68 32 67 76 66 45 51 62 30 38 50 58 31 42 2b 72 79 30 68 41 50 38 65 37 76 2b 42 63 63 2f 67 59 44 48 68 4d 72 2f 75 55 49 4d 42 2f 38 48 43 6f 6e 38 52 41 52 4d 6a 58 32 4b 76 73 70 43 7a 30 32 44 52 48 39 4f 45 55 66 50 44 67 30 41 43 4d 44 49 79 6b 75 42 31 45 7a 52 51 34 67 50 6b 64 Data Ascii: i3p2a1dabWlvYXp1bp5wYZ+jnYBii4Nriq+xoZORcIOPh3m5tbGxu7qPwb+Wd32+scKTycCimrmYpq60yK2ozNSokZfcup7Q1ODgu8PFoLnVt+nk6cPt68Kjqe7G8a/w4Pb7+fX5t/r57bv87tb32cHJysoCAebh2gvfEQb08PX1B+ry0hAP8e7v+Bcc/gYDHhMr/uUIMB/8HCon8RARMjX2KvspCz02DRH9OEUfPDg0ACMDIykuB1EzRQ4gPkd
2024-04-18 00:15:05 UTC	1369	IN	Data Raw: 4a 74 65 58 6c 69 62 59 33 2b 67 6f 57 57 61 6f 49 68 71 69 4b 32 47 6f 61 4e 71 6f 61 61 6e 67 37 57 6d 70 49 65 35 71 71 78 34 66 37 6d 41 6a 38 47 79 6f 6f 4f 2b 6d 6f 6a 4b 76 49 61 6e 7a 4d 43 59 6e 6f 53 78 31 4e 43 49 74 71 4c 55 6a 4c 72 4d 32 4a 43 39 71 74 79 55 77 64 47 65 33 63 4f 33 71 62 50 57 74 39 66 50 35 4f 66 70 34 76 47 38 79 4b 2b 32 36 73 4c 79 73 74 4c 7a 36 65 6e 68 2b 39 6a 6b 76 67 66 79 77 39 37 6f 33 77 4b 2b 37 41 50 49 30 4f 54 73 79 68 50 4e 43 64 48 6a 39 77 6f 53 46 42 6b 65 39 68 49 55 32 68 49 56 34 50 4d 6d 4a 53 58 33 4b 68 73 68 2b 79 34 66 48 51 41 79 49 79 58 77 39 7a 4c 34 43 44 6f 72 47 2f 73 33 45 77 46 44 4e 55 52 46 52 53 4d 56 46 2f 77 71 54 55 6b 42 4c 79 67 4c 52 6a 41 6b 46 69 42 46 57 6b 51 37 56 6c 63 77 Data Ascii: JteXlibY3+goWWaoIhqiK2GoaNqoaang7WmpIe5qqx4f7mAj8GyooO+mojKvIanzMCYnoSx1NCItqLUjLrM2JC9qtyUwdGe3cO3qbPWt9fP5Ofp4vG8yK+26sLystLz6enh+9jkvgfyw97o3wK+7API0OTsyhPNCdHj9woSFBke9hIU2hIV4PMmJSX3Khsh+y4fHQAyIyXw9zL4CDorG/s3EwFDNURFRSMVF/wqTUkBLygLRjAkFiBFWkQ7Vlcw
2024-04-18 00:15:05 UTC	1369	IN	Data Raw: 43 6a 6c 48 65 55 59 70 61 69 68 4b 4b 6d 6e 36 71 7a 6b 36 79 44 6a 4b 71 75 64 49 4f 38 73 61 61 2b 6c 4a 36 31 77 36 79 33 73 61 65 50 6b 59 4c 48 75 4d 76 48 70 4c 43 4c 76 71 58 54 6c 4d 37 4e 6b 73 53 53 73 4a 4c 63 7a 4e 47 58 30 62 6d 71 32 37 61 74 78 4e 44 63 6d 36 54 5a 75 4b 50 50 33 64 33 61 72 73 6e 4d 71 2b 76 68 39 62 58 70 73 62 50 57 2b 76 4b 33 32 50 72 36 38 39 53 2f 35 63 48 62 43 75 4c 47 2b 4f 38 51 44 2b 48 63 30 2b 7a 6e 31 67 2f 31 34 2b 58 38 47 75 37 6d 43 42 48 79 39 4f 45 69 47 2f 66 6a 38 66 6f 42 41 50 63 59 44 75 73 74 48 68 41 55 41 2f 55 69 43 65 34 4b 42 44 6f 64 44 76 67 4f 45 7a 6f 37 4f 51 45 63 4a 50 6b 46 47 41 45 4d 44 55 30 48 50 69 45 62 43 30 4a 4b 56 52 56 44 54 6b 59 6b 53 53 78 4a 58 6a 51 62 4c 78 74 50 57 Data Ascii: CjlHeUYpaihKKmn6qzk6yDjKqudIO8saa+lJ61w6y3saePkYLHuMvHpLCLvqXTlM7NksSSsJLczNGX0bmq27atxNDcm6TZuKPP3d3arsnMq+vh9bXpsbPW+vK32Pr689S/5cHbCuLG+O8QD+Hc0+zn1g/14+X8Gu7mCBHy9OEiG/fj8foBAPcYDustHhAUA/UiCe4KBDodDvgOEzo7OQEcJPkFGAEMDU0HPiEbC0JKVRVDTkYkSSxJXjQbLxtPW
2024-04-18 00:15:05 UTC	1369	IN	Data Raw: 70 66 57 65 51 67 6e 36 43 6d 37 47 66 6b 62 4f 35 6f 72 71 55 64 62 47 2f 71 62 61 7a 6b 49 4b 7a 6b 72 36 44 68 4b 61 4a 74 73 32 5a 68 72 71 49 76 35 79 51 30 71 53 55 6c 36 2f 5a 6d 73 75 57 72 74 32 33 76 37 32 63 72 36 4f 76 6e 75 54 56 6f 74 33 62 75 37 72 44 38 4f 44 77 77 65 48 55 76 62 44 46 7a 4d 76 7a 2b 65 58 35 74 66 7a 58 75 74 58 7a 35 4e 37 50 38 75 50 7a 36 67 6a 65 77 39 63 4d 34 67 34 4e 79 66 77 43 35 67 4c 78 37 65 37 38 38 51 6a 58 46 4e 33 75 49 76 6f 57 47 4e 34 57 47 65 54 33 4b 69 6b 70 2b 79 34 66 4a 51 41 79 49 79 45 45 4e 69 63 70 39 50 73 32 2f 41 77 2b 4c 78 38 41 4f 78 63 46 52 7a 6b 47 4b 30 45 38 4a 6b 49 37 54 53 56 50 42 51 35 4e 55 51 6b 32 49 31 55 4e 4f 6a 64 5a 45 54 35 54 54 31 31 69 4a 45 38 65 4f 32 67 35 51 30 Data Ascii: pfWeQgn6Cm7GfkbO5orqUdbG/qbazkIKzkr6DhKaJts2ZhrqIv5yQ0qSUl6/ZmsuWrt23v72cr6OvnuTVot3bu7rD8ODwweHUvbDFzMvz+eX5tfzXutXz5N7P8uPz6gjew9cM4g4NyfwC5gLx7e788QjXFN3uIvoWGN4WGeT3Kikp+y4fJQAyIyEENicp9Ps2/Aw+Lx8AOxcFRzkGK0E8JkI7TSVPBQ5NUQk2I1UNOjdZET5TT11iJE8eO2g5Q0
2024-04-18 00:15:05 UTC	1369	IN	Data Raw: 61 59 75 76 67 48 65 78 68 4c 65 35 62 6e 74 38 66 37 32 51 67 59 4e 36 70 48 2f 44 6e 6f 61 45 6c 62 69 4c 6d 59 33 4a 73 5a 79 51 30 71 43 4e 6c 59 36 6f 30 39 65 76 76 4e 43 6e 33 4c 79 62 33 74 43 65 6e 65 44 55 78 4b 50 6b 31 64 71 2f 72 65 33 4e 76 4f 2f 4c 73 2f 4f 2f 38 63 54 31 2b 62 6d 32 2b 66 72 58 37 73 30 43 32 50 72 41 42 39 37 47 77 38 76 69 43 38 66 4e 2f 52 50 4e 46 41 49 43 30 68 51 43 42 4f 76 52 47 64 7a 6f 47 76 63 62 37 65 45 65 44 79 62 5a 2f 75 6a 30 34 68 6f 4e 4b 65 7a 76 35 2f 45 77 44 43 4c 77 4f 43 4c 76 42 54 77 52 4a 2f 73 2f 4c 66 72 2b 51 76 59 56 42 68 42 47 4e 77 51 4b 4e 6a 64 4c 47 45 34 78 56 41 74 43 52 31 51 67 56 43 6b 54 47 6a 4e 61 47 68 4a 61 54 7a 56 67 4f 42 77 78 5a 56 4e 46 4b 47 56 6c 4c 44 6c 75 52 48 4e Data Ascii: aYuvgHexhLe5bnt8f72QgYN6pH/DnoaElbiLmY3JsZyQ0qCNlY6o09evvNCn3Lyb3tCeneDUxKPk1dq/re3NvO/Ls/O/8cT1+bm2+frX7s0C2PrAB97Gw8viC8fN/RPNFAIC0hQCBOvRGdzoGvcb7eEeDybZ/uj04hoNKezv5/EwDCLwOCLvBTwRJ/s/Lfr+QvYVBhBGNwQKNjdLGE4xVAtCR1QgVCkTGjNaGhJaTzVgOBwxZVNFKGVlLDluRHN
2024-04-18 00:15:05 UTC	1369	IN	Data Raw: 6f 53 34 65 36 36 48 76 4a 53 50 67 63 4b 43 6f 4a 44 47 68 73 61 55 79 6f 75 35 67 4d 2b 6b 6e 4b 4c 4f 71 4b 53 67 31 4a 65 6b 6f 39 69 62 71 35 44 63 79 5a 4f 5a 34 63 36 30 72 2b 54 68 35 61 72 6f 71 39 36 39 37 4b 37 4d 75 2b 2b 7a 35 62 58 7a 74 38 7a 4b 2b 4f 57 76 74 50 72 54 73 37 67 43 37 76 4c 51 42 51 50 32 32 51 72 31 36 4e 63 4f 2b 67 50 63 45 65 66 4c 35 68 66 57 46 74 45 5a 46 74 72 51 48 67 76 72 34 69 49 66 37 2b 51 6a 2b 2b 4c 71 4b 68 59 72 2b 43 2f 76 48 75 67 79 4c 68 44 73 4e 6a 4d 6d 2b 54 6b 6d 4f 76 34 2b 4b 76 73 4e 50 78 6a 37 45 45 63 48 42 77 46 4d 49 53 45 5a 54 77 38 45 43 6c 45 54 46 43 5a 55 46 78 41 72 57 6b 59 59 4a 31 34 30 50 42 6c 6a 4a 46 59 5a 5a 57 49 6e 49 57 70 41 61 69 56 72 52 55 51 70 63 56 34 77 50 33 5a 79 Data Ascii: oS4e66HvJSPgcKCoJDGhsaUyou5gM+knKLOqKSg1Jeko9ibq5DcyZOZ4c60r+Th5aroq9697K7Mu++z5bXzt8zK+OWvtPrTs7gC7vLQBQP22Qr16NcO+gPcEefL5hfWFtEZFtrQHgvr4iIf7+Qj++LqKhYr+C/vHugyLhDsNjMm+TkmOv4+KvsNPxj7EEcHBwFMISEZTw8EClETFCZUFxArWkYYJ140PBljJFYZZWInIWpAaiVrRUQpcV4wP3Zy
2024-04-18 00:15:05 UTC	1369	IN	Data Raw: 36 2b 73 38 4f 76 6e 4a 47 47 73 62 71 6c 78 70 2b 47 69 49 76 4e 6e 34 32 4b 6b 71 2b 4d 31 36 76 47 7a 70 4b 62 78 71 7a 65 32 71 2b 62 34 64 33 68 6e 5a 2b 38 77 4f 72 6e 77 37 2b 70 70 38 50 4d 7a 65 36 79 7a 63 69 30 34 38 76 37 2b 4c 71 37 37 2f 72 2b 31 64 54 41 37 2f 72 33 42 73 6a 6a 77 63 54 32 35 4f 4d 4c 35 51 66 64 30 76 30 48 39 78 50 72 31 74 54 58 47 75 76 5a 32 41 72 37 32 43 48 69 45 78 76 6d 45 68 73 4d 4a 77 45 41 37 43 76 75 44 52 51 79 36 67 6a 78 39 6a 49 72 4f 7a 67 55 45 50 6e 34 4f 68 30 6b 50 77 4d 65 46 55 6b 78 43 43 6f 49 52 77 64 4c 43 53 51 2b 43 68 52 42 53 7a 45 54 46 30 59 53 4a 6c 6c 54 4f 52 73 66 54 68 6f 64 58 7a 31 41 59 7a 35 6a 4e 69 74 57 58 31 64 72 52 55 51 74 4d 48 4a 45 4d 6a 46 79 56 44 46 36 5a 6d 74 7a 50 Data Ascii: 6+s8OvnJGGsbqlxp+GiIvNn42Kkq+M16vGzpKbxqze2q+b4d3hnZ+8wOrnw7+pp8PMze6yzci048v7+Lq77/r+1dTA7/r3BsjjwcT25OML5Qfd0v0H9xPr1tTXGuvZ2Ar72CHiExvmEhsMJwEA7CvuDRQy6gjx9jIrOzgUEPn4Oh0kPwMeFUkxCCoIRwdLCSQ+ChRBSzETF0YSJllTORsfThodXz1AYz5jNitWX1drRUQtMHJEMjFyVDF6ZmtzP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49764	104.17.3.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:04 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/87607523f9976753/1713399298199/25UtOJ-4PhOhACd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:05 UTC	208	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:15:05 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Server: cloudflare CF-RAY: 87607558395f1d7a-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:15:05 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 06 00 00 00 61 08 02 00 00 00 7a 5f 47 fd 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRaz_GIDAT$IENDB`
2024-04-18 00:15:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49766	104.17.3.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:05 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1520722112:1713395675:Fybv0RgAUcvA2wE1JKV-kLLtV_0tb7lZl_7TvhqJ-Rs/87607523f9976753/573412a78ad2aa1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:05 UTC	386	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 00:15:05 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: rpiMHMGoD3v0BClAucXC1w==$lwTcHzBa7jYSFRmLgichoQ== Server: cloudflare CF-RAY: 8760755cdcfeb0c7-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:15:05 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2024-04-18 00:15:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49771	104.17.2.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:19 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1520722112:1713395675:Fybv0RgAUcvA2wE1JKV-kLLtV_0tb7lZl_7TvhqJ-Rs/87607523f9976753/573412a78ad2aa1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32062 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 573412a78ad2aa1 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/2lznf/0x4AAAAAAAQ_ajLYJ-oSKSIN/auto/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:19 UTC	16384	OUT	Data Raw: 76 5f 38 37 36 30 37 35 32 33 66 39 39 37 36 37 35 33 3d 46 56 79 67 48 47 75 36 65 72 73 47 73 53 25 32 62 53 62 53 7a 53 6f 67 4c 78 78 53 73 67 75 6f 59 58 75 66 53 32 6f 4e 59 53 44 53 4a 6d 53 73 53 6e 53 32 6d 4e 56 6f 53 4a 59 53 47 6d 53 58 75 48 53 43 6d 47 36 35 53 43 56 75 74 53 76 5a 24 6f 4a 53 4e 65 53 49 53 4f 79 75 46 72 6f 63 4c 24 64 67 4e 79 53 6b 37 6f 63 64 53 30 6a 59 6a 67 53 50 53 79 47 24 50 79 67 67 47 72 4c 6b 6c 6d 53 36 64 63 62 6d 64 75 4c 33 6d 65 47 62 57 52 47 53 2b 64 53 63 4a 79 53 53 35 65 67 75 35 53 62 4c 2b 4f 4e 79 53 6c 4d 72 49 65 45 6d 58 47 6e 75 61 78 36 44 4d 6e 42 79 43 2b 49 61 2b 64 70 57 31 53 6b 4c 6a 73 6f 6a 30 30 57 37 49 65 67 67 53 31 48 53 6d 56 77 57 4e 50 42 66 31 4e 33 4e 42 46 6e 33 78 30 24 35 Data Ascii: v_87607523f9976753=FVygHGu6ersGsS%2bSbSzSogLxxSsguoYXufS2oNYSDSJmSsSnS2mNVoSJYSGmSXuHSCmG65SCVutSvZ$oJSNeSISOyuFrocL$dgNySk7ocdS0jYjgSPSyG$PyggGrLklmS6dcbmduL3meGbWRGS+dScJySS5egu5SbL+ONySlMrIeEmXGnuax6DMnByC+Ia+dpW1SkLjsoj00W7IeggS1HSmVwWNPBf1N3NBFn3x0$5
2024-04-18 00:15:19 UTC	15678	OUT	Data Raw: 6d 75 59 53 54 53 30 65 4e 68 61 6f 53 64 63 49 53 33 53 50 53 37 67 6b 6d 59 6d 67 67 53 73 67 46 69 47 4b 53 78 67 47 65 63 50 67 79 53 4e 65 47 52 53 6a 67 76 73 53 33 53 4c 67 46 73 75 35 53 63 67 76 56 47 70 53 50 67 4e 56 47 71 53 55 67 76 48 30 53 6d 56 67 62 42 53 5a 67 46 53 75 53 53 7a 71 49 55 4d 63 53 6b 71 52 53 59 44 53 67 53 56 36 63 53 47 4a 53 24 73 47 6f 63 4a 53 76 53 42 73 53 43 53 30 67 46 55 5a 30 53 41 55 65 79 53 78 53 49 78 47 53 4f 42 53 4a 67 75 65 63 24 53 62 67 6b 65 75 72 53 64 53 72 53 47 43 71 31 53 41 73 47 62 53 55 67 72 56 53 67 53 32 53 72 67 75 65 53 62 53 43 49 53 30 6d 64 36 4f 4a 61 36 53 42 53 46 4b 53 58 53 2d 2b 47 6c 52 44 53 55 53 73 4f 67 6f 53 78 73 57 73 47 31 6f 4e 53 47 59 6a 66 6f 72 53 59 56 53 47 53 4f Data Ascii: muYSTS0eNhaoSdcIS3SPS7gkmYmggSsgFiGKSxgGecPgySNeGRSjgvsS3SLgFsu5ScgvVGpSPgNVGqSUgvH0SmVgbBSZgFSuSSzqIUMcSkqRSYDSgSV6cSGJS$sGocJSvSBsSCS0gFUZ0SAUeySxSIxGSOBSJguec$SbgkeurSdSrSGCq1SAsGbSUgrVSgS2SrgueSbSCIS0md6OJa6SBSFKSXS-+GlRDSUSsOgoSxsWsG1oNSGYjforSYVSGSO
2024-04-18 00:15:19 UTC	1135	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:15:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-chl-out: dFFFSs+V3NqrA1UuUy5qaL+sCS7yRy2bdY+jjjs2kfjXa97rqALdXddTH1RRFAHQN624g9/Gp4v4ore73Q52lC3pDD0nq0wflDWdFrab940cdALukgxN02ucneqPgpHl$NS5uxcIQTXLrJB6RgN9B3Q== cf-chl-out-s: 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$/IE9O0yuBbg1psJE0c5ZVg== Server: cloudflare CF-RAY: 876075b44957456b-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:15:19 UTC	234	IN	Data Raw: 64 35 63 0d 0a 52 30 74 69 58 6b 31 66 53 32 4b 44 69 70 5a 6b 67 58 64 6d 5a 35 64 5a 6a 57 64 7a 57 48 4b 63 65 5a 61 6b 67 4b 65 57 6c 34 75 56 69 57 36 4a 6a 6e 36 4b 5a 5a 43 66 6e 33 47 34 63 70 65 36 70 62 47 62 76 71 79 51 6d 37 61 76 70 59 2b 47 70 4c 4f 37 68 63 33 43 68 6f 6d 35 6e 34 72 4d 77 61 4c 42 30 62 54 44 7a 35 57 56 76 4e 32 58 7a 4c 2f 64 6e 4d 44 50 33 36 47 68 75 62 65 6a 32 4b 69 2f 37 74 69 70 77 4c 47 30 74 50 62 41 34 4c 50 35 35 65 65 33 30 2f 6a 72 34 50 33 43 34 4f 34 49 77 51 6e 45 30 38 50 36 37 41 37 71 2b 4d 7a 67 33 50 33 4f 7a 68 48 30 41 39 54 56 31 66 73 61 30 51 6e 62 42 4f 4c 37 44 67 51 41 46 75 44 33 34 51 49 74 47 78 41 73 45 77 48 79 4d 79 38 4b 39 Data Ascii: d5cR0tiXk1fS2KDipZkgXdmZ5dZjWdzWHKceZakgKeWl4uViW6Jjn6KZZCfn3G4cpe6pbGbvqyQm7avpY+GpLO7hc3Chom5n4rMwaLB0bTDz5WVvN2XzL/dnMDP36Ghubej2Ki/7tipwLG0tPbA4LP55ee30/jr4P3C4O4IwQnE08P67A7q+Mzg3P3OzhH0A9TV1fsa0QnbBOL7DgQAFuD34QItGxAsEwHyMy8K9
2024-04-18 00:15:19 UTC	1369	IN	Data Raw: 68 63 61 42 76 54 37 50 66 30 50 2f 50 70 45 41 68 30 51 45 51 45 32 4b 50 77 45 4f 78 6f 4f 4b 55 38 70 51 44 55 2b 45 53 41 32 4e 46 74 5a 48 46 55 74 4d 53 77 2f 53 6a 55 33 49 45 59 6b 52 6c 78 63 50 54 52 61 56 6b 78 49 58 69 6c 41 4b 6b 70 31 59 31 68 30 57 30 6b 37 65 33 64 53 50 33 38 30 63 33 70 53 50 47 42 51 67 56 78 6e 67 6e 35 38 69 47 43 49 61 59 57 41 61 30 32 55 53 6c 4e 70 56 4a 4a 35 62 56 39 31 58 58 79 65 62 5a 4f 46 5a 6d 4a 32 61 4a 4f 46 70 71 69 62 62 61 65 67 70 48 39 79 69 4b 57 58 65 59 39 79 73 6e 53 56 64 5a 56 39 6e 4c 36 4e 73 36 57 47 67 70 61 47 66 59 6a 4a 79 4d 65 34 79 59 6a 55 6e 35 4b 6f 78 62 65 5a 72 61 65 4f 73 37 6d 39 71 72 72 67 77 71 36 76 74 64 53 68 35 75 6a 4b 74 72 62 4e 35 2b 4c 71 38 38 58 4c 78 37 43 7a Data Ascii: hcaBvT7Pf0P/PpEAh0QEQE2KPwEOxoOKU8pQDU+ESA2NFtZHFUtMSw/SjU3IEYkRlxcPTRaVkxIXilAKkp1Y1h0W0k7e3dSP380c3pSPGBQgVxngn58iGCIaYWAa02USlNpVJJ5bV91XXyebZOFZmJ2aJOFpqibbaegpH9yiKWXeY9ysnSVdZV9nL6Ns6WGgpaGfYjJyMe4yYjUn5KoxbeZraeOs7m9qrrgwq6vtdSh5ujKtrbN5+Lq88XLx7Cz
2024-04-18 00:15:19 UTC	1369	IN	Data Raw: 41 66 2b 67 4c 30 4a 44 5a 42 52 44 51 37 51 52 59 38 51 52 38 2f 4a 45 49 4e 42 53 6c 4a 4b 31 4d 72 53 6a 70 63 52 6b 35 4a 58 45 77 63 57 47 4e 44 56 7a 59 68 57 43 4d 37 50 55 77 6f 57 53 31 67 59 6c 35 42 55 79 39 79 53 6d 52 73 4c 45 31 50 63 44 6c 2f 57 6e 4a 54 56 57 4d 2f 67 6c 6c 32 57 48 4b 4b 51 6f 68 35 59 48 78 5a 63 56 4a 4f 59 6f 4f 51 59 31 61 53 65 33 68 64 6b 5a 71 51 57 33 79 51 66 46 74 68 6e 48 46 2b 6d 35 52 6b 67 6f 69 61 73 47 65 6d 67 6d 71 4f 68 48 53 58 6b 57 79 7a 73 49 6c 30 6f 4b 6d 68 75 34 39 32 6d 36 47 6c 6b 70 76 49 71 70 61 58 71 71 36 61 6d 6f 6d 79 6e 70 2b 6c 78 4a 48 57 32 4c 71 6d 70 72 33 58 30 74 72 6a 74 62 75 6c 75 62 47 38 73 63 6d 6e 31 62 2b 6f 71 39 72 44 72 4b 2f 67 78 37 43 7a 32 4c 6e 33 30 2f 6e 52 7a Data Ascii: Af+gL0JDZBRDQ7QRY8QR8/JEINBSlJK1MrSjpcRk5JXEwcWGNDVzYhWCM7PUwoWS1gYl5BUy9ySmRsLE1PcDl/WnJTVWM/gll2WHKKQoh5YHxZcVJOYoOQY1aSe3hdkZqQW3yQfFthnHF+m5RkgoiasGemgmqOhHSXkWyzsIl0oKmhu492m6GlkpvIqpaXqq6amomynp+lxJHW2Lqmpr3X0trjtbulubG8scmn1b+oq9rDrK/gx7Cz2Ln30/nRz
2024-04-18 00:15:19 UTC	455	IN	Data Raw: 43 47 6a 4d 37 52 69 59 66 51 77 34 65 43 41 73 2b 43 51 6f 54 55 6b 41 33 57 52 41 6d 58 41 38 51 55 42 6f 66 4f 6c 41 69 47 7a 34 39 58 44 49 71 4b 55 4e 74 4c 6a 34 74 4c 47 6c 67 4b 69 34 32 4d 6b 4e 36 5a 6e 68 57 4e 33 78 34 56 45 6c 2b 51 56 6b 37 51 32 39 6e 52 49 46 37 5a 48 39 66 65 32 69 43 66 6d 46 72 69 46 5a 4e 68 59 31 71 57 59 56 58 6c 58 46 34 58 4a 6d 54 68 4a 5a 32 57 58 2b 61 69 35 79 56 6e 57 6c 6f 68 47 75 43 62 5a 31 76 73 6f 6d 4d 72 48 61 46 6b 58 69 35 76 35 71 31 6d 4a 4b 77 67 4c 79 42 74 37 79 4b 69 62 79 48 78 62 7a 41 77 59 36 2f 71 4d 66 4d 31 37 4c 4d 6d 70 6e 4d 30 36 65 59 32 73 37 68 33 62 72 47 6f 64 7a 58 70 73 44 44 75 36 65 32 76 62 72 47 38 74 50 45 71 2b 4f 79 77 4b 2f 6e 39 63 62 46 35 72 72 50 79 72 69 39 74 72 Data Ascii: CGjM7RiYfQw4eCAs+CQoTUkA3WRAmXA8QUBofOlAiGz49XDIqKUNtLj4tLGlgKi42MkN6ZnhWN3x4VEl+QVk7Q29nRIF7ZH9fe2iCfmFriFZNhY1qWYVXlXF4XJmThJZ2WX+ai5yVnWlohGuCbZ1vsomMrHaFkXi5v5q1mJKwgLyBt7yKibyHxbzAwY6/qMfM17LMmpnM06eY2s7h3brGodzXpsDDu6e2vbrG8tPEq+OywK/n9cbF5rrPyri9tr
2024-04-18 00:15:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49774	104.17.3.184	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:20 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1520722112:1713395675:Fybv0RgAUcvA2wE1JKV-kLLtV_0tb7lZl_7TvhqJ-Rs/87607523f9976753/573412a78ad2aa1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:20 UTC	386	IN	HTTP/1.1 400 Bad Request Date: Thu, 18 Apr 2024 00:15:20 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: xhQ0FdxH/IFdU7Dfdsi/zw==$9ZRxS2Og322RQpjdVnsAZQ== Server: cloudflare CF-RAY: 876075b8be007bb1-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:15:20 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2024-04-18 00:15:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49772	198.98.54.45	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:20 UTC	897	OUT	POST /main/main.php HTTP/1.1 Host: activemxmore.com Connection: keep-alive Content-Length: 560 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://activemxmore.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://activemxmore.com/main/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=e8fed20s9sarctiah9dfo4cnk6
2024-04-18 00:15:20 UTC	560	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 56 39 43 55 33 56 30 79 6f 69 45 39 48 45 65 74 72 70 5f 77 65 75 4b 45 43 4f 36 72 72 41 73 30 70 6a 53 47 36 50 31 51 49 2d 42 33 78 32 69 32 5f 67 69 30 62 5a 5f 39 73 4e 41 41 77 68 41 66 38 37 43 67 4b 54 55 41 4d 7a 78 53 66 65 69 52 36 79 48 70 51 6e 78 70 64 66 43 6b 48 57 70 54 61 4c 36 62 30 6b 30 38 57 36 66 6e 6a 6a 50 36 44 53 45 55 57 6e 50 37 42 33 4c 57 41 44 67 65 6d 4a 50 59 6a 54 43 53 47 7a 33 79 68 69 4e 77 44 71 70 75 55 48 5f 31 48 75 34 4b 71 6d 56 58 59 53 59 6b 4d 65 2d 36 4c 76 42 72 4b 35 76 75 32 65 78 5f 6c 51 45 51 68 72 58 59 67 61 44 57 44 34 49 78 42 70 74 52 7a 72 61 63 78 77 4a 47 69 55 54 52 5f 61 64 42 5a 42 6c 54 35 79 4e 56 63 55 75 43 32 30 34 Data Ascii: cf-turnstile-response=0.V9CU3V0yoiE9HEetrp_weuKECO6rrAs0pjSG6P1QI-B3x2i2_gi0bZ_9sNAAwhAf87CgKTUAMzxSfeiR6yHpQnxpdfCkHWpTaL6b0k08W6fnjjP6DSEUWnP7B3LWADgemJPYjTCSGz3yhiNwDqpuUH_1Hu4KqmVXYSYkMe-6LvBrK5vu2ex_lQEQhrXYgaDWD4IxBptRzracxwJGiUTR_adBZBlT5yNVcUuC204
2024-04-18 00:15:20 UTC	344	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 00:15:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Powered-By: PHP/5.4.16 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache
2024-04-18 00:15:20 UTC	16040	IN	Data Raw: 31 65 39 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 2e 63 6f 6d 2f 6d 61 69 6c 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: 1e9c<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <link rel="shortcut icon" href="https://outlook.office.com/mail/favicon.ico" type="image/x-icon"> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta name="viewp
2024-04-18 00:15:20 UTC	3213	IN	Data Raw: 31 20 0d 0a 63 37 64 0d 0a 32 2e 35 35 34 2d 2e 35 39 37 6c 2e 30 32 37 2d 2e 30 31 37 76 2d 31 2e 39 34 6c 2d 2e 30 38 39 2e 30 36 36 63 2d 2e 33 31 32 2e 32 32 37 2d 2e 36 36 2e 34 30 38 2d 31 2e 30 33 35 2e 35 33 38 61 33 2e 31 32 31 20 33 2e 31 32 31 20 30 20 30 31 2d 31 2e 30 31 34 2e 31 39 37 63 2d 2e 38 33 20 30 2d 31 2e 34 39 37 2d 2e 32 36 2d 31 2e 39 38 32 2d 2e 37 37 32 2d 2e 34 38 35 2d 2e 35 31 33 2d 2e 37 33 2d 31 2e 32 33 33 2d 2e 37 33 2d 32 2e 31 34 20 30 2d 2e 39 31 32 2e 32 35 35 2d 31 2e 36 35 31 2e 37 36 31 2d 32 2e 31 39 36 2e 35 30 34 2d 2e 35 34 34 20 31 2e 31 37 33 2d 2e 38 32 20 31 2e 39 38 36 2d 2e 38 32 2e 36 39 35 20 30 20 31 2e 33 37 34 2e 32 33 36 20 32 2e 30 31 34 2e 37 30 32 6c 2e 30 39 2e 30 36 33 56 38 2e 30 31 31 6c 2d Data Ascii: 1 c7d2.554-.597l.027-.017v-1.94l-.089.066c-.312.227-.66.408-1.035.538a3.121 3.121 0 01-1.014.197c-.83 0-1.497-.26-1.982-.772-.485-.513-.73-1.233-.73-2.14 0-.912.255-1.651.761-2.196.504-.544 1.173-.82 1.986-.82.695 0 1.374.236 2.014.702l.09.063V8.011l-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49775	104.17.25.14	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:21 UTC	556	OUT	GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:21 UTC	961	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:15:21 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"603e8adc-15d9d" Last-Modified: Tue, 02 Mar 2021 18:58:36 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 528961 Expires: Tue, 08 Apr 2025 00:15:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sOFw%2FFKdRHHch01GZwNg1kBWlVi%2FEaAkfPHyKyc9ejKibzGIr96WLwXDL42OFXgrl3bZ6QPFtg1em0oZdcPXa3BsvMH2mQUueq1%2FLFc3LWLurYLq8NJIOieXc3anRDIhpjH8q%2FJl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 876075bf5a84ad76-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 00:15:21 UTC	408	IN	Data Raw: 37 62 65 64 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bed/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-04-18 00:15:21 UTC	1369	IN	Data Raw: 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 Data Ascii: rototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=type
2024-04-18 00:15:21 UTC	1369	IN	Data Raw: 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: ,last:function(){return this.eq(-1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return thi
2024-04-18 00:15:21 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 Data Ascii: .call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i
2024-04-18 00:15:21 UTC	1369	IN	Data Raw: 5d 3f 3d 29 22 2b 4d 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c Data Ascii: ]?=)"+M+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\$\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\
2024-04-18 00:15:21 UTC	1369	IN	Data Raw: 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 Data Ascii: ng(16)+" ":"\\"+e},oe=function(){T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.le
2024-04-18 00:15:21 UTC	1369	IN	Data Raw: 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 Data Ascii: r r=[];return function e(t,n){return r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.remove
2024-04-18 00:15:21 UTC	1369	IN	Data Raw: 20 74 2c 6e 2c 72 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d Data Ascii: t,n,r=e?e.ownerDocument\|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=
2024-04-18 00:15:21 UTC	1369	IN	Data Raw: 65 28 6f 3d 69 5b 72 2b 2b 5d 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 Data Ascii: e(o=i[r++])if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var
2024-04-18 00:15:21 UTC	1369	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 Data Ascii: eElement("input");t.setAttribute("type","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49776	52.96.183.242	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:22 UTC	594	OUT	GET /mail/favicon.ico HTTP/1.1 Host: outlook.office.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:22 UTC	1049	IN	HTTP/1.1 200 OK Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Mon, 15 Apr 2024 16:41:28 GMT Accept-Ranges: bytes ETag: "1da8f53c326b2ce" Server: Microsoft-IIS/10.0 request-id: 7c1425e7-9fa4-3d45-984d-b4ddedf05165 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedFETarget: MW3PR06CU001.internal.outlook.com X-BackEndHttpStatus: 200 X-CalculatedBETarget: MW5PR03MB6878.NAMPRD03.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 x-besku: UNKNOWN X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 200 X-BEPartition: Clique/CLNAMPRD03EAT00 X-FEProxyInfo: BN9PR03CA0452.NAMPRD03.PROD.OUTLOOK.COM X-FEEFZInfo: LYH MS-CV: 5yUUfKSfRT2YTbTd7fBRZQ.1.1 X-FEServer: MW3PR06CA0030 X-FirstHopCafeEFZ: LYH X-Powered-By: ASP.NET X-FEServer: BN9PR03CA0452 Date: Thu, 18 Apr 2024 00:15:21 GMT Connection: close
2024-04-18 00:15:22 UTC	7886	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49777	52.96.173.162	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:22 UTC	358	OUT	GET /mail/favicon.ico HTTP/1.1 Host: outlook.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:23 UTC	1046	IN	HTTP/1.1 200 OK Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Mon, 15 Apr 2024 16:41:28 GMT Accept-Ranges: bytes ETag: "1da8f53c326b2ce" Server: Microsoft-IIS/10.0 request-id: 811062eb-91a1-5d1c-80af-4c7615d7aa96 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-PreferredRoutingKeyDiagnostics: 0 X-CalculatedFETarget: CY5PR13CU002.internal.outlook.com X-BackEndHttpStatus: 200 X-CalculatedBETarget: CYYP221MB1172.NAMP221.PROD.OUTLOOK.COM X-BackEndHttpStatus: 200 x-besku: UNKNOWN X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Proxy-RoutingCorrectness: 1 X-Proxy-BackendServerStatus: 200 X-BEPartition: Clique/CLNAMP221CYS00 X-FEProxyInfo: BN9P221CA0002.NAMP221.PROD.OUTLOOK.COM X-FEEFZInfo: LYH MS-CV: 62IQgaGRHF2Ar0x2Fdeqlg.1.1 X-FEServer: CY5PR13CA0047 X-FirstHopCafeEFZ: LYH X-Powered-By: ASP.NET X-FEServer: BN9P221CA0002 Date: Thu, 18 Apr 2024 00:15:22 GMT Connection: close
2024-04-18 00:15:23 UTC	7886	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49778	193.222.96.117	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:24 UTC	529	OUT	OPTIONS /api/v3/auth HTTP/1.1 Host: bc1q3jc6cu9q5t33q8gpk7h47pw.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://activemxmore.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:24 UTC	410	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 00:15:24 GMT server: uvicorn vary: Origin access-control-allow-methods: DELETE, GET, HEAD, OPTIONS, PATCH, POST, PUT access-control-max-age: 600 access-control-allow-credentials: true access-control-allow-origin: https://activemxmore.com access-control-allow-headers: content-type content-length: 2 content-type: text/plain; charset=utf-8 Connection: close
2024-04-18 00:15:25 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49779	193.222.96.117	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:25 UTC	669	OUT	POST /api/v3/auth HTTP/1.1 Host: bc1q3jc6cu9q5t33q8gpk7h47pw.com Connection: keep-alive Content-Length: 175 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://activemxmore.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:25 UTC	175	OUT	Data Raw: 7b 22 75 75 69 64 22 3a 22 62 39 32 30 38 31 64 36 2d 31 65 64 35 2d 34 38 36 61 2d 62 31 62 39 2d 63 63 39 30 66 33 62 36 61 36 65 38 22 2c 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 35 33 36 36 32 34 65 34 2d 62 38 61 34 2d 34 39 33 31 2d 39 61 30 30 2d 36 65 32 30 37 64 65 30 36 63 61 63 22 2c 22 73 65 72 76 65 72 22 3a 22 62 63 31 71 33 6a 63 36 63 75 39 71 35 74 33 33 71 38 67 70 6b 37 68 34 37 70 77 2e 63 6f 6d 22 2c 22 75 73 65 72 22 3a 22 61 6d 79 2e 63 68 65 6e 40 64 6f 75 62 6c 65 6c 69 6e 65 2e 63 6f 6d 22 7d Data Ascii: {"uuid":"b92081d6-1ed5-486a-b1b9-cc90f3b6a6e8","identifier":"536624e4-b8a4-4931-9a00-6e207de06cac","server":"bc1q3jc6cu9q5t33q8gpk7h47pw.com","user":"amy.chen@doubleline.com"}
2024-04-18 00:15:28 UTC	219	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 00:15:24 GMT server: uvicorn content-length: 15812 content-type: application/json access-control-allow-origin: * access-control-allow-credentials: true Connection: close
2024-04-18 00:15:29 UTC	15812	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 74 79 70 65 22 3a 22 4e 61 74 69 76 65 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 3c 68 74 6d 6c 20 64 69 72 3d 5c 22 6c 74 72 5c 22 20 6c 61 6e 67 3d 5c 22 65 6e 5c 22 3e 5c 6e 20 20 3c 68 65 61 64 3e 5c 6e 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 3c 2f 74 69 74 6c 65 3e 5c 6e 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 5c 22 20 63 6f 6e 74 65 6e 74 3d 5c 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 5c 22 3e 5c 6e 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 5c 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 5c 22 20 63 6f 6e 74 Data Ascii: {"status":"success","type":"Native","message":"<html dir=\"ltr\" lang=\"en\">\n <head>\n <title>Sign in to your account</title>\n <meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\">\n <meta http-equiv=\"X-UA-Compatible\" cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49780	193.222.96.117	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:29 UTC	366	OUT	GET /api/v3/auth HTTP/1.1 Host: bc1q3jc6cu9q5t33q8gpk7h47pw.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:30 UTC	173	IN	HTTP/1.1 405 Method Not Allowed date: Thu, 18 Apr 2024 00:15:29 GMT server: uvicorn allow: POST content-length: 31 content-type: application/json Connection: close
2024-04-18 00:15:30 UTC	31	IN	Data Raw: 7b 22 64 65 74 61 69 6c 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d Data Ascii: {"detail":"Method Not Allowed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49782	152.199.4.44	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:30 UTC	656	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:30 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2131950 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 18 Apr 2024 00:15:30 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (agc/7F76) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 76c53dc6-501e-00c2-6dc1-7d8866000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-04-18 00:15:30 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49781	152.199.4.44	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:30 UTC	747	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_8owwt4u-33ps0wawi7tmow2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:30 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2085342 Cache-Control: public, max-age=31536000 Content-MD5: 9K2/nGCj75WAmmAI9nZNCA== Content-Type: text/css Date: Thu, 18 Apr 2024 00:15:30 GMT Etag: 0x8DA7650B375AC9B Last-Modified: Thu, 04 Aug 2022 19:37:00 GMT Server: ECAcc (agc/7F78) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cf514ebd-a01e-0015-552e-7e6d0e000000 x-ms-version: 2009-09-19 Content-Length: 110586 Connection: close
2024-04-18 00:15:30 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-04-18 00:15:30 UTC	1	IN	Data Raw: 73 Data Ascii: s
2024-04-18 00:15:30 UTC	16383	IN	Data Raw: 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a 6c Data Ascii: -1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:l
2024-04-18 00:15:30 UTC	16383	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f Data Ascii: gin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-bo
2024-04-18 00:15:30 UTC	2	IN	Data Raw: 6c 6f Data Ascii: lo
2024-04-18 00:15:30 UTC	16383	IN	Data Raw: 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 Data Ascii: w-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.table
2024-04-18 00:15:30 UTC	16383	IN	Data Raw: 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c Data Ascii: ,"Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongol
2024-04-18 00:15:30 UTC	2	IN	Data Raw: 6d 61 Data Ascii: ma
2024-04-18 00:15:30 UTC	16383	IN	Data Raw: 72 79 3a 61 63 74 69 76 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 61 63 74 69 76 65 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 38 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 38 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 39 38 29 7d 2e 62 75 74 74 6f 6e 2e 73 65 63 6f 6e 64 61 72 79 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 70 78 3b 70 61 Data Ascii: ry:active,input[type="submit"].btn-primary:active,input[type="reset"].btn-primary:active{outline:none;text-decoration:none;-ms-transform:scale(.98);-webkit-transform:scale(.98);transform:scale(.98)}.button.secondary{display:inline-block;min-width:100px;pa
2024-04-18 00:15:30 UTC	12283	IN	Data Raw: 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 6d 65 6d 62 65 72 6e 61 6d 65 50 72 65 66 69 6c 6c 53 65 6c 65 63 74 3a 61 63 74 69 76 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 37 38 64 37 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 30 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2e 6d 65 6d 62 65 72 6e 61 6d 65 50 72 65 66 69 6c 6c 53 65 6c 65 63 74 3a 66 6f 63 75 73 7b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 37 38 64 37 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 30 3b Data Ascii: }.dropdown-toggle.membernamePrefillSelect:active{transform:none;border:1px solid #0078d7;border-top-width:0;border-left-width:0;border-right-width:0}.dropdown-toggle.membernamePrefillSelect:focus{transform:none;border:1px solid #0078d7;border-top-width:0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49783	13.107.213.40	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:30 UTC	640	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_ziytf8dzt9eg1s6-ohhleg2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://activemxmore.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:30 UTC	796	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:15:30 GMT Content-Type: text/css Content-Length: 19953 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 18 Apr 2022 21:18:26 GMT ETag: 0x8DA2180FA29F5AF x-ms-request-id: e0c6017e-e01e-0068-5422-90ffad000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240418T001530Z-18655757dbcn6rtcxqsm0vc51s00000005wg00000000h1m1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-18 00:15:30 UTC	15588	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 5c eb c9 4a 8c 48 3d 47 53 71 ad e3 78 e3 39 c7 af b2 9d 7d 54 ca b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab 33 ff fd e2 8d 06 d0 20 a9 f1 64 b3 f7 56 d6 1b 5b 44 37 1a 40 77 a3 81 06 d0 c0 77 df fe 21 78 5e ec 6e cb ec 6a 5d 07 4f 9e 9f 06 af b3 45 59 54 c5 aa 26 e9 e5 ae 28 93 3a 2b b6 61 f0 2c cf 03 86 54 05 65 5a a5 e5 75 ba 0c 83 6f bf fb ee db 3f 3c ea 77 ff 5f f0 e1 e3 b3 f7 1f 83 b7 7f 09 3e be bc 78 ff 63 f0 8e 7c fd 23 78 f3 f6 e3 c5 f3 17 41 67 2a 8f 1e 7d 5c 67 55 b0 ca f2 34 20 ff 5e 26 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4c f3 e2 26 78 42 c8 95 cb e0 5d 52 d6 b7 c1 c5 bb d3 30 f8 48 70 0b d2 Data Ascii: }k6w\JH=GSqx9}T)Qf<3 dV[D7@ww!x^nj]OEYT&(:+a,TeZuo?<w_>xc\|#xAg*}\gU4 ^&UmPA]ZU!Y:ve?!dL&xB]R0Hp
2024-04-18 00:15:30 UTC	4365	IN	Data Raw: ba 8f d2 aa 33 50 25 98 6c a8 15 02 68 6b 56 83 ba b5 a0 21 4d f4 aa e1 60 30 5e 26 13 b7 4d 5a e3 0c 32 50 fb 10 40 6b 9b fc 5a d9 82 86 b5 c9 a7 ad bc 4d f7 53 c6 3e 3f 39 dd 03 b7 41 cb ce 26 be d0 de 86 c0 54 77 43 60 b2 bf 81 c2 0c ee 7b d2 cd 0a 61 90 56 01 34 54 b4 0d 0f 13 81 b8 2f db 70 52 d0 7d 6b f3 ee d8 8a 4c 1c d2 27 e1 d9 ec 14 b9 79 16 00 b1 44 22 26 de 7c 1d a7 8b 6f c3 83 81 00 2e 9a 8f 64 e0 9b fc 61 ac 32 b8 ef a4 7b 76 4d bf f4 c1 f2 99 fb b4 04 72 58 c0 8e 6e c3 5f c7 f3 3c 67 c8 ae be 16 6f 54 ce 37 c9 36 db ed 73 c6 5e f7 de 56 71 c3 87 f1 ae 9e 38 a5 66 bb a2 46 2c eb 6f 31 16 43 de bb 8f b6 9b e7 e7 e0 7a 9a ad 02 0f 30 cc da 14 7f 83 b1 d0 ae c2 6f d9 bb e4 d8 e8 bc 2c d8 71 98 6c 17 5e e7 a1 c9 44 7f 78 ab 6f d2 ff 4d 98 8e 1e Data Ascii: 3P%lhkV!M`0^&MZ2P@kZMS>?9A&TwC`{aV4T/pR}kL'yD"&\|o.da2{vMrXn_<goT76s^Vq8fF,o1Cz0o,ql^DxoM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49784	13.107.213.40	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:30 UTC	650	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:30 UTC	805	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:15:30 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:34 GMT ETag: 0x8D79B8371B97A82 x-ms-request-id: 513250fe-201e-0064-41fa-8f0bb4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240418T001530Z-18655757dbcqxsvqh02gg0s8as000000057g00000000kz2t x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-18 00:15:30 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49786	13.107.246.41	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:31 UTC	414	OUT	GET /shared/1.0/content/images/arrow_left_a9cc2824ef3517b6c4160dcf8ff7d410.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:31 UTC	805	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 00:15:31 GMT Content-Type: image/svg+xml Content-Length: 276 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Fri, 17 Jan 2020 19:28:34 GMT ETag: 0x8D79B8371B97A82 x-ms-request-id: 513250fe-201e-0064-41fa-8f0bb4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240418T001531Z-18655757dbcwz294um6uu469ts00000005x00000000022wu x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-18 00:15:31 UTC	276	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 b4 b0 28 08 37 Data Ascii: Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd(7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49785	152.199.4.44	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:31 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:31 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2131951 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 18 Apr 2024 00:15:31 GMT Etag: 0x8D79A1B9F5E121A Last-Modified: Thu, 16 Jan 2020 00:32:52 GMT Server: ECAcc (agc/7F76) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 76c53dc6-501e-00c2-6dc1-7d8866000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-04-18 00:15:31 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49787	152.195.19.97	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:31 UTC	692	OUT	GET /dbd5a2dd-j1fx1ggwwalily23vjiuezfn6ijsocdmg58vgda4fdc/logintenantbranding/0/illustration?ts=636716750610080569 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://activemxmore.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:31 UTC	689	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=86400 Content-MD5: m9f7k38+O5pCtRmj4A8gFA== Content-Type: image/* Date: Thu, 18 Apr 2024 00:15:31 GMT Etag: 0x8D61282DF2ED309 Last-Modified: Tue, 04 Sep 2018 16:24:21 GMT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 96d30248-d01e-0052-3025-913f0a000000 x-ms-version: 2009-09-19 Content-Length: 17512 Connection: close
2024-04-18 00:15:31 UTC	15696	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 01 c0 01 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-04-18 00:15:31 UTC	1816	IN	Data Raw: f0 78 97 fc 95 df 81 ff 00 f6 08 d5 7f f4 75 b5 7d 59 ff 00 06 9e 7f ca 30 f5 4f fb 1e 75 1f fd 26 b2 af 94 ff 00 e0 f1 2f f9 2b bf 03 ff 00 ec 11 aa ff 00 e8 eb 6a fa b3 fe 0d 3c ff 00 94 61 ea 9f f6 3c ea 3f fa 4d 65 41 7d 0f 9d ff 00 e0 f1 9f b9 f0 17 eb ad 7f ed 95 7b 0f fc 1a 27 ff 00 26 19 e3 ff 00 fb 1e a6 ff 00 d2 1b 3a f1 ef f8 3c 67 ee 7c 05 fa eb 5f fb 65 5e c3 ff 00 06 89 ff 00 c9 86 78 ff 00 fe c7 a9 bf f4 86 ce 80 e8 7e ae d1 45 14 10 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 7e 0e ff 00 Data Ascii: xu}Y0Ou&/+j<a<?MeA}{'&:<g\|_e^x~EQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQE~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49789	152.195.19.97	443	2180	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 00:15:32 UTC	456	OUT	GET /dbd5a2dd-j1fx1ggwwalily23vjiuezfn6ijsocdmg58vgda4fdc/logintenantbranding/0/illustration?ts=636716750610080569 HTTP/1.1 Host: aadcdn.msauthimages.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 00:15:32 UTC	689	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Cache-Control: public, max-age=86400 Content-MD5: m9f7k38+O5pCtRmj4A8gFA== Content-Type: image/* Date: Thu, 18 Apr 2024 00:15:32 GMT Etag: 0x8D61282DF2ED309 Last-Modified: Tue, 04 Sep 2018 16:24:21 GMT Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 96d302b5-d01e-0052-1825-913f0a000000 x-ms-version: 2009-09-19 Content-Length: 17512 Connection: close
2024-04-18 00:15:32 UTC	15696	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 01 c0 01 c0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-04-18 00:15:32 UTC	1816	IN	Data Raw: f0 78 97 fc 95 df 81 ff 00 f6 08 d5 7f f4 75 b5 7d 59 ff 00 06 9e 7f ca 30 f5 4f fb 1e 75 1f fd 26 b2 af 94 ff 00 e0 f1 2f f9 2b bf 03 ff 00 ec 11 aa ff 00 e8 eb 6a fa b3 fe 0d 3c ff 00 94 61 ea 9f f6 3c ea 3f fa 4d 65 41 7d 0f 9d ff 00 e0 f1 9f b9 f0 17 eb ad 7f ed 95 7b 0f fc 1a 27 ff 00 26 19 e3 ff 00 fb 1e a6 ff 00 d2 1b 3a f1 ef f8 3c 67 ee 7c 05 fa eb 5f fb 65 5e c3 ff 00 06 89 ff 00 c9 86 78 ff 00 fe c7 a9 bf f4 86 ce 80 e8 7e ae d1 45 14 10 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 7e 0e ff 00 Data Ascii: xu}Y0Ou&/+j<a<?MeA}{'&:<g\|_e^x~EQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQEQE~

Target ID:	0
Start time:	02:14:43
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	02:14:48
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2480 --field-trial-handle=2392,i,11732126496717548433,17344427469454119980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	02:14:50
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20="
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Windows Analysis Report
http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=